last executing test programs: 2m45.301965411s ago: executing program 3 (id=757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000240)={0x1}) 2m45.242604805s ago: executing program 3 (id=758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)='.', 0x1, 0x12, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', '\x00'}) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m45.160496136s ago: executing program 3 (id=759): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = dup3(r2, r0, 0x80000) ioctl$NBD_DO_IT(r4, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2m44.262962947s ago: executing program 3 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x43) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') (async) chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x800542) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) (async) bind$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0xffffcb66, @host}, 0x10) (async) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0xffffcb66, @host}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, 0x0) syz_open_dev$vim2m(0x0, 0x1000, 0x2) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc2, 0xc}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) (async) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x3, 0x0, 0x6, 0x7fffffff}) syz_clone3(&(0x7f0000002500)={0x2000100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) (async) syz_clone3(&(0x7f0000002500)={0x2000100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) 2m43.831569738s ago: executing program 3 (id=770): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f000057e000/0x1000)=nil, 0x1000, 0x1) 2m43.276373615s ago: executing program 3 (id=775): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = dup3(r2, r0, 0x80000) ioctl$NBD_DO_IT(r4, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2m43.08448649s ago: executing program 32 (id=775): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = dup3(r2, r0, 0x80000) ioctl$NBD_DO_IT(r4, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 11.284334374s ago: executing program 1 (id=1686): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}], 0x1c) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x84, 0xf1, 0x1b, 0x8, 0x84f, 0x1, 0xf2d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x18, 0x20, 0xbb, [{{0x9, 0x4, 0x7e, 0x39, 0x0, 0x28, 0x9e, 0x4b, 0xd}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 10.69901572s ago: executing program 1 (id=1688): r0 = userfaultfd(0x80801) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000400)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/35, 0x23}, {&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000280)}, {&(0x7f0000000340)=""/187, 0xbb}], 0x4}, 0xec}], 0x1, 0x40000060, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48000) ioctl$NBD_DO_IT(r2, 0xc0101282) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x2, 0x2, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.966010307s ago: executing program 1 (id=1690): mkdir(&(0x7f0000000000)='./file0\x00', 0x20) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000004044104d7a00000000000109022d96010000006c09040002010300030009210100020122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x6, 0xf4}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x4, 0x4, 0x8, 0xff, 0x3}, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x8, 0x81}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x424}}, {0x94, &(0x7f0000000280)=@string={0x94, 0x3, "c2ca95ebe6ffb940d4ad7d9ab0def914aa772c775a97d14a23f2e5e3ea86d1e440d56b8cab7ad03c9566b67c1f29519450d89ae7cd5ea0f1e3394ab2bcc3b60bd5ef7c6119f34b480c792eb7155b1a7ab4aede52f0baef7f1d14fb98e0deb4ea14e9c2fdc54278d0aaa13bd7850aadf74a4d909adb846bc27f39389cec39c355c6ba54ce9d182647f425b184c17848e9ceda"}}, {0x85, &(0x7f0000000340)=@string={0x85, 0x3, "c5f3189e480ab486c5d24dab5f7977f3e9246e3c2cc460d4c23b4c09858e334bb9524e4e15c8a5e0421a6871f0831e58f04767b92c9bf9a21293a7455b9132adcc8ffb9539c00dfda9faa1af031875f375676b6b91e71284fda5a9495e3d45d3929eb31c71c3afddb6500b6f996542e32300ffb95bf323ccabb9af84b7474d7d1e1f7a"}}, {0x22, &(0x7f0000000640)=@string={0x22, 0x3, "e484dfbf6e7dc6ec06a77b3117b7543e5839e3fc44ff0d06e1983efad4d01201"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x455}}, {0x80, &(0x7f0000000480)=@string={0x80, 0x3, "3f8e9ed9c61e408536072d4c778faf15071785d93dd139c42c8da46aef80244ae8c09ff02f8134781afb9885ba00239567cc92abbf3202b15a61be865b62eee8fe8329239f0b905b4b806b4d76e6ffe0057a5cbbcb1866f7fda01d587687599df8c9b744fb8a506d6ea329c5513a0686328ee3e3b4580d48e617fa4cbe97"}}, {0x99, &(0x7f0000000500)=@string={0x99, 0x3, "4b3d4099f81d80547e3bfcead991a4bcbd60252044620842855af6444a832bdf57b0384438e7c984cef596929fedf9534d7f38d7f7c9613116cdb3b2a4b56b620d332ec785ffa6971b108df65be7d0aa0fd6f29b39166ad6fd781c50491a81eb157ec4fa30feb158563406ffb61833415586557f0133e9469109cc6da4e2717ce8e1c8c2143247dfab2722de92ac7fad235d85a1212fe8"}}]}) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x5, 0x640002) r2 = socket(0x28, 0x5, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002440)=""/4113, 0x1011}, {&(0x7f0000003480)=""/4128, 0x1020}, {&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f0000000340)=""/176, 0xb0}], 0x4}, 0x40012022) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/240, 0xf0}], 0x1}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r5, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) recvmsg(r5, &(0x7f0000000480)={&(0x7f00000000c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1, &(0x7f0000000280)=""/11, 0xb}, 0x2) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0xffffffff, 0x4, 0x11cf, 0xfffffffe, 0x1, 0x7f, 0x1, 0xac3, 0x626b36b6, 0x80000000, 0x1, 0x4, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) unshare(0x2040400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x7ff, 0xf, 0x7, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x62, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xc, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x3, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x81, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x5, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xe2, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x43, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1ff, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x4, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x404, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x6, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00060800000008651c27a11234b8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.03544327s ago: executing program 0 (id=1706): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async, rerun: 64) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async, rerun: 64) chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x38) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 6.986726676s ago: executing program 0 (id=1708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) 6.882198809s ago: executing program 0 (id=1710): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x51424752, 0x8}}) (async) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 6.690146867s ago: executing program 1 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x0, 0x8, 0x3b, @empty, @mcast1, 0x20, 0x20, 0x164c, 0x9}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) r9 = dup3(r8, r7, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r11, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0x7, 0x9, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast, {[@cipso={0x86, 0x32, 0x2, [{0x6, 0xe, "596aa87460064543542881ff"}, {0x6, 0x11, "3a5723b25353fd7edd16135df25889"}, {0x2, 0x8, "f03c16d98501"}, {0x6, 0x5, "66a17c"}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0xd8, r1, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) r13 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r13, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r13, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) r14 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/address_bits', 0x0, 0x0) syz_usb_control_io$lan78xx(r14, &(0x7f0000000040)={0x14, &(0x7f0000000240)={0x20, 0x24, 0xb2, {0xb2, 0x1, "f2af9beafcb38d7465e8787dc4bf0ee7ba99da5e53d76b5b827ae145b8114d81b26a9d81df17435bff83b1e43bb4b5c22e6812e1de60b6d34f6c1f4591e85345e4ff41e3b2534981144e80e99a1c512081890404659efd31fca31794a2cc0776331bd1cf357e5b83c2f3ea164766780d7e4b0b3df26135a5a2828e80650f11444cb4fc7bfd4a20e135690f50132b4c53f7666245c35d262485cbfdcf911c90870a7128787367ae8909bf6ad0a85a1b52"}}, &(0x7f0000000380)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "76959ddbe5a6221d4ccc7f2f42725eb7682a7110aa222566564d4fb914901e86a70771c518932bf630c4426c3a6515ad9883e4894dfb254469348e35e75f1838696f89e3927b3ad8906f7d088431e81e6f314bed52f36c74423d2dba0333c4e1eddf34f3af59d56fdcfd1353646afe63e4f9a1e59b1a84f5f2bda34d1d6ff24bcdfe8aa48bf815aeab6394f06f4054b1e0806d2ae9156d2682d9079cc2c45a07aa8c7d43fc8381382620129bfec17adb5c3bad3299f82fe591407534f260f495583bbfec6784"}}}, &(0x7f0000000640)={0x34, &(0x7f00000000c0)={0x40, 0x3, 0x50, "7f360f1f800afc142c3804f5d88dab5d3f5fd4dd6c5eb3bb73d4b116170ac693da2a71e3a5e43478a2f061b42ce9b9edd6a418824f97c1de60409b316806b29343c87d28022e1b88351ca8133687bafd"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "631a68c57a16be178441cb35f9e82fb8cf85ad4aee4ac1f191abb16c79e8c70879a9f255b5ba7262fd1892eb2d3526"}}) syz_usb_control_io$uac1(r13, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x2, "faad"}, 0x0, 0x0}) syz_usb_control_io(r13, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000080)={0x40, 0x10, 0x2, "f3d6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.590038974s ago: executing program 0 (id=1714): r0 = fsopen(&(0x7f0000000040)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='Z\xd3VC>\xfdn\xec\x9b*c0,m7\r\xcb\xa6\xf2\x16\xe0\xfe (\xaf\xc9%0[\xb7d\x8a\x01\a\xbc\xab\xc0\x9a', &(0x7f0000001500)='i=\xb6=\x18x\xf6\xbe\xf3\xc7z1\b\xaf\xf5\x84\xadlz\xd7NZ\xc4M?\x98\xea\xb0\xdex[6V\xc5\x87\x1f\x92\x84g\x17\xdb\xe6.\xa4v\x1bA\xfa\xf5\xff\xa6\xe8R\'\xfe\x10\x10d>{e\x17\t\xe9\b\x00\x00\x00\x00\x00\x00\x00\xab\x9e\xc3\xf5\x11.\xc9..\xbeR\xf1Kq\tJG~\xb8\xd9\x9c\x0f\xf0f\xc5:C\r\xc3b\x95\xf9\xf3K\xa7\xaa_o\t\xbd\xa8/\x98\xd9\xf5\xb5-ypbZ\x91\x02n\xc7ls3\xc1\xbb\xe4\x01f\xe2Z!\xa0\xfa\x97\xd4\xdc\xec\xfb\x9b#\x00\xef\xa0u\xf8p\xb2\xdf\xb8P\xde\vk\x96=\"\xab\x87m\x8fM\xe7\xca\xb5\xab1,<\x8a\x17\xfb\xbc\xecR\xfe_;\xd4=\x00\x9f\x94\xbef\x9d\x80', 0x0) unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)={0x14, 0x2e, 0x301, 0x70bd26, 0xfffffffd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000180)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) getpid() r3 = socket$isdn_base(0x22, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000030018"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$isdn_base(r3, &(0x7f0000000000)={0x22, 0xe5, 0x6, 0xf9, 0xdf}, 0x6) ioctl$TCFLSH(r2, 0x5608, 0x2) ioctl$GIO_CMAP(r2, 0x4b70, 0x0) read(r0, &(0x7f0000000240)=""/171, 0xab) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4801b}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x11d8, &(0x7f0000000300)={[{0x1b, 0x4e00, "4511b120374752d3a1224514a737e076b213213460aab7de1fe32f"}, {0x4c, 0x4e00, "80880199fc4b11df37056a0b13c7597b7852a66a5611477c3ad16a7e56e604fdec8117dd82639174be52f9458c36cdf610bfddaf58dd16c74c7a13c3412d6b6020ec396fd71dd381d1cd6972"}, {0x82, 0x4e00, "c19efd87847cdcc851cd5f81c1790465ad251f747a6c87a5d368fc852309c2fd718c691cfc7695e374329a4fe7d29f938a8d0a8e0d4ab97e8f3070d44788fa18acacbe720b892fb192c052486eea4dc4e7ecf3ba415e66932a050b763aa3af285e50f3880cb44a193a10881098b9c41f7766ec1bd734a73b20c6a3e3caa610897048"}, {0x1000, 0x4e00, "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"}, {0xd5, 0x4e00, "eda0c2630ea9aabe4a48573bad65550a72f0bca0a020b4b21a441fd658e745370f2e8ce2f7dd59c25e86c8818c8f07c191d2cf818e9014f0b58b462bfb9834cae9bdc4cf4780c26c5a02b7fe0032be5c441acb7c0fcb1900505aa9308d1c0e529464be3575eb966ddf7526f0eec81057a543f832bc661c5398b6905be346a4a21d2aeaf6918a198aee61bba8aa1b4cfdd480a37e922fe0e7edba4624eca26901e88bf070d2df234074eb4be37f75cc51be970b6acde6368123be61ce48de11dc14455aea8f993a6029a019aa762487d2a231a3515f"}]}) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) 3.504064196s ago: executing program 2 (id=1716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280), 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="2410a30656b937a79add39000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf255100000008000300", @ANYRES32=r4, @ANYBLOB="05008a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000480)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="610912c90e2fb26b3d4fd2be1ed0eb0ae60f28fdc802c9930a84f794"], 0x1c) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="66643d4c7fa9710d30d11bde3625b092e07151642bc50c4426f9ce97f79919d323d295430bf9bdab62c3b11b5e608affdcf7e2b30cdd5d07d3047cb129902cc27838685618fa120da4d42476ba3170186a866d7c", @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0xfffffffffffffff5, r11, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xffffffffffffffd1, 0x0, {0x0, 0x1, 0x0, 0x4, 0x800, 0x0, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0x96f0, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r12, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x6, {0x6, 0x1, 0xfd, 0xfffffffffffffffd, 0x9, 0xfffffdff, {0x2, 0x80000808000083, 0x3, 0xf, 0x10000, 0x100000800000008, 0x80000000, 0x0, 0x4, 0xa000, 0x7fffffff, 0x0, r12, 0x0, 0xe8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_pwait(r0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x6, 0x180000, &(0x7f00000002c0)={[0x80000000000000]}, 0x8) connect$netrom(r14, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$netrom(r14, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="4c060000000100000037f39d040900000002040000000000000000000000000000010700000001000000030000000000000001002301005e000002002e2f00008596841b00955d92b269bb3bc30204ea59bff59b81482efcdcb44225ae18ca6c", @ANYRES32=r5, @ANYRES32=r12, @ANYRES32=r13], 0x4c) sendto$inet6(r0, &(0x7f0000000980)="c8", 0xff82, 0x1, &(0x7f0000000040)={0xa, 0x4e23, 0xf, @loopback, 0x8}, 0x1c) 3.500743864s ago: executing program 4 (id=1717): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) sendto$packet(r0, &(0x7f0000000080)="cc54bcd80d0a0b2062ed0b6d229e999a33926bbd2f7958fddde39999c080b3eba2ed09f4", 0x24, 0x0, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$MRT6(r2, 0x29, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x10, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040040) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000002c0)=0x7, 0x4) mknodat$loop(r2, &(0x7f0000000300)='./file0\x00', 0x6000, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6_vti0\x00', r1, 0x4, 0x8, 0x0, 0xf, 0x28, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8000, 0x0, 0x80, 0x1}}) sendmmsg$inet(r2, &(0x7f0000000540)=[{{&(0x7f0000000340)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)="141ecbc9262ec1623ed2b46bf1c4408677bf9a5dcb", 0x15}], 0x1, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x70}}], 0x1, 0x20000815) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000600)={@mcast1, 0x0}, &(0x7f0000000640)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000680)={@dev, 0x0}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x170, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000900)=0x7, 0x4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r2) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4021104}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff0001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x84}}, 0x40004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000b00)={@loopback, 0x8, 0x0, 0x2, 0x9, 0x1000, 0x1}, 0x20) connect$bt_sco(r2, &(0x7f0000000b40), 0x8) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000b80)={@empty, @multicast2}, &(0x7f0000000bc0)=0xc) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000c00)) timer_create(0x0, &(0x7f0000000c40)={0x0, 0x20, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000c80)=0x0) timer_settime(r9, 0x0, &(0x7f0000000cc0)={{0x77359400}}, 0x0) r10 = getpgrp(0xffffffffffffffff) syz_open_procfs(r10, &(0x7f0000000d00)='net/unix\x00') recvmsg$unix(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)=""/68, 0x44}, {&(0x7f0000000dc0)=""/39, 0x27}, {&(0x7f0000000e00)=""/57, 0x39}, {&(0x7f0000000e40)=""/186, 0xba}, {&(0x7f0000000f00)=""/140, 0x8c}, {&(0x7f0000000fc0)=""/198, 0xc6}], 0x6, &(0x7f0000001140)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r12, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) ioctl$KVM_IRQFD(r15, 0x4020ae76, &(0x7f0000001240)={r13, 0x7, 0x2, r11}) ioctl$KVM_CAP_X86_GUEST_MODE(r14, 0x4068aea3, &(0x7f0000001280)) 3.421303916s ago: executing program 1 (id=1718): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) rt_sigaction(0x4, &(0x7f00000001c0)={&(0x7f0000000140)="44dfa3998999998f083087649e0d0036660f38df2b660fbab97500000000c3c4a37905d708f246ad66450f28e20f9218c401f5e84c5700", 0x50000003, 0x0, {[0x1]}}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000280)={0xc9, 0x0, 0xc}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0xc894}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x24, 0x3, 0x6, 0x3, 0x0, 0x9e, 0x2, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400fff, 0x14000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0x3, 0x20000005, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0x7], 0x6006, 0x1c0293}) ioctl$KVM_RUN(r5, 0xae80, 0x0) accept4(r1, 0x0, &(0x7f0000000100), 0x80000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000480)={0x3, 0x0, [{0xa4e, 0x0, 0x8e1}, {0xb4e}, {0x329, 0x0, 0x9}]}) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000300)={&(0x7f0000000140)=[{0x5, 0x1010, 0x0, 0x0}], 0x1}) 2.536127102s ago: executing program 4 (id=1719): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x600d41, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) 2.440159898s ago: executing program 2 (id=1720): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4e, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x5, 0xf1, 0x7, 0xff, 0x41, 0x7d, 0x2}, {0xe2a5, 0x4, 0x1, 0x9, 0x2, 0xeb, 0x8, 0xb, 0xff, 0x6, 0x3, 0x3, 0x8}], 0x10}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x7fff, 0x6, 0xd, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001cc0)={0x28, r7, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x76}]}]}, 0x28}}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r10 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000002b000b00000000000000000006000000980010800800c900640101013ecd5078c01f3693ec516822ea513a915fd370327fb9fca30eda2cb1f974953c8dd0377833a9be91dc4820424e455e6cc7680654b2fa47ace617bc04eab39511a53f78c4ee5820d6a94683cf058422d8c63d18e4cfa2442a51cff9b7dce99a3c07c2481fead80764536aadaa9c0ba0f6fb79015bef88e43763635edda8be4ece0c0070000600000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d01000000060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.364598197s ago: executing program 4 (id=1721): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xffffffff00000000) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0xb01}, 0x14}}, 0x0) 2.300540719s ago: executing program 4 (id=1722): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000040)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000000}}}, 0x10, 0x0}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001540)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_UNLOCK(r4, 0x6406) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c000100626974776973650028000280080003400000000408000140000000140800024000c45a000000058008000480040001050900010073797a30"], 0x10c}}, 0x0) close(r5) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000040)) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f0000000100)='-1\x00', 0x3) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) 2.227167021s ago: executing program 4 (id=1723): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[], 0x10) 2.152195374s ago: executing program 4 (id=1724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x1, 0x40010142, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000142, 0x800) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000009c0000400000000000000000000000005461e6fde73f70ee6d4df53e12434266a34daa087c5d129844c826a1274de52a89e0947198b066ec0f93bb5d9ad7a8ddc0c5a36b5454962be61aedccee4a5acd7b9ea41538af4258290ea081b44639a95335394ceba01fb6fa75a861fdaa6c469e8c5088d0e8c1ab5a8314f69a4ecc2a8382582f29bf51bd66"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x40044103, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c6313, 0xffffffff}], 0x0, 0x1000000, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f00000001c0)) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x198, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x73dc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x15f39e05}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4d9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e415c70}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) 1.962663987s ago: executing program 0 (id=1725): setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000adae6c40fd0b1200c0cc01020301090224000100000000090447000269b562000905fc020004090d02090509"], 0x0) write$binfmt_misc(r0, &(0x7f00000001c0), 0x95) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 1.829050657s ago: executing program 2 (id=1726): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) recvmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/74, 0x4a}], 0x5, &(0x7f0000001300)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002300)=@nfc, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/156, 0x9c}], 0x1, &(0x7f0000002480)=""/177, 0xb1}, 0xffffffff}, {{&(0x7f0000002540)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/137, 0x89}], 0x1, &(0x7f00000026c0)=""/212, 0xd4}, 0x1}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000027c0)=""/155, 0x9b}, {&(0x7f0000002880)=""/21, 0x15}, {&(0x7f00000028c0)=""/112, 0x70}, {&(0x7f0000002940)=""/26, 0x1a}, {&(0x7f0000002980)=""/230, 0xe6}, {&(0x7f0000002a80)=""/228, 0xe4}, {&(0x7f0000002b80)=""/21, 0x15}], 0x7}, 0x4}, {{&(0x7f0000002c40)=@qipcrtr, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000002cc0)=""/245, 0xf5}, {&(0x7f0000002dc0)=""/254, 0xfe}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/188, 0xbc}, {&(0x7f0000003f80)=""/54, 0x36}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x6}, 0xfffff807}], 0x5, 0x2000, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000051c0)='tasks\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000005200)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000005340)={&(0x7f0000005240)={0x1d, r1}, 0x10, &(0x7f0000005300)={&(0x7f0000005280)={0x3, 0x10, 0x5, {0x0, 0x2710}, {0x77359400}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0x26, 0x3, 0x0, 0x0, "a9f39506046e2f3c3833626d805d04fa530e4dc5b494d1e713cd17967e0627d687a5e5c79d22809774991ade76310e66aff07d580a5d9fb7be34e21a7be917a0"}}, 0x80}, 0x1, 0x0, 0x0, 0x20006044}, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) lseek(r5, 0x6, 0x0) recvmsg$can_bcm(r3, &(0x7f0000005800)={&(0x7f0000005380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005400)=""/157, 0x9d}, {&(0x7f00000054c0)=""/48, 0x30}, {&(0x7f0000005500)=""/147, 0x93}, {&(0x7f00000055c0)=""/5, 0x5}, {&(0x7f0000005600)=""/81, 0x51}, {&(0x7f0000005680)=""/167, 0xa7}, {&(0x7f0000005740)=""/14, 0xe}], 0x7}, 0x10000) syz_open_dev$vim2m(&(0x7f0000005840), 0x6, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000005880)={[{0x2b, 'net_prio'}]}, 0xa) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000058c0)={{r3}, {@void, @actul_num={@val=0x2b, 0x5, 0x17}}}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f00000059c0)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005980)={&(0x7f0000005940)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) getsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000005a00), &(0x7f0000005a40)=0x4) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000005a80)) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000005ac0)={0x1000, "e6af0c50cc4276b93e67e14733c143a5ad8653a5df0b1c79ecebd5bd0b1b4ea7", 0x2, 0x9, 0x2, 0x2, 0x2}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000005b40), 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000005b80), 0x9, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000005bc0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000005c00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000005c40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r7, 0xc01864cd, &(0x7f0000005d00)={&(0x7f0000005c80)=[r8, r9, r10, 0x0], &(0x7f0000005cc0)=[0x9, 0x3, 0x80000001, 0x2a, 0x5, 0x10, 0x7f], 0x4, 0x1}) r11 = syz_open_dev$usbfs(&(0x7f0000005d40), 0x8, 0x30140) ioctl$USBDEVFS_SETINTERFACE(r11, 0x80085504, &(0x7f0000005d80)={0x9f, 0x9}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000005f00)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005e00)={0x88, 0x1403, 0x300, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000005f40)=0x40, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000005f80)={0x0, @in6={{0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}}}, &(0x7f0000006040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000006080)={0x3, 0x87d4d8c8828cc902, 0x7, 0x5afc, r12}, &(0x7f00000060c0)=0x10) 1.748511699s ago: executing program 2 (id=1727): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = userfaultfd(0x801) (async) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r2 = syz_open_dev$swradio(&(0x7f0000001500), 0x1, 0x2) (async) remap_file_pages(&(0x7f000057c000/0x3000)=nil, 0x3000, 0x3000003, 0x2, 0x20000) pwritev2(r2, &(0x7f0000001740)=[{&(0x7f0000001540)="dc", 0x1}], 0x1, 0x3, 0x7fffffff, 0x3) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1.746336444s ago: executing program 2 (id=1728): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x12, 0x4, "d6b8a5e3"}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0xe9a, 0x6, {{0x2c, 0x4, 0x2, 0xf, 0xb0, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x30}, {[@lsrr={0x83, 0x13, 0xd, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x43}, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x5a, 0x1, 0x8, [{@private=0xa010101, 0x4f26}]}, @timestamp_prespec={0x44, 0x4c, 0xff, 0x3, 0x0, [{@empty, 0x4}, {@empty, 0xf2a2}, {@private=0xa010101, 0xffffffff}, {@broadcast, 0x6}, {@empty, 0x5}, {@rand_addr=0x64010102, 0x2}, {@rand_addr=0x64010102, 0x5}, {@empty, 0xd}, {@rand_addr=0x64010102, 0x200}]}, @lsrr={0x83, 0x13, 0x14, [@private=0xa010101, @local, @multicast1, @multicast2]}, @timestamp={0x44, 0x18, 0xdb, 0x0, 0xd, [0x5a0, 0x4, 0x4, 0xdc3897b0, 0xfffffffd]}]}}}}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1a, 0x20000000, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x51, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0xce, 0x3, 0x60, @private1, @mcast2, 0x40, 0x8000, 0xf, 0xfffffffa}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @multicast1, @broadcast}, &(0x7f0000000980)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x8, 0x10, 0x8001, 0x1, {{0x39, 0x4, 0x2, 0x7, 0xe4, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @loopback, {[@lsrr={0x83, 0x2b, 0xd2, [@private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @local, @multicast1, @rand_addr=0x64010100]}, @generic={0x94, 0xd, "f216cc6cfe794b57b24ae6"}, @lsrr={0x83, 0x2b, 0x52, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @private=0xa010101, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @remote, @remote]}, @generic={0x88, 0x11, "f173bee83782c1d5990d5d02337a19"}, @timestamp_prespec={0x44, 0xc, 0xa1, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0x8f, 0x3, 0x6, [{@multicast1, 0x800}, {@rand_addr=0x64010100, 0x4}, {@private=0xa010101, 0x6}]}, @ssrr={0x89, 0x23, 0x77, [@remote, @multicast1, @multicast1, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @empty]}, @end, @ra={0x94, 0x4}, @generic={0x7, 0xb, "249cb48efaf0608915"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000bc0)={'gretap0\x00', 0x0, 0x7, 0x7, 0x7f, 0xde8, {{0x14, 0x4, 0x0, 0x5, 0x50, 0x68, 0x0, 0x5, 0x29, 0x0, @private=0xa010102, @empty, {[@rr={0x7, 0xb, 0x41, [@remote, @broadcast]}, @rr={0x7, 0x7, 0xce, [@multicast1]}, @timestamp={0x44, 0x14, 0x5, 0x0, 0x8, [0x6, 0x40, 0x0, 0x7a8]}, @end, @noop, @generic={0x86, 0x12, "4ce5c80ebac08c5cb4e6322b34920120"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000001180)={0x0, 0x21, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r14], 0x378}}, 0x0) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r17, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r16}) r18 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r18) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r18, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r19, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000000cc0)={0x874, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4ba3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x234b}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb994}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r4}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbeba}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4214}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x607fa9ae}}, {0x8}}}, {0x44, 0x1, @activeport={{}, {}, {0x0, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r10}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) 1.627547224s ago: executing program 1 (id=1729): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x4, 0x50, @private1, @rand_addr=' \x01\x00', 0x748, 0x80, 0x6, 0x3}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x2, @multicast}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000480)="330520000a00160006007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae766eaa89242095d08762", 0xfee9, 0x4000800, &(0x7f00000003c0)={0x11, 0x10, r6, 0x1, 0x5f, 0x6, @random='\x00\r\x005\x00'}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xa14012a31ae8f545, &(0x7f00000002c0)={@dev, 0x0}, &(0x7f0000000300)=0x14) r8 = socket(0x11, 0x4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) sendto$packet(r11, &(0x7f0000000340)="600088a8", 0x5dc, 0x14008b00, &(0x7f0000000200)={0x11, 0x86dd, r12, 0x1, 0x97, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r0, @ANYBLOB="020029bd7000fddbdf25170000000c00018008000300070000001c000180080003000300000008000300000000000800030001000000280001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="6c0001801400020076657468315f766972745f776966690014000200766c616e3000000000000000000000000800030002000000080003000300000008000300010000001400020076657468315f746f5f62617461647600140002007665746831000000000000000000000068000180140002006361696630000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="14000200766574683100000000000000000000001400020070696d726567300000000000000000000800030000000000080003000400000008000100", @ANYRES32=r7, @ANYBLOB="0800da6f5453535aff078d0a836347eac90100", @ANYRES32=r10, @ANYBLOB="2c00018008000300000000000800030002000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="0800030002000000180001801400020067656e65766530000000000000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r14 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r14, &(0x7f0000000940)=[{&(0x7f0000000440)="08000d60d897000000", 0x1}, {&(0x7f00000004c0)="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"}, {&(0x7f0000000600)="3f6ef16c9560b78ffd5bde7591a8ed9ba80f3c5ced81ec1c0fc5497336c9032ba385386b7db5da4734d9926dc28c4e9ebc"}], 0x8) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x120}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x8100, 0x0) 600.928621ms ago: executing program 0 (id=1730): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x220, 0x84, 0x77, 0x72, 0x40, 0x582, 0xbe1e, 0xcfce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xb, 0x20, 0x180, 0x2, [{{0x9, 0x4, 0xe5, 0xf1, 0x1, 0xff, 0x7a, 0xd1, 0x90, [], [{{0x9, 0x5, 0xa, 0x2, 0x0, 0x4, 0x3, 0x2}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1731): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') getdents(r0, &(0x7f0000001000)=""/4075, 0xfeb) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4201, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x294, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x264, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc8, 0x6, 0x1, 0x0, "fde80b91b72fa437c27b47f8e96f06a2e77483f1b7b24658a400e9ca482a88de2374e981725f0baf66ec00ecc9acdfb6e16259b6a31acbcc805fdb6044513c0db09a9e19b45799ce56a77dabe19cb180ee61ce20112f4f095e4cb88775a066a944222a625ae96af1afce02646d553a68adbad1fa8f3dbc5ea9047da508ef5e12cba8ef78f1052551aef5cbfc846112d2736286594eae1c86b3a96c58eae28155600335cef4847c6e353f701fd3f48e9dda292582965936e650412c1cecaa1cffb1437c98"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "8ce1677e3343e241f994522eb45a68aaf79e7c7d4c53c8f6b14e057a1a59f45accda398dc8b9fe8577c19abbf63d7590c64fd0dc726aca8c5f47b2d01c610d80acad066f2cc9606f81fa225e0c7d9c8d1c3241d7016b5681d4b0bd62982d527c7cb8a2df458af54ca5857dc0768165e4f7473ff76ec903c65fb634dfa6b559121913b0d9ad5f7f6d821b4f0c08952bc3c32f2ba1c9d74594c9"}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "1302a3d3596be284c900fcbe888878bf237bf323a13e97745bb35014715a9763f8be336a95d22bb0c49ec8cfaf18f32e6ae0f6db26e10925452a3cc58e4962c1e7a207157c8afe0d305c7848c9a3bccf109c4bb08cd9e4ab2e80a0e5fdd4634ae083c1114f586804f7cd21c716ecc64348cbb3621e51a8c5d1"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, @NFT_MSG_DELTABLE={0x108, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xd9, 0x6, "7aba14293c0b0793ddabf09d6c3cfab4ff3a3275532366a7a67ba43c9ed0d97037de20d84f07452c5b6df31a5bee021ef9f5439465ae065853deaada20f7dc50e4f3bf5201c48be2e175bb02c1ab6e5df47b8eae92c6810b4a4f9bea285f12d21f49a89bd576a13c46b9027c6f4ddd2dc638d2fb800197fa9e1f31e514c0847aa9ef5a36a13dc536fae56640dd8789983aff58e6de3a4e799d08ec487ec311aef7d73735dd06b68c84052919db03fc19e476a97b0e577374d2ac529dbaae65bd914d0cf287b0b5645d72dcbc0c3fe7aac8a9b28d34"}]}, @NFT_MSG_NEWFLOWTABLE={0x278, 0x16, 0xa, 0xb05, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x78, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6d4}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x1f0}, 0x1, 0x0, 0x0, 0x20040000}, 0x24020841) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20050001, 0x40, 0x1, 0x0, 0x7}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000000c0)) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRESOCT=r5, @ANYRES16=r4], 0x0) kernel console output (not intermixed with test programs): arse product info: '' [ 510.806318][ T5848] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 510.945233][ T5848] usb 2-1: device descriptor read/64, error -71 [ 511.020085][ T5949] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 511.059980][ T5492] etas_es58x 5-1:0.2 can0: bit-timing not yet defined [ 511.070768][ C0] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 511.076084][ T5848] usb usb2-port1: attempt power cycle [ 511.083806][ T5949] usb 3-1: device descriptor read/8, error -71 [ 511.085646][ C0] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 511.100929][ C0] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 511.105836][ T44] usb 5-1: USB disconnect, device number 45 [ 511.108624][ C0] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 511.123724][ T44] etas_es58x 5-1:0.2: Disconnecting syz syz [ 511.123803][ T5492] etas_es58x 5-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 511.129802][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 511.351589][ T5949] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 511.373878][ T5949] usb 3-1: device descriptor read/8, error -71 [ 511.469350][ T5848] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 511.490970][ T5949] usb usb3-port1: unable to enumerate USB device [ 511.498352][ T5848] usb 2-1: device descriptor read/8, error -71 [ 511.741035][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.754140][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.779303][ T5848] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 511.803598][ T5848] usb 2-1: device descriptor read/8, error -71 [ 511.898044][ T9907] netlink: 294 bytes leftover after parsing attributes in process `syz.4.1281'. [ 511.907141][ T9907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.924128][ T5848] usb usb2-port1: unable to enumerate USB device [ 512.367795][ T5848] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 512.550949][ T5848] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 512.559341][ T5848] usb 5-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 512.569826][ T5848] usb 5-1: config 220 has no interface number 2 [ 512.576370][ T5848] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 512.589603][ T5848] usb 5-1: config 220 interface 0 has no altsetting 0 [ 512.596574][ T5848] usb 5-1: config 220 interface 76 has no altsetting 0 [ 512.604378][ T5848] usb 5-1: config 220 interface 1 has no altsetting 0 [ 512.613440][ T5848] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 512.622482][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.630612][ T5848] usb 5-1: Product: syz [ 512.634854][ T5848] usb 5-1: Manufacturer: syz [ 512.639551][ T5848] usb 5-1: SerialNumber: syz [ 512.875097][ T5848] usb 5-1: selecting invalid altsetting 0 [ 512.882195][ T5848] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 512.889515][ T5848] uvcvideo 5-1:220.0: No valid video chain found. [ 512.903479][ T5848] usb 5-1: selecting invalid altsetting 0 [ 512.909330][ T5848] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 512.927593][ T5848] usb 5-1: USB disconnect, device number 46 [ 512.995899][ T9947] IPVS: Scheduler module ip_vs_sip not found [ 513.102302][ T9955] FAULT_INJECTION: forcing a failure. [ 513.102302][ T9955] name failslab, interval 1, probability 0, space 0, times 0 [ 513.115467][ T9955] CPU: 1 UID: 0 PID: 9955 Comm: syz.2.1291 Not tainted syzkaller #0 PREEMPT(full) [ 513.115483][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.115490][ T9955] Call Trace: [ 513.115495][ T9955] [ 513.115499][ T9955] dump_stack_lvl+0x189/0x250 [ 513.115516][ T9955] ? __pfx____ratelimit+0x10/0x10 [ 513.115530][ T9955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.115543][ T9955] ? __pfx__printk+0x10/0x10 [ 513.115558][ T9955] ? __pfx___might_resched+0x10/0x10 [ 513.115568][ T9955] ? fs_reclaim_acquire+0x7d/0x100 [ 513.115580][ T9955] should_fail_ex+0x414/0x560 [ 513.115595][ T9955] should_failslab+0xa8/0x100 [ 513.115607][ T9955] __kmalloc_noprof+0xdf/0x800 [ 513.115622][ T9955] ? tomoyo_encode+0x28b/0x550 [ 513.115639][ T9955] tomoyo_encode+0x28b/0x550 [ 513.115656][ T9955] tomoyo_realpath_from_path+0x58d/0x5d0 [ 513.115671][ T9955] ? tomoyo_domain+0xd8/0x130 [ 513.115689][ T9955] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 513.115701][ T9955] tomoyo_path_number_perm+0x1e8/0x5a0 [ 513.115714][ T9955] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 513.115745][ T9955] ? __fget_files+0x2a/0x420 [ 513.115762][ T9955] ? __fget_files+0x3a0/0x420 [ 513.115775][ T9955] ? __fget_files+0x2a/0x420 [ 513.115791][ T9955] security_file_ioctl+0xcb/0x2d0 [ 513.115809][ T9955] __se_sys_ioctl+0x47/0x170 [ 513.115831][ T9955] do_syscall_64+0xfa/0xfa0 [ 513.115846][ T9955] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.115859][ T9955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.115870][ T9955] ? clear_bhb_loop+0x60/0xb0 [ 513.115882][ T9955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.115895][ T9955] RIP: 0033:0x7fd6f1d8efc9 [ 513.115905][ T9955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.115914][ T9955] RSP: 002b:00007fd6f2ba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.115932][ T9955] RAX: ffffffffffffffda RBX: 00007fd6f1fe5fa0 RCX: 00007fd6f1d8efc9 [ 513.115945][ T9955] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 513.115956][ T9955] RBP: 00007fd6f2ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 513.115967][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.115978][ T9955] R13: 00007fd6f1fe6038 R14: 00007fd6f1fe5fa0 R15: 00007ffd00bc5538 [ 513.116007][ T9955] [ 513.352047][ T9955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 513.527884][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 513.544114][ T9966] loop7: detected capacity change from 0 to 16384 [ 513.922071][ T9982] sp0: Synchronizing with TNC [ 513.947647][ T9982] sp0: Found TNC [ 513.951657][ T9987] overlayfs: failed to clone upperpath [ 514.003665][ T5949] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 514.026970][ T9989] overlayfs: failed to clone upperpath [ 514.035069][ T9989] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1298'. [ 514.179097][ T5949] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 514.188419][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.201800][ T5949] usb 3-1: config 0 descriptor?? [ 514.257212][ T9976] [U] è` [ 514.430353][ T5949] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 514.645880][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.680018][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.700534][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.718063][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.728978][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.736248][ T5949] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 514.763007][ T5949] [drm] Initialized udl on minor 2 [ 514.769674][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.820020][T10006] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1303'. [ 514.821476][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059cf9400: rx timeout, send abort [ 514.915904][ T5949] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 514.928784][ T5949] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 514.940425][ T5848] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 514.949096][ T5949] usb 3-1: USB disconnect, device number 64 [ 514.956247][ T5848] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 515.115829][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 515.286876][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 515.294060][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 515.302995][ T10] usb 5-1: can't read configurations, error -22 [ 515.357184][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803471e000: rx timeout, send abort [ 515.372965][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059cf9400: abort rx timeout. Force session deactivation [ 515.447364][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 515.650528][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 515.691184][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 515.722194][ T10] usb 5-1: can't read configurations, error -22 [ 515.736796][ T10] usb usb5-port1: attempt power cycle [ 515.807807][T10034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.900077][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803471e000: abort rx timeout. Force session deactivation [ 515.960646][ T5848] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 516.110344][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 516.121009][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 516.127862][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 516.136457][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 516.143556][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 516.148038][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 516.156453][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 516.164951][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 516.172259][ T10] usb 5-1: can't read configurations, error -22 [ 516.186822][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 516.197683][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 516.207523][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 516.218218][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 516.230044][ T5848] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 516.239577][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.247611][ T5848] usb 3-1: Product: syz [ 516.251879][ T5848] usb 3-1: Manufacturer: syz [ 516.256471][ T5848] usb 3-1: SerialNumber: syz [ 516.262886][ T5848] usb 3-1: config 0 descriptor?? [ 516.269153][T10028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 516.281294][ T5848] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.302875][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 516.331368][ T5848] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 516.346794][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 516.375389][ T8761] udevd[8761]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.402573][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 516.417574][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 516.430352][ T10] usb 5-1: can't read configurations, error -22 [ 516.439184][ T10] usb usb5-port1: unable to enumerate USB device [ 516.494908][T10028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.504256][T10028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.514234][ T9] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 516.525694][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 516.537405][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.546737][ T5848] usb 3-1: USB disconnect, device number 65 [ 516.551734][ T9] usb 2-1: Product: syz [ 516.556877][ T9] usb 2-1: Manufacturer: syz [ 516.562998][ T9] usb 2-1: SerialNumber: syz [ 516.585343][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 516.603328][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 516.822978][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.832321][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.841404][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.850364][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.859558][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.868255][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.902450][ T9] usb 2-1: USB disconnect, device number 63 [ 517.041315][ T44] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 517.201497][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 517.208341][ T44] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 517.216700][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.226850][ T44] usb 3-1: config 0 has no interface number 0 [ 517.232962][ T44] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 517.246415][ T44] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 517.257763][T10063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1321'. [ 517.267872][ T44] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 517.280135][ T44] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 517.292894][ T44] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 517.303285][ T44] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 517.317283][ T44] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 58099, setting to 1024 [ 517.330452][ T44] usb 3-1: config 0 interface 239 has no altsetting 0 [ 517.339705][ T44] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 517.348939][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.357068][ T44] usb 3-1: Product: syz [ 517.361243][ T44] usb 3-1: Manufacturer: syz [ 517.367643][ T44] usb 3-1: SerialNumber: syz [ 517.376456][ T44] usb 3-1: config 0 descriptor?? [ 517.383318][T10054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.391306][T10054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.626266][ T44] usb 3-1: USB disconnect, device number 66 [ 517.632476][ T5864] Bluetooth: hci4: BCM: Reset failed (-71) [ 517.736035][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 517.743211][ T10] ath9k_htc: Failed to initialize the device [ 517.752501][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 518.111614][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 518.291964][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 518.316771][ T9] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 518.334883][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 518.359405][ T9] usb 2-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 0.00 [ 518.368877][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.382925][ T9] usb 2-1: config 0 descriptor?? [ 518.516502][ T44] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 518.680583][ T44] usb 5-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.690981][ T44] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 518.704755][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 518.718155][ T44] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 518.728375][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.743541][ T44] usb 5-1: config 0 descriptor?? [ 518.988526][T10065] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1323'. [ 519.000572][T10065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.019574][T10065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.364734][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 519.401459][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 519.425041][ T44] usb 5-1: USB disconnect, device number 51 [ 519.463756][T10091] tmpfs: Unknown parameter 'usrquota_inod7' [ 519.475800][T10091] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1331'. [ 519.486991][T10091] overlayfs: failed to resolve './file0': -2 [ 519.972085][T10096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1333'. [ 520.116373][ T44] usb 2-1: USB disconnect, device number 64 [ 520.252766][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 520.485560][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.496721][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.507702][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.517517][ T9] usb 5-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 520.549131][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 520.667601][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.676853][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.684877][ T9] usb 5-1: Product: syz [ 520.689140][ T9] usb 5-1: Manufacturer: syz [ 520.693742][ T9] usb 5-1: SerialNumber: syz [ 520.741150][ T9] usb 5-1: selecting invalid altsetting 0 [ 520.748280][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 520.791328][ T9] usb 5-1: selecting invalid altsetting 0 [ 520.801166][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 520.975491][ T9] usb 5-1: USB disconnect, device number 52 [ 521.423983][T10067] Set syz1 is full, maxelem 65536 reached [ 521.600835][T10127] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1344'. [ 521.610519][T10127] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 521.667385][T10129] netlink: 'syz.4.1345': attribute type 83 has an invalid length. [ 521.720367][ T30] audit: type=1326 audit(1762062065.783:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 521.753538][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1346'. [ 521.763917][ T30] audit: type=1326 audit(1762062065.811:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 521.794572][ T30] audit: type=1326 audit(1762062065.811:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 521.864408][ T30] audit: type=1326 audit(1762062065.811:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 521.888930][ T30] audit: type=1326 audit(1762062065.811:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 521.912441][ T5949] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 521.946909][ T30] audit: type=1326 audit(1762062065.811:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 521.970567][ T30] audit: type=1326 audit(1762062065.811:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 521.994017][ T30] audit: type=1326 audit(1762062065.811:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 522.045891][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 522.078211][ T30] audit: type=1326 audit(1762062065.811:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 522.104086][ T30] audit: type=1326 audit(1762062065.811:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10130 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d818efc9 code=0x7ffc0000 [ 522.163685][ T5949] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.179286][ T5949] usb 3-1: config 1 interface 0 has no altsetting 0 [ 522.198721][ T5949] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 522.211085][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.221936][ T5949] usb 3-1: Product: ತ [ 522.226175][ T5949] usb 3-1: Manufacturer: з [ 522.230991][ T5949] usb 3-1: SerialNumber: ƥ벇ﮱ걵㼳è€ï„ªê¢²ê”²ê»‚硵ꆞ꾨ê…꺶霩ﲉ㓤绠࿭䠃ꉅ辊鲎濖戚빣扅갼ᩱ碳炢븹ꋓ讧䡾昬惸㉱é¾îŒ‰ä”­å’Šâ¿‹ï½©êŸ¼âº£æˆ£æ¤ªïŽ§æ¤•î¯’ۿ皉ⱥ⋣ê±å …ỨⳜ䤲Ն扊觵ᑩ鋜昖Έ濲頯꯭泈ﲈ캔ᥣç®ä‹“à¡šåœå¥é°§è§î­¶é³°è¤­à¹¿ë™¹ê«¦è£… [ 522.493364][ T5949] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 522.527586][ T5949] usb 3-1: USB disconnect, device number 67 [ 522.567684][ T5949] usblp0: removed [ 523.172737][T10171] netlink: 'syz.0.1357': attribute type 10 has an invalid length. [ 523.205948][T10171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1357'. [ 523.224825][T10171] dummy0: entered promiscuous mode [ 523.243918][T10171] bridge0: port 4(dummy0) entered blocking state [ 523.244147][T10176] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 523.250398][T10171] bridge0: port 4(dummy0) entered disabled state [ 523.277548][T10171] dummy0: entered allmulticast mode [ 523.285579][T10171] bridge0: port 4(dummy0) entered blocking state [ 523.292102][T10171] bridge0: port 4(dummy0) entered forwarding state [ 523.414170][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 523.596941][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 523.604201][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.622868][ T9] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 523.632606][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.641466][ T9] usb 5-1: Product: syz [ 523.645834][ T9] usb 5-1: Manufacturer: syz [ 523.651906][ T9] usb 5-1: SerialNumber: syz [ 523.659400][ T9] usb 5-1: config 0 descriptor?? [ 523.670804][ T9] usb 5-1: bad CDC descriptors [ 523.676698][ T9] usb 5-1: unsupported MDLM descriptors [ 523.799560][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 523.888015][ T9] usb 5-1: USB disconnect, device number 53 [ 523.964037][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.977952][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 524.001538][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.010924][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.022356][ T10] usb 2-1: Product: syz [ 524.026970][ T10] usb 2-1: Manufacturer: syz [ 524.031573][ T10] usb 2-1: SerialNumber: syz [ 524.048053][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 524.260998][T10190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 524.487876][ T10] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 524.494099][ T10] cdc_mbim 2-1:1.0: bind() failure [ 524.504114][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 524.511276][ T10] cdc_ncm 2-1:1.1: bind() failure [ 525.248214][T10203] pim6reg: entered allmulticast mode [ 525.259670][ T5949] usb 2-1: USB disconnect, device number 65 [ 525.401902][T10212] netlink: 'syz.4.1373': attribute type 27 has an invalid length. [ 525.410870][T10212] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1373'. [ 525.437167][T10212] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 525.446703][T10212] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 525.455797][T10212] syzkaller1: entered promiscuous mode [ 525.461869][T10212] syzkaller1: entered allmulticast mode [ 525.873862][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 526.066360][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 526.073609][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.084603][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.094667][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 526.103771][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.114105][ T9] usb 5-1: config 0 descriptor?? [ 526.124353][ T9] hub 5-1:0.0: USB hub found [ 526.336372][ T9] hub 5-1:0.0: 2 ports detected [ 526.536775][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 526.554744][ T9] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 526.562054][ T9] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 526.572412][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 526.578398][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 526.602266][ T9] usb 5-1: USB disconnect, device number 54 [ 526.687105][ T10] usb 2-1: device descriptor read/64, error -71 [ 526.943521][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 527.092959][ T10] usb 2-1: device descriptor read/64, error -71 [ 527.168118][ T44] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 527.211550][ T10] usb usb2-port1: attempt power cycle [ 527.332100][ T44] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 527.341402][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.349570][ T44] usb 3-1: Product: syz [ 527.353731][ T44] usb 3-1: Manufacturer: syz [ 527.358302][ T44] usb 3-1: SerialNumber: syz [ 527.365606][ T44] usb 3-1: config 0 descriptor?? [ 527.584847][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 527.594656][ T44] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 527.607020][ T10] usb 2-1: device descriptor read/8, error -71 [ 527.862888][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 527.885363][ T10] usb 2-1: device descriptor read/8, error -71 [ 528.002112][ T10] usb usb2-port1: unable to enumerate USB device [ 528.225721][ T5864] Bluetooth: unknown link type 98 [ 528.230903][ T5864] Bluetooth: hci0: connection err: -111 [ 528.493771][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 528.686712][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 528.697550][ T10] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 528.706741][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.718674][ T10] usb 5-1: config 0 has no interface number 0 [ 528.724828][ T10] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 528.739912][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 528.752332][ T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 528.770710][ T10] usb 5-1: config 0 interface 126 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 528.785896][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 528.795045][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.805724][ T10] usb 5-1: config 0 descriptor?? [ 528.813187][T10255] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 528.831638][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.906258][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.930263][ T10] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 529.045550][T10255] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 529.056266][ T10] usb 5-1: USB disconnect, device number 55 [ 529.577599][ T44] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 529.608414][ T44] usb 3-1: USB disconnect, device number 68 [ 529.695626][T10283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.990920][ T10] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 530.132605][ T10] usb 5-1: device descriptor read/64, error -71 [ 530.269612][T10303] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 530.283400][T10303] overlayfs: upper fs does not support tmpfile. [ 530.397289][ T10] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 530.547355][ T10] usb 5-1: device descriptor read/64, error -71 [ 530.666021][ T10] usb usb5-port1: attempt power cycle [ 530.729012][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 530.756565][T10311] openvswitch: netlink: Message has 4 unknown bytes. [ 530.763488][T10311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.901313][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 530.912243][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 530.923388][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.938262][ T9] usb 2-1: config 0 descriptor?? [ 530.952557][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 531.031303][ T10] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 531.060781][ T10] usb 5-1: device descriptor read/8, error -71 [ 531.164246][T10330] netlink: 'syz.0.1406': attribute type 29 has an invalid length. [ 531.173809][T10330] netlink: 'syz.0.1406': attribute type 29 has an invalid length. [ 531.182415][T10330] netlink: 'syz.0.1406': attribute type 29 has an invalid length. [ 531.316955][ T10] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 531.349661][ T10] usb 5-1: device descriptor read/8, error -71 [ 531.466934][ T10] usb usb5-port1: unable to enumerate USB device [ 531.611543][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.620441][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.060621][ T9] gspca_sunplus: reg_w_riv err -71 [ 532.067334][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 532.077396][ T9] usb 2-1: USB disconnect, device number 70 [ 532.888947][ T44] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 533.050930][ T44] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 533.058982][ T44] usb 2-1: config 1 has no interface number 0 [ 533.065548][ T44] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 533.077823][ T44] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 533.088721][ T44] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.103643][ T44] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 533.112802][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.121116][ T44] usb 2-1: Product: syz [ 533.125335][ T44] usb 2-1: Manufacturer: syz [ 533.129910][ T44] usb 2-1: SerialNumber: syz [ 533.140882][T10332] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 533.365861][T10332] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 533.402252][ T5930] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 533.541284][ T5930] usb 5-1: device descriptor read/64, error -71 [ 533.595075][ T44] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 533.798018][ T5930] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 533.936931][ T5930] usb 5-1: device descriptor read/64, error -71 [ 534.055690][ T5930] usb usb5-port1: attempt power cycle [ 534.428851][ T5930] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 534.473424][ T5930] usb 5-1: device descriptor read/8, error -71 [ 534.601074][T10357] netlink: 'syz.0.1411': attribute type 4 has an invalid length. [ 534.609319][T10357] netlink: 'syz.0.1411': attribute type 4 has an invalid length. [ 534.739522][ T5930] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 534.772290][ T5930] usb 5-1: device descriptor read/8, error -71 [ 534.869285][T10368] virt_wifi0 speed is unknown, defaulting to 1000 [ 534.893422][ T5930] usb usb5-port1: unable to enumerate USB device [ 535.861308][ T5956] usb 2-1: USB disconnect, device number 71 [ 535.875645][ T5956] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 536.045000][ T5956] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 536.190015][T10412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1421'. [ 536.415611][T10424] syzkaller1: entered promiscuous mode [ 536.421186][T10424] syzkaller1: entered allmulticast mode [ 536.429635][T10423] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 41 [ 536.546403][ T44] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 536.734716][ T44] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 536.756294][ T44] usb 2-1: config 0 has no interface number 0 [ 536.770996][ T44] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.804159][ T44] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.819024][ T44] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 536.840622][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.879712][ T44] usb 2-1: config 0 descriptor?? [ 537.047665][T10455] overlayfs: failed to resolve './file1': -2 [ 537.320474][ T44] uclogic 0003:28BD:0905.000C: Interface probing failed: -22 [ 537.329527][ T44] uclogic 0003:28BD:0905.000C: interface is invalid, ignoring [ 537.519431][ T5956] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 537.558513][ T44] usb 2-1: USB disconnect, device number 72 [ 537.694050][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 537.703028][ T5956] usb 5-1: config 0 has no interfaces? [ 537.711162][ T5956] usb 5-1: string descriptor 0 read error: -22 [ 537.718224][ T5956] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 537.727335][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.737120][ T5956] usb 5-1: config 0 descriptor?? [ 537.832085][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 537.841054][T10489] erspan0: default FDB implementation only supports local addresses [ 537.961426][ T44] usb 5-1: USB disconnect, device number 64 [ 538.131346][T10507] fuse: Unknown parameter 'f>Á¥®nßP¿42vžµ¡2䞥¾ÔÄÔóêU³hÎŽBÏ<ÞÅÒ‚êDSxã‹rÿo2ö~UBŒŸ•`{Ôé2hŸ!u¯ü‹‡8/•ÏÀm%ê ' [ 538.448845][ T5996] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7f [ 538.775825][ T5956] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 538.941837][ T5930] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 538.943895][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 538.956091][ T5956] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 538.964287][ T5956] usb 2-1: config 0 has no interface number 0 [ 538.970383][ T5956] usb 2-1: config 0 interface 12 has no altsetting 0 [ 538.979501][ T5956] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 538.988739][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.997998][ T5956] usb 2-1: Product: syz [ 539.002167][ T5956] usb 2-1: Manufacturer: syz [ 539.006857][ T5956] usb 2-1: SerialNumber: syz [ 539.013295][ T5956] usb 2-1: config 0 descriptor?? [ 539.106093][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.117129][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 539.131671][ T5930] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 539.140781][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.150940][ T5930] usb 5-1: config 0 descriptor?? [ 539.597566][ T5930] input: HID 28bd:0935 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0935.000D/input/input19 [ 539.753593][ T5930] uclogic 0003:28BD:0935.000D: input,hidraw0: USB HID vff.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.4-1/input0 [ 539.807884][ T44] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 539.889262][T10519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.898975][T10519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.991109][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.002114][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.012172][ T44] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 540.021531][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.032005][ T44] usb 3-1: config 0 descriptor?? [ 540.345829][ T5956] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 540.353589][ T5956] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 540.360890][ T5956] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 540.369188][ T5956] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 540.385390][ T5956] usb 2-1: USB disconnect, device number 73 [ 540.478366][ T44] cm6533_jd 0003:0D8C:0022.000E: item fetching failed at offset 3/5 [ 540.487212][ T44] cm6533_jd 0003:0D8C:0022.000E: parse failed [ 540.493506][ T44] cm6533_jd 0003:0D8C:0022.000E: probe with driver cm6533_jd failed with error -22 [ 540.694255][ T44] usb 3-1: USB disconnect, device number 69 [ 540.928166][T10533] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 541.495667][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x35 [ 541.495730][ T5864] Bluetooth: hci2: Malformed LE Event: 0x0d [ 541.900101][ T44] usb 5-1: USB disconnect, device number 65 [ 542.263611][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e29e000: rx timeout, send abort [ 542.272156][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e29e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 542.286619][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ad72400: rx timeout, send abort [ 542.288855][ T44] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 542.296189][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ad72400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 542.449433][ T44] usb 5-1: device descriptor read/64, error -71 [ 542.652367][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 542.695282][ T5930] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 542.706714][ T44] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 542.812836][ T9] usb 3-1: device descriptor read/64, error -71 [ 542.844873][ T44] usb 5-1: device descriptor read/64, error -71 [ 542.857800][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.868850][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.878993][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.891911][ T5930] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.900961][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.911483][ T5930] usb 2-1: config 0 descriptor?? [ 542.962963][ T44] usb usb5-port1: attempt power cycle [ 543.069493][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 543.208421][ T9] usb 3-1: device descriptor read/64, error -71 [ 543.327563][ T44] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 543.336969][ T9] usb usb3-port1: attempt power cycle [ 543.359266][ T44] usb 5-1: device descriptor read/8, error -71 [ 543.410130][ T5930] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 543.576126][T10610] netlink: 'syz.0.1474': attribute type 10 has an invalid length. [ 543.614810][ T44] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 543.640160][ T44] usb 5-1: device descriptor read/8, error -71 [ 543.705267][T10610] team0 (unregistering): Port device team_slave_0 removed [ 543.717147][T10610] team0 (unregistering): Port device team_slave_1 removed [ 543.734052][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 543.754723][ T44] usb usb5-port1: unable to enumerate USB device [ 543.765387][ T9] usb 3-1: device descriptor read/8, error -71 [ 543.912455][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 543.932137][ T44] usb 2-1: USB disconnect, device number 74 [ 544.002387][T10618] netlink: ct family unspecified [ 544.007836][T10618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.021206][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 544.053768][ T9] usb 3-1: device descriptor read/8, error -71 [ 544.171353][ T9] usb usb3-port1: unable to enumerate USB device [ 544.728403][T10627] futex_wake_op: syz.0.1481 tries to shift op by 32; fix this program [ 544.833959][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 545.005049][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 545.012137][ T9] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 545.021716][ T9] usb 2-1: config 0 has no interface number 0 [ 545.029825][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=e837, bcdDevice=92.a8 [ 545.038939][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.046943][ T9] usb 2-1: Product: syz [ 545.051308][ T9] usb 2-1: Manufacturer: syz [ 545.055898][ T9] usb 2-1: SerialNumber: syz [ 545.062397][ T9] usb 2-1: config 0 descriptor?? [ 545.069797][ T9] option 2-1:0.246: GSM modem (1-port) converter detected [ 545.441897][T10640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1487'. [ 545.603898][ T5848] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 545.774962][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 545.782817][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.793817][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.803582][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 545.816503][ T5848] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 545.825581][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.835718][ T5848] usb 5-1: config 0 descriptor?? [ 546.042328][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 546.206053][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.218222][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 546.228114][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.238452][ T9] usb 3-1: config 0 descriptor?? [ 546.283259][ T5848] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0010/input/input20 [ 546.401878][ T5848] appleir 0003:05AC:8241.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 546.467301][ T5848] usb 5-1: USB disconnect, device number 70 [ 546.472765][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 546.490926][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 546.502923][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 546.516032][ T9] usb 3-1: USB disconnect, device number 74 [ 546.529563][T10653] fido_id[10653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 546.983376][ T5848] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 547.047891][ T9] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 547.155095][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 547.161730][ T5848] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 547.173297][ T5848] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 547.182547][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.190803][ T5848] usb 5-1: Product: syz [ 547.195023][ T5848] usb 5-1: Manufacturer: syz [ 547.199715][ T5848] usb 5-1: SerialNumber: syz [ 547.207703][ T5848] usb 5-1: config 0 descriptor?? [ 547.215510][ T5848] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 547.231292][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.242580][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 547.252565][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.263045][ T9] usb 3-1: config 0 descriptor?? [ 547.270384][ T9] hub 3-1:0.0: USB hub found [ 547.484240][ T9] hub 3-1:0.0: 1 port detected [ 547.959545][ T44] usb 2-1: USB disconnect, device number 75 [ 548.001951][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1499'. [ 548.007107][ T44] option 2-1:0.246: device disconnected [ 548.031051][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 548.065684][T10675] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1500'. [ 548.075447][ T5848] gspca_zc3xx: reg_w_i err -71 [ 548.195203][T10678] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1501'. [ 548.205692][T10678] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1501'. [ 548.216489][T10678] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1501'. [ 548.578826][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 548.579158][ T44] usb 3-1: USB disconnect, device number 75 [ 548.585663][ T9] hub 3-1:0.0: get_hub_status failed [ 548.727544][ T5848] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 548.733959][ T5848] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 548.743238][ T5930] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 548.755018][ T5848] usb 5-1: USB disconnect, device number 71 [ 548.884342][T10692] fuse: Unknown parameter 'fd±0x0000000000000005' [ 548.908458][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 548.924838][ T5930] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 548.935670][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 548.943942][ T5930] usb 2-1: Product: syz [ 548.948242][ T5930] usb 2-1: Manufacturer: syz [ 548.954097][ T5930] usb 2-1: SerialNumber: syz [ 548.963440][ T5930] usb 2-1: config 0 descriptor?? [ 549.090310][ T5848] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 549.251919][ T5930] usb 2-1: USB disconnect, device number 76 [ 549.261772][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 549.287626][ T5848] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 549.316578][ T5848] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 549.378023][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.386204][ T5848] usb 5-1: Product: syz [ 549.390420][ T5848] usb 5-1: Manufacturer: syz [ 549.395931][ T5848] usb 5-1: SerialNumber: syz [ 549.409230][ T5848] usb 5-1: config 0 descriptor?? [ 549.427142][ T5848] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 549.434820][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'. [ 549.758627][ T44] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 549.924208][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 549.931283][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.944097][ T44] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 549.954618][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.968923][ T44] usb 3-1: config 0 descriptor?? [ 550.004593][T10732] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1517'. [ 550.014147][T10732] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1517'. [ 550.084553][ T5930] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 550.223677][ T5930] usb 2-1: device descriptor read/64, error -71 [ 550.414679][ T44] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 550.491022][ T5930] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 550.517562][ T5848] gspca_zc3xx: reg_w_i err -71 [ 550.640678][ T5930] usb 2-1: device descriptor read/64, error -71 [ 550.759176][ T5930] usb usb2-port1: attempt power cycle [ 550.840056][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1511'. [ 550.850656][T10716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.859524][T10716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.870088][T10716] netlink: 'syz.2.1511': attribute type 10 has an invalid length. [ 550.878016][T10716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.889366][T10716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.900801][T10716] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 550.914335][ T44] usb 3-1: USB disconnect, device number 76 [ 551.121895][ T5930] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 551.143250][ T5848] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 551.150580][ T5848] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 551.159944][ T5930] usb 2-1: device descriptor read/8, error -71 [ 551.168937][ T5848] usb 5-1: USB disconnect, device number 72 [ 551.363120][T10749] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1522'. [ 551.421740][ T5930] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 551.443467][ T5930] usb 2-1: device descriptor read/8, error -71 [ 551.496147][ T5848] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 551.571259][ T5930] usb usb2-port1: unable to enumerate USB device [ 551.646580][ T5848] usb 5-1: device descriptor read/64, error -71 [ 551.682947][T10765] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1527'. [ 551.779793][T10771] [U]  [ 551.782831][T10771] [U] K{‘ [ 551.786844][T10771] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 551.794415][T10771] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 551.810956][T10771] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 551.822791][T10771] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 551.860592][T10771] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 551.860966][T10771] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 551.861474][T10771] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 551.862227][T10771] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 551.976929][T10771] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 551.977161][T10771] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 551.977200][T10771] [U] 22½“Æ©ÐÛ©X?0;3U± [ 551.978064][T10771] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 551.978235][T10771] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 551.978362][T10771] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 551.978439][T10771] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 551.978635][T10771] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 551.978650][T10771] [U] ¹ EC [ 551.978843][T10771] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 552.116471][ T5848] usb 5-1: device descriptor read/64, error -71 [ 552.141068][T10770] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 552.256632][ T5848] usb usb5-port1: attempt power cycle [ 552.493548][T10786] can0: slcan on ttyS3. [ 552.619961][ T5848] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 552.653584][ T5848] usb 5-1: device descriptor read/8, error -71 [ 552.708301][T10783] can0 (unregistered): slcan off ttyS3. [ 552.907932][ T5848] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 552.941365][ T5848] usb 5-1: device descriptor read/8, error -71 [ 553.025450][ T5930] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 553.074312][ T5848] usb usb5-port1: unable to enumerate USB device [ 553.197923][ T5930] usb 3-1: not running at top speed; connect to a high speed hub [ 553.217041][ T5930] usb 3-1: config 8 has an invalid interface number: 247 but max is 0 [ 553.229805][ T5930] usb 3-1: config 8 has no interface number 0 [ 553.235953][ T5930] usb 3-1: config 8 interface 247 altsetting 54 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 553.271274][ T5930] usb 3-1: config 8 interface 247 altsetting 54 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 553.291428][ T5930] usb 3-1: config 8 interface 247 altsetting 54 has an invalid endpoint descriptor of length 2, skipping [ 553.303051][ T5930] usb 3-1: config 8 interface 247 altsetting 54 has an invalid descriptor for endpoint zero, skipping [ 553.317165][ T5930] usb 3-1: config 8 interface 247 altsetting 54 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 553.329281][ T5930] usb 3-1: config 8 interface 247 altsetting 54 endpoint 0x2 has invalid wMaxPacketSize 0 [ 553.346159][ T5930] usb 3-1: config 8 interface 247 altsetting 54 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 553.359791][ T5930] usb 3-1: config 8 interface 247 has no altsetting 0 [ 553.380026][ T5930] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 6.6d [ 553.402606][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.424243][ T5930] usb 3-1: Product: syz [ 553.428418][ T5930] usb 3-1: Manufacturer: syz [ 553.437322][ T5930] usb 3-1: SerialNumber: syz [ 553.458662][T10796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 553.517492][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 553.688386][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 553.702810][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 553.708884][ T5930] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 553.726275][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.744873][ T9] usb 2-1: Product: syz [ 553.753782][ T9] usb 2-1: Manufacturer: syz [ 553.763057][ T9] usb 2-1: SerialNumber: syz [ 553.794206][ T9] usb 2-1: config 0 descriptor?? [ 553.816389][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 553.832109][ T5930] usb 3-1: USB disconnect, device number 77 [ 553.895455][ T8761] udevd[8761]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.247/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.048239][ T9] gspca_stk1135: reg_w 0x0 err -71 [ 554.059152][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 554.073341][ T9] gspca_stk1135: Sensor write failed [ 554.086046][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 554.103243][ T9] gspca_stk1135: Sensor write failed [ 554.112575][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 554.123095][ T9] gspca_stk1135: Sensor read failed [ 554.130299][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 554.136774][T10825] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1536'. [ 554.145975][ T9] gspca_stk1135: Sensor read failed [ 554.151503][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 554.158121][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 554.165591][ T9] gspca_stk1135: Sensor read failed [ 554.170969][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 554.177530][ T9] gspca_stk1135: Sensor read failed [ 554.214913][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 554.228055][ T9] gspca_stk1135: Sensor write failed [ 554.242900][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 554.252590][ T9] gspca_stk1135: Sensor write failed [ 554.258925][ T9] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 554.275262][ T9] usb 2-1: USB disconnect, device number 81 [ 554.450622][T10831] IPVS: persistence engine module ip_vs_pe_ not found [ 554.769862][ T9] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 554.794382][T10855] overlayfs: overlapping lowerdir path [ 554.809771][T10855] overlayfs: overlapping lowerdir path [ 554.817218][T10855] overlayfs: overlapping lowerdir path [ 554.827959][T10855] overlayfs: overlapping lowerdir path [ 554.835076][T10855] overlayfs: overlapping lowerdir path [ 554.842035][T10855] overlayfs: overlapping lowerdir path [ 554.909437][T10863] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1549'. [ 554.964190][ T9] usb 2-1: config 9 has an invalid interface number: 1 but max is 0 [ 554.978031][ T9] usb 2-1: config 9 has no interface number 0 [ 554.987371][ T9] usb 2-1: config 9 interface 1 has no altsetting 0 [ 555.005085][ T9] usb 2-1: string descriptor 0 read error: -22 [ 555.012774][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 555.030303][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.070608][ T9] cx231xx 2-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 555.112723][ T9] cx231xx 2-1:9.1: Not found matching IAD interface [ 555.337389][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 555.338325][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 555.407204][ T5955] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 555.559788][ T44] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 555.581131][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 555.587652][ T5955] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 555.596118][ T5955] usb 5-1: config 0 has no interface number 0 [ 555.602214][ T5955] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 555.613684][ T5955] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 555.622699][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 555.630706][ T5955] usb 5-1: Manufacturer: syz [ 555.635355][ T5955] usb 5-1: SerialNumber: syz [ 555.643212][ T5955] usb 5-1: config 0 descriptor?? [ 555.721977][ T44] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 555.730266][ T44] usb 3-1: config 0 has no interface number 0 [ 555.738399][ T44] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 555.748535][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.756588][ T44] usb 3-1: Product: syz [ 555.760752][ T44] usb 3-1: Manufacturer: syz [ 555.765491][ T44] usb 3-1: SerialNumber: syz [ 555.773712][ T44] usb 3-1: config 0 descriptor?? [ 555.864486][ T5955] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 555.875095][ T5955] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 555.889806][ T5955] usb 5-1: USB disconnect, device number 77 [ 555.994626][ T44] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 556.010614][ T44] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 556.021218][ T44] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 556.030035][ T44] usb 3-1: media controller created [ 556.038822][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.089782][ T44] DVB: Unable to find symbol dib7000p_attach() [ 556.099015][ T44] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 556.110760][ T44] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 556.125776][ T44] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 556.134848][ T44] usb 3-1: media controller created [ 556.143704][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.158877][ T44] dib0700: the master dib7090 has to be initialized first [ 556.166067][ T44] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 556.232102][T10877] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 556.244202][ T44] rc_core: IR keymap rc-dib0700-rc5 not found [ 556.250291][ T44] Registered IR keymap rc-empty [ 556.265177][T10877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.276573][ T44] dvb-usb: could not initialize remote control. [ 556.282833][ T44] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 556.284329][T10877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.325113][ T44] usb 3-1: USB disconnect, device number 78 [ 556.381714][ T44] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 556.737266][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 556.896485][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 556.905012][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 556.914261][ T5147] Bluetooth: hci2: command 0x0405 tx timeout [ 556.921228][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 556.930019][ T9] usb 5-1: SerialNumber: syz [ 556.936512][ T9] usb 5-1: config 0 descriptor?? [ 556.945816][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 556.955549][ T9] usb 5-1: Detected FT232A [ 556.961768][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 557.161066][ T5930] usb 5-1: USB disconnect, device number 78 [ 557.167164][ T44] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 557.177558][ T5930] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 557.188785][ T5930] ftdi_sio 5-1:0.0: device disconnected [ 557.345683][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 557.352396][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.362657][ T44] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 557.376232][ T44] usb 3-1: config 1 interface 0 has no altsetting 0 [ 557.384853][ T44] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 557.394593][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.402659][ T44] usb 3-1: Product: syz [ 557.406817][ T44] usb 3-1: Manufacturer: syz [ 557.411454][ T44] usb 3-1: SerialNumber: syz [ 557.622467][ T9] usb 2-1: USB disconnect, device number 82 [ 557.647199][ T44] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 557.663163][ T44] usb 3-1: USB disconnect, device number 79 [ 557.962369][T10926] tipc: Enabling of bearer rejected, failed to enable media [ 558.030978][ T5864] Bluetooth: hci2: unexpected event for opcode 0x0002 [ 558.035354][T10930] PKCS8: Unsupported PKCS#8 version [ 558.137328][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 558.309165][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 558.315766][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 558.327082][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 558.336213][ T5955] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 558.343868][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.355372][ T9] usb 2-1: config 0 descriptor?? [ 558.524200][ T5955] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 558.532381][ T5955] usb 5-1: config 0 has no interface number 0 [ 558.538693][ T5955] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 558.549666][ T5955] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 558.560699][ T5955] usb 5-1: config 0 interface 12 has no altsetting 0 [ 558.570881][ T5955] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 558.580191][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.588430][ T5955] usb 5-1: Product: syz [ 558.592621][ T5955] usb 5-1: Manufacturer: syz [ 558.598088][ T5955] usb 5-1: SerialNumber: syz [ 558.607362][ T5955] usb 5-1: config 0 descriptor?? [ 558.614330][T10932] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 558.622630][T10932] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 558.641712][ T5955] f81534 5-1:0.12: unsupported endpoint max packet size [ 558.814070][ T9] lua 0003:1E7D:2C2E.0012: unbalanced collection at end of report description [ 558.824923][ T9] lua 0003:1E7D:2C2E.0012: parse failed [ 558.830866][ T9] lua 0003:1E7D:2C2E.0012: probe with driver lua failed with error -22 [ 558.873104][T10932] syzkaller1: entered promiscuous mode [ 558.887644][T10932] syzkaller1: entered allmulticast mode [ 558.901435][T10932] netlink: 'syz.4.1572': attribute type 5 has an invalid length. [ 558.911502][T10932] netlink: 'syz.4.1572': attribute type 9 has an invalid length. [ 559.029407][ T44] usb 5-1: USB disconnect, device number 79 [ 559.216588][ T5848] usb 2-1: USB disconnect, device number 83 [ 559.281228][ T5930] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 559.442107][ T5930] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 559.450742][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.459745][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.471893][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.480583][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.490080][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.500996][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.508585][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.517521][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.528559][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.536002][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.544960][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.555965][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.563802][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.572753][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.584660][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.595984][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.605305][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.620566][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.630505][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.640214][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.654714][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.662643][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.672067][ T5930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.683774][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.707769][ T5930] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 559.717907][ T5930] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 559.727259][ T5930] usb 3-1: Product: syz [ 559.732865][ T5930] usb 3-1: Manufacturer: syz [ 559.737480][ T5930] usb 3-1: SerialNumber: syz [ 559.747512][ T5930] usb 3-1: config 0 descriptor?? [ 559.768263][ T5930] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 559.901667][ T5848] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 559.937243][T10987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.032927][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 560.040490][ T5930] usb 3-1: USB disconnect, device number 80 [ 560.049204][ T5930] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 560.075093][ T5848] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.085799][ T5848] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.099110][ T5848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 560.108177][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.136799][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 560.297239][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 560.304645][ T9] usb 2-1: config 2 has an invalid interface number: 89 but max is 0 [ 560.315318][ T9] usb 2-1: config 2 has no interface number 0 [ 560.322476][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=cf55, bcdDevice=92.ae [ 560.331859][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.338538][ T5848] usb 5-1: GET_CAPABILITIES returned 0 [ 560.346871][ T5848] usbtmc 5-1:16.0: can't read capabilities [ 560.349383][ T9] option 2-1:2.89: GSM modem (1-port) converter detected [ 560.572321][ T5848] usb 2-1: USB disconnect, device number 84 [ 560.582548][ T5848] option 2-1:2.89: device disconnected [ 560.595187][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1590'. [ 560.629639][T10994] virt_wifi0 speed is unknown, defaulting to 1000 [ 560.943118][ T9] usb 5-1: USB disconnect, device number 80 [ 561.259732][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 561.433230][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 561.462849][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 561.470652][ T10] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 561.491197][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.513016][ T10] usb 3-1: config 0 descriptor?? [ 561.647690][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.657921][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 561.669269][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.681364][ T9] usb 2-1: config 0 descriptor?? [ 562.137950][ T9] wacom 0003:056A:00BA.0014: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 562.151580][ T9] wacom 0003:056A:00BA.0014: hidraw0: USB HID v0.00 Device [HID 056a:00ba] on usb-dummy_hcd.1-1/input0 [ 562.168205][ T9] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00BA.0014/input/input24 [ 562.351461][ T44] usb 2-1: USB disconnect, device number 85 [ 562.397605][ T10] letsketch 0003:6161:4D15.0013: Device info: 㡵 [ 562.612121][ T10] letsketch 0003:6161:4D15.0013: Device info: 劸 [ 562.828920][ T10] letsketch 0003:6161:4D15.0013: Device info:   [ 563.058341][T11000] netlink: 'syz.2.1591': attribute type 12 has an invalid length. [ 563.238212][ T5848] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 563.307256][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.317477][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.358177][ T10] usb 3-1: Max retries (5) exceeded reading string descriptor 2 [ 563.365970][ T10] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -71 [ 563.378706][ T10] usb 3-1: USB disconnect, device number 81 [ 563.423577][ T5848] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 563.434702][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.442853][ T5848] usb 5-1: Product: syz [ 563.447016][ T5848] usb 5-1: Manufacturer: syz [ 563.451594][ T5848] usb 5-1: SerialNumber: syz [ 563.458189][ T5848] usb 5-1: config 0 descriptor?? [ 563.548205][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 563.679610][ T5848] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 563.719214][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 563.728545][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 563.738037][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.746527][ T9] usb 2-1: Product: syz [ 563.750699][ T9] usb 2-1: Manufacturer: syz [ 563.756108][ T9] usb 2-1: SerialNumber: syz [ 563.763427][ T9] usb 2-1: config 0 descriptor?? [ 563.770515][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 563.787063][ T9] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 563.794614][ T9] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 563.794614][ T9] Please send a copy of this message to and [ 563.898037][ T5848] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 563.913368][ T5848] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 563.920150][ T5848] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 563.985937][T11051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.001499][ T44] usb 2-1: USB disconnect, device number 86 [ 564.021297][ T5848] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -8 [ 564.114676][T11033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.124437][T11033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.133103][ T9] usb 5-1: USB disconnect, device number 81 [ 564.262089][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.284781][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.446313][ T5956] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 564.906181][ T44] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 565.071704][T11093] net veth1_virt_wifi : renamed from virt_wifi0 [ 565.113770][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.150527][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.175533][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.189559][T11097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1620'. [ 565.199826][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.208943][T11098] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 565.208943][T11098] The task syz.2.1619 (11098) triggered the difference, watch for misbehavior. [ 565.210066][ T44] usb 2-1: Product: syz [ 565.232900][T11097] tmpfs: Group quota inode hardlimit too large. [ 565.249219][ T44] usb 2-1: Manufacturer: syz [ 565.255543][ T44] usb 2-1: SerialNumber: syz [ 565.671488][T11112] netlink: 'syz.1.1613': attribute type 2 has an invalid length. [ 565.680566][T11112] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1613'. [ 565.913293][ T44] usb 2-1: 0:2 : does not exist [ 566.083333][T11118] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1626'. [ 566.097259][T11118] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 566.133636][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.151675][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.207103][ T44] usb 2-1: USB disconnect, device number 87 [ 566.617329][ T5956] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 566.777822][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 566.790381][ T5956] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.809410][ T5956] usb 3-1: config 0 has no interface number 0 [ 566.820560][ T5956] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 566.828076][T11136] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 566.845513][ T5956] usb 3-1: config 0 interface 1 has no altsetting 0 [ 566.866112][ T5956] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 566.896937][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.915535][ T5956] usb 3-1: Product: syz [ 566.922463][ T5956] usb 3-1: Manufacturer: syz [ 566.927141][ T5956] usb 3-1: SerialNumber: syz [ 566.947939][ T5956] usb 3-1: config 0 descriptor?? [ 567.182721][ T5956] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 567.192472][ T5956] cx231xx 3-1:0.1: Failed to read PCB config [ 567.199592][ T5956] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 567.211148][ T5956] usb 3-1: USB disconnect, device number 83 [ 567.430884][ T44] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 567.592353][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.603367][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.613135][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.625990][ T44] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 567.635123][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.645947][ T44] usb 2-1: config 0 descriptor?? [ 567.723652][T11153] binder: BINDER_SET_CONTEXT_MGR already set [ 567.730247][T11153] binder: 11151:11153 ioctl 4018620d 200000000280 returned -16 [ 567.739540][T11152] binder: 11151:11152 ioctl c0306201 200000000640 returned -22 [ 567.739577][T11153] binder: 11151:11153 ioctl c0306201 200000000640 returned -22 [ 567.748333][ T5956] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 567.873408][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.887427][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.921950][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 567.942444][ T5956] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.952493][ T5956] usb 3-1: config 0 has no interface number 0 [ 567.958694][ T5956] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 567.970204][ T5956] usb 3-1: config 0 interface 1 has no altsetting 0 [ 567.990536][ T5956] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 568.017661][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.033485][ T5956] usb 3-1: Product: syz [ 568.037847][ T5956] usb 3-1: Manufacturer: syz [ 568.046127][ T5956] usb 3-1: SerialNumber: syz [ 568.055744][ T5956] usb 3-1: config 0 descriptor?? [ 568.122387][ T44] uclogic 0003:28BD:0055.0015: interface is invalid, ignoring [ 568.181193][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1642'. [ 568.190540][T11173] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1642'. [ 568.201586][T11173] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1642'. [ 568.211263][T11173] hsr_slave_0: left promiscuous mode [ 568.217387][T11173] hsr_slave_1: left promiscuous mode [ 568.295709][ T5956] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 568.307514][ T5956] cx231xx 3-1:0.1: bad scenario!!!!! [ 568.307514][ T5956] config_info=0 [ 568.316534][ T5956] cx231xx 3-1:0.1: Failed to read PCB config [ 568.336092][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.348602][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.359162][ T5956] usb 2-1: USB disconnect, device number 88 [ 568.399578][T11175] : entered promiscuous mode [ 568.527358][ T9] usb 3-1: USB disconnect, device number 84 [ 568.874408][ T44] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 568.941104][T11202] tipc: Enabling of bearer rejected, failed to enable media [ 569.034015][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 569.048234][ T44] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 569.062750][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.071261][ T44] usb 5-1: Product: syz [ 569.074607][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.075643][ T44] usb 5-1: Manufacturer: syz [ 569.081829][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.093610][ T44] usb 5-1: SerialNumber: syz [ 569.117978][ T44] usb 5-1: config 0 descriptor?? [ 569.135314][ T44] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 569.184473][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 569.206384][ T9] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 569.640293][T11184] loop2: detected capacity change from 0 to 7 [ 569.652282][ T6017] Dev loop2: unable to read RDB block 7 [ 569.660027][ T6017] loop2: unable to read partition table [ 569.665949][ T6017] loop2: partition table beyond EOD, truncated [ 569.675423][T11184] Dev loop2: unable to read RDB block 7 [ 569.685825][T11184] loop2: unable to read partition table [ 569.693654][T11184] loop2: partition table beyond EOD, truncated [ 569.704983][T11216] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1656'. [ 569.725717][T11184] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 569.768787][T11216] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1656'. [ 570.488413][ T5956] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 570.670189][ T5956] usb 2-1: Invalid ep0 maxpacket: 32 [ 570.709098][ T5197] Dev loop2: unable to read RDB block 7 [ 570.714866][ T5197] loop2: unable to read partition table [ 570.720970][ T5197] loop2: partition table beyond EOD, truncated [ 570.784904][ T44] gspca_ov534_9: reg_r err -32 [ 570.819954][ T5956] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 570.980290][ T5956] usb 2-1: Invalid ep0 maxpacket: 32 [ 570.985824][ T5956] usb usb2-port1: attempt power cycle [ 570.991015][ T5930] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 571.076487][ T44] gspca_ov534_9: Unknown sensor 0000 [ 571.076572][ T44] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 571.151393][ T5930] usb 3-1: device descriptor read/64, error -71 [ 571.355390][ T5956] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 571.387620][ T5956] usb 2-1: Invalid ep0 maxpacket: 32 [ 571.409524][ T5930] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 571.526891][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 571.536767][ T5956] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 571.537604][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 571.552475][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 571.560565][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 571.569171][ T5930] usb 3-1: device descriptor read/64, error -71 [ 571.575622][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 571.595442][ T5956] usb 2-1: Invalid ep0 maxpacket: 32 [ 571.606459][ T5956] usb usb2-port1: unable to enumerate USB device [ 571.649089][T11240] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.686515][ T5930] usb usb3-port1: attempt power cycle [ 571.850425][T11240] chnl_net:caif_netlink_parms(): no params data found [ 571.912619][ T5956] usb 5-1: USB disconnect, device number 82 [ 572.043220][T11240] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.051788][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.059042][T11240] bridge_slave_0: entered allmulticast mode [ 572.060540][ T5930] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 572.069929][T11240] bridge_slave_0: entered promiscuous mode [ 572.083852][T11240] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.091066][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.100392][T11240] bridge_slave_1: entered allmulticast mode [ 572.103872][ T5930] usb 3-1: device descriptor read/8, error -71 [ 572.109096][T11240] bridge_slave_1: entered promiscuous mode [ 572.187943][T11240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.203818][T11240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.238438][T11254] Invalid source name [ 572.266427][T11240] team0: Port device team_slave_0 added [ 572.276153][T11240] team0: Port device team_slave_1 added [ 572.331331][T11240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.349523][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.375653][ T5930] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 572.398553][T11240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.410767][ T5930] usb 3-1: device descriptor read/8, error -71 [ 572.419237][T11240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.426341][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.452394][T11240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.531216][ T5930] usb usb3-port1: unable to enumerate USB device [ 572.552936][T11240] hsr_slave_0: entered promiscuous mode [ 572.559881][T11240] hsr_slave_1: entered promiscuous mode [ 572.568859][T11240] debugfs: 'hsr0' already exists in 'hsr' [ 572.575094][T11240] Cannot create hsr debugfs directory [ 572.753848][T11240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.836788][T11240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.909584][T11240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.958622][ T5930] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 572.985042][T11240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.053765][ T6073] dummy0: left allmulticast mode [ 573.059191][ T6073] bridge0: port 4(dummy0) entered disabled state [ 573.067261][ T6073] bond0: left allmulticast mode [ 573.072132][ T6073] bond_slave_0: left allmulticast mode [ 573.078157][ T6073] bond_slave_1: left allmulticast mode [ 573.083632][ T6073] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 573.092435][ T6073] bridge0: port 3(bond0) entered disabled state [ 573.107654][ T6073] bridge_slave_1: left allmulticast mode [ 573.113490][ T6073] bridge_slave_1: left promiscuous mode [ 573.119749][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.121464][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 573.137886][ T5930] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 573.147033][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.148107][ T6073] bridge_slave_0: left promiscuous mode [ 573.162477][ T5930] usb 5-1: config 0 descriptor?? [ 573.166926][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.497620][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.507078][ T6073] bond_slave_0: left promiscuous mode [ 573.516010][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.524820][ T6073] bond_slave_1: left promiscuous mode [ 573.534284][ T6073] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 573.542738][ T6073] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 573.553906][ T6073] bond0 (unregistering): Released all slaves [ 573.611258][ T5930] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 573.619753][T11240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 573.623769][ T5930] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 573.634409][ T5930] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 573.641377][ T5930] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 573.649312][T11240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 573.650515][ T5930] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 573.663128][ T5930] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 573.670142][ T5930] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 573.680277][ T5930] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 573.687505][ T5930] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 573.689812][ T6073] tipc: Disabling bearer [ 573.710985][ T6073] tipc: Left network mode [ 573.712676][T11240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 573.723109][ T5930] elecom 0003:056E:00E6.0017: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.4-1/input0 [ 573.753798][T11240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 573.760764][ T5864] Bluetooth: hci4: command tx timeout [ 573.835409][ T10] usb 5-1: USB disconnect, device number 83 [ 573.847582][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 573.860085][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 573.860101][ T30] audit: type=1326 audit(1762062114.540:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 573.898051][ T30] audit: type=1326 audit(1762062114.540:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 573.927876][ T30] audit: type=1326 audit(1762062114.540:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 573.952135][ T30] audit: type=1326 audit(1762062114.540:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 573.975038][ T30] audit: type=1326 audit(1762062114.540:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 574.001593][ T30] audit: type=1326 audit(1762062114.540:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 574.026159][ T30] audit: type=1326 audit(1762062114.540:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 574.038852][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 574.051936][ T30] audit: type=1326 audit(1762062114.540:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 574.078672][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 574.080667][ T30] audit: type=1326 audit(1762062114.540:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 574.091295][ T9] usb 2-1: config 0 has no interface number 0 [ 574.120232][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 574.129947][ T30] audit: type=1326 audit(1762062114.540:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11255 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8418efc9 code=0x7fc00000 [ 574.157984][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 574.173090][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.180336][T11240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.203084][ T9] usb 2-1: Product: syz [ 574.207905][ T9] usb 2-1: Manufacturer: syz [ 574.221620][ T9] usb 2-1: SerialNumber: syz [ 574.226911][ T6073] hsr_slave_0: left promiscuous mode [ 574.229999][ T9] usb 2-1: config 0 descriptor?? [ 574.241430][ T6073] hsr_slave_1: left promiscuous mode [ 574.250059][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.259908][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.270288][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.280356][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.307634][ T6073] veth1_macvtap: left promiscuous mode [ 574.314473][ T6073] veth0_macvtap: left promiscuous mode [ 574.322369][ T6073] veth1_vlan: left promiscuous mode [ 574.329201][ T6073] veth0_vlan: left promiscuous mode [ 574.437734][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 574.454873][T11260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.479938][T11260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.493051][T11260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.512476][T11260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.524386][T11260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.534620][T11260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.547969][T11260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.557380][ T6073] pim6reg (unregistering): left allmulticast mode [ 574.558615][T11260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.576254][T11260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.587698][T11260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.624149][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 574.633028][ T10] usb 3-1: no configurations [ 574.644502][ T10] usb 3-1: can't read configurations, error -22 [ 574.662318][ T9] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 574.670173][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 574.677464][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 574.686913][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 574.728788][ T9] usb 2-1: USB disconnect, device number 93 [ 574.808959][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 574.872835][ T5903] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 574.979911][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 574.986812][ T10] usb 3-1: no configurations [ 574.992245][ T10] usb 3-1: can't read configurations, error -22 [ 574.998909][ T10] usb usb3-port1: attempt power cycle [ 575.035178][ T5903] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 575.043490][ T5903] usb 5-1: config 0 has no interface number 0 [ 575.050016][ T5903] usb 5-1: config 0 interface 226 has no altsetting 0 [ 575.059829][ T5903] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 575.070207][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.080046][ T5903] usb 5-1: Product: syz [ 575.084215][ T5903] usb 5-1: Manufacturer: syz [ 575.090940][ T5903] usb 5-1: SerialNumber: syz [ 575.098372][ T5903] usb 5-1: config 0 descriptor?? [ 575.140454][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 575.299104][T11240] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.316010][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.322040][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 575.323189][ T6957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.342154][T11273] tmpfs: Bad value for 'mpol' [ 575.353537][ T9] usb 2-1: device descriptor read/all, error -61 [ 575.360932][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.368109][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.370288][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 575.393117][ T5903] go7007 5-1:0.226: probe with driver go7007 failed with error -12 [ 575.407993][ T5903] usb 5-1: USB disconnect, device number 84 [ 575.432101][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 575.446320][ T10] usb 3-1: no configurations [ 575.458920][ T10] usb 3-1: can't read configurations, error -22 [ 575.525162][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 575.607038][T11240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.622787][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 575.656500][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 575.662825][T11240] veth0_vlan: entered promiscuous mode [ 575.665789][ T10] usb 3-1: no configurations [ 575.672917][ T9] usb 2-1: device descriptor read/64, error -71 [ 575.680896][ T10] usb 3-1: can't read configurations, error -22 [ 575.684943][T11240] veth1_vlan: entered promiscuous mode [ 575.694275][ T10] usb usb3-port1: unable to enumerate USB device [ 575.722030][T11240] veth0_macvtap: entered promiscuous mode [ 575.731657][T11240] veth1_macvtap: entered promiscuous mode [ 575.747737][T11240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.759651][T11240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.777149][ T6073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.787026][ T6073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.796234][ T9] usb usb2-port1: attempt power cycle [ 575.802484][ T6073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.820453][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.871073][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.884036][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.916797][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.925993][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.996869][T11286] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 576.004292][ T5864] Bluetooth: hci4: command tx timeout [ 576.098785][T11293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.157253][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 576.178315][ T9] usb 2-1: device descriptor read/8, error -71 [ 576.241688][ T5903] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 576.435840][ T5903] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 576.444974][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 576.452593][ T5903] usb 5-1: config 0 has no interface number 0 [ 576.458954][ T5903] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 576.469188][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.477776][ T9] usb 2-1: device descriptor read/8, error -71 [ 576.485551][ T5903] usb 5-1: config 0 descriptor?? [ 576.494601][ T5903] usb 5-1: selecting invalid altsetting 1 [ 576.503133][ T5903] dvb_ttusb_budget: ttusb_init_controller: error [ 576.510038][ T5903] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 576.558088][ T5903] DVB: Unable to find symbol cx22700_attach() [ 576.589211][ T5903] DVB: Unable to find symbol tda10046_attach() [ 576.599784][ T9] usb usb2-port1: unable to enumerate USB device [ 576.606175][ T5903] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 576.677773][T11293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.712472][ T796] usb 5-1: USB disconnect, device number 85 [ 576.867410][T11293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.114774][T11293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.566273][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.581911][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.596426][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.617340][ T1148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.642601][ T5930] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 577.738802][ T796] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 577.815275][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.825729][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 577.837284][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 577.848646][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 577.859485][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.875495][ T5930] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 577.884758][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.892945][ T5930] usb 5-1: Product: syz [ 577.897083][ T5930] usb 5-1: Manufacturer: syz [ 577.901718][ T5930] usb 5-1: SerialNumber: syz [ 577.911545][ T5930] usb 5-1: config 0 descriptor?? [ 577.917485][ T796] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.933673][ T796] usb 3-1: config 0 has no interface number 0 [ 577.934127][T11301] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 577.950938][ T796] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 577.960946][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.972784][ T796] usb 3-1: Product: syz [ 577.980771][ T796] usb 3-1: Manufacturer: syz [ 577.987154][ T796] usb 3-1: SerialNumber: syz [ 578.007266][ T796] usb 3-1: config 0 descriptor?? [ 578.027566][ T5930] rc_core: IR keymap rc-xbox-dvd not found [ 578.033460][ T5930] Registered IR keymap rc-empty [ 578.042016][ T5930] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 578.052792][ T5930] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 578.102397][ T5903] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 578.169571][ T5955] usb 5-1: USB disconnect, device number 86 [ 578.169698][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 578.210692][ T5864] Bluetooth: hci4: command tx timeout [ 578.247880][ T796] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 578.258462][ T796] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.262780][ T5903] usb 1-1: device descriptor read/64, error -71 [ 578.269464][ T796] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 578.282966][ T796] usb 3-1: media controller created [ 578.296521][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.359161][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 578.530180][ T5903] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 578.537895][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 578.545200][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.556255][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.566032][ T9] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 578.575110][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.585217][ T9] usb 2-1: config 0 descriptor?? [ 578.679948][ T5903] usb 1-1: device descriptor read/64, error -71 [ 578.704487][T11299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.715294][T11299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.732169][ T5955] usb 3-1: USB disconnect, device number 93 [ 578.810567][T11311] kAFS: No cell specified [ 578.814457][ T5903] usb usb1-port1: attempt power cycle [ 578.816858][T11311] netlink: 'syz.1.1680': attribute type 29 has an invalid length. [ 578.831178][T11311] netlink: 'syz.1.1680': attribute type 29 has an invalid length. [ 578.839794][T11311] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1680'. [ 578.854542][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 578.860558][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 578.870735][ T9] usb 2-1: USB disconnect, device number 98 [ 579.022122][ T796] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 579.161073][ T796] usb 5-1: device descriptor read/64, error -71 [ 579.214570][ T5903] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 579.247703][ T5903] usb 1-1: device descriptor read/8, error -71 [ 579.395063][T11321] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1683'. [ 579.418985][ T796] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 579.512446][ T5903] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 579.546876][ T5903] usb 1-1: device descriptor read/8, error -71 [ 579.578172][ T796] usb 5-1: device descriptor read/64, error -71 [ 579.669213][ T5903] usb usb1-port1: unable to enumerate USB device [ 579.696321][ T796] usb usb5-port1: attempt power cycle [ 580.059394][ T796] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 580.102932][ T796] usb 5-1: device descriptor read/8, error -71 [ 580.380176][ T796] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 580.420885][ T796] usb 5-1: device descriptor read/8, error -71 [ 580.434005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 580.442723][ T5864] Bluetooth: hci4: command tx timeout [ 580.541046][ T796] usb usb5-port1: unable to enumerate USB device [ 580.804778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 580.818619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 581.150917][ T5903] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 581.322642][ T5903] usb 2-1: config index 0 descriptor too short (expected 38445, got 45) [ 581.331051][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.341225][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.352541][ T5903] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.362403][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 581.369113][ T5903] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 581.380154][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.390487][ T5903] usb 2-1: config 0 descriptor?? [ 581.417521][ T5955] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 581.592782][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 581.603869][ T5955] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 581.612959][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.629661][ T5955] usb 1-1: config 0 descriptor?? [ 581.725016][T11350] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1692'. [ 581.750576][T11350] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1692'. [ 581.910710][ T5903] waterforce 0003:1044:7A4D.0018: item fetching failed at offset 3/7 [ 581.935485][ T5903] waterforce 0003:1044:7A4D.0018: hid parse failed with -22 [ 581.954014][ T5903] waterforce 0003:1044:7A4D.0018: probe with driver waterforce failed with error -22 [ 582.273020][ T5903] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 582.281387][T11348] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1691'. [ 582.296329][T11365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.305267][T11365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.332546][ T5955] usbhid 1-1:0.0: can't add hid device: -71 [ 582.338782][ T5955] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 582.351328][ T5955] usb 1-1: USB disconnect, device number 29 [ 582.433335][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 582.439965][ T5903] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.451417][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 582.458282][ T5903] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 582.468621][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.478583][ T5903] usb 3-1: config 0 descriptor?? [ 582.690084][ T5955] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 582.863373][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 582.871861][ T5955] usb 1-1: not running at top speed; connect to a high speed hub [ 582.880636][ T5955] usb 1-1: config 2 has an invalid interface number: 51 but max is 0 [ 582.888938][ T5955] usb 1-1: config 2 has no interface number 0 [ 582.895147][ T5955] usb 1-1: config 2 interface 51 has no altsetting 0 [ 582.905849][ T5955] usb 1-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=10.57 [ 582.915268][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.923320][ T5955] usb 1-1: Product: syz [ 582.927652][ T5955] usb 1-1: Manufacturer: syz [ 582.932277][ T5955] usb 1-1: SerialNumber: syz [ 582.981488][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 582.987690][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 583.002417][ T5903] usb 3-1: USB disconnect, device number 94 [ 583.144481][T11378] openvswitch: netlink: Key type 54 is out of range max 32 [ 583.153246][T11378] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1699'. [ 583.181258][ T5955] keyspan 1-1:2.51: Keyspan - (without firmware) converter detected [ 583.195702][ T5955] usb 1-1: USB disconnect, device number 30 [ 583.209072][ T5955] keyspan 1-1:2.51: device disconnected [ 583.492115][ T5930] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 583.615997][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1702'. [ 583.658395][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short [ 583.677543][ T5930] usb 5-1: config 9 has an invalid interface number: 33 but max is 0 [ 583.690888][ T5930] usb 5-1: config 9 has no interface number 0 [ 583.698167][ T5930] usb 5-1: config 9 interface 33 has no altsetting 0 [ 583.705535][ T5930] usb 5-1: language id specifier not provided by device, defaulting to English [ 584.119065][ T10] usb 2-1: USB disconnect, device number 99 [ 584.189208][ T796] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 584.208658][ T5955] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 584.336877][ T796] usb 1-1: device descriptor read/64, error -71 [ 584.379640][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 584.386654][ T5955] usb 3-1: config 211 has an invalid interface number: 105 but max is 8 [ 584.395128][ T5955] usb 3-1: config 211 has 1 interface, different from the descriptor's value: 9 [ 584.404480][ T5955] usb 3-1: config 211 has no interface number 0 [ 584.410735][ T5955] usb 3-1: config 211 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 584.420961][ T5955] usb 3-1: config 211 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 584.431167][ T5955] usb 3-1: config 211 interface 105 has no altsetting 0 [ 584.442039][ T5955] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 584.452715][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.460833][ T5955] usb 3-1: Product: syz [ 584.465746][ T5955] usb 3-1: Manufacturer: syz [ 584.470344][ T5955] usb 3-1: SerialNumber: syz [ 584.478981][T11410] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 584.486210][T11410] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 584.507962][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 584.604265][ T796] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 584.646990][ T10] usb 2-1: device descriptor read/64, error -71 [ 584.743346][ T796] usb 1-1: device descriptor read/64, error -71 [ 584.861206][ T796] usb usb1-port1: attempt power cycle [ 584.903634][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 585.053460][ T10] usb 2-1: device descriptor read/64, error -71 [ 585.171232][ T10] usb usb2-port1: attempt power cycle [ 585.224627][ T796] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 585.246390][ T796] usb 1-1: device descriptor read/8, error -71 [ 585.502478][ T796] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 585.525031][ T796] usb 1-1: device descriptor read/8, error -71 [ 585.555988][ T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 585.577843][ T10] usb 2-1: device descriptor read/8, error -71 [ 585.642323][ T796] usb usb1-port1: unable to enumerate USB device [ 585.833981][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 585.856039][ T10] usb 2-1: device descriptor read/8, error -71 [ 585.974119][ T10] usb usb2-port1: unable to enumerate USB device [ 586.336731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 586.775102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 586.977049][ T5930] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=c5.a8 [ 586.994687][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.010610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 587.029918][ T5930] usb 5-1: can't set config #9, error -71 [ 587.042035][ T5930] usb 5-1: USB disconnect, device number 91 [ 587.091556][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 587.113543][T11419] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.156873][ T796] usb 3-1: USB disconnect, device number 95 [ 587.171791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 587.181982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 587.190427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 587.199147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 587.296181][T11421] virt_wifi0 speed is unknown, defaulting to 1000 [ 587.577311][ T796] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 587.739719][ T796] usb 1-1: config index 0 descriptor too short (expected 65248, got 18) [ 587.748268][ T796] usb 1-1: config 40 has an invalid descriptor of length 48, skipping remainder of the config [ 587.758626][ T796] usb 1-1: config 40 has 0 interfaces, different from the descriptor's value: 32 [ 587.770823][ T796] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 587.780139][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.788345][ T796] usb 1-1: Product: syz [ 587.792749][ T796] usb 1-1: Manufacturer: syz [ 587.797731][ T796] usb 1-1: SerialNumber: syz [ 587.812480][ T10] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 587.983487][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 587.990294][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 587.999675][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.014783][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 588.022325][ T10] pvrusb2: ********** [ 588.027602][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 588.038044][ T10] pvrusb2: Important functionality might not be entirely working. [ 588.045855][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 588.059073][ T10] pvrusb2: ********** [ 588.248703][T11421] netlink: 'syz.0.1714': attribute type 1 has an invalid length. [ 588.252998][ T2346] pvrusb2: Invalid write control endpoint [ 588.267193][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 588.313132][ T796] usb 1-1: USB disconnect, device number 35 [ 588.385602][T11447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.399823][ T2346] pvrusb2: Invalid write control endpoint [ 588.417356][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 588.428313][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 588.437956][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 588.448893][ T2346] pvrusb2: Device being rendered inoperable [ 588.458644][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 588.467030][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 588.482296][ T2346] pvrusb2: Attached sub-driver cx25840 [ 588.493979][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 588.504491][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 588.553213][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 588.568849][T11439] pvrusb2: Attempted to execute control transfer when device not ok [ 588.628642][ T10] usb 2-1: USB disconnect, device number 104 [ 588.670866][T11459] binder: 11458:11459 ioctl c0306201 200000000540 returned -22 [ 589.171152][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 589.221078][T11473] batadv_slave_1: entered promiscuous mode [ 589.332766][ T10] usb 1-1: config 0 has an invalid interface number: 71 but max is 0 [ 589.341081][ T10] usb 1-1: config 0 has no interface number 0 [ 589.342575][ T796] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 589.347695][ T10] usb 1-1: config 0 interface 71 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 589.367396][ T10] usb 1-1: config 0 interface 71 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 589.378071][ T10] usb 1-1: config 0 interface 71 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 589.391087][ T10] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0 [ 589.400422][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.408458][ T10] usb 1-1: Product: syz [ 589.412619][ T10] usb 1-1: Manufacturer: syz [ 589.417371][ T10] usb 1-1: SerialNumber: syz [ 589.423815][ T10] usb 1-1: config 0 descriptor?? [ 589.429459][T11462] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 589.437995][ T10] kvaser_usb 1-1:0.71: error -ENODEV: Cannot get usb endpoint(s) [ 589.524935][ T796] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 589.534260][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.543924][ T796] usb 3-1: config 0 descriptor?? [ 589.552647][ T796] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 589.661099][ T10] usb 1-1: USB disconnect, device number 36 [ 589.767171][ T796] gspca_sn9c2028: read1 error 0 [ 590.217938][ T796] gspca_sn9c2028: read1 error -71 [ 590.225522][ T796] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 590.237176][ T796] usb 3-1: USB disconnect, device number 96 [ 591.469790][T11473] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 591.469809][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 592.423059][T11473] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 592.437506][T11473] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 592.444075][T11473] ================================================================== [ 592.452136][T11473] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x92/0x190 [ 592.461154][T11473] Read of size 8 at addr ffff888011a4b578 by task syz.1.1729/11473 [ 592.469021][T11473] [ 592.471333][T11473] CPU: 1 UID: 0 PID: 11473 Comm: syz.1.1729 Not tainted syzkaller #0 PREEMPT(full) [ 592.471346][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 592.471355][T11473] Call Trace: [ 592.471359][T11473] [ 592.471364][T11473] dump_stack_lvl+0x189/0x250 [ 592.471386][T11473] ? __kasan_check_byte+0x12/0x40 [ 592.471407][T11473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.471419][T11473] ? lock_release+0x4b/0x3e0 [ 592.471436][T11473] ? __virt_addr_valid+0x4a5/0x5c0 [ 592.471458][T11473] print_report+0xca/0x240 [ 592.471483][T11473] ? __list_del_entry_valid_or_report+0x92/0x190 [ 592.471503][T11473] kasan_report+0x118/0x150 [ 592.471523][T11473] ? __list_del_entry_valid_or_report+0x92/0x190 [ 592.471537][T11473] __list_del_entry_valid_or_report+0x92/0x190 [ 592.471548][T11473] bt_accept_unlink+0x39/0x260 [ 592.471560][T11473] l2cap_sock_teardown_cb+0x17e/0x490 [ 592.471576][T11473] l2cap_chan_del+0xb5/0x620 [ 592.471593][T11473] l2cap_conn_del+0x323/0x5b0 [ 592.471608][T11473] l2cap_connect_cfm+0x122/0x10c0 [ 592.471623][T11473] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 592.471637][T11473] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 592.471650][T11473] hci_conn_failed+0x1ce/0x340 [ 592.471663][T11473] ? hci_abort_conn_sync+0x24e/0xe30 [ 592.471675][T11473] hci_abort_conn_sync+0x658/0xe30 [ 592.471686][T11473] ? __lock_acquire+0xab9/0xd20 [ 592.471703][T11473] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 592.471714][T11473] ? hci_disconnect_all_sync+0x2e/0x350 [ 592.471729][T11473] ? hci_disconnect_all_sync+0x2e/0x350 [ 592.471741][T11473] ? hci_disconnect_all_sync+0x2e/0x350 [ 592.471754][T11473] hci_disconnect_all_sync+0x1b5/0x350 [ 592.471767][T11473] hci_suspend_sync+0x3fc/0xc90 [ 592.471780][T11473] ? __pfx___mutex_lock+0x10/0x10 [ 592.471794][T11473] ? enable_work+0x258/0x2c0 [ 592.471806][T11473] ? __pfx_hci_suspend_sync+0x10/0x10 [ 592.471820][T11473] ? mgmt_pending_find+0x152/0x170 [ 592.471832][T11473] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 592.471848][T11473] hci_suspend_dev+0x28d/0x530 [ 592.471859][T11473] ? __pfx_hci_suspend_dev+0x10/0x10 [ 592.471868][T11473] ? rcu_barrier+0x474/0x570 [ 592.471882][T11473] hci_suspend_notifier+0xf2/0x2f0 [ 592.471892][T11473] notifier_call_chain+0x1b6/0x3e0 [ 592.471905][T11473] blocking_notifier_call_chain_robust+0x85/0x100 [ 592.471917][T11473] pm_notifier_call_chain_robust+0x2c/0x60 [ 592.471933][T11473] snapshot_open+0x19c/0x280 [ 592.471943][T11473] ? __pfx_snapshot_open+0x10/0x10 [ 592.471951][T11473] misc_open+0x2d5/0x350 [ 592.471968][T11473] chrdev_open+0x4cc/0x5e0 [ 592.471981][T11473] ? __pfx_chrdev_open+0x10/0x10 [ 592.471994][T11473] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 592.472010][T11473] ? __pfx_chrdev_open+0x10/0x10 [ 592.472022][T11473] do_dentry_open+0x953/0x13f0 [ 592.472039][T11473] vfs_open+0x3b/0x340 [ 592.472053][T11473] ? path_openat+0x2ecd/0x3830 [ 592.472063][T11473] path_openat+0x2ee5/0x3830 [ 592.472080][T11473] ? __pfx_path_openat+0x10/0x10 [ 592.472094][T11473] do_filp_open+0x1fa/0x410 [ 592.472103][T11473] ? __lock_acquire+0xab9/0xd20 [ 592.472118][T11473] ? __pfx_do_filp_open+0x10/0x10 [ 592.472132][T11473] ? _raw_spin_unlock+0x28/0x50 [ 592.472144][T11473] ? alloc_fd+0x64c/0x6c0 [ 592.472165][T11473] do_sys_openat2+0x121/0x1c0 [ 592.472181][T11473] ? __pfx_do_sys_openat2+0x10/0x10 [ 592.472198][T11473] ? rcu_is_watching+0x15/0xb0 [ 592.472209][T11473] __x64_sys_openat+0x138/0x170 [ 592.472219][T11473] do_syscall_64+0xfa/0xfa0 [ 592.472233][T11473] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.472246][T11473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.472256][T11473] ? clear_bhb_loop+0x60/0xb0 [ 592.472267][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.472277][T11473] RIP: 0033:0x7ff9d818efc9 [ 592.472288][T11473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.472297][T11473] RSP: 002b:00007ff9d63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.472309][T11473] RAX: ffffffffffffffda RBX: 00007ff9d83e5fa0 RCX: 00007ff9d818efc9 [ 592.472317][T11473] RDX: 0000000000008100 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 592.472324][T11473] RBP: 00007ff9d8211f91 R08: 0000000000000000 R09: 0000000000000000 [ 592.472331][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.472337][T11473] R13: 00007ff9d83e6038 R14: 00007ff9d83e5fa0 R15: 00007ffe4f82b368 [ 592.472348][T11473] [ 592.472353][T11473] [ 592.903780][T11473] Allocated by task 6019: [ 592.908106][T11473] kasan_save_track+0x3e/0x80 [ 592.912786][T11473] __kasan_kmalloc+0x93/0xb0 [ 592.917365][T11473] __kmalloc_noprof+0x41d/0x800 [ 592.922211][T11473] tomoyo_realpath_from_path+0xe3/0x5d0 [ 592.927749][T11473] tomoyo_path_perm+0x213/0x4b0 [ 592.932589][T11473] tomoyo_path_unlink+0xa2/0xe0 [ 592.937435][T11473] security_path_unlink+0x167/0x360 [ 592.942629][T11473] do_unlinkat+0x2c1/0x560 [ 592.947034][T11473] __x64_sys_unlink+0x47/0x50 [ 592.951698][T11473] do_syscall_64+0xfa/0xfa0 [ 592.956196][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.962074][T11473] [ 592.964472][T11473] Freed by task 6019: [ 592.968433][T11473] kasan_save_track+0x3e/0x80 [ 592.973107][T11473] kasan_save_free_info+0x46/0x50 [ 592.978125][T11473] __kasan_slab_free+0x5c/0x80 [ 592.982881][T11473] kfree+0x19a/0x6d0 [ 592.986767][T11473] tomoyo_realpath_from_path+0x598/0x5d0 [ 592.992392][T11473] tomoyo_path_perm+0x213/0x4b0 [ 592.997235][T11473] tomoyo_path_unlink+0xa2/0xe0 [ 593.002095][T11473] security_path_unlink+0x167/0x360 [ 593.007371][T11473] do_unlinkat+0x2c1/0x560 [ 593.011781][T11473] __x64_sys_unlink+0x47/0x50 [ 593.016467][T11473] do_syscall_64+0xfa/0xfa0 [ 593.020965][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.026845][T11473] [ 593.029152][T11473] The buggy address belongs to the object at ffff888011a4a000 [ 593.029152][T11473] which belongs to the cache kmalloc-4k of size 4096 [ 593.043192][T11473] The buggy address is located 1400 bytes to the right of [ 593.043192][T11473] allocated 4096-byte region [ffff888011a4a000, ffff888011a4b000) [ 593.058018][T11473] [ 593.060331][T11473] The buggy address belongs to the physical page: [ 593.066725][T11473] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a48 [ 593.075482][T11473] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 593.083966][T11473] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 593.091497][T11473] page_type: f5(slab) [ 593.095472][T11473] raw: 00fff00000000040 ffff88801b027140 dead000000000122 0000000000000000 [ 593.104046][T11473] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 593.112618][T11473] head: 00fff00000000040 ffff88801b027140 dead000000000122 0000000000000000 [ 593.121278][T11473] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 593.129938][T11473] head: 00fff00000000003 ffffea0000469201 00000000ffffffff 00000000ffffffff [ 593.138592][T11473] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 593.147248][T11473] page dumped because: kasan: bad access detected [ 593.153655][T11473] page_owner tracks the page as allocated [ 593.159349][T11473] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6019, tgid 6019 (udevd), ts 578765106186, free_ts 578713785130 [ 593.179477][T11473] post_alloc_hook+0x240/0x2a0 [ 593.184250][T11473] get_page_from_freelist+0x2365/0x2440 [ 593.189792][T11473] __alloc_frozen_pages_noprof+0x181/0x370 [ 593.195588][T11473] alloc_pages_mpol+0x232/0x4a0 [ 593.200427][T11473] allocate_slab+0x96/0x350 [ 593.204922][T11473] ___slab_alloc+0xe94/0x18a0 [ 593.209591][T11473] __slab_alloc+0x65/0x100 [ 593.213993][T11473] __kmalloc_noprof+0x47d/0x800 [ 593.218837][T11473] tomoyo_realpath_from_path+0xe3/0x5d0 [ 593.224378][T11473] tomoyo_path_perm+0x213/0x4b0 [ 593.229213][T11473] security_inode_getattr+0x12f/0x330 [ 593.234585][T11473] __x64_sys_newfstat+0xfc/0x200 [ 593.239522][T11473] do_syscall_64+0xfa/0xfa0 [ 593.244016][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.249896][T11473] page last free pid 11299 tgid 11298 stack trace: [ 593.256466][T11473] __free_frozen_pages+0xbc8/0xd30 [ 593.261575][T11473] __put_partials+0x146/0x170 [ 593.266329][T11473] put_cpu_partial+0x1f2/0x2e0 [ 593.271085][T11473] __slab_free+0x2b9/0x390 [ 593.275492][T11473] qlist_free_all+0x97/0x140 [ 593.280074][T11473] kasan_quarantine_reduce+0x148/0x160 [ 593.285534][T11473] __kasan_slab_alloc+0x22/0x80 [ 593.290380][T11473] __kmalloc_node_track_caller_noprof+0x522/0x810 [ 593.296786][T11473] kvasprintf+0xdc/0x190 [ 593.301013][T11473] kasprintf+0xd4/0x120 [ 593.305155][T11473] module_remove_driver+0x154/0x1b0 [ 593.310343][T11473] bus_remove_driver+0x22e/0x320 [ 593.315292][T11473] usb_gadget_register_driver_owner+0x223/0x270 [ 593.321526][T11473] raw_ioctl+0x1465/0x4050 [ 593.326037][T11473] __se_sys_ioctl+0xfc/0x170 [ 593.330616][T11473] do_syscall_64+0xfa/0xfa0 [ 593.335114][T11473] [ 593.337424][T11473] Memory state around the buggy address: [ 593.343084][T11473] ffff888011a4b400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 593.351131][T11473] ffff888011a4b480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 593.359179][T11473] >ffff888011a4b500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 593.367230][T11473] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 593.375189][T11473] ffff888011a4b580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 593.383240][T11473] ffff888011a4b600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 593.391370][T11473] ================================================================== [ 593.413463][T11473] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 593.420684][T11473] CPU: 0 UID: 0 PID: 11473 Comm: syz.1.1729 Not tainted syzkaller #0 PREEMPT(full) [ 593.430056][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 593.440112][T11473] Call Trace: [ 593.443394][T11473] [ 593.446326][T11473] dump_stack_lvl+0x99/0x250 [ 593.450930][T11473] ? __asan_memcpy+0x40/0x70 [ 593.455540][T11473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.460748][T11473] ? __pfx__printk+0x10/0x10 [ 593.465350][T11473] vpanic+0x237/0x6d0 [ 593.469333][T11473] ? __pfx_vpanic+0x10/0x10 [ 593.473833][T11473] ? preempt_schedule+0xae/0xc0 [ 593.478693][T11473] ? __pfx_preempt_schedule+0x10/0x10 [ 593.484084][T11473] panic+0xb9/0xc0 [ 593.487808][T11473] ? __pfx_panic+0x10/0x10 [ 593.492231][T11473] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 593.498135][T11473] ? __list_del_entry_valid_or_report+0x92/0x190 [ 593.504458][T11473] check_panic_on_warn+0x89/0xb0 [ 593.509402][T11473] ? __list_del_entry_valid_or_report+0x92/0x190 [ 593.515720][T11473] end_report+0x78/0x160 [ 593.520213][T11473] kasan_report+0x129/0x150 [ 593.524706][T11473] ? __list_del_entry_valid_or_report+0x92/0x190 [ 593.531027][T11473] __list_del_entry_valid_or_report+0x92/0x190 [ 593.537173][T11473] bt_accept_unlink+0x39/0x260 [ 593.541934][T11473] l2cap_sock_teardown_cb+0x17e/0x490 [ 593.547312][T11473] l2cap_chan_del+0xb5/0x620 [ 593.551901][T11473] l2cap_conn_del+0x323/0x5b0 [ 593.556575][T11473] l2cap_connect_cfm+0x122/0x10c0 [ 593.561595][T11473] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 593.567055][T11473] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 593.572504][T11473] hci_conn_failed+0x1ce/0x340 [ 593.577258][T11473] ? hci_abort_conn_sync+0x24e/0xe30 [ 593.582539][T11473] hci_abort_conn_sync+0x658/0xe30 [ 593.587638][T11473] ? __lock_acquire+0xab9/0xd20 [ 593.592488][T11473] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 593.598110][T11473] ? hci_disconnect_all_sync+0x2e/0x350 [ 593.603652][T11473] ? hci_disconnect_all_sync+0x2e/0x350 [ 593.609187][T11473] ? hci_disconnect_all_sync+0x2e/0x350 [ 593.614726][T11473] hci_disconnect_all_sync+0x1b5/0x350 [ 593.620178][T11473] hci_suspend_sync+0x3fc/0xc90 [ 593.625022][T11473] ? __pfx___mutex_lock+0x10/0x10 [ 593.630037][T11473] ? enable_work+0x258/0x2c0 [ 593.634618][T11473] ? __pfx_hci_suspend_sync+0x10/0x10 [ 593.639983][T11473] ? mgmt_pending_find+0x152/0x170 [ 593.645098][T11473] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 593.650742][T11473] hci_suspend_dev+0x28d/0x530 [ 593.655506][T11473] ? __pfx_hci_suspend_dev+0x10/0x10 [ 593.660778][T11473] ? rcu_barrier+0x474/0x570 [ 593.665362][T11473] hci_suspend_notifier+0xf2/0x2f0 [ 593.670465][T11473] notifier_call_chain+0x1b6/0x3e0 [ 593.675574][T11473] blocking_notifier_call_chain_robust+0x85/0x100 [ 593.681983][T11473] pm_notifier_call_chain_robust+0x2c/0x60 [ 593.687792][T11473] snapshot_open+0x19c/0x280 [ 593.692377][T11473] ? __pfx_snapshot_open+0x10/0x10 [ 593.697478][T11473] misc_open+0x2d5/0x350 [ 593.701727][T11473] chrdev_open+0x4cc/0x5e0 [ 593.706142][T11473] ? __pfx_chrdev_open+0x10/0x10 [ 593.711075][T11473] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 593.717403][T11473] ? __pfx_chrdev_open+0x10/0x10 [ 593.722348][T11473] do_dentry_open+0x953/0x13f0 [ 593.727115][T11473] vfs_open+0x3b/0x340 [ 593.731177][T11473] ? path_openat+0x2ecd/0x3830 [ 593.735931][T11473] path_openat+0x2ee5/0x3830 [ 593.740522][T11473] ? __pfx_path_openat+0x10/0x10 [ 593.745457][T11473] do_filp_open+0x1fa/0x410 [ 593.749953][T11473] ? __lock_acquire+0xab9/0xd20 [ 593.754802][T11473] ? __pfx_do_filp_open+0x10/0x10 [ 593.759821][T11473] ? _raw_spin_unlock+0x28/0x50 [ 593.764662][T11473] ? alloc_fd+0x64c/0x6c0 [ 593.768990][T11473] do_sys_openat2+0x121/0x1c0 [ 593.773664][T11473] ? __pfx_do_sys_openat2+0x10/0x10 [ 593.778858][T11473] ? rcu_is_watching+0x15/0xb0 [ 593.783614][T11473] __x64_sys_openat+0x138/0x170 [ 593.788453][T11473] do_syscall_64+0xfa/0xfa0 [ 593.792952][T11473] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.798143][T11473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.804201][T11473] ? clear_bhb_loop+0x60/0xb0 [ 593.808868][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.814750][T11473] RIP: 0033:0x7ff9d818efc9 [ 593.819153][T11473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.838747][T11473] RSP: 002b:00007ff9d63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 593.847152][T11473] RAX: ffffffffffffffda RBX: 00007ff9d83e5fa0 RCX: 00007ff9d818efc9 [ 593.855112][T11473] RDX: 0000000000008100 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 593.863071][T11473] RBP: 00007ff9d8211f91 R08: 0000000000000000 R09: 0000000000000000 [ 593.871028][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.878986][T11473] R13: 00007ff9d83e6038 R14: 00007ff9d83e5fa0 R15: 00007ffe4f82b368 [ 593.886956][T11473] [ 593.890246][T11473] Kernel Offset: disabled [ 593.894556][T11473] Rebooting in 86400 seconds..