last executing test programs: 7m40.725339422s ago: executing program 3 (id=1031): syz_usb_connect$uac1(0x3, 0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100300000020351204824000010203010902700003010d00000904000000010100000a240108000a00020102090401000001020000090401010101020000092402010001000409072401400d01000905010940000309030725010c0700080904020000012a84f028bbec35e4b802000009040201010102f97e"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x800, 0x8, 0x2, 0x10, 0x10, 0x10, 0x10, 0x9, 0x3, 0x9, 0x1, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_usb_connect$cdc_ecm(0x2, 0x8b, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x1, 0x0, 0x30, 0xed, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "975f4f3b"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x2, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0x7ff, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x9, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x5a, 0xf9, 0x8, 0x8}, @country_functional={0x8, 0x24, 0x7, 0x6, 0xf001, [0xaa]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0xf, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0xfa, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x1, 0x4}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x44, 0x7, 0x7, 0xff, 0x3}, 0x88, &(0x7f0000000280)={0x5, 0xf, 0x88, 0x1, [@generic={0x83, 0x10, 0x2, "e350ae7a0a2e3a6661215e888166527c53fd9bf9ab7ddb3899118d3b65d07b8f04ee8fc393d33ec0b3a2d0fd4c2e426a5031674253aa866bf22e401875dfda4d40d5f20b5893679e125cb288d46794ea4132e3cced98868025ca784fc23b74da18fdef5c8263c805a4fb7709a31181da738a249791568ae6c6be3fe2690c9d92"}]}, 0x2, [{0xa4, &(0x7f00000003c0)=@string={0xa4, 0x3, "47a6f8f024d4b876ac3050c32e7f69984682e53bc934cbf36f976bf391cfb728472101b1fe2903fb40cef23b3b5afe9f4a255f02bc9cfbf62a057310811b131403ac4c0ac4aaab1fc083cd4c6e9d220b8376514c47f4f2f8c3118a0fd7930053755325497daf8a708ba0f9195780f3062598c6d44e447e9d86b47f3c85e6b527342f1b1347a8355b1c276b8436a694357de28b13fa395fe99273c60a8fd3e4521227"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x83e}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x20, 0x4, 0x36, {0x36, 0x24, "bec421705ddf4db16ab68ecfa4d724747aa11938df0db54b8a7de2e97c95688bdb931406e25203e17a77da8c966495a61374c45a"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="000ee3000000a5eea07ebb8ab2ea74b216150d2cadbc11511a2ad2123884f3d0b145dcbbbb3968be3c74ba0df01f5d82b0793be2c319f70bc6b7343fab2e73de68cdba97a25763482cda4910b18b241f9013c63fdb0f0b114b8945fe9305ecf009ad7e1c158dea9a0e8e649bc6087d378bd64613d57b0213dbfa00471cfdbd9554f9beae6207f1ed773c7e3bebc6b15a6b369d0432c1530d2822c66853fc0c38ad864cd82f5ee71816b01e39cd4d5b1e4521fa1dd92857246ed7e87eb1448543384960a1931c226d87467319cd33b42c51f62390429d578ae0a73b893d830472796c3009235ef1c8b3"], &(0x7f0000000740)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xe}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_disconnect(r0) 7m40.510196871s ago: executing program 3 (id=1032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000044c0)=@svm={0xa, 0x1, 0x1080, {0x6000}, {"a086cf4fac7f796416d24b302a2d0038bbb5030c4b92a5fa02bcbb404b575892866311ee1f854f99e12c206ef0d674a79dd8d8c4742a830ac4471b435e3c036f0f33222ec6edf0b5d36db224e619bfae76252a3df6f9a3cd9924c7eb8d59fa1436d807a6bc21429bbca071b2b2e56985203bad83c32218ca8e56a22fce4aaf5212865a89c93921ceaceaf661c084aea448deeec7b8bf0b17a9fc365054f40809543da745543ca74aa697fb88a4a7dbd6da9af9d0428d75df7ab8d90a9b68134cb0e5f8581966cac2f33ca30dc9592b7c00f86787673a86981b951a0d5e54193d3f64a5097eabd3e097b6d44d461ef681a5435afb59dd9051bb310544caa48dbcd00417e11bd751767d029c236552a98efaa3e6ea53bdedd09b8cca14d78112d0184d5994088a3e63f0c3c5c56d3a09372be1e86d2da5bcc5e248b531984364749c98b97689e91a56fb1fc45c8c2b8ca8a55d24874e7b96db080686e133a010d62ab1ba39e9ab1912ea17888fcebe679249204f524f2e42552e8220ef8e1016abcf401791e52a632290415ac014a22142b99745936daf4b8968d4a4b3854ac5a4de8e71374e64815dae1ff22841e8b538aab323bfef60f67e9dec57afeff781b9f2516aee86ee0d6837ade89cbefc329a1e0d539ee812b7b755f71b1e616486722890c338ec8b95d8db7f21a86e092152d8b3da87b0499cf3074afe7844b56dfde3ae90343e4da593e424e1ab267ae54e5f18a34aaed5437084ce00a50234c626826a7425e640cc00bf86c84b59f9431cef3004126e5e3bc2947dd30e97ea74e5987b796eedaf7681a23b2c5aa2994e253b918873bada18dc19d71ad8889da72d2e75acd107c8e0acad5437b10f34d8cb8c2dbd06cb8ea51ccea557d4e62650edf65b0e6ed89ec823824ff010c603b7b483a7048cbb68342769ab85b8fd17113176dcc50c805d641ff61af98acd45f83cca09cc6731f2321b82750b7f813cfceb11b25ae0e031fcb21e0f9e0a94597ca1f4a0d42d119eb89bbfdaddb6e76e4e442179961dd809e164a14c58dba20f08ce5117587cf8f8a23fd511cf769d761276907ff92fc45793438b03d3a220208b4797dc7fd2c2b42d1f4bbe2e7c1439c795345771bcb1799737ac27dccafe2db0c61feaf2dc5f6cd8e795da9327a072368281943982be413fd37968cb192c8d6b1929f377d24c7e0131b3a780f7fe30551f2a5273a44b0c5095deb6fb802a312ca1d11560008ef5997b3977690e332205f019e5c2c6900af296df946bc50ff05e7bcfdec83c139564ab6c378089542a77544c3c1e8e76d6bf30472e0712e48ac0b78f9a64148716396d267dfc2d2bde1c22ee8542b5134b041c320a05d93de9ce450b6005aa0f23862a353ffe2d1bab044be20c31ba5774c049dd1a9af15909b108dc670c04cc23934a3845ffde2668b3e75cc34ea7e17a56505fc739115e52afbd29b33ee890bad5312fe2b2c39aa1d97e9902cb05c0cf1d64cc345bed7847d4e6a388f659ce6830ec2fc8463d2e84a0d957e322df68f545b466b6820131c2c50f355b1ceacc5a34461d78e110cf9a8a4fc8b928b51ff111e6559453a672e47eb537cd9d21798e7cd564df5cfdb5f158ae0c453a46405af5590201c3c207763ef4201df73025cccd8614b3a202af83d5f7f7484db6eb891706e699922322a250b2e5d5afd8688eb2d90762068faf8bb7ee2c3b6c6bdd67c3e6c15d2f0c6103a9a850ab8c0e44b967d3c28adfec008ed6c4a119cedd49d7470879254fc430d36087f3e699ed238c9b2af462d398096b3a27e5a2738c6231438a6531d0cd241ea57ef0282b80991395d8c66a47bb4d5b3ec07084941f198c6cf440ceed471c1643ce1e6e30dca3796bdc3eaaeb425cc78cf55f3aa5cf63b0ccd13987a3e84c3753f2f0af5f1bd70b341ac5362d20784438558e2e8ae0415f9dc04af11b02305be1222b478bea6a4c115da5841168e0397ab30da8894e9a10c629fc41a95a2b65b87799ff229ab319418b33962964343ef8c0895aa0b671649f46efe0cdcf8f1b9cfeea6f1a9935edbbcaad6790905378c17a055879fae5b924919003e231c1db2d88048d3cfa6176e3fc5d2b6b622e66f4c38e12721d18365046672d4feedc5e0aa6a36955e272ad82b340faaea4efa827acc412740fc3e3bce358fc74b722c922c9c249b7faa39b9e6907615efbab4041930432de3ecb9d30c7e3cb4484a41ba14920752fa342a0b7a1333ffb08f2206225da5028875064c248f7d99b454b0dd0695c6b3e72f2f6fa05173966c951001eafb53f5640952d5b93e2ff478b7327016209cd161a9a1791cca3fcb4b5a30ad97b24f64c4cba87b0de9200728aafb41f1d3b040258b7cbfdf5f1437ed7dfcc3f0f5abbde8a8ff8cda841b6975b26fa4d2e1ba5446c10a6abbdbfd0f09c691a6a65b812243a8b47d4115f010d0274d22df947a27af289618e8870ec0097221a8a39ce3fd37c5556cfe5fe21ed72d86d5b15e0864397e9e6bd65fa0a2fff71b25502eff020416c89b3694dd21ed1473f5b0c8274eadc9e75bcc3455f8c2443d9b84f052eb59462678160c6366ec0fe55e8923f904123f83270f252c2b844137be04263ef53787a89a830c783042bdb52a8560c733d4b13ec8eb7abca71a4b08635b50bd0f8a0a336805f37e7068ae8f67f0ed8e0bfef542a0622fe29ba94e7b1e772e79dec30a6070cd19a9043d1cce7d8f7e954d3f0c52564ef887e42ce523caa7f58e1d36509849c367d942bcb0f32be2fbebad6b595c31292de6fd6109f5f4fdc5da68586ccad66f5aedad221f74b3c96ac44fd8f879da479967169ee3cee853ba2d1f114034f8a8bca19472cfddb912338f1d9879597e1027b288522b1d02de470813cb5fc882cac45c7d9be1a0eb140710989552f275461d0dd63714909b96064fc6fd095c2064cc627904e007062bcdc4129160a4563df8b32989c27f31877a5b1ad5a594979d81fa1b095a21d2183acb9d2c525fd3de92b7627f3d403ff6d688083002ed0cfe6b42081936ed34ff8fec2ca9c3c419f88c196e3b2cb29898441b61f8a8c84f2e9ee42ae5fb088fa08e716402fd05da94011969936f22f0db34811dc2354876d5bc824c38edc22a507eb9653c65b0389b470e35e7dcc2de2736f14fa6ce3f157f59226fa4937a1c159a973c0209e5d7a09f26390762bd0c6618df890b716377b377908fc19a25c0cc13fa42aa8df00457cce48f126f83deaecdf167b687f624023b81383ac1cfeff4889b5ed4c5ca846ec7d356343d985736a539644149c0339b462dee0d74377020102deeef931244b7739c7bfb3698ba930fcb0bd7f6dda2b620178a571098209f8fde849974017ae73e24ea02147f81f1073ccfb3e4fd9678bbc49486f332f0f82e1535d2176eb9314464044c46d26225427b3562d03bda266be2f56e207b4bbc81582d917bcfd7644aca686c1da90cb5ef83a8ebbb8798e70c315c275889b861926855df00fe23f18253ac8741412d7b1d7e337f6fcdc63c19c776e46734c3cba532e034e96e914561e4dbae2fa1f13a9f695a46728ab2f159a35355d5e04c8afb560e956dc7a2704b5bcd74e564ddb64a2130a332d7c37c210fa140059b66ca8a6b6cc112c92f51e928f23220b6cda5cee0f3cbafac29df4c750565b8e161c1fae5025cbb1417dcf25cccc1cc6c9b2a4d2f4f3f249bcaf159080f3bd8efbafe122d53753174edca78a869b56423666797a399d45206dc3f33bbb0dbb30f938901afd222a66a43a37681fba9178ec8f747e5023f3e37c385a3cd68f4534cfe3ff9650ca6173679d2d9857cc7dd51f2b607ac3dd336036d595e65c3b29defc147717cb00b4b9f662bae7eb0896788808ee99a9858cc0dfc9f338a6ce3747640ad674a18073389c6424577f293970fdd07e7173b990d388d30299ccac6a6bf528fbbf37c574c5d1eb40ab336b278c6bb710c191843dde4ad5f028794ab471fc54c6fbf6da6636b731a7a66e77e12e3c2adcbda122af03848787448dd85bc3cdc584d0af30da1875cc8f5858c7822c5577a9183f083b032d79f6d821e66f78d28bf249fc9cd3f28e387d5e82a7ebfa79e78ef89e3db6b6577295ba0d33b855417ff02e6886faed665940299fffe640a3638c275f11be2e9f589d1649f7fe097aee92536d4955172ff47122fc8af8d0de00dfaf54d0373b9ec99ea63ec8d600de182849c45a1d4b0fa9b7e3867e8321fe0d88431209508e20811f032f5a3bc5870aea42f7cbfb7754f40f347d6b3b5d6ab9318acbcf8331da032254ae6130ed2bc6e6014b8a768e49cd7fa81f8d87fb365321354ef37ded5442ae556ea8f4c31284de961f8294201d62fa2af1ed5fc748ad2baa32ecd6429a78cd1f14b5ea2d6bf67d0bc1f0b99917daa6d4ff6fd37bd676bc1974175885478a67c58db52586f4042c0a0195e4b62a322eb3b0703cbc54372e065330ca5029504977738300a267228e45c4af6a49ab760524de303e24309d6e006a2281bd8b5a20917ffa8dfc5cc212dd4c2ac300ab6e7e6ae266bec8bb1fc186465f9211c74484f116b919f37fc022b4e7a7e7861845542541940a0d67579262e7097a8a0e02e473f041ae7c5a8f2885653d6ff4c958ea3fbec1d22855fc883b66eaaf78b0af30e6c4c29f0b41694f82542c42ebcf079b7a212c3750198c40a9de7febac63dfb3dce4496c8310ad6aec3603ac74500e2a9a5e04217dcb011e881bab4273ea109ba1f82934c3d11f22cd2aa62573a6bfd04d484e25e7feea68f1c452c3416c197373816adbc8a4d136f3dee9dd2a7188369a30b542903e05c6be8e3f742f8b1b5ba8fe64e139111b3224e0ba678181d1f6b8ef54b13ccc43df306874b3eed033bb93fd3af30ceab46e1e31453bf6891bb378580226e37406db51e5872ef179a2469f5152de9153ae68bd231a51214a45a2079802b492db0eb8c0f29e5d3ef8ae006158f9ea4c8c5886fbe8e1f7e0e44f2b8372d78252e0e7b68797246b0e4c676e3437bdca4d16e74ff585bb02de6c21d12d71bc927d0b2119a3528b68e1b46eaeda43f72c156941d50404fccafb551bc2395a676b6a9198f17df68691cdf6701259f499caa987b644155317239667fa45180c34869e7c03a9ed9caed8ff76c9137eae793c50aee4ecb37c3be00d0febc293000866111bc50784e65cd6326d1fdda443257855151c9be540225f919186454d955d2c2ae73cc56511b7fc01f94ff10b6dda821d334a4fa120210dcac97707ba03d0b6ca83a6cee2358acb8281f0e0412e7d891be8a110dde7ca3d5823a855f7108e0f33c881b5bceeed6a7b7193bd158a99a41cb46a537d705de709b5fed3df91971e1aeafb58f11d6a9e833b04e0ab7e00d4df15f3c402b25b24167dcad1519af585866cd76e965418cdc922f113e7e68ab0113e2ed6014b3a1281260893ef6e4e04946dfca4bd0e7e86d8fd3a8fb37b09e4c5f9b91e56ba657b5a25e1afd01bc7c21fa510f1aa00028fd34698e009dbac3fc808cb85fe19de99a707124434aae5ca55ddee8dca3267e744ecc2c7a6dc6d8c76be86b23e8793d1274097ba3ba964a2445633a5b790839649a22d283e76c921fd490909f00b362aa2c0c99c395992c180079b3b14f3e4637ae43dea8925de995a9cb99aadcb13b43c0bb78b11f7700dc721ae5f9f1c5bf9c9747e50545cf1c7204efaa69576556eec4d684bac6a3bd6715f949abbf2234bb83c7091d11985a308ce58198a365860289eef7d38ada4e348e5f044"}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000044c0)=@svm={0xa, 0x1, 0x1080, {0x6000}, {"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"}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) (async) 7m39.589719309s ago: executing program 3 (id=1040): openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000001200fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 7m38.686159539s ago: executing program 3 (id=1047): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@file={0x27, './file0/../file0\x00'}, 0x6e) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz1\x00', {0x5, 0x6, 0x3ff, 0xe4a}, 0x15, [0xd30b, 0x4, 0x40, 0xe8b, 0x4, 0xb, 0x7, 0x6, 0x7, 0x9, 0x0, 0x583, 0x8, 0xf, 0x7, 0xd061, 0x0, 0x8, 0x6562, 0x7, 0x10001, 0xb82, 0x5, 0x8006, 0xff, 0x19d, 0x6a7b, 0x4, 0xfffffff9, 0x40, 0x8, 0xfff, 0x101, 0x9, 0xc6, 0x6, 0x8, 0x800, 0x0, 0x2, 0x7, 0x3, 0xfffff96e, 0x6, 0x1, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0xca, 0x6, 0x8001, 0x4, 0x2, 0x9, 0xfffffff4, 0x9b8, 0x2, 0xa, 0x8, 0x4, 0xa, 0x8], [0x1, 0xfffffffd, 0xffff, 0xe204, 0x9, 0x7, 0x7, 0x4, 0x7, 0x28000, 0xb748, 0x1, 0xb0e, 0x2, 0x3ac, 0xe8f3, 0x6, 0x5776a6e7, 0x8, 0x2, 0x10, 0x0, 0x9, 0x4, 0xaf, 0x5b, 0x4564, 0x0, 0x9, 0x8001, 0x8, 0x4, 0x2, 0x1, 0xd, 0x7ff, 0x163b, 0x6, 0x800, 0x2, 0xfffffff9, 0x81, 0x445d, 0x7, 0x9, 0x6, 0x6, 0xf, 0x6, 0x9e7, 0x9ed, 0x4da, 0x9, 0x1, 0xffffffff, 0x222b4986, 0x6, 0x7fffffff, 0x1, 0x7c1f, 0x4, 0x9, 0x591, 0x2], [0xdb6a, 0x9, 0x3, 0x2, 0x4, 0x1, 0x3, 0x6, 0xcfe5, 0x52, 0x80000000, 0x7, 0x6, 0x4, 0x7, 0x8, 0x0, 0xfffff3b7, 0x7ff, 0x2, 0x2, 0x3, 0x3, 0x7, 0xe00, 0x8, 0x2, 0x1, 0x0, 0x5, 0x5, 0x8, 0x3, 0x10000, 0xff, 0x0, 0x2d3, 0x5, 0x9, 0x9, 0x9b, 0xffffbfbd, 0x3, 0x8, 0x400, 0x4cf, 0x44c, 0x87c, 0x293e, 0x3, 0x8, 0x2, 0x0, 0x8000, 0x7fff, 0x1ff, 0x4, 0x1, 0x4, 0xb, 0x2, 0x101, 0x0, 0x4], [0x7, 0x86e, 0x4, 0x401, 0x9, 0xb2, 0x7, 0x1, 0x3, 0x1, 0x1, 0x2, 0x8f5, 0x7b7, 0x7, 0x2, 0x7fffffff, 0x9, 0x9, 0x81, 0x4, 0x7fffffff, 0xe, 0x3, 0x100, 0x10, 0x7, 0x4, 0x2ce0, 0x40000, 0x5, 0xfffffffc, 0x3, 0x2, 0x3, 0x7, 0x9, 0x6, 0x7fff, 0x7fff, 0x9, 0x3, 0x6, 0xf, 0x6, 0x10001, 0x6, 0x7, 0x1, 0x4cf, 0x9, 0x6, 0xd, 0x4, 0x80000, 0x1, 0x2, 0x0, 0x1, 0x200, 0x9d57, 0x3, 0x7, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x400, 0x8000, 0x5}, 0x1e, [0x4, 0xf, 0x1, 0x2, 0x7fff, 0x6, 0x42, 0x8, 0x2, 0x0, 0x6db7, 0x70d, 0x7f, 0x1ff, 0xdb60, 0x2, 0xf16c, 0x6, 0x0, 0x7, 0x7ff, 0xc914, 0x6, 0x3, 0x0, 0x3, 0x6a7, 0x8001, 0xa, 0x1, 0x1, 0x0, 0x4, 0xd, 0x7, 0x7f, 0xfff, 0x4da9, 0x100, 0x4, 0x7, 0xb5, 0x400, 0xc, 0x2, 0x80, 0x4, 0xf, 0xff, 0x1, 0x6, 0x1, 0x9, 0x5fca, 0x7, 0x400, 0xa92d, 0xabb, 0x7, 0x1, 0x9, 0x9, 0x81], [0x7f, 0x8, 0x7f, 0x99, 0x6, 0x8, 0x7, 0x401, 0x8, 0x6, 0xbf5, 0x12c9, 0x7, 0x3, 0x7a24, 0x940, 0x6, 0x9, 0x7efd411f, 0xb36a, 0x800, 0x3, 0x4, 0x2, 0x9, 0xffffffff, 0x6, 0x7, 0x8, 0x7, 0xf, 0x2d62ae34, 0x401, 0x1, 0x8000, 0x6, 0x6, 0x8, 0x80000001, 0x0, 0x4, 0x6, 0x2, 0x3, 0xc105, 0x7fffffff, 0xfffffff7, 0x80000000, 0x10, 0x4, 0x0, 0x323f, 0x401, 0x2, 0x80000001, 0x2, 0xffff, 0x3ff, 0x5, 0x8, 0x8f94, 0xfffffffa, 0x1, 0x5f37], [0xe, 0x4, 0x5, 0x9, 0x74, 0x1, 0x1, 0x200, 0xa09, 0x9, 0x1, 0x5, 0x4, 0x3, 0xd7, 0xa08, 0xffffffff, 0x5, 0x7fffffff, 0x1, 0x7, 0x4, 0x4fd3, 0x3, 0xba, 0x0, 0x8ac, 0xfff, 0x80000001, 0x3, 0x6, 0x7ff, 0x1, 0xfffff800, 0xfffffff3, 0x100, 0x3, 0x7ff, 0x0, 0x845b, 0x8, 0xb, 0x3, 0x101, 0x40, 0x9, 0x3, 0x7, 0x6, 0x3f9f5246, 0x3, 0x7, 0xe, 0x702, 0x2, 0x7, 0xfff, 0xffff, 0xfff, 0xa, 0x100, 0x40, 0x3ff, 0x9], [0x80000000, 0x1, 0x200, 0x10000, 0x3, 0x9, 0x9, 0x200000d, 0x9328, 0x0, 0x8, 0x49ff, 0x8, 0x8, 0x4, 0x7f, 0x4, 0x7, 0x6c5, 0x6, 0xeef5, 0x9, 0x2, 0x7fffffff, 0x7fff, 0x1ff, 0x6, 0x5, 0x7, 0x5, 0x6, 0xfffffff9, 0xffff, 0x0, 0x1, 0x1, 0x7, 0x9, 0x9, 0xb, 0x7, 0xdc64, 0x6, 0x4, 0x8, 0xf8, 0xf, 0xfffffffd, 0x5, 0x96eb0768, 0x2, 0x15, 0xa4, 0x4, 0xee, 0xfff, 0xf, 0x4, 0xfff, 0x4, 0x4b, 0x0, 0x3, 0x497]}, 0x45c) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m38.565605279s ago: executing program 3 (id=1048): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4044050) r0 = socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000008ffffff", @ANYRES32, @ANYBLOB="18001a800c00"], 0x38}], 0x1}, 0x0) 7m37.829046392s ago: executing program 3 (id=1050): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth0_macvtap\x00', @random="01000020187f"}) io_setup(0x81, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x10001, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$VHOST_VDPA_GET_STATUS(r3, 0x8001af71, &(0x7f0000000040)) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x20}}, 0x0) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) 7m37.421325549s ago: executing program 32 (id=1050): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth0_macvtap\x00', @random="01000020187f"}) io_setup(0x81, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x10001, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$VHOST_VDPA_GET_STATUS(r3, 0x8001af71, &(0x7f0000000040)) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x20}}, 0x0) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) 7m35.309055051s ago: executing program 2 (id=1063): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x8004) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) ioctl$int_out(r2, 0x5460, &(0x7f0000000080)) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 7m35.131160677s ago: executing program 2 (id=1064): clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0xf423f, 0xfffffffffffffffe, 0x0, 0x0, 0x4b, 0x8, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4, 0xa00000000000000, 0x0, 0x2, 0x3, 0x80000000000000}) 7m34.988432603s ago: executing program 2 (id=1065): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x800) r0 = memfd_create(&(0x7f0000000d80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x1c, 0x2400e044}, 0x6) write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300000070000050200030401"], 0x30}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup3(r4, r7, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r11, 0x0, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x80) ioctl$XFS_IOC_FSGROWFSRT(r10, 0x400c5870, &(0x7f0000000300)={0x7ee4, 0x9}) r12 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf2531000000080001004900000008005200", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x484d) 7m34.1680457s ago: executing program 2 (id=1066): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) syz_usb_connect(0x2, 0x24, &(0x7f00000031c0)=ANY=[@ANYBLOB="1201000902ff00eb1d"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 7m31.049037702s ago: executing program 2 (id=1083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80000, &(0x7f00000007c0)=""/220, 0xdc, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x50, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7m29.283580276s ago: executing program 2 (id=1090): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x780, 0x800, 0xbb82, 0x4000000, 0x38, 0x0, {0x9, 0x0, 0xfffffffd}, {0x0, 0xfffffffd}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x4, 0x0, 0x1, 0x40000, 0x0, 0x30, 0x4, 0x3}) 7m28.845676847s ago: executing program 33 (id=1090): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x780, 0x800, 0xbb82, 0x4000000, 0x38, 0x0, {0x9, 0x0, 0xfffffffd}, {0x0, 0xfffffffd}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x4, 0x0, 0x1, 0x40000, 0x0, 0x30, 0x4, 0x3}) 6m8.292514912s ago: executing program 5 (id=1452): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4d, 0x81, 0xf1, 0x3, 0x6, 0x7, 0x6, 0x9, 0x10, 0xe, [0x5, 0x7, 0x8, 0x0, 0xfff, 0x1, 0x8028]}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random}) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271d, 0x0, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000004) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="d80000001900eb054e81f783db4cb9040a1d08000600a2485a0d55a10a0015000600142603600e1208001e00060004012800090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754c8397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x80) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8948, &(0x7f0000000540)={'vlan1\x00', @random="00009e0c1100"}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x2000000000000000, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000140)={0x1d, r10, 0x2, {0x0, 0x1, 0x3}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000080)={0x1d, r11, 0x2, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r13, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 6m7.65803997s ago: executing program 5 (id=1453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r5], 0xb4}, 0x1, 0x0, 0x0, 0x10010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) (async) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) (async) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) (async) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r5], 0xb4}, 0x1, 0x0, 0x0, 0x10010}, 0x0) (async) 6m6.528574106s ago: executing program 5 (id=1456): r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x2080, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x9c9\x03d9 $\x1c\xf8\xac\xe6:\xc5\xe8\x00\x00\x00\x00\x00\x00\x00\x00:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11J\x91\x03\xa6\xfch\xbe\xcaTw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xa8\xa2\xac\xd3a\xff\xe7n\x99\x97\x00\xbb{\x9a\xc9\xbe\xe4\xc4\xeaD\xc5:\x9e\xac\xc0\xbd\xb2\x01mb\xc0\xa1A\x1c\xc1\x99\xd6d\xa3\x85p/\x14# \xf6\xfc\x1d\xbb\xfbW@\xd9\x1a\x8bl5\xb7\xd1n\xba\x93\xdd,Q\xbe\xeb}r\x191zi\xb4G<\xe1\vW\xa13\xe2\x03\xe7Y\xa1Z(\x8e/\xf6\xc4,T\x98\xc7\xf3\xd7\x9d%\x0e\xe5\xad]\x89\xfeP\v_h\"\xd8s\x04\xc2\x94S\x91 v\xff\x9e\x8d\xc0\xef\xe4k\xa2\xda\xeb\x94=\x9e\b]') syz_clone(0x88240011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) memfd_create(&(0x7f0000000080)='proc\x00', 0x911e2a19c3351510) 6m5.716878402s ago: executing program 5 (id=1459): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000540)=0x1) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmmsg(r0, &(0x7f000000d7c0)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) 6m4.983399555s ago: executing program 5 (id=1463): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00150e000000ed"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x11, 0x6b, {0x6b, 0x8, "419a10e48f78dd5b7dfedf47ea48e5116288e3817a2b0a59296419e1ed39673f921f574420728f65ae925e3931c9dd5bf073c475d7f72990cadae35254b27cb1f10ed3697ca0964e24fb111b48e1b0ac370843f717d04985bd6ecc0d0b5420df39e8684551683784ca"}}, &(0x7f00000000c0)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "a7d67d6b7a1244664076cc205b81e0981b47f2d1048034c7581f87340f5988913d20c858cfeeb684abfc76d0de304f71465d5c8e940d38f4fbe1563dae76ec7637c00a915e75565f3d4b2d03c182e53ccc5d00783921ffef24d8ff447266680a0a91fbd0ca3e0ffe52f8e97cba892e974ac5ea64b1b33badf462734927b186b10225929eed165ed8201ae6080186c6544ea48b452e4a4e35159a999fee5e4f90e3eb45286f1b88b12887ff52a5ee51825597e5db248f1ec8b40a6a297c64d25583d9682cdbf20e94a161c9fd61e58bfa8c905a5fe31a330d66ee26d067270b2193f4aa9d43da9bee42330fb51ca2ddc13079c36fb3ac6dd55f"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1b, 0x4, 0x5, "ef427823", "cbfb27e9"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x10, 0x79, 0xec, 0x1, 0x0, 0x2797}}}, &(0x7f0000000880)={0x84, &(0x7f0000000340)={0x20, 0x0, 0xc1, "61a0dbeb222c0d8aa4d182b76e15376409c0c644ebbac02964923dab128cd95a9293f6bd2d8126acfdc8ab2bbcb1a1b847c347435fbc8db77d13ef33dbbf1afe0734db648d201109958ebdbbce047f0023898b3c891fc19df487bcf6050f44d69beb50cb36a103fddcad3ddb36544862ecb5feeda8889a023e40e076d42f7b806f42f5d965d58eba82d253794abf32effd06ebc3d39202a7f12dd8782f8899a0446655367864e6ca53552470f79bc8308b35a26b6b2a4497b6b3f0d8fd737ee5ce"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0xe0, 0x40, [0xf00f]}}, &(0x7f0000000580)={0x40, 0x7, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0xb, 0x2, "cae6"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000700)={0x40, 0x19, 0x2, 'GH'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000780)={0x40, 0x1c, 0x1}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x4e}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xa6}}) 6m3.408997545s ago: executing program 5 (id=1470): r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x1e67e000) creat(&(0x7f0000000000)='./file0\x00', 0x40) mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x10004, &(0x7f0000000380)={[{@name={'name', 0x3d, 'user.id'}}, {@name={'name', 0x3d, 'cgroup\x00'}}]}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x49cdee) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) 6m3.168123853s ago: executing program 34 (id=1470): r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x1e67e000) creat(&(0x7f0000000000)='./file0\x00', 0x40) mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x10004, &(0x7f0000000380)={[{@name={'name', 0x3d, 'user.id'}}, {@name={'name', 0x3d, 'cgroup\x00'}}]}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x49cdee) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, r2, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) 3m43.939433663s ago: executing program 6 (id=2271): syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e10508040125010207010902360001000000000904", @ANYRES8, @ANYRESOCT=0x0], 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000001c0)={0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/109, 0x6d) 3m40.804553977s ago: executing program 6 (id=2286): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x28}, 0x106) 3m40.616508376s ago: executing program 6 (id=2287): openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b080000000000ffa6fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 3m40.45441351s ago: executing program 6 (id=2289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "1fbabdae000000000000080000000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000100)={'netdevsim0\x00', 0x5}) (async) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fcdbdf257b0000001400fe00257bdbfd81fda9d260b161d87d2f6eb91400fe00abf1e30a98f26dc755e71ec3b6dd97521400fe00a768f3d3a0b0dae3965d689fe6c876b714000201831b00a1aab840a5ce9697d9346d77f50a000600ffffffffffff0000"], 0x70}, 0x1, 0x0, 0x0, 0x4004050}, 0x4) 3m39.816596778s ago: executing program 6 (id=2294): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TDX_INIT_VCPU(r3, 0xc008aeba, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m37.393282616s ago: executing program 6 (id=2305): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0xaaf, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x9, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 3m22.316859236s ago: executing program 35 (id=2305): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0xaaf, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x9, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 7.846650203s ago: executing program 4 (id=3340): syz_usb_connect(0x2, 0x14f, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x78, 0x84, 0xbe, 0x40, 0x1608, 0x21a, 0x25fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13d, 0x1, 0x5, 0x7, 0x60, 0xd5, "", [{{0x9, 0x4, 0xa7, 0xff, 0x7, 0x75, 0x22, 0x3e, 0x6, [], [{{0x9, 0x5, 0xd, 0xc, 0x0, 0x3, 0x81, 0xfb}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x10, 0x2, 0x10}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x39, 0xbd, 0x9}}, {{0x9, 0x5, 0x7, 0x1a, 0x400, 0xd, 0x9, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xae, 0x5}]}}, {{0x9, 0x5, 0x5, 0xc, 0x600, 0x3, 0x2, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x22, 0x4, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x1, 0x2, 0xf, [@generic={0xc3, 0x22, "49f7ff6b43117ef240798efd7a3fc3cc9898158a6e805957bd8e6413769119a9dcd66e6c603f8f5e824dc1f3504af006061518df4ba6147df478ca4c4dbea57f73886f8142de4d67339afa362bc283d7f339712072cb3de4422715d9978ef517a74b036fd451adb41b18e0ffcc97e4f537c4ea6ca9cb9ed5fca4c9b51c76401be663ff56e7c1c9b6f588be4147cb038cf88c81ff59eb790b7ab32833f6699d601d8e140a2ac403a246f95e023893988d9f565704b22063c16c2fd468379bf1bab0"}, @generic={0x22, 0x21, "0a2161a24820e58b4a6eb039845bead3b1eba3db363fcd3d5a78d002387b7263"}]}}]}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002280)=""/4096, 0x1000, 0xd36) 6.58620504s ago: executing program 4 (id=3345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 6.420539193s ago: executing program 4 (id=3346): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x94, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x6, 0x20, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "299566"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5b, 0x3, 0xff}, {0x6, 0x24, 0x1a, 0x3, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0xef, 0x3, 0x2, 0xf}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x0, 0x1, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x11, 0x7, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x1, 0xc4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0xc4, 0x5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x2, 0x7, 0x7, 0x40, 0x9}, 0xcc, &(0x7f00000001c0)={0x5, 0xf, 0xcc, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x6, 0xf, 0xef34, [0xf0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x88, 0xb2, 0x1, 0x2, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x9, 0xf00, 0x4, [0xff00, 0x30, 0x17, 0xff003f, 0xff1e, 0x90]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0xf9, 0xff, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0xd3, 0x3d0}, @generic={0x73, 0x10, 0x1, "39aa17a532c0cc35593d300b74abb7763f42b5d9342578ac99db794d0c909290130c5ebda3d9e92a945191126cd1d4b6980463209aeb79efed20abe283a2af4ab06304b1a3878afec1eaa74b4a405869a68fd206d3cd7387683ce55e71b33b63c1552794f977f91e5346e16836e834a7"}]}, 0x4, [{0xf9, &(0x7f00000002c0)=@string={0xf9, 0x3, "d3cbf510530362191422db9980b7d08977e9b8ad3090ab6e64ce759d26bed38b101dc7cc4193a4170609fb6a12b5a34d8183d94edc77d2c1ba08deb35dc1c760b0a568e7efb70d9f74a0414d3f1c3b027f3a3819d82bd2080649ead2dda5102ccc7dfc4c210f68338bed14b9a53dc7f44017cbd45e0a2d9f7c68a38787f49a97b4b50f707ff1b86f4a76f60334871cd596b27426b18ea284e74e0b29313fcb4eac702a3f83fa5e9281380c81645f0f1f7cafd833fa2a55bf31c8a30bb755f0434addc5411277c7de7a59bc7c7dbe17b8a6943e87937b3f832e036d5f19f67f7f8a534d61f47699206be14784b105f2efe2df862e2611f4"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x429}}, {0xa9, &(0x7f0000000400)=@string={0xa9, 0x3, "fe443f8eae7a5ff161071534fa643fe3631256bca0097bb450253fe8722b2c3c9f3f3c8355e1b39f814e72265fa0d2a34b1d558fcf7d218e9ed74a2e68061f6d0dbca93cd45e3ae940c7e4bf98329b8ac27a975a54b0c39163fa8b4751549198044bed4a704243501dfbfe7266edd46616d8f19e6b45eeb4c15be11dd2236c132e3a5942695c22bdb614624e4852d7cf390f7b16d2da20ca7a02e179fc2b26897a5c20860e1119"}}, {0x64, &(0x7f00000004c0)=@string={0x64, 0x3, "928a35c8416d2a6bfc00972320d5c239c7ee7556b652db486bab83b6781b221d1ac7db228753c985566ab9c27ec871ae110b2953d8746d9559dbe268ae84044bb74cb5e3907e6c69215196ab23fc5ee52a6b9b7bbb007c33a287a2157ba5901134e2"}}]}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x74, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xc, 0x40, 0xde, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "af6584ae05a5"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x0, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x25}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x12, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x7, 0xef}}}}}}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0xb, 0x5, 0x13, 0x40}, 0x30, &(0x7f0000000d80)={0x5, 0xf, 0x30, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x12be7b8, 0x0, 0x8551, [0xffbef0, 0x0, 0xff3f00, 0xff000f, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x3, 0x3, 0x7ff}]}, 0x9, [{0x4f, &(0x7f0000000dc0)=@string={0x4f, 0x3, "5694747efd36fcc3191bf9121f1873f15fd311464f1ae80c1c94f884e907c2d3877a7fee6e37bf17f884d5b32fb71809c650dfbc530562bf7ad6628d552c8251dc935b1bc5fd185043410aa8f9"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x415}}, {0x5, &(0x7f0000000e80)=@string={0x5, 0x3, "61aa9f"}}, {0xd2, &(0x7f0000000ec0)=@string={0xd2, 0x3, "19c37c4e21a09b8003c171455016e31f2e0632122083f28351dc88031fa112b5cbeae2486a40a9d1207198c06dad730ec9d6522e5fdf50e2ce5b865347e62bdcaf80028f036db3df07ded444dbb2c360ce72e37a261ee2fc548398cb71a97fec6187291f4b803dc4e02935f4a7c2c7cc9a5ef852132e5ebc4b57607cf5113dea2ec5df7de26fa763141b82f6ce8cd839e035e9a234ff49346f6e8f8ea978d9fe6665a6a6069871fb39cfc965b662fdfa0fff0de041d099575deee2f54c5903a70679ec711da9f4bf4c7bf51571c67f92"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x44b}}, {0x43, &(0x7f0000001080)=@string={0x43, 0x3, "915360e4b77c6e12f13b14fb5c6c4b2c3a58310549b2d31dc5d55a623b1cd25dc3477bcc00c5ada887939af28bddbb7eccdd03d90b81fa7d7a1959fcf2266b1674"}}, {0x2f, &(0x7f0000001100)=@string={0x2f, 0x3, "77709fcabd10d4d49912b7398759fc044b63f25fc8ba650a8e25431487e1cdb526bbc8790475cd2a6c9597e599"}}]}) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x2, 0x30, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0xc9, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0xf8, 0x40}}]}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x300, 0x0, 0x6, 0x3, 0x8, 0xb1}, 0x24, &(0x7f0000001280)={0x5, 0xf, 0x24, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0xe87a, 0xf0f, 0x1, [0xff0000, 0x17f30, 0xc00f, 0x3f00]}]}, 0x1, [{0x4b, &(0x7f00000012c0)=@string={0x4b, 0x3, "983deda8c38286edb394f442ef8cd48cf552976ec6ed995856deb9a4d3374a3afde05fc8665f01ed1cd6a3f80e9179fd056850b119b3138152974ea3242a2c99e54d192e2ecfccc3f9"}}]}) syz_usb_connect$uac3(0x2, 0xde, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x6, 0x80, 0x80, {0x8, 0xb, 0x1, 0x1, 0x1, 0x4, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x3b, 0x7}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x401, 0x3, 0x6, 0x2, 0x0, 0xfff9, 0x6, 0x3}, @multiply_unit={0xb, 0x24, 0xd, 0x6f, 0xc, 0x5, 0x2}, @multiply_unit={0xb, 0x24, 0xd, 0x4, 0x54, 0x6}, @selector_unit={0x7, 0x24, 0xc, 0x2, 0x2, "1289"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x40, 0x2, 0x6, 0x4, "bd9d7a8a02"}, @as_header={0x17, 0x24, 0x1, 0x0, 0x8, 0x7, 0x3, 0x5, 0xd, 0x3, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x8, 0x8, {0xa, 0x25, 0x25, 0x5d, 0x24}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x3, 0xf6, 0xeb, "a7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf7, 0x1, 0xf9, {0xa, 0x25, 0x25, 0x7, 0x3, 0xc6}}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x5, 0x6, 0xa, 0x20, 0x7}, 0x2b, &(0x7f0000000700)={0x5, 0xf, 0x2b, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x200, 0xf00, 0xa, [0xc000, 0x3f00, 0xf, 0xff0030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7f, 0x37, 0x9}]}, 0x9, [{0xdb, &(0x7f0000000740)=@string={0xdb, 0x3, "1111213290dced557c565acf2cfd4d4d7f76cc93c7a978efc0235b7afdd1c68afe967c7589c8614450154830a047a6aa9a5e89439c5ab5e622944a911ae106212ce21041f503458f7c02a318dde1f7bc84df753edab18e3cc684b3d0526dafe439e4f87b5af5ce46635547355115b40f9fde568a7df02c9de717413c2b537098cb306f561c35779c4d3b22b1ec2d2314097bdec4c7a3e85ca65fec9a0afa87364e2946f4bbe4b32dada7dbb1fd75a428ea6c8f90ad2f689ad892da5bda1ed03846f7840c1902c10ffed339ae575a9f852956cd478b53bcbaf2"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x500a}}, {0x85, &(0x7f0000000880)=@string={0x85, 0x3, "785a8218444e3853e17c3e2cb05ceacb0b16de11cafd5108cc54dec296d35dd6788316d1c4a7c91f0ad48a828ea0257d37b26d912945b562004060cae01efeb940a4708b78ef2a61bb27e62394e67e919dc8c8710105e4c41b334eeb2d8fff6af3630c0674a63c072e956c093145233a2f87e3095f16655ff701f571888082fee10739"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x1407}}, {0x9c, &(0x7f0000000980)=@string={0x9c, 0x3, "b848c27b28cac7b7d40888322abc2e29b83277f264b0dc4ede4acedfebf9cd2abec318a866c2f3b035732a3c48e139b1aa6c56a58441a4db369e497301c9a7266ec01d7136d4935558eed5b56921fc44f18af722665f68c0902abd7d10a25749e7a12fdf6d8e3586d13f8be0dd57b5a3c342da92b327d464d19a21f4805eb1af8f5a163ac48491cfd8fa08e48785b23a9af871d36cb1802747d4"}}, {0x3e, &(0x7f0000000a40)=@string={0x3e, 0x3, "cf4d35b5d526174135b5de89b464277bc4728bf537d3709beae37b820a4662b2b8ac3a6848635470258a459535ab3deafaf0235bd96917c91192827b"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc0c}}, {0xd2, &(0x7f0000000b00)=@string={0xd2, 0x3, "307d1a5278b3171cdc5f5fb9e5915d454e75e754144aa85af6fa0d0645299f0b8c217032a2421123bf78e00fe775502fddc41bb76d558d2dd8864427e0f92cd50017dcde6bb4c65d37e2c596c8135521f8cdc0aeef851ee4e24ac657ac890bf8583bae9fa2c9b5ecb7992adb8aa90489c408ff52cf6f7a24c04d76aafcbb7e2d15dcd2c6a003d6a77cbac95737bd6caff5e6d394678ae6c2ef5a87c0fedc94a82acf88f7a34a3fca67722b6c80d670ac0d72f242ca4727d96e45435a8321f392c0e95863db673876e525eb7be40c3829"}}]}) 4.718822034s ago: executing program 0 (id=3357): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) setuid(0xee00) setrlimit(0x40000000000008, &(0x7f0000000000)) getrlimit(0x4, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xd1e3b07db07eead8, 0xffffffffffffffff, 0x3000) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) 4.637006318s ago: executing program 0 (id=3358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="ff", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) sendmmsg$sock(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)="0e92c87dad03db87e0f6e799184662", 0xf}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0xf0ffffffffffffff) 4.636858099s ago: executing program 0 (id=3359): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101002, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x18) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x7}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.456664353s ago: executing program 7 (id=3362): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f18", 0x85}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c01f88d7547f05841e0000000000", 0x28}) 3.400973114s ago: executing program 4 (id=3363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f00000000c0)) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004802, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) (async) listen(r2, 0x7fff) (async) r3 = dup(r1) syz_ublk_setup_queues(r3, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001640)={0x2e, 0x43, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xe}, 0x0, 0x0, '\x00', {0x3, 0x5fe, 0x0, 0x0}}, 0x0) (async) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x300000c, 0x13, r3, 0x7c5ad000) (async) read$rfkill(r3, &(0x7f0000000000), 0x8) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) 3.352816132s ago: executing program 7 (id=3364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)=@chain) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="c4e3f9148b03000000b466baf80cb8e5e99381ef66bafc0cec0f18c0c403714c0c372a660f76e2676766666736642642b300b9800000c00f3235008000000f300fc7b2c500000066ba6100ec66400f78c60c3d", 0x53}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'security.', '/dev/kvm\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001400)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) 3.1844521s ago: executing program 4 (id=3365): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="000312000000020377"], 0x0, 0x0}, 0x0) (async) r1 = syz_usb_connect$cdc_ecm(0x0, 0xfa, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x1, 0x1, 0x6, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9c, 0x3, 0x2, 0x6, 0x0, 0xfa, {{0x9, 0x24, 0x6, 0x0, 0x0, "4c5542f0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x7fff, 0x9, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x200, 0xc, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xff61, 0x1f, 0x8, 0x80, 0x9}, @mdlm_detail={0x77, 0x24, 0x13, 0x0, "576838e985561cbaf37b1b5b56da368ad6a27c26f931a3f4a53b08e4263b3405bd80d26c7e3bcbf6b7561f42249d3897dd8031df81f5ae01cb1adb063eda8182541dc08861079fca3dab306898ced5935f470acd2cc09089a4458faa8396896ae244b91f7674dc893dcbb5935006c466519cb3"}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x26, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x11, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0x0, 0xf}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0xf2, 0xa, 0x4, 0x10, 0xa}, 0x1d, &(0x7f0000000640)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x6, 0x465}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x80, 0x1, 0xe, 0xa}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x9b, &(0x7f0000000880)=@string={0x9b, 0x3, "81ee8448ad1f54189141f6e5985a8efe01538f58cc2795ded8f905f7ef292ddbeb75ad61cf405a356860400e602cef7d2cd8eb732fd9de8f601115683b01f1b91f1fda536754f30f05b80545dcc148b497c26bcb6a0fb79fa3611e012b17d623a1b440ef39056735ed63874fe7c278a9111a1638a493a6a4ee0244653a9e4fc358785f7b3490a485a263f641b8fbcc24b945e7482090f7f124"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000a00)={0x14, &(0x7f0000000980)={0x0, 0x31, 0x29, {0x29, 0x6, "e2423e7dff316cb4b5f681f0154e4ee73b51799610c4260c24291f0dc7392bcca210db5312e7ac"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x1c, &(0x7f0000000a40)={0x0, 0x17, 0x54, "a0acbfa71fafa2e221e99002893cd4db60856c53fcb63d4b3606c8e4a90353cfe4d5ca30d629934615774eda846f809fa74358574569189abe67488ef35c70bb1b46ed8014bb5640ca4c54a3a66f64b1f71d5043"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0xdd}}) (async) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000002c0)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0}) landlock_restrict_self(r2, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x5e22, @empty}, 0xd) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x6, 0x2}, {0x6, 0xd}}, [@q_dsmark={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 2.509446872s ago: executing program 1 (id=3367): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x0, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x8, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x6001, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 2.192672106s ago: executing program 1 (id=3368): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x9e, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x6002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x1, 0x8d], 0x58000, 0x2164c0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100ffffffc900000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.115494719s ago: executing program 1 (id=3369): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESHEX=r1], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x0, 0x10}}, 0x30) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x40a200, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000003000000000000000a0030"], 0xb8}}, 0x4000) 1.97328396s ago: executing program 4 (id=3370): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x6000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x100000000, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r8 = epoll_create1(0x0) fcntl$dupfd(r8, 0x406, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000700000/0x1000)=nil, 0x1000}, 0x1}) syz_usb_connect$midi(0x5, 0x40, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f08000103100b3d797dda9cb253ede8d06a432fac1e81be175e2c74d61a346d06d7cde9adea62b4f973ec0efc64fb72c3dafe092a81f9fc6dcd98c0e8013ac6"]}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r9, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000cc0)={0x1, @meta={0x53353543, 0x82ea9a2, 0xd82d, 0x161b, 0x1efdeb8e}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.828786767s ago: executing program 1 (id=3371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="ff", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) sendmmsg$sock(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)="0e92c87dad03db87e0f6e799184662", 0xf}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0xff00000000000000) 1.827738114s ago: executing program 0 (id=3372): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a7", 0x8f}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c01f88d7547f05841e0000000000", 0x28}) 1.63219215s ago: executing program 0 (id=3373): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f0904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x6, 0x82000) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904", @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES8=r1], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) 932.591138ms ago: executing program 7 (id=3374): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000100"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000030000000000000000000000000a0040"], 0xb8}}, 0x4000) 857.148986ms ago: executing program 1 (id=3375): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101301) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1417bb008000000000000038000000000000000000110007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4) 596.210237ms ago: executing program 7 (id=3376): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82802, 0x1ec541d9ca5bf0af) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffa, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) 387.634804ms ago: executing program 7 (id=3377): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000002000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 220.671847ms ago: executing program 7 (id=3378): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f00000000c0)=0x7, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000002c0)="640f01c50f08660f1a170f23340f3566b9c40a00000f32baf80c66b89c44938666efbafc0c66b80000000066ef0f78a90000b847008ee8baf80c66b8e899468066efbafc0c66b81400000066ef", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000000000/0x3000)=nil) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x1, 0xa, 0x200, &(0x7f0000000c80)="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"}) 137.52524ms ago: executing program 0 (id=3379): r0 = socket$inet(0x2, 0x0, 0xf) r1 = signalfd4(r0, &(0x7f0000000040)={[0x7]}, 0x8, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'wg0\x00', 0x400}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x5, 0x2, 0x2, 0x10, 0x5, 0x5}, {0x9, 0x8, 0x3, 0x4, 0x3ff, 0x5}], ['\x00']}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x8, 0x7, 0x0, @vifc_lcl_addr=@remote, @loopback}, 0x10) r5 = openat(r1, &(0x7f0000000380)='./file0\x00', 0x40600, 0xa) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r6) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000400)={0x5, 0x1, 0x4, {0x1, 0xd, 0x6, 0x9}}) socket$inet6_mptcp(0xa, 0x1, 0x106) fsetxattr$security_evm(r3, &(0x7f0000000440), &(0x7f0000000480)=@v2={0x6, 0x0, 0x16, 0x80000001, 0xbb, "f05b89a23bf8e9edc750e157cd752bae622263a7eabccccc273b07877237924ae3be15be62bc794c30f043828a314738e0739c0f0f06b0a85e74d4a664c44ba269230c0ce6468681d5a4e9bb479e4006ae07d54c212d49246abde8fcf9f88c63f0289af2cdcd73dcf0230c8d0d539c3e6c9784646a543028037209ffb2e9eb930b41ba1a87fc22ee10d720568f6b34688c7f62f8f32533d27f827099f7e6d6cfb77f6fad045499bd6e1edf8450754ef62ba50e65c87e0a76651ab3"}, 0xc4, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000580), 0x2, 0x0) ioctl$RTC_WIE_ON(r7, 0x700f) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) syz_clone(0x0, &(0x7f00000005c0)="20d94fe0824df682223e7463683a52459b41bde792c42d446afc4d58b0720a20fc97f572b1a5d3334b00bb6a557bcada947bb333b10956e5611f9f8d3c915ff959e9787ec63d5e7bd142d31c691118596a5a5ded52f3eb60cf", 0x59, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="cb9b6180ded16d9ccefb0725c85cc4019911d32fd8591bbe67d8ed9c7ad673e104381484042f59b8d195f01c8cc81aeb05a077fd6e166c22554a428338") socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000700)={@mcast2}, &(0x7f0000000740)=0x14) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x60200800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r9, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb, 0x4c}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x4) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002ac0)={'vxcan1\x00', 0x20}) 0s ago: executing program 1 (id=3380): r0 = socket$inet(0x2, 0x3, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x84, 0x8, "eeb4fe"}], 0x18}, 0x41) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3400000000000000000000000700001e4424"], 0x38}}], 0x1, 0x46000) kernel console output (not intermixed with test programs): altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 621.923102][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 621.945550][ T6123] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 621.966362][ T6123] usb 2-1: device descriptor read/8, error -71 [ 621.987885][ T822] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 621.987921][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.987945][ T822] usb 5-1: Product: syz [ 621.987961][ T822] usb 5-1: Manufacturer: syz [ 621.987977][ T822] usb 5-1: SerialNumber: syz [ 622.024119][ T822] usb 5-1: config 0 descriptor?? [ 622.037063][ T822] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 622.037099][ T822] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 622.074885][ T6123] usb usb2-port1: unable to enumerate USB device [ 622.229628][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.230213][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.232870][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.233467][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.266476][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.267470][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.269716][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.270668][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.279399][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.282731][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.438219][T12004] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 622.506417][ T822] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 622.507023][ T822] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 622.507624][ T822] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 622.507637][ T822] em28xx 5-1:0.0: No AC97 audio processor [ 622.550362][ T822] usb 5-1: USB disconnect, device number 94 [ 622.565117][ T822] em28xx 5-1:0.0: Disconnecting em28xx [ 622.594584][T12004] usb 1-1: config 0 has no interfaces? [ 622.598374][T12004] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 622.598409][T12004] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 622.598442][T12004] usb 1-1: Product: syz [ 622.598459][T12004] usb 1-1: Manufacturer: syz [ 622.646260][T12004] usb 1-1: config 0 descriptor?? [ 622.718763][ T822] em28xx 5-1:0.0: Freeing device [ 622.872629][T12004] usb 1-1: USB disconnect, device number 38 [ 622.984802][T14014] program syz.4.2758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.273744][T12005] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 623.403643][T12005] usb 8-1: device descriptor read/64, error -71 [ 623.440839][T14019] input: syz0 as /devices/virtual/input/input131 [ 623.474568][T10439] Bluetooth: hci3: command 0x0c1a tx timeout [ 623.553616][T10439] Bluetooth: hci0: command 0x0405 tx timeout [ 623.643650][T12005] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 623.773591][T12005] usb 8-1: device descriptor read/64, error -71 [ 623.887394][T12005] usb usb8-port1: attempt power cycle [ 624.015089][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2768'. [ 624.234072][T12005] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 624.255050][T12005] usb 8-1: device descriptor read/8, error -71 [ 624.493549][T12005] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 624.515698][T12005] usb 8-1: device descriptor read/8, error -71 [ 624.531779][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'. [ 624.603868][ T822] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 624.624067][T12005] usb usb8-port1: unable to enumerate USB device [ 624.756895][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.757010][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.778366][ T822] usb 1-1: config 0 has no interfaces? [ 624.780034][ T822] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 624.780062][ T822] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 624.780076][ T822] usb 1-1: Product: syz [ 624.780085][ T822] usb 1-1: Manufacturer: syz [ 624.794970][ T6123] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 624.814719][ T822] usb 1-1: config 0 descriptor?? [ 624.947896][ T6123] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 624.947931][ T6123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.947945][ T6123] usb 2-1: Product: syz [ 624.947954][ T6123] usb 2-1: Manufacturer: syz [ 624.947964][ T6123] usb 2-1: SerialNumber: syz [ 625.059234][T14056] loop5: detected capacity change from 0 to 7 [ 625.151365][T14056] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 625.151402][T14056] loop5: partition table partially beyond EOD, truncated [ 625.151967][T14056] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 625.176124][ T6123] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 625.176168][ T6123] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 625.176181][ T6123] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 625.231667][ T6123] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 625.274370][ T6123] usb 2-1: USB disconnect, device number 35 [ 625.466885][T13366] udevd[13366]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 625.913205][T12005] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 626.094264][T12005] usb 5-1: Using ep0 maxpacket: 16 [ 626.102047][T12005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 626.125844][T12005] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 626.125867][T12005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.125881][T12005] usb 5-1: Product: syz [ 626.125891][T12005] usb 5-1: Manufacturer: syz [ 626.125900][T12005] usb 5-1: SerialNumber: syz [ 626.134419][T12005] usb 5-1: config 0 descriptor?? [ 626.155874][T12005] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 626.155913][T12005] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 626.200250][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2781'. [ 626.464702][T14070] loop2: detected capacity change from 0 to 7 [ 626.465908][T14070] Dev loop2: unable to read RDB block 7 [ 626.465954][T14070] loop2: unable to read partition table [ 626.466159][T14070] loop2: partition table beyond EOD, truncated [ 626.466178][T14070] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 626.492465][T14072] netlink: 'syz.1.2783': attribute type 10 has an invalid length. [ 626.501763][T14072] team0: Device vxcan1 is of different type [ 626.566048][T12005] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 626.951212][T12005] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 626.951249][T12005] em28xx 5-1:0.0: board has no eeprom [ 627.044622][T12005] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 627.044657][T12005] em28xx 5-1:0.0: dvb set to bulk mode. [ 627.045333][T12004] em28xx 5-1:0.0: Binding DVB extension [ 627.100810][T12005] usb 5-1: USB disconnect, device number 95 [ 627.143161][T12005] em28xx 5-1:0.0: Disconnecting em28xx [ 627.329952][ T5721] usb 1-1: USB disconnect, device number 39 [ 627.391673][T14091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2790'. [ 627.534824][ T5714] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 627.588635][T12004] em28xx 5-1:0.0: Registering input extension [ 627.588825][T12005] em28xx 5-1:0.0: Closing input extension [ 627.662915][ T5714] usb 2-1: device descriptor read/64, error -71 [ 627.902789][ T5714] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 628.052818][ T5714] usb 2-1: device descriptor read/64, error -71 [ 628.058997][ T38] audit: type=1400 audit(1780629755.858:5): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="//at" pid=14101 comm="syz.0.2795" [ 628.163514][ T5714] usb usb2-port1: attempt power cycle [ 628.342838][ T6123] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 628.386490][T12005] em28xx 5-1:0.0: Freeing device [ 628.500621][ T6123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.500671][ T6123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.500713][ T6123] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 628.500739][ T6123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.504037][ T5714] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 628.524254][ T5714] usb 2-1: device descriptor read/8, error -71 [ 628.605761][ T6123] usb 1-1: config 0 descriptor?? [ 628.644430][T14113] loop5: detected capacity change from 0 to 7 [ 628.683412][T14113] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 628.683448][T14113] loop5: partition table partially beyond EOD, truncated [ 628.685311][T14113] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 628.762986][ T5714] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 628.783973][ T5714] usb 2-1: device descriptor read/8, error -71 [ 628.840051][ T6123] hid_parser_main: 3 callbacks suppressed [ 628.840079][ T6123] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0 [ 628.840116][ T6123] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0 [ 628.840143][ T6123] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0 [ 628.840171][ T6123] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0 [ 628.840196][ T6123] hid-led 0003:27B8:01ED.0018: unknown main item tag 0x0 [ 628.893263][ T5714] usb usb2-port1: unable to enumerate USB device [ 628.933280][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 628.945659][ T6123] hid-led 0003:27B8:01ED.0018: probe with driver hid-led failed with error -32 [ 628.962980][ T5714] usb 1-1: USB disconnect, device number 40 [ 628.992795][T12005] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 629.264130][ T5690] udevd[5690]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 629.634093][ T6123] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 629.745581][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2803'. [ 629.805120][ T6123] usb 1-1: config 0 has no interfaces? [ 629.808636][ T6123] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 629.808672][ T6123] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 629.808695][ T6123] usb 1-1: Product: syz [ 629.808712][ T6123] usb 1-1: Manufacturer: syz [ 629.853046][ T6123] usb 1-1: config 0 descriptor?? [ 630.702392][ T6123] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 630.865285][ T6123] usb 2-1: config 5 has an invalid interface number: 6 but max is 0 [ 630.865319][ T6123] usb 2-1: config 5 has no interface number 0 [ 630.865364][ T6123] usb 2-1: config 5 interface 6 has no altsetting 0 [ 630.868723][ T6123] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=56.71 [ 630.868758][ T6123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.868781][ T6123] usb 2-1: Product: syz [ 630.868797][ T6123] usb 2-1: Manufacturer: syz [ 630.868814][ T6123] usb 2-1: SerialNumber: syz [ 631.186537][ T6123] uvcvideo 2-1:5.6: probe with driver uvcvideo failed with error -22 [ 631.204440][ T6123] usb 2-1: USB disconnect, device number 40 [ 631.352287][T12005] usb 5-1: device descriptor read/64, error -71 [ 631.592299][T12005] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 631.685683][T14142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2809'. [ 631.742230][T12005] usb 5-1: Using ep0 maxpacket: 8 [ 631.749460][T12005] usb 5-1: unable to get BOS descriptor or descriptor too short [ 631.769828][T12005] usb 5-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 631.769864][T12005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.769888][T12005] usb 5-1: Product: syz [ 631.769904][T12005] usb 5-1: Manufacturer: syz [ 631.769921][T12005] usb 5-1: SerialNumber: syz [ 631.883879][T14144] input: syz0 as /devices/virtual/input/input133 [ 632.059674][ T6123] usb 1-1: USB disconnect, device number 41 [ 632.146372][T12005] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 632.147848][T12005] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 632.148410][T12005] usb 5-1: unit 8 not found! [ 632.409786][T14155] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 632.410473][T14156] virtio-fs: tag not found [ 632.480067][T12005] usb 5-1: USB disconnect, device number 97 [ 632.615883][T14158] loop5: detected capacity change from 0 to 7 [ 632.630340][ T6123] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 632.665478][T14158] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 632.665512][T14158] loop5: partition table partially beyond EOD, truncated [ 632.669080][T14158] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 632.801948][ T6123] usb 2-1: Using ep0 maxpacket: 8 [ 632.804440][ T6123] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.804480][ T6123] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.804518][ T6123] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 632.804545][ T6123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.863227][ T6123] usb 2-1: config 0 descriptor?? [ 632.906496][ T5690] udevd[5690]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 633.032101][T12005] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 633.051980][ T822] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 633.068964][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.069640][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.111541][ T6123] usbhid 2-1:0.0: can't add hid device: -71 [ 633.111679][ T6123] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 633.143946][ T6123] usb 2-1: USB disconnect, device number 41 [ 633.172482][T12005] usb 5-1: device descriptor read/64, error -71 [ 633.223228][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 633.228562][ T822] usb 1-1: config 1 interface 0 has no altsetting 0 [ 633.230876][ T822] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.40 [ 633.230908][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.230921][ T822] usb 1-1: Product: Д [ 633.230931][ T822] usb 1-1: Manufacturer: ࠠ [ 633.230940][ T822] usb 1-1: SerialNumber: Џ [ 633.412327][T12005] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 633.551526][T14175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2819'. [ 633.557853][T12005] usb 5-1: device descriptor read/64, error -71 [ 633.621992][ T6123] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 633.662241][T12005] usb usb5-port1: attempt power cycle [ 633.748554][ T822] usbhid 1-1:1.0: can't add hid device: -71 [ 633.748687][ T822] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 633.769412][ T822] usb 1-1: USB disconnect, device number 42 [ 633.811864][ T6123] usb 2-1: Using ep0 maxpacket: 32 [ 633.820685][ T6123] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.820721][ T6123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.820734][ T6123] usb 2-1: Product: syz [ 633.820743][ T6123] usb 2-1: Manufacturer: syz [ 633.820753][ T6123] usb 2-1: SerialNumber: syz [ 633.882468][ T6123] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 634.003440][T12005] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 634.023663][T12005] usb 5-1: device descriptor read/8, error -71 [ 634.080912][ T6123] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 634.140117][ T6123] usb 2-1: USB disconnect, device number 42 [ 634.180455][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.274282][T12005] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 634.292865][T12005] usb 5-1: device descriptor read/8, error -71 [ 634.362375][ T822] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 634.407084][T12005] usb usb5-port1: unable to enumerate USB device [ 634.531878][ T822] usb 8-1: Using ep0 maxpacket: 16 [ 634.543960][ T822] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 634.543995][ T822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.544018][ T822] usb 8-1: Product: syz [ 634.544033][ T822] usb 8-1: Manufacturer: syz [ 634.544043][ T822] usb 8-1: SerialNumber: syz [ 634.550037][ T822] usb 8-1: config 0 descriptor?? [ 634.791710][T12004] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 634.973841][T12004] usb 1-1: config 0 has no interfaces? [ 634.975797][T12004] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 634.975828][T12004] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 634.975842][T12004] usb 1-1: Product: syz [ 634.975852][T12004] usb 1-1: Manufacturer: syz [ 634.984875][T12004] usb 1-1: config 0 descriptor?? [ 635.122184][T14189] input: syz0 as /devices/virtual/input/input134 [ 635.383612][T14196] input: syz0 as /devices/virtual/input/input135 [ 635.741276][T14205] sctp: [Deprecated]: syz.4.2834 (pid 14205) Use of int in max_burst socket option. [ 635.741276][T14205] Use struct sctp_assoc_value instead [ 635.754275][T14205] sctp: [Deprecated]: syz.4.2834 (pid 14205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.754275][T14205] Use struct sctp_sack_info instead [ 636.865224][T14213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2837'. [ 636.952867][ T72] block nbd0: Possible stuck request ffff88802783e000: control (read@0,1024B). Runtime 60 seconds [ 636.952919][ T72] block nbd0: Possible stuck request ffff88802783e1c0: control (read@1024,1024B). Runtime 60 seconds [ 636.952955][ T72] block nbd0: Possible stuck request ffff88802783e380: control (read@2048,1024B). Runtime 60 seconds [ 636.952988][ T72] block nbd0: Possible stuck request ffff88802783e540: control (read@3072,1024B). Runtime 60 seconds [ 637.104840][ T822] usb 8-1: USB disconnect, device number 27 [ 637.452138][ T6123] usb 1-1: USB disconnect, device number 43 [ 637.671995][ T822] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 637.835973][ T822] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 637.836006][ T822] usb 8-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 637.836020][ T822] usb 8-1: Manufacturer: syz [ 637.863838][ T822] usb 8-1: config 0 descriptor?? [ 637.877622][ T822] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 637.879888][ T822] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 637.941298][ T6123] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 638.071193][ T6123] usb 5-1: device descriptor read/64, error -71 [ 638.090282][T12004] usb 8-1: USB disconnect, device number 28 [ 638.100724][T12004] ftdi_sio 8-1:0.0: device disconnected [ 638.270675][T14251] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2852'. [ 638.322082][ T6123] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 638.381737][ T822] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 638.461078][ T6123] usb 5-1: device descriptor read/64, error -71 [ 638.505314][T14255] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.2854'. [ 638.505380][T14255] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.2854'. [ 638.505391][T14255] netlink: 576 bytes leftover after parsing attributes in process `syz.0.2854'. [ 638.563190][ T822] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 638.566548][ T822] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 638.566571][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.566584][ T822] usb 2-1: Product: 쌼癲됥㏩뱗긂ힽ껁崊讙닪 [ 638.566595][ T822] usb 2-1: Manufacturer: ╯潋效ꄏ볅ʄꦬⰴ⋩뺵Ἣ鞒᳒ꗰ⇧㐿䙃隱蹇䍿떔ߠ鼣Ἕ䡷﨨篤ൔ策툃窹鐞׾滚Ჟ퍎ნ羪篩雮톯┤緵ꕂ럣统醦狞᥆ફ젾褺岻໹샯໨댒拨洄క뙢邔㕑䀜鉹鹗潗缟괰뻫ꮬ듂녋ﾉꚥ횘执葍琝㴢 [ 638.566613][ T822] usb 2-1: SerialNumber: ч [ 638.638762][ T6123] usb usb5-port1: attempt power cycle [ 638.837469][ T822] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 638.839437][ T822] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 638.983457][ T6123] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 638.999256][ T822] usb 2-1: USB disconnect, device number 43 [ 639.005100][ T6123] usb 5-1: device descriptor read/8, error -71 [ 639.171733][T12004] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 639.240871][ T6123] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 639.261791][ T6123] usb 5-1: device descriptor read/8, error -71 [ 639.325621][T12004] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 639.325653][T12004] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 639.325666][T12004] usb 8-1: Product: syz [ 639.325676][T12004] usb 8-1: SerialNumber: syz [ 639.335995][T12004] usb 8-1: config 0 descriptor?? [ 639.374095][ T6123] usb usb5-port1: unable to enumerate USB device [ 639.581100][T12004] hso 8-1:0.0: Failed to find INT IN ep [ 639.585339][T14263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.586852][T14263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.794866][ T6123] usb 8-1: USB disconnect, device number 29 [ 640.330934][T12004] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 640.523422][T12004] usb 2-1: config 0 has no interfaces? [ 640.528034][T12004] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 640.528067][T12004] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 640.528087][T12004] usb 2-1: Product: syz [ 640.528103][T12004] usb 2-1: Manufacturer: syz [ 640.544709][T12004] usb 2-1: config 0 descriptor?? [ 640.721649][ T5714] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 640.884586][ T5714] usb 8-1: Using ep0 maxpacket: 8 [ 640.892386][ T5714] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.892416][ T5714] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.895796][ T5714] usb 8-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 640.895829][ T5714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.895872][ T5714] usb 8-1: Product: syz [ 640.895889][ T5714] usb 8-1: Manufacturer: syz [ 640.895905][ T5714] usb 8-1: SerialNumber: syz [ 640.920176][ T5714] usb 8-1: config 0 descriptor?? [ 640.998820][T14297] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 641.045854][T12004] usb 2-1: USB disconnect, device number 44 [ 641.141251][T12005] usb 8-1: USB disconnect, device number 30 [ 641.252444][ T5714] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 641.293312][T14304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2872'. [ 641.415959][ T5714] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 641.415997][ T5714] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 641.416015][ T5714] usb 5-1: Product: syz [ 641.416024][ T5714] usb 5-1: Manufacturer: syz [ 641.420226][ T5714] usb 5-1: config 0 descriptor?? [ 641.450002][ T5714] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 641.454438][ T5714] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 641.766886][ T5714] usb 5-1: USB disconnect, device number 106 [ 641.779388][ T5714] ftdi_sio 5-1:0.0: device disconnected [ 642.104025][T14330] input: syz0 as /devices/virtual/input/input136 [ 642.174177][T14332] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.2883'. [ 642.174299][T14332] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.2883'. [ 642.174318][T14332] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2883'. [ 642.263638][T14336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2884'. [ 642.366989][T14338] loop5: detected capacity change from 0 to 7 [ 642.423954][T14338] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 642.423988][T14338] loop5: partition table partially beyond EOD, truncated [ 642.424221][T14338] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 642.474466][ T6123] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 642.565647][T14340] Invalid source name [ 642.698369][ T6123] usb 8-1: device descriptor read/64, error -71 [ 642.834544][ T5690] udevd[5690]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 642.834561][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2889'. [ 642.839155][T14355] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2889'. [ 642.983137][ T6123] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 643.110518][ T6123] usb 8-1: device descriptor read/64, error -71 [ 643.220749][ T6123] usb usb8-port1: attempt power cycle [ 643.325663][ T5714] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 643.491293][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 643.493978][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 643.495667][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.495725][ T5714] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 30, changing to 8 [ 643.495744][ T5714] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 42732, setting to 1024 [ 643.498371][ T5714] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 643.498399][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.498413][ T5714] usb 1-1: Product: syz [ 643.498423][ T5714] usb 1-1: Manufacturer: syz [ 643.498433][ T5714] usb 1-1: SerialNumber: syz [ 643.513357][T14363] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 643.640087][ T6123] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 643.660859][ T6123] usb 8-1: device descriptor read/8, error -71 [ 643.759718][ T5714] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.836959][ T5714] usb 1-1: USB disconnect, device number 44 [ 643.930874][ T6123] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 643.955605][ T6123] usb 8-1: device descriptor read/8, error -71 [ 643.965694][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.060580][ T6123] usb usb8-port1: unable to enumerate USB device [ 644.400234][ T5714] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 644.560054][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 644.563534][ T5714] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 644.563556][ T5714] usb 5-1: config 0 has no interface number 0 [ 644.563583][ T5714] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 644.563599][ T5714] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 644.563615][ T5714] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 644.563633][ T5714] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 644.563661][ T5714] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 644.563675][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.570036][ T5714] usb 5-1: config 0 descriptor?? [ 644.602162][ T5714] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 644.760016][T12005] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 644.803994][ T6123] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 644.864282][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 644.928708][T12005] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 644.928745][T12005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.928770][T12005] usb 1-1: Product: syz [ 644.928786][T12005] usb 1-1: Manufacturer: syz [ 644.928803][T12005] usb 1-1: SerialNumber: syz [ 644.971912][T12005] usb 1-1: config 0 descriptor?? [ 645.002014][ T6123] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.003652][ T6123] usb 2-1: config 0 interface 0 has no altsetting 0 [ 645.033328][ T6123] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 645.033476][ T6123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.033509][ T6123] usb 2-1: Product: syz [ 645.033525][ T6123] usb 2-1: Manufacturer: syz [ 645.033541][ T6123] usb 2-1: SerialNumber: syz [ 645.128057][ T6123] usb 2-1: config 0 descriptor?? [ 645.166998][ T6123] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 645.208241][ T5714] usb 5-1: USB disconnect, device number 107 [ 645.277733][ T5714] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 645.289850][ T6123] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 645.293296][ T6123] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 645.293372][ T6123] usb 2-1: media controller created [ 645.419180][T12005] usb 1-1: Firmware: major: 237, minor: 0, hardware type: ATUSB (0) [ 645.434048][ T6123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.584993][ T6123] DVB: Unable to find symbol tda10046_attach() [ 645.585011][ T6123] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 645.585026][ T6123] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 645.736337][T12005] usb 1-1: Firmware: build  [ 645.742248][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2904'. [ 645.746271][T14394] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2904'. [ 645.942510][T12005] usb 1-1: failed to fetch extended address, random address set [ 646.158076][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2906'. [ 646.215505][T12005] usb 1-1: USB disconnect, device number 45 [ 646.387534][ T6123] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 646.404164][ T6123] usb 2-1: USB disconnect, device number 45 [ 646.525049][T14409] netlink: 'syz.1.2909': attribute type 10 has an invalid length. [ 646.529270][T14409] team0: Device vxcan1 is of different type [ 646.861305][T14403] (syz.4.2907,14403,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 646.861340][T14403] (syz.4.2907,14403,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 646.927246][T14414] input: syz0 as /devices/virtual/input/input137 [ 647.251224][T14414] overlayfs: failed to resolve './file2': -2 [ 647.550311][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2918'. [ 647.885342][T14451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2922'. [ 647.901389][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 648.082903][T14457] /dev/nullb0: Can't open blockdev [ 648.218134][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2926'. [ 648.231089][ T6123] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 648.358914][T14466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2927'. [ 648.400806][ T6123] usb 1-1: unable to get BOS descriptor or descriptor too short [ 648.401449][ T6123] usb 1-1: not running at top speed; connect to a high speed hub [ 648.403868][ T6123] usb 1-1: config 1 has an invalid interface number: 93 but max is 0 [ 648.403898][ T6123] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.403920][ T6123] usb 1-1: config 1 has no interface number 0 [ 648.403970][ T6123] usb 1-1: config 1 interface 93 altsetting 185 endpoint 0x2 has invalid wMaxPacketSize 0 [ 648.403996][ T6123] usb 1-1: config 1 interface 93 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.404026][ T6123] usb 1-1: config 1 interface 93 has no altsetting 0 [ 648.406585][ T6123] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 648.406617][ T6123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.406640][ T6123] usb 1-1: Product: syz [ 648.406657][ T6123] usb 1-1: Manufacturer: syz [ 648.406674][ T6123] usb 1-1: SerialNumber: syz [ 648.675058][T14471] netlink: 'syz.1.2929': attribute type 10 has an invalid length. [ 648.677907][T14473] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2930'. [ 648.685126][T14471] team0: Device vxcan1 is of different type [ 648.779526][ T6123] peak_usb 1-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 648.779565][ T6123] peak_usb 1-1:1.93: unable to read PCAN-USB serial number (err -22) [ 648.890381][ T6123] peak_usb 1-1:1.93: probe with driver peak_usb failed with error -22 [ 648.914042][ T6123] usb 1-1: USB disconnect, device number 46 [ 649.199192][ T822] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 649.279246][ T5700] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 649.333104][T14483] trusted_key: encrypted_key: master key parameter is missing [ 649.353431][ T822] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 649.353466][ T822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.353483][ T822] usb 8-1: Product: syz [ 649.353492][ T822] usb 8-1: Manufacturer: syz [ 649.353502][ T822] usb 8-1: SerialNumber: syz [ 649.393346][ T822] usb 8-1: config 0 descriptor?? [ 649.441460][ T5700] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.441492][ T5700] usb 2-1: config 0 has no interfaces? [ 649.441560][ T5700] usb 2-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 649.441577][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.447958][ T5700] usb 2-1: config 0 descriptor?? [ 649.803402][ T822] usb 8-1: Firmware: major: 237, minor: 0, hardware type: ATUSB (0) [ 650.011873][ T822] usb 8-1: Read permanent extended address 8a:0d:2c:22:eb:db:a0:61 from device [ 650.246879][T14491] input: syz0 as /devices/virtual/input/input138 [ 650.248003][ T822] usb 8-1: USB disconnect, device number 35 [ 651.128925][T12005] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 651.208968][ T5714] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 651.280611][T12005] usb 8-1: not running at top speed; connect to a high speed hub [ 651.281954][T12005] usb 8-1: config 5 has an invalid interface number: 167 but max is 0 [ 651.281988][T12005] usb 8-1: config 5 has no interface number 0 [ 651.282038][T12005] usb 8-1: config 5 interface 167 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 651.282058][T12005] usb 8-1: config 5 interface 167 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 651.282080][T12005] usb 8-1: config 5 interface 167 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 651.282101][T12005] usb 8-1: config 5 interface 167 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 651.282118][T12005] usb 8-1: config 5 interface 167 has no altsetting 0 [ 651.285558][T12005] usb 8-1: string descriptor 0 read error: -22 [ 651.285671][T12005] usb 8-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=25.fd [ 651.285687][T12005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.296873][T14502] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 651.359318][ T5714] usb 5-1: Invalid ep0 maxpacket: 64 [ 651.393978][T12005] io_ti 8-1:5.167: required endpoints missing [ 651.488942][ T5714] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 651.638798][ T5714] usb 5-1: Invalid ep0 maxpacket: 64 [ 651.643295][ T5714] usb usb5-port1: attempt power cycle [ 651.663470][ T6123] usb 8-1: USB disconnect, device number 36 [ 651.688849][ T822] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 651.850890][ T822] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 651.850924][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.855284][ T822] usb 1-1: config 0 descriptor?? [ 651.882982][ T822] cp210x 1-1:0.0: cp210x converter detected [ 651.978938][ T5714] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 652.000074][ T5714] usb 5-1: Invalid ep0 maxpacket: 64 [ 652.065697][ T822] usb 1-1: cp210x converter now attached to ttyUSB0 [ 652.128811][ T5714] usb 5-1: new low-speed USB device number 111 using dummy_hcd [ 652.149879][ T5714] usb 5-1: Invalid ep0 maxpacket: 64 [ 652.150500][ T5714] usb usb5-port1: unable to enumerate USB device [ 652.235703][ T5714] usb 2-1: USB disconnect, device number 46 [ 652.898699][ T822] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 653.051749][ T822] usb 2-1: config 0 has no interfaces? [ 653.053507][ T822] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 653.053637][ T822] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 653.053655][ T822] usb 2-1: Product: syz [ 653.053665][ T822] usb 2-1: Manufacturer: syz [ 653.091467][ T822] usb 2-1: config 0 descriptor?? [ 653.402672][T14524] kvm: pic: non byte write [ 653.746352][ T822] usb 2-1: USB disconnect, device number 47 [ 654.485607][ T822] usb 1-1: USB disconnect, device number 47 [ 654.525752][ T822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 654.540161][ T822] cp210x 1-1:0.0: device disconnected [ 654.917045][ T822] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 655.075027][ T822] usb 1-1: device descriptor read/64, error -71 [ 655.216882][T14569] netlink: 'syz.7.2971': attribute type 10 has an invalid length. [ 655.355339][T14569] team0: Device vxcan1 is of different type [ 655.358365][ T822] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 655.488231][ T822] usb 1-1: device descriptor read/64, error -71 [ 655.608516][ T822] usb usb1-port1: attempt power cycle [ 655.775369][T14592] lo speed is unknown, defaulting to 1000 [ 655.948098][ T822] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 655.968622][ T822] usb 1-1: device descriptor read/8, error -71 [ 655.997195][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 655.999216][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.000960][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.001584][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.002048][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.003619][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.004164][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.005678][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.006109][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.006473][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.009417][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.010118][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.012725][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.013142][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.013498][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.013867][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.015375][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.015763][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.016099][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.017589][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.018420][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.020899][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.021293][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.021654][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.022024][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.023503][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.023860][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.024229][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.025705][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.026053][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.026416][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.030132][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.034433][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.037757][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.038947][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.040821][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.052415][T14601] program syz.4.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.418038][ T822] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 656.457313][ T822] usb 1-1: device descriptor read/8, error -71 [ 656.559390][ T822] usb usb1-port1: unable to enumerate USB device [ 657.007909][ T822] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 657.049271][T14623] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 657.162361][ T822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 657.163101][ T822] usb 5-1: not running at top speed; connect to a high speed hub [ 657.165245][ T822] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.233929][ T822] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 657.233966][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.233990][ T822] usb 5-1: Product: syz [ 657.234007][ T822] usb 5-1: Manufacturer: syz [ 657.234024][ T822] usb 5-1: SerialNumber: syz [ 657.256419][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 657.501814][T14617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.502548][T14617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.593195][ T822] peak_usb 5-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 657.593232][ T822] peak_usb 5-1:1.0: unable to read PCAN-USB serial number (err -22) [ 657.778590][ T822] peak_usb 5-1:1.0: probe with driver peak_usb failed with error -22 [ 657.832929][ T822] usb 5-1: USB disconnect, device number 112 [ 657.958814][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'. [ 657.963983][T14637] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3000'. [ 658.198713][T12005] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 658.257695][T14648] proc: Unknown parameter 'norecovery' [ 658.337722][ T5617] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 658.348633][T12005] usb 2-1: Using ep0 maxpacket: 32 [ 658.367427][T12005] usb 2-1: config 3 has an invalid interface number: 50 but max is 0 [ 658.367641][T12005] usb 2-1: config 3 has no interface number 0 [ 658.367692][T12005] usb 2-1: config 3 interface 50 altsetting 64 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 658.367722][T12005] usb 2-1: config 3 interface 50 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 658.367751][T12005] usb 2-1: config 3 interface 50 has no altsetting 0 [ 658.373724][T12005] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=bc.2f [ 658.373795][T12005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.373819][T12005] usb 2-1: Product: syz [ 658.373836][T12005] usb 2-1: Manufacturer: syz [ 658.373852][T12005] usb 2-1: SerialNumber: syz [ 658.519405][ T5617] usb 1-1: not running at top speed; connect to a high speed hub [ 658.521947][ T5617] usb 1-1: config 5 has an invalid interface number: 167 but max is 0 [ 658.521969][ T5617] usb 1-1: config 5 has no interface number 0 [ 658.522024][ T5617] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 658.522054][ T5617] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 658.522083][ T5617] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 658.522111][ T5617] usb 1-1: config 5 interface 167 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 658.522127][ T5617] usb 1-1: config 5 interface 167 has no altsetting 0 [ 658.607498][ T5617] usb 1-1: string descriptor 0 read error: -22 [ 658.607658][ T5617] usb 1-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=25.fd [ 658.607685][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.620427][T14639] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 658.639158][ T5617] io_ti 1-1:5.167: required endpoints missing [ 658.903898][T12005] qmi_wwan 2-1:3.50: probe with driver qmi_wwan failed with error -22 [ 658.925221][T12005] usb 2-1: USB disconnect, device number 48 [ 658.969559][ T5617] usb 1-1: USB disconnect, device number 52 [ 659.957418][ T822] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 660.014707][T14716] netlink: 'syz.4.3028': attribute type 1 has an invalid length. [ 660.107478][ T822] usb 1-1: Using ep0 maxpacket: 8 [ 660.110847][ T822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.110908][ T822] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 660.120071][ T822] usb 1-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 660.120102][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.120123][ T822] usb 1-1: Product: syz [ 660.120138][ T822] usb 1-1: Manufacturer: syz [ 660.120153][ T822] usb 1-1: SerialNumber: syz [ 660.308847][ T5617] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 660.379741][ T822] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 660.379780][ T822] usb 1-1: MIDIStreaming interface descriptor not found [ 660.447852][ T5617] usb 8-1: device descriptor read/64, error -71 [ 660.484565][ T822] usb 1-1: USB disconnect, device number 53 [ 660.528085][ T6123] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 660.592630][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 660.717447][ T5617] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 660.739747][ T6123] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.739812][ T6123] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 660.753040][ T6123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.753073][ T6123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 660.753093][ T6123] usb 2-1: SerialNumber: syz [ 660.806593][ T6123] usb 2-1: No union descriptors [ 660.867547][ T5617] usb 8-1: device descriptor read/64, error -71 [ 660.980551][ T5617] usb usb8-port1: attempt power cycle [ 661.000949][T12005] usb 2-1: USB disconnect, device number 49 [ 661.337306][ T5617] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 661.371345][ T5617] usb 8-1: device descriptor read/8, error -71 [ 661.628074][ T5617] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 661.659630][ T5617] usb 8-1: device descriptor read/8, error -71 [ 661.770288][ T5617] usb usb8-port1: unable to enumerate USB device [ 662.237042][ T5617] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 662.289008][T12005] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 662.400439][ T5617] usb 1-1: not running at top speed; connect to a high speed hub [ 662.401622][ T5617] usb 1-1: config 5 has an invalid interface number: 167 but max is 0 [ 662.401653][ T5617] usb 1-1: config 5 has no interface number 0 [ 662.401703][ T5617] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 662.401720][ T5617] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 662.401737][ T5617] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 662.401754][ T5617] usb 1-1: config 5 interface 167 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 662.401768][ T5617] usb 1-1: config 5 interface 167 has no altsetting 0 [ 662.406526][ T5617] usb 1-1: string descriptor 0 read error: -22 [ 662.409437][ T5617] usb 1-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=25.fd [ 662.409469][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.460240][T12005] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 662.460280][T12005] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 662.529002][T12005] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.529037][T12005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.529061][T12005] usb 2-1: Product: Ў [ 662.529079][T12005] usb 2-1: Manufacturer: с [ 662.529096][T12005] usb 2-1: SerialNumber: Ἦ᧮詁赂ᦍ␔ᵴ獂픝䶔坓鏿뤖৆෮⮁ࠈ絕ꚏ๨쇜뎈ゝ쉽᪸ᾳ⬃㈥‰꠮ ꕓ邏䰤鮋沤瓫쇉ŷ퍂뼺颼蟏︆ᤴ❮Üഄ訿柕⼓ [ 662.531096][T14789] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 662.542085][ T5617] io_ti 1-1:5.167: required endpoints missing [ 662.762807][ T5617] usb 1-1: USB disconnect, device number 54 [ 662.830905][T12005] cdc_ncm 2-1:1.0: bind() failure [ 662.851402][T12005] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 662.851454][T12005] cdc_ncm 2-1:1.1: bind() failure [ 662.875928][T12005] usb 2-1: USB disconnect, device number 50 [ 663.252926][T14831] netdevsim netdevsim4: Direct firmware load for # failed with error -2 [ 663.252957][T14831] netdevsim netdevsim4: Falling back to sysfs fallback for: # [ 663.405813][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3077'. [ 663.505850][T14841] input: syz0 as /devices/virtual/input/input139 [ 663.536845][ T822] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 663.701934][ T822] usb 8-1: config 0 has no interfaces? [ 663.721178][ T822] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 663.721215][ T822] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 663.721238][ T822] usb 8-1: Product: syz [ 663.721255][ T822] usb 8-1: Manufacturer: syz [ 663.737719][ T822] usb 8-1: config 0 descriptor?? [ 663.975924][T14825] kvm: pic: non byte write [ 664.313120][T12005] usb 8-1: USB disconnect, device number 41 [ 664.650185][T14862] block device autoloading is deprecated and will be removed. [ 665.218788][T14895] input: syz0 as /devices/virtual/input/input140 [ 665.936373][T12005] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 666.115699][T12005] usb 1-1: Using ep0 maxpacket: 16 [ 666.119957][T12005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.119992][T12005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.120015][T12005] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 666.120056][T12005] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 666.120080][T12005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.132108][T12005] usb 1-1: config 0 descriptor?? [ 666.796350][T12005] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0019/input/input141 [ 666.901041][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.903569][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.026169][ T822] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 667.036233][ T72] block nbd0: Possible stuck request ffff88802783e000: control (read@0,1024B). Runtime 90 seconds [ 667.036286][ T72] block nbd0: Possible stuck request ffff88802783e1c0: control (read@1024,1024B). Runtime 90 seconds [ 667.036321][ T72] block nbd0: Possible stuck request ffff88802783e380: control (read@2048,1024B). Runtime 90 seconds [ 667.036351][ T72] block nbd0: Possible stuck request ffff88802783e540: control (read@3072,1024B). Runtime 90 seconds [ 667.071551][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 667.151269][ T4927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.165935][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.174403][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.175175][T12005] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 667.220883][ T822] usb 2-1: not running at top speed; connect to a high speed hub [ 667.221784][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.276538][ T5617] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 667.278007][ T822] usb 2-1: config 5 has an invalid interface number: 167 but max is 0 [ 667.278037][ T822] usb 2-1: config 5 has no interface number 0 [ 667.320650][ T822] usb 2-1: config 5 interface 167 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 667.320693][ T822] usb 2-1: config 5 interface 167 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 667.320724][ T822] usb 2-1: config 5 interface 167 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 667.320754][ T822] usb 2-1: config 5 interface 167 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 667.320777][ T822] usb 2-1: config 5 interface 167 has no altsetting 0 [ 667.435804][ T822] usb 2-1: string descriptor 0 read error: -22 [ 667.442803][ T822] usb 2-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=25.fd [ 667.442840][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.536287][T12005] usb 1-1: USB disconnect, device number 55 [ 667.586435][ T5617] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.586484][ T5617] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 667.608309][ T5617] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.608342][ T5617] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.608365][ T5617] usb 8-1: Product: syz [ 667.608381][ T5617] usb 8-1: Manufacturer: syz [ 667.608394][ T5617] usb 8-1: SerialNumber: syz [ 667.800631][T14931] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 667.914738][ T822] io_ti 2-1:5.167: required endpoints missing [ 668.157080][ T822] usb 2-1: USB disconnect, device number 51 [ 668.192083][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.194800][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.242214][ T5617] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 668.242324][T14942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3116'. [ 668.321530][ T5617] usb 8-1: USB disconnect, device number 42 [ 668.747726][ T5617] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 668.801866][T14926] lo speed is unknown, defaulting to 1000 [ 668.836332][T14955] loop5: detected capacity change from 0 to 7 [ 668.861121][T14955] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 668.861156][T14955] loop5: partition table partially beyond EOD, truncated [ 668.862174][T14955] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 668.895891][ T5617] usb 8-1: Using ep0 maxpacket: 8 [ 668.901045][ T5617] usb 8-1: config index 0 descriptor too short (expected 301, got 72) [ 668.901082][ T5617] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 668.901136][ T5617] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.901163][ T5617] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 668.901192][ T5617] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 668.901219][ T5617] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.901248][ T5617] usb 8-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.901293][ T5617] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 668.901317][ T5617] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.158755][ T5690] udevd[5690]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 669.207658][ T5690] udevd[5690]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 669.225971][ T5617] usb 8-1: GET_CAPABILITIES returned 0 [ 669.226024][ T5617] usbtmc 8-1:16.0: can't read capabilities [ 669.433489][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.450730][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.541935][ T5617] usb 8-1: USB disconnect, device number 43 [ 669.865849][T10439] Bluetooth: hci2: command tx timeout [ 669.970604][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3126'. [ 670.114989][T14978] input: syz0 as /devices/virtual/input/input142 [ 670.592317][T14988] netlink: 'syz.7.3128': attribute type 3 has an invalid length. [ 670.643440][T14993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3130'. [ 670.731216][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3131'. [ 670.751167][T14998] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3131'. [ 670.945782][T14926] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.946337][T14926] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.948351][T14926] bridge_slave_0: entered allmulticast mode [ 670.952600][T14926] bridge_slave_0: entered promiscuous mode [ 671.000432][T14926] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.004421][T14926] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.093058][T14926] bridge_slave_1: entered allmulticast mode [ 671.104156][T14926] bridge_slave_1: entered promiscuous mode [ 671.304555][T15011] loop5: detected capacity change from 0 to 7 [ 671.340215][T14926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.353221][T14926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.375478][T12004] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 671.420467][T15011] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 671.420502][T15011] loop5: partition table partially beyond EOD, truncated [ 671.434912][T15011] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 671.510037][T14926] team0: Port device team_slave_0 added [ 671.537391][T12004] usb 1-1: config 0 has no interfaces? [ 671.539474][T12004] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 671.539506][T12004] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 671.539526][T12004] usb 1-1: Product: syz [ 671.539536][T12004] usb 1-1: Manufacturer: syz [ 671.544521][T12004] usb 1-1: config 0 descriptor?? [ 671.619830][T14926] team0: Port device team_slave_1 added [ 671.647371][T15016] loop2: detected capacity change from 0 to 7 [ 671.649127][T15016] Dev loop2: unable to read RDB block 7 [ 671.649182][T15016] loop2: unable to read partition table [ 671.649412][T15016] loop2: partition table beyond EOD, truncated [ 671.649456][T15016] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 671.810616][T15006] kvm: pic: non byte write [ 671.885632][T14926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.885652][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.885683][T14926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.890930][T14926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.890950][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.890999][T14926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.906581][ T5690] udevd[5690]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 671.945464][T10439] Bluetooth: hci2: command tx timeout [ 672.201411][ T5721] usb 1-1: USB disconnect, device number 56 [ 672.412475][T14926] hsr_slave_0: entered promiscuous mode [ 672.440395][T14926] hsr_slave_1: entered promiscuous mode [ 672.443237][T14926] debugfs: 'hsr0' already exists in 'hsr' [ 672.443269][T14926] Cannot create hsr debugfs directory [ 672.898481][ T5721] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 673.045264][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 673.067863][ T5721] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 673.067896][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.067916][ T5721] usb 2-1: Product: syz [ 673.067931][ T5721] usb 2-1: Manufacturer: syz [ 673.067945][ T5721] usb 2-1: SerialNumber: syz [ 673.080152][ T5721] usb 2-1: config 0 descriptor?? [ 673.445956][T14926] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.703068][ T5721] usb write operation failed. (-71) [ 673.703556][ T5721] usb write operation failed. (-71) [ 673.703578][ T5721] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 673.752396][ T5721] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 673.752418][ T5721] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 674.025209][T10439] Bluetooth: hci2: command tx timeout [ 674.128162][T14926] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.431285][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3148'. [ 674.433543][T15045] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3148'. [ 674.526601][ T5714] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 674.725328][ T5714] usb 8-1: Using ep0 maxpacket: 8 [ 674.727430][ T5714] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.727490][ T5714] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 674.730122][ T5714] usb 8-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 674.730153][ T5714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.730176][ T5714] usb 8-1: Product: syz [ 674.730193][ T5714] usb 8-1: Manufacturer: syz [ 674.730209][ T5714] usb 8-1: SerialNumber: syz [ 674.977224][T14926] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.992094][ T5714] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 674.992133][ T5714] usb 8-1: MIDIStreaming interface descriptor not found [ 675.168600][ T5714] usb 8-1: USB disconnect, device number 44 [ 675.195049][ T5617] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 675.262146][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.357939][ T5617] usb 1-1: config 0 has no interfaces? [ 675.359377][ T5617] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 675.359395][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 675.359408][ T5617] usb 1-1: Product: syz [ 675.359417][ T5617] usb 1-1: Manufacturer: syz [ 675.367792][ T5617] usb 1-1: config 0 descriptor?? [ 675.570783][T14926] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.616352][T15053] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 675.888608][ T5617] usb 1-1: USB disconnect, device number 57 [ 676.109395][T10439] Bluetooth: hci2: command tx timeout [ 676.439520][T14926] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 676.498004][T14926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 676.499710][T14926] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 676.552857][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3157'. [ 676.607217][T14926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.621360][T14926] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 676.624606][ T822] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 676.646829][T15069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3158'. [ 676.665621][T14926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.674128][T14926] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 676.713800][T15071] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3159'. [ 676.713869][T15071] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3159'. [ 676.713879][T15071] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3159'. [ 676.740895][T14926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 676.789214][ T822] usb 8-1: Using ep0 maxpacket: 32 [ 676.791121][ T822] usb 8-1: config 0 has an invalid interface number: 115 but max is 0 [ 676.791140][ T822] usb 8-1: config 0 has no interface number 0 [ 676.791169][ T822] usb 8-1: config 0 interface 115 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 676.791184][ T822] usb 8-1: config 0 interface 115 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 676.791199][ T822] usb 8-1: config 0 interface 115 has no altsetting 0 [ 676.793049][ T822] usb 8-1: New USB device found, idVendor=19d2, idProduct=ff55, bcdDevice=72.3e [ 676.793068][ T822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.793081][ T822] usb 8-1: Product: syz [ 676.793090][ T822] usb 8-1: Manufacturer: syz [ 676.793100][ T822] usb 8-1: SerialNumber: syz [ 676.803098][ T822] usb 8-1: config 0 descriptor?? [ 676.822698][ T822] option 8-1:0.115: GSM modem (1-port) converter detected [ 677.013340][ T822] usb 8-1: USB disconnect, device number 45 [ 677.032579][ T822] option 8-1:0.115: device disconnected [ 677.149706][T14926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.210241][T14926] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.246670][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.246975][ T6319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.278438][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.278610][ T6319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.102239][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3163'. [ 678.117176][T15096] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3163'. [ 678.177442][T14926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.380443][T15104] loop5: detected capacity change from 0 to 7 [ 678.462625][T15104] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 678.462661][T15104] loop5: partition table partially beyond EOD, truncated [ 678.463079][T15104] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 678.943315][T15119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.943694][T15119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.959627][T13366] udevd[13366]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 679.160180][T14926] veth0_vlan: entered promiscuous mode [ 679.181879][T14926] veth1_vlan: entered promiscuous mode [ 679.184429][ T822] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 679.320916][T14926] veth0_macvtap: entered promiscuous mode [ 679.339231][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 679.381966][ T822] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 679.382003][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.382026][ T822] usb 1-1: Product: syz [ 679.382036][ T822] usb 1-1: Manufacturer: syz [ 679.382047][ T822] usb 1-1: SerialNumber: syz [ 679.392331][ T822] usb 1-1: config 0 descriptor?? [ 679.422044][ T822] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 679.422181][ T822] dvb-usb: bulk message failed: -22 (4/0) [ 679.422198][ T822] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 679.425592][ T822] dvb-usb: bulk message failed: -22 (5/0) [ 679.425613][ T822] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 679.468540][T14926] veth1_macvtap: entered promiscuous mode [ 679.508531][ T822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 679.525916][ T822] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 679.525980][ T822] usb 1-1: media controller created [ 679.564668][ T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.579623][T14926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.673696][T14926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.713340][ T2239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.716002][ T822] usb 1-1: selecting invalid altsetting 3 [ 679.716022][ T822] ttusb2: set interface to alts=3 failed [ 679.741479][ T2239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.743136][ T2239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.743185][ T2239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.885891][ T822] DVB: Unable to find symbol tda10086_attach() [ 679.885910][ T822] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 679.886915][ T822] dvb-usb: bulk message failed: -22 (4/0) [ 679.886936][ T822] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 679.887065][ T822] dvb-usb: bulk message failed: -22 (5/0) [ 679.887079][ T822] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 679.887145][ T822] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 680.005307][ T822] usb 1-1: USB disconnect, device number 58 [ 680.356112][ T822] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 680.585667][ T5700] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 680.763467][ T5700] usb 8-1: config 0 has no interfaces? [ 680.785795][ T5700] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 680.785834][ T5700] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 680.785855][ T5700] usb 8-1: Product: syz [ 680.785869][ T5700] usb 8-1: Manufacturer: syz [ 680.789901][T15139] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3177'. [ 680.791572][ T5700] usb 8-1: config 0 descriptor?? [ 680.824397][T15139] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3177'. [ 680.824423][T15139] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3177'. [ 681.153058][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.153084][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.357555][T15142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.357996][T15142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.382259][T12004] usb 8-1: USB disconnect, device number 46 [ 681.458889][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.458914][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.583772][ T5714] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 681.742202][ T5714] usb 1-1: config 8 has an invalid interface number: 212 but max is 1 [ 681.742235][ T5714] usb 1-1: config 8 has an invalid interface number: 153 but max is 1 [ 681.742257][ T5714] usb 1-1: config 8 has no interface number 0 [ 681.742273][ T5714] usb 1-1: config 8 has no interface number 1 [ 681.742330][ T5714] usb 1-1: config 8 interface 212 has no altsetting 0 [ 681.742349][ T5714] usb 1-1: config 8 interface 153 has no altsetting 0 [ 681.802984][ T5714] usb 1-1: New USB device found, idVendor=19d2, idProduct=7fc1, bcdDevice=e8.57 [ 681.803022][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.803046][ T5714] usb 1-1: Product: syz [ 681.803062][ T5714] usb 1-1: Manufacturer: syz [ 681.803080][ T5714] usb 1-1: SerialNumber: syz [ 682.192902][ T5714] rndis_host 1-1:8.212: invalid descriptor buffer length [ 682.192931][ T5714] rndis_host 1-1:8.212: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 682.239043][T15157] input: syz0 as /devices/virtual/input/input143 [ 682.266404][ T5714] usb 1-1: USB disconnect, device number 59 [ 682.716504][T15169] tmpfs: Bad value for 'mpol' [ 682.774661][ T5714] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 682.928074][ T5714] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 682.928107][ T5714] usb 1-1: config 1 has no interface number 0 [ 682.928158][ T5714] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 682.928187][ T5714] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 682.981885][ T5714] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 682.981923][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.981947][ T5714] usb 1-1: Product: syz [ 682.981963][ T5714] usb 1-1: Manufacturer: syz [ 682.981980][ T5714] usb 1-1: SerialNumber: syz [ 683.040215][T15162] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 683.040348][T15162] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 683.060822][ T5714] usb 1-1: Error in usbnet_get_endpoints (-22) [ 683.167606][T15181] loop2: detected capacity change from 0 to 7 [ 683.217793][T15181] Dev loop2: unable to read RDB block 7 [ 683.217830][T15181] loop2: AHDI p1 p2 p3 [ 683.217854][T15181] loop2: partition table partially beyond EOD, truncated [ 683.218137][T15181] loop2: p1 start 1601398130 is beyond EOD, truncated [ 683.218159][T15181] loop2: p2 start 1702059890 is beyond EOD, truncated [ 683.549603][T15185] __nla_validate_parse: 1 callbacks suppressed [ 683.549626][T15185] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3190'. [ 683.601067][T15186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.601721][T15186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.740675][ T822] usb 1-1: USB disconnect, device number 60 [ 683.829007][T15193] loop5: detected capacity change from 0 to 7 [ 683.866048][T15193] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 683.866084][T15193] loop5: partition table partially beyond EOD, truncated [ 683.867672][T15193] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 684.067263][ T5865] udevd[5865]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 684.225065][T10439] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 684.543250][ T822] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 684.735612][ T822] usb 5-1: config index 0 descriptor too short (expected 45085, got 96) [ 684.735646][ T822] usb 5-1: config 95 has too many interfaces: 111, using maximum allowed: 32 [ 684.735670][ T822] usb 5-1: config 95 has an invalid descriptor of length 0, skipping remainder of the config [ 684.735692][ T822] usb 5-1: config 95 has 0 interfaces, different from the descriptor's value: 111 [ 684.757161][ T822] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 684.757192][ T822] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 684.757212][ T822] usb 5-1: Product: syz [ 684.757227][ T822] usb 5-1: Manufacturer: syz [ 685.038839][T15210] kvm: pic: non byte write [ 685.360227][ T822] usb 5-1: USB disconnect, device number 114 [ 685.453237][ T5617] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 685.602977][ T5617] usb 8-1: Using ep0 maxpacket: 32 [ 685.607858][ T5617] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 685.607894][ T5617] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 685.612211][ T5617] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 685.612245][ T5617] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 685.612268][ T5617] usb 8-1: Product: syz [ 685.612284][ T5617] usb 8-1: Manufacturer: syz [ 685.612300][ T5617] usb 8-1: SerialNumber: syz [ 685.618993][ T5617] usb 8-1: config 0 descriptor?? [ 685.661138][ T5617] hub 8-1:0.0: bad descriptor, ignoring hub [ 685.661178][ T5617] hub 8-1:0.0: probe with driver hub failed with error -5 [ 685.800212][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3208'. [ 685.886378][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.886746][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.893114][ T5617] usb 8-1: USB disconnect, device number 47 [ 686.063246][ T5700] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 686.125382][T15238] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.3210'. [ 686.125448][T15238] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.3210'. [ 686.125459][T15238] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3210'. [ 686.190176][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.210130][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.216202][ T5700] usb 1-1: not running at top speed; connect to a high speed hub [ 686.218234][ T5700] usb 1-1: config 5 has an invalid interface number: 167 but max is 0 [ 686.218261][ T5700] usb 1-1: config 5 has no interface number 0 [ 686.218306][ T5700] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 686.218332][ T5700] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 686.218361][ T5700] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 686.218388][ T5700] usb 1-1: config 5 interface 167 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 686.218425][ T5700] usb 1-1: config 5 interface 167 has no altsetting 0 [ 686.233331][ T5700] usb 1-1: string descriptor 0 read error: -22 [ 686.233609][ T5700] usb 1-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=25.fd [ 686.233643][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.278633][T15232] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 686.310920][ T5700] io_ti 1-1:5.167: required endpoints missing [ 686.518964][ T5700] usb 1-1: USB disconnect, device number 61 [ 686.967155][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3219'. [ 687.422976][T12004] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 687.576252][T12004] usb 1-1: not running at top speed; connect to a high speed hub [ 687.577382][T12004] usb 1-1: config 5 has an invalid interface number: 167 but max is 0 [ 687.577414][T12004] usb 1-1: config 5 has no interface number 0 [ 687.577456][T12004] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 687.577473][T12004] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 687.577491][T12004] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 687.577509][T12004] usb 1-1: config 5 interface 167 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 687.577523][T12004] usb 1-1: config 5 interface 167 has no altsetting 0 [ 687.581146][T12004] usb 1-1: string descriptor 0 read error: -22 [ 687.581351][T12004] usb 1-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=25.fd [ 687.581369][T12004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.693185][T15265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 687.700575][T12004] io_ti 1-1:5.167: required endpoints missing [ 687.749023][T15277] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3226'. [ 687.792778][ T5714] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 687.825120][T15279] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 687.899099][ T5700] usb 1-1: USB disconnect, device number 62 [ 687.922656][ T5714] usb 5-1: device descriptor read/64, error -71 [ 688.162657][ T5714] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 688.292741][ T5714] usb 5-1: device descriptor read/64, error -71 [ 688.403538][ T5714] usb usb5-port1: attempt power cycle [ 688.629129][T15285] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3231'. [ 688.722751][ T5700] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 688.742942][ T5714] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 688.799604][ T5714] usb 5-1: device descriptor read/8, error -71 [ 688.891942][ T5700] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 688.891980][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 688.892004][ T5700] usb 1-1: Product: syz [ 688.892021][ T5700] usb 1-1: SerialNumber: syz [ 688.925570][ T5700] usb 1-1: config 0 descriptor?? [ 689.033781][ T5714] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 689.053786][ T5714] usb 5-1: device descriptor read/8, error -71 [ 689.092482][T12004] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 689.163290][ T5714] usb usb5-port1: unable to enumerate USB device [ 689.187091][ T5700] hso 1-1:0.0: Failed to find BULK eps [ 689.248899][T12004] usb 8-1: config 0 has no interfaces? [ 689.250613][T12004] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.250644][T12004] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.250657][T12004] usb 8-1: Product: syz [ 689.250667][T12004] usb 8-1: Manufacturer: syz [ 689.271745][T12004] usb 8-1: config 0 descriptor?? [ 689.516469][T15288] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3232'. [ 689.533869][T15292] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.3233'. [ 689.533991][T15292] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.3233'. [ 689.534012][T15292] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3233'. [ 689.538532][T15288] kvm: pic: non byte write [ 689.927190][ T5700] usb 8-1: USB disconnect, device number 48 [ 690.840815][T15301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.841459][T15301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.982201][ T6123] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 691.160416][ T6123] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 691.160454][ T6123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.160477][ T6123] usb 5-1: Product: syz [ 691.160494][ T6123] usb 5-1: Manufacturer: syz [ 691.160511][ T6123] usb 5-1: SerialNumber: syz [ 691.172725][ T6123] usb 5-1: config 0 descriptor?? [ 691.536349][T12004] usb 1-1: USB disconnect, device number 63 [ 692.022102][ T5714] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 692.045604][T12004] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 692.217208][ T5714] usb 8-1: config 0 has no interfaces? [ 692.219514][ T6123] usb 5-1: ATUSB: AT86RF230 version 226 [ 692.220252][ T5714] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 692.220282][ T5714] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 692.220305][ T5714] usb 8-1: Product: syz [ 692.220322][ T5714] usb 8-1: Manufacturer: syz [ 692.222444][T12004] usb 1-1: Using ep0 maxpacket: 32 [ 692.285290][ T5714] usb 8-1: config 0 descriptor?? [ 692.291302][T12004] usb 1-1: config index 0 descriptor too short (expected 164, got 36) [ 692.291374][T12004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.291401][T12004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.291440][T12004] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 692.291463][T12004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.386336][T12004] usb 1-1: config 0 descriptor?? [ 692.421207][ T6123] usb 5-1: Firmware: major: 206, minor: 57, hardware type: UNKNOWN (115) [ 692.680535][ T6123] usb 5-1: failed to fetch extended address, random address set [ 692.697242][ T6123] usb 5-1: atusb_probe: initialization failed, error = -524 [ 692.697508][ T6123] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 692.708149][ T6123] usb 5-1: USB disconnect, device number 119 [ 692.755902][T15310] kvm: pic: non byte write [ 692.917123][T15315] netlink: 'syz.1.3241': attribute type 10 has an invalid length. [ 692.930756][T15315] team0: Device vxcan1 is of different type [ 693.145832][ T5714] usb 8-1: USB disconnect, device number 49 [ 693.336819][T15309] befs: (nullb0): invalid magic header [ 693.345339][T12004] usbhid 1-1:0.0: can't add hid device: -71 [ 693.345441][T12004] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 693.369990][T12004] usb 1-1: USB disconnect, device number 64 [ 693.760241][T15321] 9p: Bad value for 'rfdno' [ 693.881645][ T6123] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 693.976211][T15325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3246'. [ 694.035181][ T6123] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.035247][ T6123] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 694.035275][ T6123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.065867][ T6123] usb 5-1: config 0 descriptor?? [ 694.098435][ T6123] pwc: Askey VC010 type 2 USB webcam detected. [ 694.365603][T15333] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.3250'. [ 694.365716][T15333] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.3250'. [ 694.365737][T15333] netlink: 576 bytes leftover after parsing attributes in process `syz.7.3250'. [ 694.478115][T15323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.478779][T15323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.479502][ T6123] pwc: recv_control_msg error -32 req 02 val 2b00 [ 694.480253][ T6123] pwc: recv_control_msg error -32 req 02 val 2700 [ 694.682406][ T6123] pwc: recv_control_msg error -71 req 04 val 1000 [ 694.682978][ T6123] pwc: recv_control_msg error -71 req 04 val 1300 [ 694.685078][ T6123] pwc: recv_control_msg error -71 req 04 val 1400 [ 694.685620][ T6123] pwc: recv_control_msg error -71 req 02 val 2000 [ 694.686118][ T6123] pwc: recv_control_msg error -71 req 02 val 2100 [ 694.686613][ T6123] pwc: recv_control_msg error -71 req 04 val 1500 [ 694.687113][ T6123] pwc: recv_control_msg error -71 req 02 val 2500 [ 694.688752][ T6123] pwc: recv_control_msg error -71 req 02 val 2400 [ 694.689334][ T6123] pwc: recv_control_msg error -71 req 02 val 2600 [ 694.689857][ T6123] pwc: recv_control_msg error -71 req 02 val 2900 [ 694.696597][ T6123] pwc: recv_control_msg error -71 req 02 val 2800 [ 694.707833][ T6123] pwc: recv_control_msg error -71 req 04 val 1100 [ 694.721061][ T6123] pwc: recv_control_msg error -71 req 04 val 1200 [ 694.741556][T10439] Bluetooth: hci0: command 0x0405 tx timeout [ 694.789515][ T6123] pwc: Registered as video103. [ 694.798843][ T6123] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input145 [ 694.827584][ T6123] usb 5-1: USB disconnect, device number 120 [ 694.910550][T15338] openvswitch: netlink: Actions may not be safe on all matching packets [ 694.969515][T15340] input: syz0 as /devices/virtual/input/input146 [ 695.162278][T12004] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 695.331740][T12004] usb 1-1: Using ep0 maxpacket: 8 [ 695.336673][T12004] usb 1-1: unable to get BOS descriptor or descriptor too short [ 695.343798][T12004] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 695.343830][T12004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.343860][T12004] usb 1-1: Product: syz [ 695.343876][T12004] usb 1-1: Manufacturer: syz [ 695.343893][T12004] usb 1-1: SerialNumber: syz [ 695.622051][T12004] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 695.622747][T12004] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 695.713917][T12004] usb 1-1: USB disconnect, device number 65 [ 695.794856][T13366] udevd[13366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 695.821391][ T6123] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 695.975382][ T6123] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 695.975415][ T6123] usb 8-1: config 0 has no interface number 0 [ 695.975465][ T6123] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 695.979468][ T6123] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 695.979504][ T6123] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.979526][ T6123] usb 8-1: Product: syz [ 695.979537][ T6123] usb 8-1: Manufacturer: syz [ 695.979547][ T6123] usb 8-1: SerialNumber: syz [ 696.042318][ T6123] usb 8-1: config 0 descriptor?? [ 696.264814][ T6123] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 696.265090][ T6123] keyspan 8-1:0.133: unsupported endpoint type 0 [ 696.283157][ T6123] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 696.283279][ T6123] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 696.283379][ T6123] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 696.310199][ T6123] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 696.330888][ T6123] usb 8-1: USB disconnect, device number 50 [ 696.351959][ T6123] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 696.363385][ T6123] keyspan 8-1:0.133: device disconnected [ 696.428312][ T5700] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 696.521374][T12004] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 696.594927][ T5700] usb 5-1: config 0 has no interfaces? [ 696.598149][ T5700] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 696.598183][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 696.598205][ T5700] usb 5-1: Product: syz [ 696.598220][ T5700] usb 5-1: Manufacturer: syz [ 696.637886][ T5700] usb 5-1: config 0 descriptor?? [ 696.686961][T12004] usb 1-1: unable to get BOS descriptor or descriptor too short [ 696.687510][T12004] usb 1-1: not running at top speed; connect to a high speed hub [ 696.688718][T12004] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 696.688740][T12004] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 696.690906][T12004] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.690937][T12004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.690956][T12004] usb 1-1: Product: syz [ 696.690966][T12004] usb 1-1: Manufacturer: syz [ 696.690975][T12004] usb 1-1: SerialNumber: syz [ 696.863064][T15364] kvm: pic: non byte write [ 696.946438][T15375] netlink: 'syz.7.3265': attribute type 64 has an invalid length. [ 697.040195][T12004] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 697.040231][T12004] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 697.040761][T12004] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 697.040786][T12004] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 697.040811][T12004] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 697.040830][T12004] usb 1-1: 2:1 : invalid channels 0 [ 697.091865][T15378] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.3266'. [ 697.091977][T15378] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.3266'. [ 697.091997][T15378] netlink: 576 bytes leftover after parsing attributes in process `syz.7.3266'. [ 697.108606][ T72] block nbd0: Possible stuck request ffff88802783e000: control (read@0,1024B). Runtime 120 seconds [ 697.108655][ T72] block nbd0: Possible stuck request ffff88802783e1c0: control (read@1024,1024B). Runtime 120 seconds [ 697.108685][ T72] block nbd0: Possible stuck request ffff88802783e380: control (read@2048,1024B). Runtime 120 seconds [ 697.108714][ T72] block nbd0: Possible stuck request ffff88802783e540: control (read@3072,1024B). Runtime 120 seconds [ 697.256232][T12004] usb 1-1: USB disconnect, device number 66 [ 697.285911][T13366] udevd[13366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.420278][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3267'. [ 697.657063][T15388] loop5: detected capacity change from 0 to 7 [ 697.668522][T15388] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 697.668557][T15388] loop5: partition table partially beyond EOD, truncated [ 697.668831][T15388] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 697.787223][T13366] udevd[13366]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 697.881050][T12004] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 697.978243][T15397] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 0, id = 0 [ 698.036333][T12004] usb 8-1: not running at top speed; connect to a high speed hub [ 698.037663][T12004] usb 8-1: config 5 has an invalid interface number: 167 but max is 0 [ 698.037695][T12004] usb 8-1: config 5 has no interface number 0 [ 698.037743][T12004] usb 8-1: config 5 interface 167 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 698.037762][T12004] usb 8-1: config 5 interface 167 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 698.037780][T12004] usb 8-1: config 5 interface 167 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 698.037797][T12004] usb 8-1: config 5 interface 167 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 698.037811][T12004] usb 8-1: config 5 interface 167 has no altsetting 0 [ 698.049716][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3274'. [ 698.060660][T15399] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3274'. [ 698.065688][T12004] usb 8-1: string descriptor 0 read error: -22 [ 698.065862][T12004] usb 8-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=25.fd [ 698.065886][T12004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.089481][T15386] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 698.103812][T12004] io_ti 8-1:5.167: required endpoints missing [ 698.298302][T12005] usb 8-1: USB disconnect, device number 51 [ 698.450902][ T6123] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 698.610852][ T6123] usb 1-1: Using ep0 maxpacket: 8 [ 698.616282][ T6123] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.616424][ T6123] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 698.618705][ T6123] usb 1-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 698.618735][ T6123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.618756][ T6123] usb 1-1: Product: syz [ 698.618771][ T6123] usb 1-1: Manufacturer: syz [ 698.618780][ T6123] usb 1-1: SerialNumber: syz [ 698.903910][ T6123] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 698.903970][ T6123] usb 1-1: MIDIStreaming interface descriptor not found [ 698.973417][T12004] usb 5-1: USB disconnect, device number 121 [ 699.030892][T15404] netlink: 'syz.7.3276': attribute type 21 has an invalid length. [ 699.149302][ T6123] usb 1-1: USB disconnect, device number 67 [ 699.306943][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.854281][ T4978] udevd[4978]: worker [6443] /devices/virtual/block/nbd0 is taking a long time [ 717.203041][T15424] netlink: 'syz.1.3281': attribute type 10 has an invalid length. [ 717.216432][T15424] team0: Device vxcan1 is of different type [ 717.268770][T15423] __nla_validate_parse: 1 callbacks suppressed [ 717.268793][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3280'. [ 717.631974][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 718.078206][ T6123] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 718.243952][ T6123] usb 1-1: not running at top speed; connect to a high speed hub [ 718.246251][ T6123] usb 1-1: config 5 has an invalid interface number: 167 but max is 0 [ 718.246285][ T6123] usb 1-1: config 5 has no interface number 0 [ 718.246318][ T6123] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 718.246335][ T6123] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 718.246353][ T6123] usb 1-1: config 5 interface 167 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 718.246371][ T6123] usb 1-1: config 5 interface 167 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 718.246385][ T6123] usb 1-1: config 5 interface 167 has no altsetting 0 [ 718.321848][ T6123] usb 1-1: string descriptor 0 read error: -22 [ 718.322004][ T6123] usb 1-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=25.fd [ 718.322029][ T6123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.334119][T15440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 718.346050][ T6123] io_ti 1-1:5.167: required endpoints missing [ 718.551118][ T6123] usb 1-1: USB disconnect, device number 68 [ 718.626244][ T38] audit: type=1800 audit(1780629846.463:6): pid=15447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.3290" name="/fuse" dev="devtmpfs" ino=99 res=0 errno=0 [ 719.147546][ T5714] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 719.286154][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3295'. [ 719.296841][ T5714] usb 8-1: device descriptor read/64, error -71 [ 719.342769][T15461] netlink: 'syz.0.3296': attribute type 16 has an invalid length. [ 719.342786][T15461] netlink: 'syz.0.3296': attribute type 3 has an invalid length. [ 719.342795][T15461] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.3296'. [ 719.532859][ T5714] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 719.671362][ T5714] usb 8-1: device descriptor read/64, error -71 [ 719.697436][T10439] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 719.697454][ T4927] Bluetooth: hci1: command 0x1003 tx timeout [ 719.783575][ T5714] usb usb8-port1: attempt power cycle [ 719.834631][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3297'. [ 719.840271][T15464] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3297'. [ 720.247515][ T5714] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 720.271610][ T5714] usb 8-1: device descriptor read/8, error -71 [ 720.517505][ T5714] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 720.542958][ T5714] usb 8-1: device descriptor read/8, error -71 [ 720.654811][ T5714] usb usb8-port1: unable to enumerate USB device [ 721.067460][ T6123] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 721.110265][T15478] FAULT_INJECTION: forcing a failure. [ 721.110265][T15478] name failslab, interval 1, probability 0, space 0, times 0 [ 721.110301][T15478] CPU: 0 UID: 0 PID: 15478 Comm: syz.4.3303 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 721.110322][T15478] Tainted: [L]=SOFTLOCKUP [ 721.110327][T15478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 721.110335][T15478] Call Trace: [ 721.110340][T15478] [ 721.110347][T15478] dump_stack_lvl+0xe8/0x150 [ 721.110366][T15478] should_fail_ex+0x46b/0x600 [ 721.110390][T15478] should_failslab+0xa8/0x100 [ 721.110408][T15478] kmem_cache_alloc_noprof+0x87/0x680 [ 721.110423][T15478] ? __inet_hash_connect+0xef8/0x2630 [ 721.110441][T15478] __inet_hash_connect+0xef8/0x2630 [ 721.110457][T15478] ? __pfx___inet_check_established+0x10/0x10 [ 721.110476][T15478] ? __inet_hash_connect+0x60d/0x2630 [ 721.110495][T15478] ? __pfx___inet_hash_connect+0x10/0x10 [ 721.110508][T15478] ? lockdep_hardirqs_on+0x7a/0x110 [ 721.110531][T15478] ? inet_hash_connect+0xf1/0x380 [ 721.110547][T15478] tcp_v4_connect+0xd5f/0x19b0 [ 721.110579][T15478] ? __pfx_tcp_v4_connect+0x10/0x10 [ 721.110604][T15478] __inet_stream_connect+0x25a/0xdd0 [ 721.110628][T15478] ? __pfx___inet_stream_connect+0x10/0x10 [ 721.110647][T15478] ? __kasan_kmalloc+0x93/0xb0 [ 721.110663][T15478] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 721.110679][T15478] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 721.110700][T15478] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 721.110723][T15478] tcp_sendmsg_locked+0x4a8e/0x5370 [ 721.110743][T15478] ? __lock_acquire+0x6b5/0x2d10 [ 721.110759][T15478] ? tcp_sendmsg_locked+0x281/0x5370 [ 721.110787][T15478] ? __lock_acquire+0x6b5/0x2d10 [ 721.110809][T15478] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 721.110828][T15478] ? lockdep_hardirqs_on+0x7a/0x110 [ 721.110846][T15478] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 721.110865][T15478] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 721.110884][T15478] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 721.110909][T15478] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 721.110929][T15478] ? lockdep_hardirqs_on+0x7a/0x110 [ 721.110950][T15478] tcp_sendmsg+0x2f/0x50 [ 721.110968][T15478] ? __pfx_inet_sendmsg+0x10/0x10 [ 721.110983][T15478] sock_sendmsg_nosec+0x10e/0x180 [ 721.111000][T15478] __sys_sendto+0x402/0x590 [ 721.111023][T15478] ? __pfx___sys_sendto+0x10/0x10 [ 721.111056][T15478] ? ksys_write+0x248/0x270 [ 721.111075][T15478] ? __pfx_ksys_write+0x10/0x10 [ 721.111096][T15478] __x64_sys_sendto+0xde/0x100 [ 721.111115][T15478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.111129][T15478] do_syscall_64+0x174/0x580 [ 721.111148][T15478] ? trace_irq_disable+0x3b/0x140 [ 721.111163][T15478] ? clear_bhb_loop+0x40/0x90 [ 721.111179][T15478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.111192][T15478] RIP: 0033:0x7f101bc8ce59 [ 721.111205][T15478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.111217][T15478] RSP: 002b:00007f1019ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 721.111232][T15478] RAX: ffffffffffffffda RBX: 00007f101bf05fa0 RCX: 00007f101bc8ce59 [ 721.111242][T15478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 721.111250][T15478] RBP: 00007f1019ede090 R08: 0000200000e68000 R09: 0000000000000010 [ 721.111258][T15478] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 721.111266][T15478] R13: 00007f101bf06038 R14: 00007f101bf05fa0 R15: 00007fff1d063118 [ 721.111292][T15478] [ 721.206987][ T6123] usb 1-1: device descriptor read/64, error -71 [ 721.231981][T15483] loop2: detected capacity change from 0 to 7 [ 721.233959][T15483] Dev loop2: unable to read RDB block 7 [ 721.234000][T15483] loop2: unable to read partition table [ 721.234275][T15483] loop2: partition table beyond EOD, truncated [ 721.234295][T15483] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 721.577776][ T6123] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 721.725400][ T6123] usb 1-1: device descriptor read/64, error -71 [ 721.837578][ T6123] usb usb1-port1: attempt power cycle [ 721.966607][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3312'. [ 722.077073][ T5714] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 722.177590][ T6123] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 722.197510][ T6123] usb 1-1: device descriptor read/8, error -71 [ 722.231788][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 722.231815][ T5714] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 722.231831][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 722.231845][ T5714] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 722.231871][ T5714] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 722.231886][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.286954][T12004] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 722.298782][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3314'. [ 722.300905][T15503] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3314'. [ 722.325828][ T5714] usb 5-1: config 0 descriptor?? [ 722.437147][ T6123] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 722.439750][T12004] usb 8-1: unable to get BOS descriptor or descriptor too short [ 722.441193][T12004] usb 8-1: config 63 has an invalid interface number: 66 but max is 0 [ 722.441212][T12004] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 722.441225][T12004] usb 8-1: config 63 has no interface number 0 [ 722.441244][T12004] usb 8-1: config 63 interface 66 has no altsetting 0 [ 722.443956][T12004] usb 8-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 722.443976][T12004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.443989][T12004] usb 8-1: Product: syz [ 722.443999][T12004] usb 8-1: Manufacturer: syz [ 722.444051][T12004] usb 8-1: SerialNumber: syz [ 722.458738][ T6123] usb 1-1: device descriptor read/8, error -71 [ 722.533549][T15497] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 722.536324][T15497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.537055][T15497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.567742][ T6123] usb usb1-port1: unable to enumerate USB device [ 722.567789][ T5714] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 722.567810][ T5714] hdpvr 5-1:0.0: device init failed [ 722.567978][ T5714] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 722.832357][ T6123] usb 5-1: USB disconnect, device number 122 [ 722.939971][T15515] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.3317'. [ 722.940069][T15515] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.3317'. [ 722.940080][T15515] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3317'. [ 723.642007][T12004] uvcvideo 8-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 723.642112][T12004] uvcvideo 8-1:63.66: No valid video chain found. [ 723.665632][T12004] usb 8-1: USB disconnect, device number 56 [ 724.356638][T12004] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 724.406619][ T5700] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 724.510163][T12004] usb 5-1: config 0 has no interfaces? [ 724.512556][T12004] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 724.512592][T12004] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 724.512615][T12004] usb 5-1: Product: syz [ 724.512632][T12004] usb 5-1: Manufacturer: syz [ 724.533120][T12004] usb 5-1: config 0 descriptor?? [ 724.579715][ T5700] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 724.579747][ T5700] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.604588][ T5700] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 724.604625][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.604648][ T5700] usb 1-1: Product: syz [ 724.604664][ T5700] usb 1-1: Manufacturer: syz [ 724.604680][ T5700] usb 1-1: SerialNumber: syz [ 724.666117][ T5700] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input147 [ 724.706632][ T6123] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 724.758000][T15536] kvm: pic: non byte write [ 724.871790][ T6123] usb 8-1: config 0 has no interfaces? [ 724.875250][ T6123] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 724.875285][ T6123] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 724.875307][ T6123] usb 8-1: Product: syz [ 724.875324][ T6123] usb 8-1: Manufacturer: syz [ 724.913611][ T6123] usb 8-1: config 0 descriptor?? [ 725.091549][T12004] usb 5-1: USB disconnect, device number 123 [ 725.195919][T15558] kvm: pic: non byte write [ 725.421157][ T6123] usb 8-1: USB disconnect, device number 57 [ 726.166385][ T32] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 726.326695][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 726.333581][ T32] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.333620][ T32] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.333652][ T32] usb 5-1: config 0 interface 0 has no altsetting 0 [ 726.333689][ T32] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 726.333713][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.399572][ T32] usb 5-1: config 0 descriptor?? [ 726.818120][T15566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.820688][T15566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.994001][ T4963] bcm5974 1-1:1.0: could not read from device [ 727.017514][T15578] loop5: detected capacity change from 0 to 7 [ 727.082553][T15578] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 727.082592][T15578] loop5: partition table partially beyond EOD, truncated [ 727.100033][T15578] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 727.152061][ T5700] bcm5974 1-1:1.0: could not read from device [ 727.177611][ T72] block nbd0: Possible stuck request ffff88802783e000: control (read@0,1024B). Runtime 150 seconds [ 727.177665][ T72] block nbd0: Possible stuck request ffff88802783e1c0: control (read@1024,1024B). Runtime 150 seconds [ 727.177686][ T72] block nbd0: Possible stuck request ffff88802783e380: control (read@2048,1024B). Runtime 150 seconds [ 727.177705][ T72] block nbd0: Possible stuck request ffff88802783e540: control (read@3072,1024B). Runtime 150 seconds [ 727.388626][ T4963] bcm5974 1-1:1.0: could not read from device [ 727.430025][ T32] usbhid 5-1:0.0: can't add hid device: -71 [ 727.430163][ T32] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 727.454825][ T32] usb 5-1: USB disconnect, device number 124 [ 727.487724][ T5700] input: failed to attach handler mousedev to device input147, error: -5 [ 727.518464][ T5700] usb 1-1: USB disconnect, device number 73 [ 727.625058][ T4963] bcm5974 1-1:1.0: could not read from device [ 727.640567][T13366] udevd[13366]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 727.720174][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3334'. [ 727.806227][T15590] netlink: 'syz.7.3335': attribute type 16 has an invalid length. [ 727.806255][T15590] netlink: 'syz.7.3335': attribute type 3 has an invalid length. [ 727.806271][T15590] netlink: 64066 bytes leftover after parsing attributes in process `syz.7.3335'. [ 728.063850][T15597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3338'. [ 728.063879][T15597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3338'. [ 728.065975][ T5714] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 728.220028][ T5714] usb 8-1: unable to get BOS descriptor or descriptor too short [ 728.221967][ T5714] usb 8-1: config 250 has an invalid interface number: 15 but max is 0 [ 728.221988][ T5714] usb 8-1: config 250 has no interface number 0 [ 728.222009][ T5714] usb 8-1: config 250 interface 15 has no altsetting 0 [ 728.225071][ T5714] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d7.d0 [ 728.225094][ T5714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.225115][ T5714] usb 8-1: Product: ᳊⎌ꭙ챳ቁ␫᪶뽜⏰竫麳囨觶欌픣鷎횩㳕턳ﱱᇲꗎ阕뜌꛵伿핚ヷӞ狼 渭儱㑽茌Ⲓ允꒷✠큍㗟뉍緎ႄ랫奚蹟쵊젗ퟭ鈊ᯧ㗔怱洽춾栆袖➎楈蒂烻肗盞殊瀟䜟需쫋笥횐膇ϊ䇺杇俐㔖៹城ᅒ㜇윢൳갖쾻儾⏸㖾炚엋⿃瘡㎋棉옿瘝킠 [ 728.225135][ T5714] usb 8-1: Manufacturer: ᙱ [ 728.225145][ T5714] usb 8-1: SerialNumber: 郩䛥犺䐄芟돌ᥖﰋ谘￘윊菩 [ 728.455814][ T5700] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 728.476324][T12004] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 728.580226][ T5714] usb_ehset_test 8-1:250.15: probe with driver usb_ehset_test failed with error -32 [ 728.588213][ T5714] usb 8-1: USB disconnect, device number 58 [ 728.603634][ T5700] usb 1-1: config 0 has no interfaces? [ 728.612876][ T5700] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 728.612910][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 728.612932][ T5700] usb 1-1: Product: syz [ 728.612948][ T5700] usb 1-1: Manufacturer: syz [ 728.638383][T12004] usb 5-1: not running at top speed; connect to a high speed hub [ 728.651631][T12004] usb 5-1: config 5 has an invalid interface number: 167 but max is 0 [ 728.651663][T12004] usb 5-1: config 5 has no interface number 0 [ 728.651712][T12004] usb 5-1: config 5 interface 167 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 728.651739][T12004] usb 5-1: config 5 interface 167 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 728.651760][T12004] usb 5-1: config 5 interface 167 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 728.651777][T12004] usb 5-1: config 5 interface 167 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 728.651791][T12004] usb 5-1: config 5 interface 167 has no altsetting 0 [ 728.671371][T12004] usb 5-1: string descriptor 0 read error: -22 [ 728.671524][T12004] usb 5-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=25.fd [ 728.671548][T12004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.698224][T15602] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 728.722562][T12004] io_ti 5-1:5.167: required endpoints missing [ 728.760518][ T5700] usb 1-1: config 0 descriptor?? [ 728.917517][ T5700] usb 5-1: USB disconnect, device number 125 [ 728.982275][T15600] kvm: pic: non byte write [ 728.983745][T15600] binder: 15596:15600 unknown command 1074029334 [ 728.983762][T15600] binder: 15596:15600 ioctl c0306201 200000000080 returned -22 [ 729.088953][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3342'. [ 729.230040][T15612] ALSA: seq fatal error: cannot create timer (-22) [ 729.249831][T12004] usb 1-1: USB disconnect, device number 74 [ 729.525856][ T5714] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 729.655753][ T5714] usb 8-1: device descriptor read/64, error -71 [ 729.764280][T15619] loop5: detected capacity change from 0 to 7 [ 729.781205][T15619] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 729.781241][T15619] loop5: partition table partially beyond EOD, truncated [ 729.781513][T15619] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 729.835725][T12004] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 729.895724][ T5714] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 729.965919][T12004] usb 5-1: device descriptor read/64, error -71 [ 729.990946][T13366] udevd[13366]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 730.014472][T13366] udevd[13366]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 730.026664][ T5714] usb 8-1: device descriptor read/64, error -71 [ 730.141500][ T5714] usb usb8-port1: attempt power cycle [ 730.205543][T12004] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 730.336186][T12004] usb 5-1: device descriptor read/64, error -71 [ 730.445861][T12004] usb usb5-port1: attempt power cycle [ 730.475561][ T5714] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 730.497473][ T5714] usb 8-1: device descriptor read/8, error -71 [ 730.735786][ T5714] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 730.756763][ T5714] usb 8-1: device descriptor read/8, error -71 [ 730.785571][T12004] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 730.806087][T12004] usb 5-1: device descriptor read/8, error -71 [ 730.866622][ T5714] usb usb8-port1: unable to enumerate USB device [ 730.975617][T10439] Bluetooth: hci2: command tx timeout [ 731.013961][T15631] loop2: detected capacity change from 0 to 7 [ 731.015138][T15631] Dev loop2: unable to read RDB block 7 [ 731.015180][T15631] loop2: unable to read partition table [ 731.043416][T15631] loop2: partition table beyond EOD, truncated [ 731.043455][T15631] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 731.046013][T12004] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 731.070856][T12004] usb 5-1: device descriptor read/8, error -71 [ 731.169538][T15635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3354'. [ 731.177164][T12004] usb usb5-port1: unable to enumerate USB device [ 731.735411][T12004] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 731.891646][T12004] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 731.891682][T12004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.891702][T12004] usb 1-1: Product: syz [ 731.891712][T12004] usb 1-1: Manufacturer: syz [ 731.891722][T12004] usb 1-1: SerialNumber: syz [ 731.905374][T12004] usb 1-1: config 0 descriptor?? [ 732.143240][T12004] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 733.095412][ T5714] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 733.165108][ T32] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 733.247209][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.247236][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.248442][ T5714] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 733.248469][ T5714] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 733.248528][ T5714] usb 5-1: Manufacturer: syz [ 733.281927][ T5714] usb 5-1: config 0 descriptor?? [ 733.327460][ T32] usb 8-1: config 0 has no interfaces? [ 733.329689][ T32] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 733.329722][ T32] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 733.329746][ T32] usb 8-1: Product: syz [ 733.329762][ T32] usb 8-1: Manufacturer: syz [ 733.375774][ T32] usb 8-1: config 0 descriptor?? [ 733.567217][T15669] input: syz0 as /devices/virtual/input/input148 [ 733.615903][T12004] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 733.652169][T12004] usb 1-1: USB disconnect, device number 75 [ 733.841922][T15673] loop2: detected capacity change from 0 to 7 [ 733.848398][T15673] Dev loop2: unable to read RDB block 7 [ 733.848500][T15673] loop2: unable to read partition table [ 733.848837][T15673] loop2: partition table beyond EOD, truncated [ 733.849126][T15673] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 733.943880][T15667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.944544][T15667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.962733][T15667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.978280][T15667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.983447][ T5714] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001A/input/input149 [ 734.042015][T12005] usb 8-1: USB disconnect, device number 63 [ 734.196076][ T5714] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001A/input/input150 [ 734.351797][ T5714] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001A/input/input151 [ 734.442432][ T5714] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001A/input/input152 [ 734.496331][ T5714] uclogic 0003:256C:006D.001A: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 734.521055][ T5714] usb 5-1: USB disconnect, device number 4 [ 734.736965][ T822] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 734.788143][T15687] fido_id[15687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 734.891408][ T822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.891469][ T822] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 734.891494][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.915220][ T822] usb 1-1: config 0 descriptor?? [ 734.931925][ T822] pwc: Askey VC010 type 2 USB webcam detected. [ 735.216888][T15686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.217598][T15686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.343795][ T822] pwc: send_video_command error -71 [ 735.343816][ T822] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 735.343944][ T822] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 735.360057][ T822] usb 1-1: USB disconnect, device number 76 [ 735.534073][T15696] loop5: detected capacity change from 0 to 7 [ 735.558070][T15696] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 735.558104][T15696] loop5: partition table partially beyond EOD, truncated [ 735.558399][T15696] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 735.919806][ T5865] udevd[5865]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 735.991753][T13366] udevd[13366]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 736.065799][ T5714] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 736.097342][ T39] INFO: task kworker/u8:62:6317 blocked for more than 143 seconds. [ 736.097377][ T39] Tainted: G L syzkaller #0 [ 736.097391][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.097404][ T39] task:kworker/u8:62 state:D stack:24320 pid:6317 tgid:6317 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 736.097480][ T39] Workqueue: netns cleanup_net [ 736.097517][ T39] Call Trace: [ 736.097526][ T39] [ 736.097542][ T39] __schedule+0x16f9/0x5500 [ 736.097600][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 736.097638][ T39] ? rt_spin_lock+0x1e0/0x400 [ 736.097668][ T39] ? __pfx___schedule+0x10/0x10 [ 736.097710][ T39] ? schedule+0x90/0x360 [ 736.097744][ T39] schedule+0x164/0x360 [ 736.097777][ T39] rxrpc_destroy_all_calls+0x44e/0x570 [ 736.097813][ T39] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 736.097848][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 736.097876][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 736.097911][ T39] ? __timer_delete_sync+0x53e/0x610 [ 736.097945][ T39] rxrpc_exit_net+0x6f/0xc0 [ 736.097979][ T39] ops_undo_list+0x49f/0x940 [ 736.098015][ T39] ? rt_spin_unlock+0x1a0/0x200 [ 736.098045][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 736.098075][ T39] ? rt_spin_unlock+0x14f/0x200 [ 736.098114][ T39] ? idr_destroy+0x21b/0x2a0 [ 736.098147][ T39] ? rt_spin_unlock+0x160/0x200 [ 736.098178][ T39] cleanup_net+0x56e/0x800 [ 736.098211][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 736.098256][ T39] ? process_one_work+0x8be/0x1630 [ 736.098289][ T39] process_one_work+0x98b/0x1630 [ 736.098345][ T39] ? __pfx_process_one_work+0x10/0x10 [ 736.098374][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 736.098417][ T39] worker_thread+0xb49/0x1140 [ 736.098480][ T39] kthread+0x388/0x470 [ 736.098505][ T39] ? __pfx_worker_thread+0x10/0x10 [ 736.098534][ T39] ? __pfx_kthread+0x10/0x10 [ 736.098560][ T39] ret_from_fork+0x514/0xb70 [ 736.098590][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 736.098685][ T39] ? __switch_to+0xc79/0x1410 [ 736.098715][ T39] ? __pfx_kthread+0x10/0x10 [ 736.098743][ T39] ret_from_fork_asm+0x1a/0x30 [ 736.098809][ T39] [ 736.098870][ T39] [ 736.098870][ T39] Showing all locks held in the system: [ 736.098883][ T39] 1 lock held by khungtaskd/39: [ 736.098897][ T39] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 736.098968][ T39] 2 locks held by kworker/u8:7/166: [ 736.098982][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 736.099041][ T39] #1: ffffc9000399fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 736.099110][ T39] 4 locks held by kworker/1:2/822: [ 736.099121][ T39] #0: ffff88813fe17938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 736.099182][ T39] #1: ffffc9000559fc40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 736.099243][ T39] #2: ffff8880203052a0 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x125/0x720 [ 736.099299][ T39] #3: ffff88802688c158 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80 [ 736.099360][ T39] 2 locks held by kworker/u8:14/2239: [ 736.099373][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 736.099434][ T39] #1: ffffc90007307c40 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 736.099510][ T39] 2 locks held by getty/5367: [ 736.099523][ T39] #0: ffff8880368560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 736.099577][ T39] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 736.099640][ T39] 4 locks held by udevd/5690: [ 736.099654][ T39] #0: ffff888061fdd2c0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 736.099713][ T39] #1: ffff888037f65478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 736.099778][ T39] #2: ffff88805a639698 (kn->active#23){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 736.099846][ T39] #3: ffff888039fbe210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 736.099899][ T39] 6 locks held by kworker/0:4/5714: [ 736.100008][ T39] #0: ffff888022edd938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 736.100073][ T39] #1: ffffc90004fdfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 736.100149][ T39] #2: ffff888025942210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 736.100201][ T39] #3: ffff8880257a9658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 736.100254][ T39] #4: ffff88802a393d58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 736.100306][ T39] #5: ffffffff8ee53c20 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 736.100360][ T39] 6 locks held by kworker/0:5/5721: [ 736.100374][ T39] #0: ffff888022edd938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 736.100437][ T39] #1: ffffc9000504fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 736.100498][ T39] #2: ffff888025b2a210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 736.100550][ T39] #3: ffff888039fbe210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 736.100607][ T39] #4: ffff88805766a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 736.100665][ T39] #5: ffffffff8e0689a0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 736.100729][ T39] 2 locks held by kworker/u8:50/6240: [ 736.100743][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 736.100803][ T39] #1: ffffc90006677c40 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 736.100865][ T39] 3 locks held by kworker/u8:62/6317: [ 736.100878][ T39] #0: ffff88801bae6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 736.100938][ T39] #1: ffffc90006ab7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 736.100998][ T39] #2: ffffffff8f59d4e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 736.101060][ T39] 1 lock held by udevd/6443: [ 736.101073][ T39] #0: ffff8880277fa4c8 (&disk->open_mutex#5){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 736.101156][ T39] 9 locks held by syz-executor/12594: [ 736.101169][ T39] #0: ffffffff8e29d2b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 736.101232][ T39] #1: ffff88803fbc0430 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x184/0x1d70 [ 736.101289][ T39] #2: ffff88803c6147b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x272/0x1d70 [ 736.101348][ T39] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 736.101398][ T39] #4: ffff888039ce4298 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 736.101452][ T39] #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 736.101521][ T39] #6: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 736.103282][ T39] #7: ffff888037f72f58 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x5ae/0x5550 [ 736.103353][ T39] #8: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 736.103419][ T39] 1 lock held by syz.7.3378/15701: [ 736.103433][ T39] #0: ffffffff8e1bccc0 (console_lock){+.+.}-{0:0}, at: con_font_op+0x94e/0xfa0 [ 736.103487][ T39] 9 locks held by syz.0.3379/15705: [ 736.103500][ T39] #0: ffffffff8e29d2b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 736.103558][ T39] #1: ffff8880675e7030 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x184/0x1d70 [ 736.103610][ T39] #2: ffff8880675e62b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x272/0x1d70 [ 736.103670][ T39] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 736.103720][ T39] #4: ffff888039c7e598 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 736.103775][ T39] #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 736.103828][ T39] #6: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 736.103879][ T39] #7: ffff88802a150298 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x5ae/0x5550 [ 736.103946][ T39] #8: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 736.104005][ T39] [ 736.104012][ T39] ============================================= [ 736.104012][ T39] [ 736.104023][ T39] NMI backtrace for cpu 1 [ 736.104042][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 736.104073][ T39] Tainted: [L]=SOFTLOCKUP [ 736.104082][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.104104][ T39] Call Trace: [ 736.104113][ T39] [ 736.104123][ T39] dump_stack_lvl+0xe8/0x150 [ 736.104153][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 736.104181][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 736.104209][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 736.104239][ T39] sys_info+0x135/0x170 [ 736.104265][ T39] watchdog+0xfd3/0x1030 [ 736.104298][ T39] ? watchdog+0x1c9/0x1030 [ 736.104329][ T39] kthread+0x388/0x470 [ 736.104358][ T39] ? __pfx_watchdog+0x10/0x10 [ 736.104378][ T39] ? __pfx_kthread+0x10/0x10 [ 736.104404][ T39] ret_from_fork+0x514/0xb70 [ 736.104432][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 736.104457][ T39] ? __switch_to+0xc79/0x1410 [ 736.104483][ T39] ? __pfx_kthread+0x10/0x10 [ 736.104508][ T39] ret_from_fork_asm+0x1a/0x30 [ 736.104552][ T39] [ 736.104602][ T39] Sending NMI from CPU 1 to CPUs 0: [ 736.104634][ C0] NMI backtrace for cpu 0 [ 736.104653][ C0] CPU: 0 UID: 0 PID: 21 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 736.104678][ C0] Tainted: [L]=SOFTLOCKUP [ 736.104685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.104696][ C0] RIP: 0010:unwind_next_frame+0x5d/0x2550 [ 736.104722][ C0] Code: 3c 28 00 74 08 48 89 df e8 60 32 b9 00 48 89 5c 24 10 49 8b 5e 48 4d 8d 66 38 4c 89 e0 48 c1 e8 03 48 89 44 24 58 80 3c 28 00 <74> 08 4c 89 e7 e8 39 32 b9 00 4d 8b 7e 38 4d 89 f5 49 c1 ed 03 41 [ 736.104738][ C0] RSP: 0018:ffffc900001a76d8 EFLAGS: 00000246 [ 736.104757][ C0] RAX: 1ffff92000034efc RBX: ffffffff81abe34e RCX: 0000000000000000 [ 736.104770][ C0] RDX: dffffc0000000000 RSI: ffffffff81abe34e RDI: ffffc900001a77a8 [ 736.104783][ C0] RBP: dffffc0000000000 R08: ffffc900001a7870 R09: 0000000000000004 [ 736.104796][ C0] R10: ffffc900001a77f8 R11: ffffffff81b07a50 R12: ffffc900001a77e0 [ 736.104809][ C0] R13: dffffc0000000000 R14: ffffc900001a77a8 R15: ffffc900001a77a8 [ 736.104823][ C0] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 736.104838][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.104851][ C0] CR2: 000000110c2a07a3 CR3: 000000005fa6a000 CR4: 00000000003526f0 [ 736.104869][ C0] Call Trace: [ 736.104875][ C0] [ 736.104886][ C0] ? unwind_next_frame+0xa6/0x2550 [ 736.104908][ C0] ? free_task+0x115/0x190 [ 736.104929][ C0] ? rcu_cpu_kthread+0x99e/0x1470 [ 736.104951][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 736.104970][ C0] arch_stack_walk+0x11b/0x150 [ 736.104995][ C0] ? rcu_cpu_kthread+0x99e/0x1470 [ 736.105017][ C0] stack_trace_save+0xa9/0x100 [ 736.105034][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 736.105056][ C0] kasan_save_stack+0x3e/0x60 [ 736.105075][ C0] ? kasan_save_stack+0x3e/0x60 [ 736.105092][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 736.105115][ C0] ? call_rcu+0xee/0x890 [ 736.105137][ C0] ? free_task+0x115/0x190 [ 736.105156][ C0] ? rcu_cpu_kthread+0x99e/0x1470 [ 736.105196][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 736.105227][ C0] ? __pfx___free_task_exec_state+0x10/0x10 [ 736.105246][ C0] call_rcu+0xee/0x890 [ 736.105267][ C0] ? bpf_task_storage_free+0x1c/0x220 [ 736.105293][ C0] ? bpf_task_storage_free+0x1c/0x220 [ 736.105319][ C0] free_task+0x115/0x190 [ 736.105339][ C0] ? __pfx___put_task_struct_rcu_cb+0x10/0x10 [ 736.105369][ C0] rcu_cpu_kthread+0x99e/0x1470 [ 736.105393][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 736.105417][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 736.105439][ C0] ? schedule+0x90/0x360 [ 736.105463][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 736.105479][ C0] smpboot_thread_fn+0x541/0xa50 [ 736.105496][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 736.105515][ C0] kthread+0x388/0x470 [ 736.105534][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 736.105549][ C0] ? __pfx_kthread+0x10/0x10 [ 736.105568][ C0] ret_from_fork+0x514/0xb70 [ 736.105589][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 736.105609][ C0] ? __switch_to+0xc79/0x1410 [ 736.105626][ C0] ? __pfx_kthread+0x10/0x10 [ 736.105645][ C0] ret_from_fork_asm+0x1a/0x30 [ 736.105672][ C0] [ 736.110113][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 736.110138][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 736.110173][ T39] Tainted: [L]=SOFTLOCKUP [ 736.110182][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.110196][ T39] Call Trace: [ 736.110206][ T39] [ 736.110216][ T39] vpanic+0x56c/0xa60 [ 736.110252][ T39] ? __pfx___schedule+0x10/0x10 [ 736.110284][ T39] ? __pfx_vpanic+0x10/0x10 [ 736.110325][ T39] panic+0xc5/0xd0 [ 736.110355][ T39] ? __pfx_panic+0x10/0x10 [ 736.110389][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 736.110431][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 736.110465][ T39] watchdog+0x102c/0x1030 [ 736.110497][ T39] ? watchdog+0x1c9/0x1030 [ 736.110529][ T39] kthread+0x388/0x470 [ 736.110555][ T39] ? __pfx_watchdog+0x10/0x10 [ 736.110578][ T39] ? __pfx_kthread+0x10/0x10 [ 736.110605][ T39] ret_from_fork+0x514/0xb70 [ 736.110641][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 736.110669][ T39] ? __switch_to+0xc79/0x1410 [ 736.110695][ T39] ? __pfx_kthread+0x10/0x10 [ 736.110720][ T39] ret_from_fork_asm+0x1a/0x30 [ 736.110762][ T39] [ 736.111212][ T39] Kernel Offset: disabled