last executing test programs: 35.430690302s ago: executing program 0 (id=734): syz_usb_connect(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x0, 0x30314247}}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000900)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x50) accept4$unix(r1, &(0x7f0000000000), &(0x7f0000000100)=0x6e, 0x80800) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) timer_create(0x3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) lseek(r6, 0x3, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=r7) lseek(r6, 0x10, 0x1) 34.832412288s ago: executing program 0 (id=741): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket(0x15, 0x5, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000580)='/dev/ppp\x00(\xc0\x91D\x83\xb4\x7f0\x02~Z(ex\a\x90%\x9fx0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64000000cbe5a371f6da9273a0d0343d00a8e366feaf1b48fcd42d3a8ac10bcacf59de49cfe696bfc1f73300228c4302f32c3d83167f0ae06d60d996dc4c2a25fd8867b4ad9a8aecc2050acaf506a02010b5d8277314737a9bbf897365be31ded5310945aeeff3ef38a74da9f3423683ea45f38fb56c45b9949ff87a46a91321cceb1970efa0c4eba1e93e62fcdf64b8", @ANYRES16=r7, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r8, @ANYBLOB="0a0034000101010101010000080026006c09000004004600300051802c00008011000100435d92b660c316956934eab9990000000400040005000200000000000800030005ac0f00"], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f6973f3000000746963617374000500830000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054) 34.614356415s ago: executing program 0 (id=745): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000001980)={0x1, [{0x2, 0x0, 0x80000001, 0x0}, {0x3, 0x3e0, 0x0, &(0x7f0000000140)="80fa7868332f41d267b768c9c715dbf1a0794a1aea8eb9c1cc914a39457f46c7c580b7cab4adf3051713b96950cc8f1c30bf635c23aed00f29349cce935abc3f2afa38028d04540fb6e740d7d48e41f1f1bbfca84ee12c4c9a2823920429c49de5a84b2f77a7e29cbd290c884858cc0627ab52a1d10d677ad7000000"}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xd023, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x80000007, 0x0}, {0x7, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xfffffff3, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x6, 0x0}]}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="0f20c035000004000f22c02636f0110b0f20d835200000000f22d80f20c035000000200f22c00f01c9450f01c30f01c8c4814d72e004b916030000b8dc000000ba000000000f3066b884000f00d0", 0x4e}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 34.480910543s ago: executing program 0 (id=746): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "cd486a10e133c1facb3c78be90d9917af3c9ee1e61af890ae3c966bbfb549c6e", "4a692a16abbadb752b69b175238894ec1466faf5a225338d500febb8db153388", "b537203fadc3b1b1e7c8bfe2ffcb1edd1952c0948405add9058e0b2cba9bb337", "a50a2c7e5daa066fac08c6f22875143fba3aefcc1ea0eff5bc1872a5f514da50", "ac93dededc3408a81ce890a357d073619eb1b8570d56b71cfc2a55124d81aeeb", "5dd307f7c7a291d060138122", 0x9, 0x3, 0xfffffff8, 0x0, 0x4}}) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @empty}], 0x10) r3 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000500)='(', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x4, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r4, 0x8}, 0x8) 34.462428543s ago: executing program 0 (id=748): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0xdca, 0x81}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x323, @tick=0x65757100}) sendto$packet(r1, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0x12, 0x845, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = dup(r1) read$watch_queue(r4, &(0x7f0000000000)=""/39, 0x27) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ff8826bd7000fddbdf254b0000000500a800000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002759ba116a7718a2316a005c0fddc82639ba"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="2d9028d23c8dc8fdebedc19989241bed43cf0c9d55a3c1addaeda8668ff486bfba966b39265db42ee528afc1c37d5b153b54b5a8ce64f5670101000000000000d1ef301395c07c7907e488ebad6016b9bd382efbc2651e4053b6c899a470b422b21f0ddfa0652c58e38adf26f5e2cae0b7858edb1fbf757a8078037a20be78fac884fb4ef3cf081f93878173966c5df447e3639741b9c665b99889d97d4114664e88884b919729bf304b4c2681e032156adf1ecfddb0bbdc5f8fd5655a8b8a", @ANYRES16=r8, @ANYBLOB="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"], 0x3d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$key(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2, 0x11, 0x5, 0x9, 0xb, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_address={0x5, 0x6, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x10}, 0xc}}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3502}]}, 0x58}}, 0x1040) setsockopt$sock_int(r7, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) 34.162037658s ago: executing program 0 (id=751): ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000300)) (async) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001", 0x21) (async) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200010d4}, 0x80) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x2000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0103000000000000000007000000e4498fddfa9ca9e6dd038d438a36234a59cd65a74c4beed423b309ce09dd13b97223fdd23597bfd5b19bb92b9a17cb1b8ed293000000000000000000000000000000ae9a875875990951faf44b95e72f891989980941602be719130b5da02324df7ce830a3c9194c87524a18f8750b99b2b30018c166c4a5f05d03ac897387e3673853f779a769c00923d8f5c15cd4642103"], 0x14}}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x29, 0x1f, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) syz_usb_connect(0x0, 0x3c1, &(0x7f0000000a00)=ANY=[@ANYBLOB="120110011accc1402d1e8500e896010203010902af0302050790060904e99700ffab4b010904"], 0xfffffffffffffffd) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x2, 0x4) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85512, 0x0) (async, rerun: 32) r10 = gettid() (rerun: 32) rt_sigqueueinfo(r10, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) 34.019909938s ago: executing program 32 (id=751): ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000300)) (async) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001", 0x21) (async) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200010d4}, 0x80) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x2000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0103000000000000000007000000e4498fddfa9ca9e6dd038d438a36234a59cd65a74c4beed423b309ce09dd13b97223fdd23597bfd5b19bb92b9a17cb1b8ed293000000000000000000000000000000ae9a875875990951faf44b95e72f891989980941602be719130b5da02324df7ce830a3c9194c87524a18f8750b99b2b30018c166c4a5f05d03ac897387e3673853f779a769c00923d8f5c15cd4642103"], 0x14}}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x29, 0x1f, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) syz_usb_connect(0x0, 0x3c1, &(0x7f0000000a00)=ANY=[@ANYBLOB="120110011accc1402d1e8500e896010203010902af0302050790060904e99700ffab4b010904"], 0xfffffffffffffffd) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x2, 0x4) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85512, 0x0) (async, rerun: 32) r10 = gettid() (rerun: 32) rt_sigqueueinfo(r10, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) 6.931790774s ago: executing program 3 (id=934): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async, rerun: 32) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000280)}}) 6.815431224s ago: executing program 3 (id=935): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x80, 0x0) read$FUSE(r0, 0x0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11022abd7000fcdbdf250f00000005002d000100000008000300", @ANYRES32=r3, @ANYBLOB="050029"], 0x3c}, 0x1, 0x100000000000000, 0x0, 0x4044059}, 0x40090) syz_usb_connect(0x1, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0xf4, 0xf, 0x4, 0x8, 0xace, 0x13a1, 0x444, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x98, 0xaa, 0xc9, 0x5}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.556711049s ago: executing program 4 (id=942): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60c01a"], 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x4a243) (async) close(0x3) 5.440982669s ago: executing program 4 (id=944): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0xffffffffffffffb1) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) read$char_usb(r2, &(0x7f0000000040)=""/77, 0x4d) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/freeze_filesystems', 0x88102, 0x0) 5.329147593s ago: executing program 4 (id=945): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x4000010) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="7edd544defdb47383776b336aa83ef62b0fc97a44c13a3c5f36275f8d6986bb8781c77cab6a9449b8f4ef1aecf1fa385f1f05702698d6622d7a5a839de5ef266a95316b9d7ec80b6b5f61ae8e9ee4f76cc22092f978a7a0fa5a5e039ed94f6eaf85662c11ae3b43f547d59ec3c8cd194a9c39723cb5dda796f97cee54f445953cfdef3531540a36d04958dd03c4b2076e3580f4a8143a064f60e7b471588fcc8c85faeea8225d9fbe00c51dd", 0xac}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x58, 0x117, 0x2, 0x3f, "bad7ebc09c028818f0a5078d47dc6c0a952434151c157823cb7424829c2175ce6a94352c28d35d2745df49cca11dfeaf10c301896c59bd15d5b061b839b6a7"}], 0x88, 0x10}, 0x4000) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup'}, 0x2e) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 3.908917387s ago: executing program 3 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = getpid() syz_pidfd_open(r5, 0x0) move_pages(r5, 0x5, &(0x7f0000000300)=[&(0x7f0000b00000/0x1000)=nil, &(0x7f00007bc000/0x2000)=nil, &(0x7f000027d000/0x3000)=nil, &(0x7f0000520000/0x2000)=nil, &(0x7f00003fd000/0x4000)=nil], &(0x7f0000000340)=[0x5, 0x80, 0x401], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006030030003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) r7 = syz_init_net_socket$ax25(0x3, 0x0, 0xf) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000004, 0x102030, r7, 0xafe80000) syz_usb_connect(0x3, 0x69, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000317643108210900121bf60102030109025700020c00500a0904540a01b3400a0409050d10400006590409046edf010206000b092101000301224f00092406a7188f001e5b13c60f052400acf30d240f"], &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0x0, 0xff, 0x8, 0x3}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x7f, 0x100) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r8, 0xc008551a, &(0x7f0000000540)={0x4, 0x10, [0x7, 0x1, 0x7, 0x200]}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x8c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x78, 0x8, "3b1fe6d3b5558eedcf8bbc2af65d8e8acca9606562c06cdfeb3407b08d6d308dd24e81a302cdd1420954cf4c7d2bfd48616e64264e6f34c60208bc0c65a6a26cc2c8b8e5003f1b4a91d902111a63fa3a66bc9a368506ed767930d2362b675fbeef16646b5f097a6ab33a7c274848e3c34dc9a18b"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf255200000008000300", @ANYRES32=r3, @ANYBLOB="06004800530000000500880005000000050089000000000004002a00"], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x24000880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x84}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 3.243140134s ago: executing program 1 (id=958): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x7, 0xffff}}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000080)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000080)={r3}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r4, 0x100000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async) r8 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$pagemap(r8, &(0x7f0000000100)) r9 = syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090470e96808dcdad3090503101000740406090403"], 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r10, 0x29, 0x2f, 0xe9, 0x1000, 0x66, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x80, 0x10, 0x6, 0xe8}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r10, 0x29, 0x2f, 0xe9, 0x1000, 0x66, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x80, 0x10, 0x6, 0xe8}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 2.647157411s ago: executing program 1 (id=960): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.152173521s ago: executing program 4 (id=964): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') close_range(r0, r0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x2f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb148}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000200)) r3 = fsmount(0xffffffffffffffff, 0x1, 0x1) (async) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x84) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000280)={'dvmrp1\x00', {0x2, 0x0, @dev}}) (async) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f00000002c0)={0x3, 0x0, [0x200, 0xd6, 0x6236, 0x17e, 0x67d1, 0x6, 0xc0000000, 0x1]}) (async) r6 = accept4$phonet_pipe(r4, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000380)) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2800, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, 0x0) (async) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000400)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000002400)=[{&(0x7f0000000dc0)="4fde5d7331dc22ed1aeb5ac94d5aed2bdec2b7fe680dfcae2f9e8b818f2e3b5711a2add2f1fe58a0d6805ad551d3e61eeea60fc9b35bfa73bceaa93d1d142bd96a7ebf8f17695cfb21ad0690", 0x4c}, {&(0x7f0000000e40)="f18ee692664b0e8bbfd83f4af9b1ff0396b8f0af45ffb1a1946c0bf8b43028f993e10b5c616aa03c32af5ab363b7647c364fef8b1ec0638be02b53e1a6d65b75bdf26ec51b12feebd13ffa043289181ce352746623101728c7ea5c9a09749927652d57f69da6a70402751e31997d1f520517dfb885924f57292a459e9106fb803c5c9602f893c08ce63458950f806df2f00695d57563460e2f48af0a9b2a2f9e84b037f9dbad4fd69e1aecd828629ed651c0690b2c51da4a1f99937b364bb5e61a94a1d6bf562650b4f572ab270258c5", 0xd0}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="bf847645f9df7bf2cecdf4b2384546080e61a3863a4c", 0x16}, {&(0x7f0000001f80)="0b98f961dc61e7d7e771701485cad1d4fcd9ce932928f3017c64d1140337e23daed56dd4d8e249cd1dd81d9f36ce99021c8eea1bf854f98e40c914549f76a3048cc5d52670e795215e14ce5793507d70a33b6e920e2ead966eeaddb006db1c2fbf2fa8f1d46c19baa39fc55d8ba0f6cc09309625aea5535893e366f8e7fd529b9ebb3752052582434112177f841fb87c0cc5654992be8a55f2043d5817585b9f936b5475c49976e9c46c01e7b935447bc937877bd98dfa623a843027ab4502767134de060ceda1", 0xc7}, {&(0x7f0000002080)="9d19553f2c0fe69826041d315c4e67a5af37d88cc1bf757beda208367eb04672cd2fefc3a897685b82d2759d78b6695402da92b62b0aa53fe990b07c4b9fbc800c2867886c64bb2961780bf1beaad50c5911f3415861f6b7c718320b58a6b6d6a9f60af1d8a6c4b93bfd3e66d8b55357b0ccbde82942e50761fa675b301d12926fe717ec596b12871ab2", 0x8a}, {&(0x7f0000002140)="25e83ad7bea90c64469746b909297eb42aaa2e9b09e1b100cf5df988eda39f93664deb08c1992fbe4d9e4270e9994faf4c0383f9cb621021fb505d276d2bcd76ae4704fe7931c5216876b078155f96134bc728582ad4b67e7cf6e6db277dff5495f54334cb7e1ed1d5aeb9ad6343071c76f330d4c6df6097975fc0d6afaf163bbcf91719ccb22f8e846234fa80b5d5b09428d6e76e73117dc6350d323d6e383efffab6405837af25dfbe2bc75f17c375d6c00d65e66f9d34561a602a10e18b931444683fee52c28c39c0a24473fc2728f81925c9ae", 0xd5}, {&(0x7f0000002240)="d7ff1108dcaa6386955e0040733e2429b0a40514b8ae55255d2c98518f47b0b7f7379840a740706a91c099ccbb5e74b464040be8f614d602bd96584f5c897be0602066dae3321c7f308f7b439f41c3efaea5cbce60d0ed6db13f6a8a3f903231dbdb885e683d92def01518d898410614aec126849854c0efd4c3165c91caae35c5a3e54286440c2c8136a5d85e05f1e53eac9fd8b09396baf835baa1bf6b75ebda0544de5c08975fb05a5929bbc332fb35529712dcd531", 0xb7}, {&(0x7f0000002300)="11969dec6bab9a4ac77e8d3e3f2ba299652effc6cfb111318a83f7d7e521026bfb9dfa8d7b2aee1745a6a0ed1226b05af035112c7113a58bf86637fd83d7079fe282942e7fd173d2e7a662a458768f9ec85ca23b2ae72d53edb411132814cc072b302f36e7bb920c26d78a56270b8fb12e73e34672ba5d372028f1248c0f2612ccc13444cad8708d6584f4e8d381d8caf06a429ee1dcd718e87e0cef8bc3360638724d901969b468e0c80cc7a9a2c008ef364828b97517e23c83c5c46db0f08284ffef859b722635dbd973c32ae6", 0xce}], 0x9, 0x1000, 0x5) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000024c0)={0xad27, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "374fc24207f62c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000034c0)={{r9, 0xe, 0x7ff, 0x6, 0x319, 0x3600, 0x7, 0x1, 0x0, 0x6, 0x8001, 0x6, 0x1, 0x5, 0xc}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000003580)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'}) recvfrom$inet_nvme(r11, &(0x7f00000035c0)=""/52, 0x34, 0x40000020, &(0x7f0000003600)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'netdevsim0\x00'}}, 0x80) (async) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000003680)={0xa, {{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x1, 0x6, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @broadcast}}]}, 0x390) (async) r12 = accept$netrom(r10, &(0x7f0000003a40)={{}, [@netrom, @remote, @remote, @netrom, @default, @rose, @null, @netrom]}, &(0x7f0000003ac0)=0x48) getsockopt$netrom_NETROM_T1(r12, 0x103, 0x1, &(0x7f0000003b00), &(0x7f0000003b40)=0x4) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x32) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 2.056755501s ago: executing program 3 (id=965): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf255100000008000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x28010}, 0x40000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100), 0x4) ioctl$SIOCX25GCAUSEDIAG(r0, 0x5411, &(0x7f0000000280)={0x1, 0x3}) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') (rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') connect$rose(r5, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x2, [@default, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 32) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async, rerun: 32) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) connect$pppl2tp(r7, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e27, @broadcast}, 0x0, 0x0, 0x2, 0x3}}, 0x26) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) close(0x3) (async, rerun: 64) fanotify_init(0x4000, 0x145800) (async, rerun: 64) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) write$sndseq(r9, &(0x7f0000000080)=[{0x8, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @result}], 0x1c) (async, rerun: 64) fchdir(r8) (async, rerun: 64) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000300)=0x2000004) (async) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r10, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x2, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0x8000006, 0x1000, 0x6e, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2, 0x3, 0xb, 0x4, 0x7, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x409, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0x0, 0x0, 0xda7a, 0x4, 0x8000, 0x200b, 0x400, 0x401, 0x6, 0x7, 0x4, 0x3, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0xfffffffe, 0x9, 0x4, 0x9, 0x8, 0x0, 0xef61, 0x7, 0x8000, 0x0, 0xfe000000, 0xbfff, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x4, 0x5, 0x7fff, 0x2, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xff, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x5, 0xfffffffd, 0xd, 0x4, 0x6d01, 0xc9d1, 0x9, 0x800000, 0x1fd, 0x80, 0x3, 0x400, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x800001, 0xffff, 0x3, 0x6, 0x1e, 0x120000, 0x3, 0x3, 0x326c, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x401, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xff7fffff, 0x95d, 0x5, 0x8, 0xc7, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9603, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x3]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) 2.037171001s ago: executing program 4 (id=966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001980)={0x1, [{0x2, 0x0, 0x80000001, 0x0}, {0x3, 0x28, 0x0, &(0x7f0000000140)="80fa786833"}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xd023, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x80000007, 0x0}, {0x7, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xfffffff3, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x6, 0x0}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.916089484s ago: executing program 1 (id=967): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, &(0x7f0000000000)=""/164, 0xa4, 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x40, 0x4, @private0, @mcast1, 0x1, 0x20, 0x5, 0x4}}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @sco={0x1f, @none}, @can={0x1d, r1}, @generic={0x29, "7e037c016ce6b29c42db559237d4"}, 0x2, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='erspan0\x00', 0x0, 0x1, 0x35}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1e0, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x81, 0x5, "4e9adb1bcddba07c90a07d37d073c6fd45bcfa70717ddde99448eb69225bc7b35ebd1371909a58e2117234af08ecfd159215a1c6e68da06ca0baa6673ab5d6e7441320df488d59ad117edea9cbfd087cf9da4837bfb6f14a9f72132a67aba482190cb453d73ee5a15da81fd3079889631c5c827ff4d53b770fd943473d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_FEATURES_WANTED={0x130, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x62, 0x4, "e9db5c14d8037c889fc3ece8a590fb1e49e78e751ab337c4ab8b72fd2db850dab63654612315042b4598253143f4dc454375c2c34d015a08f9d54f7caca9d4d2ecca045068227c0b60b7b58f8f3c3b81a7b0b71cee77b5d85ea7913afd78"}, @ETHTOOL_A_BITSET_VALUE={0xbc, 0x4, "7af5a030dfea4b4553a3d3242519b777de246f8da4fa2d737aaf35937bca230be7c771c7f18f385da50974944fee80e78f5416d180df56da3285210c3f9402004619486e0aaaa8014920c69e13d9aad35982c8228644f04ea9e59754c1226f3d4e472a554dfc82fef9c406c75f07baa4d66bc822801a9638712a5922b1f8719222d7addbae278a3c6864ad6249532d47bbc43895bfc24ac7886074015e497419acfc1d9fa7009de228436b24ebda9cc3f226dab1a7a02c9b"}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000600)={0x2c, @empty, 0x4e24, 0x1, 'wlc\x00', 0x1, 0x100, 0x64}, 0x2c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x2092, r3, 0xbf7f5000) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={0x0, @qipcrtr={0x2a, 0x0, 0x4001}, @rc={0x1f, @none, 0x2}, @in={0x2, 0x4e23, @multicast1}, 0x1000, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)='batadv_slave_0\x00', 0x2, 0xfffffffffffffff3, 0x5}) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000700)) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='freezer.parent_freezing\x00', 0x0, 0x0) remap_file_pages(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000002, 0x5, 0x100) r6 = accept$phonet_pipe(r3, 0x0, &(0x7f0000000780)) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000007c0)) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000800), r5) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000840)={0x0, @bcast, @rose={'rose', 0x0}, 0x5, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xfffff303, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000900)={{r3}, 0x5, &(0x7f00000008c0)=[0x6, 0x8, 0xa3, 0x5, 0x0], 0x2, 0x8, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000980)={0x48}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x802, 0x0) ioctl$UI_DEV_CREATE(r8, 0x5501) getsockname$packet(r3, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) getsockname$packet(r5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001240)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x820850}, 0xc, &(0x7f0000001200)={&(0x7f0000000b80)={0x660, r7, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9b90}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r1}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x401, 0xb, 0x11, 0xa}, {0x5, 0x7, 0x2f, 0x3ff}, {0x80, 0x2, 0x8, 0xf}, {0x4, 0x53, 0x31}, {0x10, 0x2, 0x7, 0xffff0001}, {0xff, 0x9, 0x6, 0x2}, {0x6, 0xd, 0x0, 0xe573}, {0x4, 0x1, 0xad}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xc000, 0xf6, 0x5, 0x2}, {0x3, 0x3, 0x1, 0xd5}, {0x6, 0x0, 0x4, 0x1}, {0x7, 0xd, 0x2, 0x5d}, {0x57a, 0xb, 0x6, 0xbbd}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r1}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4547, 0x5, 0x2c, 0x8}, {0xe4a, 0x77, 0x5, 0x8000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd70}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x43}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2b}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xbc8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}]}}]}, 0x660}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) r11 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f0000001280)={0xf7, 0x3, 0x6}, 0x8) close_range(r5, r0, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000012c0)={0x1d, r1}, 0x10, &(0x7f00000013c0)={&(0x7f0000001340)={0x2, 0xc26, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x22, 0x2, 0x0, 0x0, "6a189d6fd08b358ebb37e10e3a6b767c15739aad81b07e4773e9fe5a90d40c66a0538b7cb58cc2c3b7577e1224c1a5acf873a93d20cf1f4b0ada919fd136ac03"}}, 0x80}, 0x1, 0x0, 0x0, 0x2e181e5dad79d70}, 0x0) 1.837918008s ago: executing program 4 (id=968): syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a240129000302010209050101000203ff0609050a030800030101072501040809"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000100)={0x4, 0xf, 0x5, 0xffffffffffffffff, 0x7, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) 1.765196522s ago: executing program 3 (id=969): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) keyctl$restrict_keyring(0x1f, 0xfffffffffffffffc, &(0x7f00000001c0)='id_resolver\x00', 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@global=@item_012={0x1, 0x1, 0x1, "ed"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0xa, "8f416f32"}]}}, 0x0}, 0x0) 1.61545912s ago: executing program 1 (id=971): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @str='/dev/dri/card#\x00'}]}]}, 0x28}], 0x1}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000780109021200010000000009047f0200d18a500800"/36], 0x0) 1.326864774s ago: executing program 2 (id=973): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) setxattr$system_posix_acl(&(0x7f00000002c0)='./bus\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) (async) syz_usb_connect(0x3, 0x20b, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x1e, 0xc7, 0x8, 0x40, 0x19d2, 0x1018, 0x74a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f9, 0x1, 0x68, 0x10, 0x40, 0x3, [{{0x9, 0x4, 0x3, 0x7, 0x4, 0x8, 0x63, 0x2d, 0x3, [], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x2, 0xea, [@generic={0xeb, 0x7, "bc868e1afff10f47df80dda1012da13ebbd5189b49dd029dde6849b81fe9ca0ccb11352832e84d23000a904519ba07468682672d3556d0cbf9769398a32a67f8e30f06b75062065e6b41e92a97f52ebdfe493238962e70bfcfd4374d47c7742bf5a44f9a2fdebc1ea51bd4c7e385903c7215d7e67d426d89b6856b6c1454512a22fbe45ca9c572517304d322a9f8a8a151761129f8d435328497c16f21dcedb7754b53679fcb13e3c5b981d66d009af6ec8a950018b0b6c449c77bb99408b76128628835d4b0f82199cfd16b9fb27dbfca8ffa245f3abca60a6b82b53d959ed82988ac2dcc04ce2edc"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x6, 0x3, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1c, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x8, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x73, 0x774e}, @generic={0xc3, 0x11, "5cb97122c68c8f763c8b1fc84b1803e1d4f6a0c1f63a9238b6972148312f0fa88fa511280911f05f38d3ae6975120b048c1c85a3b54bbd86d2504e9b8bf96be5cc02f41e0f2f5744438058a591555dd574cd73b7f444731a6efddfb0897aecd2924be0a34deb2f3b9160229114ec2619559d2c1b5042e871b07e7842a5d2499c1da808892179ee9817af0763adefc54188a7d73782db893c11cde86a90a08a7a5d027ca3c4d93eeb5de57518ed9025542d2ed96b936b9253d7c16786c45fd5f2bb"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x7f, 0x5, 0x2}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x5, 0x2, 0x0, 0x9f}, 0x10d, &(0x7f0000000340)={0x5, 0xf, 0x10d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x35, 0x3, 0x4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3, 0x6, 0xfffb, 0x40}, @generic={0xc4, 0x10, 0x4, "fdcb4dfd5f17483c2b2191cfea4bb3f0fa61cd29a0d969f405dba50fcd77a78968bf3da3406583cc89bd8d778f66c725ef85746c0871ed9a1e9289bfe8700fa755345db3529986756347e5b2cc1ea8f0e838a0d2048c867d724702b2dde5385054bdfad7ba2e5014cb6a50efe3275238a650129cbf5976a41b6337fe7b678e40ee1140cfb537d562897431d4862485ad91217b6d150df8b3d33cc3a068ef3c111c3f6d652d244914db0baa08cfbd2f873e2f7688e92930119b3a1db0774640877a"}, @generic={0x28, 0x10, 0xa, "dba7228e317e443ccd32e1b468e3aa34a997e80dd4b7179211334e2108997520a573e1a3e8"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c09}}, {0xe9, &(0x7f0000000540)=@string={0xe9, 0x3, "ea72b7811afa3d62b18c4189887fe093552e0266c68a0caa2b8c9984c1c1219b23158434b4dfa0b19a591f7677eecef9de94c21993150a7c71ad0c47bd570d79938a7756c1dd8f1fd7ad78a033ab3e17cbc11d597f3fd59c355b530ed0e33d10f75f1995fdbd89853c84f98c38ddc06501f184a68c0f43a27b8ec1c31a379b1c77650054a683f1afbaddaa587fbc9b82514fb6ba7b5e5c07891a5e8c3bfd7888545db621a3e49201ea5a2bcb4aa23c37a5015fd737a929c3f3d0824d4950b0f570712dd911eb3084996dc0f2b886c8719b1eac5bb0f56e43c80f77efe36ca844c9fbb19f4b3b77"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x437}}, {0x61, &(0x7f0000000680)=@string={0x61, 0x3, "96d4296d172c9530e848df4ad9d8c6dd61559a1575e744aff360a24182986c4b4c8112fb9e4976611cc35659b763e6b4b965a3ea602471311849cef08693354b093cca11402bc00bb5c09875332d9dae9f10d8e932dba27c3b66515bee7178"}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f4a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.16443843s ago: executing program 2 (id=974): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x21, 0x7, {0x7, 0x31, "521de17162"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_usb_connect$cdc_ecm(0x3, 0xff, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x1, 0x1, 0x4, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xfc, {{0xa, 0x24, 0x6, 0x0, 0x0, "9451800ebe"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x45, 0x5, 0x7}, [@mdlm_detail={0xa9, 0x24, 0x13, 0x5, "dae7fa93ba3b4b171226c7ddf4af4a1c5d8c749123c341e606eace1f1212360af85e6ad3347acda60d87c0560794096c7e2b4c5c72301da880bc671922e9844bf3cd3d1f8c559e5e79af1bce5089c7b07b85075c4504a000cefdfb2c0a5f3961bb9c941108394588392fa7f72023e1b313d6b89c26ad263b13eda9811f3f203d8ec8b8873d53e746e60bde6fd177d3330a69919846c6ec6583eb26a69089c928aba861e0e5"}, @acm={0x4, 0x24, 0x2, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x17, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x7, 0x51}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x6, 0x9, 0xa, 0x10, 0xc4}, 0x79, &(0x7f0000000180)={0x5, 0xf, 0x79, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x9, 0xf, 0x5, [0xc0, 0x0, 0xc0c0, 0xc0, 0x0, 0x3f30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0xf9, 0xb15}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x2, 0x3ff}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "ea500074b802b98944dbcdf88de8269f"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "721900bec5372c36f66e195cd6bf0178"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "4861115f229a3d4e6d9e99230863c7e3"}]}, 0xa, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}, {0xd, &(0x7f0000000280)=@string={0xd, 0x3, "5b578af6872fb7cdd166f2"}}, {0xf5, &(0x7f00000002c0)=@string={0xf5, 0x3, "a4b69822b6005fcbd71b115cf47c4882dd08f81b7f3442822697d02f2cafcd73c0daa8398744eb6a48098082940feb6e0cbe6aa3807e66aecac127b290b940a0076ceb0b44443dfd192876a0ea1264c5327dc5b531a50227ac49220b646823d8ad2635658a5d5fe10ebbb6aad94df8a1d59b7e3131d18f5c3ab745528bd107781fc838a6b552734e74a401dc4345619d817de2e454309f297e2aff9ab1935dc61110303d1c5c476acbb38c4c6083edb7c790b17e596df3e44f16fb74f975794a4f40c165677b0b402376cfc7b85f387453fa878035cad75bc75ebeb2632a4f71cbdfed4173aa1daef433a27694f6d7c9cbff84"}}, {0x8a, &(0x7f00000003c0)=@string={0x8a, 0x3, "10c184dd58c31ba262dd76ca17c4be808559a4451cee7439be148710f6e90bc85d7061d748590033a9849982e4a8dfeae4077da2309162995d4318e28ffa471ce4ec6d5ef22861e7edac956dced0e27504fb4b1f79f5087fb66a826033709cc7192fceafce8dc0ac6ea18ba41f78ce0418bf5b776758ed619de66b02f21c134089a988dfcdb2bfac"}}, {0xd, &(0x7f0000000480)=@string={0xd, 0x3, "446b68272fc51e74450a42"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x447}}, {0x90, &(0x7f0000000540)=@string={0x90, 0x3, "46e00b2bfe6977b88bcae28239d62e0c4a751af09f66241a80dfbf1e2b366e0db9f94d291caf6fbe0efe349acf160396ddabc70a81bdfc95e3fecef51c88c46efe172f18d76288059bc2d2d470389dcf6a093f6d408ff6c63e907f0cfd06c5c68056c3fd1172b54f845f7ddb49b6549d51d6e6ab4241dec0a6e28bab15c3f872a404e125a06fb582a16ccca90c41"}}, {0x6f, &(0x7f0000000600)=@string={0x6f, 0x3, "29b3168bbde2e4f60802852155eb40c9b46afc24273e5ee6516c7a131ef567a7e1bd3f77a31d9c869db4dbf631f3ada7d6ac364f8c3861923b73e22b8bc22c16109db567bc0bd961faf49ce8ef882634cbae3b461ff247dd865c49092b1ceeb820cc6bfde4257427f236294ee2"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40d}}]}) syz_usb_disconnect(r0) 857.073388ms ago: executing program 1 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 819.524068ms ago: executing program 1 (id=976): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @private=0xa010101}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) (async) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) 310.363731ms ago: executing program 2 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001980)={0x1, [{0x2, 0x0, 0x80000001, 0x0}, {0x3, 0x28, 0x0, &(0x7f0000000140)="80fa786833"}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xd023, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x80000007, 0x0}, {0x7, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xfffffff3, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x6, 0x0}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 233.934926ms ago: executing program 2 (id=978): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_PIT2(r2, 0x4104aec6, &(0x7f0000000380)={[{0x0, 0x6, 0x7, 0x9, 0x7, 0x8, 0x4, 0xfb, 0xf4, 0xff, 0x0, 0x36, 0xfffffffffffffffc}, {0x31, 0x4, 0x7, 0x9, 0x6, 0xb, 0x4, 0x6, 0x9, 0x4, 0xe3, 0x10, 0xfffffffffffffffa}, {0x1, 0x8, 0x5a, 0x0, 0x2, 0x3, 0xaf, 0x7, 0xff, 0x6, 0x2, 0x5, 0xe}], 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='bridge0\x00') 176.859962ms ago: executing program 3 (id=979): r0 = syz_usb_connect(0x2, 0x5c1, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0xd3, 0xa8, 0xd9, 0xff, 0x1235, 0xe, 0xcec0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5af, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0xb, 0x2d, 0xe6, 0xf6, 0x0, [@generic={0x5a, 0x31, "71c5d8218dac0de8d4ad0800000000d7f1aae6894c9b2afcebda47f122c2a06ddc7d650fc3569d600924ea98fcf76ebc79153a64d6b7d292b0b6f38fc372446f390627af65c26838e03a00"/88}], [{{0x9, 0x5, 0x319c5d4348b29af2, 0xc, 0x7a7, 0x4, 0xb5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x44}, @generic={0xa3, 0x11, "27c8c39d278dda5f2bd6120e1c7b07c92752850c2719630910a4ea2319e0f7782d354d3fc54e4d696eef0b311826648c189121bfdc9ecba01ef5d444f2fe2d05194d208283e891b7384ae8ed45558c387ba2dfec357179cb894365794d346cf32c0943cfbb15b4246f91f59a9cb99662108b3c3e8d02c5e09917cfa9f0ccf1ae2ad197256d34e4c88c46860e95aa7b7d9a0e48d9be1fff6cda68a73454c85a089d"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x3}, @generic={0x102, 0x4, "88a865183f04c5992167402292c09e489674352b6ff9058d1d289dcdbaa2c0052bef8ec1f717a91049dc676f93b80a5d48edacfa783033dad5d36bd05d35a21e43636e3b88a0559ea77b0be5b1af3e75ae31f5d1aebfb55e3ea42094195e183e30a5d191dd6f1cf7563ada0c751bc4805a3967a287c560c1d8e649099b53b8e73d36921681b49fa4e4c1d634569ccbca62fa72368c7a725ddf3ebb289b355a9fbfed7dc24b6dd98d5ffaff210c2245a78e8993f0f25f52070000000000000033f6dde479f6fdffdf1587a6e45f1f44a038c73a53c9c69f00000000000000000000defe2b327f72dff812886338624cb4c3ac09d80b815326b6dfdf3136ff819b"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0xcd, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0xa, 0x0, 0x7, [@generic={0x2b, 0xb, "3a5db9ad6b5ac25c1ab5f5af433f08f7511ca717c91386635ed46ff5419112911f848ec4847dd16a58"}, @generic={0x80, 0x5, "1a0281a3d5049e89f60c727cfb080f6342c5d19b3d2392a578a37f3a2e00d6fbca4ed969cf9103d03ae9f92413b244fbeb34947a050d96324beb0e7aca6cc6142c27ea775c10fd2640b304c7689655124d051d0fd6b91d03f2457b044506825513995b667bd35febc6ee91f8d405fa8d84f40227ed3c033463725bfc4b9a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0xf, 0x0, [@generic={0xc2, 0x1, "8f35dda57dc8a765e6365fe7ba27e355f8cb69a688983444b4100a6dc6267f793776642889ba55866d67c3c339f42f2418346951b589273556a310ef0f7cb559453fc89d3ac16bcd09d31f3da0c3d054cd269926602117bf7a0bc34b23addfbaf6d2598080683110bf256b427b1206cbced7c75b24e50213e4e56f4ba7c2093e8b5ab64559b6a93bb973fa995917af1ec01887ba1455748c645a95850cc70c22be6cf9401005ab94b46147a7115376cd6d889baf1cc6d07f65ccaf4b49bc764a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x5, 0x5, 0x9, [@generic={0xa2, 0x31, "eec3287e61f8d999cadf96162c93db6d99929141735bf96467ee19ae38aafa4fbfd9320d5f276632469e9277051c199f47a0b623b3deb12ff2d15d185a5ad01657b9a5f507a6109108a168c81674b7436e5c372a1e708fa75e8e21fb003df31fb8748ca13c6c9a5835c3bb06ed75b6a12b9971c9e54f81404245e81aeef5c271f95a2ad8b40e1f6cae707b91df0ba8dbe20c8361c583d22bc1a69aec6c69f05b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x83, 0x0, 0x2}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x0, 0x7f, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x7, 0x3, 0x5, [@generic={0xb4, 0xe, "3070ebe1031792250977653525823285e333973a1c1d375712e9d647569d88d4f24725979f65033e20c661678d71b2c8451ad59c992f5b5627d2c710239d3daa882d96123142d3ac1535b5cdb6a04198969dd7d407854325b031875368d615f0e722051891a88b7d60e7ca43d88b2646f37fa3028bcca7342e0c81ddc7b7aecbb58831215002dd95c6cc16ddea9bfc3781e70cd244106478524ef1e5cd8df9f815709c93a3973fc1461c32c368a9152146c7"}, @generic={0x5c, 0x23, "804a9e7376108dd5ee5ea8cb9413a31a15507fd77b289f8981ab1bad4deafd8535bf8a97e4d5b0d5d5076c6497784deb49286c73a6478c82c08a9d6bfd3ed465af930a419a6705ab80f2225c92b65202920a920bda4b39239df4"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4afa}]}}]}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x2, {0x2, 0x24}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x3c9, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x11, 0xb4, 0x9b, 0x10, 0x424, 0x9505, 0x6d5d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b7, 0x3, 0x2, 0x5, 0x90, 0x0, [{{0x9, 0x4, 0xc5, 0x5, 0x8, 0xf0, 0xf1, 0xf4, 0xc0, [], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0xf8, 0x3, 0x28, [@generic={0xac, 0x22, "f234026997b52a67501c528344ad5e362bb00b2407ad61190179844789dd7c0975cacae2d36b347a82b1e93c9688e6b6e5171b0b9d7b84a037ac33fa5562bf99be6c90e431014c147bd42ad475ea1af73aa5554f82e20872d0ff9819a5fae38b97b914616223a9f02ff727029b660cff5e3ba180a22526129448f113eda0c6a62e12ce3f5e1c9ca3bbfd96476cd9b2eb9faff10b7cc182ef6eaaac4cc3d90c68a89290e9de51ddf6654f"}, @generic={0x12, 0xd, "1d5a7184067faf6c0ca5fcff14796294"}]}}, {{0x9, 0x5, 0x1, 0xa, 0x8, 0x5, 0x6, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x90, 0x3, 0x2}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x2, 0x10, 0x4}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x2, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4}, @generic={0x1c, 0x6, "13e092b2157072229bde4678995fe75a5ac1c1e466a69ff2f8fc"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x8, 0x5, 0x4}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x2, 0xa4, 0xc}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x4, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x7, 0x200}, @generic={0x3, 0x21, "86"}]}}]}}, {{0x9, 0x4, 0xed, 0x1, 0x0, 0xf6, 0x8d, 0x19, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0x6, "447bb12658e0"}]}]}}, {{0x9, 0x4, 0xbe, 0x4, 0xa, 0x7c, 0xb4, 0x67, 0x7f, [@uac_as, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "f24de7"}, {0x5, 0x24, 0x0, 0xbc}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x3, 0x670a, 0x5}, [@acm={0x4, 0x24, 0x2, 0xa}]}], [{{0x9, 0x5, 0xe, 0x9, 0x20, 0x0, 0x4, 0x7c, [@generic={0x10, 0xe, "50ff62837168b90fe8f346fe6ec0"}, @generic={0x90, 0xb, "e8a5c30039df3cf7ca70deeec13d7b7f0ebd0f31c633467553dffd1ff766f9230ab0135d314705252e3b2ee0eb815723d672edb7ad3d942cf323e5451e759c9cbd5f942cfd82b80e381f61592376493dcc0a116315d1d1787b7152461e2398cfa51c0caa39da54832888eb10184b393c65c74b5b8ba3ebd881d666822ddc29beefef81f8f2e9a871b13ad8167f87"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x1, 0x8, 0xe}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x80, 0x1d}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x3, 0x6, [@generic={0x4e, 0x7, "a07f0dc17eb396b7660ee76b9cf686898195af15302af3b4c2ec21bb205d4fede8b00f6ce73dc7fd153522d5be826f64cfc5491bfe3d647464af24bf307ac30ad89f03e7735bdd9b5bc5e685"}, @generic={0x4c, 0x9, "5f326debd27e7c2e4ff7d96944d72b05a3ebeda704eeb913d1104f1277bec8114a0546479d41535123680f0fe34e5ad3f430973c7daee2c2a5c8ce5faa583963cc0241e6433a18115031"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x18, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0xc320}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x1, 0xfc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x1}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xe, 0x67, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x73, 0x52d}]}}, {{0x9, 0x5, 0xc, 0x0, 0x7be, 0x7f, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0xec, 0x9, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x8}, @generic={0x77, 0x29, "d13ba1afee5ab29da1579dbb4a8902c37d3b95bdf4eb3ad7ff5a68c31c136ab4d2a1aa9347a1401d09800db4813eb2a2dd12cc1f80ec549ebb077d4a38e6b5558e3acaa85cc2f2a503bac463108b91746bdfcb0f2c71271c30633bc73a1c1f21603e9b59c94b767bccbf6191c5b803773d8b7bfc70"}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x6a1, 0x65, 0x9c, 0x2, 0x10, 0xef}, 0x99, &(0x7f0000000280)={0x5, 0xf, 0x99, 0x6, [@generic={0x41, 0x10, 0x4, "f6775ac6caf96278896c93de022d3d521844fcc179e17c0ca418d86df94753ddc285cc54862fb6df769a7b44635286212d485070bc83a53d91bf9d06ddb2"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "1e5d61b6cb9fbde9ea7e48b7e5a7c9f5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0xe0, 0xc45}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x9, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x1, 0xf, 0x101, [0x1fe3f00, 0x3f00, 0xf46168959753a462, 0xc000, 0xc030, 0x18000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xf0, 0x9, 0xdd}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0xc, &(0x7f0000000380)=@string={0xc, 0x3, "54ed0fe24d4b2bc5bad2"}}]}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000800400000008000400e00000011400060076657468315f74625f7465616d0000008dc7b88f64bd9fc0f71fdb02a5817f538db91232"], 0x30}}, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) 107.068958ms ago: executing program 2 (id=980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x2}], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3, 0x101001) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}}}, 0x118) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000080)) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000280)={0x0, &(0x7f0000000140)="c109a637de9b917fa77ba50aee80f7f879abf91fbcb0ef4d2d28f695000755afddd0d98545a961d0ca6bf620ec0ca45f26d6d67ad41b05a22c100f9ba9341a02d822d8b01e16c3259eaa785f6da2de895b2b4c36f8d2dc530140b8f6e9cafee7aa7d85295090caba83da5f74ec0837d9d10040541bd78bd9b79ea9ec24210c0d41d1f2324de09bb0461b63421069db13b69da46273326471b51b6fe94f5a6156c71077070598e62820e2", 0xaa}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) mprotect(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x2000002) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = socket$netlink(0x10, 0x3, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x8010, &(0x7f0000000380)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f00000001c0)=0x1, 0x4) semop(0xffffffffffffffff, &(0x7f00000002c0)=[{0x1, 0x6, 0x1000}, {0x1, 0x7}], 0x2) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1d000000070605000000000900000020052e5d6002"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x10}, 0x15) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e320d02020001000000000000025f007f01040007aaaaaaaaaa11001a00010000000000000605e60605ca0a06ffffffff948895"], 0x35) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=981): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='hfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0x0, 0xe72, 0x4b, 0x809}, 'syz0\x00', 0x11}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r3, 0xffffffffffffffff, 0x80000) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffff8, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7f9, 0x2, 0x4, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r4, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002031, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x95}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = fsopen(&(0x7f00000003c0)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$pppoe(0x18, 0x1, 0x0) kernel console output (not intermixed with test programs): k [ 191.120585][ T5992] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 191.154639][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 191.154666][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 191.163326][ T5992] usb 4-1: no configurations [ 191.169495][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 191.200713][ T5992] usb 4-1: can't read configurations, error -22 [ 191.209088][ T5992] usb usb4-port1: unable to enumerate USB device [ 191.370293][ T7917] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 191.378045][ T7917] netlink: 232 bytes leftover after parsing attributes in process `syz.0.505'. [ 191.387237][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 191.453156][ T7917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.459516][ T7917] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 191.473664][ T7917] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 191.482092][ T7917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.488212][ T7917] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.499360][ T7917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.505809][ T7917] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 191.516633][ T7917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.523416][ T7917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.536058][ T7917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.819622][ T5992] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 191.971776][ T5992] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 191.980074][ T5992] usb 1-1: config 0 has no interface number 0 [ 191.988302][ T5992] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 191.997486][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.005528][ T5992] usb 1-1: Product: syz [ 192.009804][ T5992] usb 1-1: Manufacturer: syz [ 192.014417][ T5992] usb 1-1: SerialNumber: syz [ 192.022209][ T5992] usb 1-1: config 0 descriptor?? [ 192.232953][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.241766][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.251012][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.260401][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.270781][ T5992] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 192.282498][ T5992] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 192.290839][ T5992] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 192.298611][ T5992] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 192.308686][ T5992] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 192.683422][ T5921] usb 1-1: USB disconnect, device number 35 [ 192.691908][ T5921] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 192.702134][ T5921] keyspan 1-1:0.133: device disconnected [ 192.785418][ T5992] usb 3-1: USB disconnect, device number 73 [ 192.814193][ T7923] autofs: Unknown parameter './file0' [ 192.827541][ T7923] comedi comedi3: comedi_config --init_data is deprecated [ 193.277886][ T5992] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 193.434703][ T5992] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 193.447781][ T5992] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 193.449685][ T115] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 193.459646][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.473036][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 193.480979][ T5992] usb 3-1: config 0 descriptor?? [ 193.547656][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.547704][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 193.555645][ T5183] Bluetooth: hci2: command 0x0406 tx timeout [ 193.612062][ T115] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 193.621251][ T115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.629394][ T115] usb 1-1: Product: syz [ 193.633571][ T115] usb 1-1: Manufacturer: syz [ 193.638231][ T115] usb 1-1: SerialNumber: syz [ 193.645198][ T115] usb 1-1: config 0 descriptor?? [ 193.653411][ T115] hub 1-1:0.0: bad descriptor, ignoring hub [ 193.660042][ T115] hub 1-1:0.0: probe with driver hub failed with error -5 [ 193.667403][ T5914] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 193.676158][ T115] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 193.829024][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.840073][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.850074][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 193.852557][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.859221][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.873027][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.882262][ T5914] usb 4-1: config 0 descriptor?? [ 193.946554][ T5992] dragonrise 0003:0079:0006.0017: item fetching failed at offset 4/5 [ 193.958318][ T5992] dragonrise 0003:0079:0006.0017: parse failed [ 193.965924][ T5992] dragonrise 0003:0079:0006.0017: probe with driver dragonrise failed with error -22 [ 193.997336][ T43] usb 1-1: USB disconnect, device number 36 [ 194.004039][ T43] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 194.201834][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.208311][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.314935][ T5914] logitech 0003:046D:C29C.0018: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 194.508720][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.521763][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.551229][ T5868] usb 3-1: USB disconnect, device number 74 [ 194.710363][ T7957] CUSE: unknown device info "W" [ 194.715351][ T7957] CUSE: unknown device info "" [ 194.720354][ T7957] CUSE: unknown device info "-" [ 194.725452][ T5914] logitech 0003:046D:C29C.0018: no inputs found [ 194.725938][ T7957] CUSE: unknown device info "" [ 194.737366][ T7957] CUSE: DEVNAME unspecified [ 194.745199][ T5914] usb 4-1: USB disconnect, device number 72 [ 194.916264][ T5868] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 195.075905][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 195.082491][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 195.089746][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 195.098853][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.108450][ T5868] usb 3-1: config 0 descriptor?? [ 195.253765][ T7959] netlink: 156 bytes leftover after parsing attributes in process `syz.3.521'. [ 195.318934][ T7964] Bluetooth: MGMT ver 1.23 [ 195.525658][ T5868] apple 0003:05AC:0264.0019: unknown main item tag 0x0 [ 195.533288][ T5868] apple 0003:05AC:0264.0019: unknown main item tag 0x0 [ 195.540737][ T5868] apple 0003:05AC:0264.0019: unknown main item tag 0x0 [ 195.549775][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 195.556749][ T5868] apple 0003:05AC:0264.0019: unknown main item tag 0x0 [ 195.564113][ T5868] apple 0003:05AC:0264.0019: unknown main item tag 0x0 [ 195.571537][ T5868] apple 0003:05AC:0264.0019: unknown main item tag 0x0 [ 195.578835][ T5868] apple 0003:05AC:0264.0019: unknown main item tag 0x0 [ 195.597276][ T5868] apple 0003:05AC:0264.0019: hidraw0: USB HID v54.8a Device [HID 05ac:0264] on usb-dummy_hcd.2-1/input0 [ 195.625971][ T5183] Bluetooth: hci2: command 0x0406 tx timeout [ 195.626154][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 195.632048][ T5183] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.718807][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.728486][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.736910][ T7986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.745920][ T7986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.754760][ T5992] usb 3-1: USB disconnect, device number 75 [ 195.885593][ T43] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 196.035553][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 196.042332][ T43] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 196.050637][ T43] usb 1-1: config 0 has no interface number 0 [ 196.058922][ T43] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=1e.94 [ 196.068063][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.076121][ T43] usb 1-1: Product: syz [ 196.080276][ T43] usb 1-1: Manufacturer: syz [ 196.084849][ T43] usb 1-1: SerialNumber: syz [ 196.092340][ T43] usb 1-1: config 0 descriptor?? [ 196.100565][ T43] as10x_usb: device has been detected [ 196.106982][ T43] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 196.125300][ T43] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 196.142393][ T43] as10x_usb: error during firmware upload part1 [ 196.149107][ T43] Registered device PCTV Systems picoStick (74e) [ 196.300506][ T5914] usb 1-1: USB disconnect, device number 37 [ 196.338015][ T5914] Unregistered device PCTV Systems picoStick (74e) [ 196.346267][ T5914] as10x_usb: device has been disconnected [ 196.515607][ T5868] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 196.670781][ T5868] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 196.679947][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.688025][ T5868] usb 3-1: Product: syz [ 196.692185][ T5868] usb 3-1: Manufacturer: syz [ 196.696876][ T5868] usb 3-1: SerialNumber: syz [ 196.705829][ T5868] r8152-cfgselector 3-1: Unknown version 0x0000 [ 196.712179][ T5868] r8152-cfgselector 3-1: config 0 descriptor?? [ 196.832329][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032b2fc00: rx timeout, send abort [ 196.842598][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032b2fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.857273][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cec4400: rx timeout, send abort [ 196.865737][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cec4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 197.075540][ T5992] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 197.128324][ T43] r8152-cfgselector 3-1: USB disconnect, device number 76 [ 197.205587][ T5992] usb 1-1: device descriptor read/64, error -71 [ 197.445658][ T5992] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 197.595604][ T5992] usb 1-1: device descriptor read/64, error -71 [ 197.625553][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 197.657535][ T7998] Invalid source name [ 197.661548][ T7998] UBIFS error (pid: 7998): cannot open "./file0", error -22 [ 197.689299][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 197.708280][ T5183] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.708859][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 197.723964][ T5992] usb usb1-port1: attempt power cycle [ 197.755631][ T43] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 197.905714][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 197.915880][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.931567][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.943729][ T43] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 197.958831][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 197.972882][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 197.986973][ T43] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 197.999270][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.028210][ T43] hub 4-1:1.0: bad descriptor, ignoring hub [ 198.035910][ T43] hub 4-1:1.0: probe with driver hub failed with error -5 [ 198.044864][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 198.050869][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 198.058189][ T43] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 198.067164][ T5992] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 198.106738][ T5992] usb 1-1: device descriptor read/8, error -71 [ 198.157914][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 198.167298][ T8004] openvswitch: netlink: Message has 3 unknown bytes. [ 198.325786][ T5914] usb 4-1: USB disconnect, device number 73 [ 198.356144][ T5992] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 198.377137][ T5992] usb 1-1: device descriptor read/8, error -71 [ 198.486001][ T5992] usb usb1-port1: unable to enumerate USB device [ 198.525551][ T43] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 198.685559][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 198.691816][ T43] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 198.700153][ T43] usb 3-1: config 0 has no interface number 0 [ 198.708768][ T43] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 198.717894][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.725922][ T43] usb 3-1: Product: syz [ 198.730069][ T43] usb 3-1: Manufacturer: syz [ 198.734638][ T43] usb 3-1: SerialNumber: syz [ 198.741326][ T43] usb 3-1: config 0 descriptor?? [ 198.748858][ T43] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 198.756857][ T43] pctv452e: pctv452e_power_ctrl: 1 [ 198.756857][ T43] [ 198.764220][ T43] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 198.764220][ T43] [ 198.775782][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 198.785580][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.795258][ T43] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 198.803767][ T43] usb 3-1: media controller created [ 198.809444][ T43] dvb-usb: bulk message failed: -22 (8/0) [ 198.815264][ T43] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 198.823361][ T43] dvb-usb: MAC address reading failed. [ 198.842173][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.896961][ T43] DVB: Unable to find symbol stb0899_attach() [ 198.903063][ T43] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 198.951279][ T8011] input: syz0 as /devices/virtual/input/input23 [ 198.975513][ T43] rc_core: IR keymap rc-tt-1500 not found [ 198.991922][ T43] Registered IR keymap rc-empty [ 198.998440][ T43] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 199.012734][ T43] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input22 [ 199.028021][ T43] dvb-usb: schedule remote query interval to 100 msecs. [ 199.034975][ T43] pctv452e: pctv452e_power_ctrl: 0 [ 199.034975][ T43] [ 199.042801][ T43] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 199.055422][ T43] usb 3-1: USB disconnect, device number 77 [ 199.120451][ T43] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 199.650510][ T8032] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1866857579 (1866857579 ns) > initial count (226037909 ns). Using initial count to start timer. [ 199.671884][ T8032] kvm: kvm [8031]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 199.680772][ T8032] kvm: kvm [8031]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 199.699618][ T8032] kvm: vcpu 0: requested 98304 ns lapic timer period limited to 200000 ns [ 199.815977][ T8036] netlink: 'syz.2.547': attribute type 29 has an invalid length. [ 199.824839][ T8036] netlink: 'syz.2.547': attribute type 29 has an invalid length. [ 199.977292][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.994839][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.013600][ T8045] netlink: 128 bytes leftover after parsing attributes in process `syz.3.551'. [ 200.095521][ T5914] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 200.247356][ T5914] usb 3-1: too many configurations: 115, using maximum allowed: 8 [ 200.257560][ T5914] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 200.265174][ T5914] usb 3-1: can't read configurations, error -61 [ 200.337470][ T43] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 200.405549][ T5914] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 200.506176][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 200.515140][ T43] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 200.525404][ T43] usb 4-1: config 0 has no interface number 0 [ 200.534292][ T43] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 200.543660][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.551945][ T43] usb 4-1: Product: syz [ 200.558315][ T43] usb 4-1: Manufacturer: syz [ 200.558464][ T5914] usb 3-1: too many configurations: 115, using maximum allowed: 8 [ 200.563164][ T43] usb 4-1: SerialNumber: syz [ 200.588936][ T5914] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 200.596768][ T5914] usb 3-1: can't read configurations, error -61 [ 200.596785][ T43] usb 4-1: config 0 descriptor?? [ 200.609735][ T5914] usb usb3-port1: attempt power cycle [ 200.641761][ T43] go7007 4-1:0.195: probe with driver go7007 failed with error -12 [ 200.699796][ T8050] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 200.707825][ T8050] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 200.716425][ T8050] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 200.856089][ T5868] usb 4-1: USB disconnect, device number 74 [ 200.965549][ T5914] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 200.986927][ T5914] usb 3-1: too many configurations: 115, using maximum allowed: 8 [ 200.997033][ T5914] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 201.004591][ T5914] usb 3-1: can't read configurations, error -61 [ 201.135663][ T5914] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 201.157188][ T5914] usb 3-1: too many configurations: 115, using maximum allowed: 8 [ 201.166588][ T5914] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 201.174157][ T5914] usb 3-1: can't read configurations, error -61 [ 201.180808][ T5914] usb usb3-port1: unable to enumerate USB device [ 201.414870][ T8059] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.556'. [ 201.936224][ T8062] netlink: 180 bytes leftover after parsing attributes in process `syz.3.556'. [ 202.497250][ T8056] syz.1.555: vmalloc error: size 3883008, failed to allocated page array size 7584, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 202.517772][ T8056] CPU: 0 UID: 0 PID: 8056 Comm: syz.1.555 Not tainted syzkaller #0 PREEMPT(full) [ 202.517796][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.517805][ T8056] Call Trace: [ 202.517813][ T8056] [ 202.517819][ T8056] dump_stack_lvl+0x189/0x250 [ 202.517856][ T8056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.517881][ T8056] ? __pfx__printk+0x10/0x10 [ 202.517900][ T8056] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 202.517919][ T8056] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 202.517941][ T8056] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 202.517964][ T8056] warn_alloc+0x214/0x310 [ 202.517982][ T8056] ? __pfx_warn_alloc+0x10/0x10 [ 202.518006][ T8056] ? __get_vm_area_node+0x28f/0x300 [ 202.518029][ T8056] ? ip_set_sockfn_get+0x13a/0xc30 [ 202.518055][ T8056] __vmalloc_node_range_noprof+0x690/0x12d0 [ 202.518079][ T8056] ? alloc_vmap_area+0xda0/0x14c0 [ 202.518121][ T8056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.518143][ T8056] ? ip_set_sockfn_get+0x13a/0xc30 [ 202.518165][ T8056] ? __get_vm_area_node+0x28f/0x300 [ 202.518186][ T8056] ? ip_set_sockfn_get+0x13a/0xc30 [ 202.518209][ T8056] __vmalloc_node_range_noprof+0x578/0x12d0 [ 202.518233][ T8056] ? ip_set_sockfn_get+0x13a/0xc30 [ 202.518282][ T8056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.518314][ T8056] ? ip_set_sockfn_get+0x13a/0xc30 [ 202.518336][ T8056] vmalloc_noprof+0xb2/0xf0 [ 202.518358][ T8056] ? ip_set_sockfn_get+0x13a/0xc30 [ 202.518380][ T8056] ip_set_sockfn_get+0x13a/0xc30 [ 202.518416][ T8056] nf_getsockopt+0x26e/0x290 [ 202.518442][ T8056] ip_getsockopt+0x1c4/0x220 [ 202.518465][ T8056] ? __pfx_ip_getsockopt+0x10/0x10 [ 202.518485][ T8056] ? sock_common_getsockopt+0x2d/0xb0 [ 202.518506][ T8056] ? raw_getsockopt+0xce/0x200 [ 202.518525][ T8056] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 202.518549][ T8056] do_sock_getsockopt+0x372/0x450 [ 202.518568][ T8056] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 202.518584][ T8056] ? do_syscall_64+0xa0/0xfa0 [ 202.518600][ T8056] ? __fget_files+0x2a/0x420 [ 202.518618][ T8056] ? __fget_files+0x3a0/0x420 [ 202.518634][ T8056] ? __fget_files+0x2a/0x420 [ 202.518652][ T8056] __x64_sys_getsockopt+0x1a5/0x250 [ 202.518667][ T8056] ? do_syscall_64+0xa0/0xfa0 [ 202.518685][ T8056] ? do_syscall_64+0xa0/0xfa0 [ 202.518706][ T8056] do_syscall_64+0xfa/0xfa0 [ 202.518722][ T8056] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.518740][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.518756][ T8056] ? clear_bhb_loop+0x60/0xb0 [ 202.518776][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.518793][ T8056] RIP: 0033:0x7fde3e38eec9 [ 202.518822][ T8056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.518837][ T8056] RSP: 002b:00007fde3c5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 202.518855][ T8056] RAX: ffffffffffffffda RBX: 00007fde3e5e6090 RCX: 00007fde3e38eec9 [ 202.518867][ T8056] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 000000000000000e [ 202.518877][ T8056] RBP: 00007fde3e411f91 R08: 0000200000000040 R09: 0000000000000000 [ 202.518888][ T8056] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.518899][ T8056] R13: 00007fde3e5e6128 R14: 00007fde3e5e6090 R15: 00007ffcb669e9c8 [ 202.518927][ T8056] [ 202.518938][ T8056] Mem-Info: [ 202.787383][ T43] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 202.804202][ T8056] active_anon:6155 inactive_anon:0 isolated_anon:0 [ 202.804202][ T8056] active_file:11952 inactive_file:3417 isolated_file:0 [ 202.804202][ T8056] unevictable:768 dirty:61 writeback:0 [ 202.804202][ T8056] slab_reclaimable:10555 slab_unreclaimable:91516 [ 202.804202][ T8056] mapped:25058 shmem:1359 pagetables:1476 [ 202.804202][ T8056] sec_pagetables:0 bounce:0 [ 202.804202][ T8056] kernel_misc_reclaimable:0 [ 202.804202][ T8056] free:1297834 free_pcp:26378 free_cma:0 [ 202.909390][ T8056] Node 0 active_anon:24428kB inactive_anon:0kB active_file:47732kB inactive_file:13532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100128kB dirty:232kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11712kB pagetables:5780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 202.942936][ T8056] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 202.974863][ T8056] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.005266][ T8056] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 203.013623][ T8056] Node 0 DMA32 free:1300220kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24428kB inactive_anon:0kB active_file:47732kB inactive_file:13532kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2549416kB mlocked:0kB bounce:0kB free_pcp:70432kB local_pcp:35740kB free_cma:0kB [ 203.047142][ T8056] lowmem_reserve[]: 0 0 0 0 0 [ 203.051846][ T8056] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.056030][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 203.088753][ T8056] lowmem_reserve[]: 0 0 0 0 0 [ 203.090873][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.093486][ T8056] Node 1 Normal free:3876012kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:136kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:35128kB local_pcp:22392kB free_cma:0kB [ 203.104988][ T43] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 203.136864][ T8056] lowmem_reserve[]: 0 0 0 0 0 [ 203.147284][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.151568][ T8056] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.161573][ T43] usb 4-1: config 0 descriptor?? [ 203.178084][ T8056] Node 0 DMA32: 3*4kB (UME) 2*8kB (UE) 2*16kB (UM) 2*32kB (UE) 2*64kB (UE) 0*128kB 2*256kB (UE) 2*512kB (ME) 0*1024kB 4*2048kB (UM) 315*4096kB (M) = 1300220kB [ 203.197886][ T8056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 203.209458][ T8056] Node 1 Normal: 215*4kB (UM) 60*8kB (UME) 53*16kB (UME) 95*32kB (UME) 39*64kB (UME) 9*128kB (UME) 4*256kB (UM) 5*512kB (UME) 5*1024kB (UME) 4*2048kB (UME) 940*4096kB (M) = 3876012kB [ 203.228149][ T8056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.238380][ T8056] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 203.247793][ T8056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.257407][ T8056] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.266740][ T8056] 16727 total pagecache pages [ 203.271427][ T8056] 0 pages in swap cache [ 203.275608][ T8056] Free swap = 124996kB [ 203.280593][ T8056] Total swap = 124996kB [ 203.284760][ T8056] 2097051 pages RAM [ 203.288600][ T8056] 0 pages HighMem/MovableOnly [ 203.293277][ T8056] 427991 pages reserved [ 203.297520][ T5992] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 203.300626][ T8056] 0 pages cma reserved [ 203.466557][ T5992] usb 3-1: Using ep0 maxpacket: 32 [ 203.474687][ T5992] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 203.483561][ T5992] usb 3-1: config 0 has no interface number 0 [ 203.491731][ T5992] usb 3-1: config 0 interface 180 has no altsetting 0 [ 203.501324][ T5992] usb 3-1: New USB device found, idVendor=050d, idProduct=1202, bcdDevice=47.d7 [ 203.510987][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.522764][ T5992] usb 3-1: Product: syz [ 203.528364][ T5992] usb 3-1: Manufacturer: syz [ 203.533196][ T5992] usb 3-1: SerialNumber: syz [ 203.541377][ T5992] usb 3-1: config 0 descriptor?? [ 203.593556][ T43] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 203.605535][ T5868] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 203.759123][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 203.770339][ T43] usb 3-1: USB disconnect, device number 82 [ 203.799978][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.821116][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.848620][ T5868] usb 1-1: New USB device found, idVendor=22ac, idProduct=0224, bcdDevice= 0.00 [ 203.875505][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.897135][ T5868] usb 1-1: config 0 descriptor?? [ 203.919322][ T8073] overlayfs: workdir and upperdir must reside under the same mount [ 204.122890][ T43] usb 4-1: USB disconnect, device number 75 [ 204.142124][ T115] usb 1-1: USB disconnect, device number 42 [ 204.205388][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.224715][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.237896][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.250948][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.264466][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.275057][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.895697][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.918678][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.951391][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.967756][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.975650][ T43] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 204.979195][ T5868] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 205.136262][ T43] usb 3-1: Invalid ep0 maxpacket: 32 [ 205.156410][ T5868] usb 4-1: device descriptor read/64, error -71 [ 205.265587][ T43] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 205.405582][ T5992] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 205.415636][ T43] usb 3-1: Invalid ep0 maxpacket: 32 [ 205.415861][ T5868] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 205.424159][ T43] usb usb3-port1: attempt power cycle [ 205.528756][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.540044][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.550116][ T8102] Failed to get privilege flags for destination (handle=0x2:0x3) [ 205.560139][ T5868] usb 4-1: device descriptor read/64, error -71 [ 205.565559][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 205.573021][ T5992] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 205.584675][ T5992] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 205.594211][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.602258][ T5992] usb 1-1: Product: syz [ 205.606448][ T5992] usb 1-1: Manufacturer: syz [ 205.611040][ T5992] usb 1-1: SerialNumber: syz [ 205.617570][ T5992] usb 1-1: config 0 descriptor?? [ 205.624322][ T5992] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 205.632953][ T5992] usb 1-1: Detected FT232R [ 205.677622][ T5868] usb usb4-port1: attempt power cycle [ 205.765528][ T43] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 205.788218][ T43] usb 3-1: Invalid ep0 maxpacket: 32 [ 205.935550][ T43] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 205.956709][ T43] usb 3-1: Invalid ep0 maxpacket: 32 [ 205.962235][ T43] usb usb3-port1: unable to enumerate USB device [ 206.015597][ T5868] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 206.027714][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.037734][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.045846][ T5868] usb 4-1: device descriptor read/8, error -71 [ 206.053118][ T5992] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 206.060816][ T5992] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 206.069696][ T5992] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 206.082602][ T5992] usb 1-1: USB disconnect, device number 43 [ 206.098655][ T5992] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 206.114147][ T5992] ftdi_sio 1-1:0.0: device disconnected [ 206.214119][ T8105] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.224406][ T8105] block device autoloading is deprecated and will be removed. [ 206.285544][ T5868] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 206.316322][ T5868] usb 4-1: device descriptor read/8, error -71 [ 206.369762][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 206.382867][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.575'. [ 206.393408][ T8107] netlink: 100 bytes leftover after parsing attributes in process `syz.1.575'. [ 206.426076][ T5868] usb usb4-port1: unable to enumerate USB device [ 206.442059][ T8110] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 206.443071][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.448593][ T8110] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.451905][ T8110] vhci_hcd vhci_hcd.0: Device attached [ 206.463586][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.480176][ T8111] vhci_hcd: connection closed [ 206.481626][ T12] vhci_hcd: stop threads [ 206.490824][ T12] vhci_hcd: release socket [ 206.495249][ T12] vhci_hcd: disconnect device [ 206.905571][ T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 207.020071][ T8119] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.579'. [ 207.066159][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 207.074656][ T43] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 207.084778][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 207.106572][ T43] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 207.115821][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.123819][ T43] usb 1-1: Product: syz [ 207.128729][ T43] usb 1-1: Manufacturer: syz [ 207.133374][ T43] usb 1-1: SerialNumber: syz [ 207.141304][ T43] usb 1-1: config 0 descriptor?? [ 207.153948][ T43] hub 1-1:0.0: bad descriptor, ignoring hub [ 207.160366][ T43] hub 1-1:0.0: probe with driver hub failed with error -5 [ 207.173959][ T43] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24 [ 207.189721][ T43] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 207.218806][ T43] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 207.402092][ T8119] netlink: 180 bytes leftover after parsing attributes in process `syz.1.579'. [ 207.937207][ T8128] netlink: 'syz.3.582': attribute type 3 has an invalid length. [ 207.956914][ T8128] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 207.968601][ T8128] netlink: 216 bytes leftover after parsing attributes in process `syz.3.582'. [ 208.171029][ T8147] netlink: 'syz.1.586': attribute type 27 has an invalid length. [ 208.187212][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.198011][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.199575][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.216905][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.225669][ T115] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 208.385546][ T115] usb 3-1: Using ep0 maxpacket: 32 [ 208.391211][ T115] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 208.401059][ T115] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.409214][ T115] usb 3-1: config 0 has no interface number 0 [ 208.416356][ T115] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.424365][ T115] usb 3-1: config 0 has no interface number 0 [ 208.431818][ T115] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.439852][ T115] usb 3-1: config 0 has no interface number 0 [ 208.446883][ T115] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.454872][ T115] usb 3-1: config 0 has no interface number 0 [ 208.461941][ T115] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.470013][ T115] usb 3-1: config 0 has no interface number 0 [ 208.477005][ T115] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.484998][ T115] usb 3-1: config 0 has no interface number 0 [ 208.492541][ T115] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.500805][ T115] usb 3-1: config 0 has no interface number 0 [ 208.508611][ T115] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.516725][ T115] usb 3-1: config 0 has no interface number 0 [ 208.524626][ T115] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 208.525531][ T5921] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 208.534048][ T115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.549361][ T115] usb 3-1: Product: syz [ 208.553500][ T115] usb 3-1: Manufacturer: syz [ 208.558146][ T115] usb 3-1: SerialNumber: syz [ 208.564610][ T115] usb 3-1: config 0 descriptor?? [ 208.571187][ T115] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 208.689170][ T5921] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 208.698303][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.708385][ T5921] usb 4-1: Product: syz [ 208.712562][ T5921] usb 4-1: Manufacturer: syz [ 208.717253][ T5921] usb 4-1: SerialNumber: syz [ 208.724162][ T5921] usb 4-1: config 0 descriptor?? [ 209.138564][ T5921] mos7840 4-1:0.0: required endpoints missing [ 209.162476][ T5921] usb 4-1: USB disconnect, device number 80 [ 209.430786][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.440194][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.454270][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.594'. [ 209.464900][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.474326][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.701490][ T8175] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20003 [ 209.728850][ T5868] usb 1-1: USB disconnect, device number 44 [ 209.776651][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 209.814213][ T8185] netlink: 'syz.1.597': attribute type 64 has an invalid length. [ 209.822173][ T8185] netlink: 5 bytes leftover after parsing attributes in process `syz.1.597'. [ 209.887233][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.896748][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.910081][ T8193] loop3: detected capacity change from 0 to 7 [ 209.920685][ T5988] Dev loop3: unable to read RDB block 7 [ 209.927823][ T5988] loop3: unable to read partition table [ 209.933795][ T5988] loop3: partition table beyond EOD, truncated [ 209.945773][ T8193] Dev loop3: unable to read RDB block 7 [ 209.951484][ T8193] loop3: unable to read partition table [ 209.958117][ T8193] loop3: partition table beyond EOD, truncated [ 209.964880][ T8193] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 209.965550][ T43] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 210.145507][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 210.152445][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 210.163572][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 210.174112][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.183976][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 210.196216][ T43] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 210.205299][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.213344][ T43] usb 4-1: Product: syz [ 210.217567][ T43] usb 4-1: Manufacturer: syz [ 210.222161][ T43] usb 4-1: SerialNumber: syz [ 210.229581][ T43] usb 4-1: config 0 descriptor?? [ 210.236337][ T8180] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 210.248955][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 210.255690][ T43] port100 4-1:0.0: NFC: Could not get supported command types [ 210.295555][ T5992] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 210.447758][ T5992] usb 1-1: Using ep0 maxpacket: 32 [ 210.454580][ T5992] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 210.466423][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 210.477607][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 210.487730][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 210.498899][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 210.511648][ T5183] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 210.512428][ T5992] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 210.527723][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.535844][ T5992] usb 1-1: Product: syz [ 210.540021][ T5992] usb 1-1: Manufacturer: syz [ 210.544642][ T5992] usb 1-1: SerialNumber: syz [ 210.552857][ T5992] usb 1-1: config 0 descriptor?? [ 210.964372][ T5992] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 210.970499][ T5992] input input25: Device does not respond to id packet M [ 210.985657][ T5992] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 210.991707][ T5992] input input25: Device does not respond to id packet P [ 211.005095][ T5992] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 211.006607][ T115] etas_es58x 3-1:0.2: could not retrieve the product info string [ 211.011949][ T5992] input input25: Device does not respond to id packet B [ 211.028271][ T5992] input input25: Limiting number of effects to 32 (device reports 48) [ 211.070754][ T115] usb 3-1: USB disconnect, device number 87 [ 211.088222][ T115] etas_es58x 3-1:0.2: Disconnecting syz syz [ 211.247903][ T5992] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 211.254508][ T5992] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 211.261884][ T5992] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 211.269110][ T5992] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 211.277164][ T5992] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 211.303291][ T5992] usb 1-1: USB disconnect, device number 45 [ 211.783165][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 211.892707][ T8203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.899222][ T8203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.909463][ T8203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.915731][ T8203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.974818][ T8222] 9pnet_fd: Insufficient options for proto=fd [ 212.225566][ T938] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 212.375543][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 212.382852][ T938] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 212.391373][ T938] usb 1-1: config 0 has no interface number 0 [ 212.400571][ T938] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 212.409699][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.417748][ T938] usb 1-1: Product: syz [ 212.421907][ T938] usb 1-1: Manufacturer: syz [ 212.426680][ T938] usb 1-1: SerialNumber: syz [ 212.433420][ T938] usb 1-1: config 0 descriptor?? [ 212.440117][ T938] hub 1-1:0.145: bad descriptor, ignoring hub [ 212.446274][ T938] hub 1-1:0.145: probe with driver hub failed with error -5 [ 212.456460][ T938] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.145/input/input26 [ 212.697640][ T8226] fuse: Unknown parameter 'f' [ 212.703737][ T8226] netlink: 104 bytes leftover after parsing attributes in process `syz.0.606'. [ 212.763145][ T8185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.949039][ T5868] usb 4-1: USB disconnect, device number 81 [ 212.967263][ T5233] Dev loop3: unable to read RDB block 7 [ 212.972990][ T5233] loop3: unable to read partition table [ 212.981450][ T5233] loop3: partition table beyond EOD, truncated [ 213.087154][ T5233] Dev loop3: unable to read RDB block 7 [ 213.102950][ T5233] loop3: unable to read partition table [ 213.109078][ T5233] loop3: partition table beyond EOD, truncated [ 213.141914][ T8241] netlink: 'syz.1.610': attribute type 3 has an invalid length. [ 213.150192][ T8241] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 213.161171][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 213.174345][ T8241] netlink: 216 bytes leftover after parsing attributes in process `syz.1.610'. [ 213.257388][ T8250] kvm: MWAIT instruction emulated as NOP! [ 213.425552][ T5868] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 213.515541][ T115] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 213.526829][ T5218] usb 1-1: reset high-speed USB device number 46 using dummy_hcd [ 213.536319][ T5218] usb 1-1: device reset changed ep0 maxpacket size! [ 213.547967][ T938] usb 1-1: USB disconnect, device number 46 [ 213.575543][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 213.582116][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 213.594604][ T5868] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 213.603839][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.613782][ T5868] usb 4-1: Product: syz [ 213.618010][ T5868] usb 4-1: Manufacturer: syz [ 213.623112][ T5868] usb 4-1: SerialNumber: syz [ 213.629784][ T5868] usb 4-1: config 0 descriptor?? [ 213.637847][ T5868] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 213.647209][ T5868] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 213.667327][ T115] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.674009][ T115] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 213.683395][ T115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.693742][ T115] usb 3-1: config 0 descriptor?? [ 213.705926][ T938] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 213.865538][ T938] usb 1-1: Using ep0 maxpacket: 8 [ 213.873171][ T938] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.881930][ T938] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 213.890857][ T938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.901111][ T938] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.915208][ T938] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.924470][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.933843][ T938] usb 1-1: Product: syz [ 213.938251][ T938] usb 1-1: Manufacturer: syz [ 213.942855][ T938] usb 1-1: SerialNumber: syz [ 213.955938][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 213.955948][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 213.956778][ T5183] Bluetooth: hci3: command 0x0c1a tx timeout [ 214.196572][ T115] video4linux radio48: keene_cmd_main failed (-71) [ 214.203497][ T115] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 214.213237][ T115] usb 3-1: USB disconnect, device number 88 [ 214.238795][ T5868] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 214.680869][ T938] usb 1-1: 0:2 : does not exist [ 214.707181][ T938] usb 1-1: USB disconnect, device number 47 [ 214.753871][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.857722][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.872918][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.909226][ T5868] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 214.918378][ T5868] em28xx 4-1:0.0: board has no eeprom [ 214.985663][ T5868] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 214.994984][ T5868] em28xx 4-1:0.0: dvb set to bulk mode. [ 215.005347][ T115] em28xx 4-1:0.0: Binding DVB extension [ 215.019318][ T5868] usb 4-1: USB disconnect, device number 82 [ 215.029811][ T5868] em28xx 4-1:0.0: Disconnecting em28xx [ 215.061647][ T115] em28xx 4-1:0.0: Registering input extension [ 215.068269][ T5868] em28xx 4-1:0.0: Closing input extension [ 215.080149][ T5868] em28xx 4-1:0.0: Freeing device [ 215.085820][ T5992] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 215.235674][ T5914] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 215.245627][ T5992] usb 3-1: Using ep0 maxpacket: 32 [ 215.252695][ T5992] usb 3-1: config 0 has an invalid interface number: 240 but max is 0 [ 215.261746][ T5992] usb 3-1: config 0 has no interface number 0 [ 215.267870][ T5992] usb 3-1: config 0 interface 240 has no altsetting 0 [ 215.277265][ T5992] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=13.1c [ 215.286342][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.294305][ T5992] usb 3-1: Product: syz [ 215.298495][ T5992] usb 3-1: Manufacturer: syz [ 215.303081][ T5992] usb 3-1: SerialNumber: syz [ 215.311697][ T5992] usb 3-1: config 0 descriptor?? [ 215.385616][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 215.392151][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.403187][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.413019][ T5914] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.422139][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.436468][ T5914] usb 1-1: config 0 descriptor?? [ 215.446872][ T5914] hub 1-1:0.0: USB hub found [ 215.459392][ T5233] Dev loop3: unable to read RDB block 7 [ 215.469321][ T5233] loop3: unable to read partition table [ 215.475198][ T5233] loop3: partition table beyond EOD, truncated [ 215.549835][ T5992] speedtch 3-1:0.240: speedtch_bind: wrong device class 252 [ 215.557303][ T5992] speedtch 3-1:0.240: usbatm_usb_probe: bind failed: -19! [ 215.569075][ T5992] usb 3-1: USB disconnect, device number 89 [ 215.645220][ T5914] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 215.725533][ T938] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 215.875512][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 215.882226][ T938] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.893377][ T938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 215.900037][ T938] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 215.909169][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.919414][ T938] usb 4-1: config 0 descriptor?? [ 216.064753][ T5914] hid-generic 0003:046D:C31C.001B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 216.337967][ T938] uclogic 0003:28BD:0078.001C: interface is invalid, ignoring [ 216.355994][ T5914] usb 1-1: USB disconnect, device number 48 [ 216.366379][ T5921] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 216.508745][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.518694][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 216.519520][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.525657][ T5921] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.539244][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.544629][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.555032][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.561609][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.569233][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.580670][ T5921] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.589929][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.601643][ T5921] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.618992][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.619937][ T5868] usb 4-1: USB disconnect, device number 83 [ 216.835644][ T5921] usb 3-1: GET_CAPABILITIES returned 0 [ 216.843741][ T5921] usbtmc 3-1:16.0: can't read capabilities [ 217.135850][ T5921] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 217.163124][ T5233] Dev loop3: unable to read RDB block 7 [ 217.171588][ T5233] loop3: unable to read partition table [ 217.179508][ T5233] loop3: partition table beyond EOD, truncated [ 217.240903][ T5868] usb 3-1: USB disconnect, device number 90 [ 217.285790][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 217.295273][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.309819][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 217.322305][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.334363][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.347734][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.356344][ T5921] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 217.365389][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.377633][ T5233] Dev loop3: unable to read RDB block 7 [ 217.383230][ T5233] loop3: unable to read partition table [ 217.390832][ T5921] usb 1-1: config 0 descriptor?? [ 217.397839][ T8295] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 217.407924][ T5921] hub 1-1:0.0: USB hub found [ 217.414064][ T5233] loop3: partition table beyond EOD, truncated [ 217.631081][ T5921] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 217.724214][ T5233] Dev loop3: unable to read RDB block 7 [ 217.734817][ T5233] loop3: unable to read partition table [ 217.741294][ T5233] loop3: partition table beyond EOD, truncated [ 218.045544][ T5992] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 218.085553][ T5868] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 218.195550][ T5992] usb 4-1: Invalid ep0 maxpacket: 64 [ 218.234058][ T5921] usbhid 1-1:0.0: can't add hid device: -71 [ 218.240359][ T5921] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 218.245671][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 218.263581][ T5868] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 218.272347][ T5868] usb 3-1: config 0 has no interface number 0 [ 218.277269][ T5921] usb 1-1: USB disconnect, device number 49 [ 218.278880][ T5868] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 218.296424][ T5868] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 218.308471][ T5868] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 218.320092][ T5868] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 218.325766][ T5992] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 218.330682][ T5868] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 218.353965][ T5868] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.365272][ T5868] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 218.375847][ T5868] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 218.388726][ T5868] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 218.399192][ T5868] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.415974][ T5868] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 218.425681][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.433788][ T5868] usb 3-1: Product: syz [ 218.445379][ T5868] usb 3-1: Manufacturer: syz [ 218.450310][ T5868] usb 3-1: SerialNumber: syz [ 218.451197][ T8322] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.458998][ T5868] usb 3-1: config 0 descriptor?? [ 218.461679][ T8322] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.472110][ T8320] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 218.480437][ T8320] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 218.490070][ T5868] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 218.492931][ T8322] netlink: 14 bytes leftover after parsing attributes in process `syz.1.636'. [ 218.498744][ T5868] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 218.508136][ T5992] usb 4-1: Invalid ep0 maxpacket: 64 [ 218.520559][ T5868] scsi host1: microtekX6 [ 218.528145][ T5992] usb usb4-port1: attempt power cycle [ 218.539426][ T8322] hsr_slave_0: left promiscuous mode [ 218.550009][ T8322] hsr_slave_1: left promiscuous mode [ 218.630119][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 218.885858][ T5992] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 218.918900][ T5992] usb 4-1: Invalid ep0 maxpacket: 64 [ 219.045624][ T5992] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 219.063479][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 219.078467][ T8353] netlink: 48 bytes leftover after parsing attributes in process `syz.0.640'. [ 219.088541][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.097181][ T8353] netlink: 48 bytes leftover after parsing attributes in process `syz.0.640'. [ 219.097587][ T5992] usb 4-1: Invalid ep0 maxpacket: 64 [ 219.107444][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.131245][ T5992] usb usb4-port1: unable to enumerate USB device [ 219.181460][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.207627][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.237303][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.267073][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.915221][ T8371] vlan0: entered promiscuous mode [ 219.923692][ T8371] vlan0: entered allmulticast mode [ 219.930695][ T8371] veth0_vlan: entered allmulticast mode [ 219.931642][ T8373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.941516][ T8371] team_slave_0: entered promiscuous mode [ 219.947845][ T8373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.961962][ T8371] team_slave_0: entered allmulticast mode [ 219.974013][ T8373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.987089][ T8373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.070777][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.082673][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.683108][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 220.830772][ T5233] Dev loop3: unable to read RDB block 7 [ 220.840512][ T5233] loop3: unable to read partition table [ 220.857542][ T5233] loop3: partition table beyond EOD, truncated [ 220.928433][ T5921] usb 3-1: USB disconnect, device number 91 [ 221.197675][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.205727][ T5992] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 221.207075][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.295650][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 221.335599][ T5921] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 221.345535][ T5992] usb 4-1: device descriptor read/64, error -71 [ 221.455566][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 221.462296][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 221.470031][ T10] usb 1-1: can't read configurations, error -61 [ 221.497400][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 221.508250][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 221.519782][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 221.531936][ T5921] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 221.541103][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.549347][ T5921] usb 3-1: Product: syz [ 221.553520][ T5921] usb 3-1: Manufacturer: syz [ 221.558198][ T5921] usb 3-1: SerialNumber: syz [ 221.565368][ T5921] usb 3-1: config 0 descriptor?? [ 221.571189][ T8409] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 221.578665][ T8409] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 221.585961][ T5992] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 221.594461][ T5921] usb 3-1: ucan: probing device on interface #0 [ 221.605753][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 221.725559][ T5992] usb 4-1: device descriptor read/64, error -71 [ 221.755534][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 221.764329][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 221.774520][ T10] usb 1-1: can't read configurations, error -61 [ 221.781419][ T10] usb usb1-port1: attempt power cycle [ 221.802389][ T8421] veth0_to_hsr: entered allmulticast mode [ 221.847928][ T5992] usb usb4-port1: attempt power cycle [ 221.850583][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.865421][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.135610][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 222.156554][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 222.163604][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 222.171240][ T10] usb 1-1: can't read configurations, error -61 [ 222.185652][ T5992] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 222.203121][ T5921] ucan 3-1:0.0 can0: registered device [ 222.209169][ T5992] usb 4-1: device descriptor read/8, error -71 [ 222.305536][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 222.327064][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 222.334274][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 222.341940][ T10] usb 1-1: can't read configurations, error -61 [ 222.349551][ T10] usb usb1-port1: unable to enumerate USB device [ 222.405227][ T5921] ucan 3-1:0.0 can0: firmware string: unknown [ 222.422385][ T5921] usb 3-1: USB disconnect, device number 92 [ 222.464959][ T5992] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 222.497040][ T5992] usb 4-1: device descriptor read/8, error -71 [ 222.537687][ T8434] nftables ruleset with unbound set [ 222.584256][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.593241][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.625784][ T5992] usb usb4-port1: unable to enumerate USB device [ 222.627602][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.641489][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.692229][ T8444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.702194][ T8444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.048581][ T8446] mkiss: ax0: crc mode is auto. [ 223.248597][ T8449] syzkaller1: entered promiscuous mode [ 223.254082][ T8449] syzkaller1: entered allmulticast mode [ 223.295632][ T5992] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 223.360716][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.369473][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.379974][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.389480][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.445550][ T5992] usb 3-1: Using ep0 maxpacket: 8 [ 223.453307][ T5992] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 223.461494][ T5992] usb 3-1: config 0 has no interface number 0 [ 223.469754][ T5992] usb 3-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=81.e4 [ 223.478824][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.486854][ T5992] usb 3-1: Product: syz [ 223.491009][ T5992] usb 3-1: Manufacturer: syz [ 223.495685][ T5992] usb 3-1: SerialNumber: syz [ 223.502183][ T5992] usb 3-1: config 0 descriptor?? [ 223.931617][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.943088][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.990182][ T5233] Dev loop3: unable to read RDB block 7 [ 223.996459][ T5233] loop3: unable to read partition table [ 224.002297][ T5233] loop3: partition table beyond EOD, truncated [ 224.465565][ T5868] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 224.572246][ T8470] ubi31: attaching mtd0 [ 224.628211][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 224.642277][ T5868] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 224.651470][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.663101][ T5868] usb 1-1: config 0 descriptor?? [ 224.871423][ T5233] Dev loop3: unable to read RDB block 7 [ 224.878356][ T5233] loop3: unable to read partition table [ 224.884349][ T5233] loop3: partition table beyond EOD, truncated [ 225.096666][ T5868] dragonrise 0003:0079:0006.001D: item fetching failed at offset 4/5 [ 225.105552][ T5868] dragonrise 0003:0079:0006.001D: parse failed [ 225.111762][ T5868] dragonrise 0003:0079:0006.001D: probe with driver dragonrise failed with error -22 [ 225.216605][ T5928] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 225.218374][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.233309][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.244867][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.253902][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.305368][ T8464] syzkaller1: entered promiscuous mode [ 225.314396][ T8464] syzkaller1: entered allmulticast mode [ 225.355406][ T8492] netlink: 'syz.1.678': attribute type 13 has an invalid length. [ 225.366048][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 225.373279][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.384344][ T8492] kvm: user requested TSC rate below hardware speed [ 225.386144][ T5928] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.407330][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 225.416733][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.419226][ T5868] usb 1-1: USB disconnect, device number 54 [ 225.425515][ T5928] usb 4-1: Product: syz [ 225.434807][ T5928] usb 4-1: Manufacturer: syz [ 225.445197][ T5928] usb 4-1: SerialNumber: syz [ 225.493558][ T8494] netlink: 56 bytes leftover after parsing attributes in process `syz.1.679'. [ 225.506534][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.527608][ T8494] bridge_slave_0 (unregistering): left allmulticast mode [ 225.534665][ T8494] bridge_slave_0 (unregistering): left promiscuous mode [ 225.541997][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.572370][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.584624][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.674643][ T5928] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 225.879411][ T8475] cgroup: Unknown subsys name 'appraise' [ 225.960236][ T5992] ax88179_178a 3-1:0.84: probe with driver ax88179_178a failed with error -22 [ 225.980389][ T5992] usb 3-1: USB disconnect, device number 93 [ 226.161967][ T8506] syzkaller1: entered promiscuous mode [ 226.167526][ T8506] syzkaller1: entered allmulticast mode [ 226.175792][ T8506] loop9: detected capacity change from 0 to 7 [ 226.183862][ T8506] buffer_io_error: 9 callbacks suppressed [ 226.183875][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.198271][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.206839][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.214862][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.223769][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.231969][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.239919][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.248045][ T8506] ldm_validate_partition_table(): Disk read failed. [ 226.254683][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.262899][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.271066][ T8506] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.279159][ T8506] Dev loop9: unable to read RDB block 0 [ 226.284947][ T8506] loop9: unable to read partition table [ 226.290899][ T8506] loop9: partition table beyond EOD, truncated [ 226.297216][ T8506] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 226.297216][ T8506] ) failed (rc=-5) [ 226.385745][ T5992] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 226.388101][ T5868] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 226.399577][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 226.504064][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.513750][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.538336][ T5992] usb 3-1: not running at top speed; connect to a high speed hub [ 226.545558][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 226.547323][ T5992] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.552850][ T5868] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 226.565389][ T5992] usb 3-1: config 1 interface 0 has no altsetting 0 [ 226.573385][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.584167][ T5992] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 226.591503][ T5868] usb 1-1: config 0 descriptor?? [ 226.602680][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.611138][ T5992] usb 3-1: Product: ӿ [ 226.615329][ T5992] usb 3-1: Manufacturer: Ϣ贃ꂦࢆ硼ꈦ옶㕩腢䵑ࢿꩌ⧒啓详淥ႢₑǏ趕㝲軓领㉧椑錴猕䴬뵗ỽ謘᫤ [ 226.629116][ T5992] usb 3-1: SerialNumber: syz [ 226.637656][ T8500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.060883][ T5992] usbhid 3-1:1.0: can't add hid device: -71 [ 227.067314][ T5992] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 227.080565][ T8513] fuse: Unknown parameter 'fŇ0x0000000000000008' [ 227.086670][ T5992] usb 3-1: USB disconnect, device number 94 [ 227.092425][ T8513] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 227.102171][ T8513] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 227.111915][ T8513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 227.219458][ T8521] netlink: 'syz.1.689': attribute type 21 has an invalid length. [ 227.227512][ T8521] netlink: 'syz.1.689': attribute type 6 has an invalid length. [ 227.235299][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.689'. [ 227.320448][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.329269][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.342158][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.351326][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.361124][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.369912][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.380277][ T8525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.391178][ T8525] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 227.831149][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.839967][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.907390][ T5914] usb 4-1: USB disconnect, device number 92 [ 227.920363][ T5914] usblp0: removed [ 227.930540][ T5233] Dev loop3: unable to read RDB block 7 [ 227.941669][ T5233] loop3: unable to read partition table [ 227.947904][ T5233] loop3: partition table beyond EOD, truncated [ 227.956030][ T10] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 228.089121][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.098303][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.127770][ T10] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 228.135857][ T10] usb 3-1: config 1 has no interface number 0 [ 228.141957][ T10] usb 3-1: config 1 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.154278][ T10] usb 3-1: config 1 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.165375][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.174472][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.182648][ T10] usb 3-1: SerialNumber: syz [ 228.193522][ T10] cdc_acm 3-1:1.8: probe with driver cdc_acm failed with error -12 [ 228.275558][ T5914] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 228.397120][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.406190][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.425628][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 228.434991][ T5914] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 228.444481][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.455199][ T5914] usb 4-1: Product: syz [ 228.460063][ T5914] usb 4-1: Manufacturer: syz [ 228.464749][ T5914] usb 4-1: SerialNumber: syz [ 228.473609][ T5914] usb 4-1: config 0 descriptor?? [ 228.489296][ T5914] gspca_main: se401-2.14.0 probing 047d:5003 [ 228.656689][ T5868] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 228.681869][ T5868] asix 1-1:0.0: probe with driver asix failed with error -71 [ 228.684343][ T8549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.705317][ T5914] gspca_se401: Bayer format not supported! [ 228.711832][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.715307][ T5868] usb 1-1: USB disconnect, device number 55 [ 228.720934][ T8549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.735020][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.906733][ T5921] usb 4-1: USB disconnect, device number 93 [ 229.230044][ T996] nci: nci_rx_work: unknown MT 0x4 [ 229.350898][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.359869][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.428327][ T5233] Dev loop3: unable to read RDB block 7 [ 229.434059][ T5233] loop3: unable to read partition table [ 229.440077][ T5233] loop3: partition table beyond EOD, truncated [ 229.885543][ T5868] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 230.046293][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 230.097280][ T5868] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 230.114670][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.135931][ T5868] usb 4-1: Product: syz [ 230.140131][ T5868] usb 4-1: Manufacturer: syz [ 230.144728][ T5868] usb 4-1: SerialNumber: syz [ 230.176324][ T5868] usb 4-1: config 0 descriptor?? [ 230.454103][ T5868] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 230.522778][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.532638][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.542580][ T5183] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 230.554280][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.567264][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.580959][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.592806][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.658389][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.676919][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.008285][ T8618] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 231.016301][ T8618] netlink: 168 bytes leftover after parsing attributes in process `syz.0.714'. [ 231.259540][ T8626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.269462][ T8626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.310432][ T5868] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 231.324754][ T5868] usb 4-1: USB disconnect, device number 94 [ 231.346324][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 231.495565][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 231.503338][ T10] usb 1-1: config 0 has no interfaces? [ 231.510800][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 231.519948][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.528010][ T10] usb 1-1: Product: syz [ 231.532180][ T10] usb 1-1: Manufacturer: syz [ 231.536845][ T10] usb 1-1: SerialNumber: syz [ 231.545334][ T10] usb 1-1: config 0 descriptor?? [ 231.753447][ T10] usb 1-1: USB disconnect, device number 56 [ 231.833826][ T5233] Dev loop3: unable to read RDB block 7 [ 231.839965][ T5233] loop3: unable to read partition table [ 231.846211][ T5233] loop3: partition table beyond EOD, truncated [ 231.897811][ T8630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.719'. [ 232.006482][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.015310][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.085588][ T5992] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 232.235553][ T5992] usb 4-1: Using ep0 maxpacket: 8 [ 232.244102][ T5992] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 232.253335][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.262469][ T5992] usb 4-1: Product: syz [ 232.266847][ T5992] usb 4-1: Manufacturer: syz [ 232.271446][ T5992] usb 4-1: SerialNumber: syz [ 232.279279][ T5992] usb 4-1: config 0 descriptor?? [ 232.294688][ T5992] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 232.304954][ T5992] dvb-usb: bulk message failed: -22 (2/0) [ 232.315531][ T5992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.322253][ T8637] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 232.325583][ T5992] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 232.342674][ T5992] usb 4-1: media controller created [ 232.373118][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.493580][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 232.520946][ T5992] DVB: Unable to find symbol mt352_attach() [ 232.528522][ T5992] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 232.587947][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.588119][ T8649] netlink: 'syz.1.724': attribute type 29 has an invalid length. [ 232.603292][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.606274][ T5992] rc_core: IR keymap rc-dvico-portable not found [ 232.622220][ T5992] Registered IR keymap rc-empty [ 232.629613][ T5992] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 232.642692][ T5992] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input28 [ 232.657281][ T5992] dvb-usb: schedule remote query interval to 100 msecs. [ 232.664279][ T5992] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 232.676196][ T5921] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 232.767390][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 232.799259][ T8657] netlink: 'syz.1.727': attribute type 11 has an invalid length. [ 232.825548][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 232.832620][ T5921] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 232.841812][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.855084][ T5921] usb 1-1: config 0 has no interface number 0 [ 232.861594][ T5921] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.875310][ T5921] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.887300][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 232.893357][ T5921] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.904975][ T5921] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.919169][ T5921] usb 1-1: config 0 interface 52 has no altsetting 0 [ 232.926195][ T5921] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 232.935335][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.946717][ T8661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.948036][ T5921] usb 1-1: config 0 descriptor?? [ 232.960678][ T8661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.979985][ T8661] netlink: 'syz.1.729': attribute type 11 has an invalid length. [ 232.997154][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 233.115552][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 233.227031][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 233.309588][ T5921] usb 1-1: Can not set alternate setting to 1, error: -71 [ 233.316864][ T5921] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 233.332363][ T5921] usb 1-1: USB disconnect, device number 57 [ 233.339404][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 233.357156][ T8668] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 233.465842][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 233.575546][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 233.659917][ T8679] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 233.695524][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 233.805537][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 233.915584][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 234.025636][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 234.136530][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 234.245529][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 234.268519][ T8671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.274761][ T8671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.281043][ T8671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.287127][ T8671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.355848][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 234.431913][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.448351][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.465561][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 234.568094][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.576849][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 234.577954][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.685545][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 234.795524][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 234.864499][ T10] usb 4-1: USB disconnect, device number 95 [ 234.877930][ T5233] Dev loop3: unable to read RDB block 7 [ 234.883564][ T5233] loop3: unable to read partition table [ 234.890617][ T5233] loop3: partition table beyond EOD, truncated [ 234.957030][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 235.008408][ T5233] Dev loop3: unable to read RDB block 7 [ 235.014025][ T5233] loop3: unable to read partition table [ 235.035574][ T5233] loop3: partition table beyond EOD, truncated [ 235.037554][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 235.047704][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.078704][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.147398][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 235.164547][ T8710] openvswitch: netlink: Message has 3 unknown bytes. [ 235.165038][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 235.177014][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.193736][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.357035][ T5233] Dev loop3: unable to read RDB block 7 [ 235.362729][ T5233] loop3: unable to read partition table [ 235.375538][ T5233] loop3: partition table beyond EOD, truncated [ 235.398184][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 235.431638][ T8724] netlink: 64 bytes leftover after parsing attributes in process `syz.1.749'. [ 235.566073][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 235.576755][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 235.587908][ T10] usb 4-1: can't read configurations, error -61 [ 235.726409][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 235.885523][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 235.893073][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 235.901316][ T10] usb 4-1: can't read configurations, error -61 [ 235.909920][ T10] usb usb4-port1: attempt power cycle [ 236.011433][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.020820][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.029274][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.037451][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.045053][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.193234][ T8730] chnl_net:caif_netlink_parms(): no params data found [ 236.265611][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 236.282267][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.289591][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.297375][ T8730] bridge_slave_0: entered allmulticast mode [ 236.304524][ T8730] bridge_slave_0: entered promiscuous mode [ 236.306352][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 236.313738][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.322867][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.327986][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 236.335730][ T8730] bridge_slave_1: entered allmulticast mode [ 236.337739][ T10] usb 4-1: can't read configurations, error -61 [ 236.350085][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.350127][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 236.350160][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 236.363459][ T8730] bridge_slave_1: entered promiscuous mode [ 236.404870][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.415096][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.429241][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.439498][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.443035][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.461727][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.500848][ T8730] team0: Port device team_slave_0 added [ 236.505668][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 236.509876][ T8730] team0: Port device team_slave_1 added [ 236.528032][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 236.536884][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 236.544855][ T10] usb 4-1: can't read configurations, error -61 [ 236.554265][ T10] usb usb4-port1: unable to enumerate USB device [ 236.556209][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.568863][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.595482][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.607804][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.614759][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.640945][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.685923][ T8730] hsr_slave_0: entered promiscuous mode [ 236.692247][ T8730] hsr_slave_1: entered promiscuous mode [ 236.698683][ T8730] debugfs: 'hsr0' already exists in 'hsr' [ 236.704441][ T8730] Cannot create hsr debugfs directory [ 236.837247][ T8730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.847166][ T8730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.858668][ T8730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.870682][ T8730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.940066][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.961236][ T8730] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.983242][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.990450][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.008741][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.015975][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.079941][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.090686][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.108112][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.118973][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.223866][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.410450][ T8730] veth0_vlan: entered promiscuous mode [ 237.421742][ T8730] veth1_vlan: entered promiscuous mode [ 237.452415][ T8730] veth0_macvtap: entered promiscuous mode [ 237.461887][ T8730] veth1_macvtap: entered promiscuous mode [ 237.483548][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.499404][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.514024][ T996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.523146][ T996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.532795][ T996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.543400][ T996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.605190][ T3175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.620765][ T3175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.661576][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.672474][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.742582][ T8764] netlink: 'syz.1.757': attribute type 2 has an invalid length. [ 237.751318][ T8764] netlink: 164 bytes leftover after parsing attributes in process `syz.1.757'. [ 237.914969][ T8773] binder: 8772:8773 ioctl 40046721 200000000080 returned -22 [ 237.953979][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.964067][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.125534][ T5183] Bluetooth: hci0: command tx timeout [ 238.506241][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 238.554721][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.579507][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.686066][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 238.716519][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.726841][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.744803][ T8801] netlink: 'syz.1.768': attribute type 4 has an invalid length. [ 238.747665][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.763074][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.775719][ T10] usb 4-1: Product: syz [ 238.779905][ T10] usb 4-1: Manufacturer: syz [ 238.783080][ T8801] netlink: 152 bytes leftover after parsing attributes in process `syz.1.768'. [ 238.784496][ T10] usb 4-1: SerialNumber: syz [ 238.823536][ T8801] : renamed from bond0 (while UP) [ 239.023924][ T10] usb 4-1: 0:2 : does not exist [ 239.043013][ T10] usb 4-1: unit 9 not found! [ 239.097440][ T10] usb 4-1: USB disconnect, device number 100 [ 239.122876][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.205747][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.216766][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.249675][ T8819] netlink: 64 bytes leftover after parsing attributes in process `syz.2.773'. [ 239.889506][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.945912][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.186212][ T5183] Bluetooth: hci0: command tx timeout [ 240.941001][ T8865] input: syz1 as /devices/virtual/input/input29 [ 241.302944][ T8883] netlink: 44 bytes leftover after parsing attributes in process `syz.1.784'. [ 241.517544][ T30] audit: type=1326 audit(1759126563.411:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.1.785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde3e38eec9 code=0x0 [ 241.641291][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.672593][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.045601][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 242.208615][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 242.236118][ T10] usb 4-1: config 0 has an invalid interface number: 202 but max is 0 [ 242.244316][ T10] usb 4-1: config 0 has no interface number 0 [ 242.265548][ T5183] Bluetooth: hci0: command tx timeout [ 242.273340][ T10] usb 4-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 242.331995][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 242.359007][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.374741][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.394698][ T10] usb 4-1: Product: syz [ 242.403255][ T10] usb 4-1: Manufacturer: syz [ 242.413695][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.424139][ T10] usb 4-1: SerialNumber: syz [ 242.441947][ T10] usb 4-1: config 0 descriptor?? [ 242.483169][ T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 243.082153][ T5183] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 243.178216][ T30] audit: type=1800 audit(1759126565.081:5): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.797" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 243.203729][ T8932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.410448][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.426265][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.464736][ T8939] netlink: 'syz.2.800': attribute type 6 has an invalid length. [ 243.474284][ T8939] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.800'. [ 243.491168][ T8939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.500343][ T8939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.549325][ T13] usb 4-1: Failed to submit usb control message: -110 [ 243.556593][ T13] usb 4-1: unable to send the bmi data to the device: -110 [ 243.563811][ T13] usb 4-1: unable to get target info from device [ 243.570694][ T13] usb 4-1: could not get target info (-110) [ 243.577157][ T13] usb 4-1: could not probe fw (-110) [ 243.618998][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.629135][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.639477][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.648154][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.133578][ T8956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.143477][ T8956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.346675][ T5183] Bluetooth: hci0: command tx timeout [ 244.495372][ T8974] netlink: 'syz.1.809': attribute type 10 has an invalid length. [ 244.504156][ T8974] lo: entered promiscuous mode [ 244.511385][ T8974] : (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.583845][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.593206][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.756162][ T115] usb 4-1: USB disconnect, device number 101 [ 244.891103][ T8999] program syz.3.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.108504][ T9005] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 245.187635][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.215062][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 245.228836][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.236588][ T9010] netlink: 'syz.1.821': attribute type 46 has an invalid length. [ 245.247495][ T9013] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 245.258413][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.272679][ T9013] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 245.280468][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.965072][ T9032] netlink: 'syz.1.828': attribute type 33 has an invalid length. [ 245.988551][ T9032] netlink: 152 bytes leftover after parsing attributes in process `syz.1.828'. [ 246.034656][ T9032] netlink: 228 bytes leftover after parsing attributes in process `syz.1.828'. [ 246.048751][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.086416][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.121860][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.135351][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.147933][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.159024][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.171995][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.182653][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.868152][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.876997][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.970949][ T9042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.982068][ T9042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.185659][ T115] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 247.335589][ T115] usb 4-1: Using ep0 maxpacket: 32 [ 247.344450][ T115] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 247.353860][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.361946][ T115] usb 4-1: Product: syz [ 247.366160][ T115] usb 4-1: Manufacturer: syz [ 247.370734][ T115] usb 4-1: SerialNumber: syz [ 247.588376][ T115] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 247.604556][ T115] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 247.638403][ T115] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 247.651511][ T115] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB2 [ 247.670436][ T115] usb 4-1: USB disconnect, device number 102 [ 247.688604][ T115] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 247.724507][ T115] visor ttyUSB2: Handspring Visor / Palm OS converter now disconnected from ttyUSB2 [ 247.747750][ T115] visor 4-1:1.0: device disconnected [ 248.093972][ T9059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.105217][ T9059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.120349][ T9059] netlink: 'syz.2.838': attribute type 5 has an invalid length. [ 248.128545][ T9059] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.838'. [ 248.454176][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 248.621894][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.632250][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 248.641273][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.658849][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 248.668393][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.676562][ T10] usb 4-1: Product: syz [ 248.680902][ T10] usb 4-1: Manufacturer: syz [ 248.686610][ T10] usb 4-1: SerialNumber: syz [ 248.694297][ T10] usb 4-1: config 0 descriptor?? [ 248.714413][ T10] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 248.779828][ T9069] binfmt_misc: register: failed to install interpreter file ./file0 [ 248.914266][ T9062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.926462][ T9062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.940899][ T10] usb 4-1: USB disconnect, device number 103 [ 249.022645][ T9075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.031855][ T9075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.725569][ T5992] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 249.878416][ T5992] usb 4-1: not running at top speed; connect to a high speed hub [ 249.887131][ T5992] usb 4-1: config 1 interface 0 has no altsetting 0 [ 249.895979][ T5992] usb 4-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 249.905039][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.913104][ T5992] usb 4-1: Product: ࠔ [ 249.917491][ T5992] usb 4-1: Manufacturer: 筫篧᫥篂䷧⁺䈺᎙诊⌢￑ﵷ鰪䬿歍ﰙ֧⪦⾂醈ສ휏쮈匱縴鸖顤㦃ꈶ㭣 [ 249.930914][ T5992] usb 4-1: SerialNumber: 塶ࣴ話炠颪毊쿄䰎꩓쩇䧠强ꎙờᑑ鰵壴氻ૄ旣槏ᗜ␖᛽딐ﶯ䮱晟볣撙⯂紦܆ၨ闋䞫쿒祭௚㲩᠚駙両筙嶘濓♡秗㈊曯י䇚䑢ۨ꿎硹ፗ僓ఴ릹쿊Ὃഺ馤먓႕壾痜浔匯榁 [ 250.171455][ T5992] usbhid 4-1:1.0: can't add hid device: -71 [ 250.177692][ T5992] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 250.190260][ T5992] usb 4-1: USB disconnect, device number 104 [ 250.265710][ T5183] Bluetooth: hci2: command 0x0406 tx timeout [ 250.303883][ T9088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.312626][ T9088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.609647][ T9090] C: renamed from team_slave_0 (while UP) [ 250.618021][ T9090] netlink: 'syz.1.848': attribute type 2 has an invalid length. [ 250.625918][ T9090] netlink: 128 bytes leftover after parsing attributes in process `syz.1.848'. [ 250.636716][ T9090] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 250.924202][ T9105] (syz.3.854,9105,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 250.933653][ T9105] (syz.3.854,9105,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 250.971768][ T9103] program syz.2.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.991031][ T9103] Unsupported ieee802154 address type: 0 [ 251.141493][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.181439][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.256087][ T9113] netlink: 56 bytes leftover after parsing attributes in process `syz.1.857'. [ 251.426705][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 251.572970][ T9143] usb usb9: usbfs: process 9143 (syz.1.866) did not claim interface 0 before use [ 251.585376][ T9143] vxcan0: tx address claim with different name [ 251.616004][ T5992] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 251.673638][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.696520][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.757065][ T5992] usb 4-1: device descriptor read/64, error -71 [ 251.954714][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.965255][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.008658][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.019112][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.029430][ T9157] netlink: 176 bytes leftover after parsing attributes in process `syz.2.870'. [ 252.038615][ T5992] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 252.175566][ T5992] usb 4-1: device descriptor read/64, error -71 [ 252.286364][ T5992] usb usb4-port1: attempt power cycle [ 252.359215][ T9163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.368433][ T9163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.619093][ T9166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.627836][ T9166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.636096][ T5992] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 252.656286][ T5992] usb 4-1: device descriptor read/8, error -71 [ 252.905586][ T5992] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 252.927479][ T5992] usb 4-1: device descriptor read/8, error -71 [ 253.035801][ T5992] usb usb4-port1: unable to enumerate USB device [ 253.071287][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.080237][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.854510][ T9184] netlink: 'syz.1.882': attribute type 3 has an invalid length. [ 253.862625][ T9184] netlink: 132 bytes leftover after parsing attributes in process `syz.1.882'. [ 253.878503][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.887273][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.423254][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.432423][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.444758][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.454087][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.735676][ T5868] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 254.887465][ T5868] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.896878][ T5868] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 254.907244][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.916355][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 254.927479][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 254.940282][ T5868] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 254.949394][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.957546][ T5868] usb 4-1: Product: syz [ 254.961689][ T5868] usb 4-1: Manufacturer: syz [ 254.976250][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 254.981508][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 254.993336][ T5868] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 254.999368][ T5868] cdc_wdm 4-1:1.0: Unknown control protocol [ 255.037467][ T9190] netlink: 236 bytes leftover after parsing attributes in process `syz.1.885'. [ 255.049947][ T9190] openvswitch: netlink: Flow key attr not present in new flow. [ 255.068088][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.083464][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.171652][ C1] cdc_wdm 4-1:1.0: unknown notification 207 received: index 9026 len 15386 [ 255.374306][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.377630][ C1] cdc_wdm 4-1:1.0: unknown notification 207 received: index 9026 len 15386 [ 255.384748][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.581231][ T5921] usb 4-1: USB disconnect, device number 109 [ 255.632926][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.641273][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.722052][ T9199] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 255.886036][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.894963][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.907343][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.917784][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.006784][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.016708][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.028096][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.036854][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.318752][ T9233] fuse: Unknown parameter 'rootm6mIcd4{00000000' [ 256.734530][ T9265] openvswitch: netlink: Missing key (keys=40, expected=100) [ 256.784269][ T9267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.906'. [ 256.841915][ T9271] netlink: 428 bytes leftover after parsing attributes in process `syz.1.908'. [ 256.851647][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 256.865926][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.874732][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.951698][ T9274] kvm: kvm [9273]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 256.960422][ T115] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 256.960671][ T9274] kvm: kvm [9273]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 257.072885][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.082439][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.117207][ T115] usb 4-1: config 0 has an invalid descriptor of length 175, skipping remainder of the config [ 257.127523][ T115] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 257.136628][ T115] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 257.146355][ T115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.157783][ T115] usb 4-1: config 0 descriptor?? [ 257.636071][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.644860][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.721345][ T9285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.730308][ T9285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.799771][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.811483][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.196568][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.205190][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.552604][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.562360][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.805004][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.813884][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.152373][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.161133][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.729611][ T5992] usb 4-1: USB disconnect, device number 110 [ 260.075583][ T5992] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 260.237522][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.247507][ T5992] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 260.258320][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.268480][ T5992] usb 4-1: config 0 descriptor?? [ 260.873499][ T9320] fuse: Unknown parameter 'rootmXde00000pbE92000000' [ 261.628225][ T5183] Bluetooth: hci3: unexpected event for opcode 0x200d [ 261.667742][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.676718][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.129315][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.138305][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.149504][ T9332] netlink: 68 bytes leftover after parsing attributes in process `syz.2.927'. [ 262.161938][ T9332] /dev/nbd2: Can't open blockdev [ 262.168940][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.177840][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.215346][ T9334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.358753][ T9343] tipc: Enabling not permitted [ 262.364939][ T9343] tipc: Enabling of bearer rejected, failed to enable media [ 262.380983][ T9343] syzkaller1: entered promiscuous mode [ 262.387118][ T9343] syzkaller1: entered allmulticast mode [ 262.807032][ T115] usb 4-1: USB disconnect, device number 111 [ 263.050687][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'. [ 263.296471][ T115] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 263.373637][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.392507][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.451086][ T115] usb 4-1: config 7 interface 0 has no altsetting 0 [ 263.469752][ T115] usb 4-1: string descriptor 0 read error: -22 [ 263.476869][ T115] usb 4-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 263.498647][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.526387][ T115] usb 4-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 263.536531][ T115] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.547795][ T115] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 263.561478][ T115] usb 4-1: media controller created [ 263.586581][ T115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.667067][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.681408][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.287670][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.303480][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.356888][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.374280][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.529988][ T9422] Bluetooth: MGMT ver 1.23 [ 264.594749][ T9426] netlink: 19 bytes leftover after parsing attributes in process `syz.2.946'. [ 265.022184][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.948'. [ 265.042060][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.054965][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.068352][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.079238][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.091353][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.101749][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.270152][ T5868] usb 4-1: USB disconnect, device number 112 [ 265.385155][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.394325][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.698618][ T9460] netlink: 10 bytes leftover after parsing attributes in process `syz.1.951'. [ 265.710008][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.719138][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.053294][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.070601][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.167100][ T9462] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x3 [ 266.254498][ T9468] netlink: 88 bytes leftover after parsing attributes in process `syz.1.954'. [ 266.328577][ T9472] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.956' sets config #-1 [ 266.342076][ T9472] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.956' sets config #1 [ 266.355007][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 266.415552][ T5868] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 266.565581][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 266.578173][ T5868] usb 4-1: config 12 has an invalid interface number: 84 but max is 1 [ 266.595495][ T5868] usb 4-1: config 12 has an invalid interface number: 110 but max is 1 [ 266.603894][ T5868] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 266.614942][ T5868] usb 4-1: config 12 has no interface number 0 [ 266.625910][ T5868] usb 4-1: config 12 has no interface number 1 [ 266.632890][ T5868] usb 4-1: config 12 interface 110 altsetting 223 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.646676][ T5868] usb 4-1: config 12 interface 84 has no altsetting 0 [ 266.653491][ T5868] usb 4-1: config 12 interface 110 has no altsetting 0 [ 266.664359][ T5868] usb 4-1: string descriptor 0 read error: -22 [ 266.672486][ T5868] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=f6.1b [ 266.685551][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.704386][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.708997][ T5868] belkin_sa 4-1:12.84: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 266.724008][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.737225][ T5868] usb 4-1: bcdDevice: f61b, bfc: 0 [ 266.753288][ T5868] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 266.789071][ T5868] cdc_ether 4-1:12.110: skipping garbage [ 266.804836][ T5868] cdc_ether 4-1:12.110: skipping garbage [ 266.811271][ T5868] usb 4-1: bad CDC descriptors [ 266.818156][ T5868] belkin_sa 4-1:12.110: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 266.832791][ T5868] usb 4-1: bcdDevice: f61b, bfc: 0 [ 266.849484][ T5868] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB2 [ 266.910842][ T938] usb 4-1: USB disconnect, device number 113 [ 266.932025][ T938] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 266.953999][ T938] belkin_sa 4-1:12.84: device disconnected [ 266.974802][ T938] belkin ttyUSB2: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB2 [ 266.996005][ T938] belkin_sa 4-1:12.110: device disconnected [ 267.137731][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.156248][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.068488][ T9515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.970'. [ 268.197815][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 268.255518][ T5921] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 268.429544][ T5921] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 268.457973][ T5921] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.478142][ T5921] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.478176][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.502462][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.515541][ T5921] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 268.516080][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.535578][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.559161][ T5921] usb 4-1: config 0 descriptor?? [ 268.625921][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.647135][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.686688][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.705589][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.985788][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 268.992678][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 269.011472][ T5921] usb 4-1: USB disconnect, device number 114 [ 269.714805][ T9548] cgroup: release_agent respecified [ 269.765617][ T9552] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 269.777032][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 269.783119][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 269.792047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.802099][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 269.808168][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 269.827766][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 269.833832][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88805b59e880 [ 269.841798][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88802f1d8000 [ 269.849767][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 269.857744][ C0] R10: dffffc0000000000 R11: ffffffff89000af0 R12: dffffc0000000000 [ 269.865714][ C0] R13: ffff88805b59e838 R14: 0000000000000000 R15: ffff88805b59e800 [ 269.873674][ C0] FS: 0000000000000000(0000) GS:ffff8881257b7000(0000) knlGS:0000000000000000 [ 269.882589][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.889161][ C0] CR2: 000000110c25ec18 CR3: 0000000075470000 CR4: 00000000003526f0 [ 269.897126][ C0] Call Trace: [ 269.900391][ C0] [ 269.903225][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 269.908602][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 269.914162][ C0] das16m1_handler+0x213/0x4b0 [ 269.918928][ C0] das16m1_interrupt+0xaf/0x180 [ 269.923769][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 269.929216][ C0] __handle_irq_event_percpu+0x295/0xab0 [ 269.934844][ C0] ? __lock_acquire+0xab9/0xd20 [ 269.939684][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 269.945832][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 269.951016][ C0] handle_irq_event+0x8b/0x1e0 [ 269.955766][ C0] ? handle_edge_irq+0x229/0xa10 [ 269.960700][ C0] handle_edge_irq+0x23b/0xa10 [ 269.965472][ C0] __common_interrupt+0x141/0x1f0 [ 269.970490][ C0] common_interrupt+0xb6/0xe0 [ 269.975158][ C0] [ 269.978076][ C0] [ 269.980996][ C0] asm_common_interrupt+0x26/0x40 [ 269.986006][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 269.991725][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 d1 1f 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 270.011333][ C0] RSP: 0018:ffffffff8e207d80 EFLAGS: 000002c6 [ 270.017403][ C0] RAX: 69770ea9f3f0b600 RBX: ffffffff81976677 RCX: 69770ea9f3f0b600 [ 270.025365][ C0] RDX: 0000000000000001 RSI: ffffffff8dc8715f RDI: ffffffff8c056e60 [ 270.033415][ C0] RBP: ffffffff8e207ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 270.041378][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8fe49c70 [ 270.049340][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c52a40 [ 270.057307][ C0] ? do_idle+0x1e7/0x510 [ 270.061593][ C0] default_idle+0x13/0x20 [ 270.065912][ C0] default_idle_call+0x73/0xb0 [ 270.070663][ C0] do_idle+0x1e7/0x510 [ 270.074720][ C0] ? __pfx_do_idle+0x10/0x10 [ 270.079299][ C0] cpu_startup_entry+0x44/0x60 [ 270.084049][ C0] rest_init+0x2de/0x300 [ 270.088283][ C0] start_kernel+0x3ae/0x410 [ 270.092771][ C0] x86_64_start_reservations+0x24/0x30 [ 270.098227][ C0] x86_64_start_kernel+0x143/0x1c0 [ 270.103325][ C0] common_startup_64+0x13e/0x147 [ 270.108261][ C0] [ 270.111265][ C0] Modules linked in: [ 270.115160][ C0] ---[ end trace 0000000000000000 ]--- [ 270.120681][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 270.126741][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 270.146329][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 270.152386][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88805b59e880 [ 270.160353][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88802f1d8000 [ 270.168314][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 270.176268][ C0] R10: dffffc0000000000 R11: ffffffff89000af0 R12: dffffc0000000000 [ 270.184312][ C0] R13: ffff88805b59e838 R14: 0000000000000000 R15: ffff88805b59e800 [ 270.192287][ C0] FS: 0000000000000000(0000) GS:ffff8881257b7000(0000) knlGS:0000000000000000 [ 270.201200][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.207768][ C0] CR2: 000000110c25ec18 CR3: 0000000075470000 CR4: 00000000003526f0 [ 270.215727][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 270.223188][ C0] Kernel Offset: disabled [ 270.227492][ C0] Rebooting in 86400 seconds..