last executing test programs: 1m29.317324375s ago: executing program 0 (id=1526): r0 = syz_open_procfs(0x0, &(0x7f0000001080)='maps\x00') r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x4f27, 0x5, 0x10000, 0x30, 0x66, 0x4c7, 0x0, 0x8000, 0xa, 0x100, 0xffffffff, 0x1, 0x9, 0x1, 0x2, 0x80000101, 0x5, 0x1a449, 0x3, 0x400, 0x2086, 0x22, 0xd27, 0x20001e5c, 0x7fff, 0x8002, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[], 0x0) 1m26.232899068s ago: executing program 0 (id=1541): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004d29000800010902120001000000000904"], 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)="22c5747e9a7a928d7bc80276230371aa1e7ee06218051372e0b86b93e7278440ea17508596db99b0a180acad899a30b3ac6bf1c56c0d1126ca8c91605dd725d5fc08ae24fe519b10e6a87eff4cf090f283f6f0fc82910b5825a7b3760569cd959d6ff35fae9263c71423f59d55c3c313ec79b321006a549133517ec75f262d102b8d0bf38e14b45060cd1db264a687f74e44545f2da554261eb545ab0d299490c91a7e5f4f0cdc4931a7ecc063619cb69a3ab85c15b4d2298fff735e02869da9a7745be5045b4df95e2a297e6a0d6d253abb2d408975c38c571132307f1261611778328a6341b7", 0xe7) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000006c0)={0x1, 0x8, 0x2, &(0x7f0000000100)={0x17, "c6c1517b5452b3b94bce47509d00"}}) 1m24.628050881s ago: executing program 0 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) kexec_load(0x3e01, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x8ff600000, 0x1000000}], 0x0) r2 = socket(0x1e, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0xae, 0x84, 0xc3, 0x20, 0x4a5, 0x3035, 0xfc17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x83, 0x7, 0x0, 0x75, 0xb6, 0xcc}}]}}]}}, 0x0) (async) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async) sendmmsg$sock(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="e879", 0x2}], 0x1}}], 0x1, 0x40005) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x10000, 0x1000, 0xffffffff, 0x1}, 0x20) (async) recvmsg$qrtr(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x2140}, 0x38, 0x141) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4044000}, 0x40000) (rerun: 64) 1m24.05773305s ago: executing program 0 (id=1555): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080000000fedbdf250f00000014000380080003000000000008000100810000001c0007800c00040080000000000000000c0003000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2805}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) munlock(&(0x7f000018f000/0x4000)=nil, 0x4000) msync(&(0x7f000075e000/0x1000)=nil, 0x1000, 0x6) 1m23.960651498s ago: executing program 0 (id=1556): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000004a80)=0xffff8000, 0x4) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="4017110000000a"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10182, 0x85) (rerun: 64) 1m23.955096234s ago: executing program 0 (id=1557): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x3, 0x0, &(0x7f0000000000)=0x7}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1c07a1672237d7de}, 0x4040014) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000180)=[@wrmsr={0x1e, 0x20, {0x0, 0x9}}, @wr_crn={0x46, 0x20, {0x3, 0xb}}, @cpuid={0x14, 0x18, {0xfffffffe, 0x3ff}}, @out_dx={0xaa, 0x28, {0xb1f4, 0x0, 0xc}}, @wr_drn={0x6e, 0x20, {0x6, 0x3}}, @code={0xa, 0x65, {"0f01c3b805000000b93d0000000f01c166ba2000b837000000efb805000000b9000000800f01d92636410f009d8f5180543e420fc72e440f78600066b85f000f00d8420f01cfb9800000c00f3235002000000f30"}}, @cpuid={0x14, 0x18, {0x4, 0x6}}, @wrmsr={0x1e, 0x20, {0x2fd, 0xfffffffffffff1ca}}, @in_dx={0x82, 0x20, {0x471, 0x5}}, @cpuid={0x14, 0x18, {0x8, 0x34cf}}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x14, 0x18, {0x10, 0x200}}, @wr_crn={0x46, 0x20, {0x4, 0xb6}}, @out_dx={0xaa, 0x28, {0x2642, 0x1, 0x23}}, @rdmsr={0x32, 0x18, {0xad5}}, @wrmsr={0x1e, 0x20, {0xb43, 0x1}}, @code={0xa, 0x78, {"48b8ae000000000000000f23c00f21f835020007000f23f80f01c4400fad6d64e90f000000b8010000000f01c1c443017d8e070000000166baf80cb8389b8b81ef66bafc0c66b8080066ef650f38cb9f00000000660fc771d4b9800000c00f3235000400000f30"}}, @code={0xa, 0x5f, {"c443f91566330666b832018ee866b872008ee067470fc73342a748b800900000000000000f23c80f21f835080000000f23f8450fc72a0f22d80f08c74424002e010000c7442402a0000000ff2c24"}}, @wr_drn={0x6e, 0x20, {0x7, 0xff}}, @out_dx={0xaa, 0x28, {0xd953, 0x1, 0x3}}, @wrmsr={0x1e, 0x20, {0xab4, 0x1}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18}, @in_dx={0x82, 0x20, {0x4f1a, 0x1}}, @in_dx={0x82, 0x20, {0x7e96, 0x3}}], 0x3d4}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000005c0)="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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000006c0)=@int=0x2, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x80, 0x6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000740)={@desc={0x1, 0x0, @desc3}}) r4 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000028c0)={'ip6_vti0\x00', &(0x7f0000002840)={'ip6tnl0\x00', r6, 0x4, 0x64, 0x8, 0x3, 0x10, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf809, 0x10, 0x7fff, 0x6}}) read(r4, &(0x7f0000002900)=""/23, 0x17) r7 = fsmount(r4, 0x0, 0x74) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000002940)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000002980), &(0x7f00000029c0)=0x4) open_by_handle_at(r3, &(0x7f0000002a00)=@reiserfs_4={0x10, 0x4, {0x2, 0x7e, 0x6e, 0x6}}, 0x4502) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r8, 0x0, 0x2a, &(0x7f0000002a40)=""/90, &(0x7f0000002ac0)=0x5a) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) syz_clone(0x90258000, &(0x7f0000002b00)="749e8a82352bfe97755f893c9752f7369d45efab2d502a904117522d42ab3b1fb78c4b3de81b5aa359d32a66ef264ab3f03423e31f871493d6b2bdc9184ae05a047d24ca7e77ba7f3a603f3f9db491fbceb46214c6ecdd9fafa8da3fd8f2f1a3b0bd9afbb1e44f5394a6a291a88bf082b5b8aa635a93a3497b1119c6229a65039c664be23774971646ac9a1cab6a3f8d2e5e0314749acb0ea7d60d205575cca2afa04eb5f670dc75108e43eadb201db6a943cb80d014fb2347720d4df2da93ec6b0420464768243d72b8c6549f85b5bded0fe9f29f5d60ea4de63232fec42dfc7eb96212d177eb9690196f3290", 0xed, &(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002c80)="115a264376663cca7f7963345e7d92128b8d85d35fbafcf86793c1495e826671128ae152f32d9a53d8c83388016a324023a5e9ae5f27b9ae7fe986714b4871debdda8c98d7237e2a1dfac54007209a55cb21064e4af96a64dc519eb6e956b7c01f3ca97125ee6ce46d73dd91160c571b8f6bcb59b39dac9c9949a84887ce30f1d8d7e082d3f21dfd755a3afca142a387b77b7769621d7bb728e66dd5809e3bcffdc95de0bfaf61df4fba7bbded4a804c88731478a4878910e972821289d670f95726b1d613e887aaa9cf") sendmsg$inet(r4, &(0x7f0000002f00)={&(0x7f0000002d80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000002ec0)=[{&(0x7f0000002dc0)="37cd54299839a59ee8e4ef09ecef64958606f3d5ae6869b3e92cb2b5ec96387ce56b69609207406abdfc8d993fd0a7697687b0026249ccb3b5a7ed35ea41551f31b8f8f532ea5740adb40ed8506592ed6d8612e75f173608b198ba9ca2b725583be583091ce041612c5ae6f22fd96e965b94ce6ce5b04b753596e0a9a35df4", 0x7f}, {&(0x7f0000002e40)="68a7099a4df62104c6d5c8b45246c6bdbcf5eaf5b4ffcadbf4e4673f5b7b2fc1f33a252dc54863658185af9276c66ad6038cfd38d0388040314e30841b60997c401760f90fa11fec6f0db9bcfee3614f5ff1185330", 0x55}], 0x2}, 0x24000882) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x2) fanotify_mark(r4, 0x2, 0x48000008, r3, &(0x7f0000002f40)='./file1\x00') ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000002f80)) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000003000)={0x74, 0x0, 0x49}) 1m8.485383205s ago: executing program 32 (id=1557): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x3, 0x0, &(0x7f0000000000)=0x7}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1c07a1672237d7de}, 0x4040014) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000180)=[@wrmsr={0x1e, 0x20, {0x0, 0x9}}, @wr_crn={0x46, 0x20, {0x3, 0xb}}, @cpuid={0x14, 0x18, {0xfffffffe, 0x3ff}}, @out_dx={0xaa, 0x28, {0xb1f4, 0x0, 0xc}}, @wr_drn={0x6e, 0x20, {0x6, 0x3}}, @code={0xa, 0x65, {"0f01c3b805000000b93d0000000f01c166ba2000b837000000efb805000000b9000000800f01d92636410f009d8f5180543e420fc72e440f78600066b85f000f00d8420f01cfb9800000c00f3235002000000f30"}}, @cpuid={0x14, 0x18, {0x4, 0x6}}, @wrmsr={0x1e, 0x20, {0x2fd, 0xfffffffffffff1ca}}, @in_dx={0x82, 0x20, {0x471, 0x5}}, @cpuid={0x14, 0x18, {0x8, 0x34cf}}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x14, 0x18, {0x10, 0x200}}, @wr_crn={0x46, 0x20, {0x4, 0xb6}}, @out_dx={0xaa, 0x28, {0x2642, 0x1, 0x23}}, @rdmsr={0x32, 0x18, {0xad5}}, @wrmsr={0x1e, 0x20, {0xb43, 0x1}}, @code={0xa, 0x78, {"48b8ae000000000000000f23c00f21f835020007000f23f80f01c4400fad6d64e90f000000b8010000000f01c1c443017d8e070000000166baf80cb8389b8b81ef66bafc0c66b8080066ef650f38cb9f00000000660fc771d4b9800000c00f3235000400000f30"}}, @code={0xa, 0x5f, {"c443f91566330666b832018ee866b872008ee067470fc73342a748b800900000000000000f23c80f21f835080000000f23f8450fc72a0f22d80f08c74424002e010000c7442402a0000000ff2c24"}}, @wr_drn={0x6e, 0x20, {0x7, 0xff}}, @out_dx={0xaa, 0x28, {0xd953, 0x1, 0x3}}, @wrmsr={0x1e, 0x20, {0xab4, 0x1}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18}, @in_dx={0x82, 0x20, {0x4f1a, 0x1}}, @in_dx={0x82, 0x20, {0x7e96, 0x3}}], 0x3d4}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000005c0)="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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000006c0)=@int=0x2, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x80, 0x6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000740)={@desc={0x1, 0x0, @desc3}}) r4 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000028c0)={'ip6_vti0\x00', &(0x7f0000002840)={'ip6tnl0\x00', r6, 0x4, 0x64, 0x8, 0x3, 0x10, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf809, 0x10, 0x7fff, 0x6}}) read(r4, &(0x7f0000002900)=""/23, 0x17) r7 = fsmount(r4, 0x0, 0x74) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000002940)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000002980), &(0x7f00000029c0)=0x4) open_by_handle_at(r3, &(0x7f0000002a00)=@reiserfs_4={0x10, 0x4, {0x2, 0x7e, 0x6e, 0x6}}, 0x4502) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r8, 0x0, 0x2a, &(0x7f0000002a40)=""/90, &(0x7f0000002ac0)=0x5a) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) syz_clone(0x90258000, &(0x7f0000002b00)="749e8a82352bfe97755f893c9752f7369d45efab2d502a904117522d42ab3b1fb78c4b3de81b5aa359d32a66ef264ab3f03423e31f871493d6b2bdc9184ae05a047d24ca7e77ba7f3a603f3f9db491fbceb46214c6ecdd9fafa8da3fd8f2f1a3b0bd9afbb1e44f5394a6a291a88bf082b5b8aa635a93a3497b1119c6229a65039c664be23774971646ac9a1cab6a3f8d2e5e0314749acb0ea7d60d205575cca2afa04eb5f670dc75108e43eadb201db6a943cb80d014fb2347720d4df2da93ec6b0420464768243d72b8c6549f85b5bded0fe9f29f5d60ea4de63232fec42dfc7eb96212d177eb9690196f3290", 0xed, &(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002c80)="115a264376663cca7f7963345e7d92128b8d85d35fbafcf86793c1495e826671128ae152f32d9a53d8c83388016a324023a5e9ae5f27b9ae7fe986714b4871debdda8c98d7237e2a1dfac54007209a55cb21064e4af96a64dc519eb6e956b7c01f3ca97125ee6ce46d73dd91160c571b8f6bcb59b39dac9c9949a84887ce30f1d8d7e082d3f21dfd755a3afca142a387b77b7769621d7bb728e66dd5809e3bcffdc95de0bfaf61df4fba7bbded4a804c88731478a4878910e972821289d670f95726b1d613e887aaa9cf") sendmsg$inet(r4, &(0x7f0000002f00)={&(0x7f0000002d80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000002ec0)=[{&(0x7f0000002dc0)="37cd54299839a59ee8e4ef09ecef64958606f3d5ae6869b3e92cb2b5ec96387ce56b69609207406abdfc8d993fd0a7697687b0026249ccb3b5a7ed35ea41551f31b8f8f532ea5740adb40ed8506592ed6d8612e75f173608b198ba9ca2b725583be583091ce041612c5ae6f22fd96e965b94ce6ce5b04b753596e0a9a35df4", 0x7f}, {&(0x7f0000002e40)="68a7099a4df62104c6d5c8b45246c6bdbcf5eaf5b4ffcadbf4e4673f5b7b2fc1f33a252dc54863658185af9276c66ad6038cfd38d0388040314e30841b60997c401760f90fa11fec6f0db9bcfee3614f5ff1185330", 0x55}], 0x2}, 0x24000882) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x2) fanotify_mark(r4, 0x2, 0x48000008, r3, &(0x7f0000002f40)='./file1\x00') ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000002f80)) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000003000)={0x74, 0x0, 0x49}) 10.882634969s ago: executing program 4 (id=1975): sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100000000000fbdbdf25030000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24048014}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x4047, 0xffffffff, 0x0, 0x9e) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 7.823976072s ago: executing program 4 (id=1989): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x8, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x440002, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x112) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB="73697a653d74322c0020bf29306ebd1664fd5ef15b51db2438bda993bbee37134ffb584dd6309e10c6ddfd84ee9f362ec4b1ca42f65bb9df67ccb3d5b40efea240c90d2cfa1671218e42bbd0e378914c7e925f4aacbf5828ab70b524e9ebc1374db053467fc04c8c15f2b7ea97a091edb52f0e6d3d9e38dd05bac94a96209aa82b00f6cfdebf8c7aab6ee7ee0b847a3d3c158465ce6ad97cfb5676187ec4108200e5d10add4bfea65aa40c1de11a98ab8a07ecb078006085afe7fb994af9"]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000340)="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", 0x2d9}, {&(0x7f0000000b00)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc906dc9b1477866b7882c57bb6f7f7c3ee17c420000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfba09771910344ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b2319344d3c2781803a2119d9efd47b1abba3c1e6c563c1ec692da80ef66b19495b8e801d07b133f1b552ee772732a90e765b92d67f7a0cc8f15a4c6143f7", 0x254}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d", 0x53}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000340)={0x58, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x783f9600284e2581, 0x3, 0x38}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f0000000180)) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003b1fe0102030109021200010000007f0904000000d3a53e00"], &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYRES16], 0x1, [{0xfffffffffffffef2, 0x0}]}) 4.780974926s ago: executing program 4 (id=1997): r0 = socket(0x6, 0x2, 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x48, 0x0, 0x3}]}) (async) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000080)={0x6, 0x36314d4e, 0x6, 0x38, 0x2, @stepwise={{0xbaa, 0x3}, {0xd0000000, 0x8}, {0x833, 0x80000001}}}) 4.684110228s ago: executing program 4 (id=1998): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/78, 0x0, 0xdddd1000}) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x1, 0x2, {0xa, 0x4e22, 0x6, @empty, 0x1f}}}, 0x32) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @empty, 0x80000001}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000100), 0x4) (async) r6 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r6, &(0x7f0000000240), 0xfdef) (async) read$FUSE(r6, &(0x7f0000002540)={0x2020}, 0xfdef) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x15) (async, rerun: 64) r7 = accept4(r3, 0x0, 0x0, 0x0) (async, rerun: 64) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x7fff, '\x00', @value64=0x2}}) (async) sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) accept$nfc_llcp(r7, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000380)={0x1, 0x7}) 4.596396995s ago: executing program 4 (id=1999): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340)={0x80, 0x6}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x8f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x5, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'a'}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x1, 0xa}, {0x6, 0x24, 0x1a, 0x277c, 0x1}, [@obex={0x5, 0x24, 0x15, 0xc73b}, @dmm={0x7, 0x24, 0x14, 0xfffc, 0xccd}, @acm={0x4, 0x24, 0x2, 0x3}, @country_functional={0x8, 0x24, 0x7, 0x4, 0xff, [0x1]}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xb, 0xe5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x2, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x2c, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x6}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x1, 0x4, 0xa1, 0x10, 0xe2}, 0xc5, &(0x7f0000000140)={0x5, 0xf, 0xc5, 0x6, [@generic={0x95, 0x10, 0x4, "5eb7ccc558880286bda2dd856776fbbc5460f85cc294c93af0d6942664fda75b92be5fe0eab30fe3f99039129ca26d16b8b2a81ed3c16ef5d7d2c4849121aa3ffb57933d16cce12fb4c3411d55b690de970afc06922eb3646ea9d40e2110052e5d3c8421eae7828ef12e8866ec5124a1ecf22bc99ee0bed8f826fa8c7c3d4ce2a2a2c1c58d55821b651655fec980d1b99265"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x27, 0x1, 0x28, 0xf142, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x13, 0xfa, 0x0, 0x0, 0x2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc1, 0x2, 0x3a, 0xb, 0x7}]}, 0x8, [{0x5b, &(0x7f0000000240)=@string={0x5b, 0x3, "f5e45f6b3d888c4e5b3c34ef9bc886cb21169599bd3a95ebf724613bd1078c66a302cfdefa4301ac3abc7f38b10f7ded71554fd8127060d3f824f64e87fecff50d5db13979f7ecb037156e7662784fe62dea245b599482f57c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42a}}, {0xf9, &(0x7f0000000380)=@string={0xf9, 0x3, "fa8ab34a99a81cfdc6a60fed74d27fa0399264ed24a09e74518ad1605f6a05b16f0e5d4c35042c648edd231ecb50f5f4e865607877390138e7a8138b8421709516a4542a50deccf1345603707c73cf9d58fb73bc0e1f15afd695e02593121959129d50def3bb6839c31c62a749b083f0ae62cbba8ad3873730242958ffa3a39e594c51036a27a540c7d28f7514286039f0a6b8c1dd3a5e121b6c0011ba39373d75dae96fc3fd806261ee0383b2cb4d14670f70d6aaf019174aaef126945a09132446e05545703fbe019ab4dbfb45d9b7dd48e9753d1017bc66b683d7383a0eb2ee9e96c3d61b640368e9be8d4a24e645bd00aea9ed7a3f"}}, {0x43, &(0x7f0000000480)=@string={0x43, 0x3, "4d7c9f9c3a77048a4bb9e2a5823545aa5d8b724e92a35ec26ba9ad4b5a032b31d75b550d91681bcad975c5406143b69aff4029dda99508eac973510e07319fe9ab"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1809}}]}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) faccessat(0xffffffffffffffff, 0x0, 0x3) sendfile(r4, r5, 0x0, 0x38) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000001680)={&(0x7f0000001180), 0xc, &(0x7f00000016c0)={&(0x7f00000011c0)={0x444, 0x3f3, 0x200, 0x70bd2b, 0x25dfdbfb, {0x1, 0x2, 0x17, [0xfffffff8, 0x5, 0x9, 0x3, 0xfa, 0x0, 0xe70, 0x7fffffff, 0x2, 0x7ff, 0x6, 0x5, 0x4, 0x7, 0xb, 0x0, 0x4, 0x9, 0x3be, 0x9, 0x80000000, 0x3, 0x8, 0x0, 0xad, 0x9, 0x4, 0x8, 0x7060, 0xfffffffe, 0x6432, 0xcb, 0xffffffff, 0x7, 0x1d28, 0x6, 0x49, 0x4e9, 0x18, 0x6, 0x9, 0x9, 0xe4, 0x82c4, 0x1ff, 0x0, 0x1, 0x6, 0x6, 0xff, 0x5, 0x18000000, 0xfff, 0x4, 0x3ff, 0x1, 0x9, 0x3, 0xff, 0x4b8, 0x8001, 0x7f, 0x19, 0x7], [0x6, 0x3, 0x40, 0x4aae, 0x5, 0xfff, 0x5, 0x45, 0x2, 0x8010001, 0x80000001, 0x4, 0x3, 0x3, 0x0, 0x1, 0x1, 0xdbde, 0x2, 0xb, 0xcf55, 0xd65, 0x8, 0x2, 0x2, 0x9, 0x4, 0xfffffffc, 0x7, 0x4, 0xd, 0x4, 0x0, 0x200, 0x4, 0x3, 0x0, 0x4, 0x28000, 0x8, 0x6, 0x2, 0x1, 0x4, 0x81, 0xffffff81, 0x80000001, 0x6, 0x0, 0x9, 0x3, 0x2, 0x3, 0x9, 0x3, 0x10, 0xe08, 0x0, 0xffffff00, 0x190, 0x7f000, 0x3, 0x4, 0x9], [0xc74, 0x5, 0x9, 0x9, 0x1, 0x71e, 0x7, 0xffff, 0x0, 0xda, 0x0, 0x400, 0x4, 0xb0, 0xe, 0x1, 0xeb, 0xdd17, 0x7, 0x42892fa7, 0x1, 0x1, 0x0, 0x800, 0x8, 0x2, 0x2, 0x800, 0x8, 0xe9b8, 0x0, 0xfffffffa, 0x0, 0xac, 0x8, 0x10000, 0x9a, 0x1, 0x808, 0x68b4e209, 0x8, 0xbae4, 0x7ff, 0x0, 0xf, 0xb, 0x5, 0x1ff, 0x50000, 0xd, 0x4, 0x1, 0x2fe7d211, 0x40, 0x80000001, 0x3a7, 0x5, 0x8, 0x262eb128, 0xf, 0xc1, 0x8, 0x6, 0x8], [0x8, 0x1, 0xe, 0x90b7, 0x1, 0x401, 0xd1, 0xdf44, 0x5, 0x2, 0x8, 0x9, 0x2, 0x1, 0x0, 0x0, 0x9, 0x8, 0x33b, 0xfffffffc, 0x8, 0x8000, 0x0, 0x3, 0x7fff, 0xffff, 0x4, 0x1a4000, 0x6, 0x4, 0x8000, 0xd, 0x10001, 0x200, 0x9, 0x0, 0x7fff, 0xb, 0x5, 0x4, 0xa93e0000, 0x8, 0x7, 0x7, 0xbb, 0x7, 0x5, 0x5, 0x80, 0x8, 0x4, 0x8, 0x1, 0x6, 0xfa, 0x2, 0x5, 0x7, 0x9, 0x0, 0x1000, 0x7ff, 0x8, 0x9], 0x21, ['+\x00', '(:,)/)!\xce}.\\,,-\x00', '@(\'\x00', '\x00', '\x00', '{*\x00', '\\\x00', '#@@[\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x4800}, 0x48801) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, &(0x7f0000000600)={0x40, 0x5, 0x56, {0x56, 0x1, "8002d15b67af059c7dbd1df54211b05cf799c259b0f5aeb7f3ae50c85344ea6c84397ad8360a23073e8a87f2e447f9320a6d3c8a218ffb77ee95f2b68455777f78d459781e24fed98067d1618cad4b0afbeea459"}}, &(0x7f0000000680)={0x0, 0x3, 0x28, @string={0x28, 0x3, "f01fdcc3c750797f97b8e0ec37896111d600295dc76fea949c04964e09d44c626ac03f9dd85a"}}, &(0x7f00000006c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x1, 0x0, 0xc, "9f"}, @global=@item_012={0x1, 0x1, 0xa, 'n'}, @main=@item_012={0x2, 0x0, 0xa, "32cc"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x10, 0x1, {0x22, 0x386}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x40, 0x3b, 0xcd, "d4c5f5beb008e336026d184fd6242214eccb1f151cc9476711e1b1626df3cdbf018b456d9af1e787091a4859a623f781ba2c8a34b12c6daa5ce75d19102d74eb36bce0263e9db5a5c508cd96d2cd8db066aeda458d83e4e3a6ccc3c05e3c2292764cf319431cee601cd20ada0b4c647fdadbff83b6e028580f192b9f27036882bc44d9aed160b898f58ae5adefad9a47f1abc91cb85d01b8f16b38db79d9b9885f99ae14c4c023f16c296f81a822d212de80beccd1ccc4cbae43218b25a3e55717cb29455cfd9ab0e5d779a31f"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000900)={0x20, 0x1, 0xe8, "6a3b9392572c8d57b8814a88e35cf4288aed3f593f01020678b027c98ee5145d053dfa93e4577778dedcbd0e5aa16162b5cb46b5e2fed84f417893ae656c481876da4872b4b74b8e8bbfc915a26a3c1289bdc2015e281d561ee2603148cac0b5489acf01a117c21753a8023a75dbfcd1083ae33fcdeaf21b221f49587ff2b7200795ec2fa585e22387902eedb5a6956737ece4aa48eabe46468c789b3748170e28201df833bdd988ff8cd25feb975dda641f2ad4c4e96b49762b8e7daeda073b41a4886ff4f7e659800f66aec90c3556a55fb35392bf6abcb5534f4716d6b422a18c155e5d336e7c"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x8}}) socket$kcm(0x29, 0x7, 0x0) 2.879148014s ago: executing program 3 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1b}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) 2.878143242s ago: executing program 3 (id=2013): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f00000000c0)=0xc, 0x4) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.261614629s ago: executing program 1 (id=2016): memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^\x84{\x00\x02\xb9~B\x9f\xacl\x1d3\xa6\xab\x81\x9d\x13\x89\x9b\x00\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\7\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~\x03\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000200)={0x14, 0x49, 0x1, {0x4, 0x4, 0x7}}, 0x14) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) preadv(r5, &(0x7f00000041c0)=[{&(0x7f0000001040)=""/102, 0x5}], 0x2, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffd, 0x0, 0x2, 0x1d, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31d9721ebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237608945ffbf2ce6a6c4dae4162ec3ac61b7ad3300", [0x2, 0x6]}}) execveat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000) 2.168482285s ago: executing program 1 (id=2017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000140)={0x0, &(0x7f0000000800)=[@wr_crn={0x46, 0x20, {0x0, 0xfffffffffffffffe}}, @code={0xa, 0x55, {"66430f388002b8010000000f01d96466650f01f8b9800000c00f3235002000000f30c4a1c9e2e50fafe6f30f38f60e66baf80cb8c2441489ef66bafc0c66ed0f060f01c4"}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @uexit={0x0, 0x18, 0xa21}, @wr_drn={0x6e, 0x20, {0x4, 0x1000}}], 0xcd}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000500)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendto$llc(0xffffffffffffffff, &(0x7f0000000440)="39633a9ed9d1195f43814d3a6c470cb8504cb76a0fa2fa29d1d8caa0eb838d9518c0b4b51749eed470ee27f326b6dec97c5776a7be9a1c5e60ea276337b8d9ed41e9ad09258c6100ae0652a611624f0302b5dd316334da299485849c061f11b05ae844a93d71f0961f0e09408c1f9e", 0x6f, 0x2000000, &(0x7f00000004c0)={0x1a, 0x324, 0xb, 0x5, 0x8, 0xff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) write$tun(r6, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08"}}}}, 0x3a) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1}, 0x8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4082, 0xff2}], 0x1, 0x7fff, 0x4) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000300)={0x8, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x110) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x0, &(0x7f00000001c0)='discard') mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x800000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r0}}) 1.577407863s ago: executing program 4 (id=2020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0xb, "24329288"}, @local=@item_4={0x3, 0x2, 0x0, "9118d428"}, @main=@item_4={0x3, 0x0, 0xb, "d68b27f8"}, @main=@item_4={0x3, 0x0, 0xa, "03ce53fa"}]}}, 0x0}, 0x0) 1.432243059s ago: executing program 3 (id=2021): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={0x428, 0x3f4, 0x100, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x2a, [0x8000, 0x5, 0x8, 0xffff, 0x10, 0x6, 0x3, 0x8000, 0x0, 0xc, 0xff, 0x2, 0x7f, 0x5, 0x3, 0x2, 0x8, 0x2, 0x1, 0xb, 0x8, 0x8, 0x7, 0x9, 0x8, 0x4f, 0x6, 0x2, 0xd, 0xd, 0x9c4, 0x4, 0x3, 0xfffffffa, 0x6, 0xff, 0x6, 0x9, 0x80000001, 0x6, 0x8, 0xfffffbff, 0x3, 0x4, 0x94, 0x4, 0x6363657, 0x1, 0x7ff, 0x2, 0x4, 0x9, 0x3, 0x4, 0x2, 0x6, 0xfff, 0x7fff, 0x8, 0x3ff, 0xda, 0x0, 0x3ab, 0x3], [0x5, 0x9, 0x6, 0x4, 0x3, 0xfff, 0x9, 0x0, 0x81, 0x6, 0x8, 0xa, 0x18000000, 0x881, 0x50b4, 0x5, 0x7ff, 0x2, 0x4, 0x9, 0x3, 0x2, 0xd878, 0x7, 0x0, 0xc, 0x0, 0x3, 0xfffffff4, 0x1, 0x0, 0x1ff, 0x8, 0x8, 0x257, 0xff3c, 0x2, 0x6, 0x1000, 0x10, 0xffffffe3, 0x1, 0x8, 0x8, 0x200, 0xfffffffd, 0x2, 0x4, 0x3, 0x81, 0x1ff, 0x2, 0x0, 0xfff, 0x5, 0x7f, 0x1, 0x0, 0x480000, 0x3, 0x9, 0x200, 0x80000001, 0xa9f], [0x2e, 0x0, 0x6, 0xd4, 0x8, 0x87d, 0x100, 0x4, 0x200, 0x7, 0x3, 0x2, 0x39a, 0x7f, 0xf, 0x0, 0x10, 0x8, 0x8de, 0x8, 0x1, 0x2, 0x1c62, 0x4, 0x4, 0x0, 0x3, 0x2000, 0x5, 0x2afe, 0x7, 0x8001, 0x6, 0x3, 0x0, 0x8000, 0xd9ad, 0x3309800, 0xb39c, 0xec000000, 0x0, 0x8, 0x7, 0x1ff, 0x5, 0xd2080000, 0xb693, 0xd018, 0x1, 0x9, 0x8, 0x3, 0xbc17, 0x8, 0x401, 0x7, 0x81, 0x800, 0x0, 0x5, 0x1, 0x1, 0x8, 0x3ff], [0x10, 0x7, 0x8001, 0x40, 0x5, 0x69, 0x5, 0x1, 0x5, 0x4dd3049f, 0x74, 0xa, 0x2, 0x4, 0x1, 0x65, 0x10000, 0x2, 0xf, 0x3, 0x7, 0x379a, 0x1, 0xb1, 0x80000001, 0x4, 0x2, 0x2, 0x80, 0x2, 0x0, 0x10, 0x401, 0x0, 0x400, 0x40, 0x4, 0x6, 0x3, 0x9, 0x80000000, 0x4, 0xfffffffb, 0x0, 0x5, 0x391b, 0x10000, 0x6, 0x886, 0x1ff, 0x7, 0x3, 0x1, 0x3, 0x3, 0xff, 0x8001, 0x81, 0x6, 0x7fff, 0xd, 0x3, 0x6, 0x50], 0x8, ['tls', 'syz1\x00']}, ["", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x48840}, 0x80) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={0x428, 0x3f4, 0x100, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x2a, [0x8000, 0x5, 0x8, 0xffff, 0x10, 0x6, 0x3, 0x8000, 0x0, 0xc, 0xff, 0x2, 0x7f, 0x5, 0x3, 0x2, 0x8, 0x2, 0x1, 0xb, 0x8, 0x8, 0x7, 0x9, 0x8, 0x4f, 0x6, 0x2, 0xd, 0xd, 0x9c4, 0x4, 0x3, 0xfffffffa, 0x6, 0xff, 0x6, 0x9, 0x80000001, 0x6, 0x8, 0xfffffbff, 0x3, 0x4, 0x94, 0x4, 0x6363657, 0x1, 0x7ff, 0x2, 0x4, 0x9, 0x3, 0x4, 0x2, 0x6, 0xfff, 0x7fff, 0x8, 0x3ff, 0xda, 0x0, 0x3ab, 0x3], [0x5, 0x9, 0x6, 0x4, 0x3, 0xfff, 0x9, 0x0, 0x81, 0x6, 0x8, 0xa, 0x18000000, 0x881, 0x50b4, 0x5, 0x7ff, 0x2, 0x4, 0x9, 0x3, 0x2, 0xd878, 0x7, 0x0, 0xc, 0x0, 0x3, 0xfffffff4, 0x1, 0x0, 0x1ff, 0x8, 0x8, 0x257, 0xff3c, 0x2, 0x6, 0x1000, 0x10, 0xffffffe3, 0x1, 0x8, 0x8, 0x200, 0xfffffffd, 0x2, 0x4, 0x3, 0x81, 0x1ff, 0x2, 0x0, 0xfff, 0x5, 0x7f, 0x1, 0x0, 0x480000, 0x3, 0x9, 0x200, 0x80000001, 0xa9f], [0x2e, 0x0, 0x6, 0xd4, 0x8, 0x87d, 0x100, 0x4, 0x200, 0x7, 0x3, 0x2, 0x39a, 0x7f, 0xf, 0x0, 0x10, 0x8, 0x8de, 0x8, 0x1, 0x2, 0x1c62, 0x4, 0x4, 0x0, 0x3, 0x2000, 0x5, 0x2afe, 0x7, 0x8001, 0x6, 0x3, 0x0, 0x8000, 0xd9ad, 0x3309800, 0xb39c, 0xec000000, 0x0, 0x8, 0x7, 0x1ff, 0x5, 0xd2080000, 0xb693, 0xd018, 0x1, 0x9, 0x8, 0x3, 0xbc17, 0x8, 0x401, 0x7, 0x81, 0x800, 0x0, 0x5, 0x1, 0x1, 0x8, 0x3ff], [0x10, 0x7, 0x8001, 0x40, 0x5, 0x69, 0x5, 0x1, 0x5, 0x4dd3049f, 0x74, 0xa, 0x2, 0x4, 0x1, 0x65, 0x10000, 0x2, 0xf, 0x3, 0x7, 0x379a, 0x1, 0xb1, 0x80000001, 0x4, 0x2, 0x2, 0x80, 0x2, 0x0, 0x10, 0x401, 0x0, 0x400, 0x40, 0x4, 0x6, 0x3, 0x9, 0x80000000, 0x4, 0xfffffffb, 0x0, 0x5, 0x391b, 0x10000, 0x6, 0x886, 0x1ff, 0x7, 0x3, 0x1, 0x3, 0x3, 0xff, 0x8001, 0x81, 0x6, 0x7fff, 0xd, 0x3, 0x6, 0x50], 0x8, ['tls', 'syz1\x00']}, ["", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x48840}, 0x80) socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000400)=ANY=[], 0x4) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x80000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000001}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000001}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x164, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x45e}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40000000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcc1ea940}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x401, 0xe9aa]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffff}]}, 0x164}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r2, 0x0, r2) (async) r4 = fcntl$dupfd(r2, 0x0, r2) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) (async) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) (async) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000b00)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfef8a) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x0, 0x809, 0x70bd29, 0x3}, 0x14}}, 0x4004000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0xfffffffc, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x316575}, 0x0, {0xfd}, 0x0, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x316575}, 0x0, {0xfd}, 0x0, 0x2}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfcd3bb00f90429fc60", 0x14}], 0x1}, 0x2400c000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "609eeff8756985a6", "534548cd1994aef978ddcb14bc518f8b", "12b922ff", "fc79fdc63274e783"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "609eeff8756985a6", "534548cd1994aef978ddcb14bc518f8b", "12b922ff", "fc79fdc63274e783"}, 0x28) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000000c0)={0x4, [0x2, 0x8, 0x1, 0x7424]}, &(0x7f0000000100)=0xc) 1.373258015s ago: executing program 3 (id=2022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00cc81", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000600000024001780040006"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB="e2ffadc68b"], 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x203}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x624, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5fc, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x5e8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x5d8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0xac, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "ba62d44f57a788fc2c4ae75f33ad99f8bdcd"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DATA={0xd0, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "144eaeee2200f9d51037546ad099099d04aa1412020936fe8ee950209a3d32778fcd44ec22482c278a2e64c41e13716c801f6097939aa9c4e0a4ee694c81f1c1667f118523cebf0e6943a325a86829357ea522517a7da0ece2cb815cbe5f56876e9fb9955a3ede22447c1cd2cc95457d68501704965dc267a5e8e19e3d5139ac46139696845f8c04000ab8702c4e04a625429193eeff61f4294948c4eec587ff5f6a4b3a0c3bc04928c5a8036a640efb338e05c1d8ad105695532dd7547fd87f81d92ebc9060a869"}]}, @NFTA_BITWISE_MASK={0x264, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "387512617402cea5a129423543e5863ae9148ceff855193b847a0542572fa0621081a9c270ce6905f02db249cc9361fde342b3e8328fe8ef4aade111c4b922c2a3e83aee9b214472c0187271d9dbe2a57389cbd89b9d77eff2270ce017183531c1f573ecec7b8754cb016df50b45e4110e3da005f4efdcc9b0bf26d40a6df319a3687ba257db89daa1319ec7132cb9567b0e16435610555666"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x77, 0x1, "640405acf3a6f3f91f102f9f1d2d565a9b92b8ba6c109c341f1e791f626c680b78746ba1d5ca9e61c335efb655a91c4c9bf37618a37b00fd7d08f688c271e7143caf99b2d79a0e2dd6bc4cb2cee03e5925ff38a289d4877e53fa1f646d79d793962d5c8d5a9776e249f71754a80a2395ba04db"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x55, 0x1, "93825d6e9d810bb88eebd894c2c4e2a1d8ac6c35f3a9854c3f3f6f033d2b39ac1409e1eae3ee568015b31cf65b9313069b99c76c97fc660732e96896713f1f22f44d83dfa2bc88b215a954fe3988683b5f"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x1a8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "e435a789715fc96f30b47bc66c1e4b309049fce62433eec7b5de05c72945344e561f4165261ba2b161cb7d69e33f689564ff0ee8dd3362b8282e790ae945c2dde756c3e9dbda73353ab54ae82dc451be234ffbf6f27e221aad687e"}, @NFTA_DATA_VALUE={0xb5, 0x1, "c498426b3f438f32a4076a4359544b26bffef0092e1f27a3aa27e4c6e507296ba02aac10ac394eea69b6784600ed5d3782aba134dcf49e71e5bfbf7a86a9a261bd571713466cf67ed19c2be1949f30fdd217a466283615d70e80ef6ddbcff9c03dc44101918a280353219f2706a26b96c0f22ca692da3cb5cdd1db71b2c39433b994fbe56682e05ed025a948d583d604f56c97477c48d59cd6a8b8fb8989e2e270253af48de95f5f8fd02c1199292e1655"}, @NFTA_DATA_VALUE={0x46, 0x1, "a718ba3210518d68aa3cd02c2f3055408a77f3360448159b33625b945cb5b5749b8185e63792e1b535ed99ca0d9415da47cda06ef39510a388e6fc4cf56b983ba7d2"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DATA={0x24, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x694}}, 0x0) mlockall(0x2) r5 = shmget$private(0x0, 0x3000, 0x8, &(0x7f00002b7000/0x3000)=nil) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bind$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r7) r8 = inotify_init1(0x800) fcntl$setstatus(r7, 0x4, 0x2c00) r9 = gettid() fcntl$setown(r7, 0x8, r9) fcntl$setsig(r8, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') listen(r0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) shmat(r5, &(0x7f00006b2000/0x1000)=nil, 0x5000) 1.213802233s ago: executing program 1 (id=2023): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) 1.096674902s ago: executing program 1 (id=2024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x208000, 0x5, 0x0, 0xfffffffc, 0x3}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x2) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0xfff) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$kcm(0x29, 0x5, 0x0) 1.086333986s ago: executing program 1 (id=2025): r0 = socket$inet6(0xa, 0xa, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001e80)={'ip6tnl0\x00', &(0x7f0000001e00)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x6, 0x6, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x0, 0x4dd}}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @broadcast}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}], 0x18, 0x8000}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)}, 0x64000814) 861.184184ms ago: executing program 2 (id=2026): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) timerfd_create(0x7, 0xc0000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffef4, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x3, 0x1, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000002600)=0x5, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5b}) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) 748.634935ms ago: executing program 2 (id=2027): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setitimer(0x2, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)=0xb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x304, @local}, 0x4a, {0x2, 0x0, @dev}}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r4, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x1, 0x0, 0x0, 0x34, 0x0, 0x10cf, 0xff, 0x3, 0x2, 0x3, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000003480)=[{@fixed}]}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0xfffffffe) 690.807078ms ago: executing program 2 (id=2028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1b}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) 649.744835ms ago: executing program 2 (id=2029): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RELDISP(r0, 0x5605) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='\x0f', 0x1) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) (async) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @mcast2, 0x8}}, 0x24) (async) getpid() (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @initdev}, &(0x7f0000000140)=0xc) (async) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x210001, 0x0) poll(&(0x7f0000000100)=[{r2}, {r1, 0x4}, {r0}], 0x3, 0x800) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x48, 0x4c00}, 0x20048014) 572.878133ms ago: executing program 2 (id=2030): ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000040)={'\x00', 0x9, 0x1, 0x2}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = eventfd(0x2) fchmod(r1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x6, 0xfa, 0x46}, 0x0) 548.716501ms ago: executing program 2 (id=2031): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2a142, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) r5 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@overlay={0x3, 0x0, 0x4, 0x0, 0x1, {0x77359400}, {0x3, 0x0, 0x3, 0x3, 0x9, 0x6, "9fe4f060"}, 0x8, 0x3, {}, 0x4, 0x0, r5}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x1, 0x1012) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20040094) syz_usb_connect$uac1(0x5, 0xa3, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x80, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x50}, [@extension_unit={0x8, 0x24, 0x8, 0x13, 0xff, 0xfa, "b0"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xd, "82ab09"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x81, 0x4, 0xc, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x7c, 0x9, {0x7, 0x25, 0x1, 0x82, 0x8, 0xdcad}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x972, 0x7, 0x2, '\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x12, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x8e, 0x8d, {0x3, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 224.805934ms ago: executing program 1 (id=2032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x80, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0xff51, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x80}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004044) syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb02030306"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 528.597µs ago: executing program 3 (id=2033): bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = getpid() (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000700)=0x9, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000000), 0x4) (async) r6 = syz_pidfd_open(r1, 0x0) (async) r7 = syz_open_dev$swradio(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000380)) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setns(r6, 0x24020000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) ioprio_set$pid(0x0, r1, 0x4007) close_range(r0, 0xffffffffffffffff, 0x0) (async) accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@rose, @default, @rose, @remote, @null, @netrom, @rose, @null]}, &(0x7f00000001c0)=0x48) accept4$netrom(r3, &(0x7f00000004c0)={{0x3, @null}, [@netrom, @bcast, @netrom, @null, @bcast, @bcast, @remote, @bcast]}, &(0x7f0000000100)=0x48, 0x80800) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000300)=0x7) (async) lremovexattr(&(0x7f0000000240)='./cgroup\x00', &(0x7f0000000200)=@known='com.apple.FinderInfo\x00') (async) recvfrom$inet(r4, &(0x7f0000000440)=""/116, 0x74, 0x10000, 0x0, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000180)={0x3}) socket$inet(0x2, 0x4000000000000001, 0x0) 0s ago: executing program 3 (id=2034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x2, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) epoll_wait(r1, &(0x7f0000000100)=[{}, {}], 0x2, 0x89f) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)={0x8, 0x9, 0x0, 0x4, 0x8, 0x0, [{0x100000000, 0x401, 0x9, '\x00', 0x1008}, {0x2, 0x2, 0x80000000, '\x00', 0x200b}, {0xfffffffffffffffd, 0x8000000000000000, 0x8, '\x00', 0x48c}, {0x0, 0x3, 0x2a3e, '\x00', 0x1}, {0x9, 0x8, 0x9d}, {0x8, 0x800, 0xe, '\x00', 0x1}, {0x9, 0x80000000, 0x2, '\x00', 0xd80}, {0x1, 0x8, 0x10}]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000080)}, 0x2000) kernel console output (not intermixed with test programs): t: couldn't find an available UDC or it's busy [ 314.188764][ T5964] hid_parser_main: 63 callbacks suppressed [ 314.188784][ T5964] asus 0003:048D:CE50.0014: unknown main item tag 0x0 [ 314.210444][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.229079][ T5964] asus 0003:048D:CE50.0014: unknown main item tag 0x0 [ 314.231457][T10380] hsr_slave_0: left promiscuous mode [ 314.239952][ T5964] asus 0003:048D:CE50.0014: unknown main item tag 0x0 [ 314.247933][ T5964] asus 0003:048D:CE50.0014: unknown main item tag 0x0 [ 314.257749][T10380] hsr_slave_1: left promiscuous mode [ 314.264663][ T5964] asus 0003:048D:CE50.0014: unknown main item tag 0x0 [ 314.271145][T10380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.278854][T10380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.299932][ T5964] asus 0003:048D:CE50.0014: hidraw0: USB HID v80.00 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 314.317220][T10380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.342573][ T5964] asus 0003:048D:CE50.0014: Asus input not registered [ 314.350158][T10380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.358812][ T5964] asus 0003:048D:CE50.0014: probe with driver asus failed with error -12 [ 314.412620][ T5964] usb 2-1: USB disconnect, device number 81 [ 314.443233][T10380] veth1_macvtap: left promiscuous mode [ 314.449167][T10380] veth0_macvtap: left promiscuous mode [ 314.464082][T10917] fido_id[10917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 314.492015][T10380] veth1_vlan: left promiscuous mode [ 314.497551][T10380] veth0_vlan: left promiscuous mode [ 315.125705][T10380] team0 (unregistering): Port device team_slave_1 removed [ 315.166178][T10380] team0 (unregistering): Port device C removed [ 315.281823][T10943] 9pnet_fd: Insufficient options for proto=fd [ 315.289258][T10943] __nla_validate_parse: 27 callbacks suppressed [ 315.289275][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1659'. [ 315.839904][ T5847] Bluetooth: hci4: command tx timeout [ 315.858027][T10871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.956625][T10871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.023584][T10871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.082793][T10959] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 316.109674][T10871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.150531][T10959] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 316.200391][T10959] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 316.206891][T10959] comedi comedi3: 8255: I/O port conflict (0x100401,4) [ 316.303662][T10959] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 316.330041][T10959] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 316.365525][T10959] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 316.384096][T10959] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 316.562988][T10871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.609984][ T5964] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 316.624785][T10871] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.673280][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.680496][T10379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.725647][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.732900][T10382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.780008][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 316.793033][ T5964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.825367][ T5964] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 316.872488][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.906684][ T5964] usb 3-1: Product: syz [ 316.920602][ T5964] usb 3-1: Manufacturer: syz [ 316.929064][ T5964] usb 3-1: SerialNumber: syz [ 317.028985][ T5964] usb 3-1: config 0 descriptor?? [ 317.058274][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.084119][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.086263][ T5964] usb 3-1: no audio or video endpoints found [ 317.160102][T10991] tipc: MTU too low for tipc bearer [ 317.200464][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.335675][ T5946] usb 3-1: USB disconnect, device number 53 [ 317.428865][T10999] sp0: Synchronizing with TNC [ 317.505421][T10871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.518017][T10380] IPVS: stop unused estimator thread 0... [ 317.610504][T11011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.619326][T11011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.732127][T11008] [U] è [ 317.912613][ T5847] Bluetooth: hci4: command tx timeout [ 318.102684][T10871] veth0_vlan: entered promiscuous mode [ 318.125075][T10871] veth1_vlan: entered promiscuous mode [ 318.205656][T10871] veth0_macvtap: entered promiscuous mode [ 318.226477][T10871] veth1_macvtap: entered promiscuous mode [ 318.271625][T10871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.287824][T10871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.332946][T10382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.353676][T10382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.370293][ T5933] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 318.389278][T10382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.412474][T10382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.531092][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 318.554482][ T5933] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.589971][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.596635][ T5933] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 318.619299][T10379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.627370][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.642422][T10379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.667157][ T5933] usb 2-1: config 0 descriptor?? [ 318.721727][ T5933] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 318.746258][T10381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.775651][T10381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.793274][T11052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.830606][T11052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.974245][ T5199] bcm5974 2-1:0.0: could not write to device [ 318.974575][ T5886] usb 2-1: USB disconnect, device number 82 [ 319.003998][ T5199] bcm5974 2-1:0.0: could not read from device [ 319.042129][ T5850] bcm5974 2-1:0.0: could not read from device [ 319.078722][ T5850] udevd[5850]: Error opening device "/dev/input/event4": No such file or directory [ 319.123730][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 319.140182][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 319.147786][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 319.164774][ T5850] udevd[5850]: Unable to EVIOCGABS device "/dev/input/event4" [ 319.732272][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 319.775416][T11080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.786164][T11089] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 319.890198][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 319.910817][ T5946] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 319.912495][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 319.926767][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.947762][ T10] usb 2-1: config 0 has no interface number 0 [ 319.954429][ T10] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.970596][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 319.984117][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 319.992421][ T5164] Bluetooth: hci4: command tx timeout [ 319.997967][ T10] usb 2-1: Product: syz [ 320.002600][ T10] usb 2-1: SerialNumber: syz [ 320.010170][ T10] usb 2-1: config 0 descriptor?? [ 320.021167][ T10] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 320.050101][ T5946] usb 3-1: device descriptor read/64, error -71 [ 320.090006][ T5933] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 320.251986][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.262600][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 320.276702][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 320.288264][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 320.288871][ T24] usb 2-1: USB disconnect, device number 83 [ 320.303038][ T5933] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 320.307386][ T5946] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 320.322216][ T5933] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 320.338194][ T5933] usb 5-1: Manufacturer: syz [ 320.351783][ T5933] usb 5-1: config 0 descriptor?? [ 320.460196][ T5946] usb 3-1: device descriptor read/64, error -71 [ 320.579532][ T5946] usb usb3-port1: attempt power cycle [ 320.600500][ T5933] rc_core: IR keymap rc-hauppauge not found [ 320.606429][ T5933] Registered IR keymap rc-empty [ 320.613091][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.631897][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.652241][ T5933] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 320.666708][ T5933] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 320.681589][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.700303][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.720906][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.740162][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.770381][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.800279][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.820087][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.850277][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.868835][T11112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.876255][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.884923][T11112] syzkaller1: entered promiscuous mode [ 320.892419][T11112] syzkaller1: entered allmulticast mode [ 320.900393][ T5933] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 320.920080][ T5946] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 320.932593][ T5933] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 320.932617][ T5933] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 320.940650][ T5946] usb 3-1: device descriptor read/8, error -71 [ 321.001721][ T24] usb 5-1: USB disconnect, device number 2 [ 321.202054][ T5946] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 321.233143][ T5946] usb 3-1: device descriptor read/8, error -71 [ 321.284132][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 321.340440][ T5946] usb usb3-port1: unable to enumerate USB device [ 321.419099][T11123] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1691'. [ 321.429181][T11123] unsupported nlmsg_type 40 [ 321.879951][ T5933] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 321.909930][ T5847] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 322.031944][ T5933] usb 5-1: config index 0 descriptor too short (expected 33563, got 27) [ 322.040423][ T5933] usb 5-1: config 0 has too many interfaces: 201, using maximum allowed: 32 [ 322.049123][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.059299][ T5933] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 201 [ 322.071040][ T5933] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 322.080671][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.088705][ T5933] usb 5-1: Product: syz [ 322.092952][ T5933] usb 5-1: Manufacturer: syz [ 322.097545][ T5933] usb 5-1: SerialNumber: syz [ 322.104255][ T5933] usb 5-1: config 0 descriptor?? [ 322.323287][ T5933] usb 5-1: USB disconnect, device number 3 [ 322.500005][ T5946] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 322.529661][T11135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.538610][T11135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.661334][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.679879][ T5946] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 322.689076][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.706933][ T5946] usb 2-1: config 0 descriptor?? [ 322.781174][ T5933] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 322.841901][T11137] /dev/nullb0: Can't open blockdev [ 322.849736][T11137] QAT: Stopping all acceleration devices. [ 322.991635][ T5933] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 323.001127][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.011825][ T5933] usb 5-1: config 0 descriptor?? [ 323.092550][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.102894][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.132218][ T5946] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 323.148002][ T5946] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0015/input/input29 [ 323.179999][ T5886] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 323.222804][ T5933] usb 5-1: Cannot read MAC address [ 323.238132][ T5933] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 323.270918][ T5933] usb 5-1: USB disconnect, device number 4 [ 323.276674][ T5946] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 323.319996][ T5886] usb 3-1: device descriptor read/64, error -71 [ 323.547287][ T5858] usb 2-1: USB disconnect, device number 84 [ 323.570354][ T5886] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 323.709909][ T5886] usb 3-1: device descriptor read/64, error -71 [ 323.820356][ T5886] usb usb3-port1: attempt power cycle [ 324.170302][ T5886] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 324.211192][ T5886] usb 3-1: device descriptor read/8, error -71 [ 324.366848][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.378437][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.450619][ T5886] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 324.473622][ T5886] usb 3-1: device descriptor read/8, error -71 [ 324.490069][ T5946] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 324.580292][ T5886] usb usb3-port1: unable to enumerate USB device [ 324.683304][ T5946] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 324.692500][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.700625][ T5946] usb 5-1: Product: syz [ 324.704795][ T5946] usb 5-1: Manufacturer: syz [ 324.709369][ T5946] usb 5-1: SerialNumber: syz [ 324.717576][ T5946] usb 5-1: config 0 descriptor?? [ 324.729202][ T5946] usb 5-1: selecting invalid altsetting 3 [ 324.735166][ T5946] comedi comedi5: could not set alternate setting 3 in high speed [ 324.743915][ T5946] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 324.754261][ T5946] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 324.769924][ T5933] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 324.919878][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 324.927544][T11158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.941070][T11158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.949619][ T5933] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 324.959388][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.968447][T11168] netlink: 'syz.3.1707': attribute type 6 has an invalid length. [ 324.978418][ T5946] usb 5-1: USB disconnect, device number 5 [ 324.979161][ T5933] usb 2-1: config 0 descriptor?? [ 325.003023][ T5933] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 325.027470][ T5933] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 325.139674][T11172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.151379][T11172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.708272][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.720603][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.747916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 325.757078][ T24] usb 2-1: USB disconnect, device number 85 [ 325.901248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 326.080581][T11196] syzkaller1: left promiscuous mode [ 326.100058][T11196] syzkaller1: left allmulticast mode [ 326.329935][ T5886] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 326.464425][T11209] syzkaller1: entered promiscuous mode [ 326.472924][T11209] syzkaller1: entered allmulticast mode [ 326.483300][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 326.493219][ T5886] usb 3-1: not running at top speed; connect to a high speed hub [ 326.503449][ T5886] usb 3-1: config 5 has an invalid interface number: 215 but max is 0 [ 326.512263][ T5886] usb 3-1: config 5 has no interface number 0 [ 326.518442][ T5886] usb 3-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 326.532018][ T5886] usb 3-1: config 5 interface 215 has no altsetting 0 [ 326.542587][ T5886] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 326.551716][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.559700][ T5886] usb 3-1: Product: syz [ 326.564083][ T5886] usb 3-1: Manufacturer: syz [ 326.568691][ T5886] usb 3-1: SerialNumber: syz [ 326.576833][T11197] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.621378][T11213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.763489][T11216] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1721'. [ 326.772716][T11215] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1721'. [ 326.797206][ T5886] cypress_m8 3-1:5.215: DeLorme Earthmate USB converter detected [ 326.814169][ T5886] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 326.836012][ T5886] usb 3-1: USB disconnect, device number 62 [ 326.870395][ T5886] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 326.883549][ T5886] cypress_m8 3-1:5.215: device disconnected [ 327.203529][T11233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1726'. [ 327.329909][ T5933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 327.418237][T11241] program syz.2.1729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.490211][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 327.505382][ T5933] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 327.526367][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 327.551439][ T5933] usb 5-1: Product: syz [ 327.555644][ T5933] usb 5-1: Manufacturer: syz [ 327.574878][ T5933] usb 5-1: SerialNumber: syz [ 327.595589][ T5933] usb 5-1: config 0 descriptor?? [ 327.809980][ T5886] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 327.822232][T11227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1723'. [ 327.841893][ T10] usb 5-1: USB disconnect, device number 6 [ 327.969966][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 327.976417][ T5886] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 327.991533][ T5886] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 328.000637][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.008603][ T5886] usb 3-1: Product: syz [ 328.012860][ T5946] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 328.020888][ T5886] usb 3-1: Manufacturer: syz [ 328.025467][ T5886] usb 3-1: SerialNumber: syz [ 328.040096][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input31 [ 328.183603][ T5946] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 328.192810][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.200869][ T5946] usb 2-1: Product: syz [ 328.205053][ T5946] usb 2-1: Manufacturer: syz [ 328.209649][ T5946] usb 2-1: SerialNumber: syz [ 328.216846][ T5946] usb 2-1: config 0 descriptor?? [ 328.238365][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.247248][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.256947][ T5199] bcm5974 3-1:1.0: could not read from device [ 328.265384][ T5199] bcm5974 3-1:1.0: could not read from device [ 328.271562][ T5886] usb 3-1: USB disconnect, device number 63 [ 328.381026][ T5847] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 328.387842][ T5847] Bluetooth: Wrong link type (-22) [ 328.394516][ T5847] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 328.402365][ T5847] Bluetooth: Wrong link type (-22) [ 328.625367][ T5946] airspy 2-1:0.0: Board ID: 00 [ 328.635063][ T5946] airspy 2-1:0.0: Firmware version: [ 329.428219][ T5946] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f [ 329.462545][ T5946] airspy 2-1:0.0: Registered as swradio24 [ 329.476612][ T5946] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 329.518933][ T5946] usb 2-1: USB disconnect, device number 86 [ 329.561265][T11297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.569916][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 329.581575][T11297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.742263][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 329.761756][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.781474][ T10] usb 5-1: config 0 has no interface number 0 [ 329.787780][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.807751][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 329.823803][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.852510][ T10] usb 5-1: config 0 descriptor?? [ 329.884266][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 330.059949][ T5886] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 330.108035][ T10] usb 5-1: USB disconnect, device number 7 [ 330.160218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 330.220522][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 330.228910][ T5886] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.256942][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.272418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 330.299971][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.333133][ T5886] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.361256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 330.387346][ T5886] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.404877][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.446372][T11325] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 330.642877][ T5886] usb 3-1: GET_CAPABILITIES returned 0 [ 330.664549][ T5886] usbtmc 3-1:16.0: can't read capabilities [ 330.744299][ T5964] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 330.848443][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 330.863328][ T5886] usb 3-1: USB disconnect, device number 64 [ 330.909983][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 330.932880][ T5964] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 330.966168][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.996603][ T5964] usb 2-1: Product: syz [ 331.010305][ T5964] usb 2-1: Manufacturer: syz [ 331.017811][ T5964] usb 2-1: SerialNumber: syz [ 331.033739][ T5964] usb 2-1: config 0 descriptor?? [ 331.253945][ T5964] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 331.266181][ T5964] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 331.343222][ T5964] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 331.358619][ T5964] usb 2-1: USB disconnect, device number 87 [ 331.580066][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.600899][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.658080][T11359] xt_l2tp: invalid flags combination: 8 [ 331.929508][T11377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.000910][T11377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.026824][T11377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.047895][T11377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.069966][ T5886] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 332.241339][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 332.257747][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.280076][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.293161][T11391] geneve1: entered allmulticast mode [ 332.301866][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 332.324192][ T5886] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 332.348147][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.397131][ T5886] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 332.406926][ T5886] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 332.433724][ T5886] usb 3-1: Manufacturer: syz [ 332.452967][ T5886] usb 3-1: config 0 descriptor?? [ 332.580436][T11404] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1765'. [ 332.739926][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 332.752794][T11410] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1766'. [ 332.782921][T11409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1766'. [ 332.835502][T11414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.845682][T11414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.891586][ T10] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.909583][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.927447][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 332.949236][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.973769][ T10] usb 5-1: config 0 descriptor?? [ 333.249940][ T5946] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 333.388807][ T10] apple 0003:05AC:027A.0016: ignoring exceeding usage max [ 333.403048][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.421427][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.432418][ T10] apple 0003:05AC:027A.0016: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 333.440036][ T5946] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 333.460219][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.488154][ T5946] usb 2-1: config 0 descriptor?? [ 333.600291][ T10] usb 5-1: USB disconnect, device number 8 [ 333.713834][T11418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.738610][T11418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.015411][T11429] Sensor A: ================= START STATUS ================= [ 334.023448][T11429] Sensor A: Test Pattern: 75% Colorbar [ 334.030977][T11429] Sensor A: Show Information: All [ 334.036126][T11429] Sensor A: Vertical Flip: true [ 334.039276][T11431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.042493][T11429] Sensor A: Horizontal Flip: false [ 334.054132][T11431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.055596][T11429] Sensor A: Brightness: 128 [ 334.067315][T11429] Sensor A: Contrast: 128 [ 334.071906][T11429] Sensor A: Hue: 0 [ 334.075740][T11429] Sensor A: Saturation: 128 [ 334.080563][T11429] Sensor A: ================== END STATUS ================== [ 334.102439][ T5946] aquacomputer_d5next 0003:0C70:F0B6.0017: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 334.362616][ T5946] IPVS: starting estimator thread 0... [ 334.366561][T11442] IPVS: ip_vs_add_dest(): server weight less than zero [ 334.460899][T11443] IPVS: using max 28 ests per chain, 67200 per kthread [ 334.679938][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 334.829942][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 334.845301][ T10] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 334.857378][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.867766][ T10] usb 5-1: Product: syz [ 334.876266][ T10] usb 5-1: Manufacturer: syz [ 334.883211][ T10] usb 5-1: SerialNumber: syz [ 334.891099][ T5886] rc_core: IR keymap rc-hauppauge not found [ 334.897621][ T5886] Registered IR keymap rc-empty [ 334.902907][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.930081][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.954002][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 334.968593][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 334.986668][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.011245][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.030179][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.051041][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.065044][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 335.072398][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.099164][ T10] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 335.100590][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.119639][ T10] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 335.129947][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.132952][ T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 335.151663][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.154587][ T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 335.170041][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.176318][ T10] usb 5-1: USB disconnect, device number 9 [ 335.188972][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 335.190422][ T5886] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.204142][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 335.216969][ T10] visor 5-1:1.0: device disconnected [ 335.242591][ T5886] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 335.262668][ T5886] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 335.275517][T11467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.284920][ T5886] usb 3-1: USB disconnect, device number 65 [ 335.286617][T11467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.363551][ T5946] usb 2-1: reset high-speed USB device number 88 using dummy_hcd [ 335.629914][ T5886] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 335.791497][ T5886] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.803286][ T5886] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.813299][ T5886] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.822495][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.836790][T11459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 335.853877][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.875196][T11471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.886001][T11471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.913761][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 336.099708][ T5886] usb 3-1: USB disconnect, device number 66 [ 336.110020][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 336.128522][ T10] usb 5-1: too many configurations: 183, using maximum allowed: 8 [ 336.148175][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 336.159280][ T10] usb 5-1: can't read configurations, error -61 [ 336.289955][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 336.290091][ T5946] usb 2-1: device descriptor read/64, error -71 [ 336.441021][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 336.447073][ T10] usb 5-1: too many configurations: 183, using maximum allowed: 8 [ 336.461293][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 336.471073][ T10] usb 5-1: can't read configurations, error -61 [ 336.478158][ T10] usb usb5-port1: attempt power cycle [ 336.487962][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.497812][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.499461][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.515032][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.541679][ T5946] usb 2-1: reset high-speed USB device number 88 using dummy_hcd [ 336.550273][ T5946] usb 2-1: device reset changed ep0 maxpacket size! [ 336.562215][ T24] usb 2-1: USB disconnect, device number 88 [ 336.720062][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 336.752897][T11483] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 336.762215][T11483] /dev/nullb0: Can't open blockdev [ 336.820435][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 336.839531][T11487] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1790'. [ 336.851368][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 336.857327][ T10] usb 5-1: too many configurations: 183, using maximum allowed: 8 [ 336.866998][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 336.878830][ T10] usb 5-1: can't read configurations, error -61 [ 336.891455][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 336.898207][ T24] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 336.912152][ T24] usb 2-1: config 0 has no interface number 0 [ 336.918299][ T24] usb 2-1: too many endpoints for config 0 interface 93 altsetting 47: 189, using maximum allowed: 30 [ 336.931859][ T24] usb 2-1: config 0 interface 93 altsetting 47 has 1 endpoint descriptor, different from the interface descriptor's value: 189 [ 336.945864][ T24] usb 2-1: config 0 interface 93 has no altsetting 0 [ 336.954815][ T24] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice=61.19 [ 336.964453][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.975899][ T24] usb 2-1: config 0 descriptor?? [ 337.010951][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 337.031082][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 337.037324][ T10] usb 5-1: too many configurations: 183, using maximum allowed: 8 [ 337.047887][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 337.056121][ T10] usb 5-1: can't read configurations, error -61 [ 337.063142][ T10] usb usb5-port1: unable to enumerate USB device [ 337.108145][T11495] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 337.124496][T11495] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 337.278776][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.288272][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.770117][ T5946] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 337.823450][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.833022][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.919985][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 337.926340][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.936563][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 337.945586][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 337.957568][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 337.968852][ T5946] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 337.977943][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.991371][ T5946] hub 3-1:1.0: bad descriptor, ignoring hub [ 337.997401][ T5946] hub 3-1:1.0: probe with driver hub failed with error -5 [ 338.006338][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 338.011707][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 338.019095][ T5946] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 338.025174][ T5946] cdc_wdm 3-1:1.0: Unknown control protocol [ 338.433387][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.444149][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.512581][T11517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.521414][T11517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.890627][T11505] cdc_wdm 3-1:1.0: Error autopm - -16 [ 338.890797][ T5946] usb 3-1: USB disconnect, device number 67 [ 338.998041][ T5915] usb 2-1: USB disconnect, device number 89 [ 339.040204][ T5946] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 339.130243][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 339.201937][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.212633][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.221645][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 339.232586][ T5946] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 339.241762][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.253108][T11509] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 339.262212][ T5946] hub 3-1:1.0: bad descriptor, ignoring hub [ 339.268139][ T5946] hub 3-1:1.0: probe with driver hub failed with error -5 [ 339.275879][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 339.282407][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 339.288919][ T5946] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 339.296057][ T5946] cdc_wdm 3-1:1.0: Unknown control protocol [ 339.298216][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 339.311962][ T10] usb 5-1: config 1 has an invalid descriptor of length 123, skipping remainder of the config [ 339.323631][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 339.332834][ T10] usb 5-1: config 1 has no interface number 1 [ 339.338931][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 339.354780][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.363942][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.372087][ T10] usb 5-1: Product: syz [ 339.376254][ T10] usb 5-1: Manufacturer: syz [ 339.381645][ T10] usb 5-1: SerialNumber: syz [ 339.420125][ T5915] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 339.570218][ T5894] usb 3-1: USB disconnect, device number 68 [ 339.570873][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 339.584520][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 339.602237][ T5915] usb 2-1: config 4 interface 0 has no altsetting 0 [ 339.615846][ T5915] usb 2-1: string descriptor 0 read error: -22 [ 339.622848][ T5915] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 339.635670][ T10] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 339.638338][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.643929][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 339.684730][ T5915] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 339.707403][ T5915] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 339.737334][ T5915] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 339.744276][ T10] usb 5-1: USB disconnect, device number 14 [ 339.754186][ T5915] usb 2-1: media controller created [ 339.814403][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.844074][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.928760][ T5915] zl10353_read_register: readreg error (reg=127, ret==0) [ 339.977714][T11539] program syz.4.1808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.014218][ T5915] usb 2-1: USB disconnect, device number 90 [ 340.300316][ T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 340.439968][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 340.451534][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 340.462536][ T24] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 340.472131][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.486086][ T24] usb 5-1: config 0 descriptor?? [ 340.492629][T11542] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 340.570040][ T10] usb 3-1: device descriptor read/64, error -71 [ 340.780441][ T5915] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 340.809904][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 340.907783][ T24] hid-udraw 0003:20D6:CB17.0018: unknown main item tag 0x0 [ 340.915746][ T24] hid-udraw 0003:20D6:CB17.0018: item fetching failed at offset 1/5 [ 340.926182][ T24] hid-udraw 0003:20D6:CB17.0018: parse failed [ 340.932477][ T24] hid-udraw 0003:20D6:CB17.0018: probe with driver hid-udraw failed with error -22 [ 340.939984][ T10] usb 3-1: device descriptor read/64, error -71 [ 340.941930][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 340.957876][ T5915] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 340.966270][ T5915] usb 2-1: config 0 has no interface number 0 [ 340.972461][ T5915] usb 2-1: config 0 interface 12 has no altsetting 0 [ 340.981036][ T5915] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 340.990330][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.998328][ T5915] usb 2-1: Product: syz [ 341.002659][ T5915] usb 2-1: Manufacturer: syz [ 341.007266][ T5915] usb 2-1: SerialNumber: syz [ 341.014050][ T5915] usb 2-1: config 0 descriptor?? [ 341.050469][ T10] usb usb3-port1: attempt power cycle [ 341.107379][ T979] usb 5-1: USB disconnect, device number 15 [ 341.389941][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 341.410518][ T10] usb 3-1: device descriptor read/8, error -71 [ 341.481681][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.490696][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.517933][ T5915] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 341.527591][ T5915] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 341.541933][ T5915] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 341.549679][ T5915] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 341.568078][ T5915] usb 2-1: USB disconnect, device number 91 [ 341.622312][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.633518][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.649977][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 341.670407][ T10] usb 3-1: device descriptor read/8, error -71 [ 341.715642][T11561] bridge0: entered promiscuous mode [ 341.722129][T11561] bridge0: entered allmulticast mode [ 341.783649][ T10] usb usb3-port1: unable to enumerate USB device [ 341.869128][T11574] usb usb1: check_ctrlrecip: process 11574 (syz.4.1819) requesting ep 01 but needs 81 [ 342.057085][T11587] fuse: Bad value for 'user_id' [ 342.063077][T11587] fuse: Bad value for 'user_id' [ 342.213443][T11595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1826'. [ 342.225002][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.231929][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1822'. [ 342.236417][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.308534][T11596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.317511][T11596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.349954][ T5915] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 342.502146][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 342.510551][ T5915] usb 2-1: not running at top speed; connect to a high speed hub [ 342.519331][ T5915] usb 2-1: config 6 has an invalid interface number: 228 but max is 0 [ 342.527792][ T5915] usb 2-1: config 6 has no interface number 0 [ 342.534110][ T5915] usb 2-1: config 6 interface 228 has no altsetting 0 [ 342.543771][ T5915] usb 2-1: string descriptor 0 read error: -22 [ 342.550133][ T5915] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice= 3.27 [ 342.559915][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.576050][ T5915] hub 2-1:6.228: bad descriptor, ignoring hub [ 342.582939][ T5915] hub 2-1:6.228: probe with driver hub failed with error -5 [ 342.591475][ T5915] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 342.602960][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 342.622587][ T5915] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 342.631964][ T5915] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 342.643976][ T5915] usb 2-1: media controller created [ 342.651373][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.665243][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 342.675645][ T5915] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 342.689702][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 342.702775][ T5915] dvb-usb: schedule remote query interval to 150 msecs. [ 342.711467][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 342.729896][ T5915] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 342.774450][ T10] usb 2-1: USB disconnect, device number 92 [ 342.812540][ T10] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 342.897992][T11598] netlink: 'syz.4.1827': attribute type 1 has an invalid length. [ 342.906685][T11598] netlink: 'syz.4.1827': attribute type 101 has an invalid length. [ 342.915094][T11598] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1827'. [ 343.068743][T11607] MINIX-fs: unable to read superblock [ 343.300842][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 343.450517][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 343.457566][ T24] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 343.466032][ T24] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 343.474880][ T24] usb 5-1: config 3 has no interface number 0 [ 343.481933][ T24] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.494947][ T24] usb 5-1: config 3 interface 45 has no altsetting 0 [ 343.503946][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 343.513884][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.522524][ T24] usb 5-1: Product: syz [ 343.526695][ T24] usb 5-1: Manufacturer: syz [ 343.531533][ T24] usb 5-1: SerialNumber: syz [ 343.590849][ T5946] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 343.650028][ T5915] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 343.753242][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 343.763275][ T5946] usb 2-1: descriptor type invalid, skip [ 343.772469][ T5946] usb 2-1: descriptor type invalid, skip [ 343.779710][ T5946] usb 2-1: descriptor type invalid, skip [ 343.791803][ T5946] usb 2-1: descriptor type invalid, skip [ 343.802414][ T24] usb 5-1: USB disconnect, device number 16 [ 343.814395][ T5946] usb 2-1: config 1 interface 0 altsetting 175 bulk endpoint 0x1 has invalid maxpacket 64 [ 343.826868][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 343.832890][ T5946] usb 2-1: config 1 interface 0 has no altsetting 0 [ 343.845567][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.861629][ T5915] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.872869][ T5915] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.886742][ T5946] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 343.896534][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.905674][ T5946] usb 2-1: Product: syz [ 343.910160][ T5946] usb 2-1: Manufacturer: syz [ 343.914766][ T5946] usb 2-1: SerialNumber: syz [ 343.919886][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 343.926507][ T5915] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 343.936344][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.946901][T11613] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 343.957094][ T5915] usb 3-1: config 0 descriptor?? [ 344.171341][ T5946] usb 2-1: USB disconnect, device number 93 [ 344.387893][ T5915] waltop 0003:172F:0034.0019: unknown main item tag 0x0 [ 344.413925][ T5915] waltop 0003:172F:0034.0019: unknown main item tag 0x0 [ 344.422256][ T5915] waltop 0003:172F:0034.0019: unknown main item tag 0x0 [ 344.429247][ T5915] waltop 0003:172F:0034.0019: unknown main item tag 0x0 [ 344.436901][ T5915] waltop 0003:172F:0034.0019: unknown main item tag 0x0 [ 344.447082][ T5915] waltop 0003:172F:0034.0019: hidraw0: USB HID v0.05 Device [HID 172f:0034] on usb-dummy_hcd.2-1/input0 [ 344.586628][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.595447][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.657576][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.666716][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.898275][T11646] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20001 [ 345.180057][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 345.331089][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 345.340724][ T24] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 345.351036][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.373301][ T24] usb 2-1: Product: syz [ 345.377510][ T24] usb 2-1: Manufacturer: syz [ 345.383222][ T24] usb 2-1: SerialNumber: syz [ 345.391038][ T24] usb 2-1: config 0 descriptor?? [ 345.521935][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.531659][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.608826][ T24] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 345.719997][ T5915] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 345.808975][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.817894][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.828705][ T24] usb 2-1: USB disconnect, device number 94 [ 345.872794][ T5915] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 345.884054][ T5915] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 345.895385][ T5915] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 345.904543][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.913401][ T5915] usb 5-1: Product: syz [ 345.917577][ T5915] usb 5-1: Manufacturer: syz [ 345.922457][ T5915] usb 5-1: SerialNumber: syz [ 346.104603][T11669] pimreg3: entered allmulticast mode [ 346.146755][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1851'. [ 346.158019][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.166863][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.241550][ T24] usb 3-1: USB disconnect, device number 73 [ 346.484317][T11680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.652114][T11695] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 346.658865][T11695] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.669571][T11695] vhci_hcd vhci_hcd.0: Device attached [ 346.677504][T11696] vhci_hcd: cannot find the pending unlink 0 [ 346.682790][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1856'. [ 346.694721][T11696] vhci_hcd: connection closed [ 346.697564][T10380] vhci_hcd: stop threads [ 346.708039][T10380] vhci_hcd: release socket [ 346.712656][T10380] vhci_hcd: disconnect device [ 346.758717][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.769027][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.781632][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 346.960454][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 346.967674][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 346.978762][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.988532][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.998332][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 347.008240][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 347.017409][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.027137][ T10] usb 3-1: config 0 descriptor?? [ 347.033309][T11688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 347.248186][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.248975][ C0] Bluetooth: hci2: Unexpected continuation: 1 bytes [ 347.257823][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.271772][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.278654][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.286989][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.293987][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.301036][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.307866][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.316667][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.323734][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.330687][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.338309][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.345306][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.352255][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.359094][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.366072][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.373597][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.380951][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.387789][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.394799][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.401742][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.408623][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.416581][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.423640][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.430625][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.437680][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.444719][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.451629][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.458461][ T5164] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 347.475620][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 347.499130][T11710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.548974][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.558785][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.572350][ T5847] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 347.579587][ T5894] usb 3-1: USB disconnect, device number 74 [ 347.669926][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 347.678810][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 347.688968][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.697414][ T10] usb 2-1: Product: syz [ 347.701829][ T10] usb 2-1: Manufacturer: syz [ 347.706440][ T10] usb 2-1: SerialNumber: syz [ 347.716630][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 347.722962][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 347.934144][ T10] r8152-cfgselector 2-1: Unknown version 0x3010 [ 347.941721][ T10] r8152-cfgselector 2-1: bad CDC descriptors [ 348.143076][T11714] overlayfs: missing 'lowerdir' [ 348.159536][T11714] overlayfs: missing 'lowerdir' [ 348.176066][T11717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.190654][T11717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.512111][ T5894] usb 5-1: USB disconnect, device number 17 [ 348.789913][ T5915] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 348.904292][T11757] fuse: Bad value for 'rootmode' [ 348.916988][T11757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.928518][T11757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.950412][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 348.957613][ T5915] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 348.970110][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.990415][ T5915] usb 3-1: config 0 descriptor?? [ 349.017008][ T5915] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 349.213328][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.222529][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.231560][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.240817][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.249435][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.258469][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.260221][ T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 349.268383][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.286083][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.295575][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.304433][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.336678][ T5915] gspca_vc032x: reg_w err -71 [ 349.346149][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.358318][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.364077][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.369393][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.375251][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.381570][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.386872][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.396484][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.403486][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.408786][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.414561][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.421977][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.427293][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.433812][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.439614][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.451895][ T10] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 349.460147][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.468249][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.472078][ T10] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 349.479395][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.494168][ T5915] gspca_vc032x: Unknown sensor... [ 349.499744][ T5915] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 349.514223][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.520561][ T5915] usb 3-1: USB disconnect, device number 75 [ 349.524515][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 349.541159][ T10] usb 5-1: SerialNumber: syz [ 349.764171][ T10] usb 5-1: USB disconnect, device number 18 [ 350.250366][ T5946] r8152-cfgselector 2-1: USB disconnect, device number 95 [ 350.422484][T11779] fuse: Unknown parameter '00000000000000000003‡I^Qé[œÉÐ?ÁÂBˆä' [ 350.651416][ T5946] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 350.761945][T11804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.772005][T11804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.812944][ T5946] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 350.829679][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.849248][ T5946] usb 2-1: config 0 descriptor?? [ 350.865060][ T5946] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 350.880354][ T5894] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 351.060196][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 351.072031][ T5946] gspca_sn9c2028: read1 error -32 [ 351.079015][ T5894] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 351.087669][ T5946] gspca_sn9c2028: read1 error -32 [ 351.088539][ T5894] usb 3-1: config 0 has no interface number 1 [ 351.099124][ T5894] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.119962][ T5894] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 351.139908][ T5894] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 351.152309][ T5894] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 351.173947][ T5894] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.187808][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.203951][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.215666][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 351.231453][ T5894] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 351.249489][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.258329][ T5894] usb 3-1: Product: syz [ 351.263490][ T5894] usb 3-1: Manufacturer: syz [ 351.268261][ T5894] usb 3-1: SerialNumber: syz [ 351.281509][ T5894] usb 3-1: config 0 descriptor?? [ 351.288003][T11797] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 351.331967][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.352280][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.552913][ T5894] usb 3-1: USB disconnect, device number 76 [ 351.642881][ T5915] usb 2-1: USB disconnect, device number 96 [ 352.099774][T11841] overlayfs: failed to resolve './file0': -2 [ 352.103621][T11842] overlayfs: failed to resolve './file0': -2 [ 352.270132][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 352.429897][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 352.437099][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.448201][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.459907][ T5946] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 352.461205][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.477379][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.486172][ T10] usb 5-1: Product: syz [ 352.491009][ T10] usb 5-1: Manufacturer: syz [ 352.495746][ T10] usb 5-1: SerialNumber: syz [ 352.519923][ T5894] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 352.624541][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.646500][T11853] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 352.653554][T11852] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 352.660110][ T5946] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 352.669282][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.681345][ T5946] usb 2-1: config 0 descriptor?? [ 352.686674][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.720393][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.733721][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 352.747271][ T10] usb 5-1: 0:2 : does not exist [ 352.747758][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.761301][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.765902][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.782962][ T5894] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.793305][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.803342][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 352.823259][ T5894] usb 3-1: config 0 descriptor?? [ 352.834918][ T10] usb 5-1: USB disconnect, device number 19 [ 352.874606][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.100363][ T5946] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 353.115028][ T5946] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001A/input/input34 [ 353.210966][ T5946] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 353.251725][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.318292][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.531509][ T979] usb 2-1: USB disconnect, device number 97 [ 353.680068][ T5933] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 353.709536][T11870] /dev/nullb0: Can't open blockdev [ 353.720471][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.729286][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.756932][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 353.769970][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 353.785713][ T5894] usb 3-1: USB disconnect, device number 77 [ 353.819981][ T5933] usb 5-1: device descriptor read/64, error -71 [ 354.059963][ T5933] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 354.091892][ T5894] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 354.189953][ T5933] usb 5-1: device descriptor read/64, error -71 [ 354.249930][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 354.255911][ T5894] usb 3-1: no configurations [ 354.261625][ T5894] usb 3-1: can't read configurations, error -22 [ 354.300038][ T5946] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 354.301060][ T5933] usb usb5-port1: attempt power cycle [ 354.390177][ T5894] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 354.453598][ T5946] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 354.462889][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.470998][ T5946] usb 2-1: Product: syz [ 354.475183][ T5946] usb 2-1: Manufacturer: syz [ 354.479769][ T5946] usb 2-1: SerialNumber: syz [ 354.486426][ T5946] usb 2-1: config 0 descriptor?? [ 354.496461][ T5946] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 354.540750][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 354.546625][ T5894] usb 3-1: no configurations [ 354.553414][ T5894] usb 3-1: can't read configurations, error -22 [ 354.560273][ T5894] usb usb3-port1: attempt power cycle [ 354.649961][ T5933] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 354.670564][ T5933] usb 5-1: device descriptor read/8, error -71 [ 354.815040][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.824885][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.835497][T11878] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.900013][ T5946] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 354.909948][ T5894] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 354.918964][ T5933] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 354.940580][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 354.946475][ T5894] usb 3-1: no configurations [ 354.957390][ T5894] usb 3-1: can't read configurations, error -22 [ 354.964082][ T5933] usb 5-1: device descriptor read/8, error -71 [ 355.090294][ T5933] usb usb5-port1: unable to enumerate USB device [ 355.101409][ T5946] usb 2-1: USB disconnect, device number 98 [ 355.109965][ T5894] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 355.141020][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 355.146718][ T5894] usb 3-1: no configurations [ 355.153722][ T5894] usb 3-1: can't read configurations, error -22 [ 355.161861][ T5894] usb usb3-port1: unable to enumerate USB device [ 355.370971][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.380120][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.391978][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.402463][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.412655][T11883] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1913'. [ 355.930012][ T5894] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 356.079875][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 356.087263][ T5894] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 356.114064][ T5894] usb 2-1: New USB device found, idVendor=0c72, idProduct=0009, bcdDevice=27.9b [ 356.129856][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.137916][ T5894] usb 2-1: Product: syz [ 356.151504][ T5894] usb 2-1: Manufacturer: syz [ 356.156138][ T5894] usb 2-1: SerialNumber: syz [ 356.182850][ T5894] usb 2-1: config 0 descriptor?? [ 356.215113][ T8681] raw-gadget.3 gadget.3: failed to queue disconnect event [ 356.381346][ T5164] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.394580][ T5164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.403962][ T5164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.413577][ T5164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.423942][ T5164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.562410][T11900] SQUASHFS error: Failed to read block 0x0: -5 [ 356.579051][T11900] unable to read squashfs_super_block [ 356.734939][T11896] chnl_net:caif_netlink_parms(): no params data found [ 356.840026][ T10] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 356.949470][T11896] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.968048][T11896] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.978196][T11896] bridge_slave_0: entered allmulticast mode [ 356.986516][T11896] bridge_slave_0: entered promiscuous mode [ 356.998214][T11896] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.006419][T11896] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.014178][T11896] bridge_slave_1: entered allmulticast mode [ 357.022803][T11896] bridge_slave_1: entered promiscuous mode [ 357.026486][ T10] usb 5-1: config 1 has an invalid interface number: 170 but max is 0 [ 357.049097][ T10] usb 5-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 357.060084][ T10] usb 5-1: config 1 has no interface number 0 [ 357.066234][ T10] usb 5-1: config 1 interface 170 altsetting 5 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 357.080550][ T10] usb 5-1: config 1 interface 170 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 357.092588][ T10] usb 5-1: config 1 interface 170 has no altsetting 0 [ 357.106003][ T10] usb 5-1: New USB device found, idVendor=7392, idProduct=b711, bcdDevice=94.ec [ 357.115320][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.123524][ T10] usb 5-1: Product: syz [ 357.127702][ T10] usb 5-1: Manufacturer: syz [ 357.132391][ T10] usb 5-1: SerialNumber: syz [ 357.140614][T11900] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 357.143718][T11896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.147900][T11900] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 357.167808][T11896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.205560][T11896] team0: Port device team_slave_0 added [ 357.215208][T11896] team0: Port device team_slave_1 added [ 357.245625][T11896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.253212][ T5933] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 357.254077][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.287327][T11896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.300039][T11896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.307991][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.334061][T11896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.371882][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.382833][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.404388][T11896] hsr_slave_0: entered promiscuous mode [ 357.412696][T11896] hsr_slave_1: entered promiscuous mode [ 357.417156][ T10] usb 5-1: USB disconnect, device number 24 [ 357.427770][ T5933] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 357.439045][ T5933] usb 3-1: config 0 interface 0 has no altsetting 0 [ 357.454033][ T5933] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 357.465860][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 357.475042][ T5933] usb 3-1: Product: syz [ 357.479899][ T5933] usb 3-1: Manufacturer: syz [ 357.487639][ T5933] usb 3-1: SerialNumber: syz [ 357.497448][ T5933] usb 3-1: config 0 descriptor?? [ 357.515117][ T5933] usb 3-1: selecting invalid altsetting 0 [ 357.683588][T11896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.711353][ T10] usb 3-1: USB disconnect, device number 82 [ 357.779080][T11896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.836750][T11896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.923854][T11896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.107811][T11896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.117631][T11896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.128718][T11896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.138584][T11896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.208535][T11896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.231109][T11896] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.244934][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.252142][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.266990][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.274214][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.292390][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 358.465629][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.472355][ T5847] Bluetooth: hci2: command tx timeout [ 358.495510][T11896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.503907][ T10] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 358.520901][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.537891][ T10] usb 5-1: config 0 descriptor?? [ 358.606910][T11896] veth0_vlan: entered promiscuous mode [ 358.628337][T11896] veth1_vlan: entered promiscuous mode [ 358.675682][T11896] veth0_macvtap: entered promiscuous mode [ 358.688795][T11896] veth1_macvtap: entered promiscuous mode [ 358.736642][T11896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.750823][ T979] usb 2-1: USB disconnect, device number 99 [ 358.784774][T11896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.812992][T11939] netlink: 5820 bytes leftover after parsing attributes in process `syz.2.1926'. [ 358.813954][T10379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.832193][T10379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.860226][T10379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.869140][T10379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.958326][T10379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.972597][ T10] hid_mf 0003:0079:1846.001B: unknown main item tag 0x4 [ 358.974316][T10379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.987509][ T10] hid_mf 0003:0079:1846.001B: item fetching failed at offset 6/7 [ 358.988081][ T10] hid_mf 0003:0079:1846.001B: HID parse failed. [ 358.988141][ T10] hid_mf 0003:0079:1846.001B: probe with driver hid_mf failed with error -22 [ 359.024909][T11943] support for cryptoloop has been removed. Use dm-crypt instead. [ 359.051504][T10380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.059350][T10380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.140947][ T979] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 359.159355][T11952] fuse: Unknown parameter '' [ 359.162378][T11954] netlink: 'syz.3.1918': attribute type 21 has an invalid length. [ 359.167480][T11952] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1930'. [ 359.183201][ T10] usb 5-1: USB disconnect, device number 25 [ 359.216323][T11954] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1918'. [ 359.304233][ T979] usb 2-1: Invalid ep0 maxpacket: 64 [ 359.439998][ T979] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 359.532411][ T5964] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 359.590072][ T979] usb 2-1: Invalid ep0 maxpacket: 64 [ 359.595835][ T979] usb usb2-port1: attempt power cycle [ 359.695825][ T5964] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 359.705215][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.714415][ T5964] usb 4-1: Product: syz [ 359.718581][ T5964] usb 4-1: Manufacturer: syz [ 359.723288][ T5964] usb 4-1: SerialNumber: syz [ 359.730405][ T5964] usb 4-1: config 0 descriptor?? [ 359.938122][ T5964] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 359.950878][ T979] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 359.953490][ T5964] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 359.969552][ T5964] usb 4-1: USB disconnect, device number 28 [ 359.971186][ T979] usb 2-1: Invalid ep0 maxpacket: 64 [ 360.070057][ T5894] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 360.110508][ T979] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 360.130578][ T979] usb 2-1: Invalid ep0 maxpacket: 64 [ 360.136144][ T979] usb usb2-port1: unable to enumerate USB device [ 360.230137][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 360.236583][ T5894] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.247172][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 360.253956][ T5894] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 360.263081][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.273572][ T5894] usb 5-1: config 0 descriptor?? [ 360.492528][T11973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.501732][T11973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.550077][ T5847] Bluetooth: hci2: command tx timeout [ 360.695045][T11979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.716424][T11979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.720331][ T979] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 360.884755][ T979] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 360.888302][ T5894] usbhid 5-1:0.0: can't add hid device: -71 [ 360.905168][ T979] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 360.906872][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 360.925905][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.935701][ T979] usb 4-1: Product: syz [ 360.942304][ T5894] usb 5-1: USB disconnect, device number 26 [ 360.946996][ T979] usb 4-1: Manufacturer: syz [ 360.964406][ T979] usb 4-1: SerialNumber: syz [ 360.980904][ T979] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 361.135463][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.147077][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.186458][ T979] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 361.199778][ T979] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 361.208170][ T979] usb 4-1: media controller created [ 361.224718][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.288419][ T979] usb 4-1: USB disconnect, device number 29 [ 361.370036][ T5894] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 361.519963][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 361.534915][ T5894] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 361.543570][ T5894] usb 3-1: config 0 has no interface number 0 [ 361.550164][ T5894] usb 3-1: config 0 interface 95 has no altsetting 0 [ 361.561659][ T5894] usb 3-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=d2.0d [ 361.571582][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.579702][ T5894] usb 3-1: Product: syz [ 361.584290][ T5894] usb 3-1: Manufacturer: syz [ 361.588996][ T5894] usb 3-1: SerialNumber: syz [ 361.599784][ T5894] usb 3-1: config 0 descriptor?? [ 361.750026][ T5964] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 361.818197][ T5894] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 361.842925][ T5894] dvb-usb: bulk message failed: -22 (4/0) [ 361.851510][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 361.866247][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 361.873069][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 361.888210][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.900708][ T5894] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 361.917476][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 361.930548][ T5894] usb 3-1: media controller created [ 361.947461][ T5964] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 361.968139][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 361.981912][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.991266][ T5964] usb 5-1: SerialNumber: syz [ 361.999660][ T5964] usb 5-1: config 0 descriptor?? [ 362.000260][ T979] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 362.027768][ T5964] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 362.047052][ T5894] ttusb2: set interface to alts=3 failed [ 362.060537][ T5964] usb 5-1: Detected FT232A [ 362.076667][ T5964] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 362.136170][ T5894] DVB: Unable to find symbol tda10086_attach() [ 362.150385][ T5894] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 362.170054][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 362.176966][ T5894] dvb-usb: bulk message failed: -22 (4/0) [ 362.177181][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 362.186752][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 362.204793][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 362.207400][ T979] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 362.211606][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 362.230936][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.235145][ T5894] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 362.239043][ T979] usb 4-1: Product: syz [ 362.258601][ T5894] usb 3-1: USB disconnect, device number 83 [ 362.276913][ T5946] usb 5-1: USB disconnect, device number 27 [ 362.294163][ T979] usb 4-1: Manufacturer: syz [ 362.298798][ T979] usb 4-1: SerialNumber: syz [ 362.324711][ T979] usb 4-1: config 0 descriptor?? [ 362.332447][ T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 362.341054][ T5946] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 362.363932][ T979] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 362.368960][ T5894] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 362.377314][ T5946] ftdi_sio 5-1:0.0: device disconnected [ 362.400780][ T979] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 362.532642][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 362.540120][ T24] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 362.548516][ T24] usb 2-1: config 2 has no interface number 0 [ 362.559459][ T24] usb 2-1: config 2 interface 31 has no altsetting 0 [ 362.573972][ T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 362.583650][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.593109][ T24] usb 2-1: Product: syz [ 362.597473][ T24] usb 2-1: Manufacturer: syz [ 362.602395][ T24] usb 2-1: SerialNumber: syz [ 362.630627][ T5847] Bluetooth: hci2: command tx timeout [ 362.769916][ T5894] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 362.930645][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 362.941509][ T5894] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 362.949654][ T5894] usb 3-1: config 0 has no interface number 0 [ 362.970539][ T5894] usb 3-1: config 0 interface 12 has no altsetting 0 [ 362.979545][ T5894] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 362.990065][ T979] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 362.991157][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.019931][ T5894] usb 3-1: Product: syz [ 363.024287][ T5894] usb 3-1: Manufacturer: syz [ 363.028905][ T5894] usb 3-1: SerialNumber: syz [ 363.036727][ T5894] usb 3-1: config 0 descriptor?? [ 363.232003][ T24] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 363.248438][ T24] usb 2-1: USB disconnect, device number 104 [ 363.300140][ T5933] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 363.461713][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.472942][ T5933] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 363.482046][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.499306][ T5933] usb 5-1: config 0 descriptor?? [ 363.791456][T12012] 9pnet_fd: Insufficient options for proto=fd [ 363.828335][ T979] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 363.841006][ T979] em28xx 4-1:0.0: board has no eeprom [ 363.881850][ T5933] usbhid 5-1:0.0: can't add hid device: -71 [ 363.888366][ T5933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 363.898902][ T5933] usb 5-1: USB disconnect, device number 28 [ 363.913196][ T979] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 363.921259][ T979] em28xx 4-1:0.0: dvb set to bulk mode. [ 363.927120][ T5915] em28xx 4-1:0.0: Binding DVB extension [ 363.945083][ T979] usb 4-1: USB disconnect, device number 30 [ 363.970323][ T979] em28xx 4-1:0.0: Disconnecting em28xx [ 364.007218][ T5915] em28xx 4-1:0.0: Registering input extension [ 364.014489][ T979] em28xx 4-1:0.0: Closing input extension [ 364.040460][ T5946] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 364.051632][ T979] em28xx 4-1:0.0: Freeing device [ 364.199908][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 364.206949][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.219477][ T5946] usb 2-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice= 8.b6 [ 364.230065][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.238068][ T5946] usb 2-1: Product: syz [ 364.242895][ T5946] usb 2-1: Manufacturer: syz [ 364.247488][ T5946] usb 2-1: SerialNumber: syz [ 364.254681][ T5946] usb 2-1: config 0 descriptor?? [ 364.265805][ T5946] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 364.668220][ T5946] gspca_sn9c20x: Write register 1001 failed -71 [ 364.675732][ T5946] gspca_sn9c20x: Device initialization failed [ 364.688696][ T5946] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 364.700496][ T5946] usb 2-1: USB disconnect, device number 105 [ 364.710061][ T5847] Bluetooth: hci2: command tx timeout [ 365.134411][T12032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 365.227362][T12036] binder: Bad value for 'max' [ 365.310588][T12038] syzkaller1: entered promiscuous mode [ 365.316114][T12038] syzkaller1: entered allmulticast mode [ 365.470049][ T5946] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 365.471098][ T5894] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 365.486221][ T5894] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 365.494324][ T5894] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 365.502479][ T5894] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 365.520918][ T5894] usb 3-1: USB disconnect, device number 84 [ 365.611401][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 365.614420][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 365.619988][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 365.638755][ T5946] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 365.648236][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.656966][ T5946] usb 2-1: Product: syz [ 365.661922][ T5946] usb 2-1: Manufacturer: syz [ 365.666507][ T5946] usb 2-1: SerialNumber: syz [ 365.675308][T12049] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1960'. [ 365.678753][ T5946] usb 2-1: config 0 descriptor?? [ 365.696240][ T5946] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 365.707349][ T5946] usb 2-1: Detected FT232H [ 365.783101][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 365.792276][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.800370][ T24] usb 4-1: Product: syz [ 365.805837][ T24] usb 4-1: Manufacturer: syz [ 365.810554][ T24] usb 4-1: SerialNumber: syz [ 365.823916][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 365.841109][ T979] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 365.939943][ T5933] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 366.102354][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 366.102598][T12036] tmpfs: Unknown parameter 'g' [ 366.112481][ T5933] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.113596][ T5933] usb 5-1: config 0 has no interfaces? [ 366.118035][ T5933] usb 5-1: New USB device found, idVendor=04dd, idProduct=9151, bcdDevice=1b.68 [ 366.139196][ T5946] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 366.139773][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.153532][ T5946] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 366.157374][ T5933] usb 5-1: Product: Ð¥ [ 366.163902][ T5946] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 366.165265][ T5933] usb 5-1: SerialNumber: syz [ 366.182017][ T5946] usb 2-1: USB disconnect, device number 106 [ 366.193272][ T5933] usb 5-1: config 0 descriptor?? [ 366.209113][ T5946] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 366.229705][ T5946] ftdi_sio 2-1:0.0: device disconnected [ 366.260995][T12040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.270130][T12040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.319997][ T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 366.345739][ T5915] usb 4-1: USB disconnect, device number 31 [ 366.412516][T12048] syzkaller1: entered promiscuous mode [ 366.419405][T12048] syzkaller1: entered allmulticast mode [ 366.471357][ T24] usb 3-1: config 0 has an invalid interface number: 158 but max is 0 [ 366.479556][ T24] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 366.490672][ T24] usb 3-1: config 0 has no interface number 0 [ 366.496941][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=be.65 [ 366.507865][ T5933] usb 5-1: USB disconnect, device number 29 [ 366.508026][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.528229][ T24] usb 3-1: config 0 descriptor?? [ 366.539274][ T24] usb 3-1: unknown interface protocol 0xea, assuming v1 [ 366.546368][ T24] usb 3-1: 158:2 : does not exist [ 366.739178][ T24] usb 3-1: USB disconnect, device number 85 [ 366.872703][ T979] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 366.883219][ T979] ath9k_htc: Failed to initialize the device [ 366.890231][ T5915] usb 4-1: ath9k_htc: USB layer deinitialized [ 366.925550][T12070] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 367.085124][T12074] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2526675998 (161707263872 ns) > initial count (96581179136 ns). Using initial count to start timer. [ 367.499938][ T5915] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 367.529926][ T979] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 367.652312][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 367.658977][ T5915] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 367.668142][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.696472][ T5915] usb 5-1: config 0 descriptor?? [ 367.704265][ T979] usb 3-1: config index 0 descriptor too short (expected 65185, got 72) [ 367.721364][ T979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 367.730866][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.738904][ T979] usb 3-1: Product: syz [ 367.743716][ T979] usb 3-1: Manufacturer: syz [ 367.750376][ T979] usb 3-1: SerialNumber: syz [ 367.776920][ T979] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 367.795390][ T5886] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 367.846413][T12092] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1974'. [ 368.020959][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.039552][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.064094][ T24] usb 3-1: USB disconnect, device number 86 [ 368.135098][ T5915] macally 0003:060B:0001.001C: unknown main item tag 0x1 [ 368.145060][ T5915] macally 0003:060B:0001.001C: hidraw0: USB HID v1.01 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 368.162862][ T979] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 368.321350][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 368.330556][ T979] usb 2-1: config 0 has no interfaces? [ 368.347873][ T5933] usb 5-1: USB disconnect, device number 30 [ 368.354358][ T979] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=96.8f [ 368.375718][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.388253][ T979] usb 2-1: Product: syz [ 368.393276][ T979] usb 2-1: Manufacturer: syz [ 368.397893][ T979] usb 2-1: SerialNumber: syz [ 368.413080][ T979] usb 2-1: config 0 descriptor?? [ 368.870221][ T5886] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 368.881516][ T5886] ath9k_htc: Failed to initialize the device [ 368.888231][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 369.199971][ T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 369.239956][ T5946] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 369.353467][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 369.360716][ T24] usb 3-1: config index 0 descriptor too short (expected 65185, got 72) [ 369.370252][ T5946] usb 5-1: device descriptor read/64, error -71 [ 369.378187][ T24] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08 [ 369.389240][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.397417][ T24] usb 3-1: Product: syz [ 369.401748][ T24] usb 3-1: Manufacturer: syz [ 369.406359][ T24] usb 3-1: SerialNumber: syz [ 369.428874][ T24] mos7840 3-1:1.0: missing endpoints [ 369.609908][ T5946] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 369.638663][ T5933] usb 3-1: USB disconnect, device number 87 [ 369.646669][ T24] usb 2-1: USB disconnect, device number 107 [ 369.740077][ T5946] usb 5-1: device descriptor read/64, error -71 [ 369.776563][T12101] binder: 12100:12101 ioctl c0306201 2000000003c0 returned -14 [ 369.851018][ T5946] usb usb5-port1: attempt power cycle [ 370.193184][ T5946] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 370.240682][ T5946] usb 5-1: device descriptor read/8, error -71 [ 370.489931][ T5946] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 370.510364][ T5946] usb 5-1: device descriptor read/8, error -71 [ 370.620472][ T5946] usb usb5-port1: unable to enumerate USB device [ 370.651150][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.661848][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.663116][T12123] nbd1: detected capacity change from 0 to 127 [ 370.669979][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 370.695182][ T5847] block nbd1: Receive control failed (result -32) [ 370.695422][ T5843] block nbd1: Send control failed (result -32) [ 370.704790][ T5164] block nbd1: Receive control failed (result -32) [ 370.713926][ T5843] block nbd1: Request send failed, requeueing [ 370.729299][ T56] block nbd1: Dead connection, failed to find a fallback [ 370.739470][ T56] block nbd1: shutting down sockets [ 370.748423][ T56] blk_print_req_error: 40 callbacks suppressed [ 370.748440][ T56] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.766074][ T56] Buffer I/O error on dev nbd1, logical block 0, async page read [ 370.773924][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'. [ 370.784324][ T5843] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.795808][ T5843] Buffer I/O error on dev nbd1, logical block 1, async page read [ 370.805273][ T5843] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.814401][ T5843] Buffer I/O error on dev nbd1, logical block 2, async page read [ 370.823229][ T5843] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.829897][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 370.832859][ T5843] Buffer I/O error on dev nbd1, logical block 3, async page read [ 370.845463][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.849551][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 370.854721][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 370.871852][ T5843] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.881021][ T5843] Buffer I/O error on dev nbd1, logical block 1, async page read [ 370.888930][ T5843] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.898351][ T5946] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 370.898468][ T5843] Buffer I/O error on dev nbd1, logical block 2, async page read [ 370.913892][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.913919][ T24] usb 4-1: Product: syz [ 370.913935][ T24] usb 4-1: Manufacturer: syz [ 370.913948][ T24] usb 4-1: SerialNumber: syz [ 370.934236][ T24] usb 4-1: config 0 descriptor?? [ 370.952833][ T5843] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.968134][ T5843] Buffer I/O error on dev nbd1, logical block 3, async page read [ 370.981634][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.992887][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 371.001069][ T5843] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.011327][ T5843] Buffer I/O error on dev nbd1, logical block 1, async page read [ 371.023301][ T5843] ldm_validate_partition_table(): Disk read failed. [ 371.033123][ T5843] Dev nbd1: unable to read RDB block 0 [ 371.040694][ T5843] nbd1: unable to read partition table [ 371.053378][ T5843] ldm_validate_partition_table(): Disk read failed. [ 371.062781][ T5843] Dev nbd1: unable to read RDB block 0 [ 371.063499][ T5946] usb 2-1: config index 0 descriptor too short (expected 82, got 18) [ 371.071346][ T5843] nbd1: unable to read partition table [ 371.080355][ T5946] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 371.092240][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.100760][ T5946] usb 2-1: Product: syz [ 371.105119][ T5946] usb 2-1: Manufacturer: syz [ 371.109738][ T5946] usb 2-1: SerialNumber: syz [ 371.117083][ T5946] usb 2-1: config 0 descriptor?? [ 371.230277][ T5933] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 371.362560][ T5946] usb-storage 2-1:0.0: USB Mass Storage device detected [ 371.400842][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 371.410990][ T5946] usb 2-1: USB disconnect, device number 108 [ 371.425608][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 371.440386][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.454899][ T5933] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 371.464398][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.472455][ T5933] usb 3-1: Product: syz [ 371.476753][ T5933] usb 3-1: Manufacturer: syz [ 371.481485][ T5933] usb 3-1: SerialNumber: syz [ 371.488657][ T5933] usb 3-1: config 0 descriptor?? [ 371.496800][ T5933] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 371.506283][ T5933] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 371.548782][ T24] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 371.559012][ T24] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 371.566101][ T24] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 371.611544][ T24] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 371.765694][ T24] usb 4-1: USB disconnect, device number 32 [ 372.106697][T12136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.115544][T12136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.124672][ T5933] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 372.131667][ T5933] em28xx 3-1:0.0: Config register raw data: 0x41 [ 372.140017][ T5915] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 372.290030][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 372.299023][ T5915] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 372.308601][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.319390][ T5915] usb 2-1: Product: syz [ 372.323709][ T5915] usb 2-1: Manufacturer: syz [ 372.328461][ T5915] usb 2-1: SerialNumber: syz [ 372.343789][ T5915] usb 2-1: config 0 descriptor?? [ 372.360800][ T5915] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 372.370037][ T5915] usb 2-1: Detected FT232B [ 372.389913][ T5894] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 372.402194][ T24] usb 3-1: USB disconnect, device number 88 [ 372.409704][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 372.416555][ T24] em28xx 3-1:0.0: Freeing device [ 372.520090][ T5894] usb 5-1: device descriptor read/64, error -71 [ 372.555634][T12140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.566306][T12140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.586240][ T5915] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 372.601371][ T5915] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 372.611968][ T5915] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 372.623764][ T5946] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 372.636810][ T5915] usb 2-1: USB disconnect, device number 109 [ 372.652703][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 372.666535][ T5915] ftdi_sio 2-1:0.0: device disconnected [ 372.769984][ T5894] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 372.769992][ T5946] usb 4-1: device descriptor read/64, error -71 [ 372.910089][ T5894] usb 5-1: device descriptor read/64, error -71 [ 372.970013][ T5915] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 373.006688][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1993'. [ 373.022873][ T5946] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 373.031045][ T5894] usb usb5-port1: attempt power cycle [ 373.122027][ T5915] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.130784][ T5915] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 373.141047][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.150060][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 373.161150][ T5946] usb 4-1: device descriptor read/64, error -71 [ 373.167431][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 373.181670][ T5915] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.190840][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.198810][ T5915] usb 2-1: Product: syz [ 373.203061][ T5915] usb 2-1: Manufacturer: syz [ 373.214600][ T5915] cdc_wdm 2-1:1.0: skipping garbage [ 373.220070][ T5915] cdc_wdm 2-1:1.0: skipping garbage [ 373.226381][ T5915] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 373.232389][ T5915] cdc_wdm 2-1:1.0: Unknown control protocol [ 373.270162][ T5933] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 373.273045][ T5946] usb usb4-port1: attempt power cycle [ 373.370004][ T5894] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 373.390428][ T5894] usb 5-1: device descriptor read/8, error -71 [ 373.420069][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 373.426715][ T5933] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 373.434960][ T5933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.445102][ T5933] usb 3-1: config 0 has no interface number 0 [ 373.451443][ T5933] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 373.462380][ T5933] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 373.473327][ T5933] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 373.483500][ T5933] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 373.492622][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.503144][ T5933] usb 3-1: config 0 descriptor?? [ 373.515367][ T5933] ldusb 3-1:0.55: Interrupt in endpoint not found [ 373.620013][ T5946] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 373.627628][T12153] netlink: 'syz.1.1992': attribute type 11 has an invalid length. [ 373.635641][ T5894] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 373.645508][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 373.651612][ T5946] usb 4-1: device descriptor read/8, error -71 [ 373.658224][ T5933] usb 2-1: USB disconnect, device number 110 [ 373.670694][ T5894] usb 5-1: device descriptor read/8, error -71 [ 373.713478][ T24] usb 3-1: USB disconnect, device number 89 [ 373.791716][ T5894] usb usb5-port1: unable to enumerate USB device [ 373.889900][ T5946] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 373.911298][ T5946] usb 4-1: device descriptor read/8, error -71 [ 374.020992][ T5946] usb usb4-port1: unable to enumerate USB device [ 374.244182][T12159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.500017][ T5946] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 374.529996][ T5894] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 374.651498][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.661745][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.671806][ T5946] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.681594][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.689580][ T5946] usb 2-1: SerialNumber: syz [ 374.699985][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 374.708729][ T5894] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 374.717380][ T5894] usb 3-1: config 0 has no interface number 0 [ 374.723589][ T5894] usb 3-1: config 0 interface 230 has no altsetting 0 [ 374.732813][ T5894] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 374.741948][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.750135][ T5894] usb 3-1: Product: syz [ 374.754304][ T5894] usb 3-1: Manufacturer: syz [ 374.758895][ T5894] usb 3-1: SerialNumber: syz [ 374.766060][ T5894] usb 3-1: config 0 descriptor?? [ 374.773413][ T5894] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 374.783043][ T5894] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 374.905303][ T5946] usb 2-1: 0:2 : does not exist [ 374.923497][ T5946] usb 2-1: USB disconnect, device number 111 [ 374.949609][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.432988][ T5933] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 375.580144][ T5933] usb 5-1: device descriptor read/64, error -71 [ 375.799921][ T5964] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 375.819961][ T5933] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 375.959931][ T5964] usb 4-1: Using ep0 maxpacket: 32 [ 375.965190][ T5933] usb 5-1: device descriptor read/64, error -71 [ 375.973781][ T5964] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 375.982083][ T5964] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 375.993102][ T5964] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 376.004212][ T5964] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 376.017636][ T5964] usb 4-1: config 0 interface 0 has no altsetting 0 [ 376.027265][ T5964] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 376.037518][ T5964] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 376.047145][ T5964] usb 4-1: Product: syz [ 376.051698][ T5964] usb 4-1: Manufacturer: syz [ 376.056401][ T5964] usb 4-1: SerialNumber: syz [ 376.066142][ T5964] usb 4-1: config 0 descriptor?? [ 376.075182][ T5964] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 376.085722][ T5933] usb usb5-port1: attempt power cycle [ 376.093907][ T5964] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 376.127127][T12190] netlink: 'syz.1.2004': attribute type 3 has an invalid length. [ 376.286120][T12176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.295090][T12176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.360419][ T5915] usb 4-1: USB disconnect, device number 37 [ 376.372139][ T5915] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 376.439958][ T5933] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 376.461013][ T5933] usb 5-1: device descriptor read/8, error -71 [ 376.700000][ T5933] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 376.720527][ T5933] usb 5-1: device descriptor read/8, error -71 [ 376.841766][ T5933] usb usb5-port1: unable to enumerate USB device [ 377.072714][ T5894] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 377.086132][ T5894] usb 3-1: USB disconnect, device number 90 [ 377.170496][ T5915] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 377.319978][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 377.327264][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 377.338156][ T5915] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 377.347497][ T5915] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 377.357005][ T5915] usb 4-1: Product: syz [ 377.362796][ T5915] usb 4-1: Manufacturer: syz [ 377.367404][ T5915] usb 4-1: SerialNumber: syz [ 377.583138][ T5915] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 377.600132][ T5915] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 377.612837][ T5915] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 377.673219][T12226] syzkaller1: entered promiscuous mode [ 377.678884][T12226] syzkaller1: entered allmulticast mode [ 377.746234][T12231] gfs2: Unknown parameter 'discardt/tun' [ 377.784615][ T5915] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 377.793288][ T5915] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 377.803122][ T5915] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 377.814047][ T5915] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 377.825897][ T5915] usb 4-1: USB disconnect, device number 38 [ 377.837118][ T5915] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 377.849251][ T5915] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 377.859456][ T5915] visor 4-1:1.0: device disconnected [ 377.911589][ T5964] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 378.081916][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 378.088846][ T5964] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.098464][ T5964] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 378.106933][ T5964] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 378.117417][ T5964] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 378.126503][ T5964] usb 3-1: config 128 has no interface number 0 [ 378.132842][ T5964] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 378.144146][ T5964] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 378.154383][ T5964] usb 3-1: config 128 interface 127 has no altsetting 0 [ 378.163375][ T5964] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 378.172453][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.180610][ T5964] usb 3-1: Product: syz [ 378.184797][ T5964] usb 3-1: Manufacturer: syz [ 378.189399][ T5964] usb 3-1: SerialNumber: syz [ 378.446992][ T5964] usb 3-1: USB disconnect, device number 91 [ 378.478709][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.600344][ T5915] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 378.635160][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.680191][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 378.760830][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 378.767711][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.778693][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.788542][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.801504][ T5915] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 378.811598][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.822637][ T5915] usb 5-1: config 0 descriptor?? [ 378.851802][ T24] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 378.863571][ T24] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 139, changing to 11 [ 378.875493][ T24] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 50861, setting to 1024 [ 378.888671][ T24] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 378.898088][ T24] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 378.906458][ T24] usb 4-1: Manufacturer: syz [ 378.919914][ T24] usb 4-1: SerialNumber: syz [ 378.932233][T12239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 379.017330][T12252] syz.2.2027 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 379.053479][T12252] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input38 [ 379.229362][ T24] yealink 4-1:36.0: invalid payload size 1024, expected 16 [ 379.248907][ T24] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input39 [ 379.261044][ T5915] nzxt-kraken2 0003:1E71:170E.001D: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0 [ 379.279412][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.286452][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.294442][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.301586][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.308615][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.315707][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.327823][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.335580][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.342702][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 379.349920][ C1] yealink 4-1:36.0: unexpected response 0 [ 379.356310][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.363307][ C1] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 379.370106][ C1] yealink 4-1:36.0: unexpected response 0 [ 379.370391][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.390002][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.397028][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 379.403817][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 379.411648][ T24] usb 4-1: USB disconnect, device number 39 [ 379.438361][ T5933] usb 5-1: USB disconnect, device number 43 [ 379.575930][T12269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2032'. [ 379.630260][ T5964] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 379.789072][T12276] [ 379.791423][T12276] ====================================================== [ 379.798419][T12276] WARNING: possible circular locking dependency detected [ 379.805442][T12276] syzkaller #0 Not tainted [ 379.809842][T12276] ------------------------------------------------------ [ 379.816852][T12276] syz.3.2034/12276 is trying to acquire lock: [ 379.822900][T12276] ffffffff8e245220 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0x9c/0x7f0 [ 379.831684][T12276] [ 379.831684][T12276] but task is already holding lock: [ 379.839045][T12276] ffffffff8f5e3b08 (cpool_mutex){+.+.}-{4:4}, at: tcp_sigpool_alloc_ahash+0x88/0xc70 [ 379.848558][T12276] [ 379.848558][T12276] which lock already depends on the new lock. [ 379.848558][T12276] [ 379.858955][T12276] [ 379.858955][T12276] the existing dependency chain (in reverse order) is: [ 379.867956][T12276] [ 379.867956][T12276] -> #7 (cpool_mutex){+.+.}-{4:4}: [ 379.875254][T12276] lock_acquire+0x120/0x360 [ 379.880285][T12276] __mutex_lock+0x187/0x1350 [ 379.885394][T12276] tcp_sigpool_alloc_ahash+0x88/0xc70 [ 379.891287][T12276] tcp_md5_alloc_sigpool+0x1b/0x50 [ 379.896915][T12276] tcp_md5_do_add+0x107/0x3a0 [ 379.902145][T12276] tcp_v4_parse_md5_keys+0x412/0x600 [ 379.907947][T12276] do_tcp_setsockopt+0x11dc/0x1f20 [ 379.913570][T12276] do_sock_setsockopt+0x17c/0x1b0 [ 379.919108][T12276] __x64_sys_setsockopt+0x13f/0x1b0 [ 379.924813][T12276] do_syscall_64+0xfa/0xfa0 [ 379.929825][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.936226][T12276] [ 379.936226][T12276] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 379.943863][T12276] lock_acquire+0x120/0x360 [ 379.948884][T12276] lock_sock_nested+0x48/0x100 [ 379.954167][T12276] inet_shutdown+0x6a/0x390 [ 379.959179][T12276] nbd_mark_nsock_dead+0x2e9/0x560 [ 379.964795][T12276] recv_work+0x2138/0x24f0 [ 379.969716][T12276] process_scheduled_works+0xae1/0x17b0 [ 379.975772][T12276] worker_thread+0x8a0/0xda0 [ 379.980873][T12276] kthread+0x711/0x8a0 [ 379.985453][T12276] ret_from_fork+0x4bc/0x870 [ 379.990563][T12276] ret_from_fork_asm+0x1a/0x30 [ 379.995853][T12276] [ 379.995853][T12276] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 380.003497][T12276] lock_acquire+0x120/0x360 [ 380.008521][T12276] __mutex_lock+0x187/0x1350 [ 380.013623][T12276] nbd_queue_rq+0x257/0xf10 [ 380.018638][T12276] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 380.024692][T12276] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 380.031539][T12276] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 380.038030][T12276] blk_mq_run_hw_queue+0x348/0x4f0 [ 380.043651][T12276] blk_mq_dispatch_list+0xd0c/0xe00 [ 380.049357][T12276] blk_mq_flush_plug_list+0x469/0x550 [ 380.055241][T12276] __blk_flush_plug+0x3d3/0x4b0 [ 380.060603][T12276] __submit_bio+0x2d3/0x5a0 [ 380.065620][T12276] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 380.071759][T12276] block_read_full_folio+0x7b7/0x830 [ 380.077555][T12276] filemap_read_folio+0x117/0x380 [ 380.083087][T12276] do_read_cache_folio+0x350/0x590 [ 380.088707][T12276] read_part_sector+0xb6/0x2b0 [ 380.093975][T12276] adfspart_check_ICS+0xa4/0xa50 [ 380.099425][T12276] bdev_disk_changed+0x75f/0x14b0 [ 380.104963][T12276] blkdev_get_whole+0x380/0x510 [ 380.110333][T12276] bdev_open+0x31e/0xd30 [ 380.115081][T12276] blkdev_open+0x457/0x600 [ 380.120010][T12276] do_dentry_open+0x953/0x13f0 [ 380.125292][T12276] vfs_open+0x3b/0x340 [ 380.129890][T12276] path_openat+0x2ee5/0x3830 [ 380.134993][T12276] do_filp_open+0x1fa/0x410 [ 380.140047][T12276] do_sys_openat2+0x121/0x1c0 [ 380.145244][T12276] __x64_sys_openat+0x138/0x170 [ 380.150609][T12276] do_syscall_64+0xfa/0xfa0 [ 380.155623][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.162022][T12276] [ 380.162022][T12276] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 380.169227][T12276] lock_acquire+0x120/0x360 [ 380.174242][T12276] __mutex_lock+0x187/0x1350 [ 380.179338][T12276] nbd_queue_rq+0xc8/0xf10 [ 380.184264][T12276] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 380.190326][T12276] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 380.197265][T12276] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 380.203757][T12276] blk_mq_run_hw_queue+0x348/0x4f0 [ 380.209374][T12276] blk_mq_dispatch_list+0xd0c/0xe00 [ 380.215077][T12276] blk_mq_flush_plug_list+0x469/0x550 [ 380.220952][T12276] __blk_flush_plug+0x3d3/0x4b0 [ 380.226311][T12276] __submit_bio+0x2d3/0x5a0 [ 380.231320][T12276] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 380.237457][T12276] block_read_full_folio+0x7b7/0x830 [ 380.243248][T12276] filemap_read_folio+0x117/0x380 [ 380.248806][T12276] do_read_cache_folio+0x350/0x590 [ 380.254428][T12276] read_part_sector+0xb6/0x2b0 [ 380.259699][T12276] adfspart_check_ICS+0xa4/0xa50 [ 380.265156][T12276] bdev_disk_changed+0x75f/0x14b0 [ 380.270694][T12276] blkdev_get_whole+0x380/0x510 [ 380.276053][T12276] bdev_open+0x31e/0xd30 [ 380.280802][T12276] blkdev_open+0x457/0x600 [ 380.285731][T12276] do_dentry_open+0x953/0x13f0 [ 380.291010][T12276] vfs_open+0x3b/0x340 [ 380.295592][T12276] path_openat+0x2ee5/0x3830 [ 380.300690][T12276] do_filp_open+0x1fa/0x410 [ 380.305700][T12276] do_sys_openat2+0x121/0x1c0 [ 380.310887][T12276] __x64_sys_openat+0x138/0x170 [ 380.316251][T12276] do_syscall_64+0xfa/0xfa0 [ 380.321269][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.327669][T12276] [ 380.327669][T12276] -> #3 (set->srcu){.+.+}-{0:0}: [ 380.334782][T12276] lock_sync+0xba/0x160 [ 380.339456][T12276] __synchronize_srcu+0x96/0x3a0 [ 380.344906][T12276] elevator_switch+0x12b/0x640 [ 380.350179][T12276] elevator_change+0x315/0x4c0 [ 380.355460][T12276] elevator_set_default+0x186/0x260 [ 380.361164][T12276] blk_register_queue+0x34e/0x3f0 [ 380.366706][T12276] __add_disk+0x677/0xd50 [ 380.371546][T12276] add_disk_fwnode+0xfc/0x480 [ 380.376734][T12276] nbd_dev_add+0x717/0xae0 [ 380.381665][T12276] nbd_init+0x168/0x1f0 [ 380.386333][T12276] do_one_initcall+0x236/0x820 [ 380.391611][T12276] do_initcall_level+0x104/0x190 [ 380.397053][T12276] do_initcalls+0x59/0xa0 [ 380.401892][T12276] kernel_init_freeable+0x334/0x4b0 [ 380.407594][T12276] kernel_init+0x1d/0x1d0 [ 380.412439][T12276] ret_from_fork+0x4bc/0x870 [ 380.417540][T12276] ret_from_fork_asm+0x1a/0x30 [ 380.422821][T12276] [ 380.422821][T12276] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 380.430629][T12276] lock_acquire+0x120/0x360 [ 380.435641][T12276] __mutex_lock+0x187/0x1350 [ 380.440737][T12276] elevator_change+0x1e5/0x4c0 [ 380.446010][T12276] elevator_set_none+0x42/0xb0 [ 380.451283][T12276] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 380.457600][T12276] nbd_start_device+0x17f/0xb10 [ 380.462959][T12276] nbd_genl_connect+0x135b/0x18f0 [ 380.468491][T12276] genl_family_rcv_msg_doit+0x215/0x300 [ 380.474549][T12276] genl_rcv_msg+0x60e/0x790 [ 380.479564][T12276] netlink_rcv_skb+0x208/0x470 [ 380.484830][T12276] genl_rcv+0x28/0x40 [ 380.489331][T12276] netlink_unicast+0x82f/0x9e0 [ 380.494599][T12276] netlink_sendmsg+0x805/0xb30 [ 380.499868][T12276] __sock_sendmsg+0x21c/0x270 [ 380.505057][T12276] ____sys_sendmsg+0x505/0x830 [ 380.510325][T12276] ___sys_sendmsg+0x21f/0x2a0 [ 380.515514][T12276] __x64_sys_sendmsg+0x19b/0x260 [ 380.520958][T12276] do_syscall_64+0xfa/0xfa0 [ 380.525969][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.532369][T12276] [ 380.532369][T12276] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 380.540973][T12276] lock_acquire+0x120/0x360 [ 380.545982][T12276] blk_alloc_queue+0x538/0x620 [ 380.551262][T12276] __blk_mq_alloc_disk+0x15c/0x340 [ 380.556884][T12276] nbd_dev_add+0x46c/0xae0 [ 380.561822][T12276] nbd_init+0x168/0x1f0 [ 380.566488][T12276] do_one_initcall+0x236/0x820 [ 380.571762][T12276] do_initcall_level+0x104/0x190 [ 380.577210][T12276] do_initcalls+0x59/0xa0 [ 380.582043][T12276] kernel_init_freeable+0x334/0x4b0 [ 380.587746][T12276] kernel_init+0x1d/0x1d0 [ 380.592595][T12276] ret_from_fork+0x4bc/0x870 [ 380.597707][T12276] ret_from_fork_asm+0x1a/0x30 [ 380.602993][T12276] [ 380.602993][T12276] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 380.610201][T12276] validate_chain+0xb9b/0x2140 [ 380.615477][T12276] __lock_acquire+0xab9/0xd20 [ 380.620664][T12276] lock_acquire+0x120/0x360 [ 380.625675][T12276] fs_reclaim_acquire+0x72/0x100 [ 380.631118][T12276] __kmalloc_noprof+0x9c/0x7f0 [ 380.636384][T12276] tcp_sigpool_alloc_ahash+0x144/0xc70 [ 380.642351][T12276] tcp_md5_alloc_sigpool+0x1b/0x50 [ 380.647973][T12276] tcp_md5_do_add+0x107/0x3a0 [ 380.653157][T12276] tcp_v6_parse_md5_keys+0x4df/0x610 [ 380.658952][T12276] do_tcp_setsockopt+0x11dc/0x1f20 [ 380.664569][T12276] do_sock_setsockopt+0x17c/0x1b0 [ 380.670106][T12276] __x64_sys_setsockopt+0x13f/0x1b0 [ 380.675813][T12276] do_syscall_64+0xfa/0xfa0 [ 380.680824][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.687235][T12276] [ 380.687235][T12276] other info that might help us debug this: [ 380.687235][T12276] [ 380.697450][T12276] Chain exists of: [ 380.697450][T12276] fs_reclaim --> sk_lock-AF_INET --> cpool_mutex [ 380.697450][T12276] [ 380.709695][T12276] Possible unsafe locking scenario: [ 380.709695][T12276] [ 380.717128][T12276] CPU0 CPU1 [ 380.722482][T12276] ---- ---- [ 380.727829][T12276] lock(cpool_mutex); [ 380.731884][T12276] lock(sk_lock-AF_INET); [ 380.738806][T12276] lock(cpool_mutex); [ 380.745642][T12276] lock(fs_reclaim); [ 380.749613][T12276] [ 380.749613][T12276] *** DEADLOCK *** [ 380.749613][T12276] [ 380.757745][T12276] 2 locks held by syz.3.2034/12276: [ 380.762922][T12276] #0: ffff888033c00fd8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_tcp_setsockopt+0x854/0x1f20 [ 380.772923][T12276] #1: ffffffff8f5e3b08 (cpool_mutex){+.+.}-{4:4}, at: tcp_sigpool_alloc_ahash+0x88/0xc70 [ 380.782843][T12276] [ 380.782843][T12276] stack backtrace: [ 380.788723][T12276] CPU: 1 UID: 0 PID: 12276 Comm: syz.3.2034 Not tainted syzkaller #0 PREEMPT(full) [ 380.788741][T12276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.788758][T12276] Call Trace: [ 380.788768][T12276] [ 380.788776][T12276] dump_stack_lvl+0x189/0x250 [ 380.788798][T12276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.788812][T12276] ? __pfx__printk+0x10/0x10 [ 380.788826][T12276] ? print_lock_name+0xde/0x100 [ 380.788848][T12276] print_circular_bug+0x2ee/0x310 [ 380.788871][T12276] check_noncircular+0x134/0x160 [ 380.788893][T12276] validate_chain+0xb9b/0x2140 [ 380.788914][T12276] ? __mutex_trylock_common+0x153/0x260 [ 380.788938][T12276] ? __pfx___mutex_trylock_common+0x10/0x10 [ 380.788960][T12276] ? rcu_is_watching+0x15/0xb0 [ 380.788981][T12276] __lock_acquire+0xab9/0xd20 [ 380.789000][T12276] ? __kmalloc_noprof+0x9c/0x7f0 [ 380.789014][T12276] lock_acquire+0x120/0x360 [ 380.789030][T12276] ? __kmalloc_noprof+0x9c/0x7f0 [ 380.789047][T12276] fs_reclaim_acquire+0x72/0x100 [ 380.789066][T12276] ? __kmalloc_noprof+0x9c/0x7f0 [ 380.789079][T12276] __kmalloc_noprof+0x9c/0x7f0 [ 380.789092][T12276] ? tcp_sigpool_alloc_ahash+0x144/0xc70 [ 380.789112][T12276] tcp_sigpool_alloc_ahash+0x144/0xc70 [ 380.789133][T12276] ? __pfx_tcp_sigpool_alloc_ahash+0x10/0x10 [ 380.789154][T12276] ? __might_fault+0xb0/0x130 [ 380.789171][T12276] tcp_md5_alloc_sigpool+0x1b/0x50 [ 380.789190][T12276] tcp_md5_do_add+0x107/0x3a0 [ 380.789211][T12276] tcp_v6_parse_md5_keys+0x4df/0x610 [ 380.789227][T12276] ? __pfx_tcp_v6_parse_md5_keys+0x10/0x10 [ 380.789248][T12276] ? __lock_acquire+0xab9/0xd20 [ 380.789271][T12276] ? __local_bh_enable_ip+0x12d/0x1c0 [ 380.789289][T12276] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 380.789311][T12276] do_tcp_setsockopt+0x11dc/0x1f20 [ 380.789332][T12276] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 380.789349][T12276] ? aa_sk_perm+0x81e/0x950 [ 380.789366][T12276] ? __pfx_aa_sk_perm+0x10/0x10 [ 380.789381][T12276] ? aa_sock_opt_perm+0xff/0x1b0 [ 380.789399][T12276] ? sock_common_setsockopt+0x36/0xc0 [ 380.789413][T12276] ? tcp_setsockopt+0x3d/0xe0 [ 380.789429][T12276] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 380.789443][T12276] do_sock_setsockopt+0x17c/0x1b0 [ 380.789462][T12276] __x64_sys_setsockopt+0x13f/0x1b0 [ 380.789483][T12276] do_syscall_64+0xfa/0xfa0 [ 380.789500][T12276] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.789517][T12276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.789531][T12276] ? clear_bhb_loop+0x60/0xb0 [ 380.789548][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.789562][T12276] RIP: 0033:0x7f685bf8eec9 [ 380.789577][T12276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.789590][T12276] RSP: 002b:00007f685cf11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 380.789609][T12276] RAX: ffffffffffffffda RBX: 00007f685c1e5fa0 RCX: 00007f685bf8eec9 [ 380.789621][T12276] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000003 [ 380.789630][T12276] RBP: 00007f685c011f91 R08: 00000000000000d8 R09: 0000000000000000 [ 380.789640][T12276] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 380.789650][T12276] R13: 00007f685c1e6038 R14: 00007f685c1e5fa0 R15: 00007ffc52929448 [ 380.789667][T12276] [ 381.122287][ T5915] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 381.139938][ T5964] usb 3-1: unable to get BOS descriptor or descriptor too short [ 381.153672][ T5964] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 381.170226][ T5964] usb 3-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config [ 381.180987][ T5964] usb 3-1: config 1 interface 1 has no altsetting 0 [ 381.189282][ T5964] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.199297][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.207472][ T5964] usb 3-1: Product: syz [ 381.211706][ T5964] usb 3-1: Manufacturer: syz [ 381.216317][ T5964] usb 3-1: SerialNumber: syz [ 381.279860][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 381.286693][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.295303][ T5915] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 381.303605][ T5915] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 381.312346][ T5915] usb 2-1: config 4 has no interface number 0 [ 381.320120][ T5915] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 381.329191][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.337362][ T5915] usb 2-1: Product: syz [ 381.341565][ T5915] usb 2-1: Manufacturer: syz [ 381.346157][ T5915] usb 2-1: SerialNumber: syz [ 381.428019][ T5964] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 381.436986][ T5964] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 381.445138][ T5964] usb 3-1: 2:1: All rates were zero [ 381.462316][ T5964] usb 3-1: USB disconnect, device number 92 [ 381.477953][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.559396][ T5915] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 381.566876][ T5915] uvcvideo 2-1:4.147: No valid video chain found. [ 381.576158][ T5915] usb 2-1: USB disconnect, device number 112