last executing test programs: 14m24.851720663s ago: executing program 0 (id=787): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000080)="dc75effafa2dc9df83c9bff9d57eae6c2d9bd6054307b22aec27a9462ec1767cab55ff2d0099e17767c4296fb3f39c04a1939506f4f821bfd7b1b829a9c9a3ee86e1ffa5b141cc04182a7f10a577a51c182eed2c99499834b43a042d406d149d20808ca91f550eccb05fd18d2e9150d9bf5e463514989d05c8a33c061a67b4055bc08fb481c6872762293ab4854a16bb4b84d169410f44c5b817529b3df803ace6fcacb1df7d84d0", 0xa8, 0x5}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x490000, 0x30) mkdirat(r2, &(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0585609, &(0x7f0000000e80)={0x0, 0xa, 0x0, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) 14m24.850695776s ago: executing program 0 (id=788): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x16, {0x16, 0x22, "610f06a94483443cc1668c8c4bdcd1b60bd1a6c3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x14, 0x70, "2fa0f74c8db0494acbe1fdf5b0ff700f6fb04dcd6034cedbe19afadb219984089e1167f31992e3177423afaf5449e37432b918845a6cb967a5010821575c769ff57637ac079005a08ecdf036f914dfb7e2605ab4e06c5f2e1f6f2396bd5616941b91bed68f926d6f7694ae76dd1618f6"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x7fff, 0x2, 0x2000, 0x2, 0x5c, 0x4, 0x10, 0x1, 0xc613, 0x6601, 0x8000, 0x6}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x38a}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002207000000b12e6705f1103247970376ac064c1b8ab392bb5cd8b056818af330a5d5eda2a70dd0773bb036042d7957c55c270a68a6cc28c0c2ad1c1c7c8c4a9c878b611b1011"], 0x0}, 0x0) 14m22.971811836s ago: executing program 0 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="015f00000000000000400300000014000180100001006574683a6970366772653000"], 0x28}}, 0x4000) 14m22.970372025s ago: executing program 0 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x1200, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14m22.951704399s ago: executing program 0 (id=803): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3bffffff02020102000031dea0e700000000000002000006"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0xdc, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x38}}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x763}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff592}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x14}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4048801}, 0x80) syz_init_net_socket$ax25(0x3, 0x6, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'\x00', 0x0}) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000100)={{0x12, 0x1, 0xc2c837444fab22da, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0xf5, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xe}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0x5, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x22, 0x1, 0x6, 0x7f, 0x33}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x61, 0x2, {0x7, 0x25, 0x1, 0x2, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x1002}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x8, 0x80, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x28, 0x1, 0x65, 0xac, {0x7, 0x25, 0x1, 0x2, 0x50, 0x7ff}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x4, r3}, 0x10) syz_usb_connect(0x0, 0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="4f8dc2ba7468e4fb188991ae60d7749a1201000083ef0840e07d6e67db770000000309022000487e93090086788500c281"], 0x0) 14m21.589917197s ago: executing program 0 (id=810): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084146, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000440)) 14m6.565709485s ago: executing program 32 (id=810): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084146, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000440)) 11m3.385901897s ago: executing program 1 (id=1963): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) 11m0.315303305s ago: executing program 1 (id=1982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000280)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) 10m59.413353389s ago: executing program 1 (id=1990): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x3, 0x400000008]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r3}) 10m59.249609938s ago: executing program 1 (id=1993): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9}, {0xfffffffc, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x2, 0x8000}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m58.81623679s ago: executing program 1 (id=2002): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 10m58.724188153s ago: executing program 1 (id=2004): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) 10m43.194948355s ago: executing program 33 (id=2004): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) 8m19.572320194s ago: executing program 5 (id=2937): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r2, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000005c0)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x5}) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x49001, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r3, 0x0, 0x201, 0xe00, &(0x7f0000001480)="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", 0x4}) 8m19.518697762s ago: executing program 5 (id=2938): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'#\x00', 0x0, 0x5, 0x2, 0x0, 0x1, '\x00', '\x00\x00\a\x00', "0000ffdf", "97ad3700", ["000000000000000000009200", "00000000000000f3ffff00", '\x00', "3bf100000000000000c48400"]}) 8m19.419435449s ago: executing program 5 (id=2939): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x890d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) gettid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) 8m18.471374824s ago: executing program 5 (id=2947): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x9) 8m18.367223106s ago: executing program 5 (id=2949): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000280)='wchan\x00') syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_fuse_handle_req(r2, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m18.153598323s ago: executing program 5 (id=2950): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x100) 8m17.919067113s ago: executing program 34 (id=2950): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x100) 5m53.17799077s ago: executing program 2 (id=3893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bic\x00', 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c) 5m53.126685294s ago: executing program 2 (id=3895): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44fc2, 0x101) open(0x0, 0x129282, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) epoll_create(0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 5m52.767386923s ago: executing program 2 (id=3898): syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) 5m49.303515935s ago: executing program 2 (id=3912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 5m49.075841125s ago: executing program 2 (id=3914): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) 5m48.467683517s ago: executing program 2 (id=3918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0xefff, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m48.080249875s ago: executing program 35 (id=3918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0xefff, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.108112744s ago: executing program 7 (id=6088): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) getpid() sched_setscheduler(0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) setsockopt(r2, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r3, &(0x7f00000016c0)={0x2020}, 0xfffffce3) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8916, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000002417038030"], 0x17d4}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000301010200000000000000000a00000000040001800000000000000000000000f71b17a3f39a00649b8fb10a65401ff516cc19112e2e63db99af9552f7a1505d61e5eab2e1793dadcf6ef88bb23801336d643a97180495bacb7551", @ANYRES16=r5, @ANYRES16=r8], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x480040) write$P9_RCLUNK(r10, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) r11 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r11, &(0x7f0000000080)={0x0, &(0x7f0000000640)=[@wrmsr={0x1e, 0xffffffa7, {0x9cf, 0xd9}}], 0xb0}) r12 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_LOCK(r12, 0x6405) ioctl$COMEDI_UNLOCK(r12, 0x6406) 4.157388193s ago: executing program 7 (id=6100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173683a6d6163"], 0x5c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfc, 0x5c, 0x72, 0x8, 0x403, 0xfa78, 0x711b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0x4a, 0x44, 0xe2}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0xfd, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x70, {{0x7, 0x24, 0x6, 0x0, 0x0, "b5fa"}, {0x5, 0x24, 0x0, 0xe8}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x81, 0x81, 0xf8}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x101, 0x10}, @obex={0x5, 0x24, 0x15, 0x9192}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x285, 0x9, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd5, 0x68, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x4, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x5, 0x2}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x4, 0x3, 0x0, 0x20, 0x1}, 0x11c, &(0x7f0000000100)={0x5, 0xf, 0x11c, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x5, 0xf, 0x7f, [0xc0c0, 0xff0000, 0x0, 0x0, 0xc000, 0xc000]}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x100, 0xf000, 0x200}, @generic={0xe7, 0x10, 0xb, "0e22158f8d1457687aa94dcb6e6162334569257a690e7759705f8d00a8a66edfc7fa010ce52f1f0fa824c8e3268efc4b1e487c0c90dd4182b3358c9e14a34a4e2d8ea7f4554a087b6d48d04782aa297b3f1d8d447d6f58a5b8b559161d479a4067bdf986546a60b40e0518ac00a8376e7d785728faede2c873ddc9c0fedd392ccb48585da08be202ca0d6ed0c79e208a70c6e793f2135f146be9fbc15703e2ddd011bbff4e3fa47752fc1415c52736a47950399cd66d9929c1473a940ed53bc3f6bd5cc411e2881d0d7b5a6800a32eaee2e967959b2573e9084219e9463dec52b3a217ee"}]}, 0x7, [{0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="46034b5c294ca6415dce9ea30559f64b7a0e49b4e0acb4b27e9a8b1fb2dd7cfc2db91f13ab40565a4ab491693adb0746fe28211d1988b2d14018d3afdd9f0ba7ae77e571c9a0aa1f080023"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1009}}, {0xfc, &(0x7f0000000340)=@string={0xfc, 0x3, "303638ec32c28a4cec156b362d22f96fe39f00b2870daee4b48df763c1f15fbfa9a9b827a610e06eb5bcbf7e9faa81c938526642af1ce75ab245caf66a1fa87f48218099ab10d28cf16e8b984030df97dc7cab14e8e97a7daac811d226105dcef5eb977e5fa7acd5f5a3cc07258535a8e9223d3622128ced144180f1f2a830ffbc6e23a555f994a7f188e2d75c5a74f1e9becee2275082d67c6a2981dc6e833546152189fa1b9b03144e8e6480b58e025a732c4d6919a9b4c356d68cfcae9ff791edb6dff4814a7de07288b9a12d7f8eb31d10b745a1a8e77d752f4985aab79be04b269a0c859e595d54473630cac69a4dde02a4502904703894"}}, {0x6d, &(0x7f0000000440)=@string={0x6d, 0x3, "d66d25595d18677d256174cb025a503f7834c0aa1eabac5b45796e675da7770ddd7d05b5903f9b64175e5edac3d22354930513cf3291b48839de144abf274618619132537228df3cf703d60dad1df81bf39e909d8c2a8951544026fb29ade37a2ec56b239f6932f1f6eaf3"}}, {0xf0, &(0x7f00000004c0)=@string={0xf0, 0x3, "d90e1278dcfcce00518eaafde3256d207510a71cc38b8d7241fc1a592cf29ae09f7d35c64c9f42db5c1bce51a2d53a94a0bd31172b82b33285a089d9f9497a8f0ea60dfcb57b0e7bb06efe4a4fbc84976cd36b2f2b9ba9bd2106bf6aec5123e54471e12752b6621a743f28ac1dc8776842857079d5c92729c6f4f9d0984a28d9667ecab2bc3631f887629f6d317d6eb7184eeff5f1350a3a95a42cdf40f4747b1d8a4ed20e0f97020945135247fe88095e8be001145976b4a243a18f8577302adf1e96d9746ddea60cc5d6444c8c73cd7349fb36d517724ed08be168f08f55ff43522f73d796240cfac0a7719e46"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x436}}]}) 3.527608429s ago: executing program 4 (id=6105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}, 0x1, 0xfffffffffffffffe}, 0x4000054) 3.470618841s ago: executing program 4 (id=6106): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d8000000180081064e81f782db44b904021d08009af8059a408467f03ddf4100154001000000024eeda3f9a3f0284e1077f9c717062548f67577720b2e92408bb1d98cdb245c62dfb19bb499e2c8adb948783d9129d9a9c6e97f4f008a8df8af75eefb394e5859c9ad76b931", 0x6c}], 0x1}, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={'veth0_vlan\x00', 0x9}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x1, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 3.403778687s ago: executing program 4 (id=6107): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x29}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000000)="e8", 0x1, 0x60040014, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty, 0x80000000}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='htcp\x00', 0x5) shutdown(r1, 0x1) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000640)) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000680)={{0x3, 0x200, 0x3, 0x887, 0x6, 0xf}, 0x2dd, [0x1, 0x10, 0x6ce4bd0d, 0x1, 0x8, 0x8, 0x400, 0x5, 0x774f, 0x1, 0xeb, 0xf5fd, 0xfffffffb, 0x5, 0x8, 0xff, 0x10, 0x229, 0xfffffffe, 0x80000001, 0x1, 0x8418, 0x9, 0x9, 0x100, 0x4, 0x1, 0x200, 0x1, 0x5, 0x3, 0x8, 0xf68, 0x2, 0x200, 0x945, 0x1000, 0x3, 0x4, 0xd5, 0x7fff, 0x9, 0x676c, 0x2, 0x1, 0xa, 0x900, 0x3, 0x8, 0x10000, 0x8, 0x1ff, 0x7, 0x0, 0x6, 0x5, 0x8001, 0x0, 0x0, 0xb6a, 0x0, 0xa, 0x3, 0xdb, 0x80000000, 0x1, 0x80, 0x66507588, 0x2, 0xb, 0x2, 0x6, 0x4, 0x7, 0x0, 0xffff, 0x6, 0x9, 0x8, 0x1000, 0x0, 0x3, 0x2, 0x0, 0x2, 0x9, 0x3, 0x4, 0x7, 0x1, 0x3, 0x1, 0x1, 0x80, 0x1ff, 0x0, 0x7, 0x9, 0x1, 0x4eccdad0, 0x1000, 0xd3, 0xaa3, 0x6, 0x10001, 0x200, 0x401, 0x2, 0x10000, 0x7, 0x4, 0xd8, 0xd, 0x539, 0x2, 0x3, 0x1, 0x8, 0xf0000, 0xd31b, 0x8, 0x7, 0x5, 0x7, 0xe38, 0x6, 0x7ff, 0x7fffffff, 0x2, 0xfff, 0x81, 0x4, 0x4, 0x7, 0xac, 0x2, 0x0, 0x4e205b94, 0x6, 0x5, 0x4, 0x1, 0x9, 0x7fffffff, 0x41ab, 0x38b8, 0x8000, 0xfffffffd, 0x6, 0x80, 0x0, 0x2, 0x5, 0xffffffff, 0x5, 0x7, 0xe42, 0x1, 0x1, 0xc83f, 0xc, 0x9, 0x1, 0xfff, 0x7f, 0x3f800000, 0x4, 0x490, 0x9, 0xd0a, 0x7, 0x7, 0x1, 0x3, 0xffff, 0x9, 0x5, 0x2, 0x9, 0x8001, 0x7, 0x8, 0x7, 0x3, 0x0, 0x0, 0x800, 0xfffff7b0, 0x9, 0x101, 0x81, 0x5, 0x3ff, 0x8, 0x5, 0x3, 0x6, 0x7, 0x6, 0x7c, 0xaa12, 0x3, 0xffff, 0x0, 0x23640a7, 0x1000, 0x5, 0x352, 0x1, 0x3, 0x8, 0x0, 0x80000000, 0x7ff, 0x4, 0x800, 0x8, 0x1, 0x0, 0x80000000, 0x1, 0x2, 0xc, 0xfffffffd, 0x100, 0xfff, 0x9, 0x2, 0x9, 0x3, 0xd260, 0x8, 0xda31, 0x95a, 0x101, 0x604, 0xfffff85e, 0x1ff, 0xabc, 0x3, 0x4, 0x40, 0x0, 0x3, 0xf, 0x15fe, 0x0, 0x800, 0x2, 0x80000001, 0x4, 0x0, 0x788d, 0x8, 0x3, 0x1, 0x7, 0x6, 0x6, 0x2d1, 0x12, 0x5, 0x4, 0x9b, 0x7, 0x4e9a, 0x0, 0x401, 0x7bce7bb2, 0x3, 0xffff77d0, 0x401, 0x1aa4d244, 0x4, 0x8000, 0x4, 0x7, 0x1, 0x1, 0xffffffff, 0x0, 0x400, 0x5, 0x18, 0x6, 0x10000, 0x7ff, 0x2, 0x80000001, 0x2, 0x0, 0x7fff, 0xaf6, 0xa, 0x8, 0xb4c, 0x0, 0x2, 0xffffffff, 0x400000, 0x2, 0x8, 0x7, 0xaf41, 0x100, 0x2, 0x200, 0x4, 0x2, 0x3, 0x3, 0x3, 0x653d, 0x4, 0x1, 0x3ff, 0x7, 0x2, 0x93, 0x4, 0xfffffff7, 0x3c, 0x3, 0x3, 0x2, 0x8, 0x9, 0x4, 0x1ff, 0x0, 0x5deba39e, 0x0, 0x81, 0x2, 0x8, 0x705, 0xb485, 0x100, 0x2, 0x4, 0x6, 0x4, 0xfffffff9, 0x2, 0xf, 0x87, 0x9, 0x9, 0xfffffffa, 0x6, 0x5, 0x4, 0x4, 0xc6dc, 0xa, 0x8, 0x0, 0xfffffffb, 0x7fff, 0x1, 0xff2b, 0x10001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x200, 0x8, 0xa, 0x10000, 0x4000, 0x9, 0x5, 0x0, 0x80000001, 0xcd, 0x8, 0x7, 0x0, 0x800, 0x1, 0x3, 0x86df, 0x2, 0x3, 0x93, 0x7, 0x1, 0x400, 0x1, 0x1, 0x1, 0x3, 0x6, 0x3ff, 0x2a, 0xb9, 0x81, 0x80000001, 0x1, 0x3, 0xffffffff, 0x8, 0x80000001, 0x0, 0x7, 0xff, 0x5, 0x6db8, 0x8, 0xffffffff, 0x1, 0xfffffffe, 0x8, 0xfa3, 0x2, 0x8001, 0xfffffffd, 0x0, 0x6, 0x1, 0x5c, 0xca, 0x9, 0x2, 0x2, 0xd, 0x8, 0x8, 0x800, 0xc77, 0x3, 0x2, 0xeec8, 0x9, 0x8, 0x9, 0x10, 0x38000000, 0x1000, 0x1ff, 0xffff, 0x1, 0x42, 0x81, 0x8d, 0x101, 0x200, 0x2, 0x7, 0xb, 0x9, 0x10, 0x6, 0x3, 0x7e, 0x6, 0xffffff78, 0x5, 0x4, 0x5, 0x3, 0xf, 0x7, 0x7, 0xe63e, 0x10000, 0x4, 0x2, 0x1, 0x5, 0x8, 0x10, 0x4, 0x19, 0x81, 0x5c3e, 0x200, 0x3, 0x9, 0x4, 0x7, 0x7, 0xfffffff8, 0xfffffffc, 0x3a6, 0x2, 0x1, 0x19df, 0x2, 0xffffffff, 0x3, 0x6082, 0x34, 0x7, 0x9, 0x6, 0x2, 0x2, 0x5, 0x3, 0x2, 0x1e9fb539, 0xfffffff7, 0x2, 0x35, 0xff, 0x3, 0x8, 0x5, 0xda, 0x8001, 0xbf2, 0x7, 0x0, 0x9, 0xff, 0xc, 0x100, 0xe6, 0x0, 0xd6, 0x40, 0x7ff, 0xf, 0x2, 0x3, 0x80000000, 0x7ff, 0x7fffffff, 0xed40000, 0x80000000, 0x6, 0x101, 0x5, 0x3, 0x7, 0x7, 0x6, 0x6, 0x200, 0x1, 0x8000, 0x0, 0xfff, 0x7fffffff, 0x7, 0x3f9, 0x1, 0x6, 0x0, 0x4, 0x19f, 0x18c5, 0x7fff, 0x80000001, 0x7, 0x8, 0x8, 0x1, 0x10000, 0x3ad, 0x3, 0x4, 0x4, 0xb, 0x0, 0x3, 0x8a18, 0x1000, 0x10000, 0x3, 0xd, 0x2, 0x5, 0x10000, 0xff, 0xd526, 0x1, 0x0, 0x7, 0x3, 0x3, 0x6, 0xb435, 0x3, 0x81, 0x1000, 0x4, 0x5, 0xff, 0x6, 0x7, 0xe, 0x9, 0x5, 0x1, 0x7fff, 0x41e9e5d6, 0x7, 0x7, 0x1, 0x1, 0x0, 0x0, 0x5, 0x7, 0x9, 0x9, 0x2, 0xfff, 0xf, 0x4, 0x9, 0x4, 0x7, 0x5, 0x3, 0x2, 0x3, 0xffff, 0x9, 0x8, 0x243, 0xc17, 0x0, 0xea, 0x7fffffff, 0x9, 0x5, 0x1, 0x6, 0x3c0, 0x9, 0x5, 0x0, 0x480, 0x7fff, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1, 0x800, 0x512, 0xb0, 0x6, 0x0, 0x0, 0x0, 0x7ff, 0x1000, 0xa, 0x7, 0x65, 0x8, 0x100, 0x8, 0x2, 0xd, 0x5, 0x4, 0xffffffff, 0x4, 0x8000, 0x1, 0x80, 0x9, 0x24, 0x8, 0x722, 0x4, 0x85, 0x8, 0x9, 0x1c0, 0x8, 0x80000001, 0x79a2, 0xdaeb, 0x8, 0x8, 0x0, 0x3, 0x7, 0x8, 0x7a63, 0x3ff, 0x2, 0xfffffffa, 0x1b28, 0x8198, 0x8000, 0x0, 0xf, 0x0, 0x10001, 0xe, 0x4, 0xfff, 0x40, 0xffffffff, 0x7fff, 0x40, 0x6, 0x5, 0x80000000, 0x0, 0x9, 0x5, 0x7, 0x400, 0xd93, 0x4, 0x100, 0x5, 0x80, 0x7, 0x338d8a13, 0x5, 0x100, 0x0, 0x9d, 0x8, 0x4, 0x0, 0x5, 0x5, 0x153f, 0x0, 0x5, 0x8, 0x30, 0x3, 0xcd37, 0xd19, 0x7f, 0xfffffffc, 0x0, 0x8, 0x4, 0x8001, 0x3, 0x5, 0xeb1, 0x3, 0x34, 0x5, 0x7, 0xa, 0xfffffffa, 0x5, 0x5, 0xfd, 0x4, 0x2, 0x2, 0x5, 0x3, 0x9, 0x15, 0xd0, 0x7, 0x10000, 0x10, 0x4, 0x80000001, 0x3, 0xa, 0x58, 0x9, 0x1, 0x7fff, 0x3ba, 0x6, 0x0, 0x7fffffff, 0xd7f, 0x2, 0x696, 0x8, 0xfff, 0xda9, 0x3, 0x1, 0x230d, 0xffffffff, 0x9, 0x4, 0xf, 0x8, 0x3ff, 0x8, 0x1, 0x10001, 0xc, 0x40, 0xfffff800, 0x80000001, 0x1, 0x0, 0x2, 0xfffffffc, 0x1e6, 0xfffffffd, 0x0, 0x8, 0x3, 0xfffffffb, 0xf4, 0x8, 0x4, 0xfff, 0x7, 0xfffffff8, 0x6, 0xfffff920, 0x3, 0x200, 0x4, 0x6, 0x5, 0xffffffff, 0xf3ef, 0x4, 0x5, 0x5fec61b1, 0x8, 0x5, 0x2, 0x6, 0x37, 0x3, 0x9, 0x52b7, 0xfff, 0x8, 0x6c4f, 0x8, 0x6, 0x0, 0x85, 0xd, 0x6, 0x5dd1, 0xfffffffb, 0x4, 0x8a, 0x4, 0x6, 0x8, 0x2, 0x5, 0x8000, 0x2, 0xffff0243, 0x3, 0x1, 0x1, 0xffffffff, 0x7f, 0x7f, 0xfffffff8, 0xb, 0x7ff, 0x4, 0x5, 0x907b, 0x7, 0x8, 0x99b3, 0x0, 0x4, 0xffe, 0x4b3, 0xffffffff, 0x0, 0xfffffffc, 0x7042f2dc, 0x6, 0xc, 0x1, 0xf, 0x0, 0x8, 0x70, 0x81, 0x0, 0x7ff, 0x3b0d08cd, 0x8, 0x1, 0x0, 0x9, 0x3, 0x2, 0x6, 0x9, 0xa23, 0x97, 0x800, 0x5, 0x8, 0x9, 0x6, 0x4, 0xe, 0x3, 0xfffffffa, 0x7, 0x8, 0xf0, 0x0, 0x6, 0x6, 0x4, 0x72, 0x9, 0x9, 0xf95, 0x7, 0x9, 0x8000, 0x2, 0x8, 0x3, 0xfffff6aa, 0x401, 0x4, 0x7, 0x3, 0x4, 0xfff, 0x5, 0x5b16cc32, 0x4, 0x5, 0x0, 0x101, 0x3, 0x5, 0xe, 0x8, 0x80000000, 0x4, 0x4, 0x0, 0x2, 0x0, 0xe, 0x1, 0x6, 0x5, 0x5, 0xea, 0x100, 0x9c3, 0x10001, 0x200, 0x42c, 0x5, 0x8, 0x7fffffff, 0x8, 0x3, 0x2, 0x2, 0x1, 0x5, 0x4, 0x7, 0xfffffffe, 0x81, 0x8, 0xfffffffd, 0x0, 0xfff, 0x7, 0x5, 0x2, 0x91b7, 0xe92, 0x8000, 0x3, 0x100, 0x5, 0x7fffffff, 0x91, 0x7fffffff, 0x80, 0x2, 0x6, 0x9, 0x1000000, 0x0, 0x101, 0xe, 0x7fc000, 0xd11c, 0xb, 0xf, 0x5, 0x7f778dcf, 0x7fffffff, 0x2, 0x1, 0x5b000, 0x80000001, 0x7, 0xff, 0x5, 0xa, 0x7, 0x6, 0x1000000, 0x0, 0x2b, 0xa, 0x0, 0x7, 0x7]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x29}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r1, &(0x7f0000000000)="e8", 0x1, 0x60040014, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty, 0x80000000}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='htcp\x00', 0x5) (async) shutdown(r1, 0x1) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000640)) (async) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000680)={{0x3, 0x200, 0x3, 0x887, 0x6, 0xf}, 0x2dd, [0x1, 0x10, 0x6ce4bd0d, 0x1, 0x8, 0x8, 0x400, 0x5, 0x774f, 0x1, 0xeb, 0xf5fd, 0xfffffffb, 0x5, 0x8, 0xff, 0x10, 0x229, 0xfffffffe, 0x80000001, 0x1, 0x8418, 0x9, 0x9, 0x100, 0x4, 0x1, 0x200, 0x1, 0x5, 0x3, 0x8, 0xf68, 0x2, 0x200, 0x945, 0x1000, 0x3, 0x4, 0xd5, 0x7fff, 0x9, 0x676c, 0x2, 0x1, 0xa, 0x900, 0x3, 0x8, 0x10000, 0x8, 0x1ff, 0x7, 0x0, 0x6, 0x5, 0x8001, 0x0, 0x0, 0xb6a, 0x0, 0xa, 0x3, 0xdb, 0x80000000, 0x1, 0x80, 0x66507588, 0x2, 0xb, 0x2, 0x6, 0x4, 0x7, 0x0, 0xffff, 0x6, 0x9, 0x8, 0x1000, 0x0, 0x3, 0x2, 0x0, 0x2, 0x9, 0x3, 0x4, 0x7, 0x1, 0x3, 0x1, 0x1, 0x80, 0x1ff, 0x0, 0x7, 0x9, 0x1, 0x4eccdad0, 0x1000, 0xd3, 0xaa3, 0x6, 0x10001, 0x200, 0x401, 0x2, 0x10000, 0x7, 0x4, 0xd8, 0xd, 0x539, 0x2, 0x3, 0x1, 0x8, 0xf0000, 0xd31b, 0x8, 0x7, 0x5, 0x7, 0xe38, 0x6, 0x7ff, 0x7fffffff, 0x2, 0xfff, 0x81, 0x4, 0x4, 0x7, 0xac, 0x2, 0x0, 0x4e205b94, 0x6, 0x5, 0x4, 0x1, 0x9, 0x7fffffff, 0x41ab, 0x38b8, 0x8000, 0xfffffffd, 0x6, 0x80, 0x0, 0x2, 0x5, 0xffffffff, 0x5, 0x7, 0xe42, 0x1, 0x1, 0xc83f, 0xc, 0x9, 0x1, 0xfff, 0x7f, 0x3f800000, 0x4, 0x490, 0x9, 0xd0a, 0x7, 0x7, 0x1, 0x3, 0xffff, 0x9, 0x5, 0x2, 0x9, 0x8001, 0x7, 0x8, 0x7, 0x3, 0x0, 0x0, 0x800, 0xfffff7b0, 0x9, 0x101, 0x81, 0x5, 0x3ff, 0x8, 0x5, 0x3, 0x6, 0x7, 0x6, 0x7c, 0xaa12, 0x3, 0xffff, 0x0, 0x23640a7, 0x1000, 0x5, 0x352, 0x1, 0x3, 0x8, 0x0, 0x80000000, 0x7ff, 0x4, 0x800, 0x8, 0x1, 0x0, 0x80000000, 0x1, 0x2, 0xc, 0xfffffffd, 0x100, 0xfff, 0x9, 0x2, 0x9, 0x3, 0xd260, 0x8, 0xda31, 0x95a, 0x101, 0x604, 0xfffff85e, 0x1ff, 0xabc, 0x3, 0x4, 0x40, 0x0, 0x3, 0xf, 0x15fe, 0x0, 0x800, 0x2, 0x80000001, 0x4, 0x0, 0x788d, 0x8, 0x3, 0x1, 0x7, 0x6, 0x6, 0x2d1, 0x12, 0x5, 0x4, 0x9b, 0x7, 0x4e9a, 0x0, 0x401, 0x7bce7bb2, 0x3, 0xffff77d0, 0x401, 0x1aa4d244, 0x4, 0x8000, 0x4, 0x7, 0x1, 0x1, 0xffffffff, 0x0, 0x400, 0x5, 0x18, 0x6, 0x10000, 0x7ff, 0x2, 0x80000001, 0x2, 0x0, 0x7fff, 0xaf6, 0xa, 0x8, 0xb4c, 0x0, 0x2, 0xffffffff, 0x400000, 0x2, 0x8, 0x7, 0xaf41, 0x100, 0x2, 0x200, 0x4, 0x2, 0x3, 0x3, 0x3, 0x653d, 0x4, 0x1, 0x3ff, 0x7, 0x2, 0x93, 0x4, 0xfffffff7, 0x3c, 0x3, 0x3, 0x2, 0x8, 0x9, 0x4, 0x1ff, 0x0, 0x5deba39e, 0x0, 0x81, 0x2, 0x8, 0x705, 0xb485, 0x100, 0x2, 0x4, 0x6, 0x4, 0xfffffff9, 0x2, 0xf, 0x87, 0x9, 0x9, 0xfffffffa, 0x6, 0x5, 0x4, 0x4, 0xc6dc, 0xa, 0x8, 0x0, 0xfffffffb, 0x7fff, 0x1, 0xff2b, 0x10001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x200, 0x8, 0xa, 0x10000, 0x4000, 0x9, 0x5, 0x0, 0x80000001, 0xcd, 0x8, 0x7, 0x0, 0x800, 0x1, 0x3, 0x86df, 0x2, 0x3, 0x93, 0x7, 0x1, 0x400, 0x1, 0x1, 0x1, 0x3, 0x6, 0x3ff, 0x2a, 0xb9, 0x81, 0x80000001, 0x1, 0x3, 0xffffffff, 0x8, 0x80000001, 0x0, 0x7, 0xff, 0x5, 0x6db8, 0x8, 0xffffffff, 0x1, 0xfffffffe, 0x8, 0xfa3, 0x2, 0x8001, 0xfffffffd, 0x0, 0x6, 0x1, 0x5c, 0xca, 0x9, 0x2, 0x2, 0xd, 0x8, 0x8, 0x800, 0xc77, 0x3, 0x2, 0xeec8, 0x9, 0x8, 0x9, 0x10, 0x38000000, 0x1000, 0x1ff, 0xffff, 0x1, 0x42, 0x81, 0x8d, 0x101, 0x200, 0x2, 0x7, 0xb, 0x9, 0x10, 0x6, 0x3, 0x7e, 0x6, 0xffffff78, 0x5, 0x4, 0x5, 0x3, 0xf, 0x7, 0x7, 0xe63e, 0x10000, 0x4, 0x2, 0x1, 0x5, 0x8, 0x10, 0x4, 0x19, 0x81, 0x5c3e, 0x200, 0x3, 0x9, 0x4, 0x7, 0x7, 0xfffffff8, 0xfffffffc, 0x3a6, 0x2, 0x1, 0x19df, 0x2, 0xffffffff, 0x3, 0x6082, 0x34, 0x7, 0x9, 0x6, 0x2, 0x2, 0x5, 0x3, 0x2, 0x1e9fb539, 0xfffffff7, 0x2, 0x35, 0xff, 0x3, 0x8, 0x5, 0xda, 0x8001, 0xbf2, 0x7, 0x0, 0x9, 0xff, 0xc, 0x100, 0xe6, 0x0, 0xd6, 0x40, 0x7ff, 0xf, 0x2, 0x3, 0x80000000, 0x7ff, 0x7fffffff, 0xed40000, 0x80000000, 0x6, 0x101, 0x5, 0x3, 0x7, 0x7, 0x6, 0x6, 0x200, 0x1, 0x8000, 0x0, 0xfff, 0x7fffffff, 0x7, 0x3f9, 0x1, 0x6, 0x0, 0x4, 0x19f, 0x18c5, 0x7fff, 0x80000001, 0x7, 0x8, 0x8, 0x1, 0x10000, 0x3ad, 0x3, 0x4, 0x4, 0xb, 0x0, 0x3, 0x8a18, 0x1000, 0x10000, 0x3, 0xd, 0x2, 0x5, 0x10000, 0xff, 0xd526, 0x1, 0x0, 0x7, 0x3, 0x3, 0x6, 0xb435, 0x3, 0x81, 0x1000, 0x4, 0x5, 0xff, 0x6, 0x7, 0xe, 0x9, 0x5, 0x1, 0x7fff, 0x41e9e5d6, 0x7, 0x7, 0x1, 0x1, 0x0, 0x0, 0x5, 0x7, 0x9, 0x9, 0x2, 0xfff, 0xf, 0x4, 0x9, 0x4, 0x7, 0x5, 0x3, 0x2, 0x3, 0xffff, 0x9, 0x8, 0x243, 0xc17, 0x0, 0xea, 0x7fffffff, 0x9, 0x5, 0x1, 0x6, 0x3c0, 0x9, 0x5, 0x0, 0x480, 0x7fff, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1, 0x800, 0x512, 0xb0, 0x6, 0x0, 0x0, 0x0, 0x7ff, 0x1000, 0xa, 0x7, 0x65, 0x8, 0x100, 0x8, 0x2, 0xd, 0x5, 0x4, 0xffffffff, 0x4, 0x8000, 0x1, 0x80, 0x9, 0x24, 0x8, 0x722, 0x4, 0x85, 0x8, 0x9, 0x1c0, 0x8, 0x80000001, 0x79a2, 0xdaeb, 0x8, 0x8, 0x0, 0x3, 0x7, 0x8, 0x7a63, 0x3ff, 0x2, 0xfffffffa, 0x1b28, 0x8198, 0x8000, 0x0, 0xf, 0x0, 0x10001, 0xe, 0x4, 0xfff, 0x40, 0xffffffff, 0x7fff, 0x40, 0x6, 0x5, 0x80000000, 0x0, 0x9, 0x5, 0x7, 0x400, 0xd93, 0x4, 0x100, 0x5, 0x80, 0x7, 0x338d8a13, 0x5, 0x100, 0x0, 0x9d, 0x8, 0x4, 0x0, 0x5, 0x5, 0x153f, 0x0, 0x5, 0x8, 0x30, 0x3, 0xcd37, 0xd19, 0x7f, 0xfffffffc, 0x0, 0x8, 0x4, 0x8001, 0x3, 0x5, 0xeb1, 0x3, 0x34, 0x5, 0x7, 0xa, 0xfffffffa, 0x5, 0x5, 0xfd, 0x4, 0x2, 0x2, 0x5, 0x3, 0x9, 0x15, 0xd0, 0x7, 0x10000, 0x10, 0x4, 0x80000001, 0x3, 0xa, 0x58, 0x9, 0x1, 0x7fff, 0x3ba, 0x6, 0x0, 0x7fffffff, 0xd7f, 0x2, 0x696, 0x8, 0xfff, 0xda9, 0x3, 0x1, 0x230d, 0xffffffff, 0x9, 0x4, 0xf, 0x8, 0x3ff, 0x8, 0x1, 0x10001, 0xc, 0x40, 0xfffff800, 0x80000001, 0x1, 0x0, 0x2, 0xfffffffc, 0x1e6, 0xfffffffd, 0x0, 0x8, 0x3, 0xfffffffb, 0xf4, 0x8, 0x4, 0xfff, 0x7, 0xfffffff8, 0x6, 0xfffff920, 0x3, 0x200, 0x4, 0x6, 0x5, 0xffffffff, 0xf3ef, 0x4, 0x5, 0x5fec61b1, 0x8, 0x5, 0x2, 0x6, 0x37, 0x3, 0x9, 0x52b7, 0xfff, 0x8, 0x6c4f, 0x8, 0x6, 0x0, 0x85, 0xd, 0x6, 0x5dd1, 0xfffffffb, 0x4, 0x8a, 0x4, 0x6, 0x8, 0x2, 0x5, 0x8000, 0x2, 0xffff0243, 0x3, 0x1, 0x1, 0xffffffff, 0x7f, 0x7f, 0xfffffff8, 0xb, 0x7ff, 0x4, 0x5, 0x907b, 0x7, 0x8, 0x99b3, 0x0, 0x4, 0xffe, 0x4b3, 0xffffffff, 0x0, 0xfffffffc, 0x7042f2dc, 0x6, 0xc, 0x1, 0xf, 0x0, 0x8, 0x70, 0x81, 0x0, 0x7ff, 0x3b0d08cd, 0x8, 0x1, 0x0, 0x9, 0x3, 0x2, 0x6, 0x9, 0xa23, 0x97, 0x800, 0x5, 0x8, 0x9, 0x6, 0x4, 0xe, 0x3, 0xfffffffa, 0x7, 0x8, 0xf0, 0x0, 0x6, 0x6, 0x4, 0x72, 0x9, 0x9, 0xf95, 0x7, 0x9, 0x8000, 0x2, 0x8, 0x3, 0xfffff6aa, 0x401, 0x4, 0x7, 0x3, 0x4, 0xfff, 0x5, 0x5b16cc32, 0x4, 0x5, 0x0, 0x101, 0x3, 0x5, 0xe, 0x8, 0x80000000, 0x4, 0x4, 0x0, 0x2, 0x0, 0xe, 0x1, 0x6, 0x5, 0x5, 0xea, 0x100, 0x9c3, 0x10001, 0x200, 0x42c, 0x5, 0x8, 0x7fffffff, 0x8, 0x3, 0x2, 0x2, 0x1, 0x5, 0x4, 0x7, 0xfffffffe, 0x81, 0x8, 0xfffffffd, 0x0, 0xfff, 0x7, 0x5, 0x2, 0x91b7, 0xe92, 0x8000, 0x3, 0x100, 0x5, 0x7fffffff, 0x91, 0x7fffffff, 0x80, 0x2, 0x6, 0x9, 0x1000000, 0x0, 0x101, 0xe, 0x7fc000, 0xd11c, 0xb, 0xf, 0x5, 0x7f778dcf, 0x7fffffff, 0x2, 0x1, 0x5b000, 0x80000001, 0x7, 0xff, 0x5, 0xa, 0x7, 0x6, 0x1000000, 0x0, 0x2b, 0xa, 0x0, 0x7, 0x7]}) (async) 2.209140261s ago: executing program 4 (id=6116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x130108c4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x13, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x34, 0x8, "0dd02d40dbfd8bd719179bec49d1dd6e5d47251c9c47354285206eb72ae9800c69ced183433dae587b03325196279a07"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000140)={0xe021, 0x1, [{0x1, 0x1}]}) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf251000000005000f000400000008000100", @ANYRES32=0x0, @ANYBLOB="0500100027"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) 2.1077062s ago: executing program 4 (id=6117): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000180)={0x27, 0x3, 0x0, {0x6, 0x6, 0x0, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, 0x27) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r3], &(0x7f00000003c0)=[0x7], &(0x7f00000000c0)=[r4], &(0x7f0000000180), 0x0, 0xff}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) 2.011449507s ago: executing program 3 (id=6118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000400300002e14000180100001006574683a6970366772653000"], 0x28}}, 0x4000) 1.967334487s ago: executing program 3 (id=6119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000000004384000040"]) 1.887834201s ago: executing program 3 (id=6120): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000280)) r2 = syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000e40)={0x990a22}) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090243000101000000090400000302060000052406000005240000000d240f0107000000ff0f000000042401"], 0x0) 1.331166887s ago: executing program 3 (id=6123): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xf3, 0x8c, 0xa8, 0x10, 0x5ac, 0x120a, 0x3732, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0xb, 0x50, 0x58, [{{0x9, 0x4, 0xbb, 0x0, 0x0, 0x27, 0xf8, 0x0, 0x7f}}]}}]}}, 0x0) syz_usb_connect$uac1(0x1, 0xcb, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0xb3, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x5, 0xd, 0x4, 0x9, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x0, 0x6f, "70a57c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x2, 0x5, {0x7, 0x25, 0x1, 0x3, 0x9e, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x17, 0x4, 0xcd, 0xd1, "8e", "d52e"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x2, 0x6, "dc"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x8000, 0x26, "003c72d0"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x3, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x5, 0x2, "", "d1df82"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2f, 0x8, "d2fda70931fe7914"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x2, 0xa, {0x7, 0x25, 0x1, 0x0, 0x6, 0x6}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x3, 0x3, 0x20, 0xfc}, 0x3e, &(0x7f0000000180)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "22f345804123d2632c4edd4e9af4a71d"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "298f974c595bdd5110638859606c6fa5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1d, 0x7, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x32, 0x6, 0xa, 0x1}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x445}}, {0x7, &(0x7f0000000200)=@string={0x7, 0x3, "f5817ef053"}}, {0xf, &(0x7f0000000240)=@string={0xf, 0x3, "f69093a27be98f02335c6386d7"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0c}}, {0xa7, &(0x7f0000000340)=@string={0xa7, 0x3, "bc4e4253174199f227c33c2cd1456a4faf0f99f5dfe2c12569c18ee14d5a85240ffdfd1ff32e5a8b8faf15468026ef8287fd9f615ecb92920c32bbe8cd38f79c34fc016d3b86f6d35a49003cca580c2e610c929a1a337995ae20206d6305106356123fef16d1e6de1825299e5ff094d0430a51465d07b9426602890b0ac899eafd1164bcf8b46e3951e1b7f75d8009047b884345bfb3023746ee4a51598fab770236818d13"}}]}) 1.090161297s ago: executing program 7 (id=6124): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) fallocate(r0, 0x0, 0x0, 0x1000f4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_io_uring_setup(0x420b, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x8000000, 0x0, 0x0}, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, 0x0, &(0x7f0000000180)) madvise(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x19) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x84) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',roo']) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r5, &(0x7f0000000100)=@abs={0x27}, 0x6e) truncate(&(0x7f0000000080)='./bus\x00', 0x95a) 1.016701052s ago: executing program 7 (id=6125): r0 = socket(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(0x0, 0x0, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4048aec9, &(0x7f0000000040)={0x601b, 0x8, 0x2000000, 0x2000000, 0x40002}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r9, 0x7}, 0x8) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) 771.631553ms ago: executing program 6 (id=6126): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3e, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x5}}, 0xe8) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004380), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0x5502, 0x0) (async) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0xd2e, &(0x7f0000000040)={0x0, 0x8f2b, 0xc000, 0x0, 0x279}, 0x0, 0x0) 763.714371ms ago: executing program 3 (id=6127): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @private=0xa010100}}}}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x1, 0x2, 0xd104c}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r8, 0x0, 0xa, 0xffd9, &(0x7f0000000180)="d3929d732e4f4959c54874fe90d5a2c28a", 0x4}) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r9, 0x80045430, 0x20000000) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r11 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r11, 0xffffffff80000901, 0xee00, 0x0) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r12, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r12, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r12, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x0, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000300)={0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f00000004c0)={0x40, 0x10, 0xed, "bd0b681d6b6ae66ea9d3a9f1e7035f90982cfd5752f4661f0ab017a7a71f0d1a12b6441614da4e937b908a9f813585d831d2135adcef29e97c1459b5ae4d3a592d2b419c11f81765ff2179141bae5c7a26925e97ddab66bb427815b6a061366f077d9445dc075be044e0c77205d984ed194458354f39e28d48ae060617bc1885d7b4b1d8238d624888c87aef5a2c31cb864cf1516dc6524114b22eeae2450b72b8ab1bad510a4a7224172331a9e88394a2b5d486b436b2d9f00d709625395e091adb08b9fbc0813c5addc1a7ffaa2bf9d993ffb5a7742c9714022eef27479d68d33adb35d765fb5949c25cbd3d"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) 657.052768ms ago: executing program 6 (id=6128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000400300003a14000180100001006574683a6970366772653000"], 0x28}}, 0x4000) 451.749887ms ago: executing program 6 (id=6129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000000004884000040"]) 450.17524ms ago: executing program 7 (id=6130): r0 = socket$unix(0x1, 0x5, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000040)) (async) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) bind$unix(r0, &(0x7f0000002440)=@file={0x1, './file0\x00'}, 0x6e) 414.096608ms ago: executing program 4 (id=6131): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000140)) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4}}]}, 0x20}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030104000000000000f3ff000000000c000212ffffffff00000004"], 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000009ead884c3eee7da1098c041473d0d2d221f933ec67df659bac346b1383af487363dc981043762408afb326f161", @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x48090) 393.971398ms ago: executing program 7 (id=6132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x414003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x808040, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x8000040400000000, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x45, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYRESHEX=r1], 0x0) 303.587681ms ago: executing program 6 (id=6133): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r1, 0x7) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 303.452636ms ago: executing program 6 (id=6134): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0xffffffffffffffff, r0, 0xee00, 0x2, 0x2}, 0x72b, 0x3, 0x8001, 0xfffffffffffffffb, 0x0, 0x0, 0xfff5}) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 274.232471ms ago: executing program 6 (id=6135): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="400f4a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x32, 0x2, &(0x7f0000000040)="01f2") 0s ago: executing program 3 (id=6136): brk(0x5) r0 = socket$inet6(0xa, 0x258241f65983383f, 0x0) brk(0x200000000000) brk(0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x73ed, @private2, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000040)="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", 0xfc}, {&(0x7f0000000140)="9d562a0a4f7f92456d2b21d0b730b387d5f971aa2f88ee2955ea38a07ad78275949bbfbd02d19370a0da549a370bad4cd31f39dd540f47636eff4ec415285f9392ce0b935bca00734ef67e15c1275aab14314d594e18ac933b99a96564323f420f12dd7872251f15056863fa856646e9cb22ee47c0addd9655f698c848590c6aa21306910c7d98ab702c4c76300ca21262c61d1e862ab261349c2074fbf12fe81e99bedcbff480ac32110b6885889bb41f93c960eb495fb35cbc68b1cc3b315ba8", 0xc1}, {&(0x7f0000000240)="fd29703f003d4cf98d493764e1214a8218a0568203bf25360b9a1873542bfa667067388301", 0x25}, {&(0x7f0000000280)="5fdfb23ebd1d90acdac89109c17ccc85b3417f4f631686078db9e901a4342c87ded9de75807736ce945655573c1fdab37a53da272ab6d6bc1113b3000e838b32a534722b4161a69a8dcb4a52c9e3f7031224373feae89174f5f8b6b69ea1e4fc05a090dec577ed5e30c5554e2945838d57bb985749ace0589e99412a7cb56448d4a1aff61a1436907b0c9f51699ef0094a91e99705c8bcad2fcf3ba3e72436a6685069808cbfaf11f574b2d72ff735ec6be5ab2080735ec77005b5367dd6", 0xbe}, {&(0x7f0000000340)="61f7768cae77854152aa6ece201e141ba1b56c7c7b6674d3da6cc96e1571bd0bf2e056c2c9423a2d069e4d80f689b1f9375303228aee609a29abca6ac09b2c88325d3c8aea464df5cec8a96875c9aac3a55cffcfd7990ee09148e6d50577ea78dfbc9a4875c4be3772c5cb7d9c62c6b457d6b68db40c747def9a3952fad441be2ed76b13da0f8cf385855f01f63b1990777d1a37456f279dc786744e51109dbf83b2ee99405b958d01be490f73467a63f2612e34f0823ddec30bc37a4b163abd0b426e50ba5610e18cc29715b455df2057174492dad238620e7c3f2cbd392715f7ddbcb73fa610bd7733aa", 0xeb}, {&(0x7f0000000440)="4bcec8e3fc4f98530bdcf6e700cead0df714c691c051cdcdaddf1d98f1cf263be5fc2aa307896926eaab6068b0d6311aa37b618b808e6bc22722b171c2bf07ddba17185c8369c85b4eb8c6b20e7acd6db9bd9c49b5ca3fa8748a4d8ae0668b34971eb71b7cd549c60641767bfbbb74dd4f335f597b92983885584045a4a33db74326a93a6574519ac2e8a7b1c609c996f010ecbcb8d7d7362515d3719df87731dfdbd6a12b960d407ff42c088695fbb59af943b63b38c8f14aef2fd048f11bd6c3df3ed315042047e84f7602637d3bfb25534267e1a56bbe1793331b47e254fe908e98326d24277768", 0xe9}, {&(0x7f0000000540)="d11aa0e7fa13928259a639745f03ad60452323c14b4c4c37c8a549b39b09732dd24b8733eeeb5fa6a8743df783d131451046523b64b2ac1dda6c31266b47214815a6346f1086ac21be1bc0faa1f64bb2d24ec73b653464f990494a19f2f75d5559e7f5ae450b8199e94219da50c36a9ee205b0b9d89f68bcca2929061879408308b6e75520f8162ea72a4dcf07", 0x8d}, {&(0x7f0000000600)="491cd989f9f1e8cbd6f7f90d0c60c409b4b915fbc33607fffd2fb78bc7c986f532bc927a902863efde42c638d14ec19ddb5e94a4b91139122c15dd5b364ebcd571fb5fa5793f55438512d2d6d2db3816a54d68054ea29cd81c8bc9df7f5a14417fffdf01b07c2af8f495b2e03b062e6c6d42b695bcbf6503464734b36beda9f48ec855ba777290adb99e166112278a21af9733c180cfff3bd10801de409cc8bc3c46920196e14d8dda99f67ad547dcf5bf5b5c8df86ff51b6d95c34107f809b95ecafc138f679ef0b499edf85db0738bde8f87ef505d1221b0d0ef5bd6692b07f88fd0417c", 0xe5}, {&(0x7f0000000700)="e8829524b647aa6b6c9012a7ce9f31280e97f6d6e6351131532ff2cc524a9c1db81151387a67c19cbb7a377c045b7c695a42b9202fbed187c9bc96d012dc928a69c58a06448e7b9470ff2a4c372c7118ba1eea3ac21ed9a10467932bc3712cb5e876dce39cacc9b891e5d9aed8d899d1d51d4b582f1321dcbae305ac2c", 0x7d}], 0x9, &(0x7f0000000840)=[@rthdrdstopts={{0x158, 0x29, 0x37, {0x88, 0x27, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8, 0xe2, "d0ccccd7f50e77cc65e5739571936091995388b3a897f52f8a897df0b4ba28cce58290605042f7d212ca6ef7a0bfa2153ff150e92db79f2b397742b755d8482f3246570e0e086224d71359ec1b90a26240940d2b659b85dbd4ffb1f72721eaf797ed0d4dfc0a11b9ae0251d33c9d94dac7fa848b654a97fd537fc2bf2ddcb497f2257919f5e88cbbb1bfcb77597bbc0c953fbe621d087e27d8879e0353fe6b5b39780cf32fc51993eb83b59cb168540db3a55bac178d132a6ebe6adcdb93757ccc829fdbc9ae2c5e9a20b903eba0e93c42e32503b403a1e158ebbcb324d9a0d4e035"}, @calipso={0x7, 0x48, {0x1, 0x10, 0x52, 0x1ff, [0x35e, 0x1, 0x4, 0xa, 0xffff, 0x1000, 0x9, 0x42]}}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x1ff}]}}}, @dstopts_2292={{0x198, 0x29, 0x4, {0x3a, 0x2f, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0x80, 0xd0, "cf4442f91e2b1979f33480d13dc5e52692143c75d0668ea916ab8194e8aa744878190e9013a32ab9286ab7cea496ad4e2074872cc051e1c3d1a33cd865e3c8d8c5282d06d444e58159a07a698f30e99f4f60d2dd4b170d4cc3e74e962aa15981c55a27c2dcf1d59b2d6bf2ef1ff4277169a3a250f823737306f9c38905dea200311542940bba3f00e6eaca115dfe62a75522741a98eeadc787a21dc9f7d339ba0b39c635f4104bb80efdc0f758e5326dc04bfe264d8d0be7722d1c2bffb182ef5a16897be7912d9ff1a475be61a0bb0c"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x20, 0x2, [0x2, 0x5]}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x4, [0xe9, 0x0, 0x81, 0x67b8]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x2, 0x6d, [0x9, 0x8, 0x7, 0x1]}}, @ra={0x5, 0x2, 0x1ff}, @calipso={0x7, 0x30, {0x3, 0xa, 0x6, 0x716, [0x1, 0x61f, 0xd, 0x6, 0x2]}}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x33, 0x12, 0x2, 0x81, 0x0, [@private0, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x14}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0, @mcast1]}}}], 0x398}}], 0x1, 0x3a258b310ff012b7) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000c40)={0x4, {{0x2, 0x4e23, @multicast1}}}, 0x88) brk(0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000e00)={&(0x7f0000000d00), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@flushsa={0x4c, 0x1c, 0x0, 0x70bd27, 0x25dfdbfd, {0x32}, [@proto={0x5, 0x19, 0x3c}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @address_filter={0x28, 0x1a, {@in6=@local, @in=@broadcast, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000e40)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e24, 0x4, @empty, 0x10001}, @in6={0xa, 0x4e23, 0x3b, @private0={0xfc, 0x0, '\x00', 0x1}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @multicast1}], 0x68) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000ec0)={0x4, [0x6342, 0x1, 0x5, 0x6]}, &(0x7f0000000f00)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000fc0)={'syztnl1\x00', &(0x7f0000000f40)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x5, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x740, 0x7, 0x6, 0x800}}) r4 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001000)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e22, 0x2, 0x4e21, 0x0, 0xa, 0x110, 0xa0, 0x0, r3, r4}, {0x8, 0x0, 0x4, 0x10000000000, 0x100000001, 0x2, 0xe, 0x277}, {0x5, 0x101, 0xc000000000000000, 0x264c}, 0x5, 0x6e6bb1, 0x0, 0x1, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4, 0x2, 0x2, 0x6, 0x2, 0x7}}, 0xe8) r5 = fspick(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x0) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000001140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001540), r6) openat2$dir(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x80000, 0x11f, 0xc}, 0x18) readv(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000001600)=""/65, 0x41}, {&(0x7f0000001680)=""/50, 0x32}, {&(0x7f00000016c0)=""/10, 0xa}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/52, 0x34}, {&(0x7f0000002740)=""/76, 0x4c}, {&(0x7f00000027c0)=""/154, 0x9a}], 0x7) r7 = syz_open_dev$dri(&(0x7f0000002900), 0xff, 0x400000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000029c0)={&(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002980), 0x5, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01864ba, &(0x7f0000002a00)={0x7, r8, r9, 0xeeeeeeee}) connect$inet6(r0, &(0x7f0000002a40)={0xa, 0x4e23, 0x0, @local, 0x8000}, 0x1c) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000002a80)) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000002ac0)='$[{&*-((!\x00', &(0x7f0000002b00)='ip6_vti0\x00', 0x0) fcntl$setpipe(r7, 0x407, 0x5) sendto$isdn(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x10001, "ba62e5907cf6b2e2c48a18f28ab0967bfc7b85702df3d1b60d2a49da8acab65b6e0908fbb1531c2910f9eebd0df44ff4b5703c46e51efb6d359c3f35228d00401a9db0cb50cf9cc8546bf04ee4fdbfbc"}, 0x58, 0x4000, &(0x7f0000002c40)={0x22, 0x4, 0x1, 0x2, 0xff}, 0x6) kernel console output (not intermixed with test programs): {/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.832457][T21757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.841753][T21757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.917615][ T5909] usb 7-1: USB disconnect, device number 85 [ 980.038539][T21768] overlayfs: failed to resolve './bus/file0': -2 [ 980.341235][ T1211] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 980.494559][ T1211] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 980.503790][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.512162][ T1211] usb 5-1: Product: syz [ 980.516363][ T1211] usb 5-1: Manufacturer: syz [ 980.521653][ T1211] usb 5-1: SerialNumber: syz [ 980.528267][ T1211] usb 5-1: config 0 descriptor?? [ 980.545995][ T1211] usbsevseg 5-1:0.0: USB 7 Segment device now attached [ 980.656419][T21785] netlink: 'syz.3.5402': attribute type 6 has an invalid length. [ 980.664589][T21785] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5402'. [ 980.742720][ T5909] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 980.747790][ T1211] usb 5-1: USB disconnect, device number 78 [ 980.757434][ T1211] usbsevseg 5-1:0.0: USB 7 Segment now disconnected [ 980.901721][ T5909] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 980.911487][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.924997][ T5909] usb 7-1: config 0 descriptor?? [ 980.937752][ T5909] usb 7-1: selecting invalid altsetting 1 [ 980.992265][ T5909] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 981.138489][ T1211] usb 7-1: USB disconnect, device number 86 [ 981.919902][ T1211] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 981.950081][ T5862] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 982.073607][ T1211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.084173][ T1211] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 982.093493][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.105359][ T1211] usb 5-1: config 0 descriptor?? [ 982.113250][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 982.118149][ T1211] pwc: Askey VC010 type 2 USB webcam detected. [ 982.124556][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 982.143212][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 982.153690][ T5862] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 982.163340][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.174079][ T5862] usb 7-1: config 0 descriptor?? [ 982.187353][ T5862] em28xx 7-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 982.407025][ T5930] usb 7-1: USB disconnect, device number 87 [ 982.520439][ T1211] pwc: recv_control_msg error -32 req 02 val 2b00 [ 982.527990][ T1211] pwc: recv_control_msg error -32 req 02 val 2700 [ 982.536448][ T1211] pwc: recv_control_msg error -32 req 02 val 2c00 [ 982.551745][ T1211] pwc: recv_control_msg error -32 req 04 val 1000 [ 982.558977][ T1211] pwc: recv_control_msg error -32 req 04 val 1300 [ 982.566281][ T1211] pwc: recv_control_msg error -32 req 04 val 1400 [ 982.573481][ T1211] pwc: recv_control_msg error -32 req 02 val 2000 [ 982.582355][ T1211] pwc: recv_control_msg error -32 req 02 val 2100 [ 982.589562][ T1211] pwc: recv_control_msg error -32 req 04 val 1500 [ 982.858367][ T1211] pwc: recv_control_msg error -71 req 02 val 2400 [ 982.866275][ T1211] pwc: recv_control_msg error -71 req 02 val 2600 [ 982.873280][ T1211] pwc: recv_control_msg error -71 req 02 val 2900 [ 982.883096][ T1211] pwc: recv_control_msg error -71 req 02 val 2800 [ 982.890284][ T1211] pwc: recv_control_msg error -71 req 04 val 1100 [ 982.897185][ T1211] pwc: recv_control_msg error -71 req 04 val 1200 [ 982.908158][ T1211] pwc: Registered as video103. [ 982.920503][ T1211] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input113 [ 982.995198][ T1211] usb 5-1: USB disconnect, device number 79 [ 983.096351][T21819] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5412'. [ 983.107929][T21819] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5412'. [ 983.136699][ T5929] IPVS: starting estimator thread 0... [ 983.251066][T21824] IPVS: using max 29 ests per chain, 69600 per kthread [ 983.379796][ T5862] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 983.424482][ T5909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 983.530295][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 983.538046][ T5862] usb 7-1: too many endpoints for config 0 interface 0 altsetting 4: 128, using maximum allowed: 30 [ 983.549233][ T5862] usb 7-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 983.564037][ T5862] usb 7-1: config 0 interface 0 has no altsetting 0 [ 983.571478][ T5862] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 983.580659][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.592190][ T5862] usb 7-1: config 0 descriptor?? [ 983.807088][ T5862] usb 7-1: string descriptor 0 read error: -71 [ 983.815534][ T5862] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 983.824148][T21849] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.5421'. [ 983.833984][ T5862] gspca_vc032x: reg_r err -71 [ 983.838669][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.849032][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.854707][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.862747][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.868035][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.873418][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.878758][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.880010][ T1211] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 983.884398][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.897027][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.902553][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.907950][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.913391][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.918762][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.924129][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.929443][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.934820][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.940286][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.945636][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 983.951145][ T5862] gspca_vc032x: Unknown sensor... [ 983.956363][ T5862] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 983.973573][ T5862] usb 7-1: USB disconnect, device number 88 [ 984.040032][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 984.047041][ T1211] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 984.055554][ T1211] usb 5-1: config 0 has no interface number 0 [ 984.063198][ T1211] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.074324][ T1211] usb 5-1: config 0 interface 85 has no altsetting 0 [ 984.085908][ T1211] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 984.095119][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.104122][ T1211] usb 5-1: Product: syz [ 984.108279][ T1211] usb 5-1: Manufacturer: syz [ 984.113003][ T1211] usb 5-1: SerialNumber: syz [ 984.120248][ T1211] usb 5-1: config 0 descriptor?? [ 984.327175][ T1211] appletouch 5-1:0.85: Failed to read mode from device. [ 984.334597][ T1211] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 984.368562][T21851] adf_ctl_ioctl: 15 callbacks suppressed [ 984.368580][T21851] QAT: Invalid ioctl 1342215231 [ 984.603616][ T1211] usb 5-1: USB disconnect, device number 80 [ 984.665103][T21862] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5426'. [ 984.675270][T21862] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 985.290114][ T982] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 985.429850][ T982] usb 7-1: device descriptor read/64, error -71 [ 985.670231][ T982] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 985.811161][ T982] usb 7-1: device descriptor read/64, error -71 [ 985.920411][ T982] usb usb7-port1: attempt power cycle [ 985.939919][ T5862] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 986.089843][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 986.097424][ T5862] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 986.105927][ T5862] usb 5-1: config 0 has no interface number 0 [ 986.112163][ T5862] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 986.122357][ T5862] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 986.132932][ T5862] usb 5-1: config 0 interface 41 has no altsetting 0 [ 986.142225][ T5862] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 986.151471][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.159569][ T5862] usb 5-1: Product: syz [ 986.163854][ T5862] usb 5-1: Manufacturer: syz [ 986.168494][ T5862] usb 5-1: SerialNumber: syz [ 986.176235][ T5862] usb 5-1: config 0 descriptor?? [ 986.182135][T21875] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 986.189513][T21875] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 986.269849][ T982] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 986.290814][ T982] usb 7-1: device descriptor read/8, error -71 [ 986.399553][T21875] loop6: detected capacity change from 0 to 524287999 [ 986.401895][T21876] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 986.414363][T21876] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 986.539979][ T982] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 986.571043][ T982] usb 7-1: device descriptor read/8, error -71 [ 986.634849][ T5862] Error reading MAC address [ 986.651933][T21875] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 986.659462][T21875] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 986.691739][ T982] usb usb7-port1: unable to enumerate USB device [ 986.715638][T21886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5432'. [ 986.918264][ T5862] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 986.959105][T21896] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5436'. [ 986.974004][ T5862] usb 5-1: USB disconnect, device number 81 [ 986.987271][T21895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5436'. [ 986.997782][T21896] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5436'. [ 987.409646][T21930] 9pnet_fd: Insufficient options for proto=fd [ 987.518251][T21933] program syz.4.5446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 988.218575][T21945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.569976][ T982] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 988.729943][ T982] usb 7-1: Using ep0 maxpacket: 8 [ 988.737604][ T982] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 988.746893][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.763678][ T982] pvrusb2: Hardware description: Terratec Grabster AV400 [ 988.771550][ T982] pvrusb2: ********** [ 988.775577][ T982] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 988.785870][ T982] pvrusb2: Important functionality might not be entirely working. [ 988.794003][ T982] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 988.805451][ T982] pvrusb2: ********** [ 988.966322][ T2345] pvrusb2: Invalid write control endpoint [ 989.046736][ T2345] pvrusb2: Invalid write control endpoint [ 989.059833][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 989.086315][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 989.104119][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 989.119382][ T2345] pvrusb2: Device being rendered inoperable [ 989.132270][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 989.139375][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 989.157503][ T2345] pvrusb2: Attached sub-driver cx25840 [ 989.165239][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 989.188716][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 989.193540][T21965] netlink: 'syz.3.5456': attribute type 2 has an invalid length. [ 989.208049][T21965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5456'. [ 989.220302][T21962] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5455'. [ 989.251256][ T1211] usb 7-1: USB disconnect, device number 93 [ 989.398749][T21974] overlayfs: failed to set uuid (488/file1, err=-1); falling back to uuid=null. [ 989.408794][T21974] overlayfs: failed to verify upper root origin [ 989.908066][T21983] tipc: Started in network mode [ 989.919369][T21983] tipc: Node identity , cluster identity 4711 [ 989.928380][ T5862] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 989.944766][T21983] tipc: Failed to obtain node identity [ 989.951638][T21983] tipc: Enabling of bearer rejected, failed to enable media [ 989.998773][T21987] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5462'. [ 990.090791][ T5862] usb 5-1: device descriptor read/64, error -71 [ 990.344755][ T5862] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 990.479807][ T5862] usb 5-1: device descriptor read/64, error -71 [ 990.605812][ T5862] usb usb5-port1: attempt power cycle [ 990.649985][ T1211] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 990.804729][ T1211] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 990.821157][ T1211] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 990.839571][ T1211] usb 7-1: config 220 has no interface number 2 [ 990.851744][ T1211] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 990.873249][ T1211] usb 7-1: config 220 interface 0 has no altsetting 0 [ 990.886022][ T1211] usb 7-1: config 220 interface 76 has no altsetting 0 [ 990.898939][ T1211] usb 7-1: config 220 interface 1 has no altsetting 0 [ 990.917789][ T1211] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 990.939808][ T1211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.947951][ T1211] usb 7-1: Product: syz [ 990.952490][ T1211] usb 7-1: Manufacturer: syz [ 990.957257][ T1211] usb 7-1: SerialNumber: syz [ 990.964470][ T5862] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 991.011859][ T5862] usb 5-1: device descriptor read/8, error -71 [ 991.070114][ T30] audit: type=1326 audit(1757889068.169:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22004 comm="syz.7.5466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e4058eba9 code=0x0 [ 991.208661][ T1211] usb 7-1: selecting invalid altsetting 0 [ 991.228220][ T1211] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 991.245738][ T1211] usb 7-1: No valid video chain found. [ 991.260881][ T5862] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 991.264139][ T1211] usb 7-1: selecting invalid altsetting 0 [ 991.279985][ T1211] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 991.282015][ T5862] usb 5-1: device descriptor read/8, error -71 [ 991.297441][ T1211] usb 7-1: USB disconnect, device number 94 [ 991.430567][ T5862] usb usb5-port1: unable to enumerate USB device [ 992.275908][T22018] tipc: Started in network mode [ 992.291631][T22018] tipc: Node identity , cluster identity 4711 [ 992.297768][T22018] tipc: Failed to obtain node identity [ 992.328921][T22018] tipc: Enabling of bearer rejected, failed to enable media [ 992.378104][ T5909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 992.920227][ T5929] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 993.054088][T22044] netlink: 'syz.3.5481': attribute type 11 has an invalid length. [ 993.080201][ T5929] usb 5-1: device descriptor read/64, error -71 [ 993.102728][T22044] netlink: 'syz.3.5481': attribute type 11 has an invalid length. [ 993.167846][T22049] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5480'. [ 993.349874][ T5929] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 993.479904][ T5929] usb 5-1: device descriptor read/64, error -71 [ 993.590978][ T5929] usb usb5-port1: attempt power cycle [ 993.654753][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.771054][T22053] tipc: Started in network mode [ 993.775956][T22053] tipc: Node identity , cluster identity 4711 [ 993.782763][T22053] tipc: Failed to obtain node identity [ 993.788369][T22053] tipc: Enabling of bearer rejected, failed to enable media [ 993.929952][ T5929] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 993.971835][ T5929] usb 5-1: device descriptor read/8, error -71 [ 994.219790][ T5929] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 994.251627][ T5929] usb 5-1: device descriptor read/8, error -71 [ 994.362995][ T5929] usb usb5-port1: unable to enumerate USB device [ 996.080120][ T1211] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 996.236332][ T1211] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 996.262779][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.275824][ T1211] usb 5-1: config 0 descriptor?? [ 996.295669][ T1211] cp210x 5-1:0.0: cp210x converter detected [ 996.725956][ T1211] usb 5-1: cp210x converter now attached to ttyUSB0 [ 996.919334][T19489] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 996.919822][ T982] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 996.930251][T19489] CPU: 1 UID: 0 PID: 19489 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 996.930278][T19489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 996.930291][T19489] Workqueue: hci1 hci_rx_work [ 996.930316][T19489] Call Trace: [ 996.930325][T19489] [ 996.930334][T19489] dump_stack_lvl+0x189/0x250 [ 996.930361][T19489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 996.930380][T19489] ? __pfx__printk+0x10/0x10 [ 996.930410][T19489] ? kernfs_path_from_node+0x250/0x290 [ 996.930439][T19489] ? kernfs_path_from_node+0x2f/0x290 [ 996.930464][T19489] sysfs_create_dir_ns+0x259/0x280 [ 996.930489][T19489] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 996.930512][T19489] ? do_raw_spin_unlock+0x122/0x240 [ 996.930543][T19489] kobject_add_internal+0x59f/0xb40 [ 996.930576][T19489] kobject_add+0x155/0x220 [ 996.930604][T19489] ? __pfx_kobject_add+0x10/0x10 [ 996.930628][T19489] ? _raw_spin_unlock+0x28/0x50 [ 996.930652][T19489] ? get_device_parent+0x366/0x3a0 [ 996.930680][T19489] device_add+0x408/0xb50 [ 996.930706][T19489] hci_conn_add_sysfs+0xd5/0x1e0 [ 996.930737][T19489] le_conn_complete_evt+0xc3a/0x1220 [ 996.930774][T19489] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 996.930798][T19489] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 996.930820][T19489] ? __asan_memcpy+0x40/0x70 [ 996.930844][T19489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 996.930865][T19489] ? skb_pull_data+0xfb/0x200 [ 996.930907][T19489] hci_le_conn_complete_evt+0x187/0x450 [ 996.930938][T19489] hci_event_packet+0x78f/0x1200 [ 996.930961][T19489] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 996.930986][T19489] ? __pfx_hci_event_packet+0x10/0x10 [ 996.931016][T19489] ? hci_send_to_monitor+0xe2/0x570 [ 996.931043][T19489] hci_rx_work+0x46a/0xe80 [ 996.931071][T19489] ? process_scheduled_works+0x9ef/0x17b0 [ 996.931097][T19489] process_scheduled_works+0xae1/0x17b0 [ 996.931149][T19489] ? __pfx_process_scheduled_works+0x10/0x10 [ 996.931189][T19489] worker_thread+0x8a0/0xda0 [ 996.931215][T19489] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 996.931243][T19489] ? __kthread_parkme+0x7b/0x200 [ 996.931276][T19489] kthread+0x711/0x8a0 [ 996.931306][T19489] ? __pfx_worker_thread+0x10/0x10 [ 996.931327][T19489] ? __pfx_kthread+0x10/0x10 [ 996.931354][T19489] ? _raw_spin_unlock_irq+0x23/0x50 [ 996.931373][T19489] ? lockdep_hardirqs_on+0x9c/0x150 [ 996.931392][T19489] ? __pfx_kthread+0x10/0x10 [ 996.931503][T19489] ret_from_fork+0x4bc/0x870 [ 996.931529][T19489] ? __pfx_ret_from_fork+0x10/0x10 [ 996.931559][T19489] ? __switch_to_asm+0x39/0x70 [ 996.931577][T19489] ? __switch_to_asm+0x33/0x70 [ 996.931595][T19489] ? __pfx_kthread+0x10/0x10 [ 996.931621][T19489] ret_from_fork_asm+0x1a/0x30 [ 996.931659][T19489] [ 996.931708][T19489] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 997.089969][ T982] usb 7-1: Using ep0 maxpacket: 16 [ 997.093758][T19489] Bluetooth: hci1: failed to register connection device [ 997.115745][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 997.247831][ T982] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 997.257056][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.265135][ T982] usb 7-1: Product: syz [ 997.269320][ T982] usb 7-1: Manufacturer: syz [ 997.274014][ T982] usb 7-1: SerialNumber: syz [ 997.283907][ T982] usb 7-1: config 0 descriptor?? [ 997.295726][ T982] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 997.305267][ T982] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 997.898667][ T982] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 998.472669][T22107] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5504'. [ 998.746407][ T5909] usb 5-1: USB disconnect, device number 90 [ 998.760593][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 998.773979][ T2979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 998.796438][ T5909] cp210x 5-1:0.0: device disconnected [ 999.169965][ T5909] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 999.334957][ T5909] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 999.350479][ T982] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 999.358646][ T982] em28xx 7-1:0.0: board has no eeprom [ 999.364190][ T5909] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 999.374545][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.395011][ T5909] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 999.439984][ T982] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 999.447933][ T982] em28xx 7-1:0.0: dvb set to bulk mode. [ 999.454121][T12559] em28xx 7-1:0.0: Binding DVB extension [ 999.521627][T12559] em28xx 7-1:0.0: Registering input extension [ 999.673384][ T982] usb 7-1: USB disconnect, device number 95 [ 999.690739][ T982] em28xx 7-1:0.0: Disconnecting em28xx [ 999.704375][ T982] em28xx 7-1:0.0: Closing input extension [ 999.762767][ T982] em28xx 7-1:0.0: Freeing device [ 999.980946][T22124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.990377][T22124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.241815][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5513'. [ 1000.281434][T22139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5516'. [ 1000.345567][T22142] netlink: 'syz.6.5517': attribute type 10 has an invalid length. [ 1000.357222][T22142] team0: Device tunl0 is of different type [ 1000.370722][T22142] netlink: 'syz.6.5517': attribute type 10 has an invalid length. [ 1000.379307][T22142] team0: Device tunl0 is of different type [ 1000.450765][ T5909] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1000.459043][ T5909] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1000.466568][ T5909] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1000.474953][ T5909] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 1000.484108][ T5909] usb 5-1: USB disconnect, device number 91 [ 1000.679937][ T5930] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 1000.842357][ T5930] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.856918][ T5930] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=c0.c5 [ 1000.867512][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.878349][ T5930] usb 7-1: config 0 descriptor?? [ 1001.304229][ T5930] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1001.306763][ T2979] usb 7-1: Failed to submit usb control message: -71 [ 1001.325094][ T5930] usb 7-1: USB disconnect, device number 96 [ 1001.333449][ T2979] usb 7-1: unable to send the bmi data to the device: -71 [ 1001.343069][ T2979] usb 7-1: unable to get target info from device [ 1001.349452][ T2979] usb 7-1: could not get target info (-71) [ 1001.356806][ T2979] usb 7-1: could not probe fw (-71) [ 1001.766087][T22162] can0: slcan on ttyS3. [ 1001.833056][T22162] can0 (unregistered): slcan off ttyS3. [ 1001.974225][ T5909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1002.152336][T22186] 9pnet_fd: Insufficient options for proto=fd [ 1002.155046][T22187] 9pnet_fd: Insufficient options for proto=fd [ 1002.176501][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5525'. [ 1002.510032][ T5930] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1002.700077][ T5930] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1002.718558][ T5930] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1002.751833][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1002.766667][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1002.784548][ T5930] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1002.815365][ T5930] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1002.836262][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.905943][ T5930] usb 7-1: config 0 descriptor?? [ 1002.933202][T22176] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1003.167173][T19489] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 1003.382258][ T5930] plantronics 0003:047F:FFFF.0062: reserved main item tag 0xd [ 1003.445270][ T5930] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1003.685770][ T1211] usb 7-1: USB disconnect, device number 97 [ 1004.052039][T22232] netlink: 'syz.7.5534': attribute type 10 has an invalid length. [ 1004.069818][T22232] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5534'. [ 1004.089329][T22232] batadv0: entered promiscuous mode [ 1004.094772][T22232] batadv0: entered allmulticast mode [ 1004.111603][T22232] bridge0: port 3(batadv0) entered blocking state [ 1004.128726][T22232] bridge0: port 3(batadv0) entered disabled state [ 1004.151988][T22232] bridge0: port 3(batadv0) entered blocking state [ 1004.158639][T22232] bridge0: port 3(batadv0) entered forwarding state [ 1004.210255][ T5869] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1004.217539][T19489] Bluetooth: hci2: command 0x1003 tx timeout [ 1004.475326][ T1036] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1004.485135][ T1036] batman_adv: batadv0: MLD Querier appeared [ 1004.497138][T22237] netlink: 'syz.4.5536': attribute type 10 has an invalid length. [ 1004.549504][ T1036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1004.682797][T22240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5538'. [ 1005.072454][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.084940][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.093555][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.101404][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.109223][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.119396][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.133620][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.148649][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.160475][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.168719][ T1211] hid-generic 0003:0004:0000.0063: unknown main item tag 0x0 [ 1005.265021][ T1211] hid-generic 0003:0004:0000.0063: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1005.424066][T22259] fido_id[22259]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1005.457867][T22261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5544'. [ 1005.823954][T22271] overlayfs: failed to clone upperpath [ 1005.837116][T22271] overlayfs: failed to clone upperpath [ 1005.880257][ T1211] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1005.931542][T19489] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 1006.037661][T22279] netlink: 'syz.3.5550': attribute type 12 has an invalid length. [ 1006.052091][ T1211] usb 5-1: Using ep0 maxpacket: 16 [ 1006.062233][ T1211] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1006.071734][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.079823][ T1211] usb 5-1: Product: syz [ 1006.084067][ T1211] usb 5-1: Manufacturer: syz [ 1006.088689][ T1211] usb 5-1: SerialNumber: syz [ 1006.100524][ T1211] usb 5-1: config 0 descriptor?? [ 1006.399896][ T5930] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1006.516142][ T1211] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1006.528974][ T1211] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1006.541374][ T1211] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1006.550860][ T1211] usb 5-1: media controller created [ 1006.570242][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.590740][ T5930] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1006.601035][ T1211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1006.610939][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.631205][ T5930] usb 7-1: config 0 descriptor?? [ 1006.717725][ T1211] zl10353_read_register: readreg error (reg=127, ret==0) [ 1006.737763][ T1211] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1006.754485][ T1211] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1006.788165][ T1211] usb 5-1: USB disconnect, device number 92 [ 1006.863888][ T1211] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1007.062318][ T5930] lenovo 0003:17EF:6047.0064: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 1007.499456][ T982] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1007.653823][ T5930] lenovo 0003:17EF:6047.0064: Fn-lock setting failed: -71 [ 1007.669321][ T982] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1007.672003][ T5930] lenovo 0003:17EF:6047.0064: Sensitivity setting failed: -71 [ 1007.679653][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.698012][ T5930] usb 7-1: USB disconnect, device number 98 [ 1007.718109][ T982] usb 5-1: config 0 descriptor?? [ 1007.940618][ T982] kaweth 5-1:0.0: Firmware present in device. [ 1008.131998][ T982] kaweth 5-1:0.0: Statistics collection: 0 [ 1008.136031][T22302] bridge0: entered allmulticast mode [ 1008.137892][ T982] kaweth 5-1:0.0: Multicast filter limit: 0 [ 1008.148958][T22302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5557'. [ 1008.149933][ T982] kaweth 5-1:0.0: MTU: 0 [ 1008.163802][ T982] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1008.167211][T22302] bridge_slave_1: left allmulticast mode [ 1008.176839][T22302] bridge_slave_1: left promiscuous mode [ 1008.187197][T22302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.201020][T22302] bridge_slave_0: left allmulticast mode [ 1008.207783][T22302] bridge_slave_0: left promiscuous mode [ 1008.215862][T22302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.263669][T22302] bridge0 (unregistering): left allmulticast mode [ 1008.599655][T22307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.606412][T22318] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5562'. [ 1008.634195][T22307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.107672][ T43] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1009.264284][ T43] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1009.277518][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.285551][ T43] usb 7-1: Product: syz [ 1009.290093][ T43] usb 7-1: Manufacturer: syz [ 1009.294706][ T43] usb 7-1: SerialNumber: syz [ 1009.304880][ T43] usb 7-1: config 0 descriptor?? [ 1009.645026][ T43] hso 7-1:0.0: Failed to find BULK IN ep [ 1009.668115][ T43] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1009.910776][T12559] usb 7-1: USB disconnect, device number 99 [ 1010.275605][ T982] kaweth 5-1:0.0: Error setting receive filter [ 1010.283638][ T982] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 1010.292463][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1010.308821][ T982] usb 5-1: USB disconnect, device number 93 [ 1010.339212][T22347] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1010.468512][T22354] fuse: Bad value for 'user_id' [ 1010.473433][T22354] fuse: Bad value for 'user_id' [ 1010.736339][ T43] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1010.886035][ T5930] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1010.893745][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 1010.902317][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1010.911425][ T43] usb 7-1: config 70 has too many interfaces: 225, using maximum allowed: 32 [ 1010.920419][ T43] usb 7-1: config 70 has 1 interface, different from the descriptor's value: 225 [ 1010.929858][ T43] usb 7-1: config 70 has no interface number 0 [ 1010.938201][ T43] usb 7-1: config 70 interface 222 has no altsetting 0 [ 1010.949436][ T43] usb 7-1: New USB device found, idVendor=17ef, idProduct=7205, bcdDevice=69.4b [ 1010.958815][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.967194][ T43] usb 7-1: Product: syz [ 1010.971496][ T43] usb 7-1: Manufacturer: syz [ 1010.977008][ T43] usb 7-1: SerialNumber: syz [ 1010.985953][ T43] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1011.036020][ T5930] usb 5-1: device descriptor read/64, error -71 [ 1011.197395][ T43] hub 7-1:70.222: bad descriptor, ignoring hub [ 1011.207103][ T43] hub 7-1:70.222: probe with driver hub failed with error -5 [ 1011.239126][ T43] r8152-cfgselector 7-1: USB disconnect, device number 100 [ 1011.289664][ T5930] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1011.435591][ T5930] usb 5-1: device descriptor read/64, error -71 [ 1011.548135][ T5930] usb usb5-port1: attempt power cycle [ 1011.569090][T12559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1011.840060][T22381] tipc: Started in network mode [ 1011.844988][T22381] tipc: Node identity , cluster identity 4711 [ 1011.851794][T22381] tipc: Failed to obtain node identity [ 1011.857904][T22381] tipc: Enabling of bearer rejected, failed to enable media [ 1011.886088][ T5930] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1011.927144][ T5930] usb 5-1: device descriptor read/8, error -71 [ 1012.146523][T22396] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5589'. [ 1012.157371][T22395] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5589'. [ 1012.195320][ T5930] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1012.220525][ T5930] usb 5-1: device descriptor read/8, error -71 [ 1012.285321][ T1211] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1012.337837][ T5930] usb usb5-port1: unable to enumerate USB device [ 1012.451318][ T1211] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.462423][ T1211] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1012.471886][ T1211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.482298][ T1211] usb 7-1: config 0 descriptor?? [ 1012.901239][ T1211] keytouch 0003:0926:3333.0065: fixing up Keytouch IEC report descriptor [ 1012.912794][ T1211] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0065/input/input117 [ 1013.009150][ T1211] keytouch 0003:0926:3333.0065: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1013.127660][T22391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.134559][ T50] Bluetooth: hci2: Frame reassembly failed (-84) [ 1013.135531][T22391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.152218][T22391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.160165][T22391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.606165][T22409] tipc: Started in network mode [ 1013.611124][T22409] tipc: Node identity , cluster identity 4711 [ 1013.617744][T22409] tipc: Failed to obtain node identity [ 1013.623287][T22409] tipc: Enabling of bearer rejected, failed to enable media [ 1014.095341][ T1211] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 1014.261029][ T1211] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1014.269391][ T1211] usb 5-1: not running at top speed; connect to a high speed hub [ 1014.281080][ T1211] usb 5-1: config 8 has an invalid interface number: 11 but max is 0 [ 1014.289372][ T1211] usb 5-1: config 8 has no interface number 0 [ 1014.295785][ T1211] usb 5-1: config 8 interface 11 has no altsetting 0 [ 1014.304662][ T1211] usb 5-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff [ 1014.313928][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.322116][ T1211] usb 5-1: Product: syz [ 1014.326459][ T1211] usb 5-1: Manufacturer: syz [ 1014.331120][ T1211] usb 5-1: SerialNumber: syz [ 1014.378515][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1014.553467][T22413] tipc: Enabling of bearer rejected, media not registered [ 1014.580676][ T1211] cdc_wdm 5-1:8.11: probe with driver cdc_wdm failed with error -22 [ 1014.605412][ T1211] usb 5-1: USB disconnect, device number 98 [ 1014.705520][T22433] tipc: Started in network mode [ 1014.710413][T22433] tipc: Node identity , cluster identity 4711 [ 1014.719242][T22433] tipc: Failed to obtain node identity [ 1014.724748][T22433] tipc: Enabling of bearer rejected, failed to enable media [ 1014.784718][T22435] overlayfs: missing 'lowerdir' [ 1015.165235][T19489] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1015.168010][ T5869] Bluetooth: hci2: command 0x1003 tx timeout [ 1015.187155][T12559] usb 7-1: USB disconnect, device number 101 [ 1015.365455][ T1211] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1015.508655][T22456] tipc: Started in network mode [ 1015.525202][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 1015.533073][T22456] tipc: Node identity , cluster identity 4711 [ 1015.541048][T22456] tipc: Failed to obtain node identity [ 1015.555880][T22456] tipc: Enabling of bearer rejected, failed to enable media [ 1015.556278][ T1211] usb 5-1: config 9 has an invalid interface number: 166 but max is 2 [ 1015.581756][ T1211] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1015.612433][ T1211] usb 5-1: config 9 has an invalid interface number: 200 but max is 2 [ 1015.624060][ T1211] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1015.648898][T22462] binder: 22461:22462 ioctl c018620c 200000000380 returned -22 [ 1015.653678][ T1211] usb 5-1: config 9 has an invalid interface number: 4 but max is 2 [ 1015.661207][T22463] openvswitch: netlink: IP tunnel dst address not specified [ 1015.680010][ T1211] usb 5-1: config 9 has no interface number 0 [ 1015.691591][ T1211] usb 5-1: config 9 has no interface number 1 [ 1015.698432][ T1211] usb 5-1: config 9 has no interface number 2 [ 1015.715132][ T1211] usb 5-1: config 9 interface 166 altsetting 129 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1015.727473][ T1211] usb 5-1: config 9 interface 166 altsetting 129 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1015.739283][ T1211] usb 5-1: config 9 interface 166 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1015.750764][ T1211] usb 5-1: config 9 interface 200 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1015.768896][ T1211] usb 5-1: config 9 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1015.783752][ T1211] usb 5-1: config 9 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1015.795191][ T1211] usb 5-1: config 9 interface 4 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1015.806534][ T1211] usb 5-1: config 9 interface 4 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1015.817322][ T1211] usb 5-1: config 9 interface 4 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1015.831649][ T1211] usb 5-1: config 9 interface 4 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1015.842359][ T1211] usb 5-1: config 9 interface 4 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1015.853311][ T1211] usb 5-1: config 9 interface 4 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1015.864133][ T1211] usb 5-1: config 9 interface 4 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 1015.874752][ T1211] usb 5-1: config 9 interface 4 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1015.885944][ T1211] usb 5-1: config 9 interface 4 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 80 [ 1015.897097][ T1211] usb 5-1: config 9 interface 166 has no altsetting 0 [ 1015.903905][ T1211] usb 5-1: config 9 interface 200 has no altsetting 0 [ 1015.910779][ T1211] usb 5-1: config 9 interface 4 has no altsetting 0 [ 1015.920040][ T1211] usb 5-1: New USB device found, idVendor=0499, idProduct=1057, bcdDevice=e8.c7 [ 1015.929246][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.937382][ T1211] usb 5-1: Product: áš [ 1015.941573][ T1211] usb 5-1: Manufacturer: ɂ説￵䞲æ‹í„®ä¢“îŽë¬âŒç °ä£Œé€ºì—¾ë­¹í¶é©°È›í‡ë­¿å³©ç•—â¯êšã¯‘ꩂ᩺䧣쩉䑄伮쒨痹ꨎ톢붛ᘜ⬓磋藳놆㳓掠븜摱牎Ҹ鼎呷ਧ㺗釀ç¯é´¨ç˜€ã¾¦á ‹è½§ìž°ï“…ã²ê€»á’㋀둌ᛆ䡹䙩ä¼ì­·ç¦Šï›§à ¢ì§³á³¼æŠé‚¹è© î¬âŠ„標 [ 1015.968552][ T1211] usb 5-1: SerialNumber: 첆ê£íŒ‚걫猿鳰棌ዘ놢냗鹬쫰麯䂓ä²î££íŠ‹æ€°ïŒœêŒï¨­è´®á¥¾ë¨…嵣奼ꋹãšåêºá½¤âŽì“®î±© [ 1016.046637][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1016.191823][T22445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.201374][T22445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.224638][ T1211] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1016.232405][ T1211] snd-usb-audio 5-1:9.166: probe with driver snd-usb-audio failed with error -2 [ 1016.248019][ T1211] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1016.256206][ T1211] snd-usb-audio 5-1:9.200: probe with driver snd-usb-audio failed with error -2 [ 1016.273537][ T1211] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1016.292321][ T1211] snd-usb-audio 5-1:9.4: probe with driver snd-usb-audio failed with error -2 [ 1016.312861][ T1211] usb 5-1: USB disconnect, device number 99 [ 1016.367754][T11883] udevd[11883]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.655403][ T982] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1016.819424][ T982] usb 7-1: config 0 has no interfaces? [ 1016.828134][ T982] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1016.837916][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.846839][ T982] usb 7-1: Product: syz [ 1016.851145][ T982] usb 7-1: Manufacturer: syz [ 1016.856266][ T982] usb 7-1: SerialNumber: syz [ 1016.864160][ T982] usb 7-1: config 0 descriptor?? [ 1017.079764][T22471] netlink: 'syz.6.5620': attribute type 21 has an invalid length. [ 1017.116252][ T5930] usb 7-1: USB disconnect, device number 102 [ 1017.762326][T22501] overlay: ./bus is not a directory [ 1017.945260][ T982] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1018.096636][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.108105][ T982] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1018.117393][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.130446][ T982] usb 5-1: config 0 descriptor?? [ 1018.185493][ T5930] usb 7-1: new low-speed USB device number 103 using dummy_hcd [ 1018.349593][ T5930] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1018.357499][ T5930] usb 7-1: can't read configurations, error -61 [ 1018.485456][ T5930] usb 7-1: new low-speed USB device number 104 using dummy_hcd [ 1018.490633][T22513] overlayfs: failed to clone upperpath [ 1018.501090][T22513] overlayfs: failed to clone upperpath [ 1018.508653][T22513] overlayfs: failed to clone upperpath [ 1018.517837][T22513] overlayfs: failed to clone upperpath [ 1018.524250][T22513] overlayfs: failed to clone upperpath [ 1018.531661][T22513] overlayfs: failed to clone upperpath [ 1018.538632][T22513] overlayfs: failed to clone upperpath [ 1018.546432][T22513] overlayfs: failed to clone upperpath [ 1018.554484][T22513] overlayfs: failed to clone upperpath [ 1018.564523][T22513] overlayfs: failed to clone upperpath [ 1018.581466][T22513] overlayfs: failed to clone upperpath [ 1018.582766][ T982] wacom 0003:056A:0000.0066: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 1018.614135][ T982] wacom 0003:056A:0000.0066: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 1018.614497][T22513] overlayfs: failed to clone upperpath [ 1018.638472][T22513] overlayfs: failed to clone upperpath [ 1018.649046][T22513] overlayfs: failed to clone upperpath [ 1018.660846][ T982] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.0066/input/input118 [ 1018.660861][ T5930] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1018.660893][ T5930] usb 7-1: can't read configurations, error -61 [ 1018.698010][T22513] overlayfs: failed to clone upperpath [ 1018.713526][T22513] overlayfs: failed to clone upperpath [ 1018.722569][T22513] overlayfs: failed to clone upperpath [ 1018.744154][ T5930] usb usb7-port1: attempt power cycle [ 1018.761035][T22513] overlayfs: failed to clone upperpath [ 1018.780151][ T1211] usb 5-1: USB disconnect, device number 100 [ 1018.792758][T22513] overlayfs: failed to clone upperpath [ 1018.814405][T22513] overlayfs: failed to clone upperpath [ 1018.839266][T22513] overlayfs: failed to clone upperpath [ 1018.870502][T22513] overlayfs: failed to clone upperpath [ 1018.883828][T22513] overlayfs: failed to clone upperpath [ 1018.894984][T22513] overlayfs: failed to clone upperpath [ 1018.908120][T22513] overlayfs: failed to clone upperpath [ 1018.914947][T22513] overlayfs: failed to clone upperpath [ 1018.919777][T22522] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1018.927034][T22522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1018.942013][T22522] vhci_hcd vhci_hcd.0: Device attached [ 1018.946213][T22513] overlayfs: failed to clone upperpath [ 1018.954212][T22522] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(8) [ 1018.960745][T22522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1018.971543][T22522] vhci_hcd vhci_hcd.0: Device attached [ 1018.973025][T22513] overlayfs: failed to clone upperpath [ 1018.990491][T22522] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(10) [ 1018.997126][T22522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1019.009229][T22513] overlayfs: failed to clone upperpath [ 1019.013796][T22522] vhci_hcd vhci_hcd.0: Device attached [ 1019.030109][T22513] overlayfs: failed to clone upperpath [ 1019.031325][T22522] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(12) [ 1019.042181][T22522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1019.053119][T22513] overlayfs: failed to clone upperpath [ 1019.055198][T22522] vhci_hcd vhci_hcd.0: Device attached [ 1019.069390][T22513] overlayfs: failed to clone upperpath [ 1019.069510][T22522] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(17) [ 1019.081457][T22522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1019.095479][T22522] vhci_hcd vhci_hcd.0: Device attached [ 1019.097929][T22513] overlayfs: failed to clone upperpath [ 1019.106710][ T5930] usb 7-1: new low-speed USB device number 105 using dummy_hcd [ 1019.112062][T22522] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(19) [ 1019.120931][T22522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1019.129172][T22522] vhci_hcd vhci_hcd.0: Device attached [ 1019.136102][T22513] overlayfs: failed to clone upperpath [ 1019.138719][ T5930] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1019.152051][ T5930] usb 7-1: can't read configurations, error -61 [ 1019.156310][T22513] overlayfs: failed to clone upperpath [ 1019.159080][T22522] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(21) [ 1019.170468][T22522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1019.181658][T22522] vhci_hcd vhci_hcd.0: Device attached [ 1019.188606][T22513] overlayfs: failed to clone upperpath [ 1019.195000][T22522] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(23) [ 1019.195714][T22513] overlayfs: failed to clone upperpath [ 1019.201616][T22522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1019.201904][ T5865] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1019.223174][T22522] vhci_hcd vhci_hcd.0: Device attached [ 1019.240221][T22522] vhci_hcd vhci_hcd.0: port 0 already used [ 1019.244483][T22513] overlayfs: failed to clone upperpath [ 1019.254797][T22513] overlayfs: failed to clone upperpath [ 1019.270095][T22513] overlayfs: failed to clone upperpath [ 1019.277353][T22513] overlayfs: failed to clone upperpath [ 1019.284525][T22513] overlayfs: failed to clone upperpath [ 1019.300798][T22513] overlayfs: failed to clone upperpath [ 1019.306998][ T5930] usb 7-1: new low-speed USB device number 106 using dummy_hcd [ 1019.342513][ T5930] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1019.359998][ T5930] usb 7-1: can't read configurations, error -61 [ 1019.369326][ T5930] usb usb7-port1: unable to enumerate USB device [ 1019.580342][T22555] netlink: 'syz.3.5644': attribute type 83 has an invalid length. [ 1019.585183][ T982] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1019.706406][T22560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5646'. [ 1019.745098][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 1019.760835][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1019.780972][ T982] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1019.808532][ T982] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1019.825225][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.833960][ T982] usb 5-1: Product: syz [ 1019.840800][ T982] usb 5-1: Manufacturer: syz [ 1019.848778][ T982] usb 5-1: SerialNumber: syz [ 1019.879913][ T982] usb 5-1: config 0 descriptor?? [ 1020.314096][T12559] usb 5-1: USB disconnect, device number 101 [ 1021.180282][ T982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1021.185885][ T5930] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1021.216641][T22589] netlink: 'syz.3.5654': attribute type 2 has an invalid length. [ 1021.224441][T22589] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.5654'. [ 1021.325282][ T5930] usb 5-1: device descriptor read/64, error -71 [ 1021.565212][ T5930] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1021.695170][ T5930] usb 5-1: device descriptor read/64, error -71 [ 1021.806129][ T5930] usb usb5-port1: attempt power cycle [ 1021.806352][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1021.943541][T22533] vhci_hcd: connection closed [ 1021.943688][T22535] vhci_hcd: connection closed [ 1021.948931][ T13] vhci_hcd: stop threads [ 1021.964077][T22537] vhci_hcd: connection closed [ 1021.964471][T22531] vhci_hcd: connection closed [ 1021.969187][T22525] vhci_hcd: connection closed [ 1021.970653][T22529] vhci_hcd: connection closed [ 1021.984445][T22527] vhci_hcd: connection closed [ 1021.989684][T22523] vhci_hcd: connection reset by peer [ 1021.991296][ T13] vhci_hcd: release socket [ 1022.015619][ T13] vhci_hcd: disconnect device [ 1022.020951][ T13] vhci_hcd: stop threads [ 1022.031504][ T13] vhci_hcd: release socket [ 1022.036614][ T13] vhci_hcd: disconnect device [ 1022.048341][ T13] vhci_hcd: stop threads [ 1022.052650][ T13] vhci_hcd: release socket [ 1022.068916][ T13] vhci_hcd: disconnect device [ 1022.078945][ T13] vhci_hcd: stop threads [ 1022.083249][ T13] vhci_hcd: release socket [ 1022.090068][ T13] vhci_hcd: disconnect device [ 1022.095949][ T13] vhci_hcd: stop threads [ 1022.100846][ T13] vhci_hcd: release socket [ 1022.103582][T22599] block nbd7: Attempted send on invalid socket [ 1022.107617][ T13] vhci_hcd: disconnect device [ 1022.117002][T22599] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1022.117718][ T13] vhci_hcd: stop threads [ 1022.129672][T22599] SQUASHFS error: Failed to read block 0x0: -5 [ 1022.132026][ T13] vhci_hcd: release socket [ 1022.145301][T22599] unable to read squashfs_super_block [ 1022.148613][ T13] vhci_hcd: disconnect device [ 1022.157678][ T13] vhci_hcd: stop threads [ 1022.161969][ T13] vhci_hcd: release socket [ 1022.167655][ T5930] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1022.182678][ T13] vhci_hcd: disconnect device [ 1022.188031][ T13] vhci_hcd: stop threads [ 1022.192401][ T13] vhci_hcd: release socket [ 1022.198047][ T5930] usb 5-1: device descriptor read/8, error -71 [ 1022.207200][ T13] vhci_hcd: disconnect device [ 1022.455320][ T5930] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1022.476019][ T5930] usb 5-1: device descriptor read/8, error -71 [ 1022.587230][ T5930] usb usb5-port1: unable to enumerate USB device [ 1023.177068][ T982] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 1023.337870][ T982] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 1023.346412][ T982] usb 7-1: config 5 has no interface number 0 [ 1023.352831][ T982] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1023.364652][ T982] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1023.374562][ T982] usb 7-1: config 5 interface 123 has no altsetting 0 [ 1023.383670][ T982] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1023.392932][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.401098][ T982] usb 7-1: Product: syz [ 1023.405520][ T982] usb 7-1: Manufacturer: syz [ 1023.410154][ T982] usb 7-1: SerialNumber: syz [ 1023.633843][ T982] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1023.652045][ T982] usb 7-1: USB disconnect, device number 107 [ 1024.292263][T22631] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5672'. [ 1024.355384][ T5865] vhci_hcd: vhci_device speed not set [ 1024.585132][ T5929] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 1024.766954][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.780609][ T5929] usb 7-1: config 0 has no interfaces? [ 1024.789157][ T5929] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1024.799400][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.807792][ T5929] usb 7-1: Product: syz [ 1024.812130][ T5929] usb 7-1: Manufacturer: syz [ 1024.817210][ T5929] usb 7-1: SerialNumber: syz [ 1024.826553][ T5929] usb 7-1: config 0 descriptor?? [ 1025.037119][T22631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.051627][T22631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.170904][ T5930] usb 7-1: USB disconnect, device number 108 [ 1025.382899][T22659] tipc: Started in network mode [ 1025.391649][T22659] tipc: Node identity 4, cluster identity 4711 [ 1025.401424][T22659] tipc: Node number set to 4 [ 1025.649827][T22673] tipc: Started in network mode [ 1025.660259][T22673] tipc: Node identity , cluster identity 4711 [ 1025.667576][T22673] tipc: Failed to obtain node identity [ 1025.673312][T22673] tipc: Enabling of bearer rejected, failed to enable media [ 1025.825198][ T5952] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1025.843971][T22682] kernel read not supported for file /file1 (pid: 22682 comm: syz.3.5687) [ 1025.878331][ T30] audit: type=1800 audit(1757891936.984:2535): pid=22682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5687" name="file1" dev="mqueue" ino=101346 res=0 errno=0 [ 1025.995381][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 1026.004213][ T5952] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1026.040080][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1026.052205][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1026.071473][ T5952] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.089693][ T5952] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1026.099332][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.309687][T22698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.326075][T22698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.348808][ T5952] usb 5-1: GET_CAPABILITIES returned 0 [ 1026.354837][ T5952] usbtmc 5-1:16.0: can't read capabilities [ 1026.559950][T22669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.578722][T22669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.600965][T22669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5682'. [ 1026.632186][T22669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.649078][T22669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.673004][ T5952] usb 5-1: USB disconnect, device number 106 [ 1026.702601][T22686] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1026.723640][T22702] 9pnet: p9_errstr2errno: server reported unknown error 5¦- æuKáD©Ÿ’Ê“#õE‘Yl oÄÞ›‰#ö&[Ø1³Ü [ 1026.836412][T22706] tipc: Started in network mode [ 1026.841501][T22706] tipc: Node identity , cluster identity 4711 [ 1026.848413][T22706] tipc: Failed to obtain node identity [ 1026.854147][T22706] tipc: Enabling of bearer rejected, failed to enable media [ 1027.195136][ T5952] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1027.383314][ T5952] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1027.400535][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.425393][ T5952] usb 7-1: Product: syz [ 1027.429690][ T5952] usb 7-1: Manufacturer: syz [ 1027.434354][ T5952] usb 7-1: SerialNumber: syz [ 1027.456798][ T5952] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1027.484389][ T982] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1027.575691][ T2979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1027.665346][ T5909] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1027.830326][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.857748][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.872685][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.889432][ T5909] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1027.900341][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.911364][T22710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.918917][ T5909] usb 5-1: config 0 descriptor?? [ 1027.938993][T22710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.959782][T22710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.969474][T22710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.979749][T22710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.989499][T22710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.029569][ T5929] usb 7-1: USB disconnect, device number 109 [ 1028.047978][T19489] Bluetooth: hci4: command 0x0406 tx timeout [ 1028.142136][ T5909] wacom 0003:056A:0010.0067: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1028.153428][ T5909] wacom 0003:056A:0010.0067: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.4-1/input0 [ 1028.172534][ T5909] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0010.0067/input/input121 [ 1028.357113][ T5909] usb 5-1: USB disconnect, device number 107 [ 1028.478344][T19489] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1028.524217][T22737] tipc: Enabled bearer , priority 10 [ 1028.534020][ T982] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1028.543626][ T982] ath9k_htc: Failed to initialize the device [ 1028.555334][ T5929] usb 7-1: ath9k_htc: USB layer deinitialized [ 1028.635471][T19489] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 1028.698588][T22745] Unsupported Adiantum instantiation: (ecb(serpent),des3_ede,streebog512) [ 1028.950925][ T5929] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1029.125233][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 1029.131941][ T5929] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 1029.141759][ T5929] usb 7-1: config 0 has no interface number 0 [ 1029.151222][ T5929] usb 7-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=81.e4 [ 1029.161760][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.172196][ T5929] usb 7-1: Product: syz [ 1029.179651][ T5929] usb 7-1: Manufacturer: syz [ 1029.184355][ T5929] usb 7-1: SerialNumber: syz [ 1029.194061][ T5929] usb 7-1: config 0 descriptor?? [ 1029.208059][T22760] netlink: 'syz.4.5713': attribute type 1 has an invalid length. [ 1029.216146][T22760] nbd: couldn't find a device at index -2147221456 [ 1029.413221][ T5929] ax88179_178a 7-1:0.84: probe with driver ax88179_178a failed with error -22 [ 1029.441883][ T5929] usb 7-1: USB disconnect, device number 110 [ 1029.515933][ T1211] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1029.678323][ T1211] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1029.686800][ T1211] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.697466][ T1211] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1029.706902][ T1211] usb 5-1: config 220 has no interface number 0 [ 1029.713185][ T1211] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1029.726726][ T1211] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1029.733686][ T1211] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1029.742453][ T1211] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1029.751633][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.759749][ T1211] usb 5-1: Product: syz [ 1029.763934][ T1211] usb 5-1: Manufacturer: syz [ 1029.768920][ T1211] usb 5-1: SerialNumber: syz [ 1030.015567][ T1211] usb 5-1: USB disconnect, device number 108 [ 1030.295206][ T5929] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1030.445812][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 1030.662992][T22790] netlink: 'syz.3.5724': attribute type 291 has an invalid length. [ 1030.761040][T22794] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 1030.777854][T12559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1030.848231][ T982] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1031.005263][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 1031.013713][ T982] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1031.021953][ T982] usb 5-1: config 2 has no interface number 0 [ 1031.025839][T22796] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5727'. [ 1031.028213][ T982] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1031.052895][ T982] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1031.062124][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.075570][ T982] usb 5-1: Product: syz [ 1031.079777][ T982] usb 5-1: Manufacturer: syz [ 1031.084447][ T982] usb 5-1: SerialNumber: syz [ 1031.716987][ T982] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1031.735883][ T982] usb 5-1: USB disconnect, device number 109 [ 1032.367822][T22806] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5733'. [ 1032.491017][T22813] openvswitch: netlink: Key 6 has unexpected len 153 expected 2 [ 1032.692100][T22818] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1032.717343][T22819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.726905][T22819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.991545][T22825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.030633][T22825] netlink: 'syz.3.5739': attribute type 10 has an invalid length. [ 1033.045524][ T982] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1033.072854][ T5929] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1033.089886][ T5929] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1033.102665][ T5929] usb 7-1: can't read configurations, error -71 [ 1033.195369][ T982] usb 5-1: device descriptor read/64, error -71 [ 1033.325819][T16008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1033.437679][ T982] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1033.455361][ T5929] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1033.575198][ T982] usb 5-1: device descriptor read/64, error -71 [ 1033.625593][ T5929] usb 7-1: Using ep0 maxpacket: 16 [ 1033.633129][ T5929] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.644981][ T5929] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.663026][ T5929] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.672270][ T5929] usb 7-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1033.682823][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.686193][ T982] usb usb5-port1: attempt power cycle [ 1033.694439][ T5929] usb 7-1: config 0 descriptor?? [ 1034.045282][ T982] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1034.065859][ T982] usb 5-1: device descriptor read/8, error -71 [ 1034.114524][ T5929] usbhid 7-1:0.0: can't add hid device: -71 [ 1034.120775][ T5929] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1034.132767][ T5929] usb 7-1: USB disconnect, device number 112 [ 1034.320123][ T982] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1034.347318][ T982] usb 5-1: device descriptor read/8, error -71 [ 1034.457538][ T982] usb usb5-port1: unable to enumerate USB device [ 1034.736640][T22844] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5748'. [ 1034.748301][T22845] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5748'. [ 1035.035250][ T5929] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 1035.207756][ T5929] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1035.216250][ T5929] usb 7-1: not running at top speed; connect to a high speed hub [ 1035.226389][ T5929] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.236848][ T5929] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1035.248853][ T5929] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1035.258102][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.267124][ T5929] usb 7-1: Product: syz [ 1035.271315][ T5929] usb 7-1: Manufacturer: syz [ 1035.276527][ T5929] usb 7-1: SerialNumber: syz [ 1035.498444][ T5929] usb 7-1: 0:2 : does not exist [ 1035.506468][ T5929] usb 7-1: unit 6 not found! [ 1035.517760][ T5929] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1035.533015][ T5929] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1035.545871][ T5929] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1035.574072][ T5929] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1035.589857][ T5929] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1035.612514][ T5929] usb 7-1: USB disconnect, device number 113 [ 1035.774837][T22861] tipc: Started in network mode [ 1035.780281][T22861] tipc: Node identity , cluster identity 4711 [ 1035.787157][T22861] tipc: Failed to obtain node identity [ 1035.793317][T22861] tipc: Enabling of bearer rejected, failed to enable media [ 1036.312417][T22894] tipc: Started in network mode [ 1036.318539][T22894] tipc: Node identity , cluster identity 4711 [ 1036.324775][T22894] tipc: Failed to obtain node identity [ 1036.330751][T22894] tipc: Enabling of bearer rejected, failed to enable media [ 1037.405883][ T5929] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1037.523675][T22916] netlink: 'syz.6.5774': attribute type 1 has an invalid length. [ 1037.541844][T22916] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1037.572563][ T5929] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1037.594642][T22918] tipc: Enabling of bearer rejected, already enabled [ 1037.601389][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.626102][ T5929] usb 5-1: Product: syz [ 1037.632029][ T5929] usb 5-1: Manufacturer: syz [ 1037.638059][ T5929] usb 5-1: SerialNumber: syz [ 1037.647526][ T5929] usb 5-1: config 0 descriptor?? [ 1037.687661][T22920] loop3: detected capacity change from 0 to 1 [ 1037.709311][T22920] Dev loop3: unable to read RDB block 1 [ 1037.715503][T22920] loop3: AHDI p1 [ 1037.719222][T22920] loop3: partition table partially beyond EOD, truncated [ 1038.782051][T22961] loop3: detected capacity change from 0 to 1 [ 1038.797021][T22961] Dev loop3: unable to read RDB block 1 [ 1038.802754][T22961] loop3: AHDI p1 [ 1038.807124][T22961] loop3: partition table partially beyond EOD, truncated [ 1039.087331][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1039.215334][ T982] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1039.369326][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1039.380407][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1039.395124][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1039.411198][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1039.423894][ T982] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1039.433593][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.442237][ T982] usb 7-1: Product: syz [ 1039.453012][ T982] usb 7-1: Manufacturer: syz [ 1039.458104][ T982] usb 7-1: SerialNumber: syz [ 1039.466671][ T982] usb 7-1: config 0 descriptor?? [ 1039.564944][T22973] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5793'. [ 1039.681128][ T982] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1039.881427][T22967] usb 7-1: Couldn't submit interrupt_out_urb -90 [ 1039.908063][T22967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.917180][T22967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.930329][ T1211] usb 7-1: USB disconnect, device number 114 [ 1040.252789][ T982] usb 5-1: USB disconnect, device number 114 [ 1040.366159][ T5909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1040.641601][T23002] usb usb8: usbfs: process 23002 (syz.4.5802) did not claim interface 0 before use [ 1040.960596][ T30] audit: type=1326 audit(1757891952.064:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.5803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f815c38eba9 code=0x0 [ 1041.693005][T23027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.702245][T23027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.855270][ T5929] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1041.925171][ T982] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1042.018719][ T5929] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1042.027258][ T5929] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1042.037829][ T5929] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1042.047581][ T5929] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1042.057069][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1042.065974][ T5929] usb 7-1: Product: syz [ 1042.070191][ T5929] usb 7-1: Manufacturer: syz [ 1042.074812][ T5929] usb 7-1: SerialNumber: syz [ 1042.080894][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1042.084397][ T5929] usb 7-1: config 0 descriptor?? [ 1042.092883][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1042.101534][ T5929] hub 7-1:0.0: bad descriptor, ignoring hub [ 1042.120044][ T982] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1042.122063][ T5929] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1042.141223][ T5929] usb 7-1: selecting invalid altsetting 0 [ 1042.148161][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.163697][ T982] usb 5-1: config 0 descriptor?? [ 1042.585456][ T982] uclogic 0003:28BD:0042.0068: interface is invalid, ignoring [ 1042.762889][T23032] loop6: detected capacity change from 0 to 524288000 [ 1042.815523][T23032] loop6: detected capacity change from 524288000 to 1 [ 1042.824417][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5811'. [ 1042.836284][T23032] veth1_macvtap: left promiscuous mode [ 1042.946930][ T5233] Dev loop6: unable to read RDB block 1 [ 1042.970007][ T5233] loop6: unable to read partition table [ 1042.980392][ T5233] loop6: partition table beyond EOD, truncated [ 1042.999279][ T5929] usb 5-1: USB disconnect, device number 115 [ 1043.545136][ T982] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1043.702239][ T982] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1043.711476][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.719766][ T982] usb 5-1: Product: syz [ 1043.724019][ T982] usb 5-1: Manufacturer: syz [ 1043.728809][ T982] usb 5-1: SerialNumber: syz [ 1043.939944][T23043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.949036][T23043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.963745][T23043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.973533][T23043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.985352][T23043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.994139][T23043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.008723][T23043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.019396][T23043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.030409][T23043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.042635][T23043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.535651][ T5865] usb 7-1: USB disconnect, device number 115 [ 1044.672252][ T982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1044.704859][ T982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1044.724261][ T982] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1044.781481][ T982] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1044.804670][ T982] usb 5-1: USB disconnect, device number 116 [ 1044.848938][ T1036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1044.941536][T23063] syzkaller1: entered promiscuous mode [ 1044.948386][T23063] syzkaller1: entered allmulticast mode [ 1045.031527][ T30] audit: type=1326 audit(1757891956.114:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23068 comm="syz.3.5824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c2618eba9 code=0x0 [ 1045.280552][ T5865] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1045.435276][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 1045.442996][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 1045.454628][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57657, setting to 1024 [ 1045.466173][ T5865] usb 7-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1045.475509][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.486596][ T5865] usb 7-1: config 0 descriptor?? [ 1046.021657][T23082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5828'. [ 1046.444512][ T5865] usbhid 7-1:0.0: can't add hid device: -71 [ 1046.457281][ T5930] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1046.479913][ T5865] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1046.493346][ T5865] usb 7-1: USB disconnect, device number 116 [ 1046.635683][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 1046.648633][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1046.661195][ T5930] usb 5-1: config 7 has an invalid interface number: 169 but max is 0 [ 1046.670967][ T5930] usb 5-1: config 7 has no interface number 0 [ 1046.682047][ T5930] usb 5-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 1046.691261][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.703750][ T5930] usb 5-1: Product: syz [ 1046.709245][ T5930] usb 5-1: Manufacturer: syz [ 1046.713868][ T5930] usb 5-1: SerialNumber: syz [ 1046.941799][ T5930] usb 5-1: USB disconnect, device number 117 [ 1047.055320][ T5865] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1047.215210][ T5865] usb 7-1: Using ep0 maxpacket: 8 [ 1047.222530][ T5865] usb 7-1: config 0 has an invalid interface number: 76 but max is 0 [ 1047.230881][ T5865] usb 7-1: config 0 has no interface number 0 [ 1047.237088][ T5865] usb 7-1: config 0 interface 76 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1047.250968][ T5865] usb 7-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=b8.5e [ 1047.260508][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.268619][ T5865] usb 7-1: Product: syz [ 1047.272961][ T5865] usb 7-1: Manufacturer: syz [ 1047.277612][ T5865] usb 7-1: SerialNumber: syz [ 1047.284151][ T5865] usb 7-1: config 0 descriptor?? [ 1047.482881][T23121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.497811][T23121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.501735][ T5865] usb 7-1: USB disconnect, device number 117 [ 1047.725528][ T982] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1047.875153][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 1047.882452][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1047.889962][ T982] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1047.899607][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.915233][ T982] usb 5-1: config 0 descriptor?? [ 1048.336500][T23121] 9pnet_fd: Insufficient options for proto=fd [ 1048.344346][T23122] bpf: Bad value for 'gid' [ 1048.355777][T23121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.373597][T23121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.385559][ T982] usbhid 5-1:0.0: can't add hid device: -71 [ 1048.391635][ T982] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1048.406493][ T982] usb 5-1: USB disconnect, device number 118 [ 1048.445427][ T5865] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1048.607908][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.618453][ T5865] usb 7-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 1048.628070][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.640582][ T5865] usb 7-1: config 0 descriptor?? [ 1048.652743][ T5865] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 1049.056428][T23139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.066016][T23139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.081014][T23139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.096213][T23139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.115156][ T5865] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1049.122405][ T5865] pwc: recv_control_msg error -71 req 02 val 2700 [ 1049.137374][ T5865] pwc: recv_control_msg error -71 req 04 val 1700 [ 1049.144329][ T5865] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1049.154809][ T5865] pwc: recv_control_msg error -71 req 04 val 1000 [ 1049.165678][ T5865] pwc: recv_control_msg error -71 req 04 val 1300 [ 1049.173679][ T5865] pwc: recv_control_msg error -71 req 04 val 1400 [ 1049.181595][ T5865] pwc: recv_control_msg error -71 req 02 val 2000 [ 1049.189240][ T5865] pwc: recv_control_msg error -71 req 02 val 2100 [ 1049.196914][ T5865] pwc: recv_control_msg error -71 req 02 val 2200 [ 1049.204094][ T5865] pwc: recv_control_msg error -71 req 06 val 0600 [ 1049.211449][ T5865] pwc: recv_control_msg error -71 req 04 val 1500 [ 1049.220045][ T5865] pwc: recv_control_msg error -71 req 02 val 2500 [ 1049.225184][ T982] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1049.228439][ T5865] pwc: recv_control_msg error -71 req 02 val 2400 [ 1049.241191][ T5865] pwc: recv_control_msg error -71 req 02 val 2600 [ 1049.249720][ T5865] pwc: recv_control_msg error -71 req 02 val 2900 [ 1049.257345][ T5865] pwc: recv_control_msg error -71 req 02 val 2800 [ 1049.264322][ T5865] pwc: recv_control_msg error -71 req 04 val 1100 [ 1049.272164][ T5865] pwc: recv_control_msg error -71 req 04 val 1200 [ 1049.280415][ T5865] pwc: Registered as video103. [ 1049.289121][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input124 [ 1049.323375][ T5865] usb 7-1: USB disconnect, device number 118 [ 1049.386018][ T982] usb 5-1: Using ep0 maxpacket: 32 [ 1049.394976][ T982] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1049.419978][ T982] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 1049.440290][ T982] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.452928][ T982] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1049.467234][ T982] usb 5-1: config 128 has no interface number 0 [ 1049.473804][ T982] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 194, changing to 11 [ 1049.485317][T23164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5858'. [ 1049.494759][ T982] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33851, setting to 1024 [ 1049.506543][ T982] usb 5-1: config 128 interface 127 has no altsetting 0 [ 1049.518331][ T982] usb 5-1: string descriptor 0 read error: -22 [ 1049.524833][ T982] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1049.534323][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.547235][T23156] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1049.614956][T11883] udevd[11883]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.822578][ T5909] usb 5-1: USB disconnect, device number 119 [ 1049.967353][ T982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1050.323005][T23214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.333736][T23214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.380926][T23218] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5875'. [ 1050.555170][ T5909] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1050.611691][ T1332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1050.633690][T23232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5879'. [ 1050.727132][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 1050.738980][ T5909] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0 [ 1050.750214][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.761069][ T5909] usb 7-1: Product: syz [ 1050.765645][ T5909] usb 7-1: Manufacturer: syz [ 1050.770350][ T5909] usb 7-1: SerialNumber: syz [ 1050.795069][ T5909] usb 7-1: config 0 descriptor?? [ 1050.812548][ T5909] usb 7-1: ucan: probing device on interface #0 [ 1050.820529][ T5909] usb 7-1: ucan: invalid endpoint configuration [ 1050.827236][ T5909] usb 7-1: ucan: probe failed; try to update the device firmware [ 1050.872104][T23243] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5882'. [ 1050.882287][T23242] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5882'. [ 1051.016398][T23214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5874'. [ 1051.039200][ T5909] usb 7-1: USB disconnect, device number 119 [ 1051.798232][T23264] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1051.892138][T23269] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1051.899812][T23269] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 1051.912725][T23269] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1051.930278][T23269] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1051.938662][T23269] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1051.945743][T23275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5893'. [ 1051.952465][T23269] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1051.971910][T23269] comedi comedi3: 8255: I/O port conflict (0xffffffff80000001,4) [ 1051.980164][T23269] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1051.991647][T23269] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1052.004230][T23269] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1052.025231][T23269] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1052.044694][T23269] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1052.065229][T23269] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1052.092257][T23269] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1052.102859][T23269] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1052.119345][T23269] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1052.158731][T23280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.217644][T23280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.249972][T23280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.631921][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5899'. [ 1052.803795][T23303] block nbd6: Attempted send on invalid socket [ 1052.817616][T23303] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.832882][T23303] block nbd6: Attempted send on invalid socket [ 1052.848652][T23303] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1052.862870][T23303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1052.960249][T23303] block nbd6: Send control failed (result -32) [ 1053.000652][T23303] block nbd6: Request send failed, requeueing [ 1053.014302][ T8255] block nbd6: Dead connection, failed to find a fallback [ 1053.024421][T12559] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1053.039867][ T8255] block nbd6: shutting down sockets [ 1053.046692][ T8255] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.060729][T23303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1053.097318][T23303] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.117917][T23311] devtmpfs: Unknown parameter '' [ 1053.154166][T23303] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.208563][T23303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1053.239194][T23303] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.262784][T23303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1053.280106][T23303] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.292961][T23303] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.303800][T23303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1053.317411][T23303] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.327607][T23303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1053.340865][T23303] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.350506][T23303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1053.360365][T23303] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1053.370139][T23303] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1053.685239][ T5865] usb 7-1: new full-speed USB device number 120 using dummy_hcd [ 1053.815204][T12559] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1053.847720][ T5865] usb 7-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 1053.856871][ T5865] usb 7-1: config 5 interface 0 has no altsetting 1 [ 1053.868677][ T5865] usb 7-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=45.6b [ 1053.877813][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.886859][ T5865] usb 7-1: Product: syz [ 1053.891068][ T5865] usb 7-1: Manufacturer: syz [ 1053.895828][ T5865] usb 7-1: SerialNumber: syz [ 1053.943329][T23324] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5908'. [ 1053.965594][T12559] usb 5-1: Using ep0 maxpacket: 16 [ 1053.980547][T12559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.998846][T12559] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1054.003753][T23327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5909'. [ 1054.010404][T12559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.035897][T12559] usb 5-1: config 0 descriptor?? [ 1054.215517][ T5865] usb 7-1: USB disconnect, device number 120 [ 1054.461046][T12559] mcp2221 0003:04D8:00DD.0069: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1054.663986][T23314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.673873][T23314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.698377][T23314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.713611][T23314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.734954][T12559] usb 5-1: USB disconnect, device number 122 [ 1054.787045][T23336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5912'. [ 1054.956276][T23341] vxcan1: entered allmulticast mode [ 1054.973021][T23340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5914'. [ 1055.088252][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.279539][T12559] IPVS: starting estimator thread 0... [ 1055.375576][T23349] IPVS: using max 27 ests per chain, 64800 per kthread [ 1055.644103][T23360] netlink: 'syz.3.5921': attribute type 4 has an invalid length. [ 1055.865256][ T5909] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1056.038331][ T5909] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1056.053857][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.062617][ T5909] usb 5-1: Product: syz [ 1056.071579][ T5909] usb 5-1: Manufacturer: syz [ 1056.076617][ T5909] usb 5-1: SerialNumber: syz [ 1056.114868][ T5909] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1056.133438][ T5909] r8152-cfgselector 5-1: config 0 descriptor?? [ 1056.348161][ T5909] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1056.354773][ T5909] r8152-cfgselector 5-1: bad CDC descriptors [ 1056.552865][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5919'. [ 1057.196061][ T1211] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1057.345255][ T1211] usb 7-1: Using ep0 maxpacket: 32 [ 1057.352371][ T1211] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1057.361043][ T1211] usb 7-1: config 0 has no interface number 0 [ 1057.367513][ T1211] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1057.378768][ T1211] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1057.388895][ T1211] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1057.398644][ T1211] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1057.408005][ T1211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.416275][ T1211] usb 7-1: Product: syz [ 1057.420662][ T1211] usb 7-1: Manufacturer: syz [ 1057.425499][ T1211] usb 7-1: SerialNumber: syz [ 1057.433058][ T1211] usb 7-1: config 0 descriptor?? [ 1057.640445][ T1211] appletouch 7-1:0.85: Failed to read mode from device. [ 1057.650978][ T1211] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 1057.665592][ T1211] usb 7-1: USB disconnect, device number 121 [ 1058.272931][T23411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.283661][T23411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.299712][T23411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.308868][T23411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.493757][T23415] netlink: 57 bytes leftover after parsing attributes in process `syz.3.5942'. [ 1058.515550][ T1211] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1058.565179][ T5930] r8152-cfgselector 5-1: USB disconnect, device number 123 [ 1058.696727][ T1211] usb 7-1: Using ep0 maxpacket: 32 [ 1058.705477][ T1211] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1058.719235][ T1211] usb 7-1: config 0 has no interface number 0 [ 1058.738538][ T1211] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1058.757155][ T1211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.771735][ T1211] usb 7-1: Product: syz [ 1058.777257][ T1211] usb 7-1: Manufacturer: syz [ 1058.782071][ T1211] usb 7-1: SerialNumber: syz [ 1058.801678][ T1211] usb 7-1: config 0 descriptor?? [ 1058.833827][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1058.841694][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1058.883379][T23435] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5947'. [ 1059.044587][ T1211] radio-si470x 7-1:0.35: this is not a si470x device. [ 1059.086149][ T1211] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 1059.102042][ T1211] usb 7-1: USB disconnect, device number 122 [ 1059.116802][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1059.127993][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1059.422706][T23443] ip6gre0: entered promiscuous mode [ 1059.428381][T23443] ip6gre0: entered allmulticast mode [ 1059.604887][T23430] ceph: No mds server is up or the cluster is laggy [ 1059.639007][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1059.648313][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1060.195127][ T5930] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1060.265203][ T1211] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1060.348446][ T5930] usb 5-1: config 0 has no interfaces? [ 1060.356287][ T5930] usb 5-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 1060.365732][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.373810][ T5930] usb 5-1: Product: syz [ 1060.379130][ T5930] usb 5-1: Manufacturer: syz [ 1060.383744][ T5930] usb 5-1: SerialNumber: syz [ 1060.392162][ T5930] usb 5-1: config 0 descriptor?? [ 1060.426810][ T1211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.437207][ T1211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.447443][ T1211] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1060.456824][ T1211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.464958][ T1211] usb 7-1: SerialNumber: syz [ 1060.606460][T23479] Bluetooth: MGMT ver 1.23 [ 1060.622905][ T5909] usb 5-1: USB disconnect, device number 124 [ 1060.687480][ T1211] usb 7-1: 0:2 : does not exist [ 1060.721489][ T1211] usb 7-1: USB disconnect, device number 123 [ 1060.772628][T11883] udevd[11883]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.860108][T23501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5966'. [ 1061.179970][T23503] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5967'. [ 1061.189679][T23503] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5967'. [ 1061.202008][T23503] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5967'. [ 1061.214710][T23504] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5967'. [ 1061.527876][ T1211] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1061.695139][ T1211] usb 7-1: Using ep0 maxpacket: 32 [ 1061.701915][ T1211] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1061.710254][ T1211] usb 7-1: config 0 has no interface number 0 [ 1061.718173][ T1211] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1061.728498][ T1211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.736593][ T1211] usb 7-1: Product: syz [ 1061.740765][ T1211] usb 7-1: Manufacturer: syz [ 1061.747649][ T1211] usb 7-1: SerialNumber: syz [ 1061.754316][ T1211] usb 7-1: config 0 descriptor?? [ 1061.762399][ T1211] smsc95xx v2.0.0 [ 1062.056953][ T5930] usb 5-1: new low-speed USB device number 125 using dummy_hcd [ 1062.215172][ T5930] usb 5-1: Invalid ep0 maxpacket: 64 [ 1062.352828][ T5930] usb 5-1: new low-speed USB device number 126 using dummy_hcd [ 1062.372380][ T1211] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1062.412289][ T1211] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1062.431201][ T1211] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1062.443746][ T1211] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1062.456537][ T1211] usb 7-1: USB disconnect, device number 124 [ 1062.505133][ T5930] usb 5-1: Invalid ep0 maxpacket: 64 [ 1062.512598][ T5930] usb usb5-port1: attempt power cycle [ 1062.885345][ T5930] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 1062.907070][ T5930] usb 5-1: Invalid ep0 maxpacket: 64 [ 1063.035131][ T5930] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 1063.076899][ T5930] usb 5-1: Invalid ep0 maxpacket: 64 [ 1063.083611][ T5930] usb usb5-port1: unable to enumerate USB device [ 1064.015481][ T5909] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1064.155319][ T5909] usb 7-1: device descriptor read/64, error -71 [ 1064.395210][ T5909] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1064.526665][ T5909] usb 7-1: device descriptor read/64, error -71 [ 1064.638706][ T5909] usb usb7-port1: attempt power cycle [ 1064.715797][T23574] netlink: 'syz.3.5990': attribute type 1 has an invalid length. [ 1064.976833][ T5909] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1065.006063][ T5909] usb 7-1: device descriptor read/8, error -71 [ 1065.245480][ T5909] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1065.278489][ T5909] usb 7-1: device descriptor read/8, error -71 [ 1065.396147][ T5909] usb usb7-port1: unable to enumerate USB device [ 1065.642338][T23609] fuse: Unknown parameter '·' [ 1066.562003][T23626] netlink: 'syz.3.6009': attribute type 13 has an invalid length. [ 1066.688649][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.697075][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.706073][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.717488][T23628] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1066.735941][T23628] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1066.779404][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.808750][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.817462][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.827977][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.841553][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.850206][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.858539][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1066.866810][T23628] wlan1 speed is unknown, defaulting to 1000 [ 1067.215173][ T1211] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1067.345639][ T1211] usb 7-1: device descriptor read/64, error -71 [ 1067.605154][ T1211] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1067.745234][ T1211] usb 7-1: device descriptor read/64, error -71 [ 1067.855687][ T1211] usb usb7-port1: attempt power cycle [ 1068.205228][ T1211] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1068.227879][ T1211] usb 7-1: device descriptor read/8, error -71 [ 1068.465196][ T1211] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1068.481841][T23656] netlink: 'syz.3.6019': attribute type 64 has an invalid length. [ 1068.486023][ T1211] usb 7-1: device descriptor read/8, error -71 [ 1068.490059][T23656] netlink: 'syz.3.6019': attribute type 4 has an invalid length. [ 1068.490086][T23656] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6019'. [ 1068.616379][ T1211] usb usb7-port1: unable to enumerate USB device [ 1068.689409][T23660] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6021'. [ 1069.962701][T23683] netlink: 'syz.6.6029': attribute type 7 has an invalid length. [ 1069.970990][T23683] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6029'. [ 1069.988685][ T1211] IPVS: starting estimator thread 0... [ 1070.022641][T23683] 9pnet_fd: Insufficient options for proto=fd [ 1070.100064][T23685] IPVS: using max 31 ests per chain, 74400 per kthread [ 1070.114781][T23690] delete_channel: no stack [ 1070.405235][ T1211] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1070.588893][ T1211] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.614826][ T1211] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1070.628558][ T1211] usb 7-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1070.640902][ T1211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.675935][ T1211] usb 7-1: config 0 descriptor?? [ 1070.714251][T23705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6037'. [ 1071.116180][ T1211] hid_parser_main: 8 callbacks suppressed [ 1071.116205][ T1211] microsoft 0003:045E:00F9.006A: unknown main item tag 0x0 [ 1071.139181][ T1211] microsoft 0003:045E:00F9.006A: unknown main item tag 0x0 [ 1071.148558][ T1211] microsoft 0003:045E:00F9.006A: unknown main item tag 0x0 [ 1071.161054][ T1211] microsoft 0003:045E:00F9.006A: unknown main item tag 0x0 [ 1071.169791][ T1211] microsoft 0003:045E:00F9.006A: unknown main item tag 0x0 [ 1071.181620][ T1211] microsoft 0003:045E:00F9.006A: unknown main item tag 0x0 [ 1071.189016][ T1211] microsoft 0003:045E:00F9.006A: unknown main item tag 0x0 [ 1071.205583][ T1211] microsoft 0003:045E:00F9.006A: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.6-1/input0 [ 1071.223480][ T1211] microsoft 0003:045E:00F9.006A: no inputs found [ 1071.230925][ T1211] microsoft 0003:045E:00F9.006A: could not initialize ff, continuing anyway [ 1071.312166][T23692] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6032'. [ 1071.340567][ T5909] usb 7-1: USB disconnect, device number 7 [ 1072.293679][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1072.311672][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1072.323913][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1072.340992][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1072.349972][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1072.560036][T23732] wlan1 speed is unknown, defaulting to 1000 [ 1072.739391][ T5929] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1072.747407][ T1332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.885664][ T5929] usb 7-1: device descriptor read/64, error -71 [ 1072.970869][ T1332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.121661][ T1332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.145211][ T5929] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1073.232416][ T1332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.305150][ T5929] usb 7-1: device descriptor read/64, error -71 [ 1073.392682][T23773] netlink: 'syz.3.6052': attribute type 10 has an invalid length. [ 1073.399930][T23732] chnl_net:caif_netlink_parms(): no params data found [ 1073.441158][ T5929] usb usb7-port1: attempt power cycle [ 1073.847615][ T5929] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1073.893525][ T5929] usb 7-1: device descriptor read/8, error -71 [ 1074.145122][ T5929] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1074.152055][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6054'. [ 1074.187240][ T5929] usb 7-1: device descriptor read/8, error -71 [ 1074.244210][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.256206][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.268120][ T1332] bond0 (unregistering): Released all slaves [ 1074.298310][ T5929] usb usb7-port1: unable to enumerate USB device [ 1074.383881][T23732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.391965][T23732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.399772][T23732] bridge_slave_0: entered allmulticast mode [ 1074.410012][T23732] bridge_slave_0: entered promiscuous mode [ 1074.424381][T23732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.432068][T23732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.439708][T23732] bridge_slave_1: entered allmulticast mode [ 1074.445580][ T5869] Bluetooth: hci2: command tx timeout [ 1074.453125][T23732] bridge_slave_1: entered promiscuous mode [ 1074.505597][T23732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.557962][T23732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.623076][T23732] team0: Port device team_slave_0 added [ 1074.640074][T23732] team0: Port device team_slave_1 added [ 1074.749193][ T1332] hsr_slave_0: left promiscuous mode [ 1074.758680][ T1332] hsr_slave_1: left promiscuous mode [ 1074.764838][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.774695][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.783143][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.800667][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.862732][ T1332] veth1_macvtap: left promiscuous mode [ 1074.878868][ T1332] veth0_macvtap: left promiscuous mode [ 1074.884679][ T1332] veth1_vlan: left promiscuous mode [ 1074.900794][ T1332] veth0_vlan: left promiscuous mode [ 1075.074503][ T1332] pim6reg (unregistering): left allmulticast mode [ 1075.841132][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 1075.872028][ T1211] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1075.909181][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 1076.051080][ T1211] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 1076.059699][ T1211] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1076.067939][ T1211] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1076.077023][ T1211] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1076.089520][ T1211] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1076.099736][ T1211] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1076.133223][ T1211] usb 7-1: string descriptor 0 read error: -22 [ 1076.139855][ T1211] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1076.149037][ T1211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.165747][ T1211] usb 7-1: config 0 descriptor?? [ 1076.172903][T23820] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1076.186753][ T1211] hub 7-1:0.0: bad descriptor, ignoring hub [ 1076.192730][ T1211] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1076.215247][ T1211] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input126 [ 1076.282207][ C0] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -1 [ 1076.312981][ C0] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -1 [ 1076.414416][T23820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.427454][T23820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.438789][T12559] usb 7-1: USB disconnect, device number 12 [ 1076.526993][ T5869] Bluetooth: hci2: command tx timeout [ 1076.742751][T23732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.750102][T23732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.776948][T23732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.789886][T23732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.802415][T23732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.828707][T23732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.106430][T23732] hsr_slave_0: entered promiscuous mode [ 1077.113239][T23732] hsr_slave_1: entered promiscuous mode [ 1077.138645][T23732] debugfs: 'hsr0' already exists in 'hsr' [ 1077.144679][T23732] Cannot create hsr debugfs directory [ 1077.385283][ T5909] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1077.413895][ T1332] IPVS: stop unused estimator thread 0... [ 1077.549515][ T5909] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1077.572765][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.603284][ T5909] usb 7-1: Product: syz [ 1077.613180][ T5909] usb 7-1: Manufacturer: syz [ 1077.628860][ T5909] usb 7-1: SerialNumber: syz [ 1077.656520][ T5909] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1077.663457][ T5909] r8152-cfgselector 7-1: config 0 descriptor?? [ 1078.096557][ T5909] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1078.116996][ T5909] r8152-cfgselector 7-1: bad CDC descriptors [ 1078.118189][T23861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6064'. [ 1078.164776][ T5909] r8152-cfgselector 7-1: USB disconnect, device number 13 [ 1078.309900][T23732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1078.331866][T23867] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6065'. [ 1078.342173][T23865] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6065'. [ 1078.353241][T23732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1078.378849][T23732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1078.401820][T23732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1078.592474][T23732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.606074][ T5869] Bluetooth: hci2: command tx timeout [ 1078.668975][T23732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.682689][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.690004][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.711232][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.718422][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.851920][T23893] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6071'. [ 1078.869566][T23732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1078.902556][T23732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1079.352165][T23917] input: syz1 as /devices/virtual/input/input127 [ 1079.383964][T23917] input: failed to attach handler leds to device input127, error: -6 [ 1079.444635][T23732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.580855][T23917] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.699607][T23917] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.827790][T23917] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.903764][T23917] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.963833][T23732] veth0_vlan: entered promiscuous mode [ 1080.009786][T23732] veth1_vlan: entered promiscuous mode [ 1080.089405][T23732] veth0_macvtap: entered promiscuous mode [ 1080.104075][T23732] veth1_macvtap: entered promiscuous mode [ 1080.176342][ T1036] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.203827][ T1036] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.230805][ T1036] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.247917][T23732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.279524][ T1036] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.299908][T23732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.324626][ T1036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.358854][ T1332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.381584][ T1332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.407386][ T1332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.648251][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.662722][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.690596][ T5869] Bluetooth: hci2: command tx timeout [ 1080.702921][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.712587][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.809195][T23950] ieee802154 phy1 wpan1: encryption failed: -22 [ 1080.823620][T23950] netlink: get zone limit has 4 unknown bytes [ 1080.867513][ T5864] Bluetooth: hci1: sending frame failed (-49) [ 1080.875753][T19489] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 1080.988139][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 1080.988740][T23956] tipc: Started in network mode [ 1081.000112][T23956] tipc: Node identity 4, cluster identity 4711 [ 1081.009700][T23956] tipc: Node number set to 4 [ 1081.115428][T23958] netlink: 'syz.3.6083': attribute type 4 has an invalid length. [ 1081.126176][T23958] netlink: 'syz.3.6083': attribute type 4 has an invalid length. [ 1081.218084][T23961] : entered promiscuous mode [ 1081.623974][T23977] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6088'. [ 1081.634825][T23977] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6088'. [ 1081.778716][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6090'. [ 1081.824722][T23983] fuse: Bad value for 'rootmode' [ 1081.826460][T23982] fuse: Bad value for 'rootmode' [ 1081.963097][T23990] ceph: No mds server is up or the cluster is laggy [ 1082.112935][T23997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6094'. [ 1082.132793][T23997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.575871][T24021] tmpfs: Unknown parameter 'quoz“®†¯I¡»j´ta_inode_hArdlim' [ 1082.713475][T24030] netlink: 'syz.3.6103': attribute type 4 has an invalid length. [ 1082.729000][T24030] netlink: 'syz.3.6103': attribute type 4 has an invalid length. [ 1082.780019][T24033] bridge_slave_0: entered promiscuous mode [ 1082.788112][T24033] bridge_slave_0: entered allmulticast mode [ 1082.845309][ T5864] Bluetooth: hci2: command 0x0405 tx timeout [ 1082.905162][ T982] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1083.005737][T19489] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1083.005810][ T5864] Bluetooth: hci1: command 0x1003 tx timeout [ 1083.068177][ T982] usb 7-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 1083.081819][ T982] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1083.105175][ T982] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1083.114260][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.127180][ T982] usb 7-1: Product: syz [ 1083.131391][ T982] usb 7-1: Manufacturer: syz [ 1083.138270][ T982] usb 7-1: SerialNumber: syz [ 1083.147955][ T982] usb 7-1: config 0 descriptor?? [ 1083.162824][ T982] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1083.183528][T24039] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6106'. [ 1083.188677][ T982] usb-storage 7-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1083.421335][ T5930] usb 7-1: USB disconnect, device number 14 [ 1083.495148][ T1211] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1083.648389][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.659695][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.669916][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1083.684247][ T1211] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1083.693497][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.703718][ T1211] usb 5-1: config 0 descriptor?? [ 1083.888908][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1084.117138][ T1211] plantronics 0003:047F:FFFF.006B: reserved main item tag 0xe [ 1084.133618][ T1211] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 1084.160127][ T1211] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1084.176011][T24064] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6115'. [ 1084.381820][T24041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.390678][T24041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.412762][ T982] usb 5-1: USB disconnect, device number 3 [ 1084.638340][T24076] tipc: Enabling of bearer rejected, already enabled [ 1084.783325][T24082] overlayfs: failed to resolve './file1': -2 [ 1084.805541][ T982] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1084.965311][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 1084.976034][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.987204][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.997187][ T982] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1085.007029][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.018169][ T982] usb 5-1: config 0 descriptor?? [ 1085.075325][ T1211] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1085.232356][ T1211] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1085.246507][ T1211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.254698][ T1211] usb 7-1: Product: syz [ 1085.262568][ T1211] usb 7-1: Manufacturer: syz [ 1085.268613][ T1211] usb 7-1: SerialNumber: syz [ 1085.282030][ T1211] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1085.290031][ T1211] r8152-cfgselector 7-1: config 0 descriptor?? [ 1085.520756][ T1211] r8152-cfgselector 7-1: Unknown version 0x6800 [ 1085.529123][ T1211] r8152-cfgselector 7-1: bad CDC descriptors [ 1085.657555][ T982] usbhid 5-1:0.0: can't add hid device: -71 [ 1085.670606][ T982] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1085.686900][ T982] usb 5-1: USB disconnect, device number 4 [ 1085.724045][T24084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.746852][T24084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.781809][ T1211] r8152-cfgselector 7-1: USB disconnect, device number 15 [ 1085.909576][T24100] tmpfs: Unknown parameter 'usrquotaîÛ#a' [ 1086.023073][T24107] tipc: Started in network mode [ 1086.058566][T24107] tipc: Node identity , cluster identity 4711 [ 1086.083951][T24107] tipc: Failed to obtain node identity [ 1086.090725][T24107] tipc: Enabling of bearer rejected, failed to enable media [ 1086.302617][T24120] overlayfs: missing 'lowerdir' [ 1086.495319][ T1211] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1086.605352][T12559] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1086.645754][ T1211] usb 5-1: Using ep0 maxpacket: 16 [ 1086.648206][T24126] [ 1086.652313][ T1211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.653272][T24126] ====================================================== [ 1086.664244][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1086.670411][T24126] WARNING: possible circular locking dependency detected [ 1086.670440][T24126] syzkaller #0 Not tainted [ 1086.670451][T24126] ------------------------------------------------------ [ 1086.670460][T24126] syz.3.6136/24126 is trying to acquire lock: [ 1086.682092][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1086.688904][T24126] ffffffff8e643960 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0x9c/0x7f0 [ 1086.688959][T24126] [ 1086.688959][T24126] but task is already holding lock: [ 1086.693493][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.700360][T24126] ffff88807e4acee0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: do_ip_setsockopt+0x15d7/0x2d00 [ 1086.700413][T24126] [ 1086.700413][T24126] which lock already depends on the new lock. [ 1086.700413][T24126] [ 1086.700420][T24126] [ 1086.700420][T24126] the existing dependency chain (in reverse order) is: [ 1086.700426][T24126] [ 1086.700426][T24126] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 1086.700450][T24126] lock_acquire+0x120/0x360 [ 1086.700468][T24126] mptcp_sol_socket_sync_intval+0x203/0x920 [ 1086.700492][T24126] mptcp_setsockopt+0x2282/0x3560 [ 1086.700515][T24126] do_sock_setsockopt+0x17c/0x1b0 [ 1086.700538][T24126] __x64_sys_setsockopt+0x13f/0x1b0 [ 1086.700557][T24126] do_syscall_64+0xfa/0xfa0 [ 1086.700577][T24126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.700593][T24126] [ 1086.700593][T24126] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1086.700616][T24126] lock_acquire+0x120/0x360 [ 1086.700633][T24126] lock_sock_nested+0x48/0x100 [ 1086.700649][T24126] tcp_sendmsg+0x21/0x50 [ 1086.700666][T24126] __sock_sendmsg+0x19c/0x270 [ 1086.700681][T24126] sock_sendmsg+0x158/0x230 [ 1086.700696][T24126] __sock_xmit+0x1c1/0x470 [ 1086.700719][T24126] nbd_send_cmd+0x863/0x1ba0 [ 1086.700740][T24126] nbd_queue_rq+0xcdb/0xf10 [ 1086.700760][T24126] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1086.700778][T24126] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1086.700798][T24126] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1086.700815][T24126] blk_mq_run_hw_queue+0x348/0x4f0 [ 1086.700839][T24126] blk_mq_dispatch_list+0xd0c/0xe00 [ 1086.709040][ T1211] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1086.717714][T24126] blk_mq_flush_plug_list+0x469/0x550 [ 1086.717742][T24126] __blk_flush_plug+0x3d3/0x4b0 [ 1086.717759][T24126] __submit_bio+0x2d3/0x5a0 [ 1086.717774][T24126] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 1086.717790][T24126] __bread_gfp+0x216/0x3c0 [ 1086.717808][T24126] udf_read_tagged+0xad/0xe00 [ 1086.726798][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.733892][T24126] udf_check_anchor_block+0x99/0x550 [ 1086.746873][ T1211] usb 5-1: Product: syz [ 1086.756289][T24126] udf_load_vrs+0xa83/0xf20 [ 1086.756322][T24126] udf_fill_super+0x5ad/0x17a0 [ 1086.756344][T24126] get_tree_bdev_flags+0x40e/0x4d0 [ 1086.756367][T24126] vfs_get_tree+0x92/0x2b0 [ 1086.756387][T24126] do_new_mount+0x302/0xa10 [ 1086.756408][T24126] __se_sys_mount+0x313/0x410 [ 1086.756428][T24126] do_syscall_64+0xfa/0xfa0 [ 1086.756447][T24126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.756463][T24126] [ 1086.756463][T24126] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1086.756495][T24126] lock_acquire+0x120/0x360 [ 1086.756511][T24126] __mutex_lock+0x187/0x1350 [ 1086.756530][T24126] nbd_queue_rq+0x257/0xf10 [ 1086.756550][T24126] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1086.756568][T24126] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1086.756584][T24126] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1086.756601][T24126] blk_mq_run_hw_queue+0x348/0x4f0 [ 1086.756624][T24126] blk_mq_dispatch_list+0xd0c/0xe00 [ 1086.756642][T24126] blk_mq_flush_plug_list+0x469/0x550 [ 1086.756660][T24126] __blk_flush_plug+0x3d3/0x4b0 [ 1086.756678][T24126] __submit_bio+0x2d3/0x5a0 [ 1086.756694][T24126] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 1086.756709][T24126] block_read_full_folio+0x599/0x830 [ 1086.756728][T24126] filemap_read_folio+0x117/0x380 [ 1086.756750][T24126] do_read_cache_folio+0x350/0x590 [ 1086.756773][T24126] read_part_sector+0xb6/0x2b0 [ 1087.101684][T24126] adfspart_check_ICS+0xa4/0xa50 [ 1087.107140][T24126] bdev_disk_changed+0x75f/0x14b0 [ 1087.112761][T24126] blkdev_get_whole+0x380/0x510 [ 1087.118120][T24126] bdev_open+0x31e/0xd30 [ 1087.122886][T24126] blkdev_open+0x457/0x600 [ 1087.127810][T24126] do_dentry_open+0x953/0x13f0 [ 1087.133092][T24126] vfs_open+0x3b/0x340 [ 1087.137664][T24126] path_openat+0x2ee5/0x3830 [ 1087.142761][T24126] do_filp_open+0x1fa/0x410 [ 1087.147882][T24126] do_sys_openat2+0x121/0x1c0 [ 1087.153091][T24126] __x64_sys_openat+0x138/0x170 [ 1087.158464][T24126] do_syscall_64+0xfa/0xfa0 [ 1087.163486][T24126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.169897][T24126] [ 1087.169897][T24126] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1087.177102][T24126] lock_acquire+0x120/0x360 [ 1087.182120][T24126] __mutex_lock+0x187/0x1350 [ 1087.187227][T24126] nbd_queue_rq+0xc8/0xf10 [ 1087.192202][T24126] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1087.198265][T24126] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1087.205102][T24126] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1087.211596][T24126] blk_mq_run_hw_queue+0x348/0x4f0 [ 1087.217332][T24126] blk_mq_dispatch_list+0xd0c/0xe00 [ 1087.223040][T24126] blk_mq_flush_plug_list+0x469/0x550 [ 1087.228936][T24126] __blk_flush_plug+0x3d3/0x4b0 [ 1087.234295][T24126] __submit_bio+0x2d3/0x5a0 [ 1087.239424][T24126] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 1087.245570][T24126] submit_bio_wait+0x104/0x200 [ 1087.250848][T24126] squashfs_bio_read+0xc81/0x1150 [ 1087.256471][T24126] squashfs_read_data+0x1f7/0x8b0 [ 1087.262039][T24126] squashfs_read_table+0x341/0x3a0 [ 1087.267746][T24126] squashfs_fill_super+0x229/0x2030 [ 1087.273452][T24126] get_tree_bdev_flags+0x40e/0x4d0 [ 1087.279168][T24126] vfs_get_tree+0x92/0x2b0 [ 1087.284091][T24126] do_new_mount+0x302/0xa10 [ 1087.289104][T24126] __se_sys_mount+0x313/0x410 [ 1087.294291][T24126] do_syscall_64+0xfa/0xfa0 [ 1087.299305][T24126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.305710][T24126] [ 1087.305710][T24126] -> #3 (set->srcu){.+.+}-{0:0}: [ 1087.312825][T24126] lock_sync+0xba/0x160 [ 1087.317489][T24126] __synchronize_srcu+0x96/0x3a0 [ 1087.322945][T24126] elevator_switch+0x12b/0x640 [ 1087.328213][T24126] elevator_change+0x315/0x4c0 [ 1087.333485][T24126] elevator_set_default+0x186/0x260 [ 1087.339196][T24126] blk_register_queue+0x34e/0x3f0 [ 1087.344743][T24126] __add_disk+0x677/0xd50 [ 1087.349586][T24126] add_disk_fwnode+0xfc/0x480 [ 1087.354776][T24126] nbd_dev_add+0x717/0xae0 [ 1087.359702][T24126] nbd_init+0x168/0x1f0 [ 1087.364366][T24126] do_one_initcall+0x236/0x820 [ 1087.369633][T24126] do_initcall_level+0x104/0x190 [ 1087.375081][T24126] do_initcalls+0x59/0xa0 [ 1087.379917][T24126] kernel_init_freeable+0x334/0x4b0 [ 1087.385619][T24126] kernel_init+0x1d/0x1d0 [ 1087.390460][T24126] ret_from_fork+0x4bc/0x870 [ 1087.395552][T24126] ret_from_fork_asm+0x1a/0x30 [ 1087.400822][T24126] [ 1087.400822][T24126] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1087.408625][T24126] lock_acquire+0x120/0x360 [ 1087.413643][T24126] __mutex_lock+0x187/0x1350 [ 1087.418739][T24126] elevator_change+0x1e5/0x4c0 [ 1087.424010][T24126] elevator_set_none+0x42/0xb0 [ 1087.429367][T24126] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 1087.435679][T24126] nbd_start_device+0x17f/0xb10 [ 1087.441044][T24126] nbd_genl_connect+0x135b/0x18f0 [ 1087.446581][T24126] genl_family_rcv_msg_doit+0x215/0x300 [ 1087.452638][T24126] genl_rcv_msg+0x60e/0x790 [ 1087.457649][T24126] netlink_rcv_skb+0x208/0x470 [ 1087.462921][T24126] genl_rcv+0x28/0x40 [ 1087.467416][T24126] netlink_unicast+0x82f/0x9e0 [ 1087.472685][T24126] netlink_sendmsg+0x805/0xb30 [ 1087.477954][T24126] __sock_sendmsg+0x21c/0x270 [ 1087.483136][T24126] ____sys_sendmsg+0x505/0x830 [ 1087.488406][T24126] ___sys_sendmsg+0x21f/0x2a0 [ 1087.493589][T24126] __x64_sys_sendmsg+0x19b/0x260 [ 1087.499034][T24126] do_syscall_64+0xfa/0xfa0 [ 1087.504070][T24126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.510481][T24126] [ 1087.510481][T24126] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1087.519071][T24126] lock_acquire+0x120/0x360 [ 1087.524097][T24126] blk_alloc_queue+0x538/0x620 [ 1087.529367][T24126] __blk_mq_alloc_disk+0x15c/0x340 [ 1087.534985][T24126] nbd_dev_add+0x46c/0xae0 [ 1087.539911][T24126] nbd_init+0x168/0x1f0 [ 1087.544571][T24126] do_one_initcall+0x236/0x820 [ 1087.549839][T24126] do_initcall_level+0x104/0x190 [ 1087.555285][T24126] do_initcalls+0x59/0xa0 [ 1087.560129][T24126] kernel_init_freeable+0x334/0x4b0 [ 1087.565835][T24126] kernel_init+0x1d/0x1d0 [ 1087.570677][T24126] ret_from_fork+0x4bc/0x870 [ 1087.575772][T24126] ret_from_fork_asm+0x1a/0x30 [ 1087.581041][T24126] [ 1087.581041][T24126] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1087.588238][T24126] validate_chain+0xb9b/0x2140 [ 1087.593539][T24126] __lock_acquire+0xab9/0xd20 [ 1087.598722][T24126] lock_acquire+0x120/0x360 [ 1087.603729][T24126] fs_reclaim_acquire+0x72/0x100 [ 1087.609181][T24126] __kmalloc_noprof+0x9c/0x7f0 [ 1087.614463][T24126] sock_kmalloc+0xd6/0x160 [ 1087.619393][T24126] __ip_mc_join_group+0x36b/0x510 [ 1087.624929][T24126] ip_mcast_join_leave+0x18e/0x210 [ 1087.630552][T24126] do_ip_setsockopt+0x1c79/0x2d00 [ 1087.636127][T24126] ip_setsockopt+0x66/0x110 [ 1087.641147][T24126] smc_setsockopt+0x232/0xab0 [ 1087.646330][T24126] do_sock_setsockopt+0x17c/0x1b0 [ 1087.652126][T24126] __x64_sys_setsockopt+0x13f/0x1b0 [ 1087.657838][T24126] do_syscall_64+0xfa/0xfa0 [ 1087.662851][T24126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.669250][T24126] [ 1087.669250][T24126] other info that might help us debug this: [ 1087.669250][T24126] [ 1087.679490][T24126] Chain exists of: [ 1087.679490][T24126] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 1087.679490][T24126] [ 1087.692262][T24126] Possible unsafe locking scenario: [ 1087.692262][T24126] [ 1087.699694][T24126] CPU0 CPU1 [ 1087.705041][T24126] ---- ---- [ 1087.710390][T24126] lock(k-sk_lock-AF_INET); [ 1087.714968][T24126] lock(sk_lock-AF_INET); [ 1087.721897][T24126] lock(k-sk_lock-AF_INET); [ 1087.729003][T24126] lock(fs_reclaim); [ 1087.732973][T24126] [ 1087.732973][T24126] *** DEADLOCK *** [ 1087.732973][T24126] [ 1087.741100][T24126] 3 locks held by syz.3.6136/24126: [ 1087.746367][T24126] #0: ffff8880300ea410 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x181/0xab0 [ 1087.757063][T24126] #1: ffffffff8f955108 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xeee/0x2d00 [ 1087.766452][T24126] #2: ffff88807e4acee0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: do_ip_setsockopt+0x15d7/0x2d00 [ 1087.776536][T24126] [ 1087.776536][T24126] stack backtrace: [ 1087.782586][T24126] CPU: 0 UID: 0 PID: 24126 Comm: syz.3.6136 Not tainted syzkaller #0 PREEMPT(full) [ 1087.782605][T24126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1087.782614][T24126] Call Trace: [ 1087.782622][T24126] [ 1087.782631][T24126] dump_stack_lvl+0x189/0x250 [ 1087.782649][T24126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1087.782663][T24126] ? __pfx__printk+0x10/0x10 [ 1087.782683][T24126] ? print_lock_name+0xde/0x100 [ 1087.782704][T24126] print_circular_bug+0x2ee/0x310 [ 1087.782725][T24126] check_noncircular+0x134/0x160 [ 1087.782745][T24126] validate_chain+0xb9b/0x2140 [ 1087.782767][T24126] ? __lock_acquire+0xab9/0xd20 [ 1087.782785][T24126] __lock_acquire+0xab9/0xd20 [ 1087.782802][T24126] ? __kmalloc_noprof+0x9c/0x7f0 [ 1087.782818][T24126] lock_acquire+0x120/0x360 [ 1087.782832][T24126] ? __kmalloc_noprof+0x9c/0x7f0 [ 1087.782849][T24126] ? inetdev_by_index+0x1d9/0x250 [ 1087.782869][T24126] ? ip_mc_find_dev+0xbb/0x3c0 [ 1087.782887][T24126] fs_reclaim_acquire+0x72/0x100 [ 1087.782905][T24126] ? __kmalloc_noprof+0x9c/0x7f0 [ 1087.782921][T24126] __kmalloc_noprof+0x9c/0x7f0 [ 1087.782936][T24126] ? sock_kmalloc+0xd6/0x160 [ 1087.782958][T24126] sock_kmalloc+0xd6/0x160 [ 1087.782978][T24126] __ip_mc_join_group+0x36b/0x510 [ 1087.782999][T24126] ip_mcast_join_leave+0x18e/0x210 [ 1087.783018][T24126] ? __pfx_ip_mcast_join_leave+0x10/0x10 [ 1087.783040][T24126] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1087.783058][T24126] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1087.783078][T24126] do_ip_setsockopt+0x1c79/0x2d00 [ 1087.783096][T24126] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1087.783112][T24126] ? smc_setsockopt+0x181/0xab0 [ 1087.783128][T24126] ? __pfx___mutex_lock+0x10/0x10 [ 1087.783148][T24126] ? file_init_path+0x3b/0x590 [ 1087.783168][T24126] ? __lock_acquire+0xab9/0xd20 [ 1087.783184][T24126] ip_setsockopt+0x66/0x110 [ 1087.783199][T24126] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1087.783216][T24126] smc_setsockopt+0x232/0xab0 [ 1087.783232][T24126] ? __pfx_smc_setsockopt+0x10/0x10 [ 1087.783252][T24126] ? aa_sock_opt_perm+0xff/0x1b0 [ 1087.783268][T24126] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1087.783288][T24126] ? __pfx_smc_setsockopt+0x10/0x10 [ 1087.783303][T24126] do_sock_setsockopt+0x17c/0x1b0 [ 1087.783323][T24126] __x64_sys_setsockopt+0x13f/0x1b0 [ 1087.783343][T24126] do_syscall_64+0xfa/0xfa0 [ 1087.783360][T24126] ? lockdep_hardirqs_on+0x9c/0x150 [ 1087.783377][T24126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.783391][T24126] ? clear_bhb_loop+0x60/0xb0 [ 1087.783407][T24126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.783421][T24126] RIP: 0033:0x7f0c2618eba9 [ 1087.783436][T24126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.783450][T24126] RSP: 002b:00007f0c26ff2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1087.783466][T24126] RAX: ffffffffffffffda RBX: 00007f0c263d5fa0 RCX: 00007f0c2618eba9 [ 1087.783477][T24126] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 1087.783487][T24126] RBP: 00007f0c26211e19 R08: 0000000000000088 R09: 0000000000000000 [ 1087.783496][T24126] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000000 [ 1087.783506][T24126] R13: 00007f0c263d6038 R14: 00007f0c263d5fa0 R15: 00007ffed9e1ab58 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1087.783522][T24126] [ 1088.104615][ T1211] usb 5-1: Manufacturer: syz [ 1088.109299][ T1211] usb 5-1: SerialNumber: syz [ 1088.205100][T12559] usb 7-1: Using ep0 maxpacket: 32 [ 1088.220720][T12559] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1088.230691][T12559] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.296292][ T1211] usb 5-1: config 0 descriptor?? [ 1088.365301][ T982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1088.781636][T16008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.872386][T16008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.978410][T16008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.040723][ T1211] usb 5-1: can't set config #0, error -71 [ 1089.058315][T12559] usb 7-1: string descriptor 0 read error: -71 [ 1089.064590][T12559] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1089.078470][T12559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.093761][T12559] usb 7-1: can't set config #7, error -71 [ 1089.135300][ T1211] usb 5-1: USB disconnect, device number 5 [ 1089.146548][T16008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.171993][T12559] usb 7-1: USB disconnect, device number 16 [ 1089.280867][T16008] tipc: Resetting bearer [ 1089.302269][T16008] tipc: Disabling bearer [ 1089.340854][T16008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.351467][T16008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.362710][T16008] bond0 (unregistering): Released all slaves [ 1089.449236][T16008] : left promiscuous mode [ 1089.499122][T16008] tipc: Left network mode [ 1089.759248][T16008] hsr_slave_0: left promiscuous mode [ 1089.782512][T16008] hsr_slave_1: left promiscuous mode [ 1089.792225][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.801618][T16008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.811434][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.819029][T16008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.833819][T16008] veth1_macvtap: left promiscuous mode [ 1089.839663][T16008] veth0_macvtap: left promiscuous mode [ 1089.845675][T16008] veth1_vlan: left promiscuous mode [ 1089.850979][T16008] veth0_vlan: left promiscuous mode [ 1090.067910][T16008] team0 (unregistering): Port device team_slave_1 removed [ 1090.083206][T16008] team0 (unregistering): Port device team_slave_0 removed [ 1090.466950][T16008] IPVS: stop unused estimator thread 0... [ 1090.523216][T16008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.583466][T16008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.632961][T16008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.718050][T16008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.816559][T16008] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.858210][T16008] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.901702][T16008] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.949828][T16008] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.038606][T16008] bridge_slave_1: left allmulticast mode [ 1091.044290][T16008] bridge_slave_1: left promiscuous mode [ 1091.050911][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.061965][T16008] bridge_slave_0: left allmulticast mode [ 1091.067869][T16008] bridge_slave_0: left promiscuous mode [ 1091.073571][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.083769][T16008] bridge0: port 3(batadv0) entered disabled state [ 1091.095708][T16008] bridge_slave_1: left allmulticast mode [ 1091.101377][T16008] bridge_slave_1: left promiscuous mode [ 1091.110675][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.120402][T16008] bridge_slave_0: left allmulticast mode [ 1091.126122][T16008] bridge_slave_0: left promiscuous mode [ 1091.131788][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.232263][T16008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.242583][T16008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.253784][T16008] bond0 (unregistering): Released all slaves [ 1091.283382][T16008] bridge0 (unregistering): left allmulticast mode [ 1091.343444][T16008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.353513][T16008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.364178][T16008] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1091.373677][T16008] bond0 (unregistering): Released all slaves [ 1091.459703][T16008] tipc: Left network mode [ 1091.874090][T16008] hsr_slave_0: left promiscuous mode [ 1091.880662][T16008] hsr_slave_1: left promiscuous mode [ 1091.886834][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1091.894222][T16008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.907526][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1091.914933][T16008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.927769][T16008] hsr_slave_0: left promiscuous mode [ 1091.933611][T16008] hsr_slave_1: left promiscuous mode [ 1091.940832][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1091.949781][T16008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.958897][T16008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1091.967417][T16008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.979165][T16008] veth1_macvtap: left promiscuous mode [ 1091.984669][T16008] veth0_macvtap: left promiscuous mode [ 1091.990565][T16008] veth1_vlan: left promiscuous mode [ 1091.996184][T16008] veth0_vlan: left promiscuous mode [ 1092.002013][T16008] veth0_macvtap: left promiscuous mode [ 1092.007706][T16008] veth1_vlan: left promiscuous mode [ 1092.012973][T16008] veth0_vlan: left promiscuous mode [ 1092.200696][T16008] team0 (unregistering): Port device team_slave_1 removed [ 1092.229279][T16008] team0 (unregistering): Port device team_slave_0 removed [ 1092.413294][T16008] team0 (unregistering): Port device team_slave_1 removed [ 1092.443398][T16008] team0 (unregistering): Port device team_slave_0 removed [ 1092.954252][T16008] ------------[ cut here ]------------ [ 1092.960142][T16008] WARNING: net/xfrm/xfrm_state.c:3306 at xfrm_state_fini+0x26d/0x2f0, CPU#1: kworker/u8:9/16008 [ 1092.970895][T16008] Modules linked in: [ 1092.974802][T16008] CPU: 1 UID: 0 PID: 16008 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1092.984682][T16008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1092.994905][T16008] Workqueue: netns cleanup_net [ 1092.999811][T16008] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 1093.005412][T16008] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6b 95 f1 f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f9 96 d1 f7 e8 44 13 8d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 36 13 8d f7 90 0f 0b 90 e9 60 fe ff ff [ 1093.025070][T16008] RSP: 0018:ffffc9000b84f878 EFLAGS: 00010293 [ 1093.031154][T16008] RAX: ffffffff8a32f82c RBX: ffff888032faa440 RCX: ffff888027143c80 [ 1093.039277][T16008] RDX: 0000000000000000 RSI: ffffffff8c0503e0 RDI: ffff888027143c80 [ 1093.047317][T16008] RBP: ffffc9000b84f990 R08: ffffffff8fe53a37 R09: 1ffffffff1fca746 [ 1093.055480][T16008] R10: dffffc0000000000 R11: fffffbfff1fca747 R12: ffffffff8fa4dd80 [ 1093.063466][T16008] R13: 1ffff92001709f3c R14: ffff888032fab8c0 R15: dffffc0000000000 [ 1093.071521][T16008] FS: 0000000000000000(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000 [ 1093.080508][T16008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1093.087205][T16008] CR2: 000055662d41d018 CR3: 000000007da4c000 CR4: 00000000003526f0 [ 1093.095218][T16008] Call Trace: [ 1093.098507][T16008] [ 1093.101447][T16008] xfrm_net_exit+0x2d/0x70 [ 1093.105947][T16008] ops_undo_list+0x49a/0x990 [ 1093.110581][T16008] ? __pfx_ops_undo_list+0x10/0x10 [ 1093.115731][T16008] ? do_raw_spin_unlock+0x122/0x240 [ 1093.121130][T16008] cleanup_net+0x4c5/0x800 [ 1093.125612][T16008] ? __pfx_cleanup_net+0x10/0x10 [ 1093.130584][T16008] ? rcu_is_watching+0x15/0xb0 [ 1093.135411][T16008] ? process_scheduled_works+0x9ef/0x17b0 [ 1093.141149][T16008] ? process_scheduled_works+0x9ef/0x17b0 [ 1093.147030][T16008] process_scheduled_works+0xae1/0x17b0 [ 1093.152614][T16008] ? __pfx_process_scheduled_works+0x10/0x10 [ 1093.158665][T16008] worker_thread+0x8a0/0xda0 [ 1093.163272][T16008] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1093.169672][T16008] ? __kthread_parkme+0x7b/0x200 [ 1093.174650][T16008] kthread+0x711/0x8a0 [ 1093.178784][T16008] ? __pfx_worker_thread+0x10/0x10 [ 1093.183913][T16008] ? __pfx_kthread+0x10/0x10 [ 1093.188592][T16008] ? __pfx_kthread+0x10/0x10 [ 1093.193197][T16008] ? ret_from_fork+0x4b0/0x870 [ 1093.198045][T16008] ? __pfx_kthread+0x10/0x10 [ 1093.202652][T16008] ret_from_fork+0x4bc/0x870 [ 1093.207299][T16008] ? __pfx_ret_from_fork+0x10/0x10 [ 1093.212427][T16008] ? __switch_to_asm+0x39/0x70 [ 1093.217304][T16008] ? __switch_to_asm+0x33/0x70 [ 1093.222077][T16008] ? __pfx_kthread+0x10/0x10 [ 1093.226842][T16008] ret_from_fork_asm+0x1a/0x30 [ 1093.231710][T16008] [ 1093.234737][T16008] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1093.242110][T16008] CPU: 1 UID: 0 PID: 16008 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1093.251660][T16008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1093.261709][T16008] Workqueue: netns cleanup_net [ 1093.266506][T16008] Call Trace: [ 1093.269774][T16008] [ 1093.272695][T16008] dump_stack_lvl+0x99/0x250 [ 1093.277273][T16008] ? __asan_memcpy+0x40/0x70 [ 1093.281850][T16008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1093.287032][T16008] ? __pfx__printk+0x10/0x10 [ 1093.291627][T16008] vpanic+0x237/0x6d0 [ 1093.295611][T16008] ? __pfx_vpanic+0x10/0x10 [ 1093.300152][T16008] ? is_bpf_text_address+0x26/0x2b0 [ 1093.305353][T16008] panic+0xb9/0xc0 [ 1093.309154][T16008] ? __pfx_panic+0x10/0x10 [ 1093.313562][T16008] __warn+0x334/0x4c0 [ 1093.317618][T16008] ? xfrm_state_fini+0x26d/0x2f0 [ 1093.322545][T16008] ? xfrm_state_fini+0x26d/0x2f0 [ 1093.327561][T16008] report_bug+0x2be/0x4f0 [ 1093.332065][T16008] ? xfrm_state_fini+0x26d/0x2f0 [ 1093.336993][T16008] ? xfrm_state_fini+0x26d/0x2f0 [ 1093.341917][T16008] ? xfrm_state_fini+0x26f/0x2f0 [ 1093.346840][T16008] handle_bug+0x84/0x160 [ 1093.351085][T16008] exc_invalid_op+0x1a/0x50 [ 1093.355576][T16008] asm_exc_invalid_op+0x1a/0x20 [ 1093.360587][T16008] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 1093.366122][T16008] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6b 95 f1 f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f9 96 d1 f7 e8 44 13 8d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 36 13 8d f7 90 0f 0b 90 e9 60 fe ff ff [ 1093.385895][T16008] RSP: 0018:ffffc9000b84f878 EFLAGS: 00010293 [ 1093.391968][T16008] RAX: ffffffff8a32f82c RBX: ffff888032faa440 RCX: ffff888027143c80 [ 1093.399923][T16008] RDX: 0000000000000000 RSI: ffffffff8c0503e0 RDI: ffff888027143c80 [ 1093.407882][T16008] RBP: ffffc9000b84f990 R08: ffffffff8fe53a37 R09: 1ffffffff1fca746 [ 1093.415842][T16008] R10: dffffc0000000000 R11: fffffbfff1fca747 R12: ffffffff8fa4dd80 [ 1093.423801][T16008] R13: 1ffff92001709f3c R14: ffff888032fab8c0 R15: dffffc0000000000 [ 1093.431850][T16008] ? xfrm_state_fini+0x26c/0x2f0 [ 1093.436783][T16008] ? xfrm_state_fini+0x26c/0x2f0 [ 1093.441713][T16008] xfrm_net_exit+0x2d/0x70 [ 1093.446206][T16008] ops_undo_list+0x49a/0x990 [ 1093.450791][T16008] ? __pfx_ops_undo_list+0x10/0x10 [ 1093.455894][T16008] ? do_raw_spin_unlock+0x122/0x240 [ 1093.461088][T16008] cleanup_net+0x4c5/0x800 [ 1093.465491][T16008] ? __pfx_cleanup_net+0x10/0x10 [ 1093.470436][T16008] ? rcu_is_watching+0x15/0xb0 [ 1093.475195][T16008] ? process_scheduled_works+0x9ef/0x17b0 [ 1093.480904][T16008] ? process_scheduled_works+0x9ef/0x17b0 [ 1093.486788][T16008] process_scheduled_works+0xae1/0x17b0 [ 1093.492328][T16008] ? __pfx_process_scheduled_works+0x10/0x10 [ 1093.498299][T16008] worker_thread+0x8a0/0xda0 [ 1093.502876][T16008] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1093.509195][T16008] ? __kthread_parkme+0x7b/0x200 [ 1093.514155][T16008] kthread+0x711/0x8a0 [ 1093.518217][T16008] ? __pfx_worker_thread+0x10/0x10 [ 1093.523317][T16008] ? __pfx_kthread+0x10/0x10 [ 1093.527896][T16008] ? __pfx_kthread+0x10/0x10 [ 1093.532483][T16008] ? ret_from_fork+0x4b0/0x870 [ 1093.537235][T16008] ? __pfx_kthread+0x10/0x10 [ 1093.541821][T16008] ret_from_fork+0x4bc/0x870 [ 1093.546405][T16008] ? __pfx_ret_from_fork+0x10/0x10 [ 1093.551520][T16008] ? __switch_to_asm+0x39/0x70 [ 1093.556272][T16008] ? __switch_to_asm+0x33/0x70 [ 1093.561027][T16008] ? __pfx_kthread+0x10/0x10 [ 1093.565613][T16008] ret_from_fork_asm+0x1a/0x30 [ 1093.570371][T16008] [ 1093.573730][T16008] Kernel Offset: disabled [ 1093.578047][T16008] Rebooting in 86400 seconds..