last executing test programs: 8m45.230272382s ago: executing program 0 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r3, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) socket$key(0xf, 0x3, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x212b02, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x202, 0x0, 0x0, 0x0, 0x1ff, 0x5e82, 0x0, 0x6}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 8m45.077239028s ago: executing program 0 (id=147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x6c, 0x0, &(0x7f0000000300)=[@free_buffer, @increfs, @increfs, @enter_looper, @enter_looper, @exit_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}], 0x0, 0x0, 0x0}) (async, rerun: 64) r1 = socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) (async) inotify_init() rmdir(&(0x7f0000000100)='./bus\x00') (async, rerun: 32) chdir(&(0x7f0000000140)='./bus\x00') (rerun: 32) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0xffffffffffffffff, &(0x7f0000000180)={0xfffffffffffffc00, 0x9, 0xed8e, 0x100, 0x200, 0x3, 0x78c9, 0x4, 0x6ea3}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)=0x80000) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 8m45.05157541s ago: executing program 0 (id=148): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x31, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x302000, 0x0) 8m44.941258578s ago: executing program 0 (id=149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x48) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x106) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x48) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x106) (async) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) (async) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) 8m44.560308308s ago: executing program 0 (id=154): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "d36b5404"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fadvise64(r5, 0x8, 0x4, 0x5) r6 = dup(r4) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0xfffffffffffffd9c) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendmmsg$inet(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c88ff030000000000005b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a918d9678f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d37b113e200bcd56a2f892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aaefd62", 0xcb}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c88ff030000000000005b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a918d9678f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d37b113e200bcd56a2f892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aaefd62", 0xcb}], 0x1}}], 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x7ffffffe, 0xd, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0xb, 0x1, 0x0, 0x9}) (async) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0xb, 0x1, 0x0, 0x9}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r6, &(0x7f0000000000)='1', 0x1) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='1', 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000002180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008) (async) preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000002180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008) socketpair(0x37, 0x80000, 0x10000, &(0x7f0000000180)) (async) socketpair(0x37, 0x80000, 0x10000, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 8m44.154771774s ago: executing program 0 (id=157): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe8, 0x0, 0x18bac598d2e28a4c, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xea}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6b}]}]}, 0xe8}}, 0x40010) r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000001c0)=""/58, &(0x7f0000000200)=0x3a) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000280)) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000002c0)={0x9, 0xa, 0xc5f, 0x7, "7f4a71384f405ad3bb11b156b5b8757765cb077d3ca73793235ef58b9b2e9144"}) getpeername$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="dab6ced452c39a0bb5a5b0037c4ad5a95f54563c199a3d0a24663fb2b9db2ba48c71d9764d1cc60b8c06e27ebe0360f58e2884e135f77100f5afab0b450fe72e9a5e3d0384b45af70cc0b247930394c489f44ec7e8876a28a96fdbd6960073727c5ba4a01fb86b9233862b69a44a041753f05aa2e530bd1cb3c44fac603054cb39571897eaae361cab52768c1d9880cd5cde8511ea3bafacec89bd12c54b6e7cc7d9bfa43e88c4598c996ef3cd76daccc5368836701aa543c9a42ba61ab1c72f5546d1ede382db1631cfd8ec66266b8004f3d9833f6858b233d2eaa907fa30c3f0b0713c7e98ed", 0xe7}], 0x2, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xca36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @broadcast}}}], 0x50}, 0x20000080) write$cgroup_subtree(r1, &(0x7f00000006c0)={[{0x2d, 'cpuset'}, {0x2d, 'net_prio'}, {0x2b, 'devices'}, {0x2b, 'cpu'}, {0x2d, 'net'}, {0x2d, 'perf_event'}, {0x0, 'net_cls'}]}, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r1) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r4, 0x502, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x24084090) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000880)) splice(r0, &(0x7f0000000a80)=0x6, r1, &(0x7f0000000ac0)=0x7a2725e0, 0x2, 0x1) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000b00), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000bc0)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x6, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000d40)={&(0x7f0000000c80)="4ded58e20203c023cd02efa4f2e6012aebf416f18f0ce176f7d7074d5ca6caab3423b11e9de9bd52a384b3c9ca776c6f8db3745504640e8227f9f75b39876ece318cb91aad5a659cea04f7c5801f15189d296a18541109aea06ad361f9bdaa03d1577ac481c19f07ff0072a21986cdbd4ef1a86ecef052360615e7f1969445b314322c707b8c3617093c86858df9d3cef1a5789f504f6235f475289602bdb4264d74dbe9aba37f00a5", 0xa9, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000dc0)={&(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000e40)={&(0x7f0000000e00)="a58849920761fe0020e2b1506445a0976b4142e426951e", 0x17, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000011c0)={&(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000012c0)={&(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000001380)={0x700, 0x5, &(0x7f0000000e80)=[r7, r8, r9, r10, r11], &(0x7f0000000ec0)=[0x8, 0x1, 0x1, 0x9, 0x6, 0x906], &(0x7f0000001300)=[r12, r13], &(0x7f0000001340)=[0xfffffffffffffffe, 0x4, 0x9, 0x3, 0x0, 0x5], 0x0, 0x400}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r5) syz_open_dev$loop(&(0x7f0000001400), 0x2, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x13c, r14, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_SCAN_SSIDS={0xb0, 0x2d, 0x0, 0x1, [{0x17, 0x0, @random="f2b1740434928b814c8794ced279812610ed80"}, {0x15, 0x0, @random="4f24ca4185bd15d52db9ea05bab9753667"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x1d, 0x0, @random="0c88c2b84da23c0a16858d8ddd74a4d9cd0b6d2d31baad3bd1"}, {0x4}, {0xa, 0x0, @default_ap_ssid}, {0x18, 0x0, @random="4bbef5017debd5561b50f7e6059bd663012f0689"}, {0x19, 0x0, @random="e5b9cc0bb22d84e7651db20caede1d024e8408688d"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xd9a}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x93}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x13c}}, 0x4000040) syz_open_dev$sg(&(0x7f0000001680), 0x0, 0x2400) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000016c0)={0x5, 0xfffffffffffffffb}) 8m43.794507171s ago: executing program 32 (id=157): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe8, 0x0, 0x18bac598d2e28a4c, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xea}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6b}]}]}, 0xe8}}, 0x40010) r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000001c0)=""/58, &(0x7f0000000200)=0x3a) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000280)) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000002c0)={0x9, 0xa, 0xc5f, 0x7, "7f4a71384f405ad3bb11b156b5b8757765cb077d3ca73793235ef58b9b2e9144"}) getpeername$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="dab6ced452c39a0bb5a5b0037c4ad5a95f54563c199a3d0a24663fb2b9db2ba48c71d9764d1cc60b8c06e27ebe0360f58e2884e135f77100f5afab0b450fe72e9a5e3d0384b45af70cc0b247930394c489f44ec7e8876a28a96fdbd6960073727c5ba4a01fb86b9233862b69a44a041753f05aa2e530bd1cb3c44fac603054cb39571897eaae361cab52768c1d9880cd5cde8511ea3bafacec89bd12c54b6e7cc7d9bfa43e88c4598c996ef3cd76daccc5368836701aa543c9a42ba61ab1c72f5546d1ede382db1631cfd8ec66266b8004f3d9833f6858b233d2eaa907fa30c3f0b0713c7e98ed", 0xe7}], 0x2, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xca36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @broadcast}}}], 0x50}, 0x20000080) write$cgroup_subtree(r1, &(0x7f00000006c0)={[{0x2d, 'cpuset'}, {0x2d, 'net_prio'}, {0x2b, 'devices'}, {0x2b, 'cpu'}, {0x2d, 'net'}, {0x2d, 'perf_event'}, {0x0, 'net_cls'}]}, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r1) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r4, 0x502, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x24084090) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000880)) splice(r0, &(0x7f0000000a80)=0x6, r1, &(0x7f0000000ac0)=0x7a2725e0, 0x2, 0x1) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000b00), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000bc0)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x6, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000d40)={&(0x7f0000000c80)="4ded58e20203c023cd02efa4f2e6012aebf416f18f0ce176f7d7074d5ca6caab3423b11e9de9bd52a384b3c9ca776c6f8db3745504640e8227f9f75b39876ece318cb91aad5a659cea04f7c5801f15189d296a18541109aea06ad361f9bdaa03d1577ac481c19f07ff0072a21986cdbd4ef1a86ecef052360615e7f1969445b314322c707b8c3617093c86858df9d3cef1a5789f504f6235f475289602bdb4264d74dbe9aba37f00a5", 0xa9, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000dc0)={&(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000e40)={&(0x7f0000000e00)="a58849920761fe0020e2b1506445a0976b4142e426951e", 0x17, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000011c0)={&(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000012c0)={&(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000001380)={0x700, 0x5, &(0x7f0000000e80)=[r7, r8, r9, r10, r11], &(0x7f0000000ec0)=[0x8, 0x1, 0x1, 0x9, 0x6, 0x906], &(0x7f0000001300)=[r12, r13], &(0x7f0000001340)=[0xfffffffffffffffe, 0x4, 0x9, 0x3, 0x0, 0x5], 0x0, 0x400}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r5) syz_open_dev$loop(&(0x7f0000001400), 0x2, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x13c, r14, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_SCAN_SSIDS={0xb0, 0x2d, 0x0, 0x1, [{0x17, 0x0, @random="f2b1740434928b814c8794ced279812610ed80"}, {0x15, 0x0, @random="4f24ca4185bd15d52db9ea05bab9753667"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x1d, 0x0, @random="0c88c2b84da23c0a16858d8ddd74a4d9cd0b6d2d31baad3bd1"}, {0x4}, {0xa, 0x0, @default_ap_ssid}, {0x18, 0x0, @random="4bbef5017debd5561b50f7e6059bd663012f0689"}, {0x19, 0x0, @random="e5b9cc0bb22d84e7651db20caede1d024e8408688d"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xd9a}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x93}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x13c}}, 0x4000040) syz_open_dev$sg(&(0x7f0000001680), 0x0, 0x2400) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000016c0)={0x5, 0xfffffffffffffffb}) 51.664809113s ago: executing program 4 (id=3344): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}}, 0x0, 0x8000}, &(0x7f0000000280)=0x90) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x300, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xd39}, {}, {0x0, 0xfffffff7}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r1, 0x6}, 0x8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_buf(r5, 0x29, 0x32, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f00000004c0)=0xfd9) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x110a, 0x2}) ioctl$SG_SCSI_RESET(r8, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffc2c, 0x0, &(0x7f0000000340)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x4}, 0x1c) 51.481212007s ago: executing program 4 (id=3345): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x80010, r0, 0xfffff000) ftruncate(r0, 0xc17a) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "71c0c73441702b9ace276a865332173d5f8bc862025abd0b215530dead0ec1f4"}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25001f29000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="20ab01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000140)={0x0, 0x4, 0x7, &(0x7f0000000080)={0x19, "78b3060abe61f6304382447c087935e141a6349f941d4dc197ce00"}}) getsockopt$inet6_int(r2, 0x29, 0x33, 0x0, &(0x7f0000000040)) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9b950800", @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf251b0000000700210061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x998dbbe542f7e2, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0x2}}}, 0x24}}, 0x0) recvmmsg(r5, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}], 0x1, 0x60, 0x0) 50.217857476s ago: executing program 4 (id=3350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x1, 0x0, 0x800000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) timer_delete(0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x800) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000f478ef8ed", @ANYRES16=0x0, @ANYRES8, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="f4efa5adad443d0a6832c5a02b4ddbab9fc6058e49e826689ff374c14791482344ee54d433eb586eb502fc8b5e424c41872bb5cfc4f398d43ae146d35d86d96df49eddc27eaa8544c5711256f5abd82439ba96594e0b417809f8bf571407ff56090a4164208a4f1e21458f806b320d00aa986573c2"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x3800, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x200000, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x1e, 0x4, 0x1ff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r8 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 49.192531193s ago: executing program 4 (id=3353): r0 = socket(0x10, 0xd, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @broadcast}, 0x10) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x45, 0x0, &(0x7f00000014c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x3, 0x0, 0xc9b, 0x91, 0x7, 0x4, 0x5, 0x5}, &(0x7f0000000100)={0x0, 0x8000009, 0x3, 0xfffffffffffffffc, 0x4, 0xee000000000, 0xffffffffffffffff, 0x1000}, &(0x7f00000001c0)={0xfe, 0x10000, 0x14b7, 0x5, 0x3, 0xfff, 0x4, 0x5}, &(0x7f0000000240)={r3, r4+60000000}, &(0x7f00000002c0)={&(0x7f0000000300)={[0x5]}, 0x8}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xe) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="1400fe0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000002) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 48.957391142s ago: executing program 4 (id=3355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0100001a0001000000000000000000fc000000000000000000000000000000ff01000000000000000000000000000100000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x17c}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 48.883651467s ago: executing program 4 (id=3357): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x73, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000080)={0x1, 0x3, 0x17, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000161401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) 33.70772751s ago: executing program 33 (id=3357): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x73, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000080)={0x1, 0x3, 0x17, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000161401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) 8.052349172s ago: executing program 1 (id=3642): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, 0x0, 0x0, 0x80800) (async) ioprio_set$pid(0x1, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) (async) close(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000380)={0x40, 0x13, 0x4, "badc0e3a"}, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x6}, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) syz_usb_disconnect(r1) (async) r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='adfs\x00', 0x8000, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x100010, r4, 0x7dfff000) 8.019462694s ago: executing program 3 (id=3643): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r2, &(0x7f00000006c0)=@other={'unlock', ' ', 'none'}, 0xc) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x1) ioctl$KVM_GET_NR_MMU_PAGES(r8, 0xae45, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x3, 0x4) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) ioctl$VT_WAITACTIVE(r7, 0x5607) 7.920214001s ago: executing program 3 (id=3645): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x14e, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000029b5010dd0402802d390102030109023c0101000000000904d40004ff0238"], 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x30, r3, 0x47085000) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="141000001ff48ed4c04464aa694d464122b85a721508ca259935a4de86edba35cb83a1073efa12c010d992ac51dec54f40d3ec0f5145d58403c826a6a51941591f68527744312fe26069dfd691804b7c8608f364903cd86ba03174b0a457010a6dc0dc3754eedf27e856b0df5429388566178bdab2553d115146952b0ef6b652656197014a2501b9974397f0c2b42d10acdbe172a08a78e7c4dd102d953d07aa84", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x410) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 6.580228136s ago: executing program 3 (id=3651): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x101000) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)) timer_create(0x4, &(0x7f0000000240)={0x0, 0x27, 0x0, @thr={&(0x7f0000000100)="9a90591832d9549f2bfc4f9e948675fa048ba9f6af7d1be58eda4c7da2071106f331a44c9e7327eada3cf61985c2c97f36fdd76be0a899296e2b8c0dfe6d8a0c6b544c376ead3fcb93b1724dff25e8ef8d464cf5d243867de2d2365a053c9e13784fb81fdc398bab9a4fb054d96e13986e4da15c4a81903c95bbcfa967f978be2f9a", &(0x7f00000001c0)="5a0705dd804e017dfa1b5257d3b3000fd0ad73d1b478a6c586b04badec888e9e7b25729d025c135820a5c87e4613caf29de104cc9fee48b38ea104a74507413d60063e381d7535cb98232aa9405e98ca34e33c9e5090572f75365c916955d41f9d1fff59dec7bb32a79cdc98aa8bf0da948048"}}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000300)={{r2, r3+10000000}}, &(0x7f0000000340)) r4 = syz_usb_connect$uac1(0x0, 0xb8, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x7f, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x1, 0x5, 0x5}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x6, 0x2, [0x9, 0x5], 0x8}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x9, 'a'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x78, 0x52, "02cb"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x40, 0x4, 0x3, "7c649d376c21"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0x4, 0x7, {0x7, 0x25, 0x1, 0x80, 0xfa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x3, 0x3, "13427b7e"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xa, 0x2, 0x8, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x3a, 0x4, {0x7, 0x25, 0x1, 0x83, 0xdd, 0x7}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x0, 0x1, 0xf5, 0x40, 0x7}, 0xdb, &(0x7f0000000480)={0x5, 0xf, 0xdb, 0x6, [@generic={0x57, 0x10, 0x1, "38c6790d0f18027e8530168a3eae71e76f8a0b57c81ad727abef0b56aab4b784d7551bc74aad9ad71dad022e21cd723c36ea1f4d3152f1bbeb7bd9e86168dbc75ba2611ac0ac8a31d522e90da132f33bcb393219"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x0, 0x3ff}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0xf000, 0x4, [0xff00cf, 0x0, 0xff00c0, 0x30]}, @ssp_cap={0x14, 0x10, 0xa, 0xb, 0x2, 0x8, 0x0, 0x1, [0xf, 0xc000]}, @generic={0x34, 0x10, 0x2, "79a430eab7f170c5dde8a34dd3a9a5122df347b6b69aff11c978f0213f05d955c58c845ba87aedbd666a5a9951ad95cafd"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "266c6335e5a5fff9d8b7963e5fa88c1a"}]}, 0x3, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000740)={0x14, &(0x7f0000000680)={0x0, 0x22, 0x75, {0x75, 0xb, "9191288b43014c9ab0acdf30f3869d4d23f8d5be881b7e9f32431f67c6d99fc6372a52fc947ed998f5e09d5113e367749c650e14a5347cc34fb37e78c2c5bb91c74750e7d6c53ab60b82f86f63839aeafc1650569eafbd69b038e2d20e1db7ef3abee162ccba3e455f6365da44acfbbe9c116a"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1d}}}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x20, 0x16, 0x16, "1d0ddb39caada597eb5ec0cb3dfbfef96deedb4b8400"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xea}, &(0x7f0000000840)={0x20, 0x81, 0x2, "23cb"}, &(0x7f0000000880)={0x20, 0x82, 0x3, "cc3170"}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "a87c"}, &(0x7f0000000900)={0x20, 0x84, 0x4, "66351fcf"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "0b137b"}}) r5 = syz_open_dev$vcsu(&(0x7f0000000a00), 0x1, 0x400000) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000a40)={0x1, 0x81}, 0x2) timer_gettime(r1, &(0x7f0000000a80)) read(r0, &(0x7f0000000ac0)=""/15, 0xf) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000b00)) r6 = syz_usb_connect(0x5, 0x8ec, &(0x7f0000000b40)={{0x12, 0x1, 0x250, 0x20, 0x9b, 0xfa, 0x20, 0x1058, 0x631, 0xbf75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8da, 0x2, 0x10, 0x80, 0xa0, 0x4, [{{0x9, 0x4, 0x49, 0x8, 0x10, 0xff, 0xff, 0xff, 0x7, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0x7f, '.', "aaaefc"}, @as_header={0x7, 0x24, 0x1, 0xbf, 0x8, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1, 0x2, "25f298e7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x96, 0x1, 0x2, 0x8, "", "e1445b"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0x2, 0xb1, 0x2, [@generic={0x74, 0x2, "0139a12975d8f17af92a0699a2d8ab499cfa4e1d28bc5bf0f8eb7878370de9e83c76ae4718ccb8ef3c93f59d67b7f9a9321744f8f73d86e860441e2980f653df568ef6044ee87359c370a76005e26cc971c79c226ca81c06479c9a8563a2d9ab47a4aa77cb4ed78653782fe851fb2817ab4c"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x8, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x1000}, @generic={0xef, 0xd, "2f47c82240479bf02568efd2c9af885be9e0f8a45dddb353d3d14b6853404674fc0913549ee9a07674a30b57ad2973e9988cb02c7a85e4d304693b52af29ad43ad8256221e52dab09563e7511fad6301158327e5233275f7e34f05d75185f1db94e4d7a071e61e05c7e11d73513b18e02f4ad5e3f9a92554af755dff0424fc1a32586cf34779df2c6a0e4072950eb51ad4c480befb8103020705f9f521caa86e739dff0c3a912226e6b22160fee5b691f5d3b7dd32853fab2bbb72d85da82ec7299547c6bfc3bef7515bfbeea412bb8b5c5c1fa64c70a1d67dbee34ec09a4c4f08b640301e53439f2386370874"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x7, 0x49, 0x2, [@generic={0xf7, 0x6, "a0a59e26082b3e5a662f8eff115179a0f49c73a148ec98ace9ddb1112ab0a23eb9d9bc4be4285ea5c23c5b025b25702c5ad2fae305f365845edddfa12f1ab0ac6c5dc379617c850456c27bcc2a20b16c57dff29d414beabd9dac2bcae96c7fb48b217c11ff54ef010bc7154d7f0d03893a7e3ebaf274c4e35c8e9a4e87054075567c52df1bc2bd13e5797a41257ea68c22aca5dea114864cfd33b3caa01c5779e29e5bdcb2925cc70f27f95178dfe1978f768f897b213af948e42f344da11940a1cd55b0a80035a69873c7a6934f4f80fac4d6a0f5a2b91b76b621d4a8fb916d31363683feaad29527d5207bcee2e133ad0af97ede"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x54}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0xee, 0x9, 0xe, [@generic={0x77, 0x1, "c75bb513f9a2d4a5ae0306d02725024bb9dfd52155fa16a9ad17d4707834e6bd694af7748e9e0a1552a2eef3288b2b55850a9165fb3cd051951ebb0805ff6b115d6888c7e0bf65b275c8920d62753fc069a68f3967f9c49fc5782d1eae3ec3fccbb2c2cb789ba5b9cc5720fa379928a5279329b308"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0xfd, 0xaa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xc, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x401}, @generic={0x8e, 0x3d, "01bc3e11681431363aafcd9e8e2297266f66d12aaaff1c3c47d5bd58711b1360cb250e55164e785182590b3bc68f69b8be873490385295dd4037835f8c6f97ea9d12b5a63653ad081d82289d7dcf26fe2dd99d84bdea420898ba162a1cb39c2262842ba48e101a8acf6964d06530960062334afeb7044ad70bfe506edeac771e208ef1fd213ed0aee27604c3"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x4, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf7, 0x8}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x9, 0x1, 0x9, [@generic={0xeb, 0x31, "d49051cdc919235a01eba0acb0d94ce413f6682b7914b8a0f88397aae7f9656deef327c47aaca44f3228c69417f4c91caa9ed63ed85d33b4222fa8ed5b8476991f90c95da6ead0d47d95441167508b3b534ec16ac5a3ec792093640ca7fff598286c9ef449c6bf6dfea6f46ffad616dea952addb3edaf35aaeab0e1421c4fb2cedfe5cb20441fd7d72fa0f50d2b9a6f17869af1b0458d0539117eab2f56bb08a4406b7565d4af4abced9bb4f3fe50dd828a4ebadbe99064fc32dc3d66ea1594952e8f9e64577f7a542f95f9b81e9b0cb0ec3f81c1c3247855e7cc7c87a3a9161e9fc1cb0a46fcc2726"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0xd6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0xc7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x7fff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x10, 0x0, 0x1e, [@generic={0x2a, 0xf, "4ca6446175c8e64b282574d3a81e1f919af099c4419b1ff542a5c73133b924536a195042088ce5e5"}, @generic={0xcc, 0x11, "c3832eebfd99af41e40d2b2bc205d834d5295a6f1ecbe39a44bd30323ff4fdc53f8aed824640ac19f3d39f717d6f1241fe6265cf5afccb4a46ff0b1e286f5116d383c934e1e74a9119b1ac06646730257c48c1c158a0e84b312d4b9fc1f8ea5f4ffba227d172fdacd12deb933fb32a55369387c66ccd9751588b1ad249e9d23595f5a0a22951fa80151ce5a52e25f66dad6aeda1fe951a45ccf41d28b0883dea0f09fd60363d9fe6cc7504949caa6a4fa12f09db8a600a33701ecd4253b2867f4625609c2b7104d30b4a"}]}}, {{0x9, 0x5, 0x8, 0x14, 0x3ff, 0xfe, 0x7f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x69}, @generic={0x28, 0x9, "ae8d7113ad54026992ddc1a93598667e11c642fa7816d490b12ff04144b2c85aac93f20e0549"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x40, 0x94, 0x5, [@generic={0xda, 0x22, "d3589d7ecd174c2ad51814536f8b9a419dddd6e4c8af40bc9aef4ef6aa2d4debb73bc3bbe39ed813d09ad68a99916ebffae5642531e3b97a0ced46e422b09502feccb1b3f11d138ae0b173ff7b5de2bf07857f11ada4ed8e7fd52587d6107c638108409fd1520cd9465d06c4f943928afa10222a7fa0d50fc5105b012a08814b0b3d3209e5fe2ff9d135cd7dd1b12ad4e2e8d846d64557d06624e85601d33f246d4c5823223c01bd55840ea26d793452fa87e6229a721e605bc97962467c48978843e663c1ab943f823d48686bdeaaa716b8837a864a13e9"}]}}, {{0x9, 0x5, 0xc, 0x9, 0x10, 0x1, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x94, 0x901}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x0, 0x1, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x94e9}, @generic={0xd6, 0x23, "7747b73d4341cf2e2fb4ca46ae043119e4179a5b4ba10913e8c78f0f0ba74777fb0cf3e831a6a7978482e2a94e1447f3ca2689a0600dc9d35c4a9c1da5cd590cfdb435caaf6839acfbab1d9d30b16c570053ac99e772346398167e1ff20a996083c05460cec75a26f5e89fb52801e9028e71dd31c7300f6eada1ea521f3cda99a919b844c1f8f4ea66198793d5d81804bddd71b5314bcf286e1adb50da694f63f6bbfd7449223384fd072f7aa098daf62c5e4a767790c1f55954f0af2fbed7efc6a24e4f56d4809680352c0d1c87d1c68a91a83c"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x3, 0x5, 0xa, [@generic={0x33, 0x11, "0a0844884fbca47691381dfbde3750e1680325359f7b62ccbf8be8ab25cb189d9f4c83ff313042707460f4799e83082ced"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x7, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x7}]}}]}}, {{0x9, 0x4, 0x77, 0x5, 0x1, 0x55, 0x6e, 0x5a, 0x43, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4ed4"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x5, 0xf, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x955b, 0x9, 0xc, 0x4, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff9, 0xae}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x8, 0x7fff}]}], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xd}]}}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x201, 0x2, 0x8, 0xff, 0xf7, 0x4}, 0x7b, &(0x7f0000001480)={0x5, 0xf, 0x7b, 0x4, [@generic={0x50, 0x10, 0x1, "f5cb108595443d5fe252af85beb5206261b758b8e2c8d21332e5fdae592af3586f1df7f2539eb0fa496e105ee4d00af4e1cf59e0c62711af8a8b1a29c4a20eba9de09a5ca28d6906a76fe3d402"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x3, 0xf, 0x1ff, [0x0, 0xffff30, 0xc0d1, 0xa519de8b758d996c, 0xffc0f0]}]}, 0x2, [{0x6f, &(0x7f0000001500)=@string={0x6f, 0x3, "e826971da1d8d6457ce63673b3fd6c324b4828c676a9a49a2b79b781e38a23ce0cdd807d77c3b8fc11531a8632ff182f50a422b2ffab0530ed0f193676e1c8ba061d5ce45fdba6493f1b3db200cf33ea2785792cef77a99bd4f6303cd11927d024db8ddd5e54e41817a334d2e5"}}, {0xac, &(0x7f0000001580)=@string={0xac, 0x3, "e16818afbc406a4fe4b934edb2c613a620fb3f43098f6be908b4987ee09c2dad85452e2da96f6809944726bf023fe927bce089f14cf63cd2b54ad78bffd6a8f4317eb1a8d655028e7a20f2fdb409ae04e338e222c6513079ea28a441ea7fd998ce84c90719f0a3baa9a99de403aa0c3e93176dd97c0d1b5dd8f839c34917d77ab590d0ad4bd4ccdc95f87fc9ba738739107e9eb7254089d06c1e6a375e6e98129221155d23d81c10aaea"}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000001780)={0x14, &(0x7f0000001680)={0x20, 0x9, 0x94, {0x94, 0xd, "8fc94f517ab9fa7a826f269a27598d32400e584537971c749defa3811deccb2fa6ebb7014156309570b8111ce70fb03687f4b0fb4f5dd64d8b72f210e5655b6b2687814875666f0a4a3dfb6b10fdb44ec3d84bd8a7fc024db518ac4a2d20646444541866f57dcdf20158f37a59518d7f0daa92f9be0adb726a0852bbb91a06dbdf64a0a07f75c252c4602822d064a3027e57"}}, &(0x7f0000001740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001880)={0x1c, &(0x7f00000017c0)={0x20, 0xb, 0x6, "07a8ea7d5dc3"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x1}}) poll(&(0x7f00000018c0)=[{r0, 0x4}, {r5}, {r0}], 0x3, 0x7fffffff) syz_usb_control_io$uac1(r6, &(0x7f0000001b00)={0x14, &(0x7f0000001900)={0x40, 0xe, 0xee, {0xee, 0x1, "6b63f48314cad7774094048b5d746d7a17f3f49bce529fc32317a220fc9fafa2577967d53274047c73e2563108941d7ac283fd76c35cb446d2d4dd985ff7086bb634f8535ac3ada3b93ff82315d37ff2269e6cc86748e58ff4945fc8f3de33c2474e4f85972fb466f329effa59fcad53e505bb636397462dff5a35c2dadda8984a970eb70b515cb2f8d11773eafa531c05dd48ecf6eb2003af887c2e5dd31636dc78cc56a249f17ba2e6272e03d38e90c320842ad3c5b7881b4f0a799c0707999f5fe3712c92cde37d52a2006158d0c7da2a2c5ac43cad52167789dd933efeaa2e782a24a856c56ddfda3ea8"}}, &(0x7f0000001a00)={0x0, 0x3, 0xda, @string={0xda, 0x3, "369bf12095da5ef752ac51141ef35fa6b730d86ed52233237e41d3ef50510b11260c9d20f9ce82837e281cf837f17b9574cbecd4919cb79a9dcd33f0a9ea836f330f5f54fb2e7803adf3d4cfc0ba5e0493ef1be1faba23dee566feaebd1be188c6dee3349bb4174fb48bb5f377041971c3e88c469ed7aedf460e18c36d61a3e8e276a813ca70c2be38608716ce999cf66723a82e933e32e4009c8bf26f4d60aa677f1e6742d95163f321754a3885c50e16c3ad476111a784f7fee29e671d54324788c90af00dc9c67a8d23305188a63c0e4da58e380a0ba1"}}}, &(0x7f0000001e00)={0x44, &(0x7f0000001b40)={0x0, 0x3f5ba68d0337b0ad, 0xd1, "ab9f78757711addbd4c2d81995e34760a01b12f3b6f7fe9fe5025ed351488ec7abd41cb3a5c5627b9198165e26d574f6e29c834875b070501e52693a634b44c5b524c750ddb16bf947c172a425c4894934261e4f808974cead2997ef6f4596b26ac882c4c42d63a1595c92a53f61a785a9447d411cdeef02dd36f8a3b35e835494449f962d0baf37ca2b86447c49f3ad0c12f4ab543fe92a61f21b0c655eb6dfe661fbc682660bb77210b81c50b8a81d1746e3a5146a691b34485c1ff4dde604e3da1007c299fb83fbdb0494a2badae115"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001cc0)={0x20, 0x81, 0x2, "f62c"}, &(0x7f0000001d00)={0x20, 0x82, 0x3, "c0f1c0"}, &(0x7f0000001d40)={0x20, 0x83, 0x1, "81"}, &(0x7f0000001d80)={0x20, 0x84, 0x4, "5700f3b6"}, &(0x7f0000001dc0)={0x20, 0x85, 0x3, "a46eac"}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001e80)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000002280)=r5) fchmod(r5, 0x88) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000023c0)={0x1, 0x0, [{0xf000, 0xf2, &(0x7f00000022c0)=""/242}]}) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) close_range(r5, r0, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000002500)={0x14, &(0x7f0000002400)={0x40, 0x11, 0x5, {0x5, 0x21, "d700fb"}}, &(0x7f0000002440)={0x0, 0x3, 0x84, @string={0x84, 0x3, "50196aec7b8e9673d47038201bdc888fd85232487b9efc9993b556b4a2f67fec2cb00da34b8f499098e93929d6924cef0f10bee1bf07b9f56dc148b89edc63ca7386ee75962d34471d120aaf4ce39b6f4c0724c9cedbd04c4bfd845f21751348192ae0ea69811539543d8bb5b9799bd6cfa0a1457a074b0a0262358eb34fd1b977b9"}}}, &(0x7f0000002780)={0x34, &(0x7f0000002540)={0x20, 0x9, 0x24, "de7910c93b442827c3995183bcef0a4e265f6ab2dce583ecf190fe031abfb05e6a8488df"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002600)={0x20, 0x0, 0xf3, {0xf1, "24760b0f192ca0b9e886a228317f18e028e20a7af38dd7fe02b52b2ca859a85b99c0948c4e2265e8ff3bfc78399eb42764d9e351b0815ebd115f5f7740fb1850827c3f1845cf43fa42c1fb7a6271da639f139ade17fc483fe649b3ccf7d46e049d11fe62c0c6f757b011359bbf4dd436b7e7c9d1656f87ec1760ce36004e926453265f9de7011df812e42520df136734fb888bd98987063c6ba268ef00cd02e60b2bcaa252b256b5f76fd9916400c147f7304d272aa3bd59c0fe16998fb4b6a485208a0e0da3fee63069b7e47473519b4eebf23e1ea1a44bff5fd9587abca406f52c4a650c848b1155e755add0f37f6371"}}, &(0x7f0000002700)={0x20, 0x1, 0x1, 0x94}, &(0x7f0000002740)={0x20, 0x0, 0x1, 0x2}}) r7 = syz_clone3(&(0x7f0000002a80)={0xa000000, &(0x7f00000027c0), &(0x7f0000002800), &(0x7f0000002840), {0x24}, &(0x7f0000002880)=""/216, 0xd8, &(0x7f0000002980)=""/169, &(0x7f0000002a40)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r5}}, 0x58) getpgrp(r7) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002b00)={0x0, 0x0}, &(0x7f0000002b40)=0xc) setuid(r8) r9 = pidfd_getfd(r5, r5, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000002bc0), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x68, r10, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x200, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 6.530838931s ago: executing program 1 (id=3653): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c000004000600140001800600060008000000080014"], 0x2c}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000140)="f09bda31", 0x4) sendfile(r2, r3, &(0x7f0000000000), 0xfffb) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r4) close(r0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) socket$netlink(0x10, 0x3, 0x12) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\v', @ANYRES16=r9, @ANYBLOB="01002abd7000fedbdf251200000008000300", @ANYRES32=r11, @ANYBLOB="0a00060008021100000100000800a40002000000"], 0x30}, 0x1, 0x0, 0x0, 0x40008c0}, 0x50) r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r12, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r12, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r6, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x142}, {r0, 0x200}, {r0, 0x2080}, {r0, 0x2008}, {r0, 0x44}, {r0, 0x2032}, {r5}, {r0, 0x1}, {r0, 0x4045}], 0x9, &(0x7f0000000140), &(0x7f00000001c0)={[0x2]}, 0x8) 6.436276156s ago: executing program 1 (id=3654): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000180), 0x8, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0xf) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x1f26) write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r5, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xfe, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r6, r7, 0xb, 0x8, 0x1000000}}}, 0x78) readv(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './cgroup\x00'}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000280)=0x5a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_usb_connect(0x0, 0x3f, &(0x7f0000002c80)=ANY=[@ANYBLOB="12015002028a7610210481042bbf0102030109022d0001c002800709c2e7b704240cb1610c04e100000202ff"], &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0}) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x400, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r12, 0x0, 0x40816) ioctl$BLKREPORTZONE(r11, 0xc0101282, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 4.088343577s ago: executing program 2 (id=3667): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)={r3}) 4.029381713s ago: executing program 2 (id=3668): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420880b070064ef0000000109fa120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') syz_fuse_handle_req(r1, &(0x7f00000001c0)="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", 0x2000, &(0x7f0000005680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, 0x0, 0x7c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r3, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r3, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000002dc0)={0x8200020, "4a68b2df3cdf4e47e55b0cfee618c3df4505ec43511065af69f264574a6f0c0d29320843e843b968dcf30fad98f75a6341ad4720b237d465ef75ba44b3572569b346e103e055a726ed096a98943a278be110001000000000005a9854babb6df599710dc47d907ba93d30ba06134cd08371cbc2212e9a7174bf50a8171b043423"}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 3.509068563s ago: executing program 3 (id=3669): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = epoll_create(0x3) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, &(0x7f00000000c0), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003", 0x39}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x80, 0x0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="00000400000076262d71"], 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = epoll_create(0x2) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = inotify_init1(0x80000) dup3(r7, r8, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)={0x2}) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect(r4, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80) 3.281289071s ago: executing program 1 (id=3672): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'virt_wifi0\x00', @broadcast}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r1, 0x401, 0x70bd27, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2d, 'rlimit'}]}, 0x8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1001}) read$snddsp(r3, &(0x7f0000000600)=""/72, 0x3e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 2.641023428s ago: executing program 1 (id=3674): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(0x0, 0x0, 0x0, 0x400, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x6}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="031b6268"], 0x4) write(r2, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x1010, r3, 0xf9163000) 2.368907603s ago: executing program 5 (id=3681): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x240641, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect$cdc_ncm(0x4, 0x85, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902730002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a05090558042402020424020004240202042413800905810320000e0c000904010000020d000009042000060b0309050302080009030700"/133], 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{0x0, 0x2, 0x100000000, 0xd, 0x8, 0xfffffffffffffffa, 0x3fff800000, 0x7fffffff, 0x8, 0x7, 0x7, 0x9, 0x1ff, 0x1, 0x8}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000340)={r2, 0x9}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r1, 0x7dfff000) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 2.201950714s ago: executing program 1 (id=3682): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 1.887232975s ago: executing program 3 (id=3683): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r0, 0xbffff000, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 1.793006809s ago: executing program 3 (id=3684): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x100408c4}, 0x24040010) r2 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000380001ff23bd7002fa0000ca07"], 0x14}}, 0x4000) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f00000000c0)={0x9, 0x0, 0x10001, 0x8703, 0x15, "859443824dc339dd472aa7a3d280e8d389b984"}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0x8}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xba, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 943.868904ms ago: executing program 2 (id=3685): creat(&(0x7f0000001380)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400010000000900020073797a31000000000500010007000000050005000a000000140007800800114000000000050015008900000013000300686173683a6e65742c696661636500"], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='incremental-fs\x00', 0x8000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='incremental-fs\x00', 0x8000, 0x0) 933.943036ms ago: executing program 5 (id=3686): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x34d3542e, 0xfffffffe, 0x80000}) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x6b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000}, 0x1c, 0x0, 0x0, &(0x7f0000001ac0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x40000) r1 = socket$inet(0x2, 0xe3acdca3feb30a00, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)) r3 = syz_clone(0xa008800, &(0x7f0000000280)="578d8df87999190a3ade2201b7a2274a038b903a29688cd984f42fb6db0510ceeb5e06458dd74ee0065443a64b4694c1abce20fa45691d8195d18445b99662b2d808d2984e066237c70bdde122cd4a278199a6f74a69a95c30bb458fef6c9ed1813783fcd4f333076a417f4a1562d572a49e15d5bd7db53a232cb210a2b2ee4421efb632874f4b85221c9428e8a29feba0d16d23062b53970b42368d038a1d486393df0220c8720a", 0xa8, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200)="836f1a26b2ee91c7835542e33358d4c7baa8d8190e5096f3d0349e2744979c9f9b874166ae9a45f76ff30456a5c4a5b94b0ed79a81c11fde1b2d97e2ade899") r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r8, 0x8000001000000001, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000000180)={0x100, [0x7fffffff, 0x6], 0xffff}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x50000, 0x0) prlimit64(r3, 0xf, 0x0, &(0x7f0000000340)) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getsockopt$inet_opts(r9, 0x0, 0x1, &(0x7f0000000380)=""/104, &(0x7f0000000400)=0x68) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r10, 0xc01c64ad, &(0x7f0000000080)={r13}) 756.654625ms ago: executing program 5 (id=3687): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f0000002240)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0x7, 0xfff) r1 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "9000"}, 0x10}, 0x2}, 0x810) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x4, 0xea, {{0x29, 0x4, 0x3, 0x7, 0xa4, 0x65, 0x0, 0x80, 0x2f, 0x0, @multicast2, @remote, {[@noop, @end, @rr={0x7, 0x17, 0xd9, [@local, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0xb}, @empty]}, @end, @cipso={0x86, 0x26, 0x2, [{0x1, 0x3, '{'}, {0x7, 0x4, "7792"}, {0x2, 0xc, "87dfa26a7a18a9c77f5f"}, {0x0, 0xa, "99268ea9d9382703"}, {0x1, 0x3, "15"}]}, @generic={0x7, 0x12, "ccc2a079149c0600a6e625eb3880a155"}, @rr={0x7, 0x1f, 0x8f, [@multicast1, @local, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010100, @rand_addr=0x64010101]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x5b, [@rand_addr=0x64010101, @multicast2, @multicast1, @multicast2, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'gretap0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x20, 0x20, 0x9, 0x3, {{0x28, 0x4, 0x0, 0x12, 0xa0, 0x67, 0x0, 0x4, 0x4, 0x0, @empty, @local, {[@generic={0x88, 0xb, "42f7c7d324fdcedeff"}, @rr={0x7, 0x2b, 0xa5, [@local, @empty, @multicast1, @multicast2, @multicast1, @multicast1, @rand_addr=0x64010101, @empty, @multicast2, @multicast2]}, @cipso={0x86, 0x28, 0x1, [{0x0, 0x10, "f9d3142059383622a23a4cefb80f"}, {0x5, 0x2}, {0x6, 0x10, "df1ee4ed65e98dfab4143ce3b363"}]}, @timestamp_addr={0x44, 0x2c, 0x3b, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@remote, 0x7}, {@local, 0x1000}, {@broadcast, 0x7}, {@empty, 0x4}]}]}}}}}) r9 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) bind$packet(r11, &(0x7f00000001c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) r12 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0x27, 0x3202, @vifc_lcl_ifindex=r13, @local}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1a0, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r14 = fsopen(&(0x7f0000000340)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) r15 = fsmount(r14, 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file1\x00', r15, &(0x7f0000000140)='./file0\x00') symlinkat(&(0x7f0000000180)='./file0\x00', r15, &(0x7f0000000140)='./file0\x00') openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x2000, 0x0, 0x0, 0x2) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='vxfs\x00', 0x1370483, 0x0) 605.384542ms ago: executing program 2 (id=3688): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5a051feb1f984a1d, 0x40010, r0, 0x7dfff000) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'caif0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'caif0\x00', 0x400}) 533.542491ms ago: executing program 2 (id=3689): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000800)=0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000001880)="44f9b108b1cdc885c9c59832a22791a04bbaf1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b", 0x71, 0x85e80e34c9b7bef2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r5, 0x0, 0x24000890) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) tkill(r6, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x800) sendfile(r0, r0, 0x0, 0x7ffff000) 416.89722ms ago: executing program 5 (id=3690): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 169.303785ms ago: executing program 5 (id=3691): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000783000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x100010, r0, 0xa86cd000) ioprio_set$pid(0x1, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) mmap(&(0x7f0000783000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x100010, r0, 0xa86cd000) (async) 81.168022ms ago: executing program 5 (id=3692): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f00002f3000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 0s ago: executing program 2 (id=3693): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) listen(r1, 0x8) (async) ioctl$TCXONC(r0, 0x540a, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x4010, 0xffffffffffffffff, 0x45809000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = dup3(r6, r5, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fda={0x66646185, 0x3, 0x0, 0x22}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x20003, 0xfffffffb, 0xd, 0x1, 0x10, "ca737d1028112a4dda4ffb59921e78c0440a86"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000000040)=0x8001) (async) r11 = getpgid(0x0) fcntl$setownex(r10, 0xf, &(0x7f0000000140)={0x2, r11}) (async) sendmmsg$unix(r9, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) (async) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r12, 0x103, 0x1, &(0x7f0000000000)=0x3, 0x4) kernel console output (not intermixed with test programs): 472.325113][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.325123][T15505] Call Trace: [ 472.325131][T15505] [ 472.325139][T15505] dump_stack_lvl+0x189/0x250 [ 472.325164][T15505] ? __pfx____ratelimit+0x10/0x10 [ 472.325185][T15505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.325205][T15505] ? __pfx__printk+0x10/0x10 [ 472.325237][T15505] should_fail_ex+0x414/0x560 [ 472.325266][T15505] _copy_to_user+0x31/0xb0 [ 472.325285][T15505] simple_read_from_buffer+0xe1/0x170 [ 472.325312][T15505] proc_fail_nth_read+0x1df/0x250 [ 472.325338][T15505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.325364][T15505] ? rw_verify_area+0x258/0x650 [ 472.325383][T15505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.325408][T15505] vfs_read+0x1fd/0x980 [ 472.325434][T15505] ? __pfx___mutex_lock+0x10/0x10 [ 472.325456][T15505] ? __pfx_vfs_read+0x10/0x10 [ 472.325477][T15505] ? __fget_files+0x2a/0x420 [ 472.325513][T15505] ? __fget_files+0x3a0/0x420 [ 472.325537][T15505] ? __fget_files+0x2a/0x420 [ 472.325567][T15505] ksys_read+0x145/0x250 [ 472.325589][T15505] ? __pfx_ksys_read+0x10/0x10 [ 472.325605][T15505] ? rcu_is_watching+0x15/0xb0 [ 472.325628][T15505] ? do_syscall_64+0xbe/0x3b0 [ 472.325653][T15505] do_syscall_64+0xfa/0x3b0 [ 472.325672][T15505] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.325691][T15505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.325708][T15505] ? clear_bhb_loop+0x60/0xb0 [ 472.325728][T15505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.325745][T15505] RIP: 0033:0x7fa10698d33c [ 472.325760][T15505] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.325774][T15505] RSP: 002b:00007fa107882030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.325794][T15505] RAX: ffffffffffffffda RBX: 00007fa106bb5fa0 RCX: 00007fa10698d33c [ 472.325808][T15505] RDX: 000000000000000f RSI: 00007fa1078820a0 RDI: 0000000000000006 [ 472.325819][T15505] RBP: 00007fa107882090 R08: 0000000000000000 R09: 0000000000000000 [ 472.325831][T15505] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 472.325841][T15505] R13: 0000000000000000 R14: 00007fa106bb5fa0 R15: 00007ffead68aeb8 [ 472.325871][T15505] [ 472.572912][T15509] /dev/sg0: Can't lookup blockdev [ 472.684201][T15515] /dev/iommu: Can't lookup blockdev [ 472.730339][T14999] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 472.895909][T15526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.905625][T14999] usb 5-1: config 0 has no interfaces? [ 472.918301][T14999] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.932003][T14999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.940316][T14999] usb 5-1: SerialNumber: syz [ 472.942125][T15528] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input48 [ 472.947482][T14999] usb 5-1: config 0 descriptor?? [ 473.061581][T15533] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3059'. [ 473.194932][T14999] usb 5-1: USB disconnect, device number 116 [ 473.278456][T13830] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 473.358514][ T5833] Bluetooth: hci0: command 0x1003 tx timeout [ 473.358591][ T5154] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 473.431997][T13830] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 473.442491][T13830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.451903][T13830] usb 4-1: Product: syz [ 473.456086][T13830] usb 4-1: Manufacturer: syz [ 473.461735][T13830] usb 4-1: SerialNumber: syz [ 473.472241][T13830] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 473.487712][ T5903] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 473.708380][ T30] audit: type=1326 audit(2000000375.754:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 473.754619][ T30] audit: type=1326 audit(2000000375.754:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 473.772178][ T5920] usb 4-1: USB disconnect, device number 49 [ 473.814683][ T30] audit: type=1326 audit(2000000375.754:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 473.855510][T15536] /dev/rnullb0: Can't open blockdev [ 473.869758][ T30] audit: type=1326 audit(2000000375.754:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 473.892562][ T30] audit: type=1326 audit(2000000375.754:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 473.935458][ T30] audit: type=1326 audit(2000000375.754:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 473.958784][ T30] audit: type=1326 audit(2000000375.754:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 473.981591][ T30] audit: type=1326 audit(2000000375.764:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 474.017890][ T30] audit: type=1326 audit(2000000375.764:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 474.019504][T15542] /dev/rnullb0: Can't open blockdev [ 474.046804][ T30] audit: type=1326 audit(2000000375.764:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7fc00000 [ 474.258482][T14999] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 474.418414][T14999] usb 5-1: Using ep0 maxpacket: 8 [ 474.424867][T14999] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.434847][T14999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.444617][T14999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.454553][T14999] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.467931][T14999] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.476994][T14999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.558450][ T5903] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 474.566466][ T5903] ath9k_htc: Failed to initialize the device [ 474.573695][ T5920] usb 4-1: ath9k_htc: USB layer deinitialized [ 474.694115][T14999] usb 5-1: GET_CAPABILITIES returned 34 [ 474.699724][T14999] usbtmc 5-1:16.0: can't read capabilities [ 476.158301][ T5154] Bluetooth: hci1: command 0x0406 tx timeout [ 476.166228][T15542] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 477.006575][ T5920] usb 5-1: USB disconnect, device number 117 [ 477.017727][T15542] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 477.067664][T15542] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 477.076867][T15542] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 477.095257][T15542] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 477.111627][T15542] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 477.125353][T15542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.131934][T15542] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 477.187614][T15542] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 477.537415][T15572] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 477.738335][T14999] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 477.922624][T14999] usb 5-1: config 2 has an invalid interface number: 70 but max is 0 [ 477.925545][T15590] /dev/rnullb0: Can't open blockdev [ 477.930988][T14999] usb 5-1: config 2 has no interface number 0 [ 477.931024][T14999] usb 5-1: config 2 interface 70 has no altsetting 0 [ 477.933464][T14999] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=d6.9d [ 477.961058][T14999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.969189][T14999] usb 5-1: Product: syz [ 477.973448][T14999] usb 5-1: Manufacturer: syz [ 477.978182][T14999] usb 5-1: SerialNumber: syz [ 478.197664][T14999] usb 5-1: bad CDC descriptors [ 478.204309][T14999] pl2303 5-1:2.70: required endpoints missing [ 478.214599][T14999] usb 5-1: USB disconnect, device number 118 [ 478.238175][ T5154] Bluetooth: hci1: command 0x0406 tx timeout [ 478.672623][T15597] /dev/rnullb0: Can't open blockdev [ 479.008122][T13830] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 479.108355][T14999] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 479.128148][ T5154] Bluetooth: hci4: command 0x0c1a tx timeout [ 479.158115][ T5920] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 479.165716][T13830] usb 5-1: Using ep0 maxpacket: 8 [ 479.174962][T13830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.184752][T13830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.194768][T13830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.205326][T13830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.208110][ T5154] Bluetooth: hci3: command 0x0c1a tx timeout [ 479.227177][T13830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.236415][T13830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.248711][T14999] usb 2-1: device descriptor read/64, error -71 [ 479.318208][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 479.324498][ T5920] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.334351][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.344154][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.354399][ T5920] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.367510][ T5920] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.378175][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.452954][T13830] usb 5-1: GET_CAPABILITIES returned 0 [ 479.458622][T13830] usbtmc 5-1:16.0: can't read capabilities [ 479.488092][T14999] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 479.592899][ T5920] usb 4-1: GET_CAPABILITIES returned 0 [ 479.604072][ T5920] usbtmc 4-1:16.0: can't read capabilities [ 479.621351][T14999] usb 2-1: device descriptor read/64, error -71 [ 479.661087][T15601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.670752][T15601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.679991][ T5839] usb 5-1: USB disconnect, device number 119 [ 479.738576][T14999] usb usb2-port1: attempt power cycle [ 479.800912][ T5920] usb 4-1: USB disconnect, device number 51 [ 480.088310][T14999] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 480.108463][T14999] usb 2-1: device descriptor read/8, error -71 [ 480.325448][T15617] input: syz1 as /devices/virtual/input/input49 [ 480.348835][T14999] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 480.378836][T14999] usb 2-1: device descriptor read/8, error -71 [ 480.491545][T14999] usb usb2-port1: unable to enumerate USB device [ 481.201466][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 481.211955][T15639] vivid-000: disconnect [ 481.221833][T15638] vivid-000: reconnect [ 481.279086][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 481.316994][ T5833] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 481.326296][ T5833] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 481.872413][T15650] /dev/rnullb0: Can't open blockdev [ 482.281063][ T5903] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 482.437892][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 482.444205][ T5903] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.455277][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.465480][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.475436][ T5903] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.491140][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.503405][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.518011][T13830] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 482.667897][T13830] usb 4-1: Using ep0 maxpacket: 16 [ 482.674757][T13830] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.685861][T13830] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.695827][T13830] usb 4-1: config 0 interface 0 has no altsetting 0 [ 482.702612][T13830] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 482.711970][T13830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.723719][ T5903] usb 2-1: GET_CAPABILITIES returned 0 [ 482.731061][T13830] usb 4-1: config 0 descriptor?? [ 482.736879][ T5903] usbtmc 2-1:16.0: can't read capabilities [ 482.932959][ T5903] usb 2-1: USB disconnect, device number 9 [ 483.147000][T13830] hid_parser_main: 1 callbacks suppressed [ 483.147020][T13830] kye 0003:0458:0138.000F: unknown main item tag 0x4 [ 483.158127][T14999] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 483.161104][T13830] kye 0003:0458:0138.000F: unexpected long global item [ 483.177429][T13830] kye 0003:0458:0138.000F: parse failed [ 483.183134][T13830] kye 0003:0458:0138.000F: probe with driver kye failed with error -22 [ 483.319646][T14999] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 483.330588][T14999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.337191][T14999] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 483.346500][T14999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.356242][T14999] usb 5-1: config 0 descriptor?? [ 483.361417][ T5154] Bluetooth: hci3: command 0x0c1a tx timeout [ 483.369196][T15666] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 483.581775][T15666] syzkaller1: entered promiscuous mode [ 483.587354][T15666] syzkaller1: entered allmulticast mode [ 483.597547][T14999] usb 5-1: string descriptor 0 read error: -71 [ 483.617088][T14999] usbhid 5-1:0.0: can't add hid device: -71 [ 483.623160][T14999] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 483.633941][T14999] usb 5-1: USB disconnect, device number 120 [ 483.707701][T15672] /dev/rnullb0: Can't open blockdev [ 483.720610][T15672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.740125][T15672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.772345][T13830] usb 4-1: USB disconnect, device number 52 [ 483.891110][T15676] /dev/rnullb0: Can't open blockdev [ 484.318429][ T5839] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 484.348660][T14999] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 484.469766][ T5839] usb 4-1: config 0 has no interfaces? [ 484.476709][ T5839] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 484.491053][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 484.502241][ T5839] usb 4-1: SerialNumber: syz [ 484.507890][T14999] usb 2-1: Using ep0 maxpacket: 32 [ 484.519054][ T5839] usb 4-1: config 0 descriptor?? [ 484.529702][T14999] usb 2-1: config 4 has an invalid interface number: 60 but max is 0 [ 484.542363][T14999] usb 2-1: config 4 has no interface number 0 [ 484.551298][T14999] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=da.8d [ 484.574671][T14999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.628991][T14999] etas_es58x 2-1:4.60: Starting (null) (null) (Serial Number (null)) [ 484.760671][T14999] usb 4-1: USB disconnect, device number 53 [ 484.816747][T15684] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 484.832349][T15684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.841564][T15684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.854012][T15684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.864603][T15684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.885294][ T5839] usb 2-1: USB disconnect, device number 10 [ 485.243315][T15707] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 485.360416][ T5154] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 485.369277][ T5154] Bluetooth: hci4: Injecting HCI hardware error event [ 485.377883][ T5154] Bluetooth: hci4: hardware error 0x00 [ 485.437845][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 485.677795][ T5839] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 485.777743][T14999] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 485.805586][T15723] syzkaller1: entered promiscuous mode [ 485.815137][T15723] syzkaller1: entered allmulticast mode [ 485.837811][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 485.844878][ T5839] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 485.853145][ T5839] usb 4-1: config 0 has no interface number 0 [ 485.862799][ T5839] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 485.871905][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.880094][ T5839] usb 4-1: Product: syz [ 485.884265][ T5839] usb 4-1: Manufacturer: syz [ 485.889853][ T5839] usb 4-1: SerialNumber: syz [ 485.896341][ T5839] usb 4-1: config 0 descriptor?? [ 485.902882][ T5839] hub 4-1:0.145: bad descriptor, ignoring hub [ 485.909103][ T5839] hub 4-1:0.145: probe with driver hub failed with error -5 [ 485.920455][ T5839] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input50 [ 485.937763][T14999] usb 2-1: Using ep0 maxpacket: 16 [ 485.946643][T14999] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 485.956008][T14999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.969687][T14999] usb 2-1: Product: syz [ 485.973868][T14999] usb 2-1: Manufacturer: syz [ 485.986708][T14999] usb 2-1: SerialNumber: syz [ 486.018279][T14999] usb 2-1: config 0 descriptor?? [ 486.031475][T14999] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 486.092988][T14999] usb 2-1: Detected FT232H [ 486.161613][T15730] Bluetooth: MGMT ver 1.23 [ 486.231412][T14999] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 486.417723][T13830] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 486.448234][ T9] usb 4-1: USB disconnect, device number 54 [ 486.570155][T13830] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.585278][T13830] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 486.595943][T13830] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.609203][T13830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 486.615811][T13830] usb 5-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 486.624929][T13830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.635651][T13830] usb 5-1: config 0 descriptor?? [ 486.641681][T15731] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 486.670254][T14999] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 486.870386][ T9] usb 2-1: USB disconnect, device number 11 [ 486.892036][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 486.903530][ T9] ftdi_sio 2-1:0.0: device disconnected [ 487.070916][T13830] input: HID 28bd:0934 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0934.0010/input/input51 [ 487.159442][T13830] uclogic 0003:28BD:0934.0010: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.4-1/input0 [ 487.266416][T15731] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3130'. [ 487.289929][T15608] usb 5-1: USB disconnect, device number 121 [ 487.443218][ T5154] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 487.488048][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3136'. [ 487.522246][ T5154] Bluetooth: hci3: command 0x0c1a tx timeout [ 487.529977][ T5962] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 487.684559][T15760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3141'. [ 487.709303][ T5962] usb 4-1: config 0 has no interfaces? [ 487.720611][ T5962] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 487.737598][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 487.745606][ T5962] usb 4-1: SerialNumber: syz [ 487.750976][T15760] syzkaller1: entered promiscuous mode [ 487.754777][ T5962] usb 4-1: config 0 descriptor?? [ 487.766032][T15760] syzkaller1: entered allmulticast mode [ 487.977576][ T5962] usb 4-1: USB disconnect, device number 55 [ 488.641307][T15774] overlay: filesystem on ./file1 is read-only [ 488.656555][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.666070][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.675052][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.690249][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.698532][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.812472][T15783] mac80211_hwsim hwsim17 ?H: renamed from wlan1 (while UP) [ 488.961905][ T9] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 489.118372][ T9] usb 4-1: device descriptor read/64, error -71 [ 489.357614][ T9] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 489.413037][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.435183][T15777] chnl_net:caif_netlink_parms(): no params data found [ 489.497709][ T9] usb 4-1: device descriptor read/64, error -71 [ 489.529282][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.570593][T15777] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.578931][T15777] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.586215][T15777] bridge_slave_0: entered allmulticast mode [ 489.594123][T15777] bridge_slave_0: entered promiscuous mode [ 489.597705][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 489.602868][T15777] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.613781][T15777] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.613983][ T9] usb usb4-port1: attempt power cycle [ 489.622875][T15777] bridge_slave_1: entered allmulticast mode [ 489.634774][T15777] bridge_slave_1: entered promiscuous mode [ 489.698914][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.727505][T15777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.739521][T15777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.822252][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.836271][T15777] team0: Port device team_slave_0 added [ 489.845926][T15777] team0: Port device team_slave_1 added [ 489.874052][T15777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.881066][T15777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.907660][T15777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.924280][T15777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.931812][T15777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.958120][T15777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.967582][ T9] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 489.989002][ T9] usb 4-1: device descriptor read/8, error -71 [ 490.014830][T15777] hsr_slave_0: entered promiscuous mode [ 490.021310][T15777] hsr_slave_1: entered promiscuous mode [ 490.175116][ T36] bridge0: port 3(batadv0) entered disabled state [ 490.188169][ T36] bridge_slave_1: left allmulticast mode [ 490.193831][ T36] bridge_slave_1: left promiscuous mode [ 490.202075][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.210954][ T36] bridge_slave_0: left allmulticast mode [ 490.216580][ T36] bridge_slave_0: left promiscuous mode [ 490.224037][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.232352][ T9] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 490.258213][ T9] usb 4-1: device descriptor read/8, error -71 [ 490.368782][ T9] usb usb4-port1: unable to enumerate USB device [ 490.799171][ T5833] Bluetooth: hci0: command tx timeout [ 491.652803][ T36] team0: Port device bond0 removed [ 491.661169][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.711378][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.750751][ T36] bond0 (unregistering): Released all slaves [ 492.248145][ T36] hsr_slave_0: left promiscuous mode [ 492.258265][ T36] hsr_slave_1: left promiscuous mode [ 492.264318][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.274668][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.284433][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.292685][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.312776][ T36] veth1_macvtap: left promiscuous mode [ 492.321104][ T36] veth0_macvtap: left promiscuous mode [ 492.326650][ T36] veth1_vlan: left promiscuous mode [ 492.332578][ T36] veth0_vlan: left promiscuous mode [ 492.443115][ T36] pimreg (unregistering): left allmulticast mode [ 492.877622][ T5833] Bluetooth: hci0: command tx timeout [ 494.129171][ T36] team0 (unregistering): Port device team_slave_1 removed [ 494.318969][ T36] team0 (unregistering): Port device team_slave_0 removed [ 494.957436][ T5833] Bluetooth: hci0: command tx timeout [ 496.482806][T15777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 496.515771][T15777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 496.556219][T15777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 496.575051][T15777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 496.708767][T15777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.748212][T15777] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.775639][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.782810][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.825633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.832791][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.853913][ T36] IPVS: stop unused estimator thread 0... [ 496.933696][T15777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.050881][ T5833] Bluetooth: hci0: command tx timeout [ 497.194248][T15777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.432992][T15777] veth0_vlan: entered promiscuous mode [ 497.444207][T15777] veth1_vlan: entered promiscuous mode [ 497.471594][T15777] veth0_macvtap: entered promiscuous mode [ 497.482330][T15777] veth1_macvtap: entered promiscuous mode [ 497.500379][T15777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.513190][T15777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.529297][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.540020][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.551905][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.561115][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.624862][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.638733][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.663331][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.671859][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.362708][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.369356][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 543.469418][T15857] /dev/sg0: Can't lookup blockdev [ 543.473067][T15856] gfs2: not a GFS2 filesystem [ 543.864528][T15608] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 543.874764][ T5839] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 544.016320][T15608] usb 4-1: config 0 has no interfaces? [ 544.016341][ T5920] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 544.023016][T15608] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 544.038743][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 544.043952][T15608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 544.052218][T15608] usb 4-1: SerialNumber: syz [ 544.058017][ T5839] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 544.069792][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 544.083601][T15608] usb 4-1: config 0 descriptor?? [ 544.088705][ T5839] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 544.100553][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.110861][ T5839] usb 2-1: config 0 descriptor?? [ 544.154509][ T5920] usb 5-1: device descriptor read/64, error -71 [ 544.308807][T15608] usb 4-1: USB disconnect, device number 60 [ 544.394535][ T5920] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 544.525195][ T5839] viewsonic 0003:0543:E621.0011: item fetching failed at offset 5/11 [ 544.533778][ T5839] viewsonic 0003:0543:E621.0011: probe with driver viewsonic failed with error -22 [ 544.544995][ T5920] usb 5-1: device descriptor read/64, error -71 [ 544.655340][ T5920] usb usb5-port1: attempt power cycle [ 544.729347][ T9] usb 2-1: USB disconnect, device number 12 [ 544.897419][T15875] netlink: 'syz.3.3161': attribute type 1 has an invalid length. [ 544.908055][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3161'. [ 544.994583][ T5920] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 545.025166][ T5920] usb 5-1: device descriptor read/8, error -71 [ 545.165950][T15889] 9pnet: p9_errstr2errno: server reported unknown error [ 545.264519][ T5920] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 545.291219][ T5920] usb 5-1: device descriptor read/8, error -71 [ 545.404920][ T5920] usb usb5-port1: unable to enumerate USB device [ 545.614423][ T5903] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 545.756700][T15915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 545.766011][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 545.775380][ T5903] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 545.784708][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.792702][ T5903] usb 2-1: Product: syz [ 545.797115][ T5903] usb 2-1: Manufacturer: syz [ 545.801713][ T5903] usb 2-1: SerialNumber: syz [ 545.811806][ T5903] usb 2-1: config 0 descriptor?? [ 545.910833][T15917] hpfs: Bad magic ... probably not HPFS [ 545.962002][T15919] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 546.284429][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 546.424735][ T5903] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 546.435105][ T5903] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 546.441985][ T5903] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 546.457102][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 546.471004][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.479202][ T9] usb 4-1: Product: syz [ 546.483361][ T9] usb 4-1: Manufacturer: syz [ 546.489011][ T9] usb 4-1: SerialNumber: syz [ 546.499594][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 546.516471][ T5903] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 546.527833][ T5920] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 546.637414][T15901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.650795][T15901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.707450][T14999] usb 2-1: USB disconnect, device number 13 [ 546.941391][T14999] usb 4-1: USB disconnect, device number 61 [ 547.754397][ T5920] usb 4-1: Service connection timeout for: 256 [ 547.773386][ T5920] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 547.803284][ T5920] ath9k_htc: Failed to initialize the device [ 547.820018][T14999] usb 4-1: ath9k_htc: USB layer deinitialized [ 548.164577][T14999] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 548.235094][T15608] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 548.356254][T14999] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.384685][T14999] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 548.404334][T14999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.414346][ T5903] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 548.424557][T15608] usb 2-1: Using ep0 maxpacket: 8 [ 548.435257][T15608] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.446095][T14999] usb 4-1: config 0 descriptor?? [ 548.459958][T15608] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.471627][T14999] pwc: Askey VC010 type 2 USB webcam detected. [ 548.479194][T15608] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.489562][T15608] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.503646][T15608] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.512922][T15608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.609625][ T5903] usb 5-1: config 0 has no interfaces? [ 548.616747][ T5903] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 548.633425][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 548.647261][ T5903] usb 5-1: SerialNumber: syz [ 548.654822][ T5903] usb 5-1: config 0 descriptor?? [ 548.790712][T15608] usb 2-1: usb_control_msg returned -71 [ 548.806709][T15608] usbtmc 2-1:16.0: can't read capabilities [ 548.830801][T15608] usb 2-1: USB disconnect, device number 14 [ 548.861856][T14999] pwc: recv_control_msg error -32 req 02 val 2b00 [ 548.879139][ T9] usb 5-1: USB disconnect, device number 126 [ 548.882250][T14999] pwc: recv_control_msg error -32 req 02 val 2700 [ 548.901069][T14999] pwc: recv_control_msg error -32 req 02 val 2c00 [ 548.928256][T14999] pwc: recv_control_msg error -32 req 04 val 1000 [ 548.940995][T14999] pwc: recv_control_msg error -32 req 04 val 1300 [ 548.954950][T14999] pwc: recv_control_msg error -32 req 04 val 1400 [ 548.966375][T15965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.975072][T14999] pwc: recv_control_msg error -32 req 02 val 2000 [ 548.997436][T15965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.008742][T14999] pwc: recv_control_msg error -32 req 02 val 2100 [ 549.017310][T14999] pwc: recv_control_msg error -32 req 04 val 1500 [ 549.024708][T14999] pwc: recv_control_msg error -32 req 02 val 2500 [ 549.032145][T14999] pwc: recv_control_msg error -32 req 02 val 2400 [ 549.392291][T16028] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 549.407831][T16028] /dev/rnullb0: Can't open blockdev [ 549.542782][T14999] pwc: recv_control_msg error -71 req 02 val 2900 [ 549.560906][T14999] pwc: recv_control_msg error -71 req 02 val 2800 [ 549.578949][T14999] pwc: recv_control_msg error -71 req 04 val 1100 [ 549.592594][T14999] pwc: recv_control_msg error -71 req 04 val 1200 [ 549.608253][T14999] pwc: Registered as video103. [ 549.621127][T14999] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 549.658654][T14999] usb 4-1: USB disconnect, device number 62 [ 549.764136][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 549.824188][ T5839] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 549.898725][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3205'. [ 549.910859][T16040] binder: BINDER_SET_CONTEXT_MGR already set [ 549.919823][T16040] binder: 16039:16040 ioctl 4018620d 200000000040 returned -16 [ 549.930515][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.945089][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.955178][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 549.964466][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.982403][ T9] usb 2-1: config 0 descriptor?? [ 549.998102][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 550.005182][ T5839] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 550.021177][ T5839] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 550.032367][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.049296][ T5839] usb 5-1: Product: syz [ 550.053469][ T5839] usb 5-1: Manufacturer: syz [ 550.059501][ T5839] usb 5-1: SerialNumber: syz [ 550.070748][ T5839] usb 5-1: config 0 descriptor?? [ 550.086513][ T5839] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 550.229479][T16047] netlink: 'syz.3.3208': attribute type 1 has an invalid length. [ 550.246115][T16047] netlink: 'syz.3.3208': attribute type 2 has an invalid length. [ 550.255740][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 550.271026][T16047] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 550.279092][T16047] UDF-fs: Scanning with blocksize 4096 failed [ 550.411120][ T9] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 550.428125][ T9] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 550.609224][ T9] cp2112 0003:10C4:EA90.0012: error requesting version [ 550.648211][ T9] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 550.697457][ T9] usb 2-1: USB disconnect, device number 15 [ 550.727059][T16055] overlayfs: upper fs does not support tmpfile. [ 550.738470][ T5839] gspca_zc3xx: reg_w_i err -71 [ 550.914241][T14999] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 550.991954][T16072] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3215'. [ 551.084072][T14999] usb 4-1: Using ep0 maxpacket: 8 [ 551.090935][T14999] usb 4-1: unable to get BOS descriptor or descriptor too short [ 551.099526][T14999] usb 4-1: config 4 interface 0 has no altsetting 0 [ 551.110355][T14999] usb 4-1: string descriptor 0 read error: -22 [ 551.116873][T14999] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 551.126314][T14999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.143450][T14999] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 551.157355][T14999] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 551.174837][T14999] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 551.183064][T14999] usb 4-1: media controller created [ 551.211034][T14999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.354198][ T5839] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 551.361187][ T5839] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 551.372835][ T5839] usb 5-1: USB disconnect, device number 127 [ 551.398462][T16075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.407268][T16075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.420864][T16075] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3212'. [ 551.474153][ T5920] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 551.626997][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.638836][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 551.649838][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 551.659645][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.676290][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.686241][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.698199][ T5920] usb 2-1: config 0 descriptor?? [ 551.704244][ T5839] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 551.857787][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 551.866411][ T5839] usb 5-1: not running at top speed; connect to a high speed hub [ 551.876103][ T5839] usb 5-1: config 9 has an invalid interface number: 68 but max is 0 [ 551.884272][ T5839] usb 5-1: config 9 has no interface number 0 [ 551.890510][ T5839] usb 5-1: config 9 interface 68 has no altsetting 0 [ 551.899581][ T5839] usb 5-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=b5.82 [ 551.908902][ T5839] usb 5-1: New USB device strings: Mfr=26, Product=2, SerialNumber=3 [ 551.920794][ T5839] usb 5-1: Product: syz [ 551.925137][ T5839] usb 5-1: Manufacturer: syz [ 551.930747][ T5839] usb 5-1: SerialNumber: syz [ 552.127023][ T5920] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.137999][ T5920] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.145841][ T5920] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.153320][ T5920] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.166878][ T5920] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.176196][ T5920] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.186223][ T5920] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.193629][ T5920] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.201415][ T5920] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.224805][ T5920] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 552.275495][T16076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.308906][T16076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.326716][T14999] zl10353_read_register: readreg error (reg=127, ret==0) [ 552.327022][T16058] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 552.367866][ T5839] usb 5-1: bad CDC descriptors [ 552.382101][ T5839] usb 5-1: USB disconnect, device number 2 [ 552.438924][T14999] usb 4-1: USB disconnect, device number 63 [ 552.577047][ T5921] usb 2-1: USB disconnect, device number 16 [ 553.134251][T16089] syz.3.3220: attempt to access beyond end of device [ 553.134251][T16089] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 553.151372][T16089] SQUASHFS error: Failed to read block 0x0: -5 [ 553.159417][T16089] unable to read squashfs_super_block [ 553.163983][ T5920] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 553.336397][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.354235][ T5920] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 553.363422][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.386822][ T5920] usb 5-1: config 0 descriptor?? [ 553.406427][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 553.801228][ T5920] pwc: recv_control_msg error -32 req 02 val 2b00 [ 553.808629][ T5920] pwc: recv_control_msg error -32 req 02 val 2700 [ 553.815844][ T5920] pwc: recv_control_msg error -32 req 02 val 2c00 [ 553.825401][ T5920] pwc: recv_control_msg error -32 req 04 val 1000 [ 553.832587][ T5920] pwc: recv_control_msg error -32 req 04 val 1300 [ 553.840155][ T5920] pwc: recv_control_msg error -32 req 04 val 1400 [ 553.847285][ T5920] pwc: recv_control_msg error -32 req 02 val 2000 [ 553.854958][T16080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.863555][T16080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.876685][ T5920] pwc: recv_control_msg error -32 req 02 val 2100 [ 553.883632][ T5920] pwc: recv_control_msg error -32 req 04 val 1500 [ 553.890745][ T5920] pwc: recv_control_msg error -32 req 02 val 2500 [ 553.897720][ T5920] pwc: recv_control_msg error -32 req 02 val 2400 [ 553.924123][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 554.085897][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.095775][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 554.108932][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 554.118356][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.130983][ T9] usb 2-1: config 0 descriptor?? [ 554.247101][T16117] overlay: ./file0 is not a directory [ 554.410558][ T5920] pwc: recv_control_msg error -71 req 02 val 2900 [ 554.419288][ T5920] pwc: recv_control_msg error -71 req 02 val 2800 [ 554.428598][ T5920] pwc: recv_control_msg error -71 req 04 val 1100 [ 554.440222][ T5920] pwc: recv_control_msg error -71 req 04 val 1200 [ 554.453473][ T5920] pwc: Registered as video103. [ 554.479956][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54 [ 554.508338][ T5920] usb 5-1: USB disconnect, device number 3 [ 554.592491][ T9] kovaplus 0003:1E7D:2D50.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 554.973909][T13830] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 555.123863][T13830] usb 4-1: Using ep0 maxpacket: 32 [ 555.138199][T13830] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 555.152800][T13830] usb 4-1: config 0 has no interface number 0 [ 555.162582][T13830] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 555.179937][T13830] usb 4-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.205161][T13830] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 555.214441][T13830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.222483][T13830] usb 4-1: Product: syz [ 555.228605][T13830] usb 4-1: Manufacturer: syz [ 555.233877][T13830] usb 4-1: SerialNumber: syz [ 555.242697][T13830] usb 4-1: config 0 descriptor?? [ 555.259247][T13830] redrat3 4-1:0.83: Couldn't find all endpoints [ 555.479809][T13830] usb 4-1: USB disconnect, device number 64 [ 555.582252][T16112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.593475][T16112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.628795][ T9] kovaplus 0003:1E7D:2D50.0014: couldn't init struct kovaplus_device [ 555.637824][ T9] kovaplus 0003:1E7D:2D50.0014: couldn't install mouse [ 555.649064][ T9] kovaplus 0003:1E7D:2D50.0014: probe with driver kovaplus failed with error -71 [ 555.678294][ T9] usb 2-1: USB disconnect, device number 17 [ 556.126545][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 556.283932][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 556.300999][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.329616][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 556.354656][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 556.369236][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.387843][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 556.401926][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.625633][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 556.631533][ T9] usbtmc 5-1:16.0: can't read capabilities [ 556.663862][ T5921] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 556.809004][T16162] omfs: Invalid superblock (0) [ 556.855829][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.866909][T15608] usb 5-1: USB disconnect, device number 4 [ 556.873776][ T5921] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 556.882861][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.911601][ T5921] usb 2-1: config 0 descriptor?? [ 556.931110][ T5921] pwc: Askey VC010 type 2 USB webcam detected. [ 557.153736][ T9] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 557.308932][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 557.317117][ T9] usb 4-1: config 0 has no interface number 0 [ 557.323223][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 557.333601][ T5921] pwc: recv_control_msg error -32 req 02 val 2b00 [ 557.334205][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 557.351717][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.354747][ T5921] pwc: recv_control_msg error -32 req 02 val 2700 [ 557.360205][ T9] usb 4-1: Product: syz [ 557.372180][ T5921] pwc: recv_control_msg error -32 req 02 val 2c00 [ 557.378654][ T9] usb 4-1: Manufacturer: syz [ 557.378671][ T9] usb 4-1: SerialNumber: syz [ 557.381624][ T9] usb 4-1: config 0 descriptor?? [ 557.384572][ T5921] pwc: recv_control_msg error -32 req 04 val 1000 [ 557.403205][ T5921] pwc: recv_control_msg error -32 req 04 val 1300 [ 557.410436][ T5921] pwc: recv_control_msg error -32 req 04 val 1400 [ 557.418144][ T5921] pwc: recv_control_msg error -32 req 02 val 2000 [ 557.426533][T16153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.435565][T16153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.446160][ T5921] pwc: recv_control_msg error -32 req 02 val 2100 [ 557.453352][ T5921] pwc: recv_control_msg error -32 req 04 val 1500 [ 557.462380][ T5921] pwc: recv_control_msg error -32 req 02 val 2500 [ 557.482913][ T5921] pwc: recv_control_msg error -32 req 02 val 2400 [ 557.584454][T16168] netlink: 'syz.4.3249': attribute type 11 has an invalid length. [ 557.980226][ T5921] pwc: recv_control_msg error -71 req 02 val 2900 [ 557.997149][ T5921] pwc: recv_control_msg error -71 req 02 val 2800 [ 558.005586][ T5921] pwc: recv_control_msg error -71 req 04 val 1100 [ 558.012490][ T5921] pwc: recv_control_msg error -71 req 04 val 1200 [ 558.021376][ T5921] pwc: Registered as video103. [ 558.050171][ T5921] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input56 [ 558.076668][ T5921] usb 2-1: USB disconnect, device number 18 [ 558.228291][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 558.413762][T13830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 558.563675][T13830] usb 5-1: Using ep0 maxpacket: 16 [ 558.570321][T13830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.581644][T13830] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 558.590803][T13830] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 558.598869][T13830] usb 5-1: Manufacturer: syz [ 558.616767][T13830] usb 5-1: config 0 descriptor?? [ 558.848394][T16180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.867890][T16180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.936134][ T5920] usb 5-1: USB disconnect, device number 5 [ 559.315861][ T5903] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 559.446574][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 559.459952][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 559.469816][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 559.480786][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 559.496253][ T5903] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 559.514320][ T9] usb 4-1: USB disconnect, device number 65 [ 559.539436][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 559.562708][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.584760][ T5903] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.605280][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.622229][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.849643][ T5903] usb 2-1: GET_CAPABILITIES returned 0 [ 559.862298][ T5903] usbtmc 2-1:16.0: can't read capabilities [ 560.059699][ T5903] usb 2-1: USB disconnect, device number 19 [ 560.115596][T16223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.135378][T16214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.302801][T16232] netlink: 'syz.3.3266': attribute type 2 has an invalid length. [ 560.318173][T16232] netlink: 'syz.3.3266': attribute type 2 has an invalid length. [ 560.509663][T16238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3268'. [ 560.599250][T16240] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 560.607527][T16240] VFS: Can't find a romfs filesystem on dev rnullb0. [ 560.607527][T16240] [ 560.629117][T16242] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 560.654064][T16242] VFS: Can't find a romfs filesystem on dev rnullb0. [ 560.654064][T16242] [ 560.734579][T16246] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 560.840507][T16251] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3273'. [ 560.851394][T16251] netlink: 'syz.4.3273': attribute type 1 has an invalid length. [ 560.866866][T16251] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3273'. [ 560.957494][T16257] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 560.974246][ T5921] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 561.014542][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'. [ 561.122276][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 561.148594][ T5921] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 561.169178][ T5921] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 561.178931][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.187098][ T5921] usb 4-1: Product: syz [ 561.191724][ T5921] usb 4-1: Manufacturer: syz [ 561.196929][ T5921] usb 4-1: SerialNumber: syz [ 561.209470][ T5921] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 561.403512][ T5839] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 561.569902][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 561.581532][ T5839] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 561.589661][ T5839] usb 2-1: can't read configurations, error -71 [ 562.227790][ T5921] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 562.433657][ T5839] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 562.603486][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 562.610130][ T5839] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.628610][ T5839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 562.639691][ T5839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 562.649693][ T5839] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.662937][ T5839] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 562.672236][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.750688][T16282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.766326][T16282] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 562.775927][T16282] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 562.806252][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.812560][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.897753][ T5839] usb 2-1: GET_CAPABILITIES returned 0 [ 562.903287][ T5839] usbtmc 2-1:16.0: can't read capabilities [ 562.956694][T16287] XFS (rnullb0): Invalid superblock magic number [ 563.102549][ T5921] usb 2-1: USB disconnect, device number 21 [ 563.375435][T16304] netlink: 'syz.2.3286': attribute type 2 has an invalid length. [ 563.423417][T13830] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 563.444762][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 563.492162][T16309] binder: Unknown parameter 'euid' [ 563.530213][T16311] delete_channel: no stack [ 563.535370][T16311] delete_channel: no stack [ 563.585330][T13830] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 563.597661][T13830] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 563.609269][T13830] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 563.621432][T13830] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 563.630905][T13830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.652221][T16299] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 563.842389][ T5903] usb 4-1: USB disconnect, device number 66 [ 563.870124][T16297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.898500][T16297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.928701][T13830] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 563.960913][T13830] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input57 [ 564.016463][T13830] usb 5-1: USB disconnect, device number 6 [ 564.022339][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 564.350808][T16332] /dev/rnullb0: Can't open blockdev [ 564.583371][T13830] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 564.653372][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 564.653389][ T30] audit: type=1326 audit(2000000466.710:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="syz.1.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 564.685868][ T30] audit: type=1326 audit(2000000466.710:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="syz.1.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 564.728803][ T30] audit: type=1326 audit(2000000466.710:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="syz.1.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 564.752249][ T30] audit: type=1326 audit(2000000466.710:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 564.777635][T13830] usb 5-1: config 0 has no interfaces? [ 564.789903][T13830] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 564.803400][ T30] audit: type=1326 audit(2000000466.710:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 564.811178][T16340] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 564.827028][T13830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 564.843704][T16340] VFS: Can't find a romfs filesystem on dev rnullb0. [ 564.843704][T16340] [ 564.846341][T13830] usb 5-1: SerialNumber: syz [ 564.860059][ T30] audit: type=1326 audit(2000000466.710:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 564.891711][T13830] usb 5-1: config 0 descriptor?? [ 564.901469][ T30] audit: type=1326 audit(2000000466.710:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 564.925851][ T30] audit: type=1326 audit(2000000466.710:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 564.951870][ T30] audit: type=1326 audit(2000000466.710:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 564.983054][ T30] audit: type=1326 audit(2000000466.710:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x7ffc0000 [ 565.036402][T16347] netlink: 'syz.3.3303': attribute type 7 has an invalid length. [ 565.044234][T16347] netlink: 'syz.3.3303': attribute type 1 has an invalid length. [ 565.051945][T16347] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3303'. [ 565.128259][T16070] usb 5-1: USB disconnect, device number 7 [ 565.178517][T16352] hpfs: Bad magic ... probably not HPFS [ 565.373280][T13830] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 565.543475][T13830] usb 4-1: Using ep0 maxpacket: 32 [ 565.550612][T13830] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 565.559524][T13830] usb 4-1: config 0 has no interface number 0 [ 565.571240][T13830] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37 [ 565.582472][T13830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.595798][T13830] usb 4-1: Product: syz [ 565.600627][T13830] usb 4-1: Manufacturer: syz [ 565.606405][T13830] usb 4-1: SerialNumber: syz [ 565.617259][T13830] usb 4-1: config 0 descriptor?? [ 565.628047][T13830] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 565.638590][T13830] command write [95] error -22 [ 565.827900][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3303'. [ 565.861788][T16369] Can't find a SQUASHFS superblock on rnullb0 [ 565.876638][ T9] usb 4-1: USB disconnect, device number 67 [ 566.136253][T16383] /dev/rnullb0: Can't open blockdev [ 566.275853][ T5921] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 566.413312][ T5921] usb 5-1: device descriptor read/64, error -71 [ 566.468464][T16399] /dev/rnullb0: Can't open blockdev [ 566.623367][ T5903] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 566.663234][ T5921] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 566.791087][ T5903] usb 2-1: config 0 has no interfaces? [ 566.798445][ T5903] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 566.807774][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 566.815893][ T5903] usb 2-1: SerialNumber: syz [ 566.825785][ T5921] usb 5-1: device descriptor read/64, error -71 [ 566.826187][ T5903] usb 2-1: config 0 descriptor?? [ 566.888606][T16411] /dev/rnullb0: Can't open blockdev [ 566.943404][ T5921] usb usb5-port1: attempt power cycle [ 566.979206][T16415] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 566.989240][T16415] fuseblk: Bad value for 'fd' [ 567.066475][ T5903] usb 2-1: USB disconnect, device number 22 [ 567.284730][ T5921] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 567.303871][ T5921] usb 5-1: device descriptor read/8, error -71 [ 567.313347][ T5839] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 567.474905][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 567.484668][ T5839] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 567.492768][ T5839] usb 4-1: config 0 has no interface number 0 [ 567.503455][ T5839] usb 4-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 567.519659][ T5839] usb 4-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 567.533018][ T5839] usb 4-1: config 0 interface 49 has no altsetting 0 [ 567.549987][ T5839] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 567.559810][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.570888][ T5839] usb 4-1: Product: syz [ 567.575143][ T5921] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 567.583112][ T5839] usb 4-1: Manufacturer: syz [ 567.587877][ T5839] usb 4-1: SerialNumber: syz [ 567.599510][ T5839] usb 4-1: config 0 descriptor?? [ 567.605746][ T5921] usb 5-1: device descriptor read/8, error -71 [ 567.727194][ T5921] usb usb5-port1: unable to enumerate USB device [ 567.818126][T16417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.827034][T16417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.852798][ T5839] RobotFuzz Open Source InterFace, OSIF 4-1:0.49: failure sending bit rate [ 567.862971][ T5839] RobotFuzz Open Source InterFace, OSIF 4-1:0.49: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 567.882515][ T5839] usb 4-1: USB disconnect, device number 68 [ 568.016134][T16433] /dev/rnullb0: Can't open blockdev [ 568.023268][ T5903] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 568.183290][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 568.192357][ T5903] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.200565][ T5903] usb 2-1: config 0 has no interface number 0 [ 568.210571][ T5903] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 568.220733][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.229022][ T5903] usb 2-1: Product: syz [ 568.233633][ T5903] usb 2-1: Manufacturer: syz [ 568.238246][ T5903] usb 2-1: SerialNumber: syz [ 568.246383][ T5903] usb 2-1: config 0 descriptor?? [ 568.264981][ T5903] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 568.873251][ T5833] Bluetooth: hci0: command tx timeout [ 569.316183][T16461] binder: 16460:16461 ioctl 2284 0 returned -22 [ 569.665956][T16430] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 569.674546][T16430] syz.1.3332: attempt to access beyond end of device [ 569.674546][T16430] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 569.687472][ T5921] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 569.697005][ T5903] gspca_spca1528: reg_w err -71 [ 569.706128][ T5903] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 569.719991][ T5903] usb 2-1: USB disconnect, device number 23 [ 569.843127][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 569.851268][ T5921] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 569.859625][ T5921] usb 5-1: config 0 has no interface number 0 [ 569.866022][ T5921] usb 5-1: too many endpoints for config 0 interface 85 altsetting 48: 222, using maximum allowed: 30 [ 569.877138][ T5921] usb 5-1: config 0 interface 85 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 222 [ 569.890443][ T5921] usb 5-1: config 0 interface 85 has no altsetting 0 [ 569.897868][ T5921] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.1f [ 569.907020][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.917055][ T5921] usb 5-1: config 0 descriptor?? [ 570.157451][T16466] NILFS (rnullb0): couldn't find nilfs on the device [ 570.177221][ T5921] usb 5-1: string descriptor 0 read error: -71 [ 570.191088][ T5921] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 570.207189][ T5921] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 570.216084][ T5921] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 570.586689][ T5839] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 570.605595][ T5903] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 570.723133][ T5839] usb 2-1: device descriptor read/64, error -71 [ 570.773224][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 570.783358][ T5903] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.803027][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 570.812782][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.824539][ T5903] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.837949][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 570.837964][ T30] audit: type=1326 audit(2000000472.890:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.4.3350" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cbd58e929 code=0x0 [ 570.866383][ T5903] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.876127][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.003046][ T5839] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 571.090526][ T5903] usb 4-1: GET_CAPABILITIES returned 0 [ 571.098133][ T5903] usbtmc 4-1:16.0: can't read capabilities [ 571.152999][ T5839] usb 2-1: device descriptor read/64, error -71 [ 571.273171][ T5839] usb usb2-port1: attempt power cycle [ 571.300103][ T5903] usb 4-1: USB disconnect, device number 69 [ 571.612935][ T5839] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 571.646768][ T5839] usb 2-1: device descriptor read/8, error -71 [ 571.862791][T16488] /dev/rnullb0: Can't open blockdev [ 571.879226][T16486] /dev/rnullb0: Can't open blockdev [ 571.912940][ T5839] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 571.933614][ T5839] usb 2-1: device descriptor read/8, error -71 [ 571.987467][T16492] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3355'. [ 572.009247][T16492] /dev/rnullb0: Can't open blockdev [ 572.050141][ T5839] usb usb2-port1: unable to enumerate USB device [ 572.112627][T16500] ./cgroup: Can't lookup blockdev [ 572.167752][T16503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3357'. [ 572.292547][T16509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3360'. [ 572.302008][T16508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3360'. [ 572.311517][T16509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3360'. [ 572.582978][ T5839] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 572.756150][ T5839] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.767536][ T5839] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 572.780366][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 572.787220][ T5839] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 572.796350][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.806321][ T5839] usb 4-1: config 0 descriptor?? [ 573.423425][ T5839] usbhid 4-1:0.0: can't add hid device: -71 [ 573.429644][ T5839] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 573.456573][ T5839] usb 4-1: USB disconnect, device number 70 [ 574.203015][ T5903] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 574.363203][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 574.370167][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.384811][T16520] /dev/rnullb0: Can't open blockdev [ 574.394595][ T5903] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 574.408259][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.416591][ T5903] usb 4-1: Product: syz [ 574.420823][ T5903] usb 4-1: Manufacturer: syz [ 574.431510][ T5903] usb 4-1: SerialNumber: syz [ 574.441662][ T5903] usb 4-1: config 0 descriptor?? [ 574.454630][ T5903] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 574.639187][T16529] /dev/rnullb0: Can't open blockdev [ 574.653210][T16518] /dev/rnullb0: Can't open blockdev [ 574.660565][T16530] /dev/rnullb0: Can't open blockdev [ 574.668647][ T9] usb 4-1: USB disconnect, device number 71 [ 574.882127][T16532] kvm: pic: non byte write [ 574.888767][T16532] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 574.901828][T16532] kvm: pic: non byte write [ 574.907288][T16532] /dev/rnullb0: Can't open blockdev [ 575.017970][T16536] /dev/rnullb0: Can't open blockdev [ 575.271538][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3372'. [ 575.286928][T16542] /dev/rnullb0: Can't open blockdev [ 575.682893][T15608] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 575.772937][ T5920] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 575.832906][T15608] usb 4-1: Using ep0 maxpacket: 8 [ 575.839660][T15608] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 575.850078][T15608] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 575.860211][T15608] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 575.871726][T15608] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.887483][T15608] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.907615][T15608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.967432][ T5920] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 575.976698][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.985080][ T5920] usb 2-1: Product: syz [ 575.989247][ T5920] usb 2-1: Manufacturer: syz [ 575.997370][ T5920] usb 2-1: SerialNumber: syz [ 576.006734][ T5920] usb 2-1: config 0 descriptor?? [ 576.015080][ T5920] ch341 2-1:0.0: ch341-uart converter detected [ 576.124957][T15608] usb 4-1: GET_CAPABILITIES returned 0 [ 576.136787][T15608] usbtmc 4-1:16.0: can't read capabilities [ 576.340274][T15608] usb 4-1: USB disconnect, device number 72 [ 576.712409][ T5920] usb 2-1: failed to send control message: -71 [ 576.719231][ T5920] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 576.743153][ T5920] usb 2-1: USB disconnect, device number 29 [ 576.766416][ T5920] ch341 2-1:0.0: device disconnected [ 576.877834][T16580] omfs: Invalid superblock (0) [ 576.885134][T16581] omfs: Invalid superblock (0) [ 577.000489][T16590] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 577.006381][T16593] netlink: 'syz.3.3387': attribute type 64 has an invalid length. [ 577.008201][T16590] UDF-fs: Scanning with blocksize 4096 failed [ 577.030522][T16593] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 577.046678][T16593] omfs: Invalid superblock (0) [ 577.642760][T16620] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 577.651376][T16620] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 578.102939][ T5839] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 578.233199][ T5839] usb 4-1: device descriptor read/64, error -71 [ 578.259130][T16642] vxfs: WRONG superblock magic 00000000 at 1 [ 578.265917][T16642] vxfs: WRONG superblock magic 00000000 at 8 [ 578.271890][T16642] vxfs: can't find superblock. [ 578.473199][ T5839] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 578.548719][T16649] could not allocate digest TFM handle vmac(khazad) [ 578.613329][ T5839] usb 4-1: device descriptor read/64, error -71 [ 578.734625][ T5839] usb usb4-port1: attempt power cycle [ 578.823034][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 578.953020][ T9] usb 2-1: device descriptor read/64, error -71 [ 579.072964][ T5839] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 579.093599][ T5839] usb 4-1: device descriptor read/8, error -71 [ 579.193200][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 579.322945][ T9] usb 2-1: device descriptor read/64, error -71 [ 579.343000][ T5839] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 579.366409][ T5839] usb 4-1: device descriptor read/8, error -71 [ 579.433461][ T9] usb usb2-port1: attempt power cycle [ 579.474330][ T5839] usb usb4-port1: unable to enumerate USB device [ 579.772911][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 579.793667][ T9] usb 2-1: device descriptor read/8, error -71 [ 580.032963][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 580.055327][ T9] usb 2-1: device descriptor read/8, error -71 [ 580.163630][ T9] usb usb2-port1: unable to enumerate USB device [ 581.281998][ T30] audit: type=1326 audit(2000000009.129:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16665 comm="syz.2.3414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f829678e929 code=0x0 [ 581.305023][ T30] audit: type=1326 audit(2000000009.139:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16665 comm="syz.2.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829678e929 code=0x7fc00000 [ 581.593018][ T5903] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 581.614480][T16690] XFS (rnullb0): Invalid superblock magic number [ 581.716030][T16699] bridge0: port 3(veth0_to_batadv) entered blocking state [ 581.731871][T16699] bridge0: port 3(veth0_to_batadv) entered disabled state [ 581.739330][T16699] veth0_to_batadv: entered allmulticast mode [ 581.743591][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 581.748615][T16699] veth0_to_batadv: entered promiscuous mode [ 581.756830][ T5903] usb 4-1: config 1 interface 0 has no altsetting 0 [ 581.758211][T16699] bridge0: port 3(veth0_to_batadv) entered blocking state [ 581.765592][ T5903] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.40 [ 581.770872][T16699] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 581.784702][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.795188][ T5903] usb 4-1: Product: syz [ 581.799353][ T5903] usb 4-1: Manufacturer: syz [ 581.804101][ T5903] usb 4-1: SerialNumber: syz [ 581.917891][T16704] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3424'. [ 581.935748][T16704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3424'. [ 581.946298][T16704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3424'. [ 581.955405][T16704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3424'. [ 581.964828][T16704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3424'. [ 582.057941][T16707] /dev/rnullb0: Can't open blockdev [ 582.285502][ T5903] usbhid 4-1:1.0: can't add hid device: -71 [ 582.292451][ T5903] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 582.309362][ T5903] usb 4-1: USB disconnect, device number 77 [ 583.083080][T15608] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 583.228020][ T30] audit: type=1326 audit(2000000011.109:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.1.3440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa10698e929 code=0x0 [ 583.262899][T15608] usb 4-1: Using ep0 maxpacket: 8 [ 583.269575][T15608] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 583.282263][T15608] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 583.292280][T15608] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 583.302350][T15608] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.315745][T15608] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 583.325711][T15608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.340165][T16761] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 583.351052][T16761] UDF-fs: Scanning with blocksize 4096 failed [ 583.584262][T15608] usb 4-1: GET_CAPABILITIES returned 0 [ 583.589754][T15608] usbtmc 4-1:16.0: can't read capabilities [ 583.800003][T16732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.810027][T16732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.164554][T16766] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3442'. [ 584.176051][T16766] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 584.183927][T16766] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3442'. [ 584.689150][T16777] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 585.411287][T16790] /dev/rnullb0: Can't open blockdev [ 585.845827][T15608] usb 4-1: USB disconnect, device number 78 [ 587.292952][T16070] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 587.457811][T16070] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 587.485581][T16070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.517317][T16070] usb 2-1: config 0 descriptor?? [ 587.531290][T16070] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 587.550655][T16070] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 587.580523][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 587.591060][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 587.601343][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 587.610993][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 587.619100][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.748486][T16847] evm: overlay not supported [ 587.799725][T16855] chnl_net:caif_netlink_parms(): no params data found [ 587.819199][T15608] usb 2-1: USB disconnect, device number 34 [ 587.829766][T15608] ftdi_sio 2-1:0.0: device disconnected [ 587.895892][T16855] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.903332][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.910439][T16855] bridge_slave_0: entered allmulticast mode [ 587.918585][T16855] bridge_slave_0: entered promiscuous mode [ 587.927127][T16855] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.934818][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.941918][T16855] bridge_slave_1: entered allmulticast mode [ 587.949594][T16855] bridge_slave_1: entered promiscuous mode [ 587.983841][T16855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.996826][T16855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.030837][T16855] team0: Port device team_slave_0 added [ 588.038743][T16855] team0: Port device team_slave_1 added [ 588.067442][T16855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.075608][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.102121][T16855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.114674][T16855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.121917][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.147913][T16855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.191599][T16855] hsr_slave_0: entered promiscuous mode [ 588.198053][T16855] hsr_slave_1: entered promiscuous mode [ 588.204336][T16855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.211882][T16855] Cannot create hsr debugfs directory [ 588.387210][T16855] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 588.400930][T16855] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 588.416499][T16855] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 588.436423][T16855] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 588.452006][T16866] gfs2: not a GFS2 filesystem [ 588.495705][T16855] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.503576][T16855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.511664][T16855] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.518849][T16855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.521900][T16874] omfs: Invalid superblock (0) [ 588.613296][T16855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.642741][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.651133][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.671336][T16855] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.688964][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.696167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.718045][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.725270][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.020752][T16855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.415071][T16855] veth0_vlan: entered promiscuous mode [ 589.436428][T16855] veth1_vlan: entered promiscuous mode [ 589.492572][T16855] veth0_macvtap: entered promiscuous mode [ 589.518332][T16855] veth1_macvtap: entered promiscuous mode [ 589.555718][T16855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.570461][T16855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.611704][ T1125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.621970][ T1125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.642601][ T1125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.657668][ T1125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.669388][T16905] /dev/rnullb0: Can't open blockdev [ 589.676462][ T5833] Bluetooth: hci2: command tx timeout [ 589.780753][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.803939][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.831110][T16907] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3477'. [ 589.854048][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3477'. [ 589.879786][T16912] /dev/rnullb0: Can't open blockdev [ 589.887190][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.896061][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.914580][T16912] /dev/rnullb0: Can't open blockdev [ 589.920323][T16912] /dev/rnullb0: Can't open blockdev [ 589.927083][T16912] /dev/rnullb0: Can't open blockdev [ 589.942088][T16912] /dev/rnullb0: Can't open blockdev [ 589.948086][T16912] /dev/rnullb0: Can't open blockdev [ 589.957758][T16912] /dev/rnullb0: Can't open blockdev [ 589.980623][T16912] /dev/rnullb0: Can't open blockdev [ 590.006703][T16912] /dev/rnullb0: Can't open blockdev [ 590.012678][T16912] /dev/rnullb0: Can't open blockdev [ 590.053774][T16912] /dev/rnullb0: Can't open blockdev [ 590.059745][T16912] /dev/rnullb0: Can't open blockdev [ 590.088958][T16912] /dev/rnullb0: Can't open blockdev [ 590.099123][T16917] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 590.099789][T16912] /dev/rnullb0: Can't open blockdev [ 590.164690][T16912] /dev/rnullb0: Can't open blockdev [ 590.171183][T16912] /dev/rnullb0: Can't open blockdev [ 590.194932][T16912] /dev/rnullb0: Can't open blockdev [ 590.202082][T16912] /dev/rnullb0: Can't open blockdev [ 590.208933][T16912] /dev/rnullb0: Can't open blockdev [ 590.231141][T16912] /dev/rnullb0: Can't open blockdev [ 590.238824][T16912] /dev/rnullb0: Can't open blockdev [ 590.251513][T16912] /dev/rnullb0: Can't open blockdev [ 590.301138][T16912] /dev/rnullb0: Can't open blockdev [ 590.311350][T16912] /dev/rnullb0: Can't open blockdev [ 590.318491][T16912] /dev/rnullb0: Can't open blockdev [ 590.322953][ T5920] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 590.325123][T16912] /dev/rnullb0: Can't open blockdev [ 590.339338][T16912] /dev/rnullb0: Can't open blockdev [ 590.347880][T16912] /dev/rnullb0: Can't open blockdev [ 590.372021][T16912] /dev/rnullb0: Can't open blockdev [ 590.399871][T16912] /dev/rnullb0: Can't open blockdev [ 590.405962][T16912] /dev/rnullb0: Can't open blockdev [ 590.422145][T16912] /dev/rnullb0: Can't open blockdev [ 590.442370][T16912] /dev/rnullb0: Can't open blockdev [ 590.509657][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 590.525834][ T5920] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 590.538026][ T5920] usb 6-1: config 0 has no interface number 0 [ 590.550127][ T5920] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 590.597216][ T5920] usb 6-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 590.606859][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.607875][T16932] syzkaller1: left promiscuous mode [ 590.627424][ T5920] usb 6-1: config 0 descriptor?? [ 590.657735][T16932] syzkaller1: left allmulticast mode [ 590.754122][T16938] /dev/rnullb0: Can't open blockdev [ 590.839840][ T5920] usb 6-1: USB disconnect, device number 2 [ 590.851997][T16940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3487'. [ 591.041202][T16945] program syz.3.3489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.193100][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 591.292951][ T5920] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 591.343017][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 591.349606][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 591.358705][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 591.368093][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.378527][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.389882][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.412994][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.420999][ T9] usb 2-1: Product: 뽯钫䇪㾿錼ụ쥱킾劑焜扩쬕鎱煬᪴ㅛ봛⩟췖㦊➦趚鼲椴㾎黳㑾檋 [ 591.449252][ T9] usb 2-1: Manufacturer: 濔郂쉭ᝥꧻ헔᫽跲股㰢唃㨤럠赽倊臩횮ᤱ㋻ꂴ㴊喳藹 [ 591.460053][ T9] usb 2-1: SerialNumber: ш [ 591.467229][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 591.478049][ T5920] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.495294][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 591.510264][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 591.526834][ T5920] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.539898][ T5920] usb 4-1: New USB device found, idVendor=ce8d, idProduct=db1a, bcdDevice=61.23 [ 591.574135][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.738027][T16962] Mount JFS Failure: -22 [ 591.747021][T16963] Mount JFS Failure: -22 [ 591.753401][ T5154] Bluetooth: hci2: command tx timeout [ 591.812403][ T5920] usb 4-1: GET_CAPABILITIES returned 0 [ 591.822135][ T5920] usbtmc 4-1:16.0: can't read capabilities [ 591.916039][ T9] usb 2-1: 0:2 : does not exist [ 591.938011][T16967] Mount JFS Failure: -22 [ 591.942565][ T9] usb 2-1: USB disconnect, device number 35 [ 591.968674][T15902] udevd[15902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.026539][T16943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.044446][T16943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.056599][T16943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.072682][T16943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.083414][ T5920] usb 4-1: USB disconnect, device number 79 [ 592.353007][T14999] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 592.505009][T14999] usb 6-1: unable to get BOS descriptor or descriptor too short [ 592.517586][T14999] usb 6-1: config 9 has an invalid interface number: 73 but max is 0 [ 592.528861][T14999] usb 6-1: config 9 has no interface number 0 [ 592.536263][T14999] usb 6-1: config 9 interface 73 has no altsetting 0 [ 592.545311][T14999] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=6b.f1 [ 592.561480][T14999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.569838][T14999] usb 6-1: Product: syz [ 592.574084][T14999] usb 6-1: Manufacturer: syz [ 592.578676][T14999] usb 6-1: SerialNumber: syz [ 592.781712][T16994] qnx4: no qnx4 filesystem (no root dir). [ 593.019648][T17007] netlink: 'syz.3.3508': attribute type 1 has an invalid length. [ 593.027956][T17007] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3508'. [ 593.726903][T17017] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3512'. [ 593.738550][T17017] Can't find a SQUASHFS superblock on rnullb0 [ 593.833107][ T5154] Bluetooth: hci2: command tx timeout [ 594.326249][T17037] FAT-fs (rnullb0): bogus number of reserved sectors [ 594.333181][T17037] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 594.672918][T15608] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 594.823412][T16070] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 594.832964][T15608] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 594.842033][T15608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.852654][T15608] usb 2-1: config 0 descriptor?? [ 594.953448][T16070] usb 4-1: device descriptor read/64, error -71 [ 595.062697][T14999] gspca_main: t613-2.14.0 probing 17a1:0128 [ 595.069025][T15608] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 595.081414][T14999] gspca_t613: unknown sensor 0000 [ 595.093620][T14999] t613 6-1:9.73: probe with driver t613 failed with error -22 [ 595.114519][T14999] usb 6-1: USB disconnect, device number 3 [ 595.126434][T15608] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 595.140551][T15608] [drm] Initialized udl on minor 2 [ 595.203487][T16070] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 595.291248][T15608] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 595.303863][T15608] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 595.342954][T16070] usb 4-1: device descriptor read/64, error -71 [ 595.343246][T17055] overlay: ./file0 is not a directory [ 595.362602][T17055] ./file0: Can't lookup blockdev [ 595.453374][T16070] usb usb4-port1: attempt power cycle [ 595.498927][ T5839] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 595.500108][ T9] usb 2-1: USB disconnect, device number 36 [ 595.513984][ T5839] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 595.652915][T13830] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 595.793006][T16070] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 595.803507][T13830] usb 6-1: Using ep0 maxpacket: 8 [ 595.809828][T13830] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.821940][T13830] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 595.823617][T16070] usb 4-1: device descriptor read/8, error -71 [ 595.831912][T13830] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.847950][T13830] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.860980][T13830] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.870026][T13830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.914404][ T5154] Bluetooth: hci2: command tx timeout [ 596.075411][T16070] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 596.085916][T13830] usb 6-1: GET_CAPABILITIES returned 0 [ 596.091494][T13830] usbtmc 6-1:16.0: can't read capabilities [ 596.107715][T16070] usb 4-1: device descriptor read/8, error -71 [ 596.223137][T16070] usb usb4-port1: unable to enumerate USB device [ 596.275931][ T5839] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 596.346312][ T9] usb 6-1: USB disconnect, device number 4 [ 596.436461][ T5839] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 596.445544][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.453570][ T5839] usb 2-1: Product: syz [ 596.457723][ T5839] usb 2-1: Manufacturer: syz [ 596.462291][ T5839] usb 2-1: SerialNumber: syz [ 596.469036][ T5839] usb 2-1: config 0 descriptor?? [ 596.695544][ T5839] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 596.711560][ T5839] asix 2-1:0.0: probe with driver asix failed with error -71 [ 596.734236][ T5839] usb 2-1: USB disconnect, device number 37 [ 596.901424][T17072] netlink: 'syz.2.3526': attribute type 11 has an invalid length. [ 596.919019][T17074] omfs: Invalid superblock (0) [ 596.961801][T17077] hpfs: Bad magic ... probably not HPFS [ 596.969812][T17076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3526'. [ 596.998511][T17072] Mount JFS Failure: -22 [ 597.023225][T17079] tipc: Can't bind to reserved service type 1 [ 597.954298][ T9] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 598.087671][T17120] /dev/rnullb0: Can't open blockdev [ 598.103296][ T9] usb 4-1: device descriptor read/64, error -71 [ 598.206092][T17128] kAFS: Can only specify source 'none' with -o dyn [ 598.354639][ T9] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 598.512935][ T9] usb 4-1: device descriptor read/64, error -71 [ 598.626003][ T9] usb usb4-port1: attempt power cycle [ 598.919624][T17148] program syz.5.3550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.064263][ T9] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 599.114398][ T9] usb 4-1: device descriptor read/8, error -71 [ 599.181942][T17151] /dev/rnullb0: Can't open blockdev [ 599.352908][ T9] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 599.373756][ T9] usb 4-1: device descriptor read/8, error -71 [ 599.484743][ T9] usb usb4-port1: unable to enumerate USB device [ 599.498201][T17155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.579961][T17158] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 599.587636][T17158] UDF-fs: Scanning with blocksize 4096 failed [ 599.602940][ T5903] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 599.742982][ T5903] usb 6-1: device descriptor read/64, error -71 [ 599.982932][ T5903] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 600.123123][ T5903] usb 6-1: device descriptor read/64, error -71 [ 600.243164][ T5903] usb usb6-port1: attempt power cycle [ 600.477872][T17167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 600.583045][ T5903] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 600.623278][ T5903] usb 6-1: device descriptor read/8, error -71 [ 600.725394][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'. [ 600.878512][ T5903] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 600.913637][ T5903] usb 6-1: device descriptor read/8, error -71 [ 601.043397][ T5903] usb usb6-port1: unable to enumerate USB device [ 601.143019][T13830] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 601.304394][T13830] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 601.314699][T13830] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 601.326447][T13830] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 601.337611][T13830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 601.348665][T13830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 601.361427][T13830] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 601.370518][T13830] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 601.378576][T13830] usb 2-1: Product: syz [ 601.382729][T13830] usb 2-1: Manufacturer: syz [ 601.393790][T13830] cdc_wdm 2-1:1.0: skipping garbage [ 601.399009][T13830] cdc_wdm 2-1:1.0: skipping garbage [ 601.406212][T13830] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 601.412110][T13830] cdc_wdm 2-1:1.0: Unknown control protocol [ 601.452941][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 601.604665][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.615624][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.625694][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 601.634820][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.647606][ T9] usb 4-1: config 0 descriptor?? [ 602.069131][ T9] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 602.132906][ T9] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected [ 602.173514][ T9] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 602.267125][T17191] /dev/sg0: Can't lookup blockdev [ 602.274482][ T9] usb 4-1: USB disconnect, device number 88 [ 602.317071][ T9] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected [ 602.732898][ T5903] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 602.915014][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.925538][ T5903] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 602.942874][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.957487][ T5903] usb 6-1: config 0 descriptor?? [ 602.972142][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 603.085226][ T5839] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 603.167690][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 603.176163][ T5903] pwc: recv_control_msg error -32 req 02 val 2700 [ 603.200217][ T5903] pwc: recv_control_msg error -71 req 02 val 2c00 [ 603.212742][ T5903] pwc: recv_control_msg error -71 req 04 val 1000 [ 603.221269][ T5903] pwc: recv_control_msg error -71 req 04 val 1300 [ 603.223041][ T5839] usb 4-1: device descriptor read/64, error -71 [ 603.229162][ T5903] pwc: recv_control_msg error -71 req 04 val 1400 [ 603.241182][ T5903] pwc: recv_control_msg error -71 req 02 val 2000 [ 603.261382][ T5903] pwc: recv_control_msg error -71 req 02 val 2100 [ 603.284456][ T5903] pwc: recv_control_msg error -71 req 04 val 1500 [ 603.295804][ T5903] pwc: recv_control_msg error -71 req 02 val 2500 [ 603.303240][ T5903] pwc: recv_control_msg error -71 req 02 val 2400 [ 603.303998][T17212] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.3569'. [ 603.310111][ T5903] pwc: recv_control_msg error -71 req 02 val 2600 [ 603.326324][ T5903] pwc: recv_control_msg error -71 req 02 val 2900 [ 603.333866][ T5903] pwc: recv_control_msg error -71 req 02 val 2800 [ 603.341021][ T5903] pwc: recv_control_msg error -71 req 04 val 1100 [ 603.353313][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 603.370720][ T5903] pwc: Registered as video103. [ 603.395523][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input59 [ 603.455633][ T5903] usb 6-1: USB disconnect, device number 9 [ 603.473056][ T5839] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 603.565169][T17219] FAT-fs (rnullb0): bogus number of reserved sectors [ 603.571930][T17219] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 603.579654][T17218] FAT-fs (rnullb0): bogus number of reserved sectors [ 603.589392][T17218] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 603.613011][ T5839] usb 4-1: device descriptor read/64, error -71 [ 603.689032][T17221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3572'. [ 603.733287][ T5839] usb usb4-port1: attempt power cycle [ 603.879336][ T5903] usb 2-1: USB disconnect, device number 38 [ 604.073537][ T5839] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 604.103733][ T5839] usb 4-1: device descriptor read/8, error -71 [ 604.353197][T15608] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 604.360861][ T5839] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 604.398422][ T5839] usb 4-1: device descriptor read/8, error -71 [ 604.513495][ T5839] usb usb4-port1: unable to enumerate USB device [ 604.532948][T15608] usb 2-1: Using ep0 maxpacket: 16 [ 604.539541][T15608] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 604.547799][T15608] usb 2-1: config 0 has no interface number 0 [ 604.556374][T15608] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 604.565769][T15608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.574498][T15608] usb 2-1: Product: syz [ 604.578677][T15608] usb 2-1: Manufacturer: syz [ 604.583341][T15608] usb 2-1: SerialNumber: syz [ 604.589944][T15608] usb 2-1: config 0 descriptor?? [ 604.598137][T15608] asix 2-1:0.251: probe with driver asix failed with error -22 [ 604.800036][ T5903] usb 2-1: USB disconnect, device number 39 [ 605.251665][T17247] ISOFS: unsupported/invalid hardware sector size 4096 [ 605.482599][T17260] hpfs: Bad magic ... probably not HPFS [ 605.692967][T14999] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 605.845148][T14999] usb 2-1: device descriptor read/64, error -71 [ 605.886497][ T30] audit: type=1400 audit(2000000033.769:4263): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="N" pid=17280 comm="syz.3.3589" [ 606.083055][T14999] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 606.117221][T17292] /dev/rnullb0: Can't open blockdev [ 606.222896][T14999] usb 2-1: device descriptor read/64, error -71 [ 606.270531][ T5154] Bluetooth: hci2: Invalid connection link type handle 0x00c8 [ 606.324521][T17303] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 606.336454][T14999] usb usb2-port1: attempt power cycle [ 606.683076][T14999] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 606.714004][T14999] usb 2-1: device descriptor read/8, error -71 [ 606.953051][T14999] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 606.974237][T14999] usb 2-1: device descriptor read/8, error -71 [ 607.052355][T17311] exFAT-fs (nullb0): invalid boot record signature [ 607.060601][T17311] exFAT-fs (nullb0): failed to read boot sector [ 607.069327][T17311] exFAT-fs (nullb0): failed to recognize exfat type [ 607.083201][T14999] usb usb2-port1: unable to enumerate USB device [ 607.172960][ T5839] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 607.322879][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 607.329375][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 607.339745][ T5839] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 607.349439][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 607.361041][ T5839] usb 6-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 607.370241][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.372991][ T5920] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 607.378656][ T5839] usb 6-1: Product: syz [ 607.390165][ T5839] usb 6-1: Manufacturer: syz [ 607.394794][ T5839] usb 6-1: SerialNumber: syz [ 607.401665][ T5839] usb 6-1: config 0 descriptor?? [ 607.408894][ T5839] redrat3 6-1:0.0: Couldn't find all endpoints [ 607.543060][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 607.549573][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.559808][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 607.574115][ T5920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.584658][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 607.592641][ T5920] usb 4-1: SerialNumber: syz [ 607.607185][ T5920] cdc_acm 4-1:1.0: skipping garbage [ 607.748186][ T5920] usb 6-1: USB disconnect, device number 10 [ 607.811131][T14999] usb 4-1: USB disconnect, device number 93 [ 609.393180][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 609.516043][T17362] 9pnet_fd: Insufficient options for proto=fd [ 609.525942][T17362] qnx4: no qnx4 filesystem (no root dir). [ 609.532934][ T9] usb 2-1: device descriptor read/64, error -71 [ 609.602586][T17366] netlink: 'syz.3.3616': attribute type 11 has an invalid length. [ 609.626974][T17366] exFAT-fs (rnullb0): invalid boot record signature [ 609.634226][T17366] exFAT-fs (rnullb0): failed to read boot sector [ 609.640641][T17366] exFAT-fs (rnullb0): failed to recognize exfat type [ 609.792896][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 609.794836][T17374] /dev/rnullb0: Can't open blockdev [ 609.932919][ T9] usb 2-1: device descriptor read/64, error -71 [ 609.968775][T17382] CUSE: zero length info key specified [ 609.972152][T17382] /dev/rnullb0: Can't open blockdev [ 610.043147][ T9] usb usb2-port1: attempt power cycle [ 610.382979][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 610.402955][ T5839] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 610.416958][ T9] usb 2-1: device descriptor read/8, error -71 [ 610.583343][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 610.593734][ T5839] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 610.601826][ T5839] usb 4-1: config 0 has no interface number 0 [ 610.629447][ T5839] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 610.653778][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.661791][ T5839] usb 4-1: Product: syz [ 610.663710][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 610.683182][ T5839] usb 4-1: Manufacturer: syz [ 610.687792][ T5839] usb 4-1: SerialNumber: syz [ 610.696259][ T9] usb 2-1: device descriptor read/8, error -71 [ 610.701285][ T5839] usb 4-1: config 0 descriptor?? [ 610.722075][ T5839] smsc95xx v2.0.0 [ 610.825840][T17419] /dev/rnullb0: Can't open blockdev [ 610.826888][ T9] usb usb2-port1: unable to enumerate USB device [ 610.889610][T17422] /dev/rnullb0: Can't open blockdev [ 611.127498][ T5839] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 611.231627][ T5839] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 611.368038][T17447] /dev/rnullb0: Can't open blockdev [ 611.665150][ T5839] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 611.679848][ T5839] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 611.695233][ T5839] usb 4-1: USB disconnect, device number 94 [ 612.100772][T17457] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 612.110538][T17457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 612.121767][T17457] overlayfs: failed to set uuid (52/file1, err=-13); falling back to uuid=null. [ 612.329668][T17469] netlink: 'syz.1.3634': attribute type 1 has an invalid length. [ 612.351198][T17469] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3634'. [ 612.377031][T17469] NCSI netlink: No device for ifindex 0 [ 612.657906][T17476] /dev/rnullb0: Can't open blockdev [ 612.810213][T17480] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 612.819077][T17478] fuseblk: Unknown parameter 'context' [ 612.831511][T17480] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 612.885248][T17480] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 612.892252][T17480] /dev/rnullb0: Can't open blockdev [ 613.162924][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 613.245701][T17500] Bluetooth: MGMT ver 1.23 [ 613.253921][T14999] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 613.324761][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 613.335096][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 613.344486][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 613.353936][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 613.362137][ T9] usb 2-1: Product: syz [ 613.366648][ T9] usb 2-1: Manufacturer: syz [ 613.371245][ T9] usb 2-1: SerialNumber: syz [ 613.378900][ T9] usb 2-1: config 0 descriptor?? [ 613.389406][ T9] usb 2-1: selecting invalid altsetting 0 [ 613.415754][T14999] usb 4-1: Using ep0 maxpacket: 16 [ 613.430017][T14999] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 613.440777][T14999] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.458875][T14999] usb 4-1: config 0 has no interface number 0 [ 613.469520][T14999] usb 4-1: config 0 interface 212 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 613.490886][T14999] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=39.2d [ 613.500564][T14999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.510646][T14999] usb 4-1: Product: syz [ 613.516281][T14999] usb 4-1: Manufacturer: syz [ 613.520894][T14999] usb 4-1: SerialNumber: syz [ 613.529200][T14999] usb 4-1: config 0 descriptor?? [ 613.538064][T14999] safe_serial 4-1:0.212: safe_serial converter detected [ 613.548144][T14999] safe_serial 4-1:0.212: probe with driver safe_serial failed with error -22 [ 613.587714][T17486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.596408][T17486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.605625][T14999] usb 2-1: USB disconnect, device number 48 [ 613.748757][T17492] /dev/rnullb0: Can't open blockdev [ 613.762267][ T9] usb 4-1: USB disconnect, device number 95 [ 614.017094][T17504] /dev/rnullb0: Can't open blockdev [ 614.430825][T17518] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 614.447531][T17518] trusted_key: encrypted_key: insufficient parameters specified [ 614.498894][T17521] /dev/rnullb0: Can't open blockdev [ 614.613506][T14999] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 614.763029][T14999] usb 4-1: Using ep0 maxpacket: 16 [ 614.772240][T14999] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 614.782538][T14999] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.794823][T14999] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.803806][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 614.808880][T14999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.820196][T14999] usb 4-1: Product: І [ 614.824313][T14999] usb 4-1: Manufacturer: а [ 614.828816][T14999] usb 4-1: SerialNumber: syz [ 614.952934][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 614.960720][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 614.970398][ T9] usb 2-1: config 192 has an invalid interface number: 225 but max is 0 [ 614.979209][ T9] usb 2-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 614.990623][ T9] usb 2-1: config 192 has no interface number 0 [ 614.999821][ T9] usb 2-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=bf.2b [ 615.009271][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.017643][ T9] usb 2-1: Product: syz [ 615.021925][ T9] usb 2-1: Manufacturer: syz [ 615.026987][ T9] usb 2-1: SerialNumber: syz [ 615.099885][T17524] input: syz1 as /devices/virtual/input/input61 [ 615.125818][T17524] /dev/rnullb0: Can't open blockdev [ 615.240578][T17512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.250757][T17512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.769892][T17535] /dev/rnullb0: Can't open blockdev [ 615.776115][T17536] /dev/rnullb0: Can't open blockdev [ 615.830032][T17538] /dev/rnullb0: Can't open blockdev [ 616.401070][T17549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3663'. [ 616.577827][T17556] netlink: 'syz.2.3665': attribute type 10 has an invalid length. [ 616.587556][T17556] openvswitch: netlink: Flow key attr not present in new flow. [ 616.651087][T17556] /dev/rnullb0: Can't open blockdev [ 617.362992][T14999] usb 4-1: 0:2 : does not exist [ 617.416209][T14999] usb 4-1: USB disconnect, device number 96 [ 617.446116][T17567] C: renamed from team_slave_0 (while UP) [ 617.481047][T17567] netlink: 'syz.3.3669': attribute type 3 has an invalid length. [ 617.494674][T15902] udevd[15902]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.542907][T17567] netlink: 'syz.3.3669': attribute type 1 has an invalid length. [ 617.550647][T17567] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3669'. [ 617.578481][T17567] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 617.592348][ T9] rndis_host 2-1:192.225: skipping garbage [ 617.618770][ T9] usb 2-1: bad CDC descriptors [ 617.644474][ T9] cdc_acm 2-1:192.225: Zero length descriptor references [ 617.650942][T17573] openvswitch: netlink: Message has 1 unknown bytes. [ 617.651532][ T9] cdc_acm 2-1:192.225: probe with driver cdc_acm failed with error -22 [ 617.662886][T17573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.690505][ T9] usb 2-1: USB disconnect, device number 49 [ 617.711224][T17575] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 617.720884][T17575] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 617.740366][T17575] /dev/rnullb0: Can't open blockdev [ 617.834361][T14999] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 617.968275][T17585] /dev/rnullb0: Can't open blockdev [ 618.017865][T14999] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 618.029494][T14999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.042354][T14999] usb 4-1: Product: syz [ 618.052854][T14999] usb 4-1: Manufacturer: syz [ 618.057459][T14999] usb 4-1: SerialNumber: syz [ 618.081075][T14999] r8152-cfgselector 4-1: Unknown version 0x0000 [ 618.088849][T14999] r8152-cfgselector 4-1: config 0 descriptor?? [ 618.223305][T17590] /dev/rnullb0: Can't open blockdev [ 618.405738][T17598] ./cgroup: Can't lookup blockdev [ 618.509052][T16070] r8152-cfgselector 4-1: USB disconnect, device number 97 [ 618.902932][T14999] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 618.982947][T16070] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 619.051256][T17608] /dev/rnullb0: Can't open blockdev [ 619.065932][T14999] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 619.082850][T14999] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 619.098786][T14999] usb 6-1: config 220 has no interface number 2 [ 619.105401][T14999] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 619.127453][T14999] usb 6-1: config 220 interface 0 has no altsetting 0 [ 619.134540][T14999] usb 6-1: config 220 interface 76 has no altsetting 0 [ 619.141381][T14999] usb 6-1: config 220 interface 1 has no altsetting 0 [ 619.152720][T14999] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 619.165395][T16070] usb 2-1: Using ep0 maxpacket: 32 [ 619.170772][T14999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.179027][T14999] usb 6-1: Product: syz [ 619.183627][T14999] usb 6-1: Manufacturer: syz [ 619.188260][T14999] usb 6-1: SerialNumber: syz [ 619.193555][T16070] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 619.201627][T16070] usb 2-1: config 0 has no interface number 0 [ 619.209592][T16070] usb 2-1: config 0 interface 12 has no altsetting 0 [ 619.221645][T16070] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 619.230884][T16070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.238903][T16070] usb 2-1: Product: syz [ 619.243163][T16070] usb 2-1: Manufacturer: syz [ 619.247766][T16070] usb 2-1: SerialNumber: syz [ 619.254952][T16070] usb 2-1: config 0 descriptor?? [ 619.431505][T14999] usb 6-1: selecting invalid altsetting 0 [ 619.446582][T14999] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 619.453173][T14999] usb 6-1: No valid video chain found. [ 619.464899][T14999] usb 6-1: selecting invalid altsetting 0 [ 619.470655][T14999] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 619.482609][T14999] usb 6-1: USB disconnect, device number 11 [ 619.582911][ T5920] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 619.732913][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 619.741978][ T5920] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 619.751193][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.760534][ T5920] usb 4-1: Product: syz [ 619.766504][ T5920] usb 4-1: Manufacturer: syz [ 619.771106][ T5920] usb 4-1: SerialNumber: syz [ 619.778263][ T5920] usb 4-1: config 0 descriptor?? [ 619.990384][ T5920] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 620.343745][T17621] batadv0: entered allmulticast mode [ 620.541116][ T5920] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 620.582470][ T5920] usb 4-1: USB disconnect, device number 98 [ 620.594397][T17628] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 620.620402][T17628] /dev/rnullb0: Can't open blockdev [ 621.006907][T17638] binder: 17636:17638 ioctl 5402 200000000180 returned -22 [ 621.034400][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 621.055174][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 621.086501][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.101729][ T31] task:kworker/1:0 state:D stack:19480 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 621.123279][T16070] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 621.136823][ T31] Workqueue: events_power_efficient hub_init_func2 [ 621.148959][ T31] Call Trace: [ 621.152971][T16070] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 621.155606][ T31] [ 621.163116][T16070] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 621.168986][ T31] __schedule+0x16f5/0x4d00 [ 621.170806][T16070] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 621.186641][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 621.204537][ T31] ? schedule+0x165/0x360 [ 621.212337][ T31] ? __pfx___schedule+0x10/0x10 [ 621.220711][ T31] ? schedule+0x91/0x360 [ 621.228513][ T31] schedule+0x165/0x360 [ 621.230137][T16070] usb 2-1: USB disconnect, device number 50 [ 621.236086][ T31] schedule_preempt_disabled+0x13/0x30 [ 621.264439][ T31] __mutex_lock+0x724/0xe80 [ 621.277099][ T31] ? __mutex_lock+0x51b/0xe80 [ 621.287445][ T31] ? hub_activate+0xb7/0x1ea0 [ 621.295527][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 621.304124][ T31] ? do_raw_spin_lock+0x121/0x290 [ 621.309256][ T31] ? __lock_acquire+0xab9/0xd20 [ 621.315399][ T31] hub_activate+0xb7/0x1ea0 [ 621.319987][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 621.326147][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.331426][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 621.337523][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 621.343579][ T31] process_scheduled_works+0xae1/0x17b0 [ 621.349246][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.355885][ T31] worker_thread+0x8a0/0xda0 [ 621.360575][ T31] kthread+0x70e/0x8a0 [ 621.365727][ T31] ? __pfx_worker_thread+0x10/0x10 [ 621.370932][ T31] ? __pfx_kthread+0x10/0x10 [ 621.375961][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.381236][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.386879][ T31] ? __pfx_kthread+0x10/0x10 [ 621.391544][ T31] ret_from_fork+0x3fc/0x770 [ 621.396559][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 621.403246][ T31] ? __switch_to_asm+0x39/0x70 [ 621.408090][ T31] ? __switch_to_asm+0x33/0x70 [ 621.416033][ T31] ? __pfx_kthread+0x10/0x10 [ 621.420712][ T31] ret_from_fork_asm+0x1a/0x30 [ 621.425926][ T31] [ 621.429152][ T31] INFO: task kworker/1:5:5919 blocked for more than 143 seconds. [ 621.437990][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 621.449282][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.463811][ T31] task:kworker/1:5 state:D stack:21768 pid:5919 tgid:5919 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 621.478218][ T31] Workqueue: usb_hub_wq hub_event [ 621.483311][ T31] Call Trace: [ 621.486608][ T31] [ 621.489539][ T31] __schedule+0x16f5/0x4d00 [ 621.494302][ T31] ? schedule+0x165/0x360 [ 621.498650][ T31] ? __pfx___schedule+0x10/0x10 [ 621.504199][ T31] ? preempt_schedule_common+0x83/0xd0 [ 621.509669][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 621.516572][ T31] ? schedule+0x91/0x360 [ 621.520833][ T31] schedule+0x165/0x360 [ 621.526742][ T31] schedule_timeout+0x9a/0x270 [ 621.531540][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 621.537011][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.542223][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.548430][ T31] ? wait_for_completion+0x267/0x5d0 [ 621.555328][ T31] wait_for_completion+0x2bf/0x5d0 [ 621.560454][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 621.566160][ T31] ? __flush_work+0xd2/0xbc0 [ 621.571524][ T31] ? __flush_work+0xd2/0xbc0 [ 621.576303][ T31] __flush_work+0x9b9/0xbc0 [ 621.580818][ T31] ? __flush_work+0xd2/0xbc0 [ 621.587374][ T31] ? __pfx___flush_work+0x10/0x10 [ 621.592396][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 621.597720][ T31] ? __queue_work+0xc56/0xfb0 [ 621.602402][ T31] ? flush_delayed_work+0x11d/0x190 [ 621.608384][ T31] flush_delayed_work+0x13e/0x190 [ 621.613462][ T31] ? __pfx_flush_delayed_work+0x10/0x10 [ 621.619011][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.624277][ T31] ? usb_hcd_flush_endpoint+0x3e9/0x400 [ 621.629830][ T31] hub_quiesce+0x1f0/0x330 [ 621.634352][ T31] hub_disconnect+0xc8/0x470 [ 621.638958][ T31] usb_unbind_interface+0x26b/0x910 [ 621.644238][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 621.649966][ T31] device_release_driver_internal+0x4d6/0x7c0 [ 621.656139][ T31] bus_remove_device+0x34d/0x410 [ 621.661096][ T31] device_del+0x511/0x8e0 [ 621.665478][ T31] ? kfree+0x18e/0x440 [ 621.669551][ T31] ? __pfx_device_del+0x10/0x10 [ 621.679012][ T31] ? kobject_put+0x446/0x480 [ 621.683691][ T31] usb_disable_device+0x3e9/0x8a0 [ 621.688730][ T31] usb_disconnect+0x330/0x950 [ 621.693748][ T31] hub_event+0x1cdb/0x4a00 [ 621.698257][ T31] ? do_raw_spin_lock+0x121/0x290 [ 621.703664][ T31] ? register_lock_class+0x51/0x320 [ 621.709210][ T31] ? __pfx_hub_event+0x10/0x10 [ 621.714302][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 621.720037][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.725528][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 621.731258][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 621.737235][ T31] process_scheduled_works+0xae1/0x17b0 [ 621.742873][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.748877][ T31] worker_thread+0x8a0/0xda0 [ 621.753624][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 621.759966][ T31] ? __kthread_parkme+0x7b/0x200 [ 621.764959][ T31] kthread+0x70e/0x8a0 [ 621.769032][ T31] ? __pfx_worker_thread+0x10/0x10 [ 621.774961][ T31] ? __pfx_kthread+0x10/0x10 [ 621.779561][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.784776][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.789973][ T31] ? __pfx_kthread+0x10/0x10 [ 621.794602][ T31] ret_from_fork+0x3fc/0x770 [ 621.799198][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 621.804372][ T31] ? __switch_to_asm+0x39/0x70 [ 621.809136][ T31] ? __switch_to_asm+0x33/0x70 [ 621.814375][ T31] ? __pfx_kthread+0x10/0x10 [ 621.818976][ T31] ret_from_fork_asm+0x1a/0x30 [ 621.823993][ T31] [ 621.827067][ T31] [ 621.827067][ T31] Showing all locks held in the system: [ 621.840046][ T31] 3 locks held by kworker/1:0/24: [ 621.845131][ T31] #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 621.857572][ T31] #1: ffffc900001e7bc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 621.870461][ T31] #2: ffff88806715a198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 621.880150][ T31] 1 lock held by khungtaskd/31: [ 621.885028][ T31] #0: ffffffff8e33bee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 621.894944][ T31] 2 locks held by getty/5601: [ 621.899609][ T31] #0: ffff88814dcf60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 621.909360][ T31] #1: ffffc9000361c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 621.919761][ T31] 5 locks held by kworker/1:5/5919: [ 621.925002][ T31] #0: ffff8880222c8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 621.936592][ T31] #1: ffffc900043c7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 621.950014][ T31] #2: ffff8880285af198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 621.958965][ T31] #3: ffff88806715a198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 621.968140][ T31] #4: ffff88806706a160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 621.979358][ T31] 6 locks held by kworker/1:6/5921: [ 621.984620][ T31] #0: ffff8880222c8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 621.996183][ T31] #1: ffffc900043f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 622.008030][ T31] #2: ffff888028867198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 622.017391][ T31] #3: ffff888031d5a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 622.026705][ T31] #4: ffff8880706e6160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 622.035978][ T31] #5: ffffffff8e1e1410 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 622.046556][ T31] 1 lock held by syz.4.3357/16495: [ 622.051652][ T31] #0: ffff888028867198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 622.060661][ T31] [ 622.063035][ T31] ============================================= [ 622.063035][ T31] [ 622.071446][ T31] NMI backtrace for cpu 1 [ 622.071461][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 622.071479][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.071488][ T31] Call Trace: [ 622.071494][ T31] [ 622.071501][ T31] dump_stack_lvl+0x189/0x250 [ 622.071518][ T31] ? __wake_up_klogd+0xd9/0x110 [ 622.071537][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.071552][ T31] ? __pfx__printk+0x10/0x10 [ 622.071576][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 622.071593][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 622.071605][ T31] ? _printk+0xcf/0x120 [ 622.071622][ T31] ? __pfx__printk+0x10/0x10 [ 622.071639][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 622.071660][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 622.071677][ T31] watchdog+0xfee/0x1030 [ 622.071696][ T31] ? watchdog+0x1de/0x1030 [ 622.071719][ T31] kthread+0x70e/0x8a0 [ 622.071737][ T31] ? __pfx_watchdog+0x10/0x10 [ 622.071753][ T31] ? __pfx_kthread+0x10/0x10 [ 622.071770][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.071785][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.071800][ T31] ? __pfx_kthread+0x10/0x10 [ 622.071816][ T31] ret_from_fork+0x3fc/0x770 [ 622.071925][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 622.071957][ T31] ? __switch_to_asm+0x39/0x70 [ 622.071973][ T31] ? __switch_to_asm+0x33/0x70 [ 622.071988][ T31] ? __pfx_kthread+0x10/0x10 [ 622.072005][ T31] ret_from_fork_asm+0x1a/0x30 [ 622.072032][ T31] [ 622.072044][ T31] Sending NMI from CPU 1 to CPUs 0: [ 622.230416][ C0] NMI backtrace for cpu 0 [ 622.230433][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 622.230452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.230463][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 622.230486][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 45 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 622.230498][ C0] RSP: 0018:ffffffff8e007d80 EFLAGS: 000002c6 [ 622.230513][ C0] RAX: 8aa125e45b08b600 RBX: ffffffff81971188 RCX: 8aa125e45b08b600 [ 622.230525][ C0] RDX: 0000000000000001 RSI: ffffffff8da68861 RDI: ffffffff8be4a9c0 [ 622.230537][ C0] RBP: ffffffff8e007ea8 R08: ffff8880b8632f1b R09: 1ffff110170c65e3 [ 622.230548][ C0] R10: dffffc0000000000 R11: ffffed10170c65e4 R12: ffffffff8fc29730 [ 622.230560][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c12a50 [ 622.230570][ C0] FS: 0000000000000000(0000) GS:ffff8881259e4000(0000) knlGS:0000000000000000 [ 622.230583][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.230594][ C0] CR2: 00007fa106b80ab8 CR3: 000000007de76000 CR4: 00000000003526f0 [ 622.230608][ C0] DR0: 0000000000000000 DR1: 0000000000006000 DR2: 0000000000000000 [ 622.230618][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 622.230628][ C0] Call Trace: [ 622.230635][ C0] [ 622.230641][ C0] default_idle+0x13/0x20 [ 622.230660][ C0] default_idle_call+0x74/0xb0 [ 622.230679][ C0] do_idle+0x1e8/0x510 [ 622.230697][ C0] ? __pfx_do_idle+0x10/0x10 [ 622.230718][ C0] cpu_startup_entry+0x44/0x60 [ 622.230733][ C0] rest_init+0x2de/0x300 [ 622.230752][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 622.230774][ C0] start_kernel+0x47d/0x500 [ 622.230793][ C0] x86_64_start_reservations+0x24/0x30 [ 622.230813][ C0] x86_64_start_kernel+0x143/0x1c0 [ 622.230839][ C0] common_startup_64+0x13e/0x147 [ 622.230863][ C0] [ 622.242911][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 622.242930][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 622.242952][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.242964][ T31] Call Trace: [ 622.242973][ T31] [ 622.242981][ T31] dump_stack_lvl+0x99/0x250 [ 622.243006][ T31] ? __asan_memcpy+0x40/0x70 [ 622.243035][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.243055][ T31] ? __pfx__printk+0x10/0x10 [ 622.243087][ T31] panic+0x2db/0x790 [ 622.243108][ T31] ? __pfx_panic+0x10/0x10 [ 622.243124][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 622.243147][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 622.243172][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 622.243204][ T31] watchdog+0x102d/0x1030 [ 622.243229][ T31] ? watchdog+0x1de/0x1030 [ 622.243258][ T31] kthread+0x70e/0x8a0 [ 622.243281][ T31] ? __pfx_watchdog+0x10/0x10 [ 622.243302][ T31] ? __pfx_kthread+0x10/0x10 [ 622.243324][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.243343][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.243362][ T31] ? __pfx_kthread+0x10/0x10 [ 622.243383][ T31] ret_from_fork+0x3fc/0x770 [ 622.243410][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 622.243439][ T31] ? __switch_to_asm+0x39/0x70 [ 622.243458][ T31] ? __switch_to_asm+0x33/0x70 [ 622.243478][ T31] ? __pfx_kthread+0x10/0x10 [ 622.243498][ T31] ret_from_fork_asm+0x1a/0x30 [ 622.243532][ T31] [ 622.577041][ T31] Kernel Offset: disabled [ 622.581344][ T31] Rebooting in 86400 seconds..