last executing test programs: 12m48.179019228s ago: executing program 2 (id=2038): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000440)=0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES8=r4], 0xd) 12m47.341705037s ago: executing program 2 (id=2040): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x1ebe82) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000ef84c32d001700010324bd211d39b16ed0905b7c215bbde63682073da59903a440e6fff6bb0cdeaec0c1280f8f8ec025fb193a14614dbf6777b4f168c2d6535d8e5a240d5ba6ac9b7141f6275d1b322bd1e136a4c567ec198f96000000008885caab88f0e849ef6a4b045e"], 0x14}}, 0x0) 12m46.863755377s ago: executing program 2 (id=2043): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x80, 0x8) write$uinput_user_dev(r1, &(0x7f0000000180)={'syz1\x00', {0xe4e1, 0x1000, 0x4, 0xfff}, 0x4f, [0x7fff, 0x9, 0x0, 0x3ff, 0x0, 0x1, 0x9, 0x1000, 0x7ff, 0x5, 0x5, 0x1, 0x5, 0x1, 0x800, 0x5, 0x1ff, 0xf0, 0xb, 0x9, 0xd, 0x8, 0xe10f, 0x2000, 0x8000, 0x5, 0x0, 0xfffffffa, 0x1000, 0xff, 0x0, 0x2, 0xa80, 0x71d, 0x1, 0x100, 0x949, 0x200, 0x90, 0xfffffe00, 0x400, 0x6, 0x10, 0x8, 0xffff, 0xffffffff, 0x2, 0x8, 0x80000001, 0x8, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x6, 0x7fff, 0xffff, 0x5, 0x1, 0x2, 0x4, 0x7fff], [0x0, 0x40, 0x3, 0x7, 0x3, 0x9, 0xffffffff, 0x6, 0x3, 0xd, 0x7a4f, 0xbd95, 0x1ff, 0x10, 0x9, 0x5, 0xfffffff0, 0x1000, 0x8c, 0x8719, 0x1, 0xb, 0xffff, 0x4, 0x800, 0x4b5, 0x6c9, 0x2, 0xffff616a, 0x9, 0x7, 0x401, 0x5, 0x70b6, 0xc4d5, 0xbd, 0x3, 0x2, 0x3, 0x8, 0x7, 0xa0c, 0x1, 0xa1, 0x2, 0x7, 0x7ff, 0x10001, 0xe, 0x2, 0x559a4997, 0x7736, 0xb, 0x8001, 0x400, 0x80000000, 0x6, 0x6, 0x6d0a, 0x89, 0xb, 0x5, 0x5, 0x2], [0x0, 0xfff, 0x149d, 0x7, 0x3, 0x80, 0x8, 0x4, 0x2, 0x2, 0x4, 0x6, 0xdbd, 0x7fffffff, 0x2, 0x3e93, 0x800, 0x9, 0x5bf, 0x6, 0x3ff, 0xb, 0xc, 0x5, 0x6, 0x0, 0x5, 0x7, 0x9, 0xa9, 0x3, 0x2, 0x4, 0x200, 0x9, 0x0, 0x6, 0x5, 0x1, 0xffffffff, 0x52, 0x7, 0x1, 0xffff116e, 0x0, 0xef, 0x81, 0x6, 0x8, 0x401, 0x3ff, 0x4, 0x1, 0x7f, 0x8, 0x4, 0xffffffff, 0x4, 0x0, 0x6, 0x4, 0x4, 0x4, 0x3], [0x3, 0x3, 0x6, 0x9, 0xff, 0x6, 0x4, 0x5, 0x0, 0x0, 0x8001, 0x7fffffff, 0x8, 0xff, 0x3, 0x4, 0x0, 0x1, 0xa0, 0x800, 0x2, 0x8001, 0x3, 0x81, 0x6, 0x9, 0x8, 0x639, 0x6, 0x9d39, 0x6, 0x8, 0x9, 0x2, 0x5, 0x1, 0x3, 0x30f, 0x2, 0x8001, 0xfffffff9, 0x10000, 0x7fffffff, 0x5, 0x5, 0xa, 0xa96f, 0x3, 0x100, 0x54, 0xff, 0xc, 0xf, 0x7d, 0x9, 0x1, 0x9, 0x8, 0x4, 0x100, 0x1, 0x4, 0x1, 0x5]}, 0x45c) write(r0, &(0x7f0000000140)="41000200010006", 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12m45.862792553s ago: executing program 2 (id=2050): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000dbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000200)={0x1f, @any, 0x9}, 0xa) bind$bt_rfcomm(r3, &(0x7f0000000000), 0xa) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="00160d0000000600d69d0495"], 0x0, 0x0, 0x0, 0x0, 0x0}) 12m44.258752656s ago: executing program 2 (id=2057): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f00000001c0)=""/153, 0x99) sendmmsg$unix(r3, &(0x7f0000001d00)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000700)="2ca95d7403c7a08f57a7af18039eeb7b1ef81311f70e26f8e155353da1557c4b22519af3529bf83654b916eca78871c1533e74c4ac00c06349e69900f23fa652bd366582942a32f3009781f407b4971eb0182bb94c176ee2818ca3591a399075a6ee6e333e6725f897589b5130ae0645b14d40f7c55a609d98b43f198e0679468b7f7d39566084795fe8430fe449537b9a334f01211813fa25cc65", 0x9b}, {&(0x7f00000007c0)="297d531a1e40fb200e9764687cc7dcbb2ee935feaeed7c629030d9641df83389891e7218361a6b97240e15159198b620e03b9ac3fb91b4b9cc8c0eebf3510a385d10ff67caf7bdc96ad3d07e733b85421a6699fd3588fb80dd1043b4e284364c32812937a4c649d741eafbac0525fe930b6b02702cb273f2032c653d1790a01ee3fa2bfdeace448e98be1a62f105c4c28b3191d88faa4dd33f2c0a6fa783377dbe2717191b2fd8bc4401045fa7a2ace4fe6b2407bf328ff4e454d2d7308102bc576872780eedbd49a553dd79c111524400fa1aa07834", 0xd6}, {&(0x7f0000000380)="5dc66db8391da2f6cf71a502e8e1262381f5a26bcf821a2982d9981b8392bb89f439d16f6c2297b309", 0x29}, {&(0x7f0000000440)="774d09bb16a970263be1b6f1d04787c4b5e96dd5ee5007efb52fdfcb2930cd743379e8bf6dc20cb8344834c545ed3b35584b0b4f5db6e766865e93b35934ac72a0a388aaa8a77bc4c0a4ffd990e72fc0986d6d86506fb7637c83e295ebf5", 0x5e}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f00000008c0)="98ad503d016651f2f59c80e6a5fef94d7a960fa494d592196da378d54304974052770d6d214224a8b941b0f59a70f208e5ebc77004d6afc49c9d2e86bfcf027126caa1d236a1f54501f2b35eae534c0629e96cd32ff2b0658574c90b06434b7b3283bff8a060729fa7daeb75c5fd78f7550d763d95c8d6ef3b437734df846f66435e862e297f8666f7fc6ebb1391bbd88e3b075ff59f5c239b7a60ffc7f784ea460dfdef51b2cb403db954f37e60225c9de32f121b94092c56fb8db2758d37018657ec476de96ee728499ff1d7bd83d61d287a47b7bdee6b51", 0xd9}, {&(0x7f00000009c0)="e5f8d92113dabf7b0f9c29fa8ee1cea25c62bac452a4d9", 0x17}], 0x7, &(0x7f0000001c80)=[@rights={{0x24, 0x1, 0x1, [r2, r1, r3, r0, r2]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x70, 0xc890}}], 0x1, 0x40080) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r7 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc040564a, &(0x7f0000000200)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) r8 = socket$inet_icmp(0x2, 0x2, 0x1) accept$inet(r8, &(0x7f0000000000), &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000600)={[0x4, 0x96, 0x6, 0x1ff, 0x7ff, 0x3, 0x5, 0xd4, 0x30d, 0x857d, 0x1, 0x0, 0x93deb10, 0x1, 0x32a, 0x269], 0x4000, 0x146}) shutdown(r5, 0x1) r9 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r9, 0x89e0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000004c0)=0x84) pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000001d00000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="01000000030000000000000000edffff0700030006010000"], 0x54}}, 0x20004010) 12m43.445640652s ago: executing program 2 (id=2060): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) r1 = timerfd_create(0x9, 0x80800) read(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000480)={0x40, 0x8, 0x4, "c8edb4ee"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x2}, 0x0, 0x0}) 12m42.465069981s ago: executing program 32 (id=2060): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) r1 = timerfd_create(0x9, 0x80800) read(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000480)={0x40, 0x8, 0x4, "c8edb4ee"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x2}, 0x0, 0x0}) 4m15.579294684s ago: executing program 3 (id=4566): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x1, 0x8, 0x6, 0x2}, {0xb08, 0xa, 0x2, 0x1ff}]}) socket$qrtr(0x2a, 0x2, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4m15.495974534s ago: executing program 3 (id=4568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x1}) (async) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) 4m15.262442429s ago: executing program 3 (id=4570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x30, 0x2c, 0x0, @local, @ipv4={'\x00', '\xff\xff', @empty}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd941, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x1a}}}}}}}, 0x66) 4m15.049129902s ago: executing program 3 (id=4573): syz_usb_connect(0x6, 0x2d, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) getuid() fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r3, r3, 0x0) (async) statx(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x800, &(0x7f0000000240)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, 0x0) fstat(r4, &(0x7f0000004240)) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) lseek(r6, 0x0, 0xa070d3f783833e7f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r7, r7) (async) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xe0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x6, 0x2, 0x100, 0x7, 0x60, {0x2, 0x9, 0x0, 0x80000000000000ff, 0x8, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x40000a, r11, r12, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x38, 0x1ff, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4\xd4{\x06\xa2a\xb6\"\x91,$\x9c\x97|Cf\x97\xa2\xe8\xc2\x02E\x89\x85V\xc2\x06\x00\x06\x00\x00\x00+\x13'}}]}, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000004200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180800) write$P9_RGETATTR(r13, &(0x7f00000083c0)={0xa0, 0x19, 0x1, {0x0, {0x8}, 0x40, r2, r8, 0xbfeb, 0xa11, 0x5, 0x8, 0x7, 0x4, 0xffffffffffffff45, 0x1, 0xffffffffffffffff, 0xb, 0xb, 0xd, 0x0, 0x8, 0x2}}, 0xa0) getgroups(0x1, &(0x7f0000000540)=[0xee01]) (async) read$FUSE(r0, &(0x7f000000a4c0)={0x2020}, 0x2020) 4m14.93777356s ago: executing program 3 (id=4574): r0 = fanotify_init(0x200, 0x0) (async) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) (async) fanotify_mark(0xffffffffffffffff, 0x455, 0x8000003, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x4008065}, 0x4800) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) open_by_handle_at(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000010000000700b3d4f28e00002862f6149402f4648f666c911c033a63616692e10aea83171d0ea2ba54e1401db9861f758a2ea0788e62588c67832c44555aec092e76ee0d6813b0ba4ae0fb2fb806e251c0474014bb7fd86c9f03638ac1792d0e232373eaddbfd450b9515035cec4c50bb2e4be485cd855b7e19a107ea0fe93a00fa0fb615cd807a9aa8de1baaa58b79cd3bb6c42fed75e6293d36730745c11afc8c6788e2df5ebcac20f6259b92650da2f8a210da29c77f1415aec9b00000049892e933e4180cae7cf1338dd05bc625162d28c802da0998beb3348fc32dc257a2e9112"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fanotify_mark(r0, 0x455, 0x8000003, r1, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) chdir(&(0x7f00000003c0)='./file0\x00') (async) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) (async) socket$nl_generic(0x10, 0x3, 0x10) 4m14.865065729s ago: executing program 3 (id=4575): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x41, 0x1000, &(0x7f0000000300)=""/4096) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="430aeb78") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002f40)=ANY=[@ANYBLOB="120150021913922042070a20c247010203010902120001810874050904b40100ff047506"], &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0x100000, 0x1000, &(0x7f00000e2000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000e0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="440f20c0663504000000440f22c00f01c40f306767f20f0666b9800000c097330f320f32001000000f30ba400066b80008000066efdbe265660f38816500640f2013", 0xfffffffffffffe67}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x60000, 0x0, {}, 0x0, 0x22}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ada237e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000938c00"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000200), 0x8, 0x141000) ioctl$HIDIOCSUSAGE(r5, 0x4018480c, &(0x7f0000000240)={0x2, 0x0, 0xc1, 0x80000000, 0x1ff, 0x9}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0, 0x0}) 3m59.774726149s ago: executing program 33 (id=4575): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x41, 0x1000, &(0x7f0000000300)=""/4096) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="430aeb78") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002f40)=ANY=[@ANYBLOB="120150021913922042070a20c247010203010902120001810874050904b40100ff047506"], &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0x100000, 0x1000, &(0x7f00000e2000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00000e0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="440f20c0663504000000440f22c00f01c40f306767f20f0666b9800000c097330f320f32001000000f30ba400066b80008000066efdbe265660f38816500640f2013", 0xfffffffffffffe67}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x60000, 0x0, {}, 0x0, 0x22}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ada237e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000938c00"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000200), 0x8, 0x141000) ioctl$HIDIOCSUSAGE(r5, 0x4018480c, &(0x7f0000000240)={0x2, 0x0, 0xc1, 0x80000000, 0x1ff, 0x9}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0, 0x0}) 9.566192481s ago: executing program 4 (id=5631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000440)={{@my=0x0, 0x6000000}, 0x0, 0x2, 0x8000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002300)) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x0, 0x2, 0x70, {0x70, 0xd, "90543295bc923a3fcd8f842131d9697a4166dbc089c790e64c9dd2af3b742cf3efc991f686f9c5e01f49460db101cdbcf58f587b11bb8b4e29e545ae854ee853c7db940775d861e826015e8f02fb5fb893ac6771d7dd0077481722bee4e27a7b465d585d716e3f03bdb0a66eb8bd"}}, &(0x7f0000000080)=ANY=[@ANYBLOB="00033700000037031552d4876800c9f03967d2373c640061913b35d40cc5e0b07dcd7502ab69d3d3d5ecf2919371f4482b29cf89f689ff26bd8cc799a6"]}, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)={0x20, 0x14, 0x100, "4f2910c5e78424fc5ba698db280f77f08960fe9fbdd545af60f7de6fe7156f51bd217eac87ee6087c0205c810c8099adeabe7cc90fae920774240c48c9ac3a022ab0d5533fffea940d6a69959201201f5049229f2823266212037debc3482bf305fd775c837a2aed14112f1de295e4ee71d798c1bb32a78b669a3eb28c5eb830bb4ac0975c6b5b18f3ccecaf7eac5b72f6d3e4eb1fee46ac2570401e26b1d08a2ea3e802675064c14c4cceaa1b3fc4ba1b5b1508f31dbb71cc72146565502aea74d6750def69963c25a53519048bd10db1f24c73b9092fde90fddb04de358b2ccee47fe2f0ee65964bc16a293613a43870b75076443b4b6b5fee77f19af80ddd"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0xc0, 0xa1, 0x4}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "30f88415f5ac5f9073d40ab48c7dc375530460bb290cbdd88cd9e4281356d324397064f76cad2c6e2f8a3f0f6ea018"}}) 8.838487437s ago: executing program 1 (id=5632): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="900736ffd7fb87465963b0d3522d82eab665c2832180d084a2b466cc4ea717ab45c96aea10a8c013fdd2a867d155cff2cc400602ee3af3f80c92a078afe315445c352d1695da6c390258ae2e7efc2c02fc161e1b5e271d98a04e5d977b6ca58c3c61f2e559489bcad21796d816c99b330ad4f7f0ff31a95635d4e18731539a4485d53546337f6453f17004a64899aa1c42bceea63fb4bb4a43deb4de7ddf18f773c836c304b2f2edf9c37e2859da3e0f28a1db43866032877a5b3218da48534a923d2b864964cf53bc0156359c23b20c4b5ed905fb9b6dd9178e6110aa63b24a24c71ff171dbf7bb65c26a4f3e3b960e1fe4e5c38c458170e7e5d38a2fa77262a334b70da13159214b59e99043f2d45738cfe619d4e54d9d9d52faad4185dc1461e3de1d4a8e2bac117f496b9198352ed12b367de480013f50733fcce28686f100f105d037fe1d3c387164fd3bb6d9f758e8c35de274cc824e0ef8a4ec4d740cb37a646300158bd9f137d0712242f3ff01641eedbf6207cc3e7b9314e8cd44581f210ae9980710a38a426305d71a732645e48a5faf121177bb16c0253dbba4b6495b2fdf147bf3557edbf1134ad8135eddb75535613f0c13e995f458d7117b7b4484be02dda974d1f894074f5258bc3416e61b41949c2bca7746dd9edc6fc1d0b9305c7ee799be795a7df68f76872046beb4e1ff6d5a62a7177902fdb74cb5d1e104b8852fd4db5ced74b73b68eb138695110452ddf5def0a6961d7010d1b170391e5897f32102ebade663ec2804708f63becf2b7595461d10062df096794e1cb4232cda841f3a86a6d5e50fe8db194bfb3721", 0x253}], 0x1}, 0x84) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9a81}}, './bus\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x3, 0x6, 0x1d, 0x80, 0xff, 0x8, 0x1, 0xd, 0x76, 0x5, 0x7, 0x4, 0x4}, 0xe) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7fff}, &(0x7f00000000c0)=0x8) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r6, 0x29, 0x7, 0x0, &(0x7f0000000dc0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000100)=0xff12) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={r5}, &(0x7f00000001c0)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x253}], 0x1}, 0x84) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) fallocate(r0, 0x0, 0x0, 0x1000f4) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9a81}}, './bus\x00'}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x3, 0x6, 0x1d, 0x80, 0xff, 0x8, 0x1, 0xd, 0x76, 0x5, 0x7, 0x4, 0x4}, 0xe) (async) shutdown(r3, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7fff}, &(0x7f00000000c0)=0x8) (async) socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$inet6_int(r6, 0x29, 0x7, 0x0, &(0x7f0000000dc0)) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000100)=0xff12) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={r5}, &(0x7f00000001c0)=0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) 8.587674309s ago: executing program 1 (id=5636): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x190}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x100000, 0x4, 0x8, 0x80, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x120, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="3e0fc772000f01c40f013066b80ead15a20f23c80f21f866350000e0000f23f866b835e400000f23d80f21f86635000000600f23f80fc71b64660f015cef66b9800000c00f326635010000000f30653665660f50e40fedac0090", 0x5a}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000026000/0x2000)=nil, 0x2000}, 0x4}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x3) 7.850338283s ago: executing program 1 (id=5639): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async) r2 = gettid() (async) syz_usb_connect(0x0, 0x3d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a9074d206960390ff9e80102030109022b000100002000090448010201030200020007"], 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) (async, rerun: 64) read(r3, 0x0, 0x0) (rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async, rerun: 32) tkill(r2, 0x7) (async, rerun: 32) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) recvfrom(r0, 0x0, 0x0, 0x40000102, 0x0, 0x0) (async) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) (async) read(r0, &(0x7f0000002340)=""/232, 0xe8) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x98, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xea0}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7e9a}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x93}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x200048d0}, 0xc0c0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000000000)=0x2) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0), 0x1, 0x0, &(0x7f0000000780)="1f"}) (async, rerun: 32) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0xe2) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x2, 0x0, &(0x7f0000000440)="79cf"}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x9, 0x8, 0x8, 0x5, 0x2}) r9 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f0000000500)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, 0x0}, 0x40000) (async) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200", @ANYRES16], 0x0) 7.800418367s ago: executing program 4 (id=5640): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0xb6, 0x10, 0x68, 0x20, 0xa12, 0x5d10, 0x36a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x1, 0x65, 0xda, 0xcc, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x4, 0x7, '\x00', [@generic={0xfe, 0x21, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4"}, @generic={0x80, 0x4, "09e12e5f"}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@generic={0xff}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0xb8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) syz_open_dev$hidraw(&(0x7f00000002c0), 0xfffffffffffffff8, 0x80000) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.444603557s ago: executing program 4 (id=5646): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0xffffffff, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x9}, {0x1, 0x9, 0x7, 0x0, 0x8, 0x4, 0x49, 0x7f, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x0, 0x2, 0x9, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000500)=ANY=[@ANYBLOB="6b0ee0b3d41b1b", @ANYRES32]) 4.836397733s ago: executing program 1 (id=5653): ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x1, 0x47800000000000, 0x4, 0x6}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000300)={0x10}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x1, 0x47800000000000, 0x4, 0x6}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000300)={0x10}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) 4.713330508s ago: executing program 1 (id=5655): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x40, 0x14, 0x93, "78f89bfe58fc454da2fe6c6ed690f6165adff3bf7b381903281e779384feb8c3df5dffb2d9135116d55f77c4ab047e5fbf4bd993626ecc57bcb1a3db6577af6b8310bf48856fee6adb278fc7eae11440e0dbf1f4a13e972431c3ba0c3906e507a64e71248374da2e02c2359bca7f385429451a9451649e8b26463f18603f0997e649fcbe8b789387873aa69921fb9b12f674a2"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r1, &(0x7f0000002140)={0x0, 0x0, 0x0}, 0x40000040) 4.682161492s ago: executing program 4 (id=5656): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x4168, &(0x7f00000000c0)={0x0, 0x321a, 0x0, 0x3, 0x186}, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="3b1e0b32e56da74cac", 0x9}], 0x1, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r0], 0x10}}], 0x1, 0x1) 3.885828741s ago: executing program 4 (id=5659): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000012c0)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4804}, 0x0) memfd_create(0x0, 0x4d522b8cde7cb5d) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a2102030109021b00020000000009046f0000aad823000904"], 0x0) 2.802015339s ago: executing program 0 (id=5668): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc", 0x40}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f00000012c0)=""/244, 0xf4}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f00000036c0)=""/4110, 0x100e}], 0x9}, 0x40012100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a4000140200007", 0x3b}], 0x1}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000051421062cbd7000000100fd070001"], 0x20}, 0x1, 0x0, 0x0, 0x4040081}, 0x8004) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$KVM_GET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea3) 2.723717197s ago: executing program 0 (id=5669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000380)={0xa, 0x4}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a01040f000000000000000a0000040900010073797a310000000008000540000000020d00020073597a310000000008000a40fffffffc140000001100010000000000000000000100000ae254e97f384e5a5c271c8bacc256738f043b510d001748f928632ff7cf6662eac5373b2d15994e5f851e2f0f152d445df6e74847a99c5b5742b1c1e14bb38349ac74920ca0c5dce0dc2752cd82c5f283863536662d0e4c613a62e686220c0eec38b4e5a471c84c"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000380)={0xa, 0x4}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a01040f000000000000000a0000040900010073797a310000000008000540000000020d00020073597a310000000008000a40fffffffc140000001100010000000000000000000100000ae254e97f384e5a5c271c8bacc256738f043b510d001748f928632ff7cf6662eac5373b2d15994e5f851e2f0f152d445df6e74847a99c5b5742b1c1e14bb38349ac74920ca0c5dce0dc2752cd82c5f283863536662d0e4c613a62e686220c0eec38b4e5a471c84c"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) (async) 2.599326933s ago: executing program 4 (id=5670): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fchdir(r0) open(&(0x7f0000000380)='./file0\x00', 0x20500, 0x19) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140)=[0xb], 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x22, 0x67, {0x67, 0x6, "ea979a09719acc861514b9ea962aa104e76c6ce2a37d4f7cce5c0da0b0ed113cdaddbe7032ea95701d230f72d4181fcabe92543e5677ae04e0100300313c5d37a2010fd7a3c80368e52e6556995ec99f9aff08692283286346963a2ff45684a79169874652"}}, &(0x7f0000000000)={0x0, 0x3, 0x29, @string={0x29, 0x3, "219dd27e94dd39c02532a36961fbfd60fbc91f38ff2668758bd79373be3fb76b5544b33459cdd7"}}}, &(0x7f00000002c0)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="00080c00000097a2a5a5f32f1b"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000240)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000280)={0xc0, 0xa2, 0x2f, "7ef81f0996ecda7e1e6cdad86a5422cce09ea989132e2f8f3a76a8cea56a79d29d455efaef44671b2d0920672da2c5"}}) 2.535245506s ago: executing program 0 (id=5671): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x6, 0x200) ioctl$I2C_SLAVE(r0, 0x703, 0x389) 2.45325025s ago: executing program 0 (id=5672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x150, 0x29, 0x36, {0x5e, 0x26, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x99, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd1358"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x290}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=""/44) (async) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.142353417s ago: executing program 0 (id=5674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000200)={{r0}, "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"}) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0xc000) socket$inet_udp(0x2, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRESOCT], 0x0) 1.622443344s ago: executing program 1 (id=5678): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x51) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x0, 0x9, 0xc3, '\x00', 0x100000001}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r3, &(0x7f00000001c0)=0x7ffffff, 0xe80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa000000002da04f7b636e91ac5a1d9f471f6611d8f2674e6ca9f1c07e831406e4502ab080156cbd298f0d38ff5da71d01268c4d41b4ba95ae8167d837a1327badfb03c501570255c7bba90a27be482426da34b07137d14e32ee16d2ae980c57b3fdad48c94d0b97ce45f7628c5483d5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001309c40005020000fffd000880000002d58838068b91000000"], 0x4e) socket(0x23, 0x6, 0x10000000000002) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r6, 0xff, 0x1ff, &(0x7f00000004c0)="bca954e0", 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002c0aea403a090f05d17f020000000000000001000000000904c9000068d17b00"], 0x0) ioctl$SIOCRSACCEPT(r8, 0x89e3) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mincore(&(0x7f0000a4e000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/42) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='logfs\x00', 0x208003, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000000c0)={0x15, 0x2, 0x5e7a, 0x8, 0xe0a2}) 1.13366375s ago: executing program 5 (id=5679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x800a, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x95, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x12, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa0, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10002, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x60000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) poll(&(0x7f0000000280)=[{r6, 0x280}], 0x1, 0x5) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)='H', 0x1}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x20050800) 946.103663ms ago: executing program 0 (id=5680): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 834.537172ms ago: executing program 5 (id=5681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r3, 0x7, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x1c, r1, 0x2140dcfffd4d4d7f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x50) 820.241915ms ago: executing program 5 (id=5682): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000540), 0x4) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0) 244.873779ms ago: executing program 5 (id=5683): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0x81, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f00080000000000000013fbbc"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @null, 0x2}, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$team(&(0x7f0000000040), r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x56}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 122.536879ms ago: executing program 5 (id=5684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xc7}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) ftruncate(r3, 0x2) fsetxattr$security_ima(r3, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1) 0s ago: executing program 5 (id=5685): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x9e, 0xe5, 0x62, 0x40, 0x6cd, 0x106, 0x219b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x59, 0x0, 0x0, 0x7d, 0x5, 0xe3}}]}}]}}, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f00000023c0)={0x27, 0x0, 0x0, 0x1}, 0x10) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r2, &(0x7f0000000bc0)="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", 0x7b1) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fff, 0x400582) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r4, &(0x7f0000000440)=""/49, 0x31) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000001c40)) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80800) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0x7, 0x1, 'j'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) kernel console output (not intermixed with test programs): 376.344367][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1376.354816][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1376.374739][T23895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5204'. [ 1376.388519][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1376.389479][T23906] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1376.418171][T23895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5204'. [ 1376.445226][ T9] usb 6-1: USB disconnect, device number 68 [ 1376.535778][ T5869] Bluetooth: hci4: link tx timeout [ 1376.541277][ T5869] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1376.565187][T23918] comedi comedi1: rti802: I/O port conflict (0x8,4) [ 1376.575087][T23917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1376.979897][ T29] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1377.129921][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 1377.137445][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1377.147974][ T29] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.160955][ T29] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1377.170230][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.178459][ T29] usb 1-1: Product: syz [ 1377.182802][ T29] usb 1-1: Manufacturer: syz [ 1377.187560][ T29] usb 1-1: SerialNumber: syz [ 1377.270034][ T5907] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1377.416592][ T29] usb 1-1: Limiting number of CPorts to U8_MAX [ 1377.439112][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1377.447106][ T29] usb 1-1: Not enough endpoints found in device, aborting! [ 1377.472371][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1377.495591][ T5907] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1377.519829][ T5907] usb 5-1: config 1 interface 0 has no altsetting 1 [ 1377.534878][ T5907] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1377.544145][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.552359][ T5907] usb 5-1: Product: syz [ 1377.556598][ T5907] usb 5-1: Manufacturer: syz [ 1377.561328][ T5907] usb 5-1: SerialNumber: syz [ 1377.574898][ T5907] smsusb:smsusb_probe: board id=8, interface number 0 [ 1377.776579][ T5907] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1377.791776][ T5907] smsusb 5-1:1.0: probe with driver smsusb failed with error -71 [ 1377.802669][ T5907] usb 5-1: USB disconnect, device number 73 [ 1378.043821][ T5907] usb 1-1: USB disconnect, device number 69 [ 1378.555596][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 1378.601604][ T5914] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1378.783917][ T5914] usb 5-1: config 2 has an invalid interface number: 169 but max is 0 [ 1378.797336][ T5914] usb 5-1: config 2 has no interface number 0 [ 1378.807846][ T5914] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 1378.817763][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.851630][ T5914] cypress_m8 5-1:2.169: DeLorme Earthmate USB converter detected [ 1378.867639][ T5914] earthmate ttyUSB0: required endpoint is missing [ 1379.067945][ T9] usb 5-1: USB disconnect, device number 74 [ 1379.079259][ T9] cypress_m8 5-1:2.169: device disconnected [ 1379.086138][ T5914] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1379.261888][ T5914] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 1379.275062][ T5914] usb 1-1: config 0 has no interface number 0 [ 1379.299495][ T5914] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0012, bcdDevice=f5.e9 [ 1379.310438][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.318917][ T5914] usb 1-1: Product: syz [ 1379.325208][ T5914] usb 1-1: Manufacturer: syz [ 1379.330552][ T5914] usb 1-1: SerialNumber: syz [ 1379.357506][ T5914] usb 1-1: config 0 descriptor?? [ 1379.617774][ T5914] usb 1-1: USB disconnect, device number 70 [ 1379.708849][T23963] tipc: Started in network mode [ 1379.715543][T23963] tipc: Node identity ac141441, cluster identity 4711 [ 1379.725300][T23963] tipc: Enabled bearer , priority 10 [ 1380.435143][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.461563][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.484563][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.505123][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.541655][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.552907][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.568799][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.600714][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.607666][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.621153][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.631789][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.651823][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.666264][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.686915][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.715071][T24008] Invalid source name [ 1380.719148][T24008] UBIFS error (pid: 24008): cannot open "./file0", error -22 [ 1380.738688][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.766166][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.775187][ T5907] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1380.785001][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.820807][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.832079][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.839074][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.853013][ T5914] tipc: Node number set to 2886997057 [ 1380.859403][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.867626][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.883817][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.903462][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.910924][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.917857][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.929618][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.940576][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.947493][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.955107][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.962675][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.969602][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.972022][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 1380.981742][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.991995][T23997] overlayfs: failed to resolve './file1': -2 [ 1380.994558][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.011274][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.018362][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.025724][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.029145][ T5907] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 1381.044695][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.050242][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.060212][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.068571][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.071737][ T5907] usb 5-1: config 0 descriptor?? [ 1381.088079][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.101472][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input136 [ 1381.111812][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.133277][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.152295][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.172546][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.191303][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.210967][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.218568][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.239910][T23997] overlayfs: failed to resolve './file1': -2 [ 1381.418569][T24025] overlayfs: missing 'lowerdir' [ 1383.352452][ T9] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1383.533084][ T9] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1383.568484][ T5175] bcm5974 5-1:0.0: could not read from device [ 1383.576364][ T9] usb 1-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 1383.618226][ T9] usb 1-1: config 0 has no interface number 0 [ 1383.636359][ T9] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1383.651501][ T9] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x4 has an invalid bInterval 182, changing to 4 [ 1383.663149][ T9] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x4 has invalid maxpacket 33844, setting to 1023 [ 1383.670985][ T5907] usb 5-1: USB disconnect, device number 75 [ 1383.685185][ T5175] bcm5974 5-1:0.0: could not read from device [ 1383.704009][ T9] usb 1-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1383.730876][ T9] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1383.742885][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1383.786206][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.810853][ T9] usb 1-1: Product: syz [ 1383.815117][ T9] usb 1-1: Manufacturer: syz [ 1383.833904][ T9] usb 1-1: SerialNumber: syz [ 1383.853620][ T9] usb 1-1: config 0 descriptor?? [ 1383.868410][ T9] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1384.091356][T24087] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1384.285422][ T5849] usb 1-1: USB disconnect, device number 71 [ 1384.343541][T24133] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5245'. [ 1384.767725][T24143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5248'. [ 1384.779827][ T5849] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1384.818757][T24143] bond0: (slave bond_slave_0): Releasing backup interface [ 1384.940897][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 1384.960633][ T5849] usb 6-1: config 4 has an invalid interface number: 209 but max is 1 [ 1384.968953][ T5849] usb 6-1: config 4 has an invalid interface number: 4 but max is 1 [ 1384.978205][ T5849] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1384.989709][ T5849] usb 6-1: config 4 has an invalid interface number: 186 but max is 1 [ 1385.007975][ T5849] usb 6-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 1385.037116][ T5849] usb 6-1: config 4 has no interface number 0 [ 1385.046815][ T5849] usb 6-1: config 4 has no interface number 1 [ 1385.060485][ T5849] usb 6-1: config 4 has no interface number 2 [ 1385.076995][ T5849] usb 6-1: config 4 interface 209 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1385.102643][ T5849] usb 6-1: too many endpoints for config 4 interface 4 altsetting 130: 220, using maximum allowed: 30 [ 1385.129764][ T5849] usb 6-1: config 4 interface 4 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 1385.151523][ T5849] usb 6-1: config 4 interface 4 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 1385.152826][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5250'. [ 1385.172854][ T5849] usb 6-1: config 4 interface 4 altsetting 130 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1385.198922][ T5849] usb 6-1: config 4 interface 4 altsetting 130 has 5 endpoint descriptors, different from the interface descriptor's value: 220 [ 1385.212521][ T5849] usb 6-1: config 4 interface 209 has no altsetting 0 [ 1385.219334][ T5849] usb 6-1: config 4 interface 4 has no altsetting 0 [ 1385.226070][ T5849] usb 6-1: config 4 interface 186 has no altsetting 0 [ 1385.233723][ T5849] usb 6-1: New USB device found, idVendor=2040, idProduct=7060, bcdDevice=73.dd [ 1385.242994][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.649915][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1385.759851][ T5907] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1385.799796][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1385.808616][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1385.816992][ T9] usb 1-1: config 0 has no interface number 0 [ 1385.825577][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1385.836137][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.845895][ T9] usb 1-1: Product: syz [ 1385.850159][ T9] usb 1-1: Manufacturer: syz [ 1385.854781][ T9] usb 1-1: SerialNumber: syz [ 1385.862632][ T9] usb 1-1: config 0 descriptor?? [ 1385.876007][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1385.885421][ T9] usb 1-1: selecting invalid altsetting 1 [ 1385.891541][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1385.901913][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1385.914893][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1385.924081][ T9] usb 1-1: media controller created [ 1385.929839][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 1385.938122][ T5907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.953235][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1385.956785][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1385.977397][ T5907] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1385.988135][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.997786][ T5907] usb 5-1: Product: syz [ 1386.002190][ T5907] usb 5-1: Manufacturer: syz [ 1386.008760][ T5907] usb 5-1: SerialNumber: syz [ 1386.078653][T24159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.089268][T24159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.099214][T24159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.111454][T24159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.121744][T24159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.133975][T24159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.145291][T24159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.155395][T24159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.166978][T24159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.176347][T24159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.224550][ T5907] usb 5-1: 0:2 : does not exist [ 1386.242145][ T5907] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1386.303228][ T5907] usb 5-1: USB disconnect, device number 76 [ 1386.347858][T23777] udevd[23777]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1386.401315][ T1209] hid_parser_main: 49 callbacks suppressed [ 1386.401341][ T1209] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1386.439087][ T1209] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1387.031430][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1387.040394][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1387.096683][ T9] usb 1-1: USB disconnect, device number 72 [ 1387.140409][ T5948] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1387.289898][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 1387.298887][ T5948] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1387.306943][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 1387.318719][ T5948] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1387.329430][ T5948] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 1387.344023][ T5948] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1387.355252][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.363796][ T5948] usb 5-1: Product: syz [ 1387.368017][ T5948] usb 5-1: Manufacturer: syz [ 1387.372953][ T5948] usb 5-1: SerialNumber: syz [ 1387.382013][ T5948] usb 5-1: config 0 descriptor?? [ 1387.388189][T24170] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1387.395959][T24170] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1387.406636][ T5849] usb 6-1: string descriptor 0 read error: -71 [ 1387.426667][ T5849] dvb-usb: found a 'Hauppauge Nova-T Stick' in cold state, will try to load a firmware [ 1387.447308][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 1387.454048][ T5948] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 1387.461286][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 1387.468693][ T5849] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1387.490141][ T5849] dib0700: firmware download failed at 7 with -8 [ 1387.510795][ T5849] dvb-usb: found a 'Hauppauge Nova-T Stick' in cold state, will try to load a firmware [ 1387.532809][ T5849] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1387.542514][ T5849] dib0700: firmware download failed at 7 with -8 [ 1387.572245][ T5849] dvb-usb: found a 'Hauppauge Nova-T Stick' in cold state, will try to load a firmware [ 1387.602442][ T5849] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1387.615727][ T5907] usb 5-1: USB disconnect, device number 77 [ 1387.637637][ T5907] mcba_usb 5-1:0.0 can0: device disconnected [ 1387.647233][ T5849] dib0700: firmware download failed at 7 with -8 [ 1387.686764][ T5849] usb 6-1: USB disconnect, device number 69 [ 1388.220165][ T5948] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 1388.271077][T24195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1388.385693][ T5948] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1388.404901][ T5948] usb 6-1: config 0 has no interface number 0 [ 1388.420895][ T5948] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1388.440360][ T5948] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1388.460550][ T5948] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1388.474801][ T5948] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1388.489820][ T5948] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1388.515943][ T5948] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1388.529985][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.554035][ T5948] usb 6-1: config 0 descriptor?? [ 1388.567859][T24185] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1388.577957][T24185] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1388.585362][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1388.603551][ T5948] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1388.674621][T24209] tmpfs: Unknown parameter 'R' [ 1388.690565][T24209] tmpfs: Unknown parameter 'R' [ 1388.741999][ T9] usb 5-1: config 0 has an invalid interface number: 24 but max is 0 [ 1388.755651][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.785806][ T9] usb 5-1: config 0 has no interface number 0 [ 1388.793203][ T9] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1388.814873][ T9] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1388.837069][ T5800] usb 6-1: USB disconnect, device number 70 [ 1388.856797][ T9] usb 5-1: config 0 interface 24 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 1388.876237][ T5800] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1388.892911][ T9] usb 5-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=50.f2 [ 1388.916581][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.934070][ T9] usb 5-1: config 0 descriptor?? [ 1389.176641][T24197] netlink: 'syz.4.5264': attribute type 1 has an invalid length. [ 1389.188031][T24197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5264'. [ 1389.262716][ T5849] usb 5-1: USB disconnect, device number 78 [ 1389.416267][ T5800] hid-generic 0005:0006:5508.0046: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1389.485643][T24229] fido_id[24229]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 1389.619046][T24233] netlink: 'syz.5.5270': attribute type 178 has an invalid length. [ 1389.668206][T24235] netlink: 'syz.5.5271': attribute type 21 has an invalid length. [ 1389.862399][T24243] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1389.871740][T24245] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1390.110417][ T1209] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1390.178223][T24255] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.5278'. [ 1390.237760][T24257] PKCS7: Unknown OID: [5] (bad) [ 1390.243119][T24257] PKCS7: Only support pkcs7_signedData type [ 1390.271482][ T1209] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.282372][ T1209] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.293868][ T1209] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1390.307289][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1390.320077][ T1209] usb 5-1: SerialNumber: syz [ 1390.399640][T24259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5280'. [ 1390.556490][ T1209] usb 5-1: 0:2 : does not exist [ 1390.564582][ T1209] usb 5-1: unit 55 not found! [ 1390.605542][ T1209] usb 5-1: USB disconnect, device number 79 [ 1390.799841][ T5800] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1390.829826][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1390.870168][ T5873] Bluetooth: hci2: command 0x0405 tx timeout [ 1390.939936][ T5800] usb 6-1: device descriptor read/64, error -71 [ 1390.982905][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1390.992045][ T9] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1391.000964][ T9] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 1391.009350][ T9] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1391.019592][ T9] usb 1-1: config 129 has no interface number 0 [ 1391.027173][ T9] usb 1-1: config 129 has no interface number 1 [ 1391.034191][ T9] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1391.047716][ T9] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1391.059440][ T9] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1391.072936][ T9] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1391.080074][ T9] usb 1-1: config 129 interface 5 has no altsetting 0 [ 1391.090309][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1391.096751][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1391.106238][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.138573][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1391.148939][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 1391.190275][ T5800] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1391.322226][ T5907] usb 1-1: USB disconnect, device number 73 [ 1391.349961][ T5800] usb 6-1: device descriptor read/64, error -71 [ 1391.480522][ T5800] usb usb6-port1: attempt power cycle [ 1391.819860][ T5800] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1391.840456][ T5800] usb 6-1: device descriptor read/8, error -71 [ 1392.057545][T24276] : entered promiscuous mode [ 1392.089874][ T5800] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1392.110506][ T5800] usb 6-1: device descriptor read/8, error -71 [ 1392.129895][ T5907] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1392.229866][ T5800] usb usb6-port1: unable to enumerate USB device [ 1392.299868][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 1392.307332][ T5907] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1392.317986][ T5907] usb 1-1: config 2 has no interface number 0 [ 1392.326611][ T5907] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1392.336067][ T5907] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1392.348467][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.358193][ T5907] usb 1-1: Product: syz [ 1392.362721][ T5907] usb 1-1: Manufacturer: syz [ 1392.367359][ T5907] usb 1-1: SerialNumber: syz [ 1392.666928][T24281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.678770][T24281] netlink: 'syz.4.5287': attribute type 10 has an invalid length. [ 1392.810385][T24274] netlink: 'syz.0.5284': attribute type 6 has an invalid length. [ 1393.086323][ T5907] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1393.101194][ T5907] usb 1-1: USB disconnect, device number 74 [ 1393.809851][ T5800] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1393.951384][T24307] netlink: 372 bytes leftover after parsing attributes in process `syz.0.5294'. [ 1393.960736][ T5800] usb 6-1: Using ep0 maxpacket: 16 [ 1393.974080][ T5800] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.993704][ T5800] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.009991][ T5800] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1394.016747][ T5800] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1394.033641][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.050723][ T5800] usb 6-1: config 0 descriptor?? [ 1394.282808][ T5800] usbhid 6-1:0.0: can't add hid device: -71 [ 1394.288875][ T5800] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1394.311414][ T5800] usb 6-1: USB disconnect, device number 75 [ 1394.467839][ T30] audit: type=1326 audit(1770805711.414:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24301 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b2d9bf79 code=0x7fc00000 [ 1394.604514][T24321] befs: (nullb0): invalid magic header [ 1394.740103][ T5800] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1394.829852][ T5948] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1394.899924][ T5800] usb 6-1: Using ep0 maxpacket: 32 [ 1394.911943][ T5800] usb 6-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1394.923657][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 1394.933451][ T5800] usb 6-1: Product: syz [ 1394.940817][ T5800] usb 6-1: config 0 descriptor?? [ 1394.992418][ T5948] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1395.002065][ T5948] usb 1-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 1395.014120][ T5948] usb 1-1: config 0 has no interface number 0 [ 1395.021868][ T5948] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1395.034973][ T5948] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x4 has an invalid bInterval 182, changing to 4 [ 1395.046921][ T5948] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x4 has invalid maxpacket 33844, setting to 1023 [ 1395.059143][ T5948] usb 1-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1395.073120][ T5948] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1395.085657][ T5948] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1395.095875][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.106333][ T5948] usb 1-1: Product: syz [ 1395.114769][ T5948] usb 1-1: Manufacturer: syz [ 1395.121932][ T5948] usb 1-1: SerialNumber: syz [ 1395.142385][ T5948] usb 1-1: config 0 descriptor?? [ 1395.157894][ T5800] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1395.170071][ T5948] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1395.191993][ T5800] usb 6-1: USB disconnect, device number 76 [ 1395.361451][T24320] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1395.509096][ T5948] usb 1-1: USB disconnect, device number 75 [ 1395.636082][T24343] random: crng reseeded on system resumption [ 1395.890195][ T5948] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1395.956607][T24350] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5308'. [ 1396.050863][T24353] netlink: 'syz.0.5309': attribute type 12 has an invalid length. [ 1396.052341][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 1396.059064][T24353] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5309'. [ 1396.069393][ T5948] usb 5-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 1396.092694][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1396.105198][ T5948] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1396.114926][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.123416][ T5948] usb 5-1: Product: syz [ 1396.127827][ T5948] usb 5-1: Manufacturer: syz [ 1396.132544][ T5948] usb 5-1: SerialNumber: syz [ 1396.352382][ T5948] usb 5-1: 0:2 : does not exist [ 1396.373883][ T5948] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1396.427886][ T5948] usb 5-1: USB disconnect, device number 80 [ 1396.486037][T23360] udevd[23360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1396.579851][ T5907] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1396.740510][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 1396.756329][ T5907] usb 6-1: config 0 has an invalid interface number: 138 but max is 0 [ 1396.785841][ T5907] usb 6-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1396.796858][T24378] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5319'. [ 1396.809421][ T5907] usb 6-1: config 0 has no interface number 0 [ 1396.841880][ T5907] usb 6-1: New USB device found, idVendor=1584, idProduct=6003, bcdDevice=df.eb [ 1396.852505][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.862994][ T5907] usb 6-1: Product: syz [ 1396.867180][ T5907] usb 6-1: Manufacturer: syz [ 1396.871984][ T5907] usb 6-1: SerialNumber: syz [ 1396.887757][ T5907] usb 6-1: config 0 descriptor?? [ 1396.956247][T24383] netlink: 'syz.4.5321': attribute type 25 has an invalid length. [ 1396.971077][T24383] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5321'. [ 1397.103533][ T5907] dvb-usb: found a 'Uniwill STK7700P based (Hama and others)' in cold state, will try to load a firmware [ 1397.124232][ T5907] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1397.134774][ T5907] dib0700: firmware download failed at 7 with -22 [ 1397.148979][ T5907] usb 6-1: USB disconnect, device number 77 [ 1397.250194][T11334] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1397.402111][T11334] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1397.411954][T11334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.415747][T24394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5324'. [ 1397.428669][T11334] usb 5-1: config 0 descriptor?? [ 1397.442966][T24394] Unknown options in mask b7f2 [ 1397.655336][T24400] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1397.847673][T11334] ath6kl: Failed to submit usb control message: -71 [ 1397.867160][T11334] ath6kl: unable to send the bmi data to the device: -71 [ 1397.879572][T11334] ath6kl: Unable to send get target info: -71 [ 1397.903713][T11334] ath6kl: Failed to init ath6kl core: -71 [ 1397.915052][T11334] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1397.960857][T11334] usb 5-1: USB disconnect, device number 81 [ 1398.137716][T24420] fuse: Bad value for 'rootmode' [ 1398.148132][ T30] audit: type=1400 audit(1770805715.094:2084): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=24418 comm="syz.0.5333" [ 1398.178244][T24420] netlink: 'syz.0.5333': attribute type 10 has an invalid length. [ 1398.187342][T24420] veth0_vlan: entered allmulticast mode [ 1398.204515][T24420] veth0_vlan: left promiscuous mode [ 1398.214019][T24420] veth0_vlan: entered promiscuous mode [ 1398.228573][T24420] team0: Device veth0_vlan failed to register rx_handler [ 1398.243033][T24421] netlink: 'syz.0.5333': attribute type 10 has an invalid length. [ 1398.269342][T24421] ipvlan1: entered promiscuous mode [ 1398.278272][T24421] team0: Device ipvlan1 failed to register rx_handler [ 1398.619942][T11334] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1398.769815][T11334] usb 1-1: Using ep0 maxpacket: 32 [ 1398.769845][ T1209] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1398.782400][T11334] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 1398.791358][T11334] usb 1-1: config 0 has no interface number 0 [ 1398.799361][T11334] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32 [ 1398.810659][T11334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.818772][T11334] usb 1-1: Product: syz [ 1398.823450][T11334] usb 1-1: Manufacturer: syz [ 1398.828274][T11334] usb 1-1: SerialNumber: syz [ 1398.837368][T11334] usb 1-1: config 0 descriptor?? [ 1398.851444][T11334] gspca_main: conex-2.14.0 probing 0572:0041 [ 1398.903063][T24436] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1398.952203][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 1398.963481][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.976794][ T1209] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1398.990767][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.000937][ T1209] usb 5-1: Product: syz [ 1399.005254][ T1209] usb 5-1: Manufacturer: syz [ 1399.013348][ T1209] usb 5-1: SerialNumber: syz [ 1399.024490][ T1209] usb 5-1: config 0 descriptor?? [ 1399.035280][ T1209] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1399.174289][T11334] usb 1-1: USB disconnect, device number 76 [ 1399.849018][ T1209] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1399.860268][ T1209] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1399.881854][ T1209] usb 5-1: USB disconnect, device number 82 [ 1400.264548][T24452] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.5342'. [ 1400.401335][T24462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5345'. [ 1400.501993][T24467] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1400.547922][T24470] netlink: 'syz.5.5348': attribute type 3 has an invalid length. [ 1400.560587][T24470] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5348'. [ 1400.859470][T24480] kvm: kvm [24479]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 1400.868840][T24480] kvm: kvm [24479]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 1400.980489][T24484] hpfs: Bad magic ... probably not HPFS [ 1401.134051][T11334] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1401.140953][T24490] netlink: 'syz.0.5354': attribute type 1 has an invalid length. [ 1401.149490][T24490] netlink: 'syz.0.5354': attribute type 1 has an invalid length. [ 1401.356907][T11334] usb 6-1: config 252 has an invalid interface number: 251 but max is 0 [ 1401.370018][T11334] usb 6-1: config 252 has no interface number 0 [ 1401.376370][T11334] usb 6-1: config 252 interface 251 has no altsetting 0 [ 1401.455372][T11334] usb 6-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=e6.a9 [ 1401.492820][T11334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.515448][T11334] usb 6-1: Product: syz [ 1401.528637][T24509] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1401.530022][T11334] usb 6-1: Manufacturer: syz [ 1401.549753][T11334] usb 6-1: SerialNumber: syz [ 1401.811323][T11334] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 1401.843499][T11334] gspca_sn9c20x: Write register 1000 failed -71 [ 1401.854978][T11334] gspca_sn9c20x: Device initialization failed [ 1401.861757][T11334] gspca_sn9c20x 6-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 1401.900953][T11334] usb 6-1: USB disconnect, device number 78 [ 1402.339900][T11334] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1402.493398][T11334] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 1402.519799][T11334] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.540398][T11334] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1402.564912][T11334] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1402.574927][T11334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.583422][T11334] usb 1-1: Product: syz [ 1402.587751][T11334] usb 1-1: Manufacturer: syz [ 1402.592901][T11334] usb 1-1: SerialNumber: syz [ 1402.602355][T11334] usb 1-1: config 0 descriptor?? [ 1402.610516][T11334] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1402.620030][T11334] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1402.969933][T11334] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1403.119893][T11334] usb 6-1: Using ep0 maxpacket: 8 [ 1403.126930][T11334] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 1403.135632][T11334] usb 6-1: config 2 has no interface number 0 [ 1403.142112][T11334] usb 6-1: config 2 interface 31 has no altsetting 0 [ 1403.152411][T11334] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1403.161906][T11334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.170273][T11334] usb 6-1: Product: syz [ 1403.174508][T11334] usb 6-1: Manufacturer: syz [ 1403.179226][T11334] usb 6-1: SerialNumber: syz [ 1403.319918][ T5907] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1403.475768][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1403.492969][ T5907] usb 5-1: not running at top speed; connect to a high speed hub [ 1403.502651][ T5907] usb 5-1: config 7 has an invalid interface number: 255 but max is 0 [ 1403.512205][ T5907] usb 5-1: config 7 has no interface number 0 [ 1403.519339][ T5907] usb 5-1: config 7 interface 255 has no altsetting 0 [ 1403.528615][ T5907] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice= 9.89 [ 1403.540266][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.548366][ T5907] usb 5-1: Product: syz [ 1403.552817][ T5907] usb 5-1: Manufacturer: syz [ 1403.557465][ T5907] usb 5-1: SerialNumber: syz [ 1403.774504][T24549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.783963][T24549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.885602][T24549] kvm: kvm [24548]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1403.894967][T24549] kvm: kvm [24548]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1403.935738][T11334] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 1403.948257][T24549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.959260][T11334] usb 6-1: USB disconnect, device number 79 [ 1403.969236][T24549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.162742][ T5907] usb 5-1: USB disconnect, device number 83 [ 1404.613307][ T5873] Bluetooth: hci3: ISO packet for unknown connection handle 1038 [ 1404.795164][T24568] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1404.827049][T24568] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1405.043831][ T1209] usb 1-1: USB disconnect, device number 77 [ 1405.098868][T24583] netlink: 'syz.0.5381': attribute type 4 has an invalid length. [ 1405.109904][ T5800] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1405.284063][ T5800] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1405.299944][ T5800] usb 5-1: can't read configurations, error -71 [ 1405.392835][T24588] netlink: 'syz.1.5383': attribute type 21 has an invalid length. [ 1405.401326][T24588] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5383'. [ 1405.413738][T24588] netlink: 'syz.1.5383': attribute type 4 has an invalid length. [ 1405.422492][T24588] netlink: 'syz.1.5383': attribute type 3 has an invalid length. [ 1405.450031][ T5907] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1405.522939][ T1209] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1405.692412][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 1405.703941][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.724088][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.740645][ T1209] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1405.754452][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.791832][ T1209] usb 1-1: config 0 descriptor?? [ 1406.026199][T24597] netlink: 'syz.0.5382': attribute type 29 has an invalid length. [ 1406.048161][T24596] netlink: 'syz.0.5382': attribute type 29 has an invalid length. [ 1406.056613][T24597] netlink: 'syz.0.5382': attribute type 29 has an invalid length. [ 1406.079503][ T1209] ryos 0003:1E7D:3232.0047: unknown main item tag 0x0 [ 1406.096307][ T1209] ryos 0003:1E7D:3232.0047: item fetching failed at offset 3/5 [ 1406.105804][ T1209] ryos 0003:1E7D:3232.0047: parse failed [ 1406.113542][ T1209] ryos 0003:1E7D:3232.0047: probe with driver ryos failed with error -22 [ 1406.274240][ T5948] usb 1-1: USB disconnect, device number 78 [ 1406.339886][ T5800] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1406.499782][ T5800] usb 5-1: Using ep0 maxpacket: 8 [ 1406.507141][ T5800] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1406.518111][ T5800] usb 5-1: config 2 has no interface number 0 [ 1406.526513][ T5800] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1406.536898][ T5800] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1406.547869][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.562648][ T5800] usb 5-1: Product: syz [ 1406.567390][ T5800] usb 5-1: Manufacturer: syz [ 1406.572400][ T5800] usb 5-1: SerialNumber: syz [ 1407.089873][ T5948] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1407.250136][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 1407.257026][ T5800] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1407.268172][ T5948] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 1407.286932][ T5948] usb 1-1: config 0 has no interface number 0 [ 1407.294471][ T5800] usb 5-1: USB disconnect, device number 85 [ 1407.323205][ T5948] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=36.a7 [ 1407.351336][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.363224][ T5948] usb 1-1: Product: syz [ 1407.369207][ T5948] usb 1-1: Manufacturer: syz [ 1407.375883][ T5948] usb 1-1: SerialNumber: syz [ 1407.405507][ T5948] usb 1-1: config 0 descriptor?? [ 1407.550173][ T5948] ushc 1-1:0.191: probe with driver ushc failed with error -110 [ 1407.632955][T24599] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1407.953955][ T5800] usb 1-1: USB disconnect, device number 79 [ 1408.166092][T24612] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1408.340099][ T5907] usb 6-1: device descriptor read/64, error -71 [ 1408.589856][ T5907] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1408.718918][T24628] hugetlbfs: Bad value 'ßø‰' for mount option 'size' [ 1408.718918][T24628] [ 1408.759825][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 1408.780969][ T5907] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.793855][ T5907] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1408.806784][ T5907] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1408.820416][ T5907] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1408.842321][ T5907] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1408.852443][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.909986][ T5907] usb 6-1: Product: syz [ 1408.914228][ T5907] usb 6-1: Manufacturer: syz [ 1408.918866][ T5907] usb 6-1: SerialNumber: syz [ 1408.955510][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1408.969247][ T5907] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input139 [ 1409.170758][ T5907] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1409.179079][ T5907] (id 0x00) [ 1409.255954][T24643] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1409.263372][ T5907] rc_core: IR keymap rc-imon-pad not found [ 1409.269603][ T5907] Registered IR keymap rc-empty [ 1409.275090][ T5907] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1409.285908][ T29] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1409.294070][ T5907] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1409.382106][ T5907] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1409.394801][ T5907] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input140 [ 1409.424817][ T5907] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:81> initialized [ 1409.476153][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 1409.507674][ T29] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1409.526639][ T29] usb 1-1: config 2 has no interface number 0 [ 1409.542530][ T29] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1409.564638][ T29] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1409.575213][T24607] imon:vfd_write: invalid payload size [ 1409.598393][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.608670][T24607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.621533][T24607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.630609][ T29] usb 1-1: Product: syz [ 1409.634845][ T29] usb 1-1: Manufacturer: syz [ 1409.635262][ T5948] usb 6-1: USB disconnect, device number 81 [ 1409.639498][ T29] usb 1-1: SerialNumber: syz [ 1409.959809][ T5800] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1410.121856][ T5800] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1410.130315][ T5800] usb 5-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 1410.140748][ T5800] usb 5-1: config 0 has no interface number 0 [ 1410.147416][ T5800] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1410.159807][ T5800] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x4 has an invalid bInterval 182, changing to 4 [ 1410.172605][ T5800] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x4 has invalid maxpacket 33844, setting to 1023 [ 1410.184634][ T5800] usb 5-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.198119][ T5800] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1410.210255][ T5800] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1410.227123][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.235523][ T5800] usb 5-1: Product: syz [ 1410.240052][ T5800] usb 5-1: Manufacturer: syz [ 1410.244722][ T5800] usb 5-1: SerialNumber: syz [ 1410.254137][ T5800] usb 5-1: config 0 descriptor?? [ 1410.268676][ T5800] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1410.340221][ T29] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1410.360021][ T29] usb 1-1: USB disconnect, device number 80 [ 1410.467029][T24648] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1410.484349][ T5907] usb 5-1: USB disconnect, device number 86 [ 1410.619884][ T5800] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1410.770030][ T5800] usb 6-1: Using ep0 maxpacket: 16 [ 1410.777987][ T5800] usb 6-1: config 1 has an invalid interface number: 3 but max is 2 [ 1410.787345][ T5800] usb 6-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 1410.798958][ T5800] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1410.808078][ T5800] usb 6-1: config 1 has no interface number 1 [ 1410.814591][ T5800] usb 6-1: too many endpoints for config 1 interface 3 altsetting 9: 121, using maximum allowed: 30 [ 1410.825560][ T5800] usb 6-1: config 1 interface 3 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 121 [ 1410.838809][ T5800] usb 6-1: config 1 interface 3 has no altsetting 0 [ 1410.848099][ T5800] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1410.857346][ T5800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.865503][ T5800] usb 6-1: Product: 칋㟪hﱺ踲᭒áµá¼²æ±¦ë«¼é¦“䑸䅣꒗â²ê®—ᅲ䩨é¶ã˜†âµ¥ç•ªë‰šë“‘ã”憑㣺킿዗柧‷껯馆æŸîŽœá‰ã¤®å¾¶ï†—ä¨®å– [ 1410.882371][ T5800] usb 6-1: Manufacturer: Ð [ 1410.886903][ T5800] usb 6-1: SerialNumber: î·å°°ä™©ç®¥æŒ³ç¡™èªœä–·ä îŸ´ã¯â²“ä½—ç·ä°¢éªÛ“ä³ì¸ªî”®ï·«ä‚ผ辻煱æ±ç¾™ä°’퟇â†æ•—㴂宋朹䮘웸ã—㢀涭紘쥸닡翮ä¥èº°î›¤ï™šæ­½è»›êŠ¸é¯„í– í™â‚¼èˆé©ã¦ë¡¼ì€«ï££í–¦à Žëµ€è²„ì·˜ì劦〙ãºì‡Žã‹³ä˜²è…Šê­ƒê¹è†‡à¥¼ç´ºꄥ꩑æ±ç¸¥ [ 1411.289873][ T10] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1411.332314][T24652] 9p: Bad value for 'wfdno' [ 1411.342927][ T5800] usb 6-1: 0:2 : does not exist [ 1411.387537][ T5800] hub 6-1:1.3: Invalid hub with more than one config or interface [ 1411.408419][ T5800] hub 6-1:1.3: probe with driver hub failed with error -22 [ 1411.422736][ T5800] usb 6-1: USB disconnect, device number 82 [ 1411.439149][T23360] udevd[23360]: setting mode of /dev/bus/usb/006/082 to 020664 failed: No such file or directory [ 1411.451848][T23360] udevd[23360]: setting owner of /dev/bus/usb/006/082 to uid=0, gid=0 failed: No such file or directory [ 1411.463157][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.463241][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1411.489786][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1411.508996][T23360] udevd[23360]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.510073][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.534046][ T10] usb 5-1: Product: syz [ 1411.538358][ T10] usb 5-1: Manufacturer: syz [ 1411.544025][ T10] usb 5-1: SerialNumber: syz [ 1411.569456][ T10] usb 5-1: bad CDC descriptors [ 1411.623916][T24664] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1411.761395][ T10] usb 5-1: USB disconnect, device number 87 [ 1411.942671][T24669] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1412.549938][ T5914] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1412.641022][ T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1412.692105][ T5914] usb 5-1: device descriptor read/64, error -71 [ 1412.799979][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1412.810294][ T10] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 1412.818910][ T10] usb 6-1: config 0 has no interface number 0 [ 1412.827596][ T10] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=36.a7 [ 1412.837694][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.845879][ T10] usb 6-1: Product: syz [ 1412.850308][ T10] usb 6-1: Manufacturer: syz [ 1412.854914][ T10] usb 6-1: SerialNumber: syz [ 1412.862502][ T10] usb 6-1: config 0 descriptor?? [ 1412.870347][ T29] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1412.929871][ T5914] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1412.980223][ T10] ushc 6-1:0.191: probe with driver ushc failed with error -110 [ 1413.041998][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 1413.049314][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.060616][ T29] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1413.074206][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.083426][ T5914] usb 5-1: device descriptor read/64, error -71 [ 1413.083729][T24683] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1413.097401][ T29] usb 1-1: config 0 descriptor?? [ 1413.200330][ T5914] usb usb5-port1: attempt power cycle [ 1413.233656][ T10] usb 6-1: USB disconnect, device number 83 [ 1413.328459][T24688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5417'. [ 1413.544661][ T29] kye 0003:0458:5016.0048: control desc unexpectedly large [ 1413.557285][ T5914] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1413.569095][ T29] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0048/input/input141 [ 1413.600435][ T5914] usb 5-1: device descriptor read/8, error -71 [ 1413.648068][ T29] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0048/input/input142 [ 1413.691685][ T29] kye 0003:0458:5016.0048: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 1413.764715][ T10] usb 1-1: USB disconnect, device number 81 [ 1413.809854][T24691] fido_id[24691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1413.849843][ T5914] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1413.882807][ T5914] usb 5-1: device descriptor read/8, error -71 [ 1413.990127][ T5914] usb usb5-port1: unable to enumerate USB device [ 1414.550001][ T5914] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1414.714217][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1414.725462][ T5914] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1414.734942][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.746423][ T5914] usb 1-1: config 0 descriptor?? [ 1414.753445][T24696] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1415.158737][T24707] netlink: 'syz.1.5423': attribute type 40 has an invalid length. [ 1415.182030][ T5914] elan 0003:04F3:0755.0049: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1415.205629][ T1209] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1415.319109][T24711] netlink: 'syz.1.5424': attribute type 1 has an invalid length. [ 1415.350285][T24711] netlink: 476 bytes leftover after parsing attributes in process `syz.1.5424'. [ 1415.362742][T24711] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5424'. [ 1415.381594][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 1415.389160][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.412652][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.423241][ T1209] usb 6-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1415.434503][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.446189][ T1209] usb 6-1: config 0 descriptor?? [ 1415.678380][T24696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.694506][T24696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.706434][ T5914] usb 1-1: USB disconnect, device number 82 [ 1415.714995][T24729] netlink: 'syz.4.5429': attribute type 1 has an invalid length. [ 1415.723245][T24729] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5429'. [ 1415.892970][ T1209] glorious 0003:258A:0033.004A: unknown main item tag 0x2 [ 1415.966041][ T1209] glorious 0003:258A:0033.004A: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.5-1/input0 [ 1416.090532][ T5948] usb 6-1: USB disconnect, device number 84 [ 1416.490007][ T1209] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1416.649758][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 1416.662141][ T1209] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.684712][T24744] tmpfs: Bad value for 'mpol' [ 1416.692361][ T1209] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1416.710833][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.718907][ T1209] usb 1-1: Product: syz [ 1416.735203][ T1209] usb 1-1: Manufacturer: syz [ 1416.740755][ T1209] usb 1-1: SerialNumber: syz [ 1416.748298][ T1209] usb 1-1: config 0 descriptor?? [ 1416.779465][ T1209] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1416.992985][T24734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5430'. [ 1417.002632][T24734] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.5430'. [ 1417.012374][T24734] netlink: 5158 bytes leftover after parsing attributes in process `syz.0.5430'. [ 1417.022156][T24734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5430'. [ 1417.034415][T24734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5430'. [ 1417.043654][T24734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5430'. [ 1417.169990][ T29] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1417.321658][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.332074][ T29] usb 6-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 1417.342598][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.354598][ T29] usb 6-1: config 0 descriptor?? [ 1417.364812][ T29] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 1417.659932][ T1209] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1417.667182][ T1209] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1417.687756][ T1209] usb 1-1: USB disconnect, device number 83 [ 1417.731081][ T5849] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1417.764785][ T29] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1417.772944][ T29] pwc: recv_control_msg error -71 req 02 val 2700 [ 1417.780469][ T29] pwc: recv_control_msg error -71 req 04 val 1700 [ 1417.787575][ T29] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1417.796863][ T29] pwc: recv_control_msg error -71 req 04 val 1000 [ 1417.804153][ T29] pwc: recv_control_msg error -71 req 04 val 1300 [ 1417.812152][ T29] pwc: recv_control_msg error -71 req 04 val 1400 [ 1417.819169][ T29] pwc: recv_control_msg error -71 req 02 val 2000 [ 1417.826560][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 1417.836274][ T29] pwc: recv_control_msg error -71 req 02 val 2200 [ 1417.843799][ T29] pwc: recv_control_msg error -71 req 06 val 0600 [ 1417.851031][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 1417.859062][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 1417.867022][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 1417.874979][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 1417.882200][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 1417.889127][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 1417.897061][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 1417.904242][ T5849] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1417.912830][ T5849] usb 5-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 1417.912994][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 1417.930217][ T5849] usb 5-1: config 0 has no interface number 0 [ 1417.936364][ T5849] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1417.951036][ T29] pwc: Registered as video103. [ 1417.958186][ T5849] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x4 has an invalid bInterval 182, changing to 4 [ 1417.977488][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input143 [ 1417.988918][ T5849] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x4 has invalid maxpacket 33844, setting to 1023 [ 1418.005752][ T5849] usb 5-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1418.019359][ T5849] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1418.033327][ T5849] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1418.044533][ T29] usb 6-1: USB disconnect, device number 85 [ 1418.054699][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.065999][ T5849] usb 5-1: Product: syz [ 1418.075976][ T5849] usb 5-1: Manufacturer: syz [ 1418.081854][ T5849] usb 5-1: SerialNumber: syz [ 1418.100985][ T5849] usb 5-1: config 0 descriptor?? [ 1418.111235][ T5849] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1418.317107][T24763] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1418.318581][T24756] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1418.352607][ T29] usb 5-1: USB disconnect, device number 92 [ 1418.812388][ T10] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1418.925417][T24795] netlink: 'syz.4.5448': attribute type 21 has an invalid length. [ 1418.972236][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1419.015276][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1419.051176][ T10] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1419.059350][ T10] usb 6-1: Product: syz [ 1419.073704][ T10] usb 6-1: Manufacturer: syz [ 1419.078889][ T10] usb 6-1: SerialNumber: syz [ 1419.121893][ T10] usb 6-1: config 0 descriptor?? [ 1419.330885][T24774] tmpfs: Unknown parameter '' [ 1419.337117][ T10] usb 6-1: USB disconnect, device number 86 [ 1419.349910][ T5849] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1419.510343][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 1419.520931][ T5849] usb 5-1: config 129 has an invalid interface number: 77 but max is 3 [ 1419.529841][ T29] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1419.537860][ T5849] usb 5-1: config 129 has an invalid interface number: 59 but max is 3 [ 1419.547284][ T5849] usb 5-1: config 129 has an invalid interface number: 39 but max is 3 [ 1419.557403][ T5849] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.568320][ T5849] usb 5-1: config 129 has 3 interfaces, different from the descriptor's value: 4 [ 1419.578075][ T5849] usb 5-1: config 129 has no interface number 0 [ 1419.585322][ T5849] usb 5-1: config 129 has no interface number 1 [ 1419.591819][ T5849] usb 5-1: config 129 has no interface number 2 [ 1419.599172][ T5849] usb 5-1: config 129 interface 77 altsetting 5 endpoint 0x7 has an invalid bInterval 21, changing to 7 [ 1419.611510][ T5849] usb 5-1: config 129 interface 77 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1419.625874][ T5849] usb 5-1: config 129 interface 59 altsetting 113 endpoint 0xD has an invalid bInterval 46, changing to 7 [ 1419.638448][ T5849] usb 5-1: config 129 interface 59 altsetting 113 has a duplicate endpoint with address 0x3, skipping [ 1419.649617][ T5849] usb 5-1: config 129 interface 39 altsetting 128 endpoint 0x2 has invalid maxpacket 2014, setting to 64 [ 1419.662101][ T5849] usb 5-1: config 129 interface 39 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 1419.673786][ T5849] usb 5-1: config 129 interface 39 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 1419.688911][ T5849] usb 5-1: config 129 interface 77 has no altsetting 0 [ 1419.698318][ T5849] usb 5-1: config 129 interface 59 has no altsetting 0 [ 1419.706482][ T5849] usb 5-1: config 129 interface 39 has no altsetting 0 [ 1419.714093][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 1419.721345][ T5849] usb 5-1: string descriptor 0 read error: -22 [ 1419.737455][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1419.754540][ T5849] usb 5-1: New USB device found, idVendor=07aa, idProduct=000d, bcdDevice=26.6b [ 1419.754697][ T29] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1419.772758][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.800486][ T29] usb 1-1: can't read configurations, error -71 [ 1419.995951][ T5873] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1420.012011][ T5849] pegasus 5-1:129.77: probe with driver pegasus failed with error -71 [ 1420.043409][ T5849] pegasus 5-1:129.59: probe with driver pegasus failed with error -71 [ 1420.070208][ T5849] pegasus 5-1:129.39: probe with driver pegasus failed with error -71 [ 1420.079248][ T5849] ir_usb 5-1:129.39: required endpoints missing [ 1420.100562][ T5849] usb 5-1: USB disconnect, device number 93 [ 1420.262858][ T5948] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1420.424143][ T5948] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.441000][ T5948] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1420.451135][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.459187][ T5948] usb 6-1: Product: syz [ 1420.464210][ T5948] usb 6-1: Manufacturer: syz [ 1420.468865][ T5948] usb 6-1: SerialNumber: syz [ 1420.587428][T24837] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 1420.696834][ T5948] comedi comedi5: Wrong number of endpoints [ 1420.705405][ T5948] ni6501 6-1:5.0: driver 'ni6501' failed to auto-configure device. [ 1420.752808][ T5948] usb 6-1: USB disconnect, device number 87 [ 1420.890108][ T29] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1421.054706][ T29] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1421.069777][ T29] usb 1-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 1421.099801][ T29] usb 1-1: config 0 has no interface number 0 [ 1421.114918][ T29] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1421.130923][ T29] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x4 has an invalid bInterval 182, changing to 4 [ 1421.142778][ T29] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x4 has invalid maxpacket 33844, setting to 1023 [ 1421.199952][ T29] usb 1-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1421.228288][ T29] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1421.248030][ T29] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1421.257811][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.281294][ T29] usb 1-1: Product: syz [ 1421.285543][ T29] usb 1-1: Manufacturer: syz [ 1421.308549][ T29] usb 1-1: SerialNumber: syz [ 1421.329993][ T29] usb 1-1: config 0 descriptor?? [ 1421.371561][ T29] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1421.544258][T24834] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1421.554770][ T29] usb 1-1: USB disconnect, device number 85 [ 1421.923536][T24870] syz.4.5463 (24870): drop_caches: 2 [ 1423.278082][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.488653][T24861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1424.618887][T24930] __nla_validate_parse: 4 callbacks suppressed [ 1424.618907][T24930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5468'. [ 1424.694043][T24934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5470'. [ 1424.734171][T24936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1424.959632][T24953] netlink: 'syz.5.5476': attribute type 5 has an invalid length. [ 1424.967795][T24953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5476'. [ 1425.299849][ T29] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1425.389877][T11334] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1425.452203][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.463434][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.473380][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1425.486678][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1425.495787][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.506552][ T29] usb 6-1: config 0 descriptor?? [ 1425.539776][T11334] usb 5-1: Using ep0 maxpacket: 16 [ 1425.551292][T11334] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1425.560558][T11334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.568623][T11334] usb 5-1: Product: syz [ 1425.574603][T11334] usb 5-1: Manufacturer: syz [ 1425.579250][T11334] usb 5-1: SerialNumber: syz [ 1425.588795][T11334] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1425.595334][T11334] r8152-cfgselector 5-1: config 0 descriptor?? [ 1425.925308][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1425.933744][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1425.942869][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1425.951375][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1425.958835][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1425.967874][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1425.977164][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1425.985912][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1425.997378][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1426.005257][ T29] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1426.027954][ T29] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1426.050704][T24960] syzkaller1: entered promiscuous mode [ 1426.061608][T24960] syzkaller1: entered allmulticast mode [ 1426.175116][ T29] r8152-cfgselector 5-1: USB disconnect, device number 94 [ 1426.234425][T24957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.247283][T24957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.355950][T24969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.365434][T24969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.375784][T24969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1426.837537][T24981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.846688][T24981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.070946][ T29] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1427.216619][T24988] wg0 speed is unknown, defaulting to 1000 [ 1427.230300][ T29] usb 5-1: device descriptor read/64, error -71 [ 1427.361124][ T5849] usb 6-1: reset high-speed USB device number 88 using dummy_hcd [ 1427.449788][ T5914] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1427.499904][ T29] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1427.619798][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 1427.644370][ T29] usb 5-1: device descriptor read/64, error -71 [ 1427.661335][ T5914] usb 1-1: config 0 has no interfaces? [ 1427.667267][ T5914] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1427.676709][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.703433][ T5914] usb 1-1: config 0 descriptor?? [ 1427.739822][T24994] loop5: detected capacity change from 0 to 4095 [ 1427.770038][ T29] usb usb5-port1: attempt power cycle [ 1427.933617][ T5914] usb 1-1: USB disconnect, device number 86 [ 1427.941395][T24999] FAT-fs (loop1): unable to read boot sector [ 1428.119882][ T29] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1428.160542][ T29] usb 5-1: device descriptor read/8, error -71 [ 1428.278722][T25010] netlink: 'syz.1.5493': attribute type 1 has an invalid length. [ 1428.289014][T25010] netlink: 'syz.1.5493': attribute type 2 has an invalid length. [ 1428.420788][ T29] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1428.441738][ T29] usb 5-1: device descriptor read/8, error -71 [ 1428.550983][ T29] usb usb5-port1: unable to enumerate USB device [ 1428.784470][T25016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.795437][T25016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.889922][T11334] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1428.948299][ T5873] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 1428.955894][ T5873] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 1429.064563][T11334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.081761][T11334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.094426][T11334] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1429.103945][T11334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.118680][T11334] usb 1-1: config 0 descriptor?? [ 1429.288545][T25028] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1429.474536][T25030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.499522][T25030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.560955][T11334] cp2112 0003:10C4:EA90.004C: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1429.645849][T25037] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.5501'. [ 1429.773173][T11334] cp2112 0003:10C4:EA90.004C: error requesting version [ 1429.805129][T11334] cp2112 0003:10C4:EA90.004C: probe with driver cp2112 failed with error -71 [ 1429.826689][T11334] usb 1-1: USB disconnect, device number 87 [ 1429.850590][T25041] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1429.869113][T25040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.886191][T25040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.906762][T25040] random: crng reseeded on system resumption [ 1430.162075][T25048] wg0 speed is unknown, defaulting to 1000 [ 1430.416580][ T5914] kernel write not supported for file /comedi4 (pid: 5914 comm: kworker/1:4) [ 1430.521633][T25055] netlink: 'syz.0.5508': attribute type 75 has an invalid length. [ 1430.735427][T25060] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1431.796338][T25093] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5516'. [ 1431.990565][T25101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.017219][T25101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.090244][T24992] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1432.242813][T24992] usb 5-1: config 2 has an invalid interface number: 117 but max is 0 [ 1432.251557][T24992] usb 5-1: config 2 has no interface number 0 [ 1432.261675][T24992] usb 5-1: config 2 interface 117 has no altsetting 0 [ 1432.281637][T24992] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=1c.1c [ 1432.299780][T24992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.310797][T24992] usb 5-1: Product: syz [ 1432.315214][T24992] usb 5-1: Manufacturer: syz [ 1432.329781][T24992] usb 5-1: SerialNumber: syz [ 1432.533526][ T5849] usb 6-1: device descriptor read/64, error -110 [ 1432.559902][T25097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.575202][T25097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.588874][T25097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.616645][T25097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.638911][T25097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.651121][T25097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.670197][T25097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.683611][T25097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.699048][T25097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.713910][T25097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.744192][T24992] garmin_gps 5-1:2.117: Garmin GPS usb/tty converter detected [ 1432.763350][T24992] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1432.779413][T24992] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1432.791614][ T5849] usb 6-1: reset high-speed USB device number 88 using dummy_hcd [ 1432.812285][T24992] usb 5-1: USB disconnect, device number 99 [ 1432.831287][T24992] garmin_gps 5-1:2.117: device disconnected [ 1432.873622][T25105] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1432.940145][ T5849] usb 6-1: device descriptor read/64, error -32 [ 1432.957339][T25107] tipc: Started in network mode [ 1432.973159][T25107] tipc: Node identity 2, cluster identity 4711 [ 1432.992211][T25107] tipc: Node number set to 2 [ 1433.214457][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5523'. [ 1433.368629][T25117] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5525'. [ 1433.558769][T25124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.578506][T25124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.593160][T11334] Process accounting resumed [ 1433.650007][ T5849] usb 6-1: reset high-speed USB device number 88 using dummy_hcd [ 1433.690610][ T5849] usb 6-1: device descriptor read/8, error -32 [ 1433.720164][T25124] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1433.940037][ T5849] usb 6-1: reset high-speed USB device number 88 using dummy_hcd [ 1433.960056][ T5849] usb 6-1: device descriptor read/8, error -32 [ 1434.072173][ T5849] raw-gadget.1 gadget.5: failed to queue suspend event [ 1434.091522][ T1209] usb 6-1: USB disconnect, device number 88 [ 1434.124157][ T1209] raw-gadget.1 gadget.5: failed to queue reset event [ 1434.200235][T11334] kernel read not supported for file /dsp1 (pid: 11334 comm: kworker/0:7) [ 1434.210646][ T1209] raw-gadget.1 gadget.5: failed to queue resume event [ 1434.218373][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1434.289805][ T1209] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1434.297797][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1434.306326][ T1209] raw-gadget.1 gadget.5: failed to queue reset event [ 1434.379962][ T1209] raw-gadget.1 gadget.5: failed to queue resume event [ 1434.410023][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1434.418381][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1434.432235][ T10] usb 1-1: config 52 has an invalid interface number: 171 but max is 0 [ 1434.442169][ T10] usb 1-1: config 52 has no interface number 0 [ 1434.448501][ T10] usb 1-1: config 52 interface 171 altsetting 7 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1434.449281][ T1209] usb 6-1: device descriptor read/64, error -32 [ 1434.460665][ T10] usb 1-1: config 52 interface 171 altsetting 7 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1434.460709][ T10] usb 1-1: No eUSB2 isoc ep 135 companion for config 52 interface 171 altsetting 7 [ 1434.460733][ T10] usb 1-1: config 52 interface 171 has no altsetting 0 [ 1434.466388][ T10] usb 1-1: New USB device found, idVendor=12d1, idProduct=a481, bcdDevice=cc.a3 [ 1434.504924][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.515218][ T10] usb 1-1: Product: syz [ 1434.519470][ T10] usb 1-1: Manufacturer: syz [ 1434.524658][ T10] usb 1-1: SerialNumber: syz [ 1434.610772][ T1209] raw-gadget.1 gadget.5: failed to queue suspend event [ 1434.623847][ T1209] raw-gadget.1 gadget.5: failed to queue reset event [ 1434.702149][T25144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.712668][ T1209] raw-gadget.1 gadget.5: failed to queue resume event [ 1434.732710][T25144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.752666][T25136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.783177][T25136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.806897][ T1209] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1434.809999][ T10] option 1-1:52.171: GSM modem (1-port) converter detected [ 1434.829969][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1434.837424][ T1209] raw-gadget.1 gadget.5: failed to queue reset event [ 1434.845872][ T10] usb 1-1: USB disconnect, device number 88 [ 1434.864161][ T10] option 1-1:52.171: device disconnected [ 1434.881526][T25155] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1434.910721][ T1209] raw-gadget.1 gadget.5: failed to queue resume event [ 1434.982027][ T1209] usb 6-1: device descriptor read/64, error -32 [ 1435.090724][ T1209] raw-gadget.1 gadget.5: failed to queue suspend event [ 1435.098545][ T1209] usb usb6-port1: attempt power cycle [ 1435.104434][ T1209] raw-gadget.1 gadget.5: failed to queue disconnect event [ 1435.120264][ T1209] raw-gadget.1 gadget.5: failed to queue reset event [ 1435.189941][ T1209] raw-gadget.1 gadget.5: failed to queue resume event [ 1435.197979][ T1209] raw-gadget.1 gadget.5: failed to queue reset event [ 1435.321869][T25163] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5539'. [ 1435.373811][T25166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.385413][T25166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.396601][T25166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.405746][T25166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.414395][ T1209] raw-gadget.1 gadget.5: failed to queue resume event [ 1435.426398][T25166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.457168][T25166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.476635][T25166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.477071][ T5800] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1435.490012][ T1209] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1435.501897][T25166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.515588][T25166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.530674][T25168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.539136][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1435.546809][ T1209] usb 6-1: device descriptor read/8, error -32 [ 1435.553484][T25166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.564128][T25168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.578788][T25168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.589304][T25168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.629850][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1435.678053][ T1209] raw-gadget.1 gadget.5: failed to queue suspend event [ 1435.679956][ T5800] usb 5-1: Using ep0 maxpacket: 8 [ 1435.686143][ T1209] raw-gadget.1 gadget.5: failed to queue reset event [ 1435.697139][ T5800] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1435.707954][ T5800] usb 5-1: config 2 has no interface number 0 [ 1435.714529][ T5800] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1435.724018][ T5800] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1435.733391][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.742138][ T5800] usb 5-1: Product: syz [ 1435.746514][ T5800] usb 5-1: Manufacturer: syz [ 1435.752391][ T5800] usb 5-1: SerialNumber: syz [ 1435.770762][ T1209] raw-gadget.1 gadget.5: failed to queue resume event [ 1435.782101][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1435.792042][ T10] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1435.801777][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.810757][ T10] usb 1-1: Product: syz [ 1435.815119][ T10] usb 1-1: Manufacturer: syz [ 1435.819948][ T10] usb 1-1: SerialNumber: syz [ 1435.828235][ T10] usb 1-1: config 0 descriptor?? [ 1435.838678][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1435.844492][ T1209] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1435.847531][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1435.863767][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1435.875386][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1435.880925][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1435.885190][ T10] usb 1-1: media controller created [ 1435.898131][ T1209] usb 6-1: device descriptor read/8, error -32 [ 1435.914883][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1435.938533][ T10] usb 1-1: selecting invalid altsetting 7 [ 1435.944434][ T10] cxusb: set interface failed [ 1435.949327][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1435.992274][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 1435.999147][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1436.009946][ T1209] raw-gadget.1 gadget.5: failed to queue suspend event [ 1436.021960][ T1209] usb usb6-port1: unable to enumerate USB device [ 1436.099799][ T10] rc_core: IR keymap rc-dvico-portable not found [ 1436.106559][ T10] Registered IR keymap rc-empty [ 1436.113473][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1436.140170][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input144 [ 1436.161915][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 1436.180026][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1436.207551][ T10] usb 1-1: USB disconnect, device number 89 [ 1436.342716][T25177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.359535][T25177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.364316][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1436.394828][ T5800] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1436.398326][T25177] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1436.442512][ T5800] usb 5-1: USB disconnect, device number 100 [ 1436.700112][T25183] netlink: 'syz.0.5544': attribute type 1 has an invalid length. [ 1436.707944][T25183] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5544'. [ 1436.721824][T25183] netlink: 658 bytes leftover after parsing attributes in process `syz.0.5544'. [ 1436.731213][T25183] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5544'. [ 1437.088791][T25187] syzkaller1: entered promiscuous mode [ 1437.094878][T25187] syzkaller1: entered allmulticast mode [ 1437.415094][T25206] netlink: 'syz.1.5550': attribute type 11 has an invalid length. [ 1437.476009][T25208] openvswitch: netlink: Message has 4 unknown bytes. [ 1437.486213][T25208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1437.553360][T25215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1437.649916][ T5800] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1437.779844][ T5800] usb 5-1: device descriptor read/64, error -71 [ 1437.799902][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1437.950837][ T10] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 1437.961568][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1437.969856][ T10] usb 1-1: can't read configurations, error -22 [ 1438.022530][ T5800] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 1438.099847][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1438.139360][T25217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.148464][T25217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.169791][ T5800] usb 5-1: device descriptor read/64, error -71 [ 1438.273566][ T10] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 1438.282127][ T5800] usb usb5-port1: attempt power cycle [ 1438.289815][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1438.298216][ T10] usb 1-1: can't read configurations, error -22 [ 1438.305422][ T10] usb usb1-port1: attempt power cycle [ 1438.619993][ T5800] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 1438.640656][ T5800] usb 5-1: device descriptor read/8, error -71 [ 1438.649984][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1438.671718][ T10] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 1438.682160][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1438.690888][ T10] usb 1-1: can't read configurations, error -22 [ 1438.824359][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1438.852116][ T10] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 1438.872181][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1438.887399][ T10] usb 1-1: can't read configurations, error -22 [ 1438.894140][ T5800] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 1438.903373][ T10] usb usb1-port1: unable to enumerate USB device [ 1438.920542][ T5800] usb 5-1: device descriptor read/8, error -71 [ 1439.043257][ T5800] usb usb5-port1: unable to enumerate USB device [ 1439.096285][T25228] tmpfs: Bad value for 'nr_inodes' [ 1439.182581][T25229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5556'. [ 1439.957461][T25232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5557'. [ 1440.063649][T25237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.075123][T25237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.526091][T25246] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1440.664298][T25250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.678453][T25250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.704001][ T5849] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1440.884277][ T5849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1440.895372][ T5849] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1440.905094][T25254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.907195][ T5849] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1440.918704][T25254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.927606][ T5849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1440.940821][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.948883][ T5849] usb 5-1: Product: syz [ 1440.956021][ T5849] usb 5-1: Manufacturer: syz [ 1440.961460][ T5849] usb 5-1: SerialNumber: syz [ 1440.970448][T25244] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1440.999790][ T5907] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1441.045142][T25258] tipc: Enabling of bearer rejected, failed to enable media [ 1441.153269][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 1441.161072][ T5907] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1441.174529][ T5907] usb 1-1: config 2 has no interface number 0 [ 1441.187395][ T5907] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1441.200824][ T5907] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1441.220180][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.238625][ T5907] usb 1-1: Product: syz [ 1441.248800][ T5907] usb 1-1: Manufacturer: syz [ 1441.253708][ T5907] usb 1-1: SerialNumber: syz [ 1441.614624][T25244] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1441.706514][ T5907] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1441.723716][ T5907] usb 1-1: USB disconnect, device number 94 [ 1441.878032][ T5849] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1441.914411][ T5849] usb 5-1: USB disconnect, device number 105 [ 1441.924388][T25278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.937131][T25278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.579923][ T5849] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1442.679773][T24992] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1442.713167][T25295] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1442.743961][ T5849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.754214][ T5849] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1442.765463][ T5849] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1442.775384][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1442.784311][ T5849] usb 1-1: SerialNumber: syz [ 1442.840202][T24992] usb 5-1: Using ep0 maxpacket: 32 [ 1442.848230][T24992] usb 5-1: config 234 has an invalid interface number: 96 but max is 0 [ 1442.857542][T24992] usb 5-1: config 234 has no interface number 0 [ 1442.864523][T24992] usb 5-1: config 234 interface 96 has no altsetting 0 [ 1442.871598][T24992] usb 5-1: New USB device found, idVendor=14aa, idProduct=0221, bcdDevice=65.ac [ 1442.880879][T24992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.009214][ T5849] usb 1-1: 0:2 : does not exist [ 1443.084967][ T5849] usb 1-1: USB disconnect, device number 95 [ 1443.100705][T24992] usb 5-1: string descriptor 0 read error: -71 [ 1443.136323][T24992] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 1443.153479][T24992] dvb-usb: bulk message failed: -22 (2/0) [ 1443.161711][T24992] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1443.182491][T24992] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 1443.193700][T24992] usb 5-1: media controller created [ 1443.204019][T24992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1443.226386][T25306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.243615][T24992] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1443.253790][T24992] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1443.263945][T25306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.350419][T24992] rc_core: IR keymap rc-dtt200u not found [ 1443.357476][T24992] Registered IR keymap rc-empty [ 1443.364092][T24992] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1443.383068][T24992] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input145 [ 1443.403963][T24992] dvb-usb: schedule remote query interval to 300 msecs. [ 1443.411238][T24992] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 1443.425623][T24992] usb 5-1: USB disconnect, device number 106 [ 1443.506378][T24992] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 1443.818480][T25309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1443.979879][T24992] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1444.021108][T25313] overlayfs: conflicting lowerdir path [ 1444.150060][T24992] usb 5-1: Using ep0 maxpacket: 16 [ 1444.157352][T24992] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1444.167691][T24992] usb 5-1: config 0 has no interface number 0 [ 1444.174260][T25324] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5590'. [ 1444.175485][T25324] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5590'. [ 1444.185214][T24992] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1444.203875][T24992] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1444.223157][T25324] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5590'. [ 1444.234543][T24992] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1444.244919][T24992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.253162][T24992] usb 5-1: Product: syz [ 1444.258003][T24992] usb 5-1: Manufacturer: syz [ 1444.263856][T24992] usb 5-1: SerialNumber: syz [ 1444.273148][T24992] usb 5-1: config 0 descriptor?? [ 1444.279322][T25311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1444.293298][T25311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1444.513227][T25311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1444.525974][T25311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1444.545775][T25338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.556671][T25338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.743975][T24992] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1444.755692][T24992] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 1444.768970][T24992] asix 5-1:0.251: probe with driver asix failed with error -61 [ 1444.789838][ T5800] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1444.949814][ T5800] usb 1-1: Using ep0 maxpacket: 16 [ 1444.956491][T11334] usb 5-1: USB disconnect, device number 107 [ 1444.966145][ T5800] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1444.980374][ T5800] usb 1-1: config 0 has no interface number 0 [ 1444.991887][ T5800] usb 1-1: config 0 interface 35 altsetting 189 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1445.004937][ T5800] usb 1-1: config 0 interface 35 altsetting 189 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.017271][ T5800] usb 1-1: config 0 interface 35 has no altsetting 0 [ 1445.024486][ T5800] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1445.034350][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.046984][ T5800] usb 1-1: config 0 descriptor?? [ 1445.126687][T25354] netlink: 'syz.1.5598': attribute type 29 has an invalid length. [ 1445.137630][T25354] netlink: 'syz.1.5598': attribute type 29 has an invalid length. [ 1445.308215][T25363] binder: Unknown parameter 'stavs' [ 1445.376735][T11334] IPVS: starting estimator thread 0... [ 1445.447731][T25370] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5604'. [ 1445.461801][ T5800] hid_parser_main: 4 callbacks suppressed [ 1445.461825][ T5800] logitech-djreceiver 0003:046D:C52B.004D: unknown main item tag 0x0 [ 1445.478780][T25367] IPVS: using max 34 ests per chain, 81600 per kthread [ 1445.487938][ T5800] logitech-djreceiver 0003:046D:C52B.004D: unknown main item tag 0x0 [ 1445.510373][ T5800] logitech-djreceiver 0003:046D:C52B.004D: unknown main item tag 0x0 [ 1445.519074][ T5800] logitech-djreceiver 0003:046D:C52B.004D: unknown main item tag 0x0 [ 1445.538378][ T5800] logitech-djreceiver 0003:046D:C52B.004D: unknown main item tag 0x0 [ 1445.550921][ T5800] logitech-djreceiver 0003:046D:C52B.004D: hidraw0: USB HID v0.05 Device [HID 046d:c52b] on usb-dummy_hcd.0-1/input35 [ 1445.664278][ T5800] usb 1-1: USB disconnect, device number 96 [ 1445.881466][T11334] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1446.043191][T11334] usb 5-1: config 0 has an invalid interface number: 158 but max is 0 [ 1446.051867][T11334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.064207][T11334] usb 5-1: config 0 has no interface number 0 [ 1446.074993][T11334] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=be.65 [ 1446.087555][T11334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.103101][T11334] usb 5-1: config 0 descriptor?? [ 1446.127622][T11334] usb 5-1: unknown interface protocol 0xea, assuming v1 [ 1446.139174][T11334] usb 5-1: 158:1 : does not exist [ 1446.144966][T11334] usb 5-1: 158:0 : does not exist [ 1446.315749][T11334] usb 5-1: USB disconnect, device number 108 [ 1447.060350][T11334] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1447.179805][ T10] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1447.219849][T11334] usb 1-1: Using ep0 maxpacket: 8 [ 1447.230568][T11334] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1447.239189][T11334] usb 1-1: config 2 has no interface number 0 [ 1447.247771][T11334] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1447.258820][T11334] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1447.260803][ T30] audit: type=1326 audit(1770806020.202:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.270131][T11334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.302627][ T30] audit: type=1326 audit(1770806020.202:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.326727][ T30] audit: type=1326 audit(1770806020.202:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.331182][T11334] usb 1-1: Product: syz [ 1447.355083][T11334] usb 1-1: Manufacturer: syz [ 1447.355319][ T30] audit: type=1326 audit(1770806020.202:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.362512][T11334] usb 1-1: SerialNumber: syz [ 1447.383971][ T30] audit: type=1326 audit(1770806020.202:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.394029][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.420001][ T30] audit: type=1326 audit(1770806020.202:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.420063][ T30] audit: type=1326 audit(1770806020.202:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.468132][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1447.472280][ T30] audit: type=1326 audit(1770806020.202:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.507783][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1447.520294][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 170, setting to 64 [ 1447.531623][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1447.544535][ T30] audit: type=1326 audit(1770806020.202:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.564013][ T10] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1447.583191][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1447.596730][ T10] usb 5-1: Product: syz [ 1447.599526][ T30] audit: type=1326 audit(1770806020.202:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.5.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa073d9bf79 code=0x50000 [ 1447.601361][ T10] usb 5-1: Manufacturer: syz [ 1447.628776][ T10] usb 5-1: SerialNumber: syz [ 1447.654817][ T10] usb 5-1: config 0 descriptor?? [ 1447.661713][T25404] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1447.876997][ T10] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1447.884303][ T10] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1447.971688][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5619'. [ 1448.096818][T25404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1448.130661][T25404] netlink: 'syz.4.5615': attribute type 10 has an invalid length. [ 1448.148446][T25404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.184461][T11334] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1448.197384][T25404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.218495][ T10] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1448.227787][T11334] usb 1-1: USB disconnect, device number 97 [ 1448.246378][ T10] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1448.268827][ T10] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1448.420117][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.426787][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.433511][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.440832][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.447893][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.454861][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.461799][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.468804][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.476123][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.483757][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.490545][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.497344][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.504102][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.510895][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.517771][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.524467][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.531173][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.537871][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.544591][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.551410][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.558118][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.564934][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.572053][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.579100][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.585892][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.592589][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.599274][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.606110][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.614454][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.621229][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.628006][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.635052][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.642028][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.648728][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.655556][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.662310][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.669012][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.676340][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.683999][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1448.690795][ T10] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1448.699616][ T10] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1448.761050][ T10] usb 5-1: USB disconnect, device number 109 [ 1448.890218][T25442] netlink: 'syz.0.5622': attribute type 4 has an invalid length. [ 1449.180707][T11334] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1449.354591][T11334] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1449.363860][T11334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.372088][T11334] usb 1-1: Product: syz [ 1449.376342][T11334] usb 1-1: Manufacturer: syz [ 1449.381262][T11334] usb 1-1: SerialNumber: syz [ 1449.769810][ T5800] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1449.810767][T11334] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1449.823218][T11334] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1449.921572][ T5800] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1449.931745][ T5800] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1449.941569][ T5800] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1449.957347][ T5800] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1449.967596][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.975778][ T5800] usb 5-1: Product: syz [ 1449.980308][ T5800] usb 5-1: Manufacturer: syz [ 1449.985161][ T5800] usb 5-1: SerialNumber: syz [ 1449.998709][ T5800] hub 5-1:1.0: bad descriptor, ignoring hub [ 1450.005991][ T5800] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1450.198647][ T5800] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1450.452903][T25458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.463224][T25458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.514201][T25457] ALSA: seq fatal error: cannot create timer (-19) [ 1450.550473][T24992] usb 5-1: USB disconnect, device number 110 [ 1450.560291][T24992] usblp0: removed [ 1451.050516][T11334] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1451.409944][ T5849] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1451.559843][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 1451.566928][ T5849] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1451.575626][ T5849] usb 5-1: config 2 has no interface number 0 [ 1451.582084][ T5849] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1451.591337][ T5849] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1451.600792][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.608852][ T5849] usb 5-1: Product: syz [ 1451.613261][ T5849] usb 5-1: Manufacturer: syz [ 1451.617926][ T5849] usb 5-1: SerialNumber: syz [ 1452.000383][T11334] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 1452.031548][T11334] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1452.063238][T11334] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1452.088655][T11334] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1452.153683][T11334] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1452.189074][T11334] usb 1-1: USB disconnect, device number 98 [ 1452.291087][ T5849] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1452.303693][ T5849] usb 5-1: USB disconnect, device number 111 [ 1452.576201][T25484] netlink: 'syz.5.5637': attribute type 10 has an invalid length. [ 1452.610299][T25484] veth0_vlan: entered allmulticast mode [ 1452.677245][T25484] veth0_vlan: left promiscuous mode [ 1452.686378][T25484] veth0_vlan: entered promiscuous mode [ 1452.727927][T25484] team0: Device veth0_vlan failed to register rx_handler [ 1452.939977][T24992] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1453.079778][T24992] usb 1-1: device descriptor read/64, error -71 [ 1453.199803][ T5849] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1453.321405][T24992] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1453.353672][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 1453.391384][ T5849] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 1453.414665][ T5849] usb 5-1: config 0 has no interface number 0 [ 1453.422855][ T5869] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1453.440376][ T5849] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=36.a7 [ 1453.449531][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.458610][ T5849] usb 5-1: Product: syz [ 1453.463063][ T5849] usb 5-1: Manufacturer: syz [ 1453.467743][ T5849] usb 5-1: SerialNumber: syz [ 1453.475855][ T5849] usb 5-1: config 0 descriptor?? [ 1453.489785][T24992] usb 1-1: device descriptor read/64, error -71 [ 1453.569315][T25507] netlink: 'syz.5.5643': attribute type 142 has an invalid length. [ 1453.601447][T24992] usb usb1-port1: attempt power cycle [ 1453.610803][ T5849] ushc 5-1:0.191: probe with driver ushc failed with error -110 [ 1453.657669][T25511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.671474][T25511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.690592][T25511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.703408][T25511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.718363][T25495] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1453.740163][ T5800] usb 5-1: USB disconnect, device number 112 [ 1453.949927][T24992] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1453.980810][T24992] usb 1-1: device descriptor read/8, error -71 [ 1454.232966][T24992] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1454.274586][T24992] usb 1-1: device descriptor read/8, error -71 [ 1454.345105][ T5869] Bluetooth: hci3: unexpected subevent 0x19 length: 248 > 28 [ 1454.353247][ T5869] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1454.390242][T24992] usb usb1-port1: unable to enumerate USB device [ 1454.580145][T24992] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1454.749888][T24992] usb 5-1: Using ep0 maxpacket: 32 [ 1454.758123][T24992] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1454.766467][T24992] usb 5-1: config 0 has no interface number 0 [ 1454.775118][T24992] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1454.784874][T24992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.793492][T24992] usb 5-1: Product: syz [ 1454.797976][T24992] usb 5-1: Manufacturer: syz [ 1454.802854][T24992] usb 5-1: SerialNumber: syz [ 1454.811484][T24992] usb 5-1: config 0 descriptor?? [ 1454.821736][T24992] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1455.041765][T24992] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1455.056334][T24992] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1455.500839][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1455.509953][T24992] usb 5-1: USB disconnect, device number 113 [ 1455.525999][T24992] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1455.544259][T24992] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1455.556581][T24992] quatech2 5-1:0.51: device disconnected [ 1456.426217][T25560] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5658'. [ 1457.159758][ T5907] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1457.329917][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 1457.336609][ T5907] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 1457.345096][ T5907] usb 5-1: config 0 has no interface number 1 [ 1457.358475][ T5907] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1457.367738][ T5907] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1457.375948][ T5907] usb 5-1: Product: syz [ 1457.381520][ T5907] usb 5-1: Manufacturer: syz [ 1457.386198][ T5907] usb 5-1: SerialNumber: syz [ 1457.393493][ T5907] usb 5-1: config 0 descriptor?? [ 1457.531610][T25570] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5661'. [ 1457.607985][ T5907] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 1457.619037][ T5907] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 1457.638910][T25574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.651253][ T5907] usb 5-1: USB disconnect, device number 114 [ 1457.660292][T25574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.958391][T25591] netlink: 'syz.0.5668': attribute type 29 has an invalid length. [ 1457.968312][T25591] netlink: 'syz.0.5668': attribute type 29 has an invalid length. [ 1457.977567][T25591] netlink: 'syz.0.5668': attribute type 1 has an invalid length. [ 1457.988468][T25591] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5668'. [ 1458.036642][T25593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5669'. [ 1458.162464][ T30] kauditd_printk_skb: 418 callbacks suppressed [ 1458.162486][ T30] audit: type=1326 audit(1770806031.112:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.216141][ T30] audit: type=1326 audit(1770806031.142:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.239830][ T30] audit: type=1326 audit(1770806031.142:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.262889][ T30] audit: type=1326 audit(1770806031.142:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.285942][ T30] audit: type=1326 audit(1770806031.142:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.311652][ T30] audit: type=1326 audit(1770806031.142:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.335714][ T30] audit: type=1326 audit(1770806031.142:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.371069][ T30] audit: type=1326 audit(1770806031.142:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.395112][ T30] audit: type=1326 audit(1770806031.152:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.462406][ T30] audit: type=1326 audit(1770806031.152:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.4.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b2d9bf79 code=0x7ffc0000 [ 1458.500152][ T5907] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1458.511199][T25607] netlink: 'syz.5.5673': attribute type 2 has an invalid length. [ 1458.678480][ T5907] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1458.688814][ T5907] usb 5-1: config 0 has no interface number 0 [ 1458.696352][ T5907] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 1458.712502][ T5907] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1458.723346][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1458.736546][ T5907] usb 5-1: Product: syz [ 1458.741178][ T5907] usb 5-1: SerialNumber: syz [ 1458.754761][ T5907] usb 5-1: config 0 descriptor?? [ 1458.765931][ T5907] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 1458.781534][ T5907] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input146 [ 1458.831053][T24992] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1458.847369][T25619] netlink: 1372 bytes leftover after parsing attributes in process `syz.5.5676'. [ 1458.858457][ T5869] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 1458.937773][T25624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.954580][T25624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.002867][T24992] usb 1-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1459.013637][T24992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1459.024785][T24992] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1459.034678][T24992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1459.042832][T24992] usb 1-1: SerialNumber: syz [ 1459.260694][T24992] usb 1-1: 0:2 : does not exist [ 1459.296648][T24992] usb 1-1: USB disconnect, device number 103 [ 1459.329073][T23360] udevd[23360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1459.956529][T25635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.965824][T25635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.069925][T24992] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1460.209817][T24992] usb 1-1: device descriptor read/64, error -71 [ 1460.459811][T24992] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1460.528692][T25638] autofs4:pid:25638:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 1460.542825][T25638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1460.590703][T24992] usb 1-1: device descriptor read/64, error -71 [ 1460.700164][T24992] usb usb1-port1: attempt power cycle [ 1460.766632][T25644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.776165][T25644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.997050][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1460.997518][T11334] usb 5-1: USB disconnect, device number 115 [ 1461.004082][ C1] ------------[ cut here ]------------ [ 1461.004145][ C1] URB ffff8880af48c000 submitted while active [ 1461.004175][ C1] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x7b/0x18b0, CPU#1: swapper/1/0 [ 1461.004231][ C1] Modules linked in: [ 1461.036953][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1461.047712][ C1] Tainted: [L]=SOFTLOCKUP [ 1461.052125][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1461.062341][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 1461.067929][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 77 0f ef fa 49 83 3e 00 74 40 e8 ac e9 84 fa 48 8d 3d 75 b8 ff 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 e9 84 fa eb 05 e8 8a e9 [ 1461.087888][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010087 [ 1461.094112][ C1] RAX: ffffffff87410434 RBX: ffff8880af48c000 RCX: 0000000000040000 [ 1461.102123][ C1] RDX: ffffc900023a1000 RSI: ffff8880af48c000 RDI: ffffffff9040bcb0 [ 1461.110497][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 1461.118909][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 1461.127158][ C1] R13: ffff88805c3b2830 R14: ffff8880af48c008 R15: dffffc0000000000 [ 1461.135277][ C1] FS: 0000000000000000(0000) GS:ffff888125110000(0000) knlGS:0000000000000000 [ 1461.144263][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1461.151138][ C1] CR2: 00007fa071fd3fe0 CR3: 0000000078b62000 CR4: 00000000003526f0 [ 1461.159234][ C1] DR0: 0000000000000000 DR1: 00000000000f007a DR2: 0000000000000000 [ 1461.167356][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1461.175403][ C1] Call Trace: [ 1461.178813][ C1] [ 1461.181726][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1461.187673][ C1] ? ___ratelimit+0x58c/0x8d0 [ 1461.192414][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 1461.197854][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1461.203343][ C1] dummy_timer+0xbbd/0x45d0 [ 1461.207909][ C1] ? __resched_curr+0x106/0x3f0 [ 1461.212819][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1461.217848][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1461.223273][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1461.228273][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1461.234586][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1461.239718][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1461.244903][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 1461.250207][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1461.256044][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1461.262173][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 1461.267334][ C1] handle_softirqs+0x22a/0x870 [ 1461.272167][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1461.276970][ C1] __irq_exit_rcu+0x5f/0x150 [ 1461.281605][ C1] irq_exit_rcu+0x9/0x30 [ 1461.285881][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1461.291555][ C1] [ 1461.294511][ C1] [ 1461.297634][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1461.303660][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1461.309545][ C1] Code: 2e 74 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 ed 10 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1461.329374][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1461.335482][ C1] RAX: 0000000000df4359 RBX: ffffffff819ae22d RCX: 0000000080000001 [ 1461.343481][ C1] RDX: 0000000000000001 RSI: ffffffff8e00f000 RDI: ffffffff8c29b900 [ 1461.351479][ C1] RBP: ffffc90000197f10 R08: ffff8880b853395b R09: 1ffff110170a672b [ 1461.359505][ C1] R10: dffffc0000000000 R11: ffffed10170a672c R12: ffffffff903386b0 [ 1461.367606][ C1] R13: 1ffff11003bd2000 R14: 0000000000000001 R15: 0000000000000001 [ 1461.375612][ C1] ? do_idle+0x1bd/0x500 [ 1461.380341][ C1] default_idle+0x9/0x20 [ 1461.384619][ C1] default_idle_call+0x72/0xb0 [ 1461.389417][ C1] do_idle+0x1bd/0x500 [ 1461.393527][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1461.399746][ C1] ? __pfx_do_idle+0x10/0x10 [ 1461.404430][ C1] cpu_startup_entry+0x43/0x60 [ 1461.409310][ C1] start_secondary+0x101/0x110 [ 1461.414382][ C1] common_startup_64+0x13e/0x147 [ 1461.419559][ C1] [ 1461.422644][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1461.429969][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1461.440508][ C1] Tainted: [L]=SOFTLOCKUP [ 1461.444853][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1461.455034][ C1] Call Trace: [ 1461.458339][ C1] [ 1461.461202][ C1] vpanic+0x56c/0xa60 [ 1461.465222][ C1] ? __pfx__printk+0x10/0x10 [ 1461.469952][ C1] ? __pfx_vpanic+0x10/0x10 [ 1461.474512][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1461.479844][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1461.485193][ C1] panic+0xc5/0xd0 [ 1461.489037][ C1] ? __pfx_panic+0x10/0x10 [ 1461.493493][ C1] ? common_startup_64+0x13e/0x147 [ 1461.498632][ C1] __warn+0x315/0x4f0 [ 1461.502648][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 1461.507525][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 1461.512419][ C1] __report_bug+0x29a/0x540 [ 1461.517077][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1461.522855][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 1461.527935][ C1] ? __pfx___report_bug+0x10/0x10 [ 1461.533013][ C1] ? dev_printk_emit+0xee/0x140 [ 1461.537910][ C1] report_bug_entry+0x19a/0x290 [ 1461.542791][ C1] ? usb_submit_urb+0x7e/0x18b0 [ 1461.547688][ C1] ? usb_submit_urb+0x83/0x18b0 [ 1461.552580][ C1] handle_bug+0xca/0x200 [ 1461.556944][ C1] exc_invalid_op+0x1a/0x50 [ 1461.561484][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1461.566474][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 1461.571990][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 77 0f ef fa 49 83 3e 00 74 40 e8 ac e9 84 fa 48 8d 3d 75 b8 ff 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 e9 84 fa eb 05 e8 8a e9 [ 1461.592481][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010087 [ 1461.598603][ C1] RAX: ffffffff87410434 RBX: ffff8880af48c000 RCX: 0000000000040000 [ 1461.606701][ C1] RDX: ffffc900023a1000 RSI: ffff8880af48c000 RDI: ffffffff9040bcb0 [ 1461.614915][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 1461.623004][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 1461.631001][ C1] R13: ffff88805c3b2830 R14: ffff8880af48c008 R15: dffffc0000000000 [ 1461.639009][ C1] ? usb_submit_urb+0x74/0x18b0 [ 1461.643922][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1461.649979][ C1] ? ___ratelimit+0x58c/0x8d0 [ 1461.654800][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 1461.660327][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1461.665857][ C1] dummy_timer+0xbbd/0x45d0 [ 1461.670539][ C1] ? __resched_curr+0x106/0x3f0 [ 1461.675444][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1461.680457][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1461.685909][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1461.690893][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1461.696842][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1461.702081][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1461.707107][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 1461.712877][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1461.719228][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1461.725363][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 1461.730546][ C1] handle_softirqs+0x22a/0x870 [ 1461.735361][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1461.740186][ C1] __irq_exit_rcu+0x5f/0x150 [ 1461.744897][ C1] irq_exit_rcu+0x9/0x30 [ 1461.749182][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1461.754885][ C1] [ 1461.758015][ C1] [ 1461.761128][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1461.767250][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1461.772959][ C1] Code: 2e 74 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 ed 10 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1461.792775][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1461.798900][ C1] RAX: 0000000000df4359 RBX: ffffffff819ae22d RCX: 0000000080000001 [ 1461.806918][ C1] RDX: 0000000000000001 RSI: ffffffff8e00f000 RDI: ffffffff8c29b900 [ 1461.815028][ C1] RBP: ffffc90000197f10 R08: ffff8880b853395b R09: 1ffff110170a672b [ 1461.823398][ C1] R10: dffffc0000000000 R11: ffffed10170a672c R12: ffffffff903386b0 [ 1461.831429][ C1] R13: 1ffff11003bd2000 R14: 0000000000000001 R15: 0000000000000001 [ 1461.839793][ C1] ? do_idle+0x1bd/0x500 [ 1461.844108][ C1] default_idle+0x9/0x20 [ 1461.848412][ C1] default_idle_call+0x72/0xb0 [ 1461.853244][ C1] do_idle+0x1bd/0x500 [ 1461.857364][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1461.863553][ C1] ? __pfx_do_idle+0x10/0x10 [ 1461.868185][ C1] cpu_startup_entry+0x43/0x60 [ 1461.872988][ C1] start_secondary+0x101/0x110 [ 1461.877779][ C1] common_startup_64+0x13e/0x147 [ 1461.882801][ C1] [ 1461.886809][ C1] Kernel Offset: disabled [ 1461.891189][ C1] Rebooting in 86400 seconds..