last executing test programs: 2m45.49135356s ago: executing program 3 (id=1541): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 2m44.492078865s ago: executing program 3 (id=1548): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000400)={r0}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80c, r3}, 0x10) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = userfaultfd(0x801) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0x3, {0x0}}, 0x18) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r6 = fcntl$dupfd(r4, 0x0, r4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xa, 0x30}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x6, 0xffff, 0x7, 0x1, 0x8, 0x7, 0xf6}, 0x9c) ioctl$UFFDIO_CONTINUE(r6, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffb, 0x3) 2m44.110351821s ago: executing program 3 (id=1550): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0xc000002, 0x0, 0x0, 0x1, 0x40000}]}) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @void}}}]}) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x8000, 0x56, 0x100, r3}, &(0x7f0000000140)=0x10) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = epoll_create1(0x0) epoll_wait(r6, &(0x7f0000000480)=[{}], 0x1, 0x10000200) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfffffe32, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) (async) epoll_pwait(r6, &(0x7f0000000240), 0x0, 0x7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)={0x9d32f4b220c67360}) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) lseek(r10, 0x4, 0x2) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}], [{@permit_directio}, {@audit}, {@euid_eq={'euid', 0x3d, r4}}]}) 2m43.901701158s ago: executing program 3 (id=1552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) munlock(&(0x7f0000002000/0x3000)=nil, 0x3000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_dump={0x3f, 0x8001, 0x4}}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x2, @none, 0x401}, 0xe) ioctl$EVIOCGUNIQ(r8, 0x80404508, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x3c, r6, 0x1, 0xfffffffe, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1917}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x20000800) 2m43.361019733s ago: executing program 3 (id=1557): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 2m42.373462688s ago: executing program 3 (id=1563): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x42}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0xffff, 0x6, 0x4, 0x27ff, 0x2800, 0x42, 0xbb6, 0x19, 0x8, {0x8, 0x802}, 0xd0, 0x7}}) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) dup3(r1, r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xd0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hfs\x00', 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000140), 0x8c, 0x10180) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000380)={0x3, @capture={0x0, 0x1, {0x54ab, 0x101}, 0x0, 0xfffffff9}}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2m27.197711402s ago: executing program 32 (id=1563): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x42}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0xffff, 0x6, 0x4, 0x27ff, 0x2800, 0x42, 0xbb6, 0x19, 0x8, {0x8, 0x802}, 0xd0, 0x7}}) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) dup3(r1, r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xd0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hfs\x00', 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000140), 0x8c, 0x10180) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000380)={0x3, @capture={0x0, 0x1, {0x54ab, 0x101}, 0x0, 0xfffffff9}}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 8.953803631s ago: executing program 2 (id=2385): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@index_on}, {@metacopy_on}, {@redirect_dir_follow}], [{@permit_directio}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000680)={0x8000, 0x0, 0x200, 0x9, 0x0, 0x0, 0x3, 0xfffffff8}, 0x20) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 7.78321703s ago: executing program 4 (id=2396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235004000000f30b9fa000000130f01d9d90f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba000000000f30660fc775022e0fba600c9864660ffc76002f3166b857000f00d0", 0x55}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) poll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x8000) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.659300796s ago: executing program 4 (id=2401): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000180)='vxcan1\x00', 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 6.237673089s ago: executing program 0 (id=2405): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x11) close(r2) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "8ba672dad0f6323f", '\a\x00', "ee862ce0", "982a2b89f61f0617"}, 0x28) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) 5.636834784s ago: executing program 0 (id=2407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x4) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="edd39ef7ba821c8ed33e7d3d7bc749d06afc1d216ac9d31c47eb245b3e6c899118a765bdc9ee8b1583a62ec2e98ec63ec9d5a032f22205311debbd09a812dfda", 0x40, r6) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x18) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f00000005c0)={&(0x7f0000000340), 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x194, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xebd6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff9c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c3b}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x98}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x4001814) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r9, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8236, 0x52}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040805}, 0x840) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 5.355192405s ago: executing program 0 (id=2409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235004000000f30b9fa000000130f01d9d90f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba000000000f30660fc775022e0fba600c9864660ffc76002f3166b857000f00d0", 0x55}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) poll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x8000) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.436099563s ago: executing program 2 (id=2387): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000000)=""/18, 0x12) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 4.08068998s ago: executing program 0 (id=2414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xd8}}, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07}) (async) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 3.381651337s ago: executing program 2 (id=2416): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0xb9219000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 3.363248329s ago: executing program 4 (id=2417): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000100)="04") getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) 3.209731595s ago: executing program 2 (id=2419): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xa4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000100)=@unspec, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c) 3.099230653s ago: executing program 0 (id=2420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffff7ffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x1, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000150001c0", @ANYRESHEX=r1]) 2.065303461s ago: executing program 1 (id=2422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa8, 0x14, 0xef, 0x20, 0x108c, 0x159, 0xda8d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0x9b, 0x43, 0x6c}}]}}]}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd70acd5c8d14e37209601ba6a668c", @ANYRES32=r2, @ANYBLOB="0a00f500ffffffffffff0000"], 0x28}}, 0x40084) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x1, 0x8d2, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x2b, 0xb0, 0xd4, 0x8, 0x22b8, 0x4204, 0x2604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c0, 0x3, 0x5a, 0x3, 0xa0, 0x8, [{{0x9, 0x4, 0x9c, 0x6, 0xa, 0x1b, 0xf5, 0xf5, 0xad, [], [{{0x9, 0x5, 0xa, 0x4, 0x210, 0x4, 0x2, 0x81}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x13, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xa}, @generic={0xe4, 0x11, "a6ac3e05842f1e5cfb12db706d718cfec80a44049e00ae5b92c3b77565129ac623cc3963ff57814367ef208e22003c3000ba787d01c8d2580be4b5d3fac4e332159c87975739c6cf800f9db1e8a257376d176f4285189270576ba5faaa2a0164a6b425ff80a7dc902983fe75bdf5b3d6938dcce2c2a2b95189cfd6d74415d23b8ae7871e6c5bf5c65fc7093d8b1f693608cc3c8fb018bd2cf002018f2739d62d449670e4bdfaef2b1d513b27a83b09cb9c0fb26c1e785a4ed677430ac61c66c48505078da9aa002ae787f91aff7fc7dd7bf5567cadec5ed7ef0a97eb7214ecc6e08f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x8, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0x5b, 0x3, 0x3ff, 0xff, 0x2, 0x7, [@generic={0xce, 0xe, "8ffa3d9f11bed8fcdf1b14a563cc0bb4b1a554acff9517d0e3179d80b98976d5f612edcb39d483682e337bc2708c1b11fcdd1211636991f3d4fb50018223a9de5d7b1434f459422d35e928a614deb448f8e54f3e61a9a88ce46ee03982315f5a81c9c97c0f86b1530d10ac148adb6961f3ab404df08727416e147ede1d254e467419b3fcfc02c0b9d7646d9b3940c0428031a5dfbc73c2a2d371e25b68bfc0776ea00ea1e98f1e95a2b864480953384acac14add5b46254a935d5dbbea17523b99c319c2e771cb90e8b4aaa8"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x5, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xfff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x80, 0x49, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x2, 0x1, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x5, 0x79, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0xe, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8}, @generic={0x6b, 0x6, "d1eefce53621ea126bea0711e82d6a3dccd2d905cfaa9ff882c15f2d9d76f805a7c5b14ec13ca7eb27a44e71902bcdffa4eb1e45cf78e5a9df7937f545baec672e976ecd869c29faca9d8470b4f311ef392b7c92ac4f7930aee242e3a57abf8f32ac477bed34f7c461"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x1, 0x4, 0x9}}]}}, {{0x9, 0x4, 0x63, 0x3, 0x0, 0x55, 0xa5, 0x41, 0x30}}, {{0x9, 0x4, 0xe3, 0x2, 0x10, 0x71, 0x58, 0x7b, 0x0, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x1000, 0x6, "802ffc0b98dad577d6"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x3, 0x5, 0x5, "7c30a5e4cfe5de"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x9, 0x5, '^'}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x0, 0x0, "d7c61ce09ed4"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x3, 0x6, '7\t'}]}, @uac_as], [{{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x10, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x0, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x85, 0x2000}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xc, 0x30, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x5, 0x40, 0x3, [@generic={0x77, 0x3, "030566ceffc0a7cf12e382811f8e25713515aee588ec5547c01121dbdd34f8b3252a8f6be910afbe31485c66db9e0f65e06f653f54997989975f8ed0002b55e696e122cc15d6e30bd8df67d7c06f95611d7b0ac44cf1290a3593504d438b15c6bc03590ae080d262f0c61c916b71e47679909206b2"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0x81, 0x3, [@generic={0x87, 0x22, "d09cc23a0c500041b4430f5795bab604d194543a2c99c9efda23580734a0166e0358fd4380674c93c56bf6faa911e56a34b9a6702cf0d55f06bc355016c52ebbe689513c1f3bf96d5b665e18391c2f8009825ee5b3db957167214df6aea4e92f63fd573bd8e60188d056685b58062cd5e91625ddf7ac61fd7fb7ea98a6be7e93ca4c22aa33"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x7f, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x5}, @generic={0xaf, 0x3, "f8bef74466331ae30766546547fb6db1d0a4f7e8893fe0a074f560807a2268284a894c8fc1c98ee4fc62d2c4ea6ffbb1b642b60bafb03ae237f801db7bc43baebe1c9721394dfafa8cb7c989553ccce0dbedab4f49e9a47d27aeb0ef66ff50934a00b2cdbfd73d02a1cfaee2091f1f2e0779d593a4245f4a2ef9834c5d57a36ca24cfb74f031fe4d2d430e613ae2ce445ab24f3bc9369de0a99e9c959b3fefbb76532ea7999f524518e2f90bb8"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0xd5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x14}, @generic={0xd8, 0xc, "fd2e98aa17229dcda9f4a03e3b05591ee0247d03eff3d78b51dcc47df4c440ab0165223eb6a908a08d0928e9b43a722dd7897bf5e1f59e26ebb8faaa1bbdd56da985aa0a8e5239f9477ed71d3069830cc8b3344fae4f4b2fcb4e6b3e803a0e8ddf98bc9e905184a1287000a024ba6a2118e6045f0018d205f7e1e39936e8083d746cf2c00a31131c63a394db69a974864528729c26d2eb4143a5e9c584912f29d673252843de7ca019125a215828195439b41e1baecdf8594862a83d0639a3e3abec96dcf433cbcde8e95e9d71e69a520e93d5a77196"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xff, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x200}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x7, 0x0, 0x6, [@generic={0x66, 0x5, "bcb3015c1c60302d941cef8decb8762c3e084d0c2d87d712129e98cf6fd7e18e3b7b16741e28c66e782cc331f1d54383f17b81a670a9b78066e5890f7ce68ea41b842c21be865fe27110d1bccaee8120c33aabde69beef8f5be954ba60ab246c22c0660c"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0xf, 0xd, 0x4}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x4, 0x50, 0x8}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x75, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x8}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x20, 0x80, 0x1, [@generic={0x9c, 0x21, "cc03c5fe011cdcaa080e7e61cd3b0f96cfe452a73fc214b8c5adabfb3fae2b8e559cbb1f253f7d087e6a6455c7190a5c208229353b6578637720ca40d5355442a5c95e6b034f82ce99c078b5bb2ca7d5ccf63710ee299c850e785855f659f8480255c367aef7a882e82c3c81101887ef68f91dad234d02df83429c8c4472d4fa7f7f45bd990ce0f0b832d55db64869c9c0efc9b15ba32384c2f3"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x0, 0x7, 0x7, [@generic={0x5e, 0x2, "45149afb70a7b5d9c7c1ba53ce7a0f8e358bcc73dda2975928524570fef7911b84f66cab3157b3a7eac8f0436db472821ebfd5f819f4443d8ee90c310227bf1e832668ab0285dee1cd5a054d99063031cf9ebfdc72953506d0ed299b"}, @generic={0x20, 0x2, "25e55b219b62102d5a0001f5598c077a36f9b764af0947c88a53c4671ecb"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x0, 0x6, 0x3, [@generic={0x87, 0x4, "b5a5a48e70e80dca2b5ab213ba29759671b2f49ab01eae27348a8e3ea05f027b98b57d9224e46ebebdb300629b9a69f8ab09ee8ae12374a9ad570427f2214a27d552c1d889b228de77b030448c57ab53fec2bf987d33a64f652d142d294c4f20bc4ad3e406bb8d524491515be52b081503b6db630846239db749bfbcd0c515036e5b236607"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x9}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x2, 0x6, 0x7, [@generic={0x56, 0x0, "8cd36c073c4b88de0bac28d9c60b32627412204cde311e022bb8966d1d62d6e41ce7a6ba65e27f54d5a3f82211eb37f1507cbb3b1dce5258309b0b5a9100836c0050ce505af81f2ea99ec0a3e03ce95693f4beaf"}, @generic={0x1c, 0x22, "473695b9c66b08dea10fc630b697f272a22e89127cfca3989bc1"}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x3, 0xe5, 0x4, 0x40, 0xc}, 0x217, &(0x7f0000000e80)={0x5, 0xf, 0x217, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x66, 0x8, 0x7f, 0x1, 0x69}, @generic={0xfc, 0x10, 0x3, "37f21b62d46eddfbf437d75a88d75eee0874cc34df45798e4176152f5210a731df179fe0e5dee2e1065df299d7be9c4de76a7ecc7e36e4c5edf4a8dadbd1d55902dcbd9ed35a26bde3beaf2a2438ab557576e4663ea3ad34258aa159f49730b43b9e10aac3ef2d26ff96c85c12e7d4e203639957d456fb5b8bf705951447378b13537382149bc72ae0c0dfbafcf6f2f03148693a7bbceb758e56a4fdbc38e4c73b9cfd14700eec006b2be68c4c30ad0a6ffe43530199accd26dc52ed466b6256dbe681c45202251e22af476a86c98c946c5fb4e7fb1f0ddf224b71bcba3149bbdcdeeb9fc0bf5d5657c126a4dfc86a2650ff95844ad0b88b31"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x3, 0x1}, @generic={0xf0, 0x10, 0x3, "8f9a45c71cde151629a27f5ad0b160e75a7c441dda1d7675ae5f7a9fd470a6fbe1513d2ac4fa5c350a4a4d4c43c806a07893f7936142b094d3040908ef66a9d936da3aa6265603e8fc0b88aee5812af31d618e010e37f19741bc88a8a54cf54bce38d2286f8f67444a49f523b07888f3582614226522f8eb2c5472b90dd96594f09ccdd8e3f0a633e7436ced848609ce141c1199b135fd3fa4e4180aed570d8f3d959f2ccfc6c9358641ff2daeb4f33b8941c18d969923db2428c1e4c423d41832dcb61421ea980fdc09910ff74fa8dd4bbeb43e416759bf6a484ec53391e02486c106b0337f1fc3b5ca90d4ab"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x2c}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x7f, 0x3}]}, 0x6, [{0x6e, &(0x7f0000000100)=@string={0x6e, 0x3, "5369b1d00bf6256bc3d587d42a121101ae2e61d6057f54e3c5c6a3825fd8a431604898c921d428898b2ad82dd496c4c1474d049232b373f02eae6cb8461bbdfc40f4cd442e303058e1338b51d35a7d03072951895cb95154c229b60339a7b2f3a6cd2ef4e08328b4b0473ab6"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0xb9, &(0x7f00000002c0)=ANY=[@ANYBLOB="b90367387b3467d8bf9b43139d95cf1ee08bff0d52fa4a730b9453d914583bfd9f3e86a5e54cd9a49fcc25f2edec3d7fafcdce24c9d327ac2df02f78cba19b1a6b817970c21d610808e4d4b4a8eb995811b2ce1ce6162241e574618def3fabb8f74915bfa86391122bb9e70c0dbec269c26d40abf1f8e65f34745489c126f778ecdf173956176a1ae7642119f22eef17c45704555f4f0643ad2120c77cb2c1a7d6f6f744c1a898308600"/185]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x403}}]}) 1.440342462s ago: executing program 1 (id=2423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235004000000f30b9fa000000130f01d9d90f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba000000000f30660fc775022e0fba600c9864660ffc76002f3166b857000f00d0", 0x55}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.369369007s ago: executing program 4 (id=2424): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x1010081, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff00000000}, 0x80, r3}) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x404, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce6", 0x4}], 0x1}}], 0x1, 0xc0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11) (async) ioctl$TCSETA(r4, 0x8910, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000100)={{&(0x7f0000000440)={'Accelerator1\x00', {&(0x7f00000005c0)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingEnabled\x00'}, {0x3}, {&(0x7f0000000780)=@adf_hex={@format={'Dc', '3', 'RingSymTx\x00'}, {0x7}, {&(0x7f0000000380)=@adf_hex={@normal='NumberDcInstances\x00', {0x7}}}}}}}, {&(0x7f0000000040)={'Accelerator0\x00', {&(0x7f00000006c0)=@adf_dec={@normal='NumberCyInstances\x00', {0xe}, {&(0x7f00000002c0)=@adf_dec={@normal='NumberDcInstances\x00', {0x5}}}}}}}}}, 0x2}) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (async) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000180)) (async) clock_settime(0xcd1f6467c1540c16, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1129028, 0x0) 1.222285406s ago: executing program 2 (id=2425): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r0 = getpid() prlimit64(r0, 0xf, &(0x7f0000004100)={0x4, 0xaf13}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000837000/0x2000)=nil, 0x2000, 0x8, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000040c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000040)={&(0x7f0000004280)=ANY=[@ANYRES8=r3, @ANYRESDEC=r9, @ANYRES64=r2], 0xc8}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) recvmmsg(r1, &(0x7f00000042c0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000380)=""/231, 0xe7}], 0x3}, 0x7f}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/8, 0x8}], 0x1, &(0x7f00000004c0)=""/23, 0x17}, 0x80000001}, {{&(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000044c0)=""/18, 0x12}, {&(0x7f00000005c0)=""/54, 0x36}, {&(0x7f0000000600)=""/46, 0x2e}, {&(0x7f0000000640)=""/112, 0x70}], 0x4, &(0x7f0000000700)=""/233, 0xe9}, 0xfffffffb}, {{&(0x7f0000000800)=@ethernet, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000980)=""/15, 0xf}, {&(0x7f0000001a40)=""/141, 0x8d}], 0x3}, 0xffffffff}, {{&(0x7f0000001b00)=@isdn, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001b80)=""/49, 0x31}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/27, 0x1b}, {&(0x7f0000002d00)=""/124, 0x7c}], 0x5}, 0x2}, {{&(0x7f0000002e00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002e80)=""/70, 0x46}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x2, &(0x7f0000003f40)=""/181, 0xb5}, 0x7}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000004000)=""/170, 0xaa}, {&(0x7f0000004600)=""/111, 0x6f}, {&(0x7f0000004140)=""/154, 0x9a}, {&(0x7f0000004200)=""/76, 0x4c}, {&(0x7f0000000580)=""/44, 0x2c}], 0x5}, 0x2}], 0x7, 0x2, &(0x7f0000004480)) chdir(&(0x7f00000001c0)='./bus\x00') 1.201277307s ago: executing program 4 (id=2426): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a80006002000064007d57f5494007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a483455aeb4edbb57a5025ccca9e00b60db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a0000000000008de6d7b140540d4719", 0xd9}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40811) 1.196779006s ago: executing program 1 (id=2427): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x7d, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xfffffffc, 0xfffffffe, 0x3}, &(0x7f0000000240)=0x14) preadv(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/101, 0x65}], 0x1, 0xc002a0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4128, 0x0, 0x0, 0x0, 0x0}) 1.093793543s ago: executing program 1 (id=2428): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x0, 0x1, "41b5e4280156"}}) kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x3e0000}], 0x5) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00cf9aa5fba4dafbd70d", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x7) 1.049877816s ago: executing program 4 (id=2429): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r1}}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0xfd}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffff001}]}]}, 0x80}}, 0x8040) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x2c001, 0x84) getsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f00000001c0)=""/210, &(0x7f0000000100)=0xd2) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x0) r6 = socket(0x1a, 0x6, 0x7) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r7) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 911.190953ms ago: executing program 1 (id=2430): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0xbfffd000, 0x4002000000}], 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000540)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 389.729534ms ago: executing program 1 (id=2431): timer_create(0x0, &(0x7f0000000040)={0x0, 0x3e, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1600) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {r1, r2+10000000}}, 0x0) sched_rr_get_interval(0x0, 0xfffffffffffffffc) (async) sched_rr_get_interval(0x0, 0xfffffffffffffffc) r3 = socket$inet(0x2, 0x80000, 0x2000) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x4b0f, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="99b13137321d3a5fcf0e9741d0ad6080cd1665742669c6c14e0cd2e278798c00024c8afcbed42156cb26c1ccde413a1ca0ce79c97d2530cf78a9c3cd5d407b6068c8529729002b131c37ac80ab7e5ecb6fcf2b8269e623ea5687b58c122b0b1e7d987aba1123071fae8c6e43551e7d14add13e75b80a4090dd31b378910cb2", 0x7f}, {&(0x7f0000000500)="0015ea625040ef6f7a102f60a3ff1a96be32501c298445a33ea182e2f6849a89af9ecef8e84bbdb8e9ba03ab7ae011d02be50e40fbe76170d6cbf1ccad73997fd95b92ce03b6", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="5d8c439a8e", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="9d4056589a", 0x5}], 0x1}}], 0x3, 0x805) (async) sendmmsg$inet(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="99b13137321d3a5fcf0e9741d0ad6080cd1665742669c6c14e0cd2e278798c00024c8afcbed42156cb26c1ccde413a1ca0ce79c97d2530cf78a9c3cd5d407b6068c8529729002b131c37ac80ab7e5ecb6fcf2b8269e623ea5687b58c122b0b1e7d987aba1123071fae8c6e43551e7d14add13e75b80a4090dd31b378910cb2", 0x7f}, {&(0x7f0000000500)="0015ea625040ef6f7a102f60a3ff1a96be32501c298445a33ea182e2f6849a89af9ecef8e84bbdb8e9ba03ab7ae011d02be50e40fbe76170d6cbf1ccad73997fd95b92ce03b6", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="5d8c439a8e", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="9d4056589a", 0x5}], 0x1}}], 0x3, 0x805) 2.102323ms ago: executing program 33 (id=2431): timer_create(0x0, &(0x7f0000000040)={0x0, 0x3e, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1600) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {r1, r2+10000000}}, 0x0) sched_rr_get_interval(0x0, 0xfffffffffffffffc) (async) sched_rr_get_interval(0x0, 0xfffffffffffffffc) r3 = socket$inet(0x2, 0x80000, 0x2000) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x4b0f, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="99b13137321d3a5fcf0e9741d0ad6080cd1665742669c6c14e0cd2e278798c00024c8afcbed42156cb26c1ccde413a1ca0ce79c97d2530cf78a9c3cd5d407b6068c8529729002b131c37ac80ab7e5ecb6fcf2b8269e623ea5687b58c122b0b1e7d987aba1123071fae8c6e43551e7d14add13e75b80a4090dd31b378910cb2", 0x7f}, {&(0x7f0000000500)="0015ea625040ef6f7a102f60a3ff1a96be32501c298445a33ea182e2f6849a89af9ecef8e84bbdb8e9ba03ab7ae011d02be50e40fbe76170d6cbf1ccad73997fd95b92ce03b6", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="5d8c439a8e", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="9d4056589a", 0x5}], 0x1}}], 0x3, 0x805) (async) sendmmsg$inet(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="99b13137321d3a5fcf0e9741d0ad6080cd1665742669c6c14e0cd2e278798c00024c8afcbed42156cb26c1ccde413a1ca0ce79c97d2530cf78a9c3cd5d407b6068c8529729002b131c37ac80ab7e5ecb6fcf2b8269e623ea5687b58c122b0b1e7d987aba1123071fae8c6e43551e7d14add13e75b80a4090dd31b378910cb2", 0x7f}, {&(0x7f0000000500)="0015ea625040ef6f7a102f60a3ff1a96be32501c298445a33ea182e2f6849a89af9ecef8e84bbdb8e9ba03ab7ae011d02be50e40fbe76170d6cbf1ccad73997fd95b92ce03b6", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="5d8c439a8e", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="9d4056589a", 0x5}], 0x1}}], 0x3, 0x805) 1.304459ms ago: executing program 0 (id=2433): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x1c40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c20, 0x3, 0x0, 0x1, [{0x448, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7d27}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x294, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x6ba}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x158, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x148, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BITWISE_DATA={0x12c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "7ab892e4f95623e681167bca8fe558103d174d1dfc78f39ee996b7238879c499dd119c94f3a6d4ac8f3cce5584c255c596b08179a840c696aa81ddb671ce9b076375f2b916f68cfe7985126e568ddc747648902f13c40d2201d099d1bcf3e2746dbe1c48e8ff1c15ef8a5878fc078b7b5a319ae8b533a21c26d754a4de07da2fbc47373a6f4114ccbdcd1fc7ab8d95cd3bd182a7800f6ac667c18a6140ab64bfe3"}, @NFTA_DATA_VALUE={0x7d, 0x1, "796d2df78ab8f2b8254908afd6670f7c013738e1558fe3de3a6f74a541fadc763dc86129e8c170bc25f3df66d745c433403d9fba8e19446b4f34f0c0e482e6537681f1613087c5d11077af10594abd2cb3c60d683ea426a3fe8c1afce1ac5abda812cf6fc611391987147eade932db141ddb1b44b99256c9bc"}]}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_OP={0x8}]}}}, {0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xf}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xe}]}}}, {0x5c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3e}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2b}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x174, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x71, 0x1, "2dccc97f16388067870fc96509789f91dd8c4e64b4a39fecf9a66cbd97f7acb196977276a7d3e0dd8696a358322152bcd0ee6e4d8fc5b6ad923c080289ea12265e238be53b9656492b3745ad38367101cdb003aec1df9b6715db24edf31e5c936f57386ef35df313ff97f95314"}, @NFTA_DATA_VALUE={0xc, 0x1, "c948b410eba18430"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x177b}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2f, 0x1, "f039bd408ac48bcbca2951da9a081c379b194caaf3ad7f18e70046043d43f6f4ce80682edbab38a19a36fb"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "58fe82891994baedfdb7df4408377a9808281ff53d4fe2823ed1a23d811cda1cb03c96c3d9540b8621ad0a3c815c88edf054becb11cc10324160d3ae76f878e8a325232c66096c99d65d3ec4d3902a6c2e0ca320807710f8a3d6a50dd4657bae31946937a91933ce0158b759a9a4ab33731bfcc3ed299cd2a62c393d06384d8718bf0f406a2dc75ecf3ce544797483cd15508780c536c0d70c2e3dacbb0b94521d050df96d9271657bce0cf7345af483d2d799486d29e4f29e9ba0f9947559ff3d050fdfc3c2dc29e2e26b9f3aa3de262ac8ef5257d0ad3ebdf5d53e160a4969240339ace871cb"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "30670e6796d52f33d90068c873f29121a9e588358ee37ef071f930ec759773935a37772a893769f7976d84030590147bd9a4c76c2e007ad4c77cfe6faa55b259f3b774b7cd89bba0576c8cf06878481d85c1a194550b57fb5e9120c3fc80986d5692d8298658b5dd156c693487fc992806817e85d4a1cc78f4afe3031fb11c90fc1bdcd06f789daee816223e31f5df3ad77b01865e6af998005f094680f7074c"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "ef4a68af3f2491f442b86522500307b98cec122d29392b705489ba75e1d2b21261cc0692e38e73ecc0b26d62722f20f6a63539a2e143c370743c9545835ea5fefa2d27f41890142cbf773b1743a46eab055c65569762b5aba0690d288ca3eaae7cc01863b58b4a1927094efd145ef323fc5a082988d7606bdbc2a91de3bd7d5a340a48577bfdee4eaee63bbbb45ee2"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0x32, 0x6, 0x1, 0x0, "ce04ef89415f26cc7d7764bd5fcc5c79f9e333717356b3e84e737a6f028f1dc4666876df56544611acd71698b760"}, @NFTA_SET_ELEM_USERDATA={0x101, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x1390, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xb0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "174e0b4511f5f9b4c485b3bf6c6cc32550ec87f49969d790909e710d9cd29c74ead92fbaa5d0a11276afe912a0f6af8a7f69dba12a773461e1861352cfaac4010bd4820036afc30a814a5b2d40221f5641f676d466dac0f6c5cf1631c3a492e77a00433f2dc2463e3f599235cf6fc6f5a4cd34c83974f3491c34a508604f26a5340ecc3c788bced696a10d04efbf8c27fec5dddc2780"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_DATA={0x100, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x65, 0x1, "3905ebc9308401b67c78280f664a9a7f15bdc1a3ccdf50a2282d1f8612311482bef25b34557bde0ea3d946a308dfda4334d9e856550830f4e4fffdd9d4e96f2e48eb1f2d593b99530e6dd46f3bea4e33c36fa23c8dcf68575e20d41588e5b73b00"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x11c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "4c4631198c29fab342d285d591b5a42a6fb80ce1b442"}, @NFTA_DATA_VALUE={0x89, 0x1, "3f8b626717e91e4be32a0d9822889a982272d644299396e2cfae08c5ec0b6780d28a7563f02713e5bf1f8d33bf823698491759130d7637c97232ffecc29f9f93f5c7c3740764bf1e7270d79ea8da20879aa8f5aee3b37b1f25c9dd2bbe4a20a7b508f9e5a3e4ed51f3047cf0b91c0c9a1391c79eeeda47636ae241f42fdaa051d7965cfbc0"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "42d87eddb7479db840a7e867578f7b3c0b510a0ffce050fe9e192542e12fb1a7ffc1af85418e555b7e0ee1a805badf2dac1ad06927758910c52f24ea739935adb0afe80b6da336d47dbae594c2b63e8f5359b0668624f15f313a2f77c604b6ba95a8ad8b2f4546d1d9277e71456e922a729383cd34db078749529333093cd46414375da137d84972c576507b78d38011f237de6a869dcc168386af598e0677e165440fcacd25f4d71be5700ac83b44ef86c42265a79058346bf98a2268"}, @NFTA_DATA_VALUE={0x1004, 0x1, "e5a55d2e5970cad8c7b91a7bda4e6e973fa685ee0a842a454222051c24638b905517b7b63672555857e2cb173303ca4cd9740b037a83f7e4346a0e39a75da450ed3cb874c50256a89242ca4bfeb6ba17611fe1f37941c02945db3c0917c281f34583612094fe849c4f6994bd8b9facb79c8e36100661dd19fff6bea2c149b619576b8ce4c239cfb251d9b89362f2cbf41c45778c0f386538f65cf383219c5ab1134cd5b6d98c75aaa65ad3fbef4f29afa552562429c6f07e82539d2fdf581d22393db7d4cf0bcd71a6ad3a8de322a6b1cd4c4e9d346d04e88f2efda081d245216856fb902f648afee4e22a1e64490438c6c21607107ec466203bde5eec1a597c703de903c356d98b24f080c8aa235f107346ff47aef1d0c658c0cf5e01f324affeb90df6c6cdeb893fa59852ba8de85100a00629bebae7f4c73e538723d6368f9bc173173ee00814a3b646ef3864a07dcecbf4ff117e42fd91f9995ac73bc20b22711bc24478e0d94e87bd6bbbbec243a3cac5ef75ef7c937ef86e4e9cb94bc78705b5ab9917260c3dea6a57d76ff9650262d9301b96b78998e59c6ed1f24525a482cb9b7e6e699f686d22f73adc31025e9f7c1bfdab669d2817a0418e1ac2bd327386322bb1104212b55cda04436c5480db748f1e42d044c222260d0ef414de8f37d3ec6a4bf18a97e9bc0418633889313324218507806f6eefaa656253cfc95a2b6aa65f45eabef042a4ffb29d219746826d553d3f34c351aa6fe351e87fd4c069a04bc4fdd90916158e2684fe929d80d09e51da0eaad4ceb925f405ff4f2f774d947853104a5c333650267d346532846faa289ff26e9c98abd2a1e5f5e386232cf94d6fdc560ab7ab7574a835d201b2a85f25466fbd23fc54a4e2ce464e185a5b81fc62cb48d375490fa2516706253b9308302f90fc5b774c2412b57cbfe7a2bad79f32723f49cb63319a258c0aa744867645dd3e97ae7ba4763ababccf7786bfbf101a8147b606bcd52be13ad15f4b68848d9309ca1039d0581e23ba5dc4c00dbf37c9edf4221d7ab588ffdae8302306c4e224d083e7e78b6ddea073144cd606e9fdaefbb126ca42ea9ab58c02751cb050946d4fc46d118e728457cfc05ad5fd573d600ab0db708b385205f7994d200f07d5b9c9e5693714b60ff9ca1ffbf37b61ceb6640d8eb6f8d8893d0a3715f28d55a4f717776a9811943c40d6b1d66f6e726e7f787e928d18747cc4450557cc2273a83f3fa3afca86097767cde4d1bbbf9e25f332f9fcc894a65e6fb7984eb861843fb74abf0f11c9d0327987f6a1e7afaa471138a59f11bd3c5d7655fa8eb297bae81d7570d04365bdf8d5e7982c185f49bbbdbe18e636391031f87cff73424caf35009614c6ae750b72e52d02596401141da4ba1608faa4282f8d1d1f5f279a3ddbcd80768d08b9e8867a45ff8db2efa242518e70ec540a83a8bad27573eb5222e6a91498da3e6a8378b5784a35e9a2e27c457d92d6236d6976c8c4244035498d7580314e73fd9799464719d62984f3fb7220aa537d53f418cf723154512e189de7d636d47b7e615e3bdd0cd492415c34b4e9e2d568ac3d1046da626ef759ddc3afadb43bcf3dfdfcc5644419c6c16c6e38a51948bac458ad8e75f96b64a25a1179349d06c7b6ee88ab5dbee60f9c4cd9d84f01a6f34661f04e67deba7b1192d8493a7fd53e4be45f21525adb1dbaabe529c57480277bb9d9662da8e94ad47785902a7ae1143ada1bdf78479459cec3481100486a8a0fbd175cd9eb523eec6d3144aea0158d551eb6deac4d04c219fe39704d0dca41f039540e1384ec441428347f81e83deb91cb443d648a4afb33aa623c68f1ca9f97139665b387d7959d6d2f7685108dcba77b8b8c302588e54df581566274536cedb21f99212f4afa2f49d62042a4913b08c0d3b942877d2a5817164be3885d9fbd69fc14c7df82f04391f0a104ad4fe6f61fc268169abc43f5b01b24ba5e8fac5b755001bdfe923ad5c84227018a8280ce7b68a65895f55ee00428c7de412cbdc08e77c5b695d4d89df2f1d1efc76b3f04da9e302418b529e9830057c2b8126257bf60246658b1a73f2e53246968234bae85304034127aa40a739d79c22377aaa9e0388b9610964dba5302ff5bc0577c53e0f091e4d08d3aed97b4427c5440274b917b2d33a7dcb659d4e757e6bddd0ea7ae3229f5abb104a45ee4f23e99cf7324a1fd3db964fd8c47e2df62d27db77914a2867b92b6e03b97b28ad4319b188870d0ab19aa5085b07f8bd04ed7d9015c26d6399ade21bdfce9d28c27aeb290e6458b698d8cb8fa687c7afebf5f7b629b0a41e1b18c11156b93260d361f9784725460958a2d3adbf28d82269b5509d18c43f4bc971b9327162ed13b62d15507d575e74bdbd7ace623777decfffeb2bcab1e1ec954d28a281535d2a6dab3c52f187d1521789392100e07ad33ae0bfe884f5f5384c569801e7214ae66f93eb222e8a35b13a63a9f761cff1becd117c8eb2d98318c964a7d20339a942b520002b39dde432e586f9e4b9eccc5e1eec251928b0caab2ce870ec496623efeaccc66e459c780145fd2dff5857c2aee0e6d1fae0a4e408075854ebdcb4f90f4e0ab3d08c6362cff5f67e5f4cda9c9f6397547296ea726ae5866af129faeb9fb1d5ca21bf2967ae44c1ecb65d2251e520d10eb9e21b189c9cd17d6b32d12dfb667b02a1bfaafa1a7953863a7b3d8c39d9346ad632ceedfedc5b0b61f28e80ed98810a975bf3e638eddc7658e576005f27d066390109649a18d6254d63e3b8dc8cf875c527a141b329134547a6ca72674ab8802ac26373f7e371350d505bf23d1ed0d9babe3c5b05442c4fbbbf43b56d56883c033f1640c026c3b30fe572028e3ca124386abbc0ff7422c1f55bd268b661b1a6c42b8787d74527024c83421cc1ca3a7d4b4e94a6dce192638b604c4b6636715efb193def8c149714c84fff919a3b032e4c957ea86cc17851b9b781e528f50a002b95ca727bde430f41fe1645d0c738db56e74ff2353e1ff42666c739610e1db39b0c2a0c8a3daf7cfd00930091190a6df5fc3c2aec683321462fb10f24289e468a3309c351d394b189f3e656397ce2f5f36d3fc99f9971535669fb4b95db16212059b9578fd6cfe85627729ec2ca1309649d69cffd62d455dbd53b93a4d284be9f85dbcf5ccbea349c00d92b55c93420d750087cdcaab72ee436288e5be26f6df27efd8814770d5ec12e9c676b9a7be8b96a9d8afe7d918225375d50c27e17dcfeea5c98664cacc54348b90cc6619e04985bfcd99f608e58133d0e1547b28a12f24143ccf33389944aacbb22bafa11a37d855eef29efce8e868831be6eaba791d126289771d1694a64f360d49a48f5254a0989fd5802d837b93eca7464ccec41f407b1fb2f1daf0c3d9c8ab7143dd48c0937842b52775b9ed554c331e187eb055e9ad0343234bd1f0dfb28c04d3edc6ed2fda5c9c95841f3fe648085c9d0c1558ceddf9abf15f4728d41558b0d7b9537d049c167ac41c37645788967cf93d8dcfb8fb5f65cded03f98bd0326fa1fe5266e3a7fe638b04224bfc99d02f48a341a53963e074927a6192172b71626ecfcf6c9e6652665f0ed6634372efb8f4c00b4f9c2cf2793c4a2eef618f039edcae3ed04a02c0fc18981f47c1dbb10478ef1c8c70bcff4cd10958bb86f2f3b34288c44c13eac49111f7335539e622889433624e293c61f15ed92ce64089abfeb1fcfeffc8cf7281ba4935ea6475c27364befc950c18151428f0514bb0b4b8c4e9f3a378098ae8edcc1713a7c89e7e0ed958ccf953717004fe99c23eed4f66d7ce4a6379acd434d05aa9676d68fe041b5474f08049d6021980c6793f214ba614cf2ac184cccd004d8df1a2ad9547ab6992b2f3043fa564ba55bbeb086d8792a70ca01dec927aa926e8ff0265f59bc275f88666f69680dd1c9dd61dc18a62fc67fe7702777936fdd90ca8afc831cbe4ce13d0e1d50834de50d35d9338db6d5e1b5925575425382bc9a682a8eb421ac950c62798362d06f88cbbbbe2df5453900d97bbfc918df88ac9f743f79b1e0fd7b2d93867ec3ceb6c0b02e7e3453fff5cdb3052bef9f801ec49ca76fc7f5b1596d2e02fcceda49256d64b869e6a75f442288d45088155dab20b1c0d71851c920934ed8b23c88c455a1b25655cbe727bc92eb0f390a54e42630f00e7822ac108355091486775db364c52e6ee50b7a37648a9aba7c89018e8ab824603410c2bc991f2e2944a02ffeb80f2287eb47c7640b8ef46da72867c825b8c300ea94154a1a6aa26bcf5079a96bdcd71baefe21881a09662bf7395d0f31c73a0bd16030992be9a7413d0d05572e2ef3953d184dd8a7cbb88674de6721eaea36c0bc2ebc172e95858e6f40f50859ef9b6aa7c33bc75896a4e198e7cde2c6a8391dd06de792583d9b0d96136f56d6c1c4359d60ec68f714681a9a506528e52cb1ad84b27b82eb7519c3ba15b25eb7b2994f9665d0f5fb372811eff16f0648f6e6f6acd5f4626f8bb18a9d2793e5426831475c9f87710454bbcb1d836b250d76b1359ba95a494035d611342bae2af33c1e92ccdc3b46c06e74d8f4730454eb7069c1cd9b42d65eaad68a73dd5a82efdd372984ff2c1e48d7ae6860c548ce7d94c0a3b257d1af54e914813d3c5f8ed865a26f24d9690ba7875f58936a2dbcf661777d92858e01d9df50a5240bc6bd20c9d391afc384eafa68dc536979c9e56c06fe0dc0066cb89f30e6e7b6b8d8bd6d8035f58132f735319f6f876d38689f9ab87f8b90f72cf7eea82f0b40f24fcbb48085aae9f9041758d8251b350da6cf34678c5f32107daab5e8416627fae3a31df2529ae112695174a1176f390c69451b422ab3ce5a877d8af7a9a19542d1ce8f14a29514a22b3d7349077143b5f71c81d1ec70c10e7074fc21f84249d14221f5cd952f69ff994017034b0200c3abccef9fe38e5ac29d84a3fe716197decc29b24038d3b864ea8708e77f2712992af5a391ae1e41d6b84ca187b05094e9999e702ffb267f997f8e423ff85d9b821085cfc8741a91c0e9ec60b0abd5cff12d828214d06c790ccce28c7489cd2e258a5165453a07b262701e0a28821103897881f48e8ed955877a7847839e8e002e80fe7630812089a67d119fe3fb3ee7d6e1c47c71d42e79b28f36f144d416349df17192fe9c570b2a823ff1001952184a64d4ee27fcb9777ff915667e6ec6449f1cde8d44b31eb99d2987e6fa3f86a02e04b324a6bcc286fa11e0042fd9328953359876c82283030c34737b0e569d84b31ccdee561789d1ad777799544c82a2af0a375ea76b19d1e57284c520c6f517b312537f78df79e42bb888cbdc005152f6d515209936e5a9acd75a12ba621c5eb67e6d6dd4e8fabdd957cca16d52cde4001ea715215596dfc9d2cfc428512c8939bd13b1ee5b40e6cd17ba5ad599a058c4460902ebd69df7bbd31b9d52ff0d9a88b87a2eac7ebf06ee80c8f5a890e2e64c57e626c53231212726cf516c04dbca6fad5964189fb5f9e2a224a8ef3c8ea91583d835f3ef66a3f7b4591651f9f811fb5b224b66903c2a90158c98dd5382dbe23fc0dbec35bccfe43888464d56257f1d5c7a6ec33a4441b0c26b2756819cbf18cdaf7ba4224dc9a3f20098333b2a34c91efa28fc731c7c17139d4b90199bab3b8241356ab559aa4f482d5feaca747d86422829b1424c2c4b36e725ec80000181083da5aa3c9dd47b994370657d95a434c56429c33e5b87d4ea4aa"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x1c88}, 0x1, 0x0, 0x0, 0xc800}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000099c0)={{0x12, 0x1, 0x250, 0x7d, 0xe7, 0xf8, 0x40, 0x1410, 0xa005, 0x6fb0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x7, 0xc, 0x70, 0x4, [{{0x9, 0x4, 0x3, 0xee, 0x0, 0x2, 0x11, 0x34, 0x4}}, {{0x9, 0x4, 0xe8, 0x40, 0x0, 0xff, 0xff, 0xff, 0xfa}}]}}]}}, &(0x7f000000a380)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) 0s ago: executing program 2 (id=2434): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x3, 0x4c8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) munlock(&(0x7f0000002000/0x3000)=nil, 0x3000) sendfile(r0, r1, 0x0, 0xaa04) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff}}}}}]}}]}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0xb, 0x8, {0x8, 0x8, "534f023677a4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 21] overlayfs: missing 'lowerdir' [ 431.085767][ T5181] Bluetooth: hci5: command tx timeout [ 431.145076][T12928] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2041'. [ 431.204328][T12928] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2041'. [ 431.256331][T12870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.276140][T12870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.306183][T12870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.326628][T12870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.423328][ T8189] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 431.520941][T12943] netlink: 'syz.2.2044': attribute type 19 has an invalid length. [ 431.546782][T12870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.579867][T12870] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.598403][ T8189] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 431.602069][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.615389][ T6335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.628618][ T8189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.637143][ T8189] usb 5-1: Product: syz [ 431.641454][ T8189] usb 5-1: Manufacturer: syz [ 431.652656][ T8189] usb 5-1: SerialNumber: syz [ 431.669854][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.671282][ T8189] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 431.677119][ T6335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.719079][ T8191] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 431.792323][T12946] overlayfs: failed to clone upperpath [ 432.141481][T12930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.168042][T12870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.177146][T12930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.205298][T12930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.231345][T12930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.334270][ T8189] usb 5-1: USB disconnect, device number 28 [ 432.391401][T12870] veth0_vlan: entered promiscuous mode [ 432.410329][T12870] veth1_vlan: entered promiscuous mode [ 432.465355][T12870] veth0_macvtap: entered promiscuous mode [ 432.486471][T12870] veth1_macvtap: entered promiscuous mode [ 432.528761][T12870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.560260][T12870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.680124][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.705162][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.717026][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.775164][T12962] overlayfs: missing 'lowerdir' [ 432.836484][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.164311][ T5181] Bluetooth: hci5: command tx timeout [ 433.213647][ T8191] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 433.220774][ T8191] ath9k_htc: Failed to initialize the device [ 433.229775][ T8189] usb 5-1: ath9k_htc: USB layer deinitialized [ 433.441033][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.462585][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.541173][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.571370][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.694098][ T8189] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 433.705714][T12977] netlink: 'syz.0.2021': attribute type 38 has an invalid length. [ 433.867023][ T8189] usb 5-1: unable to get BOS descriptor or descriptor too short [ 433.887209][ T8189] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 433.899439][ T8189] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 433.924607][ T8189] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.947554][ T8189] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 433.972685][ T8189] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.982217][ T8189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.003231][ T8189] usb 5-1: Product: syz [ 434.007525][ T8189] usb 5-1: Manufacturer: syz [ 434.012202][ T8189] usb 5-1: SerialNumber: syz [ 434.052672][ T5943] usb 2-1: USB disconnect, device number 4 [ 434.246870][T12965] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2051'. [ 434.301624][ T8189] usb 5-1: 0:2 : does not exist [ 434.344178][ T8189] usb 5-1: USB disconnect, device number 29 [ 434.422765][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.627455][T12872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.643611][T12872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.652385][T12872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.662447][T12872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.674413][T12872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 434.853855][ T8197] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 435.023189][ T8197] usb 1-1: Using ep0 maxpacket: 16 [ 435.041764][ T8197] usb 1-1: config 0 interface 0 has no altsetting 0 [ 435.078644][ T8197] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 435.081000][T12987] chnl_net:caif_netlink_parms(): no params data found [ 435.100481][ T8197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.188949][T12997] overlayfs: missing 'workdir' [ 435.274038][ T5181] Bluetooth: hci5: command tx timeout [ 435.790485][ T9786] block nbd4: Possible stuck request ffff88802595e000: control (read@0,1024B). Runtime 120 seconds [ 435.805775][ T9786] block nbd4: Possible stuck request ffff88802595e1c0: control (read@1024,1024B). Runtime 120 seconds [ 435.819363][ T9786] block nbd4: Possible stuck request ffff88802595e380: control (read@2048,1024B). Runtime 120 seconds [ 435.831060][ T9786] block nbd4: Possible stuck request ffff88802595e540: control (read@3072,1024B). Runtime 120 seconds [ 435.854188][ T8197] usb 1-1: config 0 descriptor?? [ 435.964246][T12987] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.972533][T12987] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.981284][T12987] bridge_slave_0: entered allmulticast mode [ 435.991075][T12987] bridge_slave_0: entered promiscuous mode [ 436.003352][T12987] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.010636][T12987] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.018486][T12987] bridge_slave_1: entered allmulticast mode [ 436.026718][T12987] bridge_slave_1: entered promiscuous mode [ 436.076561][T12987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.090901][T12987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.147742][T12987] team0: Port device team_slave_0 added [ 436.157619][T12987] team0: Port device team_slave_1 added [ 436.163483][ T8203] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 436.226092][T12987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.234210][T12987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.262830][T12987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.283520][T12987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.295821][ T8197] hid_parser_main: 72 callbacks suppressed [ 436.295848][ T8197] waltop 0003:172F:0037.0010: unknown main item tag 0x0 [ 436.311085][T12987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.337855][ T8197] waltop 0003:172F:0037.0010: unknown main item tag 0x0 [ 436.345630][ T8197] waltop 0003:172F:0037.0010: item fetching failed at offset 4/5 [ 436.356955][ T8203] usb 5-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 436.373956][ T8197] waltop 0003:172F:0037.0010: probe with driver waltop failed with error -22 [ 436.384279][T12987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.403253][ T8203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 224, changing to 7 [ 436.443519][ T8203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 34003, setting to 1024 [ 436.473233][ T8203] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.499827][ T981] usb 1-1: USB disconnect, device number 16 [ 436.526313][ T8203] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 436.539872][ T8203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.574665][ T8203] usb 5-1: Product: syz [ 436.583059][ T8203] usb 5-1: Manufacturer: syz [ 436.587748][ T8203] usb 5-1: SerialNumber: syz [ 436.602638][ T8203] usb 5-1: config 0 descriptor?? [ 436.617640][ T8203] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 436.618806][T12987] hsr_slave_0: entered promiscuous mode [ 436.640365][T12987] hsr_slave_1: entered promiscuous mode [ 436.656877][T12987] debugfs: 'hsr0' already exists in 'hsr' [ 436.662760][T12987] Cannot create hsr debugfs directory [ 436.763467][ T5181] Bluetooth: hci6: command tx timeout [ 436.823669][ T8203] usb 5-1: USB disconnect, device number 30 [ 436.879951][T12987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.969543][T12987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.081351][T12987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.115385][T13018] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 437.133364][T13018] batman_adv: batadv0: Adding interface: netdevsim0 [ 437.140331][T13018] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.166509][T13018] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 437.225284][T12987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.412177][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 437.494335][ T8189] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 437.588018][T12987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.609783][T12987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.632676][T12987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.651919][T13034] netlink: 'syz.2.2067': attribute type 1 has an invalid length. [ 437.657562][T12987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.660669][T13034] netlink: 'syz.2.2067': attribute type 1 has an invalid length. [ 437.675548][ T8189] usb 1-1: Using ep0 maxpacket: 8 [ 437.682562][ T8189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 437.694884][ T8189] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.709362][ T8189] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 437.729854][ T8189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.747927][ T8189] usb 1-1: config 0 descriptor?? [ 437.892691][T12987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.943400][T12987] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.976263][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.983649][ T6335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.008249][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.015743][ T6335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.019314][ T8203] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 438.155636][T13045] overlayfs: missing 'workdir' [ 438.272901][ T8203] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 438.329998][ T8203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.409879][ T8203] usb 5-1: Product: syz [ 438.440892][ T8203] usb 5-1: Manufacturer: syz [ 438.458220][T13020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.496691][T13020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.525248][ T8203] usb 5-1: SerialNumber: syz [ 438.690833][ T8189] monterey 0003:0566:3004.0011: report_id 1108778202 is invalid [ 438.706122][ T8189] monterey 0003:0566:3004.0011: item 0 4 1 8 parsing failed [ 438.714392][ T8189] monterey 0003:0566:3004.0011: probe with driver monterey failed with error -22 [ 438.775195][ T5943] usb 1-1: USB disconnect, device number 17 [ 438.844000][ T5181] Bluetooth: hci6: command tx timeout [ 438.848024][ T8203] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 438.872166][ T8203] usb 5-1: setting power ON [ 438.894236][ T8203] dvb-usb: bulk message failed: -22 (2/0) [ 438.931714][ T8203] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 438.973488][ T8203] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 438.994600][ T8203] dvb_usb_cxusb 5-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 439.062433][ T5943] usb 5-1: USB disconnect, device number 31 [ 439.136105][T13060] netlink: 'syz.2.2071': attribute type 4 has an invalid length. [ 439.208999][T12987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.289511][T12987] veth0_vlan: entered promiscuous mode [ 439.311203][T12987] veth1_vlan: entered promiscuous mode [ 439.380070][T12987] veth0_macvtap: entered promiscuous mode [ 439.407375][T12987] veth1_macvtap: entered promiscuous mode [ 439.437675][T12987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.462463][T12987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.492725][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.527347][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.538800][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.550833][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.841571][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.908733][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.986362][T13081] overlayfs: missing 'workdir' [ 440.717216][ T4195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.725284][ T4195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.924217][ T5181] Bluetooth: hci6: command tx timeout [ 441.163142][ T5943] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 441.201619][T13102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2084'. [ 441.212385][T13102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.253101][ T981] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 441.333498][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 441.343913][ T5943] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 441.355945][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.364108][ T5943] usb 5-1: Product: syz [ 441.368340][ T5943] usb 5-1: Manufacturer: syz [ 441.372941][ T5943] usb 5-1: SerialNumber: syz [ 441.380672][ T5943] usb 5-1: config 0 descriptor?? [ 441.416004][ T981] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 441.424745][ T981] usb 2-1: config 0 has no interface number 0 [ 441.435076][ T981] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 441.445523][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.453763][ T981] usb 2-1: Product: syz [ 441.458086][ T981] usb 2-1: Manufacturer: syz [ 441.462725][ T981] usb 2-1: SerialNumber: syz [ 441.471312][ T981] usb 2-1: config 0 descriptor?? [ 441.543347][ T8203] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 441.708112][ T8203] usb 1-1: Using ep0 maxpacket: 16 [ 441.729895][ T8203] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 441.749457][ T8203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.760633][ T8203] usb 1-1: Product: syz [ 441.780627][ T5943] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 441.793189][ T5943] usb 5-1: USB disconnect, device number 32 [ 441.810058][ T8203] usb 1-1: Manufacturer: syz [ 441.828106][ T8203] usb 1-1: SerialNumber: syz [ 441.906720][T13113] overlayfs: failed to clone upperpath [ 442.466374][ T981] usb 2-1: Firmware version (0.0) predates our first public release. [ 442.476972][ T8203] usb 1-1: config 0 descriptor?? [ 442.482235][ T981] usb 2-1: Please update to version 0.2 or newer [ 442.521810][ T981] usb 2-1: Firmware: build [ 442.699337][ T8203] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 442.753396][ T981] usb 2-1: USB disconnect, device number 5 [ 442.838554][T13126] IPv6: syztnl0: Disabled Multicast RS [ 442.899817][ T8203] usb 1-1: USB disconnect, device number 18 [ 443.003888][ T5181] Bluetooth: hci6: command tx timeout [ 443.355314][T13134] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 443.363727][T13134] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2092'. [ 443.405694][ T9786] block nbd5: Possible stuck request ffff888025987000: control (read@0,1024B). Runtime 120 seconds [ 443.416749][ T9786] block nbd5: Possible stuck request ffff8880259871c0: control (read@1024,1024B). Runtime 120 seconds [ 443.428319][ T9786] block nbd5: Possible stuck request ffff888025987380: control (read@2048,1024B). Runtime 120 seconds [ 443.439775][ T9786] block nbd5: Possible stuck request ffff888025987540: control (read@3072,1024B). Runtime 120 seconds [ 443.747128][T13147] 9pnet_fd: Insufficient options for proto=fd [ 443.903177][ T8191] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 444.074356][ T8203] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 444.625777][ T8191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.645690][ T8191] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 444.665695][ T8191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.696768][ T8191] usb 1-1: config 0 descriptor?? [ 444.817647][ T8203] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 444.825936][ T8203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 444.840334][ T8203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 444.857911][ T8203] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.872779][ T8203] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.884663][ T8203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.902890][ T8203] usb 2-1: config 0 descriptor?? [ 444.923543][T13145] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 444.963683][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2104'. [ 444.993223][ T8202] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 445.147776][ T8191] nintendo 0003:057E:200E.0012: unknown main item tag 0x0 [ 445.155675][ T8202] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 445.159476][ T8191] nintendo 0003:057E:200E.0012: unknown main item tag 0x0 [ 445.170678][ T8202] usb 5-1: config 0 has no interface number 0 [ 445.171690][ T8191] nintendo 0003:057E:200E.0012: unknown main item tag 0x0 [ 445.179277][ T8202] usb 5-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.197943][ T8191] nintendo 0003:057E:200E.0012: unknown main item tag 0x0 [ 445.199361][ T8202] usb 5-1: config 0 interface 107 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 445.221717][ T8202] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 445.229122][ T8191] nintendo 0003:057E:200E.0012: unknown main item tag 0x0 [ 445.233709][ T8202] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.251190][ T8202] usb 5-1: config 0 interface 107 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 445.270208][ T8191] nintendo 0003:057E:200E.0012: unknown main item tag 0x0 [ 445.272148][ T8202] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a [ 445.287273][ T8202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.295499][ T8202] usb 5-1: Product: syz [ 445.295970][ T8191] nintendo 0003:057E:200E.0012: unknown main item tag 0x0 [ 445.299816][ T8202] usb 5-1: Manufacturer: syz [ 445.299838][ T8202] usb 5-1: SerialNumber: syz [ 445.332509][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.339397][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.340170][ T8191] nintendo 0003:057E:200E.0012: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 445.349469][ T8202] usb 5-1: config 0 descriptor?? [ 445.365516][T13176] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2107'. [ 445.375830][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 445.386642][ T8203] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 445.394471][T13141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.399678][T13177] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 445.412515][T13158] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 445.421418][T13141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.444701][ T8191] nintendo 0003:057E:200E.0012: Failed charging grip handshake [ 445.456403][ T8202] kvaser_usb 5-1:0.107: error -EMSGSIZE: Cannot get software info [ 445.471437][ T8203] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 445.473322][ T8191] nintendo 0003:057E:200E.0012: Failed to initialize controller; ret=-110 [ 445.489220][ T8202] kvaser_usb 5-1:0.107: probe with driver kvaser_usb failed with error -90 [ 445.568126][ T8191] nintendo 0003:057E:200E.0012: probe - fail = -110 [ 445.603413][ T8191] nintendo 0003:057E:200E.0012: probe with driver nintendo failed with error -110 [ 445.650161][ T8191] usb 1-1: USB disconnect, device number 19 [ 445.700629][ T8202] usb 2-1: USB disconnect, device number 6 [ 445.704114][ T5943] usb 5-1: USB disconnect, device number 33 [ 446.029796][T13182] blk_print_req_error: 54 callbacks suppressed [ 446.029820][T13182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.050210][T13182] buffer_io_error: 54 callbacks suppressed [ 446.050232][T13182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 446.068252][T13182] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.079614][T13182] Buffer I/O error on dev nbd0, logical block 1, async page read [ 446.088093][T13182] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.100898][T13182] Buffer I/O error on dev nbd0, logical block 2, async page read [ 446.108601][T13183] kvm: kvm [13181]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xfffffffffffffffd [ 446.112880][T13182] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.126643][T13183] /dev/kvm: Can't lookup blockdev [ 446.137178][T13182] Buffer I/O error on dev nbd0, logical block 3, async page read [ 446.146349][T13182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.155616][T13182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 446.164233][T13182] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.173486][T13182] Buffer I/O error on dev nbd0, logical block 1, async page read [ 446.181527][T13182] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.191272][T13182] Buffer I/O error on dev nbd0, logical block 2, async page read [ 446.199560][T13182] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.209901][T13182] Buffer I/O error on dev nbd0, logical block 3, async page read [ 446.219008][T13182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.253100][T13182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 446.261685][T13182] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.452008][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 446.475602][T13182] Buffer I/O error on dev nbd0, logical block 1, async page read [ 446.496042][T13182] ldm_validate_partition_table(): Disk read failed. [ 446.513975][T13182] Dev nbd0: unable to read RDB block 0 [ 446.525810][T13182] nbd0: unable to read partition table [ 446.646019][T13197] overlayfs: failed to clone upperpath [ 447.606159][T13217] : renamed from wg2 (while UP) [ 447.646379][ T8191] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 447.794270][ T8191] usb 2-1: device descriptor read/64, error -71 [ 447.826797][T13226] netlink: 'syz.4.2120': attribute type 58 has an invalid length. [ 447.913759][ T5943] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 448.038820][ T8191] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 448.074463][ T5943] usb 1-1: Invalid ep0 maxpacket: 64 [ 448.141820][T13238] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.183136][ T8191] usb 2-1: device descriptor read/64, error -71 [ 448.223129][ T5943] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 448.371291][T13242] overlayfs: failed to clone upperpath [ 448.857703][ T8191] usb usb2-port1: attempt power cycle [ 448.943383][ T5943] usb 1-1: Invalid ep0 maxpacket: 64 [ 448.970508][ T5943] usb usb1-port1: attempt power cycle [ 449.213126][ T8191] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 449.289565][ T8191] usb 2-1: device descriptor read/8, error -71 [ 449.353088][ T5943] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 449.384023][ T5943] usb 1-1: Invalid ep0 maxpacket: 64 [ 449.449415][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.469134][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.478836][T13265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.488774][T13265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.553148][ T8191] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 449.573184][ T5943] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 449.584344][ T8191] usb 2-1: device descriptor read/8, error -71 [ 449.594121][ T5943] usb 1-1: Invalid ep0 maxpacket: 64 [ 449.612085][ T5943] usb usb1-port1: unable to enumerate USB device [ 449.675369][ T8203] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 449.693691][ T8191] usb usb2-port1: unable to enumerate USB device [ 449.843280][ T8203] usb 5-1: Using ep0 maxpacket: 32 [ 449.860025][ T8203] usb 5-1: config 3 has an invalid interface number: 136 but max is 0 [ 449.871798][ T8203] usb 5-1: config 3 has no interface number 0 [ 449.879424][ T8203] usb 5-1: config 3 interface 136 has no altsetting 0 [ 449.898194][ T8203] usb 5-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice=d6.8f [ 449.912721][ T8203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.921086][ T8203] usb 5-1: Product: syz [ 449.932373][ T8203] usb 5-1: Manufacturer: syz [ 449.937685][ T8203] usb 5-1: SerialNumber: syz [ 450.160496][ T8203] usb-storage 5-1:3.136: USB Mass Storage device detected [ 450.259438][ T8203] usb 5-1: USB disconnect, device number 34 [ 451.989632][T13316] netlink: 'syz.1.2138': attribute type 32 has an invalid length. [ 452.266003][ T8191] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 452.434052][ T8191] usb 2-1: Using ep0 maxpacket: 8 [ 452.451581][ T8191] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 452.480293][ T8191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.521421][ T8191] usb 2-1: config 0 descriptor?? [ 452.522313][ T8197] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 452.542619][T13332] tipc: Started in network mode [ 452.564156][T13332] tipc: Node identity 100, cluster identity 4711 [ 452.588453][T13332] tipc: Node number set to 256 [ 452.730848][ T8197] usb 5-1: Using ep0 maxpacket: 8 [ 452.749530][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.755927][ T8191] usb 2-1: string descriptor 0 read error: -71 [ 452.777174][ T8197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.777650][ T8191] usb 2-1: Found UVC 0.00 device (2833:0201) [ 452.800958][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.809931][ T8197] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 452.829542][ T8197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.839140][ T8191] usb 2-1: No valid video chain found. [ 452.848002][ T8197] usb 5-1: config 0 descriptor?? [ 452.881391][ T8191] usb 2-1: USB disconnect, device number 11 [ 452.969727][ T5943] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 453.097066][ T8197] hid-multitouch 0003:0EEF:72C4.0014: unknown main item tag 0x0 [ 453.128552][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 453.140091][ T8197] hid-multitouch 0003:0EEF:72C4.0014: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 453.141576][ T5943] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.166403][ T5943] usb 1-1: config 0 has no interface number 0 [ 453.179526][ T5943] usb 1-1: config 0 interface 1 has no altsetting 0 [ 453.210905][ T5943] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 453.234545][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.254110][ T5943] usb 1-1: Product: syz [ 453.264214][ T5943] usb 1-1: Manufacturer: syz [ 453.274300][ T5943] usb 1-1: SerialNumber: syz [ 453.294697][ T5943] usb 1-1: config 0 descriptor?? [ 453.309885][ T8191] usb 5-1: USB disconnect, device number 35 [ 453.647692][T13355] netlink: 'syz.2.2144': attribute type 2 has an invalid length. [ 453.732112][ T5943] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 453.753084][ T5943] usb 1-1: USB disconnect, device number 24 [ 454.856048][ T30] audit: type=1400 audit(1757368573.430:57): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="g(" pid=13369 comm="syz.0.2148" [ 454.871728][T13376] kvm: emulating exchange as write [ 454.990903][ T8197] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 455.027108][T13383] random: crng reseeded on system resumption [ 455.170177][ T8197] usb 5-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 455.197494][T13385] blk_print_req_error: 54 callbacks suppressed [ 455.197519][T13385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.213859][T13385] buffer_io_error: 54 callbacks suppressed [ 455.213879][T13385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 455.228542][T13385] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.237807][T13385] Buffer I/O error on dev nbd0, logical block 1, async page read [ 455.245894][T13385] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.255244][T13385] Buffer I/O error on dev nbd0, logical block 2, async page read [ 455.263263][T13385] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.272606][T13385] Buffer I/O error on dev nbd0, logical block 3, async page read [ 455.280776][T13385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.289958][T13385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 455.298885][T13385] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.308113][T13385] Buffer I/O error on dev nbd0, logical block 1, async page read [ 455.316173][T13385] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.325431][T13385] Buffer I/O error on dev nbd0, logical block 2, async page read [ 455.333828][T13385] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.343040][T13385] Buffer I/O error on dev nbd0, logical block 3, async page read [ 455.351250][T13385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.360616][T13385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 455.368848][T13385] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 455.378459][T13385] Buffer I/O error on dev nbd0, logical block 1, async page read [ 455.391823][T13385] ldm_validate_partition_table(): Disk read failed. [ 455.401498][T13385] Dev nbd0: unable to read RDB block 0 [ 455.410767][T13385] nbd0: unable to read partition table [ 455.420463][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 455.431273][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=62, location=62 [ 455.441574][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=61, location=61 [ 455.451362][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=60, location=60 [ 455.461071][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 455.473322][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 455.483301][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=30, location=30 [ 455.493438][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=29, location=29 [ 455.503486][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=28, location=28 [ 455.513682][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 455.524152][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 455.534148][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=14, location=14 [ 455.544289][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=13, location=13 [ 455.554164][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=12, location=12 [ 455.563739][T13385] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 455.573371][T13385] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 455.598726][ T8197] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.616145][ T8197] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.626056][ T8197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.655177][ T8197] usb 5-1: Product: syz [ 455.666545][ T8197] usb 5-1: Manufacturer: 倊 [ 455.676873][ T8197] usb 5-1: SerialNumber: syz [ 456.292680][T13398] FAULT_INJECTION: forcing a failure. [ 456.292680][T13398] name failslab, interval 1, probability 0, space 0, times 0 [ 456.305578][T13398] CPU: 0 UID: 0 PID: 13398 Comm: syz.1.2153 Not tainted syzkaller #0 PREEMPT(full) [ 456.305606][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.305633][T13398] Call Trace: [ 456.305645][T13398] [ 456.305654][T13398] dump_stack_lvl+0x189/0x250 [ 456.305694][T13398] ? __pfx____ratelimit+0x10/0x10 [ 456.305722][T13398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.305754][T13398] ? __pfx__printk+0x10/0x10 [ 456.305787][T13398] ? lock_acquire+0x175/0x360 [ 456.305810][T13398] ? __pfx___might_resched+0x10/0x10 [ 456.305839][T13398] should_fail_ex+0x414/0x560 [ 456.305867][T13398] should_failslab+0xa8/0x100 [ 456.305893][T13398] kmem_cache_alloc_noprof+0x74/0x6e0 [ 456.305928][T13398] ? getname_flags+0xb8/0x540 [ 456.305961][T13398] getname_flags+0xb8/0x540 [ 456.305994][T13398] __x64_sys_unlink+0x3a/0x50 [ 456.306017][T13398] do_syscall_64+0xfa/0xfa0 [ 456.306046][T13398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.306066][T13398] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.306087][T13398] ? clear_bhb_loop+0x60/0xb0 [ 456.306112][T13398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.306133][T13398] RIP: 0033:0x7fde6ef8ebe9 [ 456.306152][T13398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.306170][T13398] RSP: 002b:00007fde6fe10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 456.306192][T13398] RAX: ffffffffffffffda RBX: 00007fde6f1c6180 RCX: 00007fde6ef8ebe9 [ 456.306206][T13398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 456.306219][T13398] RBP: 00007fde6fe10090 R08: 0000000000000000 R09: 0000000000000000 [ 456.306232][T13398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.306243][T13398] R13: 00007fde6f1c6218 R14: 00007fde6f1c6180 R15: 00007ffc76c391a8 [ 456.306277][T13398] [ 457.021369][T13401] overlayfs: failed to clone upperpath [ 457.498176][ T9786] block nbd3: Possible stuck request ffff8880258e7000: control (read@0,1024B). Runtime 150 seconds [ 457.509135][ T9786] block nbd3: Possible stuck request ffff8880258e71c0: control (read@1024,1024B). Runtime 150 seconds [ 457.520451][ T9786] block nbd3: Possible stuck request ffff8880258e7380: control (read@2048,1024B). Runtime 150 seconds [ 457.531617][ T9786] block nbd3: Possible stuck request ffff8880258e7540: control (read@3072,1024B). Runtime 150 seconds [ 457.817184][T13411] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 458.026760][T13415] overlayfs: workdir and upperdir must reside under the same mount [ 458.077518][ T8197] usb 5-1: 0:2 : does not exist [ 458.120731][ T8201] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 458.160057][ T8197] usb 5-1: USB disconnect, device number 36 [ 458.174116][T13419] tmpfs: Bad value for 'mpol' [ 458.232837][T13058] udevd[13058]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.315226][ T8201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 458.327289][ T8201] usb 2-1: not running at top speed; connect to a high speed hub [ 458.339738][ T8201] usb 2-1: config 9 has an invalid interface number: 198 but max is 0 [ 458.352284][ T8201] usb 2-1: config 9 has no interface number 0 [ 458.361495][ T8201] usb 2-1: config 9 interface 198 has no altsetting 0 [ 458.383842][ T8201] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 458.399185][ T8201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.410355][ T8201] usb 2-1: Product: syz [ 458.414735][ T8201] usb 2-1: Manufacturer: syz [ 458.421395][ T8201] usb 2-1: SerialNumber: syz [ 458.513960][ T8197] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 458.661632][ T8201] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 458.694968][ T8197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.707890][ T8201] dvb-usb: bulk message failed: -22 (3/0) [ 458.737002][ T8197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.754784][ T8201] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 458.768647][ T8197] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 458.785112][ T8201] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 458.794548][ T8197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.805458][ T8201] dvb_usb_umt_010 2-1:9.198: probe with driver dvb_usb_umt_010 failed with error -22 [ 458.816587][ T8197] usb 5-1: config 0 descriptor?? [ 458.833165][ T8201] usb 2-1: USB disconnect, device number 12 [ 458.985062][ T8191] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 459.144883][ T8191] usb 1-1: Using ep0 maxpacket: 8 [ 459.156867][ T8191] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 459.166013][ T8191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.174409][ T8191] usb 1-1: Product: syz [ 459.178718][ T8191] usb 1-1: Manufacturer: syz [ 459.183420][ T8191] usb 1-1: SerialNumber: syz [ 459.191171][ T8191] usb 1-1: config 0 descriptor?? [ 459.200825][ T8191] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 459.209512][ T8191] dvb-usb: bulk message failed: -22 (2/0) [ 459.220577][ T8191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.237832][ T8191] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 459.250419][ T8191] usb 1-1: media controller created [ 459.274136][ T8197] sony 0003:054C:0268.0015: item fetching failed at offset 4/5 [ 459.293734][ T8197] sony 0003:054C:0268.0015: parse failed [ 459.301560][ T8191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.311041][ T8197] sony 0003:054C:0268.0015: probe with driver sony failed with error -22 [ 459.432362][ T8191] cxusb: set interface failed [ 459.439144][ T8191] dvb-usb: bulk message failed: -22 (1/0) [ 459.533656][ T8191] DVB: Unable to find symbol mt352_attach() [ 459.543398][ T8191] dvb-usb: bulk message failed: -22 (5/0) [ 459.568802][ T8191] zl10353_read_register: readreg error (reg=127, ret==-121) [ 459.576554][ T5923] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 459.601421][ T8191] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 459.716320][ T8203] usb 5-1: USB disconnect, device number 37 [ 459.766731][ T8191] rc_core: IR keymap rc-dvico-mce not found [ 459.772986][ T8191] Registered IR keymap rc-empty [ 459.875804][T13437] FAULT_INJECTION: forcing a failure. [ 459.875804][T13437] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 459.889630][T13437] CPU: 0 UID: 0 PID: 13437 Comm: syz.0.2165 Not tainted syzkaller #0 PREEMPT(full) [ 459.889659][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.889672][T13437] Call Trace: [ 459.889682][T13437] [ 459.889690][T13437] dump_stack_lvl+0x189/0x250 [ 459.889728][T13437] ? __pfx____ratelimit+0x10/0x10 [ 459.889756][T13437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.889787][T13437] ? __pfx__printk+0x10/0x10 [ 459.889817][T13437] ? __might_fault+0xb0/0x130 [ 459.889850][T13437] should_fail_ex+0x414/0x560 [ 459.889878][T13437] strncpy_from_user+0x36/0x290 [ 459.889904][T13437] getname_flags+0xf3/0x540 [ 459.889937][T13437] __x64_sys_unlink+0x3a/0x50 [ 459.889960][T13437] do_syscall_64+0xfa/0xfa0 [ 459.889990][T13437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.890009][T13437] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 459.890030][T13437] ? clear_bhb_loop+0x60/0xb0 [ 459.890055][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.890075][T13437] RIP: 0033:0x7f837f78ebe9 [ 459.890094][T13437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.890110][T13437] RSP: 002b:00007f837d9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 459.890129][T13437] RAX: ffffffffffffffda RBX: 00007f837f9c6180 RCX: 00007f837f78ebe9 [ 459.890141][T13437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 459.890151][T13437] RBP: 00007f837d9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 459.890162][T13437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.890174][T13437] R13: 00007f837f9c6218 R14: 00007f837f9c6180 R15: 00007ffe2b406368 [ 459.890284][T13437] [ 460.294159][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 460.302053][ T8191] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 460.314186][ T5923] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 460.322683][ T5923] usb 2-1: config 0 has no interface number 0 [ 460.328994][ T5923] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 460.349646][ T8191] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input25 [ 460.363430][ T5923] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 460.387706][ T8191] dvb-usb: schedule remote query interval to 100 msecs. [ 460.405993][ T8191] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 460.416431][ T5923] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 460.462767][ T8191] usb 1-1: USB disconnect, device number 25 [ 460.481669][ T5923] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 460.513666][ T5923] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 460.568220][ T5923] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 460.593905][ T5923] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.629470][ T8191] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 460.644122][ T5923] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 460.654480][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.712961][ T5923] usb 2-1: Product: syz [ 460.730999][ T5923] usb 2-1: Manufacturer: syz [ 460.751420][ T5923] usb 2-1: SerialNumber: syz [ 460.806355][ T5923] usb 2-1: config 0 descriptor?? [ 461.451221][T13428] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 461.881686][ T5923] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 461.892887][ T5923] etas_es58x 2-1:0.219: could not retrieve the product info string [ 462.005326][ T5923] usb 2-1: USB disconnect, device number 13 [ 462.021326][ T5923] etas_es58x 2-1:0.219: Disconnecting syz syz [ 462.096357][ T8189] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 462.291728][ T8189] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 462.304980][ T8189] usb 5-1: config 0 has no interface number 0 [ 462.317670][ T8189] usb 5-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.361729][ T8189] usb 5-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.381853][ T8189] usb 5-1: config 0 interface 85 has no altsetting 0 [ 462.389091][ T8189] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 462.399693][ T8189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.415901][ T8189] usb 5-1: config 0 descriptor?? [ 462.977482][ T8189] hid-led 0003:1D34:0004.0016: unknown main item tag 0x0 [ 462.985200][ T8189] hid-led 0003:1D34:0004.0016: unknown main item tag 0x0 [ 462.992416][ T8189] hid-led 0003:1D34:0004.0016: unknown main item tag 0x0 [ 463.000472][ T8189] hid-led 0003:1D34:0004.0016: unknown main item tag 0x0 [ 463.007856][ T8189] hid-led 0003:1D34:0004.0016: unknown main item tag 0x0 [ 463.014950][ T8189] hid-led 0003:1D34:0004.0016: unknown main item tag 0x0 [ 463.022372][ T8189] hid-led 0003:1D34:0004.0016: unknown main item tag 0x0 [ 463.131707][T13474] FAULT_INJECTION: forcing a failure. [ 463.131707][T13474] name failslab, interval 1, probability 0, space 0, times 0 [ 463.145411][T13474] CPU: 1 UID: 0 PID: 13474 Comm: syz.0.2176 Not tainted syzkaller #0 PREEMPT(full) [ 463.145440][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.145454][T13474] Call Trace: [ 463.145463][T13474] [ 463.145475][T13474] dump_stack_lvl+0x189/0x250 [ 463.145513][T13474] ? __pfx____ratelimit+0x10/0x10 [ 463.145537][T13474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.145569][T13474] ? __pfx__printk+0x10/0x10 [ 463.145606][T13474] ? __pfx___might_resched+0x10/0x10 [ 463.145636][T13474] should_fail_ex+0x414/0x560 [ 463.145665][T13474] should_failslab+0xa8/0x100 [ 463.145691][T13474] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 463.145713][T13474] ? __d_alloc+0x36/0x7a0 [ 463.145740][T13474] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 463.145773][T13474] __d_alloc+0x36/0x7a0 [ 463.145817][T13474] d_alloc_parallel+0xe5/0x15e0 [ 463.145846][T13474] ? rcu_is_watching+0x15/0xb0 [ 463.145872][T13474] ? trace_irq_disable+0x37/0x110 [ 463.145892][T13474] ? preempt_schedule_irq+0xde/0x150 [ 463.145926][T13474] ? __pfx_d_alloc_parallel+0x10/0x10 [ 463.145951][T13474] ? __raw_spin_lock_init+0x45/0x100 [ 463.145983][T13474] ? __init_waitqueue_head+0xa9/0x150 [ 463.146017][T13474] __lookup_slow+0x116/0x3d0 [ 463.146052][T13474] ? __pfx___lookup_slow+0x10/0x10 [ 463.146102][T13474] ? down_read+0x1ad/0x2e0 [ 463.146135][T13474] lookup_slow+0x53/0x70 [ 463.146155][T13474] link_path_walk+0x935/0xea0 [ 463.146204][T13474] __filename_parentat+0x246/0x670 [ 463.146234][T13474] ? kasan_save_track+0x4f/0x80 [ 463.146253][T13474] ? kasan_save_track+0x3e/0x80 [ 463.146279][T13474] ? __pfx___filename_parentat+0x10/0x10 [ 463.146344][T13474] ? __might_fault+0xb0/0x130 [ 463.146372][T13474] do_unlinkat+0xed/0x560 [ 463.146403][T13474] ? __pfx_do_unlinkat+0x10/0x10 [ 463.146427][T13474] ? strncpy_from_user+0x150/0x290 [ 463.146454][T13474] ? getname_flags+0x1e5/0x540 [ 463.146486][T13474] __x64_sys_unlink+0x47/0x50 [ 463.146509][T13474] do_syscall_64+0xfa/0xfa0 [ 463.146538][T13474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.146558][T13474] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 463.146578][T13474] ? clear_bhb_loop+0x60/0xb0 [ 463.146604][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.146624][T13474] RIP: 0033:0x7f837f78ebe9 [ 463.146642][T13474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.146660][T13474] RSP: 002b:00007f837d9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 463.146683][T13474] RAX: ffffffffffffffda RBX: 00007f837f9c6180 RCX: 00007f837f78ebe9 [ 463.146697][T13474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 463.146709][T13474] RBP: 00007f837d9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 463.146722][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.146733][T13474] R13: 00007f837f9c6218 R14: 00007f837f9c6180 R15: 00007ffe2b406368 [ 463.146767][T13474] [ 463.460863][T13475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.469908][T13475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.476001][ T8197] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 463.498610][ T8189] hid-led 0003:1D34:0004.0016: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.4-1/input85 [ 463.539302][ T8189] hid-led 0003:1D34:0004.0016: Dream Cheeky Webmail Notifier initialized [ 463.650989][ T8197] usb 2-1: unable to get BOS descriptor or descriptor too short [ 463.664930][ T8197] usb 2-1: not running at top speed; connect to a high speed hub [ 463.674695][ T8197] usb 2-1: config 3 has an invalid interface number: 93 but max is 1 [ 463.685309][ T8197] usb 2-1: config 3 has an invalid interface number: 29 but max is 1 [ 463.699030][ T8197] usb 2-1: config 3 has no interface number 0 [ 463.720391][T13459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.729571][ T8197] usb 2-1: config 3 has no interface number 1 [ 463.740412][ T8197] usb 2-1: config 3 interface 29 has no altsetting 0 [ 463.751263][T13459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.772957][ T8197] usb 2-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=5c.5c [ 463.799939][ T8201] usb 5-1: USB disconnect, device number 38 [ 463.816457][ T8197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.852136][ T8197] usb 2-1: Product: syz [ 463.856390][ T8197] usb 2-1: Manufacturer: syz [ 463.870993][ T8197] usb 2-1: SerialNumber: syz [ 464.134208][ T8197] usb 2-1: USB disconnect, device number 14 [ 464.473466][T13485] overlayfs: failed to clone upperpath [ 465.229808][ T8191] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 465.257611][T13492] 9pnet_fd: Insufficient options for proto=fd [ 465.400720][ T8191] usb 5-1: Using ep0 maxpacket: 8 [ 465.417460][ T8191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.443612][ T8191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.460605][ T8191] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 465.482499][ T8191] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 465.492285][ T8191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.510277][ T8191] usb 5-1: config 0 descriptor?? [ 465.753172][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 465.762807][T13487] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2181'. [ 465.774011][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 465.978270][ T5181] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 466.039893][ T8191] logitech 0003:046D:C293.0017: unknown main item tag 0x0 [ 466.056584][ T8191] logitech 0003:046D:C293.0017: unknown main item tag 0x0 [ 466.059172][ T8197] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 466.069135][ T8191] logitech 0003:046D:C293.0017: unknown main item tag 0x0 [ 466.111601][ T8191] logitech 0003:046D:C293.0017: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.4-1/input0 [ 466.126995][ T8191] logitech 0003:046D:C293.0017: no inputs found [ 466.136260][T13506] team_slave_0: entered allmulticast mode [ 466.251714][ T8197] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 466.278885][ T8203] usb 5-1: USB disconnect, device number 39 [ 466.288071][ T8197] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 466.349003][ T8197] usb 2-1: config 0 interface 0 has no altsetting 0 [ 466.368370][ T8197] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 466.399691][ T8197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.426778][ T8197] usb 2-1: config 0 descriptor?? [ 466.463994][T13504] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 466.488796][T13513] 9pnet_fd: p9_fd_create_tcp (13513): problem connecting socket to 127.0.0.1 [ 466.588629][T13514] FAULT_INJECTION: forcing a failure. [ 466.588629][T13514] name failslab, interval 1, probability 0, space 0, times 0 [ 466.602252][T13514] CPU: 1 UID: 0 PID: 13514 Comm: syz.0.2188 Not tainted syzkaller #0 PREEMPT(full) [ 466.602280][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.602294][T13514] Call Trace: [ 466.602305][T13514] [ 466.602314][T13514] dump_stack_lvl+0x189/0x250 [ 466.602356][T13514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.602390][T13514] ? __pfx__printk+0x10/0x10 [ 466.602425][T13514] ? kasan_check_range+0xad/0x2c0 [ 466.602457][T13514] should_fail_ex+0x414/0x560 [ 466.602484][T13514] should_failslab+0xa8/0x100 [ 466.602512][T13514] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 466.602533][T13514] ? __d_alloc+0x36/0x7a0 [ 466.602571][T13514] __d_alloc+0x36/0x7a0 [ 466.602607][T13514] d_alloc_parallel+0xe5/0x15e0 [ 466.602636][T13514] ? rcu_is_watching+0x15/0xb0 [ 466.602662][T13514] ? trace_irq_disable+0x37/0x110 [ 466.602683][T13514] ? preempt_schedule_irq+0xde/0x150 [ 466.602716][T13514] ? __lock_acquire+0xab9/0xd20 [ 466.602746][T13514] ? __pfx_d_alloc_parallel+0x10/0x10 [ 466.602772][T13514] ? __raw_spin_lock_init+0x45/0x100 [ 466.602803][T13514] ? __init_waitqueue_head+0xa9/0x150 [ 466.602839][T13514] __lookup_slow+0x116/0x3d0 [ 466.602875][T13514] ? __pfx___lookup_slow+0x10/0x10 [ 466.602923][T13514] ? down_read+0x1ad/0x2e0 [ 466.602957][T13514] lookup_one_unlocked+0x127/0x250 [ 466.602997][T13514] ovl_lookup_single+0x318/0xe10 [ 466.603041][T13514] ? __pfx_ovl_lookup_single+0x10/0x10 [ 466.603076][T13514] ? irqentry_exit+0x74/0x90 [ 466.603104][T13514] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.603135][T13514] ovl_lookup_layer+0x377/0x450 [ 466.603180][T13514] ovl_lookup+0x471/0x1bc0 [ 466.603214][T13514] ? d_alloc_parallel+0x2f0/0x15e0 [ 466.603238][T13514] ? d_alloc_parallel+0x14ae/0x15e0 [ 466.603276][T13514] ? __pfx_ovl_lookup+0x10/0x10 [ 466.603308][T13514] ? __pfx_d_alloc_parallel+0x10/0x10 [ 466.603334][T13514] ? __raw_spin_lock_init+0x45/0x100 [ 466.603365][T13514] ? __init_waitqueue_head+0xa9/0x150 [ 466.603420][T13514] __lookup_slow+0x294/0x3d0 [ 466.603540][T13514] ? __pfx___lookup_slow+0x10/0x10 [ 466.603591][T13514] ? down_read+0x1ad/0x2e0 [ 466.603627][T13514] lookup_slow+0x53/0x70 [ 466.603648][T13514] link_path_walk+0x935/0xea0 [ 466.603698][T13514] __filename_parentat+0x246/0x670 [ 466.603742][T13514] ? __pfx___filename_parentat+0x10/0x10 [ 466.603807][T13514] ? lock_acquire+0x175/0x360 [ 466.603839][T13514] do_unlinkat+0xed/0x560 [ 466.603872][T13514] ? __pfx_do_unlinkat+0x10/0x10 [ 466.603898][T13514] ? strncpy_from_user+0x150/0x290 [ 466.603925][T13514] ? getname_flags+0x1e5/0x540 [ 466.603958][T13514] __x64_sys_unlink+0x47/0x50 [ 466.603982][T13514] do_syscall_64+0xfa/0xfa0 [ 466.604013][T13514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.604034][T13514] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 466.604056][T13514] ? clear_bhb_loop+0x60/0xb0 [ 466.604081][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.604102][T13514] RIP: 0033:0x7f837f78ebe9 [ 466.604122][T13514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.604141][T13514] RSP: 002b:00007f837d9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 466.604163][T13514] RAX: ffffffffffffffda RBX: 00007f837f9c6180 RCX: 00007f837f78ebe9 [ 466.604178][T13514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 466.604191][T13514] RBP: 00007f837d9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 466.604204][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.604216][T13514] R13: 00007f837f9c6218 R14: 00007f837f9c6180 R15: 00007ffe2b406368 [ 466.604252][T13514] [ 467.263059][ T8197] holtek_mouse 0003:04D9:A067.0018: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 467.282003][ T9786] block nbd4: Possible stuck request ffff88802595e000: control (read@0,1024B). Runtime 150 seconds [ 467.292937][ T9786] block nbd4: Possible stuck request ffff88802595e1c0: control (read@1024,1024B). Runtime 150 seconds [ 467.304040][ T9786] block nbd4: Possible stuck request ffff88802595e380: control (read@2048,1024B). Runtime 150 seconds [ 467.315174][ T9786] block nbd4: Possible stuck request ffff88802595e540: control (read@3072,1024B). Runtime 150 seconds [ 467.603637][ T8203] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 467.789598][ T8203] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 467.799280][ T8203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.807964][ T8203] usb 5-1: Product: syz [ 467.812257][ T8203] usb 5-1: Manufacturer: syz [ 467.816953][ T8203] usb 5-1: SerialNumber: syz [ 467.827571][ T8203] usb 5-1: config 0 descriptor?? [ 468.031630][ T8191] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 468.056988][ T8203] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 468.184891][ T8191] usb 1-1: device descriptor read/64, error -71 [ 468.437887][ T8191] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 468.578398][ T8191] usb 1-1: device descriptor read/64, error -71 [ 468.783596][ T8189] usb 2-1: USB disconnect, device number 15 [ 468.789932][ T8191] usb usb1-port1: attempt power cycle [ 469.154397][ T8191] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 469.184566][ T8191] usb 1-1: device descriptor read/8, error -71 [ 469.330891][T13560] overlayfs: failed to clone upperpath [ 469.646441][T13518] ieee802154 phy0 wpan0: encryption failed: -90 [ 469.828143][ T8197] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 469.871749][ T8191] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 469.907322][ T8203] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 469.925630][ T8191] usb 1-1: device descriptor read/8, error -71 [ 469.928245][ T8203] usb 5-1: USB disconnect, device number 40 [ 469.988392][ T8197] usb 2-1: Using ep0 maxpacket: 32 [ 470.003309][ T8197] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.019756][ T8197] usb 2-1: config 0 interface 0 has no altsetting 0 [ 470.029489][ T8197] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 470.042676][ T8191] usb usb1-port1: unable to enumerate USB device [ 470.045207][ T8197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.068644][ T8197] usb 2-1: config 0 descriptor?? [ 470.521656][ T8197] hid_parser_main: 9 callbacks suppressed [ 470.521680][ T8197] asus 0003:048D:CE50.0019: unknown main item tag 0x0 [ 470.548387][ T8197] asus 0003:048D:CE50.0019: unknown main item tag 0x0 [ 470.555749][ T8197] asus 0003:048D:CE50.0019: unknown main item tag 0x0 [ 470.562641][ T8197] asus 0003:048D:CE50.0019: unknown main item tag 0x0 [ 470.570554][ T8197] asus 0003:048D:CE50.0019: unknown main item tag 0x0 [ 470.581559][ T8197] asus 0003:048D:CE50.0019: hidraw0: USB HID v80.00 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 470.593035][ T8197] asus 0003:048D:CE50.0019: Asus input not registered [ 470.612343][ T8197] asus 0003:048D:CE50.0019: probe with driver asus failed with error -12 [ 470.736500][ T8197] usb 2-1: USB disconnect, device number 16 [ 470.937053][ T8191] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 471.080874][T13583] overlayfs: failed to clone upperpath [ 471.087977][ T8191] usb 5-1: device descriptor read/64, error -71 [ 471.346530][ T8191] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 471.528440][ T8191] usb 5-1: device descriptor read/64, error -71 [ 471.667626][ T8191] usb usb5-port1: attempt power cycle [ 471.881154][ T8189] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 471.924070][ T8197] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 472.041717][ T8191] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 472.052471][ T8189] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 472.064555][ T8189] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 472.074040][ T8189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.074197][ T8191] usb 5-1: device descriptor read/8, error -71 [ 472.084794][ T8197] usb 1-1: Using ep0 maxpacket: 8 [ 472.108753][ T8197] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 472.118540][ T8197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.142557][ T8197] pvrusb2: Hardware description: Terratec Grabster AV400 [ 472.150993][ T8197] pvrusb2: ********** [ 472.155028][ T8197] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 472.166432][ T8197] pvrusb2: Important functionality might not be entirely working. [ 472.175284][ T8197] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 472.186938][ T8197] pvrusb2: ********** [ 472.351762][ T8191] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 472.373613][ T2344] pvrusb2: Invalid write control endpoint [ 472.381685][ T8191] usb 5-1: device descriptor read/8, error -71 [ 472.478902][ T2344] pvrusb2: Invalid write control endpoint [ 472.496893][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 472.509634][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 472.525689][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 472.526303][T13593] 9pnet_fd: Insufficient options for proto=fd [ 472.542287][ T2344] pvrusb2: Device being rendered inoperable [ 472.542465][ T8191] usb usb5-port1: unable to enumerate USB device [ 472.562656][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 472.574862][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 472.592266][T13582] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 472.620070][ T2344] pvrusb2: Attached sub-driver cx25840 [ 472.624906][ T8191] usb 1-1: USB disconnect, device number 30 [ 472.626026][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 472.626061][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 472.890843][ T8189] usb 2-1: string descriptor 0 read error: -71 [ 472.903474][ T8189] hub 2-1:32.0: bad descriptor, ignoring hub [ 472.918486][ T8189] hub 2-1:32.0: probe with driver hub failed with error -5 [ 472.995043][ T8189] usb 2-1: USB disconnect, device number 17 [ 473.042356][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2217'. [ 473.055010][T13602] veth1_macvtap: left promiscuous mode [ 473.222995][T13605] netlink: 'syz.0.2218': attribute type 10 has an invalid length. [ 473.235080][T13605] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2218'. [ 473.246004][T13605] team0: entered promiscuous mode [ 473.253164][T13605] team_slave_0: entered promiscuous mode [ 473.259224][T13605] team_slave_1: entered promiscuous mode [ 473.267197][T13605] bridge0: port 3(team0) entered blocking state [ 473.274887][T13605] bridge0: port 3(team0) entered disabled state [ 473.281515][T13605] team0: entered allmulticast mode [ 473.287560][T13605] team_slave_1: entered allmulticast mode [ 473.298150][T13605] bridge0: port 3(team0) entered blocking state [ 473.304652][T13605] bridge0: port 3(team0) entered forwarding state [ 473.389167][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 473.402535][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 473.412264][T13610] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2220'. [ 473.422579][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 473.431498][T13610] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2220'. [ 473.442630][ T8189] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 473.623136][ T8189] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 473.633047][ T8189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.641636][ T8189] usb 2-1: Product: syz [ 473.647952][T13612] overlay: ./bus is not a directory [ 473.650823][ T8189] usb 2-1: Manufacturer: syz [ 473.657971][ T8189] usb 2-1: SerialNumber: syz [ 473.666706][ T8189] usb 2-1: config 0 descriptor?? [ 473.675078][ T8189] gspca_main: sq930x-2.14.0 probing 2770:930c [ 473.863859][T13617] binder: 13616:13617 ioctl 8924 2000000004c0 returned -22 [ 473.899510][T13617] binder: 13616:13617 ioctl c0306201 200000000300 returned -14 [ 474.143563][ T8189] gspca_sq930x: ucbus_write failed -71 [ 474.174856][ T8189] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 474.196055][ T8189] usb 2-1: USB disconnect, device number 18 [ 474.224453][T13625] Invalid ELF header magic: != ELF [ 474.547080][T13635] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2232'. [ 474.793034][ T9786] block nbd5: Possible stuck request ffff888025987000: control (read@0,1024B). Runtime 150 seconds [ 474.804001][ T9786] block nbd5: Possible stuck request ffff8880259871c0: control (read@1024,1024B). Runtime 150 seconds [ 474.815747][ T9786] block nbd5: Possible stuck request ffff888025987380: control (read@2048,1024B). Runtime 150 seconds [ 474.827142][ T9786] block nbd5: Possible stuck request ffff888025987540: control (read@3072,1024B). Runtime 150 seconds [ 474.909732][T13643] overlayfs: failed to clone upperpath [ 475.474418][ T8189] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 475.559840][ T8191] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 475.656356][ T8189] usb 1-1: Using ep0 maxpacket: 8 [ 475.680699][ T8189] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 475.695479][ T8189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.696494][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2237'. [ 475.705923][ T8189] usb 1-1: Product: syz [ 475.717428][ T8189] usb 1-1: Manufacturer: syz [ 475.723690][ T8189] usb 1-1: SerialNumber: syz [ 475.734088][ T8189] usb 1-1: config 0 descriptor?? [ 475.743241][ T8191] usb 2-1: Using ep0 maxpacket: 16 [ 475.755181][ T8189] gspca_main: se401-2.14.0 probing 047d:5003 [ 475.765811][ T8191] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 475.776206][ T8191] usb 2-1: config 0 has no interface number 0 [ 475.782429][ T8191] usb 2-1: config 0 interface 48 has no altsetting 0 [ 475.793559][ T8191] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 475.804171][ T8191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.813893][ T8191] usb 2-1: Product: syz [ 475.819486][ T8191] usb 2-1: Manufacturer: syz [ 475.824197][ T8191] usb 2-1: SerialNumber: syz [ 475.835352][ T8191] usb 2-1: config 0 descriptor?? [ 475.859300][ T8188] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 475.895877][T13656] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2239'. [ 476.019771][ T8188] usb 5-1: device descriptor read/64, error -71 [ 476.062918][ T8203] usb 2-1: USB disconnect, device number 19 [ 476.175725][ T8189] gspca_se401: Bayer format not supported! [ 476.279687][ T8188] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 476.397683][ T8197] usb 1-1: USB disconnect, device number 31 [ 476.426156][ T8188] usb 5-1: device descriptor read/64, error -71 [ 476.555035][ T8188] usb usb5-port1: attempt power cycle [ 476.896780][ T8191] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 476.917946][ T8188] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 476.940099][ T8188] usb 5-1: device descriptor read/8, error -71 [ 477.067777][ T8191] usb 2-1: Using ep0 maxpacket: 32 [ 477.075732][ T8191] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 477.086036][ T8191] usb 2-1: config 0 has no interface number 0 [ 477.093034][ T8191] usb 2-1: config 0 interface 197 has no altsetting 0 [ 477.103754][ T8191] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=32.65 [ 477.112935][ T8191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.120967][ T8191] usb 2-1: Product: syz [ 477.125569][ T8191] usb 2-1: Manufacturer: syz [ 477.130222][ T8191] usb 2-1: SerialNumber: syz [ 477.137394][ T8191] usb 2-1: config 0 descriptor?? [ 477.148947][ T8191] gspca_main: etoms-2.14.0 probing 102c:6151 [ 477.206824][ T8188] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 477.239665][ T8188] usb 5-1: device descriptor read/8, error -71 [ 477.324435][ T8189] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 477.356903][ T8188] usb usb5-port1: unable to enumerate USB device [ 477.367820][T13663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.377431][T13663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.446999][ T8191] usb 2-1: USB disconnect, device number 20 [ 477.488219][ T8189] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 477.500748][ T8189] usb 1-1: config 0 has no interface number 1 [ 477.517029][ T8189] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 477.530601][ T8189] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.543626][ T8189] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 477.555467][ T8189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 477.563929][ T8189] usb 1-1: SerialNumber: syz [ 477.577994][ T8189] usb 1-1: config 0 descriptor?? [ 477.683910][T13677] overlayfs: failed to clone upperpath [ 477.802293][T13666] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 477.808935][T13666] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 477.815635][T13666] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 477.824062][T13666] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 477.831296][T13666] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 477.838210][T13666] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 477.844890][T13666] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 477.851826][T13666] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 477.858939][T13666] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 477.865449][T13666] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 477.872152][T13666] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 477.878696][T13666] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 477.885299][T13666] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 477.892123][T13666] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 477.900115][T13666] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 477.908233][T13666] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 477.914925][T13666] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 477.922757][T13666] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 478.244101][ T8197] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 478.383120][ T8197] usb 2-1: device descriptor read/64, error -71 [ 478.640132][ T8197] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 478.789685][ T8197] usb 2-1: device descriptor read/64, error -71 [ 478.907850][ T8197] usb usb2-port1: attempt power cycle [ 479.206658][ T8191] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 479.270562][ T8197] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 479.303389][ T8197] usb 2-1: device descriptor read/8, error -71 [ 479.380137][ T8191] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 479.397315][ T8191] usb 5-1: config 0 has no interface number 0 [ 479.404201][ T8191] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 479.425212][ T8191] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 479.438841][ T8191] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 479.461873][ T8191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.483461][ T8191] usb 5-1: config 0 descriptor?? [ 479.523648][ T8191] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input26 [ 479.570391][ T8197] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 479.603312][ T8197] usb 2-1: device descriptor read/8, error -71 [ 479.626150][T13697] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20003 [ 479.721990][ T8197] usb usb2-port1: unable to enumerate USB device [ 479.739964][T13687] netlink: 'syz.4.2249': attribute type 10 has an invalid length. [ 479.748856][T13687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2249'. [ 479.783251][T13687] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 479.805357][T13687] team0: Failed to send options change via netlink (err -105) [ 479.815541][T13687] team0: Port device geneve0 added [ 479.856392][T13687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.871251][T13687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.164315][ T8197] usb 5-1: USB disconnect, device number 49 [ 480.228754][ T8189] usb 1-1: Found UVC 0.00 device (0002:0000) [ 480.240439][ T8189] usb 1-1: No valid video chain found. [ 480.272798][ T8189] usb 1-1: USB disconnect, device number 32 [ 480.472196][T13711] netlink: 'syz.0.2256': attribute type 6 has an invalid length. [ 480.789159][ T8197] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 480.960428][ T8197] usb 1-1: unable to get BOS descriptor or descriptor too short [ 480.969607][ T8197] usb 1-1: config 251 has an invalid interface number: 227 but max is 1 [ 480.978324][ T8197] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 480.988768][ T8197] usb 1-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 480.997960][ T8197] usb 1-1: config 251 has no interface number 0 [ 481.007622][ T8197] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 481.016908][ T8203] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 481.025204][ T8197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.033833][ T8197] usb 1-1: Product: syz [ 481.038467][ T8197] usb 1-1: Manufacturer: syz [ 481.043672][ T8197] usb 1-1: SerialNumber: syz [ 481.184827][ T8203] usb 5-1: device descriptor read/64, error -71 [ 481.279982][ T8197] usb 1-1: USB disconnect, device number 33 [ 481.456249][ T8203] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 481.601893][ T8203] usb 5-1: device descriptor read/64, error -71 [ 481.721275][ T8203] usb usb5-port1: attempt power cycle [ 482.083131][ T8203] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 482.118522][ T8203] usb 5-1: device descriptor read/8, error -71 [ 482.186690][T13729] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2261'. [ 482.384644][ T8203] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 482.416346][ T8203] usb 5-1: device descriptor read/8, error -71 [ 482.447038][ T8189] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 482.525453][T13748] nbd: couldn't find a device at index -373156329 [ 482.553907][ T8203] usb usb5-port1: unable to enumerate USB device [ 482.621003][ T8189] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 482.641527][ T8189] usb 1-1: config 0 has no interface number 0 [ 482.654818][ T8189] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 482.679810][ T8189] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 482.695904][ T8189] usb 1-1: config 0 interface 113 has no altsetting 0 [ 482.704921][T13756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2266'. [ 482.706173][ T8189] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 482.723700][ T8189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.732288][ T8189] usb 1-1: Product: syz [ 482.736777][ T8189] usb 1-1: Manufacturer: syz [ 482.741498][ T8189] usb 1-1: SerialNumber: syz [ 482.753162][ T8189] usb 1-1: config 0 descriptor?? [ 482.771496][ C1] usb 1-1: NFC: Urb failure (status -71) [ 482.777713][ T8189] usb 1-1: NFC: Unable to get FW version [ 482.812038][ T8189] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 482.853981][T13759] netlink: 'syz.1.2267': attribute type 1 has an invalid length. [ 482.862164][T13760] netlink: 'syz.1.2267': attribute type 1 has an invalid length. [ 482.984438][ T8203] usb 1-1: USB disconnect, device number 34 [ 483.135041][ T8189] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 483.302106][ T8189] usb 2-1: Invalid ep0 maxpacket: 64 [ 483.361558][T13767] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2269'. [ 483.451911][ T8189] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 483.612225][ T8189] usb 2-1: Invalid ep0 maxpacket: 64 [ 483.618106][ T8189] usb usb2-port1: attempt power cycle [ 483.836828][ T8188] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 483.992063][ T8189] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 484.008576][ T8188] usb 1-1: Using ep0 maxpacket: 32 [ 484.020331][ T8188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.036302][ T8189] usb 2-1: Invalid ep0 maxpacket: 64 [ 484.048454][ T8188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.060707][ T8188] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 484.073630][ T8188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.086246][ T8188] usb 1-1: config 0 descriptor?? [ 484.189731][ T8189] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 484.211896][ T8189] usb 2-1: Invalid ep0 maxpacket: 64 [ 484.222539][ T8189] usb usb2-port1: unable to enumerate USB device [ 484.393328][ T8191] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 484.528785][ T8188] kone 0003:1E7D:2CED.001A: collection stack underflow [ 484.537882][ T8188] kone 0003:1E7D:2CED.001A: item 0 1 0 12 parsing failed [ 484.546720][ T8188] kone 0003:1E7D:2CED.001A: parse failed [ 484.552457][ T8188] kone 0003:1E7D:2CED.001A: probe with driver kone failed with error -22 [ 484.566510][ T8191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 484.577739][ T8191] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 484.590816][ T8191] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 484.600013][ T8191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.612762][ T8191] usb 5-1: config 0 descriptor?? [ 484.620628][T13782] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 484.742431][T13776] netlink: 'syz.0.2272': attribute type 11 has an invalid length. [ 484.763480][ T5923] usb 1-1: USB disconnect, device number 35 [ 484.854066][T13778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.871620][T13778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.895186][ T8191] usbhid 5-1:0.0: can't add hid device: -71 [ 484.906514][ T8191] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 484.934706][ T8191] usb 5-1: USB disconnect, device number 54 [ 485.430254][ T8191] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 485.590749][ T8191] usb 5-1: Using ep0 maxpacket: 32 [ 485.605170][ T8191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 485.620120][ T8191] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 485.642473][ T8191] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 485.652878][ T8191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.665417][ T8188] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 485.679012][ T8191] usb 5-1: config 0 descriptor?? [ 485.709679][ T8191] hub 5-1:0.0: bad descriptor, ignoring hub [ 485.724294][ T8191] hub 5-1:0.0: probe with driver hub failed with error -5 [ 485.836594][ T8188] usb 1-1: device descriptor read/64, error -71 [ 486.099477][ T8188] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 486.160615][ T8191] hid-multitouch 0003:0EEF:72C4.001B: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 486.254027][ T8188] usb 1-1: device descriptor read/64, error -71 [ 486.383862][ T8188] usb usb1-port1: attempt power cycle [ 486.419379][T13806] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 486.432971][T13806] overlayfs: failed to clone upperpath [ 486.489227][ T8189] usb 5-1: USB disconnect, device number 55 [ 486.745965][ T8201] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 486.767207][ T8188] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 486.803749][ T8188] usb 1-1: device descriptor read/8, error -71 [ 486.895258][ T8201] usb 2-1: device descriptor read/64, error -71 [ 487.128752][ T8188] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 487.153023][ T8188] usb 1-1: device descriptor read/8, error -71 [ 487.153783][ T8201] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 487.280877][ T8188] usb usb1-port1: unable to enumerate USB device [ 487.312293][ T8201] usb 2-1: device descriptor read/64, error -71 [ 487.426346][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 487.435884][ T8201] usb usb2-port1: attempt power cycle [ 487.820749][ T8201] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 487.848773][ T8201] usb 2-1: device descriptor read/8, error -71 [ 488.103699][ T8201] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 488.125643][ T8201] usb 2-1: device descriptor read/8, error -71 [ 488.243015][ T8201] usb usb2-port1: unable to enumerate USB device [ 488.296207][ T8188] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 488.481762][ T8188] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 488.493225][ T8188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.505293][ T8188] usb 5-1: config 0 descriptor?? [ 488.514269][ T8188] cp210x 5-1:0.0: cp210x converter detected [ 488.943582][ T8188] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 488.958359][ T8188] usb 5-1: cp210x converter now attached to ttyUSB0 [ 488.980979][ T8201] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 489.147194][ T8201] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 489.159009][ T8201] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 489.175763][ T8201] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 489.182789][ T8188] usb 5-1: USB disconnect, device number 56 [ 489.185104][ T8201] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 489.202479][ T8201] usb 1-1: Manufacturer: syz [ 489.203558][ T8188] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 489.216020][ T8201] usb 1-1: SerialNumber: syz [ 489.229046][ T8188] cp210x 5-1:0.0: device disconnected [ 489.825652][T13839] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 489.832255][T13839] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.845606][T13839] vhci_hcd vhci_hcd.0: Device attached [ 489.867563][ T9786] block nbd3: Possible stuck request ffff8880258e7000: control (read@0,1024B). Runtime 180 seconds [ 489.878733][ T9786] block nbd3: Possible stuck request ffff8880258e71c0: control (read@1024,1024B). Runtime 180 seconds [ 489.890156][ T9786] block nbd3: Possible stuck request ffff8880258e7380: control (read@2048,1024B). Runtime 180 seconds [ 489.902055][ T9786] block nbd3: Possible stuck request ffff8880258e7540: control (read@3072,1024B). Runtime 180 seconds [ 490.016963][T13838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.058174][T13838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.104525][ T8203] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 490.113640][ T8201] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 490.189620][ T8201] usb 1-1: USB disconnect, device number 40 [ 490.299287][ T8202] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 490.610699][ T8202] usb 2-1: Using ep0 maxpacket: 16 [ 490.619478][ T8202] usb 2-1: config 15 has an invalid interface number: 107 but max is 0 [ 490.636908][ T8202] usb 2-1: config 15 has no interface number 0 [ 490.648098][ T8202] usb 2-1: config 15 interface 107 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 490.659966][ T8202] usb 2-1: config 15 interface 107 has no altsetting 0 [ 490.678522][ T8202] usb 2-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice= d.c3 [ 490.695192][ T8202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.711314][ T8202] usb 2-1: Product: syz [ 490.717685][ T8202] usb 2-1: Manufacturer: syz [ 490.722340][ T8202] usb 2-1: SerialNumber: syz [ 491.008815][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.021174][T13838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.030758][T13838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.038212][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.047974][ T8201] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 491.228968][ T8201] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 491.242872][ T8201] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 162, changing to 11 [ 491.254318][ T8201] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49264, setting to 1024 [ 491.267525][ T8201] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 491.276787][ T8201] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 491.285114][ T8201] usb 1-1: Manufacturer: syz [ 491.289765][ T8201] usb 1-1: SerialNumber: syz [ 491.531980][T13858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.542578][T13858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.560549][ T8201] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 491.577801][ T8201] usb 1-1: USB disconnect, device number 41 [ 491.878607][T13885] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2306'. [ 491.938443][ T30] audit: type=1326 audit(1757368608.104:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde6ef8ebe9 code=0x0 [ 492.055990][T13892] delete_channel: no stack [ 492.061467][T13892] delete_channel: no stack [ 492.296101][ T8189] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 492.480465][ T8189] usb 5-1: Using ep0 maxpacket: 16 [ 492.488314][ T8191] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 492.500674][ T8189] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.512144][ T8189] usb 5-1: config 0 interface 0 has no altsetting 0 [ 492.518810][ T8189] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 492.529160][ T8189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.540615][ T8189] usb 5-1: config 0 descriptor?? [ 492.586606][T13903] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2313'. [ 492.651005][ T8191] usb 1-1: device descriptor read/64, error -71 [ 492.905361][ T8191] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 492.967218][ T8189] usbhid 5-1:0.0: can't add hid device: -71 [ 493.012364][ T8189] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.048020][ T8189] usb 5-1: USB disconnect, device number 57 [ 493.058743][ T8191] usb 1-1: device descriptor read/64, error -71 [ 493.070118][T13924] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 493.093378][ T78] Bluetooth: hci3: Frame reassembly failed (-84) [ 493.205198][ T8191] usb usb1-port1: attempt power cycle [ 493.407911][ T8189] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 493.522069][T13928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.532926][T13928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.568508][ T8191] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 493.581467][ T8189] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 493.590033][ T8189] usb 5-1: config 0 has no interface number 1 [ 493.596288][ T8189] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 493.605830][ T8191] usb 1-1: device descriptor read/8, error -71 [ 493.612152][ T8189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.632946][ T8189] usb 5-1: config 0 descriptor?? [ 493.915866][ T8189] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 495.210567][ T8191] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 495.267293][T13931] overlayfs: failed to clone upperpath [ 495.313559][T13932] Bluetooth: hci3: command 0x1003 tx timeout [ 495.343483][ T5181] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 495.388827][ T8191] usb 1-1: device descriptor read/8, error -71 [ 495.477450][ T8201] usb 5-1: USB disconnect, device number 58 [ 495.488201][ T8201] qcserial 5-1:0.2: device disconnected [ 495.683462][ T8191] usb usb1-port1: unable to enumerate USB device [ 495.762716][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.801450][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.059964][ T8201] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 496.177524][ T8191] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 496.177562][ T5181] Bluetooth: hci4: command 0x0406 tx timeout [ 496.235122][ T8201] usb 5-1: not running at top speed; connect to a high speed hub [ 496.244508][ T8201] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.255801][ T8201] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 496.264956][ T8201] usb 5-1: config 1 has no interface number 1 [ 496.271119][ T8201] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.291159][ T8201] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.301035][ T8201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.309343][ T8201] usb 5-1: Product: syz [ 496.313556][ T8201] usb 5-1: Manufacturer: syz [ 496.318307][ T8201] usb 5-1: SerialNumber: syz [ 496.348679][ T8191] usb 1-1: device descriptor read/64, error -71 [ 496.590379][ T8201] usb 5-1: USB disconnect, device number 59 [ 496.627002][ T8191] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 496.649960][T13058] udevd[13058]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.722657][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.736441][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.776383][ T8191] usb 1-1: device descriptor read/64, error -71 [ 496.894257][ T8191] usb usb1-port1: attempt power cycle [ 496.948992][T13957] pim6reg: entered allmulticast mode [ 497.216896][T13960] overlayfs: failed to resolve './file2': -2 [ 497.257517][ T8191] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 497.294651][ T8191] usb 1-1: device descriptor read/8, error -71 [ 497.568057][ T8191] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 497.618136][ T8191] usb 1-1: device descriptor read/8, error -71 [ 497.749790][ T8191] usb usb1-port1: unable to enumerate USB device [ 498.187418][T13988] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 498.228684][T13985] netlink: 'syz.1.2341': attribute type 4 has an invalid length. [ 498.237690][T13989] netlink: 'syz.1.2341': attribute type 4 has an invalid length. [ 498.391445][ T8191] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 498.555492][ T8191] usb 5-1: config 0 has an invalid interface number: 208 but max is 0 [ 498.564354][ T8191] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.574830][ T8191] usb 5-1: config 0 has no interface number 0 [ 498.580981][ T8191] usb 5-1: config 0 interface 208 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 498.591210][ T8191] usb 5-1: config 0 interface 208 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 498.601347][ T8191] usb 5-1: config 0 interface 208 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 498.611809][ T8191] usb 5-1: config 0 interface 208 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 498.624116][ T8191] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=ff.b1 [ 498.633317][ T8191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.641394][ T8191] usb 5-1: Product: syz [ 498.645560][ T8191] usb 5-1: Manufacturer: syz [ 498.652590][ T8191] usb 5-1: SerialNumber: syz [ 498.661558][ T8191] usb 5-1: config 0 descriptor?? [ 498.668789][ T8191] kvaser_usb 5-1:0.208: error -ENODEV: Cannot get usb endpoint(s) [ 498.887866][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.897917][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.908167][ T8191] usb 5-1: USB disconnect, device number 60 [ 499.141329][T14005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.153042][T14005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.247943][T14009] syz.2.2350: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 499.264455][T14009] CPU: 1 UID: 0 PID: 14009 Comm: syz.2.2350 Not tainted syzkaller #0 PREEMPT(full) [ 499.264484][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.264495][T14009] Call Trace: [ 499.264502][T14009] [ 499.264508][T14009] dump_stack_lvl+0x189/0x250 [ 499.264540][T14009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.264565][T14009] ? __pfx__printk+0x10/0x10 [ 499.264587][T14009] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 499.264609][T14009] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 499.264632][T14009] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 499.264655][T14009] warn_alloc+0x214/0x310 [ 499.264680][T14009] ? stack_depot_save_flags+0x40/0x860 [ 499.264701][T14009] ? __pfx_warn_alloc+0x10/0x10 [ 499.264719][T14009] ? kasan_save_track+0x3e/0x80 [ 499.264732][T14009] ? __kasan_kmalloc+0x93/0xb0 [ 499.264747][T14009] ? xsk_setsockopt+0x4dc/0x8d0 [ 499.264763][T14009] ? do_sock_setsockopt+0x17c/0x1b0 [ 499.264784][T14009] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 499.264804][T14009] ? do_syscall_64+0xfa/0xfa0 [ 499.264824][T14009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.264846][T14009] __vmalloc_node_range_noprof+0x125/0x12f0 [ 499.264885][T14009] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 499.264904][T14009] ? __kasan_kmalloc+0x93/0xb0 [ 499.264924][T14009] vmalloc_user_noprof+0xad/0xf0 [ 499.264940][T14009] ? xskq_create+0xbf/0x170 [ 499.264958][T14009] xskq_create+0xbf/0x170 [ 499.264979][T14009] xsk_init_queue+0xb0/0x110 [ 499.264998][T14009] xsk_setsockopt+0x4dc/0x8d0 [ 499.265017][T14009] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.265036][T14009] ? __pfx_aa_sk_perm+0x10/0x10 [ 499.265058][T14009] ? aa_sock_opt_perm+0xff/0x1b0 [ 499.265082][T14009] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 499.265103][T14009] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.265121][T14009] do_sock_setsockopt+0x17c/0x1b0 [ 499.265146][T14009] __x64_sys_setsockopt+0x13f/0x1b0 [ 499.265172][T14009] do_syscall_64+0xfa/0xfa0 [ 499.265192][T14009] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.265211][T14009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.265226][T14009] ? clear_bhb_loop+0x60/0xb0 [ 499.265244][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.265259][T14009] RIP: 0033:0x7f766078ebe9 [ 499.265272][T14009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.265286][T14009] RSP: 002b:00007f76615f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 499.265301][T14009] RAX: ffffffffffffffda RBX: 00007f76609c6090 RCX: 00007f766078ebe9 [ 499.265313][T14009] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 499.265321][T14009] RBP: 00007f7660811e19 R08: 0000000000000052 R09: 0000000000000000 [ 499.265331][T14009] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.265341][T14009] R13: 00007f76609c6128 R14: 00007f76609c6090 R15: 00007ffc70e99c48 [ 499.265365][T14009] [ 499.265383][T14009] Mem-Info: [ 499.430697][ T9786] block nbd4: Possible stuck request ffff88802595e000: control (read@0,1024B). Runtime 180 seconds [ 499.431099][ T9786] block nbd4: Possible stuck request ffff88802595e1c0: control (read@1024,1024B). Runtime 180 seconds [ 499.431131][ T9786] block nbd4: Possible stuck request ffff88802595e380: control (read@2048,1024B). Runtime 180 seconds [ 499.431160][ T9786] block nbd4: Possible stuck request ffff88802595e540: control (read@3072,1024B). Runtime 180 seconds [ 499.616111][T14009] active_anon:15298 inactive_anon:0 isolated_anon:0 [ 499.616111][T14009] active_file:7805 inactive_file:50309 isolated_file:0 [ 499.616111][T14009] unevictable:17107 dirty:137 writeback:0 [ 499.616111][T14009] slab_reclaimable:11488 slab_unreclaimable:103802 [ 499.616111][T14009] mapped:32349 shmem:9876 pagetables:1503 [ 499.616111][T14009] sec_pagetables:0 bounce:0 [ 499.616111][T14009] kernel_misc_reclaimable:0 [ 499.616111][T14009] free:1276933 free_pcp:16028 free_cma:0 [ 499.671050][T14009] Node 0 active_anon:61492kB inactive_anon:0kB active_file:31220kB inactive_file:201000kB unevictable:66892kB isolated(anon):0kB isolated(file):0kB mapped:129560kB dirty:520kB writeback:0kB shmem:38168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13804kB pagetables:5980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 499.703461][T14009] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:28kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 499.745810][T14009] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.790228][T14009] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 499.801596][T14009] Node 0 DMA32 free:1198860kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61844kB inactive_anon:0kB active_file:31220kB inactive_file:199936kB unevictable:66892kB writepending:520kB zspages:0kB present:3129332kB managed:2555400kB mlocked:0kB bounce:0kB free_pcp:40020kB local_pcp:18196kB free_cma:0kB [ 499.839264][T14009] lowmem_reserve[]: 0 0 1 1 1 [ 499.844147][T14009] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1064kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 499.878699][ T8188] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 499.892253][T14009] lowmem_reserve[]: 0 0 0 0 0 [ 499.912373][T14009] Node 1 Normal free:3893508kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:236kB unevictable:1536kB writepending:28kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23680kB local_pcp:10944kB free_cma:0kB [ 499.976861][T14009] lowmem_reserve[]: 0 0 0 0 0 [ 500.001503][T14009] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 500.015701][T14009] Node 0 DMA32: 1164*4kB (UM) 761*8kB (UME) 821*16kB (UME) 424*32kB (UME) 313*64kB (UME) 183*128kB (UM) 79*256kB (UME) 21*512kB (UM) 11*1024kB (UME) 13*2048kB (UM) 256*4096kB (UM) = 1198344kB [ 500.063268][T14009] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 500.087452][ T8188] usb 1-1: Using ep0 maxpacket: 32 [ 500.094715][T14009] Node 1 Normal: 207*4kB (UE) 57*8kB (UME) 54*16kB (UME) 171*32kB (UE) 61*64kB (UM) 14*128kB (UME) 7*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 4*2048kB (UME) 944*4096kB (UM) = 3893508kB [ 500.136692][T14009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.151848][ T8188] usb 1-1: config 1 interface 0 altsetting 199 bulk endpoint 0x1 has invalid maxpacket 64 [ 500.165166][T14009] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 500.174646][T14009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.184760][T14009] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 500.203378][ T8188] usb 1-1: config 1 interface 0 altsetting 199 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.216791][T14009] 85775 total pagecache pages [ 500.230447][ T8188] usb 1-1: config 1 interface 0 has no altsetting 0 [ 500.237344][T14009] 0 pages in swap cache [ 500.251982][T14009] Free swap = 124996kB [ 500.256303][T14009] Total swap = 124996kB [ 500.270019][T14009] 2097051 pages RAM [ 500.390834][T14009] 0 pages HighMem/MovableOnly [ 500.395696][T14009] 426303 pages reserved [ 500.399956][T14009] 0 pages cma reserved [ 500.643357][ T8188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 500.652734][ T8188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.661502][ T8188] usb 1-1: Product: syz [ 500.665717][ T8188] usb 1-1: Manufacturer: 盙栆彚艾쪛卺䲍⚦露㣕駔轶፠랂釨唕Ώ骸啵乓벞녭஫旊↙噟鈉㏨㨨栊㠹ffi眦鈨凇ꭙᙶ鵂വ嫦叒菁㥅ꗉ䖦ꈑݫࣱ䍑Ⳑ惢嗸켈 [ 500.684955][ T8188] usb 1-1: SerialNumber: syz [ 500.695139][T14002] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 500.702588][T14002] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 500.908264][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.917385][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.932277][ T8188] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 199 proto 1 vid 0x0525 pid 0xA4A8 [ 501.146317][ T8188] usb 1-1: USB disconnect, device number 50 [ 501.174425][ T8188] usblp0: removed [ 501.325169][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'. [ 501.376947][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 501.542673][T14050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.553816][T14050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.005815][ T8188] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 502.080862][ T8191] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 502.331749][ T8188] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 502.341045][ T8188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.349174][ T8188] usb 1-1: Product: syz [ 502.353459][ T8188] usb 1-1: Manufacturer: syz [ 502.358113][ T8188] usb 1-1: SerialNumber: syz [ 502.366732][ T8188] usb 1-1: config 0 descriptor?? [ 502.371901][T14062] Option ' ' to dns_resolver key: bad/missing value [ 502.390089][T14062] overlayfs: failed to resolve './file0': -2 [ 502.401221][ T8191] usb 5-1: Using ep0 maxpacket: 8 [ 502.408276][ T8191] usb 5-1: config 0 has an invalid interface number: 24 but max is 0 [ 502.416555][ T8191] usb 5-1: config 0 has no interface number 0 [ 502.426820][ T8191] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 502.436474][ T8191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.444753][ T8191] usb 5-1: Product: syz [ 502.448984][ T8191] usb 5-1: Manufacturer: syz [ 502.453651][ T8191] usb 5-1: SerialNumber: syz [ 502.462990][ T8191] usb 5-1: config 0 descriptor?? [ 502.607451][ T8188] hso 1-1:0.0: Failed to find BULK IN ep [ 502.618873][ T8188] usb-storage 1-1:0.0: USB Mass Storage device detected [ 502.693298][ T8191] pegasus 5-1:0.24: probe with driver pegasus failed with error -71 [ 502.714022][ T8191] usb 5-1: USB disconnect, device number 61 [ 502.821209][T14056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.832994][T14056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.684863][T14087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.693650][T14087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.366709][T14095] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 504.376187][T14095] overlayfs: missing 'lowerdir' [ 504.468947][T14098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.482376][T14098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.643328][T14101] could not allocate digest TFM handle poly1305-simd [ 504.871669][ T8191] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 504.963572][ T8201] usb 1-1: USB disconnect, device number 51 [ 505.050643][ T8191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.064929][ T8191] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.075991][ T8191] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 505.085114][ T8191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 505.109279][ T8191] usb 5-1: SerialNumber: syz [ 505.204378][T14113] sctp: [Deprecated]: syz.2.2383 (pid 14113) Use of int in maxseg socket option. [ 505.204378][T14113] Use struct sctp_assoc_value instead [ 505.352972][ T8191] usb 5-1: 0:2 : does not exist [ 505.369373][ T8191] usb 5-1: USB disconnect, device number 62 [ 505.390080][ T8201] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 505.393241][T13058] udevd[13058]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.568836][ T8201] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 505.578147][ T8201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.588618][ T8201] usb 1-1: config 0 descriptor?? [ 505.602415][ T8201] cp210x 1-1:0.0: cp210x converter detected [ 505.813394][ T8201] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 505.915106][T14122] overlay: Unknown parameter 'permit_directio' [ 506.044942][ T8201] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 506.081749][ T8201] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 506.099916][ T8201] usb 1-1: cp210x converter now attached to ttyUSB0 [ 506.133843][T14128] random: crng reseeded on system resumption [ 506.193779][T14128] overlayfs: failed to resolve './file0': -2 [ 506.286992][T14133] vivid-000: ================= START STATUS ================= [ 506.318412][T14133] vivid-000: Generate PTS: true [ 506.367111][T14133] vivid-000: Generate SCR: true [ 506.386849][T14133] tpg source WxH: 320x180 (R'G'B) [ 506.400202][T14133] tpg field: 1 [ 506.419290][T14133] tpg crop: (0,0)/320x180 [ 506.430930][T14133] tpg compose: (0,0)/320x180 [ 506.449431][T14133] tpg colorspace: 9 [ 506.461091][T14133] tpg transfer function: 7/2 [ 506.471633][T14133] tpg quantization: 1/2 [ 506.480185][T14133] tpg RGB range: 0/2 [ 506.484144][T14133] vivid-000: ================== END STATUS ================== [ 506.610685][T14144] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 506.634794][T14144] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 506.657891][T14144] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 506.851127][ T5181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.863119][ T5181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.873248][ T5181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.893278][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 506.905139][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.957047][ T9786] block nbd5: Possible stuck request ffff888025987000: control (read@0,1024B). Runtime 180 seconds [ 506.968157][ T9786] block nbd5: Possible stuck request ffff8880259871c0: control (read@1024,1024B). Runtime 180 seconds [ 506.979794][ T9786] block nbd5: Possible stuck request ffff888025987380: control (read@2048,1024B). Runtime 180 seconds [ 506.991508][ T9786] block nbd5: Possible stuck request ffff888025987540: control (read@3072,1024B). Runtime 180 seconds [ 507.180588][T14163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.203653][T14163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.388814][T14170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.431333][T14170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.477892][T14170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.507443][T14170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.590532][T14148] chnl_net:caif_netlink_parms(): no params data found [ 507.629362][T12215] syz_tun (unregistering): left allmulticast mode [ 507.768598][T14148] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.776454][T14148] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.784553][T14148] bridge_slave_0: entered allmulticast mode [ 507.793976][T14148] bridge_slave_0: entered promiscuous mode [ 507.803432][T14148] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.810748][T14148] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.822021][T14148] bridge_slave_1: entered allmulticast mode [ 507.830808][T14148] bridge_slave_1: entered promiscuous mode [ 507.872093][T14148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.885234][T14148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.932034][T14148] team0: Port device team_slave_0 added [ 507.941690][T14148] team0: Port device team_slave_1 added [ 507.978132][T14148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.985291][T14148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.012046][T14148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.025515][T14148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.038968][T14148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.068955][T14148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.182344][T14148] hsr_slave_0: entered promiscuous mode [ 508.205509][T14148] hsr_slave_1: entered promiscuous mode [ 508.227780][T14148] debugfs: 'hsr0' already exists in 'hsr' [ 508.249261][T14148] Cannot create hsr debugfs directory [ 508.258872][ T8201] usb 1-1: USB disconnect, device number 52 [ 508.284460][ T8201] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 508.322797][ T8201] cp210x 1-1:0.0: device disconnected [ 508.476708][T14188] vxcan1: entered allmulticast mode [ 508.698330][T14198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.716625][T14198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.801579][T14148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.910191][T14148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.009558][T14148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.088074][T14148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.095741][T12872] Bluetooth: hci0: command tx timeout [ 509.317577][T14148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.349025][T14201] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 509.349165][T14148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.391807][T14148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.410274][T14148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.596384][T14148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.646297][T14213] vhci_hcd vhci_hcd.0: port 0 already used [ 509.649821][T14148] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.671648][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.678945][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.707863][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.715092][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.747308][T14213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.766259][T14213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.788950][T14213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.799147][T14213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.999017][T14148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.059270][T14148] veth0_vlan: entered promiscuous mode [ 510.073958][T14148] veth1_vlan: entered promiscuous mode [ 510.109309][T14148] veth0_macvtap: entered promiscuous mode [ 510.119818][T14148] veth1_macvtap: entered promiscuous mode [ 510.144238][T14148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.163602][T14148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.179655][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.191823][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.202920][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.212594][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.317389][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.326367][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.370052][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.385583][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.387282][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.399504][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.725202][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.737518][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.321514][T12872] Bluetooth: hci0: command tx timeout [ 511.651111][T14251] sp0: Synchronizing with TNC [ 511.822666][ T981] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 511.951065][ T8201] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 512.004373][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 512.011599][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.023521][ T981] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 512.034483][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.045629][ T981] usb 5-1: config 0 descriptor?? [ 512.101245][ T5943] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 512.111342][ T8201] usb 3-1: Using ep0 maxpacket: 32 [ 512.120941][ T8201] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 512.131401][ T8201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.139587][ T8201] usb 3-1: Product: syz [ 512.144005][ T8201] usb 3-1: Manufacturer: syz [ 512.148695][ T8201] usb 3-1: SerialNumber: syz [ 512.157189][ T8201] usb 3-1: config 0 descriptor?? [ 512.167713][ T8201] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 512.271826][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 512.281010][ T5943] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 512.292582][ T5943] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 512.302598][ T5943] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 512.320538][ T5943] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.331373][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.339849][ T5943] usb 1-1: Product: syz [ 512.344055][ T5943] usb 1-1: Manufacturer: syz [ 512.352325][ T5943] usb 1-1: SerialNumber: syz [ 512.493332][ T981] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 512.798118][ T5943] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 512.823744][T14261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.834144][T14261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.843933][T14261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2422'. [ 512.859455][T14261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.869546][T14261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.917945][ T8189] usb 5-1: USB disconnect, device number 63 [ 513.034211][ T8201] gspca_stk1135: reg_w 0x5 err -71 [ 513.042223][ T8201] gspca_stk1135: serial bus timeout: status=0x00 [ 513.048658][ T8201] gspca_stk1135: Sensor write failed [ 513.054434][ T8201] gspca_stk1135: serial bus timeout: status=0x00 [ 513.060806][ T8201] gspca_stk1135: Sensor write failed [ 513.066623][ T8201] gspca_stk1135: serial bus timeout: status=0x00 [ 513.072993][ T8201] gspca_stk1135: Sensor read failed [ 513.079229][ T8201] gspca_stk1135: serial bus timeout: status=0x00 [ 513.086059][ T8201] gspca_stk1135: Sensor read failed [ 513.091297][ T8201] gspca_stk1135: Detected sensor type unknown (0x0) [ 513.098150][ T8201] gspca_stk1135: serial bus timeout: status=0x00 [ 513.104579][ T8201] gspca_stk1135: Sensor read failed [ 513.110215][ T8201] gspca_stk1135: serial bus timeout: status=0x00 [ 513.118203][ T8201] gspca_stk1135: Sensor read failed [ 513.123480][ T8201] gspca_stk1135: serial bus timeout: status=0x00 [ 513.129943][ T8201] gspca_stk1135: Sensor write failed [ 513.135284][ T8201] gspca_stk1135: serial bus timeout: status=0x00 [ 513.142662][ T8201] gspca_stk1135: Sensor write failed [ 513.148078][ T8201] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 513.164528][ T8201] usb 3-1: USB disconnect, device number 96 [ 513.555238][T12872] Bluetooth: hci0: command tx timeout [ 514.035320][ T5943] usb 1-1: USB disconnect, device number 53 [ 514.111537][T13447] udevd[13447]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.271494][ T8202] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 514.410640][ T8202] usb 5-1: device descriptor read/64, error -71 [ 514.413363][ T8189] usb 2-1: USB disconnect, device number 33 [ 514.424741][T13842] vhci_hcd: connection reset by peer [ 514.437502][ T1332] vhci_hcd: stop threads [ 514.450844][ T1332] vhci_hcd: release socket [ 514.471526][ T1332] vhci_hcd: disconnect device [ 514.540588][ T8203] vhci_hcd: vhci_device speed not set [ 514.667456][ T8202] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 514.827522][ T8202] usb 5-1: device descriptor read/64, error -71 [ 514.966922][ T8202] usb usb5-port1: attempt power cycle [ 515.001305][ T5181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 515.012485][ T5181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 515.019922][ T8201] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 515.024100][ T5181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.039606][ T5181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.047669][ T5181] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.172766][ T31] INFO: task syz.3.1563:11323 blocked for more than 143 seconds. [ 515.182003][ T31] Not tainted syzkaller #0 [ 515.186995][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.196431][ T8201] usb 1-1: unable to get BOS descriptor or descriptor too short [ 515.197651][ T8201] usb 1-1: config 7 has an invalid interface number: 3 but max is 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 515.205857][ T31] task:syz.3.1563 state:D stack:25928 pid:11323 tgid:11321 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 515.225101][ T31] Call Trace: [ 515.228419][ T31] [ 515.231378][ T31] __schedule+0x1798/0x4cc0 [ 515.236153][ T31] ? __pfx___schedule+0x10/0x10 [ 515.239740][ T8201] usb 1-1: config 7 has an invalid interface number: 232 but max is 1 [ 515.241078][ T31] ? schedule+0x91/0x360 [ 515.269659][ T8201] usb 1-1: config 7 has no interface number 0 [ 515.275233][ T31] schedule+0x165/0x360 [ 515.275809][ T8201] usb 1-1: config 7 has no interface number 1 [ 515.275868][ T8201] usb 1-1: config 7 interface 3 has no altsetting 0 [ 515.286043][ T31] schedule_preempt_disabled+0x13/0x30 [ 515.304064][ T31] __mutex_lock+0x7e6/0x1350 [ 515.309321][ T31] ? __mutex_lock+0x5bb/0x1350 [ 515.314352][ T31] ? bdev_open+0xe0/0xd30 [ 515.318824][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 515.324095][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 515.330367][ T31] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 515.340853][ T8202] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 515.341625][ T31] ? disk_block_events+0xab/0x120 [ 515.362108][ T8201] usb 1-1: config 7 interface 232 has no altsetting 0 [ 515.391501][ T31] ? bdev_open+0xbe/0xd30 [ 515.416024][ T8201] usb 1-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=6f.b0 [ 515.425134][ T8201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.426231][ T31] bdev_open+0xe0/0xd30 [ 515.437617][ T8202] usb 5-1: device descriptor read/8, error -71 [ 515.458547][ T8201] usb 1-1: Product: syz [ 515.462778][ T8201] usb 1-1: Manufacturer: syz [ 515.467399][ T8201] usb 1-1: SerialNumber: syz [ 515.507742][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 515.556470][ T31] setup_bdev_super+0x5a/0x5b0 [ 515.561349][ T31] get_tree_bdev_flags+0x366/0x4d0 [ 515.597322][ T31] ? __pfx_hfs_fill_super+0x10/0x10 [ 515.602620][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 515.651103][ T31] vfs_get_tree+0x8f/0x2b0 [ 515.655619][ T31] do_new_mount+0x302/0xa10 [ 515.660172][ T31] ? apparmor_capable+0x137/0x1b0 [ 515.683430][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 515.688563][ T31] ? ns_capable+0x8a/0xf0 [ 515.692961][ T31] ? kmem_cache_free+0x19a/0x690 [ 515.693783][ T8202] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 515.718344][ T31] __se_sys_mount+0x313/0x410 [ 515.724773][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 515.736405][ T31] ? do_syscall_64+0xbe/0xfa0 [ 515.742797][ T31] ? __x64_sys_mount+0x20/0xc0 [ 515.758882][ T31] do_syscall_64+0xfa/0xfa0 [ 515.763487][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.777637][ T8201] usb 1-1: unknown number of interfaces: 2 [ 515.779137][ T5181] Bluetooth: hci0: command tx timeout [ 515.800598][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.806753][ T31] ? clear_bhb_loop+0x60/0xb0 [ 515.819564][ T8201] usb 1-1: USB disconnect, device number 54 [ 515.821919][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.831536][ T31] RIP: 0033:0x7f0ede78ebe9 [ 515.836377][ T31] RSP: 002b:00007f0edf6ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 515.845188][ T31] RAX: ffffffffffffffda RBX: 00007f0ede9c5fa0 RCX: 00007f0ede78ebe9 [ 515.860183][ T31] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 515.868510][ T31] RBP: 00007f0ede811e19 R08: 0000000000000000 R09: 0000000000000000 [ 515.876588][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.884612][ T31] R13: 00007f0ede9c6038 R14: 00007f0ede9c5fa0 R15: 00007ffca28708e8 [ 515.892755][ T31] [ 515.895899][ T31] [ 515.895899][ T31] Showing all locks held in the system: [ 515.905778][ T31] 1 lock held by khungtaskd/31: [ 515.910772][ T31] #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 515.927719][ T31] 1 lock held by khugepaged/39: [ 515.940006][ T31] 5 locks held by kworker/u8:5/78: [ 515.950351][ T31] 3 locks held by kworker/0:2/981: [ 515.955551][ T31] #0: ffff88801a871548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 515.971033][ T31] #1: ffffc9000372fba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 515.986521][ T31] #2: ffffffff8e541ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 515.997737][ T31] 2 locks held by kworker/u8:6/1332: [ 516.004283][ T31] 2 locks held by getty/5623: [ 516.014469][ T31] #0: ffff888033a5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 516.024423][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 516.057171][ T31] 1 lock held by udevd/5866: [ 516.067670][ T31] #0: ffff888025869358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 516.107640][ T31] 1 lock held by udevd/6000: [ 516.114049][ T31] #0: ffff888025845358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 516.142800][ T31] 1 lock held by udevd/6021: [ 516.147636][ T31] #0: ffff888025843358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 516.185537][ T31] 3 locks held by kworker/1:9/8188: [ 516.190814][ T31] 5 locks held by kworker/0:16/8202: [ 516.228494][ T31] #0: ffff88801e29e548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 516.260405][ T31] #1: ffffc90018697ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 516.292412][ T31] #2: ffff888144f4f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 516.301406][ T31] #3: ffff888028145518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 516.353101][ T31] #4: ffff888027f99468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 516.377980][ T31] 2 locks held by syz.3.1563/11323: [ 516.383270][ T31] #0: ffff88802fed40e0 (&type->s_umount_key#78/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930 [ 516.420835][ T31] #1: ffff888025843358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 516.430195][ T31] 2 locks held by syz-executor/12870: [ 516.464313][ T31] #0: ffff88807bec8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 516.484983][ T31] #1: ffff88807bec80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 516.494771][ T31] 1 lock held by syz-executor/14148: [ 516.508643][ T31] 5 locks held by syz.4.2429/14282: [ 516.513990][ T31] #0: ffff88807d044dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 516.529649][ T31] #1: ffff88807d0440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 516.542855][ T31] #2: ffffffff8fab6728 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 516.553146][ T31] #3: ffff88801199b338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 516.562690][ T31] #4: ffffffff8e541ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 516.574097][ T31] 3 locks held by syz-executor/14291: [ 516.579550][ T31] #0: ffff888057a8cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 516.589709][ T31] #1: ffff888057a8c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 516.599644][ T31] #2: ffffffff8fab6728 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 516.609893][ T31] [ 516.622358][ T31] ============================================= [ 516.622358][ T31] [ 516.673162][ T31] NMI backtrace for cpu 1 [ 516.673186][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 516.673209][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.673221][ T31] Call Trace: [ 516.673230][ T31] [ 516.673238][ T31] dump_stack_lvl+0x189/0x250 [ 516.673279][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.673310][ T31] ? __pfx__printk+0x10/0x10 [ 516.673353][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 516.673377][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 516.673403][ T31] ? __pfx__printk+0x10/0x10 [ 516.673437][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.673460][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 516.673486][ T31] watchdog+0xf60/0xfa0 [ 516.673512][ T31] ? watchdog+0x1e2/0xfa0 [ 516.673537][ T31] kthread+0x711/0x8a0 [ 516.673569][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.673589][ T31] ? __pfx_kthread+0x10/0x10 [ 516.673621][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.673646][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.673670][ T31] ? __pfx_kthread+0x10/0x10 [ 516.673698][ T31] ret_from_fork+0x47c/0x820 [ 516.673724][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 516.673755][ T31] ? __switch_to_asm+0x39/0x70 [ 516.673774][ T31] ? __switch_to_asm+0x33/0x70 [ 516.673792][ T31] ? __pfx_kthread+0x10/0x10 [ 516.673822][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.673863][ T31] [ 516.673871][ T31] Sending NMI from CPU 1 to CPUs 0: [ 516.823798][ C0] NMI backtrace for cpu 0 [ 516.823817][ C0] CPU: 0 UID: 0 PID: 78 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 516.823837][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.823849][ C0] Workqueue: bat_events batadv_nc_worker [ 516.823875][ C0] RIP: 0010:check_preemption_disabled+0x3/0x120 [ 516.823908][ C0] Code: 04 8c 48 c7 c6 60 eb 04 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 05 ce 04 5d 07 48 89 44 24 08 65 8b [ 516.823924][ C0] RSP: 0018:ffffc900021df870 EFLAGS: 00000046 [ 516.823938][ C0] RAX: 0000000080000201 RBX: ffffffff81852aae RCX: 0000000000000000 [ 516.823950][ C0] RDX: 0000000000000000 RSI: ffffffff8dcecb5a RDI: ffffffff8c04eb80 [ 516.823962][ C0] RBP: ffffc900021df958 R08: ffff88807abed803 R09: 1ffff1100f57db00 [ 516.823975][ C0] R10: dffffc0000000000 R11: ffffed100f57db01 R12: ffffffff8b579f98 [ 516.823988][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff9200043bf18 [ 516.824003][ C0] FS: 0000000000000000(0000) GS:ffff8881257b3000(0000) knlGS:0000000000000000 [ 516.824018][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.824030][ C0] CR2: 00007f2dc628db38 CR3: 000000000e338000 CR4: 00000000003526f0 [ 516.824047][ C0] Call Trace: [ 516.824055][ C0] [ 516.824063][ C0] lockdep_hardirqs_off+0xab/0x110 [ 516.824087][ C0] ? __local_bh_enable_ip+0xce/0x1c0 [ 516.824108][ C0] trace_hardirqs_off+0x12/0x40 [ 516.824126][ C0] __local_bh_enable_ip+0xce/0x1c0 [ 516.824146][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 516.824168][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 516.824194][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 516.824213][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 516.824237][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 516.824265][ C0] batadv_nc_worker+0x369/0x610 [ 516.824285][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 516.824307][ C0] process_scheduled_works+0xae1/0x17b0 [ 516.824341][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.824376][ C0] worker_thread+0x8a0/0xda0 [ 516.824410][ C0] kthread+0x711/0x8a0 [ 516.824436][ C0] ? __pfx_worker_thread+0x10/0x10 [ 516.824456][ C0] ? __pfx_kthread+0x10/0x10 [ 516.824481][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.824502][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.824523][ C0] ? __pfx_kthread+0x10/0x10 [ 516.824547][ C0] ret_from_fork+0x47c/0x820 [ 516.824568][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 516.824591][ C0] ? __switch_to_asm+0x39/0x70 [ 516.824609][ C0] ? __switch_to_asm+0x33/0x70 [ 516.824625][ C0] ? __pfx_kthread+0x10/0x10 [ 516.824649][ C0] ret_from_fork_asm+0x1a/0x30 [ 516.824676][ C0] [ 516.826048][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 517.099920][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 517.109049][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.119144][ T31] Call Trace: [ 517.122448][ T31] [ 517.125387][ T31] dump_stack_lvl+0x99/0x250 [ 517.130006][ T31] ? __asan_memcpy+0x40/0x70 [ 517.134636][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.139873][ T31] ? __pfx__printk+0x10/0x10 [ 517.144502][ T31] vpanic+0x237/0x6d0 [ 517.148504][ T31] ? __pfx_vpanic+0x10/0x10 [ 517.153030][ T31] ? preempt_schedule_common+0x83/0xd0 [ 517.158514][ T31] panic+0xb9/0xc0 [ 517.162255][ T31] ? __pfx_panic+0x10/0x10 [ 517.166692][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 517.172106][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 517.178288][ T31] watchdog+0xf9f/0xfa0 [ 517.182464][ T31] ? watchdog+0x1e2/0xfa0 [ 517.186815][ T31] kthread+0x711/0x8a0 [ 517.190911][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.195604][ T31] ? __pfx_kthread+0x10/0x10 [ 517.200220][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.205437][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.210651][ T31] ? __pfx_kthread+0x10/0x10 [ 517.215267][ T31] ret_from_fork+0x47c/0x820 [ 517.219876][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 517.225011][ T31] ? __switch_to_asm+0x39/0x70 [ 517.229791][ T31] ? __switch_to_asm+0x33/0x70 [ 517.234565][ T31] ? __pfx_kthread+0x10/0x10 [ 517.239180][ T31] ret_from_fork_asm+0x1a/0x30 [ 517.243980][ T31] [ 517.247373][ T31] Kernel Offset: disabled [ 517.251704][ T31] Rebooting in 86400 seconds..