last executing test programs: 3m48.825873982s ago: executing program 3 (id=471): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f00000003c0)=@ethtool_coalesce={0xe, 0x40, 0x6, 0x2, 0x80000001, 0x2, 0x3, 0x4, 0x83, 0x100, 0x4, 0x7ffffffe, 0x6d, 0x1, 0x9, 0xe18, 0x9, 0x2, 0x4, 0x1, 0x7fff, 0x7, 0x7}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x3, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000580)={r3, 0x1, 0x6, @local}, 0x10) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x30, r4, 0x0) fstat(r1, &(0x7f0000000440)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000140)={'syz_tun\x00', 0x9}) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) r6 = timerfd_create(0x8, 0x80800) r7 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) timerfd_settime(r6, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x200000000000009f, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000180)={r10, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 3m47.805650917s ago: executing program 3 (id=477): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$inet6(0xa, 0x802, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0xe4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000024030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 3m47.456057121s ago: executing program 3 (id=479): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 3m47.349128683s ago: executing program 3 (id=480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000190000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000003300000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000048000400656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686131"], 0x184}}, 0x0) 3m47.172808662s ago: executing program 3 (id=483): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000030000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3m46.743715204s ago: executing program 3 (id=485): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r0, 0x11, 0x0, 0x400000000008) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x725e65a4, 0x4) sendto$inet6(r1, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x1061) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000c5485817b19dc902d8621870dcd9eaa1a24410860517d9506f10e84b3f695e4d3619ee6bf9c91e8e843c47826cfcf8d583a95d6f6e74c7c95d27acd343214926047c84890008504396aa58b2262b79bfd52c7e31d626bb2772e508622eb0f46861af6909ea28a671ee37bccc49b7e6f6893ca8400cbbe22fbc58f5436915", @ANYRES16=r4, @ANYBLOB="050723bd700000dcdf25040000001c00068008000600a002000004000200080001002700000004000200"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_clone3(&(0x7f0000000200)={0x4001000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES16=r7]) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x0, &(0x7f0000000300)=0x7, 0x4) syz_usb_connect(0x3, 0x36, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='soR\xb4ce', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) mprotect(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000004) 3m31.702764685s ago: executing program 32 (id=485): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r0, 0x11, 0x0, 0x400000000008) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x725e65a4, 0x4) sendto$inet6(r1, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x1061) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000c5485817b19dc902d8621870dcd9eaa1a24410860517d9506f10e84b3f695e4d3619ee6bf9c91e8e843c47826cfcf8d583a95d6f6e74c7c95d27acd343214926047c84890008504396aa58b2262b79bfd52c7e31d626bb2772e508622eb0f46861af6909ea28a671ee37bccc49b7e6f6893ca8400cbbe22fbc58f5436915", @ANYRES16=r4, @ANYBLOB="050723bd700000dcdf25040000001c00068008000600a002000004000200080001002700000004000200"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_clone3(&(0x7f0000000200)={0x4001000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES16=r7]) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x0, &(0x7f0000000300)=0x7, 0x4) syz_usb_connect(0x3, 0x36, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='soR\xb4ce', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) mprotect(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000004) 2m37.65220628s ago: executing program 0 (id=796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000330000000000000000000001"], 0xffe) 2m37.179773075s ago: executing program 0 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2], 0x6f4}, 0x1, 0x0, 0x0, 0xf4060000}, 0x0) 2m36.960188665s ago: executing program 0 (id=801): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$fuse(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x822004, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@audit}, {@measure}, {@uid_lt={'uid<', r2}}, {@dont_appraise}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x90004, &(0x7f0000000580)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) chdir(&(0x7f0000001180)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x102}}, 0x28}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/185) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x152) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="0021830000008321157be8ecdaf73bfe2abf87598c77914d26bdbe730cf951f848987bba107f2d0f9e8d4162b2da81d9142bee630d51265123b86cf2a84a1f12b4f58933252f6409f33cbe3906b0c8d485f61fec0dd88d0a83129d53aa310fef1f0e83ef8d46902d4ee1892152c22226c5cdce1d899d5ccf061a47342576c36c2ad4d6b47a01ae7d1aebd2780ec7d116953215b657fd9c12cf2edca62128b18ddcdc1edb22310d27533f921bb70b3bd08a92773072889a5c51969f6cac12e978b141cf8727be3c5da448b4bfb797e09a69afe9173709ca9fa3e50bb46a400992ab012fc05c2dba7090981c627c465d2218"], 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x100ed94, 0x4000, 0x0, 0x60b}, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) fsync(r3) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, 0xffffffffffffffff, 0x7dfff000) 2m33.760537801s ago: executing program 0 (id=811): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e000000010000000041"}}], 0x1c) 2m33.567712936s ago: executing program 0 (id=812): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@any, 0x7}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000003c0)={&(0x7f0000004000)=[0xfffffffd, 0x101, 0x238, 0x40, 0x7, 0x2, 0x4, 0x9, 0x0, 0x2, 0x7, 0x81, 0x3, 0x3, 0x7, 0x2, 0x5, 0x4, 0x60, 0x7, 0x200, 0xa3f, 0x9a, 0x7, 0x9, 0x8, 0x9, 0x1000, 0x6, 0x0, 0x2e, 0x3, 0x7f, 0x7, 0x6c9d3c45, 0x401, 0x7, 0xfffffff9, 0x8, 0x7d, 0x5, 0x24f4, 0x1000, 0x6, 0xe, 0x7fffffff, 0x1ff, 0x2, 0x3ea8, 0xb32, 0x0, 0x3, 0x6, 0x101, 0x6, 0x4, 0x3, 0x7f, 0xb7, 0x7, 0x5, 0x401, 0x9, 0x5, 0x5, 0x2, 0xff, 0x0, 0x3, 0x5, 0xfffffff7, 0x8, 0x2, 0xe8, 0x1, 0x6, 0xcef3, 0xfffffff9, 0x1, 0x5, 0x1000, 0x9, 0x400, 0x8f, 0x0, 0xcabc, 0x7, 0x5, 0x6, 0x6, 0x2, 0xd34, 0x265, 0x3, 0x8, 0x49, 0x8, 0x1000, 0x0, 0x5, 0x4, 0xaf, 0xffffffff, 0x9, 0x5, 0x80000000, 0x9, 0x6, 0x97df, 0x6, 0x800, 0x7ff, 0x18ff, 0x3, 0x3, 0x8, 0xfff, 0xfb, 0x3, 0x5, 0x4, 0x1, 0xffff, 0x8, 0x3, 0x3, 0x7db, 0x7f, 0x6, 0x2, 0x8, 0x3ff, 0xfd, 0x9, 0x4, 0x3, 0x6, 0x3, 0x2, 0xfffffffa, 0x4, 0x339, 0xfffffff0, 0x3, 0x9, 0x1, 0xf, 0x6, 0x800, 0xc791, 0x6, 0xfd, 0x1, 0x10040000, 0x3, 0x8, 0x9, 0x101, 0x0, 0x6, 0x5, 0x7fffffff, 0x4, 0x5, 0x2, 0x6, 0x4, 0x80, 0x4, 0x0, 0x8, 0x6, 0x0, 0x43df, 0x1, 0x54eb, 0x80, 0x80000000, 0x5, 0xfffffffd, 0x9, 0x9, 0x7, 0x5, 0x10, 0x8, 0xfffffff7, 0x0, 0x8, 0xc, 0x8, 0x6, 0x800, 0x6, 0x3, 0x3ff, 0x2, 0x3, 0x2, 0x3, 0x0, 0x4e, 0x5, 0xffff, 0x6, 0xc3, 0x0, 0x4, 0xe3, 0x9, 0x4, 0xfff, 0x5, 0x10000, 0x2, 0xcff, 0x6, 0x4, 0x100, 0x3, 0x6, 0x8, 0xfffffff7, 0x0, 0x200, 0x7f, 0x5, 0x42, 0x3, 0x6, 0x411af549, 0x0, 0x22ce, 0x0, 0x6, 0x2428, 0x1, 0x3, 0x9, 0x8001, 0x81, 0x7, 0x3, 0x4, 0x10000000, 0x6, 0x8, 0x7, 0xc8, 0x401, 0xc9f3, 0xd6, 0x800, 0x4, 0x1, 0xf1b, 0x2, 0x3ae44413, 0x534c, 0x2, 0x28, 0x80000000, 0xffffffff, 0x200, 0xfffff025, 0x3, 0x6, 0x0, 0xfff, 0x6, 0x4, 0x9, 0x5c7115a2, 0x10, 0x6, 0x3, 0x6, 0x0, 0x6, 0x81, 0x8, 0x1, 0x3, 0x4, 0x9, 0x1, 0x4, 0x4, 0x4, 0x101, 0x3, 0x4730, 0x7, 0x5, 0x6e87, 0x7, 0x2, 0x8, 0xffffffff, 0xd, 0x8, 0x8000, 0x4, 0x8, 0xa, 0xfffffff9, 0x8, 0x9, 0x2, 0x8, 0x2, 0x0, 0xcdb2, 0x800, 0x1, 0x7, 0xdd8f, 0x7f0a, 0x5, 0x3, 0x80000001, 0x7fffffff, 0x5, 0x2, 0x1, 0x80000000, 0x3ff, 0x9, 0x1, 0x81, 0x4, 0x1, 0x7, 0x8, 0x2, 0x8, 0x1, 0x8, 0x0, 0x2, 0x4, 0x0, 0x6, 0x4, 0xbb0e, 0x5022, 0x4, 0xfffffffd, 0xe, 0x7, 0x2, 0x6, 0x3, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x800, 0x7f5, 0x3ff, 0xf1, 0x4, 0x7, 0x9fc, 0x80000001, 0xfffffffb, 0x1, 0x1, 0x3, 0x5, 0x7, 0x4, 0x8, 0x1, 0x8, 0x0, 0xb, 0x8001, 0x3, 0x0, 0xa, 0x6a1f, 0x0, 0x22, 0x9, 0x6c000000, 0x6, 0x80, 0x1, 0x6, 0x40, 0x5cb2, 0x8, 0x2, 0x9, 0xffff7e5c, 0x800, 0x120, 0x7fff, 0x8, 0x401, 0x29, 0x80000000, 0x1, 0x0, 0x8, 0x8, 0xffffe110, 0x5, 0xef0, 0x6, 0x9, 0x9845, 0xe, 0x170, 0x5, 0x3, 0x5, 0x7ad, 0x3, 0x9, 0x5, 0x4, 0x0, 0x6, 0x5d, 0x7, 0x940, 0xebc, 0xffffff20, 0x800, 0x4, 0x0, 0x203b, 0x0, 0x9, 0x7, 0x7, 0x63b, 0xe, 0x7ff, 0x5bf9, 0x9, 0x5, 0xf3, 0x200, 0x0, 0x7, 0xc000, 0x8, 0x7, 0x50, 0x4da, 0xd, 0x3, 0x7, 0x50d, 0x3, 0x1, 0x1, 0x7, 0x2c16f915, 0x8001, 0x800, 0x1, 0x4, 0x2, 0xa, 0x5d, 0x6, 0xb, 0x0, 0x6, 0x6, 0x6, 0x80000001, 0x7b, 0x400, 0x7, 0xe0, 0x3, 0x9d8, 0x2, 0x5, 0x9, 0x1, 0x5, 0x0, 0xfffffe00, 0x5, 0x0, 0xd, 0xfffffff4, 0xd2, 0x7, 0x80000001, 0x80000000, 0x4, 0x5, 0xffffffe9, 0x1ff, 0xbc, 0x1, 0x200, 0x6, 0x5, 0x9, 0x6, 0xfffffffb, 0x805, 0x2, 0xffffffff, 0xff, 0x3, 0xf, 0x0, 0x3, 0x8, 0x6, 0x6, 0x100000, 0xfffffff3, 0x6, 0x6, 0x28, 0x8, 0x5, 0x0, 0xc0000000, 0x401, 0x1, 0x2, 0x7, 0x4, 0x8, 0xb, 0x9, 0x1, 0x5, 0xffffffff, 0x3efc, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x6, 0xfe, 0x5, 0x7, 0x112b, 0xff, 0x3, 0x20, 0x1, 0x36a, 0x1, 0xa, 0x400, 0x2afcad61, 0x0, 0x4, 0xccfc, 0x100000, 0x9, 0x800, 0xa, 0x7, 0x2, 0x1, 0x7, 0x4, 0xe, 0x1000, 0x3, 0x1, 0x9, 0xacf, 0x6, 0x3, 0x800, 0x8, 0x9338, 0x7, 0x9, 0x9, 0x71, 0x3, 0x1ff, 0x80, 0xd98b, 0x8, 0x2, 0x1, 0x5, 0x4, 0x5, 0x5, 0x3, 0x9, 0x2, 0x0, 0x101, 0x66, 0x6, 0x2, 0x7, 0xfffffffc, 0x8, 0x40, 0x1, 0x4, 0x5, 0x2, 0x9, 0xc1cc, 0x3ff, 0x2, 0x8, 0x4b, 0x3, 0x0, 0x40, 0xd, 0x0, 0x3571, 0x6, 0x0, 0x0, 0x8469, 0x3, 0x80000000, 0x0, 0x7e1, 0x4, 0x2b, 0x6, 0xf7d9, 0x9, 0x5, 0xc00d, 0x3, 0x3, 0x80000000, 0xe600, 0x7, 0xc, 0x80000001, 0x401, 0x4, 0x5, 0x3, 0x9, 0xf3f, 0x1, 0xfffffffe, 0x9, 0x1, 0x3, 0x4, 0x2, 0x84, 0x448f, 0x0, 0x8, 0x100, 0x9, 0x7992, 0x4, 0x9, 0x4, 0x3, 0x0, 0x5, 0x9, 0x1, 0x8000, 0x1ff, 0xffff1364, 0x80000001, 0x67, 0xc, 0xdf2, 0x4, 0x7, 0x8, 0x756, 0x3, 0xfffffc00, 0xc9, 0x7, 0xce, 0x8, 0x0, 0x6, 0x0, 0x9, 0x8, 0x8, 0x9, 0x1, 0x6, 0xa7, 0x10000, 0xfffff801, 0x6, 0x31fe, 0x28, 0x10, 0x8020000, 0x2, 0x1, 0x2, 0x1, 0x8, 0x1, 0xecc, 0x3, 0x0, 0x4, 0x6, 0x6, 0x80, 0xfcb, 0x7, 0x9, 0x7, 0xe, 0x1000, 0x3, 0xffffffff, 0xa4, 0x0, 0xffffffff, 0x8, 0x0, 0x40, 0x1, 0xfffffff8, 0x0, 0x2, 0x7, 0x81, 0x400, 0x2, 0xa255, 0x1, 0xbd1e, 0xc, 0x8, 0x401, 0x9, 0x0, 0x400, 0x1, 0x700, 0x9, 0x1, 0x0, 0x7, 0x80000001, 0x4, 0x4, 0x0, 0x400, 0xfff, 0x0, 0x5cb, 0x2, 0x9, 0x1, 0x3, 0x7fffffff, 0xfffffffe, 0x6, 0x5, 0xfffffffd, 0x80000001, 0x2, 0x7fffffff, 0x1ff, 0x101, 0x77960, 0xbc0, 0x81, 0x800, 0xfff, 0x7f, 0x7ff, 0x5, 0x6, 0x0, 0x7, 0x81, 0x0, 0x0, 0x9, 0xe, 0xfffffffd, 0xf1fb, 0x1, 0xe3c, 0x3, 0x9, 0xc5c9ca61, 0x8, 0x3, 0xfffffff9, 0xc8aa, 0xb2, 0x3ff, 0xd9, 0x81, 0xffff, 0xffff, 0xfffffc00, 0xadf, 0x5, 0x6, 0x4, 0x6, 0x7, 0x6, 0x2, 0x2, 0xd6, 0x8, 0x5b0, 0x2, 0x8000, 0x7, 0x6, 0x0, 0x1, 0x2, 0x0, 0x39d, 0x9, 0x3ff, 0x8000, 0xb, 0x5, 0x7, 0x3, 0x8, 0x19, 0xfffffff0, 0x7, 0x9, 0xb5a, 0x101, 0x1, 0x3, 0x10000, 0x4, 0xe, 0x3ff, 0xe, 0x3, 0x0, 0x7ff, 0x1, 0x404d, 0x6, 0x3ff, 0x0, 0xce, 0x6, 0x2, 0x4, 0x0, 0x3, 0x7, 0x81, 0x6, 0x8, 0xb54, 0x9, 0x31, 0x80000001, 0x3ff, 0x7, 0x9, 0x400, 0x1, 0xe7, 0x8, 0x8001, 0x2, 0x7, 0x5, 0x9, 0x7ff, 0x6, 0x3, 0x80000001, 0x800, 0x3c8, 0x43b, 0x101, 0x2, 0x7, 0x7f, 0x7, 0x7f, 0x10000, 0x9, 0xd31, 0xfb27, 0x3, 0x3, 0x3, 0x1, 0x7, 0x9, 0xd63, 0x4, 0x80000001, 0x10001, 0x6, 0xa, 0x5, 0x8, 0x6, 0x7, 0x9, 0x526, 0x5, 0x8, 0x2, 0x8, 0x2, 0x53, 0xa, 0xc9ad, 0x8, 0xf3, 0x80, 0x9, 0x9, 0x3, 0x7ff, 0x1, 0x1ff, 0x0, 0x3bb, 0x3, 0x1, 0x2, 0x2, 0x4, 0x140, 0xb, 0x0, 0x0, 0x3, 0x6, 0x1, 0x90a0, 0x2, 0x1b6, 0x0, 0x1, 0xc6bd, 0x3, 0xfffffffc, 0x1, 0x295d, 0x7, 0x96, 0x3, 0x3, 0x9, 0x5, 0x2, 0xe7c, 0x3, 0x5, 0x6, 0x8, 0x1, 0x1, 0x3, 0x9, 0x3, 0x6, 0x8, 0x600, 0x8, 0x0, 0x2, 0x5, 0x8, 0x7, 0x6, 0x720b, 0x10, 0x1, 0x5, 0x3, 0x3, 0x8000, 0xfffffffe, 0x7, 0x7, 0x6f, 0x9, 0xb, 0x3, 0xc, 0x3326c296, 0x2, 0xcd, 0x5, 0x2, 0x7, 0xffff, 0x80, 0x2, 0x4, 0xf4f1], 0x6, 0x400}) 2m33.370152281s ago: executing program 0 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r1, 0x309, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001080), 0x420083, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r4, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x60, r6, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5e}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) clock_settime(0xcd1f6467c1540c16, 0x0) r7 = semget$private(0x0, 0x2, 0x48e) semtimedop(r7, &(0x7f0000000880)=[{0x3, 0x2, 0x1800}], 0x1, 0x0) semctl$SEM_STAT_ANY(r7, 0x4, 0x14, &(0x7f0000000080)=""/4096) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000001280)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 2m20.804285291s ago: executing program 4 (id=869): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000640)={0x0, 0x1, 0x4, "31bf360b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x21, 0xcd, {0xcd, 0xa, "eab2671171760886d8e207a4c8fa55611af554a5e7573e9be99d445b7b834170abbfa0e106edf0252ff524c4ba639d290b1063229eb8e2dabe040132fbadf6dd9159eaba3f12663f5ba4dca7f957f259fa02b3e438dffbea25c76a41c639de9005037b6c7c5af1fff172df7c24dc3e20bd0ae8b8c7c347e49b6fd40e27f415736c54dd1d31e4a99e02c56707826a0463c352531ea05847a8b26a7a52be0f3acd1a468075a1609552dd97ade91f167c39cb46c2bdecd06759d958cfe6f815a30b1e42d13d5c05d7a4bee41e"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000380)={0x40, 0x30, 0x70, "376b621253befcfd5d47f33151907bc9b5e687f38131fc04d0453f542a2809fa2f302550583b5d5eff8e74066d970e1820ccea5678898856f24256d3ed29ecbd4a66639bcf583d993823aa761349895f6dee5497fc46cb30a30f31a3c98197c6b1257838b0d38bdcfef7f9208b78f2c6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000440)={0x20, 0x0, 0x43, {0x41, "140328afed9e27acc7bd9f38d20d64ebc8a88684707a2d7543b7fcec5d3c7514dba054e299eecf2134d0cfc1d6a21d4c9d9786eb11f1d4da8c5f7751538dc4f583"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x8}}) 2m18.447913704s ago: executing program 4 (id=878): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100000003e8"}}], 0x1c) 2m18.157747219s ago: executing program 33 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r1, 0x309, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001080), 0x420083, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r4, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x60, r6, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5e}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) clock_settime(0xcd1f6467c1540c16, 0x0) r7 = semget$private(0x0, 0x2, 0x48e) semtimedop(r7, &(0x7f0000000880)=[{0x3, 0x2, 0x1800}], 0x1, 0x0) semctl$SEM_STAT_ANY(r7, 0x4, 0x14, &(0x7f0000000080)=""/4096) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000001280)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 2m18.142666288s ago: executing program 4 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0xfffffff5}, 0x0) 2m17.743631481s ago: executing program 4 (id=883): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x41, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m17.288009084s ago: executing program 4 (id=885): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xf, @remote, 0x3}}, [0x1, 0x5b, 0xa69, 0x6, 0xc, 0x3, 0x0, 0x6, 0x71f, 0xffe0, 0x200, 0x100000000, 0x1628, 0x6, 0x1]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r2, 0x3}, &(0x7f00000001c0)=0x8) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2m17.132958713s ago: executing program 4 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) lseek(r0, 0x2, 0x3) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) timer_settime(r4, 0x0, &(0x7f00000001c0)={{}, {r5, r6+60000000}}, 0x0) timer_delete(r4) clock_gettime(0x0, &(0x7f0000000040)) timer_settime(r4, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 2m1.94236096s ago: executing program 34 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) lseek(r0, 0x2, 0x3) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) timer_settime(r4, 0x0, &(0x7f00000001c0)={{}, {r5, r6+60000000}}, 0x0) timer_delete(r4) clock_gettime(0x0, &(0x7f0000000040)) timer_settime(r4, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 1m28.090790031s ago: executing program 2 (id=1088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x1d00, {0x1, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m27.901224117s ago: executing program 2 (id=1090): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)='p', 0x1}], 0x2}}], 0x1, 0x4400c000) sendto$inet6(r0, &(0x7f0000000180)="0074372d8e477b4ceb2ec813980300000000002c0096091d813f", 0x1a, 0x3b00, 0x0, 0x0) 1m27.712072361s ago: executing program 2 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xf5ff}}, 0x74}}, 0x0) 1m27.439870236s ago: executing program 2 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x400003}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000000100)=""/80, 0x50}, {&(0x7f0000000d80)=""/4102, 0x1006}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/47, 0x2f}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000340)=""/202, 0xca}], 0x7, 0x0, 0x0, 0xe78}, 0x80000000}], 0x4, 0x20, 0x0) 1m27.13573599s ago: executing program 2 (id=1097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) syz_usb_connect(0x2, 0xb85, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x8c, 0xe6, 0x5b, 0x8, 0x2040, 0x7300, 0xd32d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb73, 0x3, 0x9, 0x0, 0x10, 0xd, [{{0x9, 0x4, 0x2c, 0x0, 0xa, 0x3f, 0xa7, 0x14, 0x0, [@generic={0xe0, 0x3, "f2dc7297a2b1f2e0a9422be12c3ea48fe90ce80112b5b50eca2d527461e1030867e3a6137e5d25f1e73a196b6f1f465fda6628944c0a122bf12663961a2508550529e56fe882e4c5e66b87b335888d9110e09069dd3e0b8d81e00547f64b14e45669b85336a8da1a2bcf313d545bd404035d1839359fec0316017262e8e3ad9a2d3122aa6d01b3d2f0b42b0d983a7c966a44c49d004c537cae938ca555a26e596c92c27a590985400b16fc766ddf38e90a519f6ec9205bb7b95ed20d94573b3ce985f237c5d99b6f1c15f88a13c979f5fc98327b87a413932646635110a2"}, @hid_hid={0x9, 0x21, 0xfffb, 0x2, 0x1, {0x22, 0xf9c}}], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x95, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x5, 0x2, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x2, 0xb}]}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x8, 0x0, 0x2, [@generic={0xf0, 0x9, "026ee9a1ad91658a67bacd61288d8b10c23f015729445fa10bed3c808eb5fb3084d0edb0d0eb5ce315f9bf73d22e1ae6e6f3710ba696454d92d51e95015575fcb643c988ed5822fd2b60f4308f1270922c4280a28833d20f38655f9d6e88b8ee55ffd400a604ca88b703d3f369be5421cbb29a7d9dad54585d5a2bd182c25870872d0e618f495ab1a54f3e54dea41e80fa25821f37e061b777d223f6abd4e90a8e83ef5347bf0c5142015868a05ffdfa564ec48108a5b9f0bc952f5e0d6f72b7efa61e02a1eb56f1c357414c680f8b5d1ead606ea5023a45fb145b97423cfaffc80aa2da4db803da2e8f6aea8a9a"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x9}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0xf, 0xfc, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x3, 0x7, 0x3, [@generic={0xa8, 0xa38b29be60ff3cb6, "fe25cd8de8df52467393a813ba8c513bcbe87806ef83038fe41931f9ca47e67a4d6c3901230bf9c1c5e156b9e3659a42f62e234cdfc1de66173f97be1e3d109969353edcb102fdd90ade1300cf1eb8932332aeb461bb4603282ce88196b952778695a3e861681a16a9711d83591fd92e2d79379df5c971a35cb94ee7176e83956cef72058cd12384481fc95c088605b6ff14bbe7cc74b17ab1fae0b9bc04760e90113a24c9e5"}, @uac_iso={0x7, 0x25, 0x1, 0x85, 0xa, 0x64b7}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x1, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x101}, @generic={0xe9, 0x22, "87c5333d5ddd17e105304f2c790637f2c63194ecb91a553e351fae9b83f6ba3eb9caaf2a898d68868dba6c21b1dcea11951a49dd77ef4f8ecb9d5c7703b0028a10631cbff1424ae972770bd52270a3ee68f5b0764fa5f65b8dc6c988bf3513dd5706c761c2e2e6f338dc0cb4eee44932ff699a5b86861352187babe70ec2b249f0b275c84fc05bd738c3f7af289fb9bd2da9d35ad38b72dec3426da0fa726159d3912fd58b2022c4a9e603b056628069d4196b6b6e8f1017c973e9c57fb859266ad1f4c056ab15f167f19cb973630bedcf1b6cfb7f6feb2dca6fcee0dee5bea98fef4bf7e19279"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x8, 0x2, 0x0, [@generic={0x6d, 0x22, "b5c799f57c1957c6c17506d02466233304d188512a8fb3a8ca2a37a022bc8ff513fe27dccbab4da2ee41ad8b8b3efcd24b6feb456b894e5e5cfd2cbd975ed8f8006bad37893658c35a3e09711fecad8f2ed10abd0d9023b3a3dd8e0d4b600ef7c4ee554d1df22f9e795b0a"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x5, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x48, 0x81}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x24, 0x7, 0x8, [@generic={0xb0, 0x24, "d55f7278254a67875ab160dcbe52e47190cc13376bc13d9bff3e77231064ed6c2b5253f8247ca5878cc0bcae67706a5a6b1f3a40600ff10ecf47895d6b73191f954c0c4a1b059c58573a0349e0ec579360d7d05bcd3885d6ab3853c9b9d250c1c56e7c085db81b50e7084505d8898e2f97a815a792ebfcc22b66c69766e7ce0c11fc8b00b71b2152241cfdbba8d842afd3c2b7a05df7e44c8080bd9247e5108bd7bcdec803e9725c2a2db19559d2"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x2c, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}]}}, {{0x9, 0x4, 0x89, 0x5, 0x6, 0xff, 0x7, 0x38, 0x3, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "f81aa83d"}, {0x5, 0x24, 0x0, 0x70}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x70ef, 0x101}, [@acm={0x4, 0x24, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x40, 0x90}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x5, 0xd, 0x1, 0x7, 0x4, 0x2}]}], [{{0x9, 0x5, 0x8, 0xc, 0x20, 0x6, 0x9, 0x7, [@generic={0x54, 0x7, "f4284065fe045f7b4c690f109b44b551f3a2d833f0341c8e305c64e863d7be0106884088755721ce44fa02d2637b8ce1d7fd19a0db7693bcba24b1bcd979ab1f768e74b058fd7921819e3da255c8447c9982"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0x0, 0x8, 0x6, [@generic={0xd9, 0x23, "2e3ba63ab8f6e4e419e47918358c42c49cc57e1fedee757353f2fec14770c37cd10e2c481927d9f5bceb0e69d2cafb21b8b1e718bd3324691b4046bfdd5b6d34a749c1dfaf541895f2be0ad24d7c247e81ef7787843720051a87561256da552791fb29ea953a8bd246b879da701059ad0de1f933e22954666029df5231134b7a84a2c7360c373bcd36878e8a7afbb2fc0ef1455fbcc5b544ed05bd959ab0cd26bbb2c7ecb6c37b30d6851561e5b0a87a7a9288014a7bf9346f21da06a2e197c279a002bb9c8d63a933d7591a5cd3c4d92f3f4d8e0be576"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0xce, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xba, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x80}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x4e, 0xc1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x2, 0x9, 0x0, [@generic={0x78, 0x10, "b0d4992d75900e775de899857af8ea4b7d5dca1f491a6d7c40983e366ab8431206fa03ab6b72215801ced13de0e7b64788b843d11c2086c827695ebd625880516aaaed77ec65f76c055dcc5dc9c8669dafb3ccfc14b9cc1a6b930d2a0ea618fc7f83c36e763219f7dd6018194fbcba1f6919ffbc6378"}, @generic={0x87, 0x7, "4d6e733a157fc0bcfa24a234956ba60a2970acf2551f126f3a1e47fb5d757ca73c071d464ce35875d73beab5ea97b3bd8fd94a20a16f5939ddd93ba2b71494df46c5a7d777f3a82e602965879bed64262094a7b5a9dfbf7003f1c6c11f93c86e90b649ea662d195387e49141078692d581a5344fb74e1098e53d14eaa868021d92e03d02eb"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x37f, 0x1, 0x80, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0xa907}]}}]}}, {{0x9, 0x4, 0x44, 0x4, 0xd, 0x74, 0x47, 0x87, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x3}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0xf9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x300, 0x3, 0x5, 0xf7}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "a2e3"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x4, 0x7ff, 0x81}, {0x6, 0x24, 0x1a, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}, @country_functional={0x8, 0x24, 0x7, 0x2, 0x1, [0x4]}]}], [{{0x9, 0x5, 0xc, 0x4, 0x8, 0x8, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0xb}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x0, 0xa, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x2, 0xfc, 0x1, [@generic={0x3e, 0x1, "887306cdf531aa51f8495dd994d62b800f7a8c7e217dff35058374f40cf51755b0ef0bcedd72c84418f4f42469e4b5efd6f3c7bc4d08ed9311bb35a4"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x1, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x5}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x6, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1a, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x3}]}}, {{0x9, 0x5, 0xa, 0x8, 0x0, 0x8, 0xfc, 0x6, [@generic={0xa1, 0x7, "5b5586edd608ecc28b8e5677f67cdb88c844c992e43ce1b7806ab5756f4fbb244febf80efb692d3c5a47c9cff188353cf35ae8cf10fdbf32e59b495540dc5cdc74a3da8101ee1c0af71b0b8606b89f0c6ddefb32f5924a9ed6b6409ce8787eeafe6ae9fe67d75d51bd48678588869cfa5ed52093306dc65d2566cdc1b62def480d7460304a2e7a41636e1d86a12817582b13bceac579bf78e44f6bbb00cca5"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0x81}]}}, {{0x9, 0x5, 0x0, 0x73cbe75209b31639, 0x10, 0x6, 0x51, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5c, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x6, 0x0, 0x5e, [@generic={0xe0, 0x22, "0b4c50a82f58287096163f82bdbca7ea8e996d7b27611613d399c610ec60e566e0f026127bb9c8b5d86f43d2aa31f807956057d98b7f455a08ee0e545a8ee85b5d021d6d0e10a5aea4c64c502d2850400b3850af7df7e8b86f0e10012ccb523d82650fbafefaa3ec373c6ad48c95dd307f34feb6577a139df7d80763f9f12eb20a91b36c09b94f70f0a399b4645a801ec646d86e354f6d519fd09d1f1fcaaf86bca28975a984aa270693e42923b1970a72d930cc47fc7dcb583a0814160be3464326aa8280f14b2de3fab473dcce6448ea3c7d0e8510d8f13d368e9d87fe"}, @generic={0x63, 0x24, "c74dc4f04e4220e94212a09ba6e7e84bd6ef5a59c26ba689d987e8d3fbfebb1143880b9d18e3c535229c38a2b5f976b7813d21d371a225f0342e3e1372dc1b1de0eaf2a20e7e047a0f98a68fa2fef5019d083404ca9958980800f358ece52f0376"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x40, 0x7, 0x5, [@generic={0x36, 0xb, "026ae9fbdb50fdb44bab04533a804814b00eaf0d96cc4c892c19c1de81cb3c0345e55f2be6c1fda8686aaca6a1c8efdaa2039d62"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x5b7, 0x40, 0xc, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x7}]}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x2, 0x9, 0xf, [@generic={0xc, 0xe, "18b5219e6fae1e534941"}]}}, {{0x9, 0x5, 0x83, 0x0, 0x40, 0x2, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x5}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x9, 0x5, 0x8}, 0x141, &(0x7f0000000e80)={0x5, 0xf, 0x141, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xd, 0xa, 0x80}, @generic={0xf7, 0x10, 0xa, "97d6ad0b9bddb6ab59a2e79ffb1717a2183ae27478b7a9d229f6e71895d0231432edf6aab7336a5525fc1b449d64fffd6283ca95e9f95ad1b6d8e628a264951ef77af8ca2f8796e5aca3c115afa6201a6c457451f7c0a76ee7a0073fe2e927dd87519d5b8ec1f5c27cc2c4bfd12b672e9c4cda11c91ab57e845db92126863469628815ea7c4c70c4291f64c6c5b7ded6d97a535f1733c069db68084ae222bcc802d43d17b9263ff348a70885198992bb0fc96e1a709e768de76cc55946a338fbfa48bf0ea474740b50a71115226440cf012e61f3046a855618e3ee33cd08d91925679f87c390d23a8433d006269c2c729ac8a898"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x4, 0xf00, 0x1, [0xff0000, 0x3f30, 0x3f00, 0x14018, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "9b38abe568d2503c08f55d8f1a2c3278"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x80, 0x2}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}]}) socket$inet6(0xa, 0x5, 0xfffffebf) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) 1m23.906819533s ago: executing program 2 (id=1114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000026002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) tkill(r5, 0x18) wait4(r5, 0x0, 0xa, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000180)=0x79, 0x4) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) clock_gettime(0x5, &(0x7f00000000c0)) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x550c, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000200)={0xffffffffffffff58, &(0x7f00000029c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 1m8.705469275s ago: executing program 35 (id=1114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000026002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) tkill(r5, 0x18) wait4(r5, 0x0, 0xa, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000180)=0x79, 0x4) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) clock_gettime(0x5, &(0x7f00000000c0)) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x550c, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000200)={0xffffffffffffff58, &(0x7f00000029c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 45.58069835s ago: executing program 1 (id=1281): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x7, @loopback, 0x7}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{0x0, 0x9, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x2, 0x48800) (async, rerun: 64) syz_usb_disconnect(0xffffffffffffffff) (async) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x1, &(0x7f0000001c80)) (async, rerun: 64) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) (async) syz_usb_connect(0x6, 0x21f, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0x5, 0xdb, 0x23, 0xff, 0x1822, 0x1, 0x8ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20d, 0x1, 0x13, 0x3, 0x40, 0x1a, [{{0x9, 0x4, 0xcf, 0x9, 0x8, 0x31, 0xbb, 0x65, 0x7f, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x5, 0x6}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x3, 0xb, 0x5, [@generic={0x57, 0x27, "b7e581381febefb8b3d082d8e8e81c172be75ef944d2fa4bb468542f1e187c992e36a02848b35fb0bb5aea7aecd4b2ff20f3247e09e99f6b55e8d67f38ff4a9b4268d98e47203a0e06b761e38b1032298f6139a14c"}, @generic={0x80, 0xe, "d9d0664183fb82733dc8857c86db6f6ed11ca123e8233280eb70e9c787ae32365e587a352d4dfb0cca64d91d55bef534a96978d6d0cf02e38a525e50948f597b86b8b39559f8ba00b9cbb50cbcee88a44ccce872519f69926c629368b727084191a161200aae74e46483671f963c116a8e5cf898aad050c4f429d00a7a02"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x1, 0x1, 0xe, [@generic={0x4b, 0x30, "9c83f88846d822cb7d1946562ffb7f45f8caaab6ac7b2ad340c3490f165dfef91b580f4e83fce6ba710cc304d13eb19b34022d429af25b7e7884fe78e9f9d52e9be030319ee478d0eb"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xcc, 0x7, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x60, 0x4, 0x6, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x3b, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x3, 0x0, 0xf0, 0x10, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x3, 0xd, 0x7, [@generic={0x75, 0x21, "2b0d3f1533f19886f8cad21f6381ac4e9c31fab7a784b0a3796603cf9bff21ead485e586946056440348a1f87de4928e8e0ec0754712f4f4986030b66dac722683a0ba9e89b768f1b995e702f68d72563a47dae5f21031e1ab63b7366bb1fd49c9f25399563d197b0785fd82e4656c2a8974bd"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xfff8}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x6, 0x8, 0xff, 0xa}, 0x70, &(0x7f0000000280)={0x5, 0xf, 0x70, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x4, 0x7f}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x200, 0x8700, 0x8, [0x0, 0xffa0c0, 0x0, 0x80803f]}, @ptm_cap={0x3}, @generic={0x42, 0x10, 0x4, "de49fcc3dc6da6c89985483f64e41b8cd6aa4b05a4cf54336233f440942ec765d4c4f970823cfb642655c699d80bd686fd82815c4e66ffb7109ea2394156e7"}]}, 0x1, [{0x1e, &(0x7f0000000100)=@string={0x1e, 0x3, "19d2058342b0770ec3a0f84748e47ea80101a0ce9d7898f19e737c26"}}]}) (async, rerun: 64) shutdown(r1, 0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async, rerun: 64) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r3, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_ep_read(r3, 0x6, 0x17, &(0x7f0000000040)=""/23) (async) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r5, &(0x7f0000000000)={0x27, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) 45.187986299s ago: executing program 1 (id=1283): setresuid(0x0, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x1274, 0x0, 0x0, 0xa}, {0x0, 0x4, 0xfffffffffffffffd}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000006ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x4000) 44.403841945s ago: executing program 1 (id=1288): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 44.278094589s ago: executing program 1 (id=1290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x1000000, {0x1, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) 43.907583521s ago: executing program 1 (id=1294): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) eventfd(0x6) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r6, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r6, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000340)={0x28, 0x0, r4, r6, 0x3, 0x4, 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000500)={0x18, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000) 43.487886432s ago: executing program 1 (id=1298): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000001b40)=ANY=[@ANYBLOB="210400007d01000005e0020200000000058300008000080000000000000000004041ffffffffdce5000005800000feffffff1b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673effeb09b5351f5bde0540"], 0x421) 27.737936915s ago: executing program 36 (id=1298): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000001b40)=ANY=[@ANYBLOB="210400007d01000005e0020200000000058300008000080000000000000000004041ffffffffdce5000005800000feffffff1b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673effeb09b5351f5bde0540"], 0x421) 6.753827236s ago: executing program 7 (id=1401): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x20, 0x7, 0x3, 0x6, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @remote}}}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getresuid(&(0x7f0000002a40), &(0x7f0000002a80), &(0x7f0000002ac0)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) 6.44005208s ago: executing program 7 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff02000000002b000000000000000001"], 0xffe) 5.926005793s ago: executing program 6 (id=1405): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$clear(0x5, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) pwritev(r1, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) 5.593431441s ago: executing program 7 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x60, 0x26, 0x3, "8bc54f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0}) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x80000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.593122211s ago: executing program 6 (id=1407): syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x8c, 0xe6, 0x5b, 0x8, 0x2040, 0x7300, 0xd32d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x10, 0xd, [{{0x9, 0x4, 0x2c, 0x0, 0x0, 0x3f, 0xa7, 0x14}}]}}]}}, 0x0) 4.507737251s ago: executing program 6 (id=1413): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x20, 0x5, 0x7a, {0x7a, 0xd, "cee18925204399b1f8e8f1751d3d0d9fbaa838157b4f2ba5668aeeebd754bb8a3f1b130dc2cab5b4cc6c825ec8382e033a38701b662693a1c922933b090705f22fba3a7a9ef108f87a5b0cd6181300b6dd0bb6f5a08cba537a87c415fd08a0f022c8578bf71291df560e3fc728c60b5b983baf1c731d6f7a"}}, &(0x7f0000000100)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "02aafbc03e0c3b6a731fcb04ac41a7ee4e84b5cdca8f068a5d1ee316c125a45b744d4eb557ae42a4ce3da7b5e6b5dd5417797634165cefaadd5260e742201c5a7ba9f9425889bfcb6af0a34eb3e2a3b9736a8a48a285d9a7e4b62d42c98709eec51a9af8e2626efb6f729461ef6518f25d596bfbb93dd141d0ec14bf3c622575efe92ef291c1d5f46b4324df9476ef0e18d7d732049687a38f53e287a87f2a4facdce42c002d891ffdea15442d48b964679f0ae3b71bd18688453bb5f847ae8a87152bac16db659285efc5e19450c945bdd45956a5ff21"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x4, 0x6, 0x1, "b85a60f6", "f20066c5"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x5, 0x1, 0x0, 0xf, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x40, 0x15, 0xeb, "a57801c0139e1e45219a37f5a8c9952f84bcad1ef0c8b41ab9a4307c10370b10ab7a3aec59eceee60f71afced52b5a9f3c7edb5cc8500869d878c30d8d3d62da3d63512afe8365cf61c0c53481a9baf93dab3ba4dc4d9ae32b3751fac98d0fa9ca3efacdad8842ffeed489a8c64e432663ede2865e89097a08ed624c566adcf1469a2fe90f1766ce4854f0373c4643af5083f7957bcd95ccaabeaffec9e461ce0f7066244dcd3d611e97f0362a377ae04558c7e909374cdaa33ae0cb2065080e65b32115598e9c1ff4aa2e903217ff2a8a170b21616bd394f87673043ab434a6cdd347ef5b66ca09019154"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x51}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000580)={0x40, 0xb, 0x2, "d410"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="2a36cc5c97ea"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "25a3"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x2}}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af25, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x800) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000104000b0031bf360b"], 0x0, 0x0, 0x0, 0x0}) sysinfo(&(0x7f00000008c0)=""/79) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.281797329s ago: executing program 8 (id=1336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1005}, 0x1c) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02002b000000000000000000000001"], 0xfdef) 2.774130105s ago: executing program 8 (id=1415): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.360005733s ago: executing program 7 (id=1416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}, 0x1, 0x0, 0x0, 0x8054}, 0x0) 2.30823914s ago: executing program 5 (id=1417): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000001b40)=ANY=[@ANYBLOB="210400007d01000005e0020200000000058300008000080000000000000000004041ffffffffdce500000580000000fe00001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673effeb09b5351f5bde0540"], 0x421) 2.169591343s ago: executing program 7 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00022dbd7000fbdb"], 0x68}, 0x1, 0x0, 0x0, 0x40083}, 0x8001) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba358bffffff0000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.752132947s ago: executing program 5 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x2, 0x2d000000, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1.751803624s ago: executing program 7 (id=1420): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002, 0x5000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.44989952s ago: executing program 8 (id=1421): execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.417256543s ago: executing program 5 (id=1422): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x6000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.171869034s ago: executing program 6 (id=1423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a01030000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001514000000110001"], 0xd8}}, 0x0) 967.946138ms ago: executing program 8 (id=1424): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x60, 0x26, 0x3, "8bc54f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0}) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x80000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 923.91452ms ago: executing program 6 (id=1425): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe, 0x0, 0xfc, 0xa, 0x8000, 0x7629}, &(0x7f0000000840)=0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000400000000000000000000aa0000000160a010300000000000000000a00000908000740000000014800038018000380140001007767320000000000000000000000001e2c0003801400010074756e6c300000000000000000000000140001006e7230000000000000000000000000003c000380080001400000000008000240000000060800024000000007080002400000020008000240000000f50700014000000000080001400000000028000000120a0101000000000000000007000007140004800500020000000000080003400000001b140000001100010000000000000000000000000a"], 0xf0}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x99) r6 = syz_open_dev$vcsu(&(0x7f0000000700), 0x56, 0x1) sendmsg$key(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x2, 0x2, 0x6, 0xc, 0x6, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x0, 0xfb7, 0xfff, 0xa, 0x4}]}, 0x30}}, 0x20040091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100cf9652b0216bbe306d3075e8c378fb6c092a733e0a2db7edb92dfd0dcdc00e9d6fdfb26ddeb0ffad168d32957af2aa9d783d0fc59e6e0f6ce12af357b5bd44c7cd452858ee4531e10ec2b9cfbb6facd929ff12b2e12b94ff17df9c55f42c65c2b3ea001699e61c44e03b62e08c6139d878b0ec48bc0cfd08ccb17f33e1f9c8403ee471c4a3a3", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r11, 0x2000000, 0x80000000, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @loopback}, &(0x7f00000004c0)=0xc) sendto$packet(r12, &(0x7f0000000980)="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", 0x1000, 0x80, &(0x7f0000000500)={0x11, 0x18, r13, 0x1, 0x8, 0x6, @broadcast}, 0x14) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x44, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4841) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000001980)=[@in6={0xa, 0x4e21, 0xfffffff7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x401}, @in6={0xa, 0x4e21, 0x23, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ad}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x80000001}, @in={0x2, 0x4e24, @local}], 0x90) sendmsg$NFNL_MSG_CTHELPER_GET(r14, &(0x7f0000000600)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)={0x100, 0x1, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x94, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xaff}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7b1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb45}}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x5044}, 0x0) 823.94897ms ago: executing program 5 (id=1426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}, 0x1, 0x0, 0x0, 0x8054}, 0x0) 551.726384ms ago: executing program 5 (id=1427): creat(&(0x7f0000001380)='./file0\x00', 0x4) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x7, 0x2}]}, 0xc, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x20808b, 0x0) chdir(&(0x7f0000000200)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000180), 0x4000) 438.121787ms ago: executing program 6 (id=1428): openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x240900, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f00000007c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000040000000000030000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 0s ago: executing program 5 (id=1429): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800606600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): 3 is beyond EOD, truncated [ 284.871370][ T8653] loop3: p3 start 1633771873 is beyond EOD, truncated [ 284.891070][ T5903] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 284.930788][ T5903] usb 6-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 284.958491][ T8653] loop3: p4 start 1633771873 is beyond EOD, truncated [ 284.985275][ T8653] loop3: p5 start 1633771873 is beyond EOD, truncated [ 284.994181][ T5903] usb 6-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 285.007760][ T8653] loop3: p6 start 1633771776 is beyond EOD, truncated [ 285.043828][ T5903] usb 6-1: config 9 interface 137 has no altsetting 0 [ 285.050656][ T5903] usb 6-1: config 9 interface 68 has no altsetting 0 [ 285.064283][ T10] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 285.078157][ T8653] loop3: p7 start 1633771873 is beyond EOD, truncated [ 285.105869][ T8659] tipc: Enabling of bearer rejected, already enabled [ 285.120963][ T5903] usb 6-1: Dual-Role OTG device on HNP port [ 285.134535][ T8653] loop3: p8 start 1886744434 is beyond EOD, truncated [ 285.144575][ T8653] loop3: p9 start 1633771873 is beyond EOD, truncated [ 285.159285][ T5903] usb 6-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 285.170092][ T8653] loop3: p10 start 1633771873 is beyond EOD, truncated [ 285.209411][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.235187][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 285.262366][ T5903] usb 6-1: Product: syz [ 285.267233][ T5903] usb 6-1: Manufacturer: syz [ 285.273049][ T5903] usb 6-1: SerialNumber: syz [ 285.285203][ T10] usb 7-1: config 9 has an invalid interface number: 44 but max is 2 [ 285.314744][ T10] usb 7-1: config 9 has an invalid interface number: 137 but max is 2 [ 285.323890][ T8633] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.344842][ T10] usb 7-1: config 9 has an invalid interface number: 68 but max is 2 [ 285.368378][ T10] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 285.368512][ T5903] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 285.434438][ T10] usb 7-1: config 9 has no interface number 0 [ 285.440648][ T10] usb 7-1: config 9 has no interface number 1 [ 285.498291][ T10] usb 7-1: config 9 has no interface number 2 [ 285.519929][ T10] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 285.555293][ T10] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.570453][ T8633] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.614246][ T10] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 285.668448][ T10] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.720629][ T10] usb 7-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 285.768148][ T10] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 285.792480][ T5903] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 285.828981][ T5903] usb 6-1: selecting invalid altsetting 0 [ 285.867031][ T5903] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 285.870441][ T10] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 285.883379][ T5903] pvrusb2: Failed to create hdw handler [ 285.910735][ T10] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 285.934671][ T10] usb 7-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 285.945414][ T5903] pvrusb2 6-1:9.68: probe with driver pvrusb2 failed with error -12 [ 285.955425][ T5903] usb 6-1: USB disconnect, device number 9 [ 285.960366][ T5903] pvrusb2: Device being rendered inoperable [ 286.017184][ T10] usb 7-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 286.060156][ T10] usb 7-1: config 9 interface 137 has no altsetting 0 [ 286.067788][ T5903] pvrusb2: Device being rendered inoperable [ 286.083817][ T10] usb 7-1: config 9 interface 68 has no altsetting 0 [ 286.145705][ T10] usb 7-1: Dual-Role OTG device on HNP port [ 286.158290][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 286.172349][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.195453][ T10] usb 7-1: Product: syz [ 286.203327][ T10] usb 7-1: Manufacturer: syz [ 286.211464][ T10] usb 7-1: SerialNumber: syz [ 286.233538][ T8655] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 286.243661][ T10] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 286.257573][ T10] pvrusb2: Failed to create hdw handler [ 286.263338][ T10] pvrusb2 7-1:9.44: probe with driver pvrusb2 failed with error -12 [ 286.449436][ T10] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 286.492326][ T10] pvrusb2: Failed to create hdw handler [ 286.543891][ T10] pvrusb2 7-1:9.137: probe with driver pvrusb2 failed with error -12 [ 286.656169][ T10] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 286.670999][ T10] pvrusb2: Failed to create hdw handler [ 286.682955][ T10] pvrusb2 7-1:9.68: probe with driver pvrusb2 failed with error -12 [ 286.710845][ T8681] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1014'. [ 286.740604][ T10] usb 7-1: USB disconnect, device number 4 [ 287.105731][ T8690] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 287.163653][ T8691] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 287.181039][ T8690] team0: Port device dummy0 added [ 287.226736][ T8691] team0: Port device dummy0 removed [ 287.259908][ T8691] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 288.844118][ T5903] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 289.019624][ T5903] usb 2-1: not running at top speed; connect to a high speed hub [ 289.046638][ T5903] usb 2-1: config 9 has an invalid interface number: 44 but max is 2 [ 289.087271][ T5903] usb 2-1: config 9 has an invalid interface number: 137 but max is 2 [ 289.098082][ T8729] block device autoloading is deprecated and will be removed. [ 289.107697][ T5903] usb 2-1: config 9 has an invalid interface number: 68 but max is 2 [ 289.119493][ T8729] syz.5.1035: attempt to access beyond end of device [ 289.119493][ T8729] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 289.132579][ T5903] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 289.156013][ T8737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.168232][ T5903] usb 2-1: config 9 has no interface number 0 [ 289.196528][ T5903] usb 2-1: config 9 has no interface number 1 [ 289.228634][ T5903] usb 2-1: config 9 has no interface number 2 [ 289.244160][ T5903] usb 2-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 289.313736][ T5903] usb 2-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.402138][ T5903] usb 2-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 289.443351][ T5903] usb 2-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.471761][ T8744] tipc: Started in network mode [ 289.477009][ T5903] usb 2-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 289.489330][ T8744] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 289.498930][ T8744] tipc: Enabled bearer , priority 10 [ 289.505156][ T5903] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 289.523009][ T5903] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 289.554758][ T5903] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 289.586088][ T5903] usb 2-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 289.598662][ T5903] usb 2-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 289.620516][ T5903] usb 2-1: config 9 interface 137 has no altsetting 0 [ 289.646840][ T5903] usb 2-1: config 9 interface 68 has no altsetting 0 [ 289.672181][ T5903] usb 2-1: Dual-Role OTG device on HNP port [ 289.693396][ T5903] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 289.768331][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.794796][ T5903] usb 2-1: Product: syz [ 289.813039][ T5903] usb 2-1: Manufacturer: syz [ 289.834004][ T5903] usb 2-1: SerialNumber: syz [ 289.876171][ T8722] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.910734][ T5903] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 289.919033][ T8752] loop6: detected capacity change from 0 to 7 [ 289.959558][ T5903] pvrusb2: Failed to create hdw handler [ 289.966031][ T8752] Dev loop6: unable to read RDB block 7 [ 289.976467][ T5903] pvrusb2 2-1:9.44: probe with driver pvrusb2 failed with error -12 [ 289.984834][ T8752] loop6: AHDI p3 p4 [ 289.999853][ T8752] loop6: partition table partially beyond EOD, truncated [ 290.007840][ T8752] loop6: p3 start 1886353253 is beyond EOD, truncated [ 290.116319][ T5903] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 290.144125][ T10] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 290.174070][ T5903] pvrusb2: Failed to create hdw handler [ 290.212933][ T5903] pvrusb2 2-1:9.137: probe with driver pvrusb2 failed with error -12 [ 290.325416][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 290.341953][ T10] usb 6-1: config 9 has an invalid interface number: 44 but max is 2 [ 290.360142][ T5903] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 290.361389][ T10] usb 6-1: config 9 has an invalid interface number: 137 but max is 2 [ 290.388852][ T5903] pvrusb2: Failed to create hdw handler [ 290.418934][ T5903] pvrusb2 2-1:9.68: probe with driver pvrusb2 failed with error -12 [ 290.434112][ T10] usb 6-1: config 9 has an invalid interface number: 68 but max is 2 [ 290.464758][ T5903] usb 2-1: USB disconnect, device number 58 [ 290.478391][ T10] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 290.493822][ T10] usb 6-1: config 9 has no interface number 0 [ 290.499930][ T10] usb 6-1: config 9 has no interface number 1 [ 290.538517][ T10] usb 6-1: config 9 has no interface number 2 [ 290.581315][ T10] usb 6-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 290.614020][ T5860] tipc: Node number set to 1 [ 290.660170][ T10] usb 6-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.711471][ T10] usb 6-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 290.779038][ T10] usb 6-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.796345][ T10] usb 6-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 290.807445][ T10] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 290.880047][ T10] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 290.901743][ T10] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 290.921731][ T10] usb 6-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 290.933093][ T8765] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 290.944544][ T8765] tipc: Enabled bearer , priority 10 [ 290.950871][ T10] usb 6-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 291.016242][ T10] usb 6-1: config 9 interface 137 has no altsetting 0 [ 291.059694][ T10] usb 6-1: config 9 interface 68 has no altsetting 0 [ 291.080988][ T10] usb 6-1: Dual-Role OTG device on HNP port [ 291.109404][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 291.143408][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.178683][ T10] usb 6-1: Product: syz [ 291.182903][ T10] usb 6-1: Manufacturer: syz [ 291.210836][ T10] usb 6-1: SerialNumber: syz [ 291.279074][ T8753] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 291.298399][ T10] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 291.320047][ T10] pvrusb2: Failed to create hdw handler [ 291.338005][ T10] pvrusb2 6-1:9.44: probe with driver pvrusb2 failed with error -12 [ 291.527907][ T10] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 291.546914][ T10] pvrusb2: Failed to create hdw handler [ 291.552519][ T10] pvrusb2 6-1:9.137: probe with driver pvrusb2 failed with error -12 [ 291.721845][ T10] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 291.776915][ T10] pvrusb2: Failed to create hdw handler [ 291.786984][ T10] pvrusb2 6-1:9.68: probe with driver pvrusb2 failed with error -12 [ 291.825171][ T10] usb 6-1: USB disconnect, device number 10 [ 291.844189][ T8780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1054'. [ 292.364097][ T5903] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 292.549580][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 292.569263][ T5903] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 292.585399][ T5903] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 292.601336][ T5903] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 292.622866][ T5903] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 292.637396][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 292.663232][ T5903] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 292.675079][ T5903] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 292.683538][ T5903] usb 2-1: Product: syz [ 292.688045][ T5903] usb 2-1: Manufacturer: syz [ 292.698242][ T5960] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 292.707060][ T5903] usb 2-1: SerialNumber: syz [ 292.733019][ T5903] usb 2-1: config 0 descriptor?? [ 292.746265][ T5903] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 292.794040][ T5903] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 292.865120][ T5960] usb 6-1: not running at top speed; connect to a high speed hub [ 292.897525][ T5960] usb 6-1: config 9 has an invalid interface number: 44 but max is 2 [ 292.927662][ T5960] usb 6-1: config 9 has an invalid interface number: 137 but max is 2 [ 292.944807][ T5960] usb 6-1: config 9 has an invalid interface number: 68 but max is 2 [ 292.957474][ T5960] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 292.968429][ T5960] usb 6-1: config 9 has no interface number 0 [ 292.988729][ T5960] usb 6-1: config 9 has no interface number 1 [ 292.997317][ T5960] usb 6-1: config 9 has no interface number 2 [ 293.003663][ T5960] usb 6-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 293.016195][ T5960] usb 6-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.029341][ T5860] usb 2-1: USB disconnect, device number 59 [ 293.029365][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 293.038426][ T5960] usb 6-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 293.052506][ T5860] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 293.067712][ T5960] usb 6-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.078866][ T5903] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 293.093927][ T5960] usb 6-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 293.112860][ T5960] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 293.124397][ T5960] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 293.143907][ T5960] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 293.156937][ T5960] usb 6-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 293.172506][ T5960] usb 6-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 293.189274][ T5960] usb 6-1: config 9 interface 137 has no altsetting 0 [ 293.197908][ T5960] usb 6-1: config 9 interface 68 has no altsetting 0 [ 293.208625][ T5960] usb 6-1: Dual-Role OTG device on HNP port [ 293.216170][ T5960] usb 6-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 293.227414][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.235959][ T5960] usb 6-1: Product: syz [ 293.240312][ T5960] usb 6-1: Manufacturer: syz [ 293.245572][ T5960] usb 6-1: SerialNumber: syz [ 293.251434][ T5903] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 293.259929][ T5903] usb 7-1: config 0 has no interface number 0 [ 293.267767][ T5903] usb 7-1: config 0 interface 41 has no altsetting 0 [ 293.296064][ T5903] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 293.306677][ T8789] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 293.318261][ T5960] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 293.335866][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.356535][ T5960] pvrusb2: Failed to create hdw handler [ 293.374165][ T5903] usb 7-1: Product: syz [ 293.404162][ T5903] usb 7-1: Manufacturer: syz [ 293.409726][ T5960] pvrusb2 6-1:9.44: probe with driver pvrusb2 failed with error -12 [ 293.421265][ T5903] usb 7-1: SerialNumber: syz [ 293.441875][ T5903] usb 7-1: config 0 descriptor?? [ 293.458902][ T5903] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 293.531197][ T5960] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 293.538608][ T973] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.571126][ T5960] pvrusb2: Failed to create hdw handler [ 293.583702][ T5960] pvrusb2 6-1:9.137: probe with driver pvrusb2 failed with error -12 [ 293.740131][ T5960] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 293.785569][ T5960] pvrusb2: Failed to create hdw handler [ 293.824504][ T5960] pvrusb2 6-1:9.68: probe with driver pvrusb2 failed with error -12 [ 293.867316][ T5960] usb 6-1: USB disconnect, device number 11 [ 294.198427][ T8809] syzkaller1: entered promiscuous mode [ 294.259412][ T8809] syzkaller1: entered allmulticast mode [ 295.229626][ T8826] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.1073'. [ 295.300780][ T8826] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.1073'. [ 295.401433][ T8826] netlink: 584 bytes leftover after parsing attributes in process `syz.2.1073'. [ 295.733975][ T5860] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 295.862645][ T5903] usb 7-1: USB disconnect, device number 5 [ 295.894215][ T5960] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 295.923947][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 295.950039][ T5860] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 295.964679][ T5860] usb 6-1: config 0 has no interface number 0 [ 295.975578][ T5860] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 295.999559][ T5860] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 296.014633][ T5860] usb 6-1: config 0 interface 41 has no altsetting 0 [ 296.032692][ T5860] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 296.050772][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.084512][ T5860] usb 6-1: Product: syz [ 296.091361][ T5960] usb 2-1: not running at top speed; connect to a high speed hub [ 296.103880][ T5860] usb 6-1: Manufacturer: syz [ 296.116446][ T5960] usb 2-1: config 9 has an invalid interface number: 44 but max is 2 [ 296.127948][ T5860] usb 6-1: SerialNumber: syz [ 296.168674][ T5960] usb 2-1: config 9 has an invalid interface number: 137 but max is 2 [ 296.188631][ T5860] usb 6-1: config 0 descriptor?? [ 296.203098][ T8834] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 296.211800][ T5960] usb 2-1: config 9 has an invalid interface number: 68 but max is 2 [ 296.221377][ T5960] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 296.231702][ T8834] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 296.251914][ T5960] usb 2-1: config 9 has no interface number 0 [ 296.263113][ T5960] usb 2-1: config 9 has no interface number 1 [ 296.305852][ T5960] usb 2-1: config 9 has no interface number 2 [ 296.344536][ T5960] usb 2-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 296.358098][ T5960] usb 2-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.370423][ T5960] usb 2-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 296.384399][ T5960] usb 2-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.397644][ T5960] usb 2-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 296.409465][ T5960] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 296.421417][ T5960] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 296.439924][ T5960] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 296.454229][ T8834] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 296.461453][ T8834] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 296.477442][ T5960] usb 2-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 296.490009][ T5960] usb 2-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 296.511025][ T5960] usb 2-1: config 9 interface 137 has no altsetting 0 [ 296.527204][ T5960] usb 2-1: config 9 interface 68 has no altsetting 0 [ 296.558221][ T5960] usb 2-1: Dual-Role OTG device on HNP port [ 296.573234][ T5960] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 296.588436][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.611358][ T5960] usb 2-1: Product: syz [ 296.617682][ T5960] usb 2-1: Manufacturer: syz [ 296.622505][ T5960] usb 2-1: SerialNumber: syz [ 296.655993][ T8836] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 296.672235][ T5960] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 296.695671][ T5960] pvrusb2: Failed to create hdw handler [ 296.705015][ T5960] pvrusb2 2-1:9.44: probe with driver pvrusb2 failed with error -12 [ 296.739496][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 296.746970][ T2345] pvrusb2: Failure uploading firmware1 [ 296.752604][ T2345] pvrusb2: Device initialization was not successful. [ 296.764026][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 296.774701][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 296.784253][ T2345] pvrusb2: Invalid write control endpoint [ 296.790207][ T24] pvrusb2: Device being rendered inoperable [ 296.805593][ T2345] usb 3-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 296.805760][ T5923] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 296.820514][ T2345] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 296.897937][ T5960] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 296.916939][ T5960] pvrusb2: Failed to create hdw handler [ 296.922523][ T5960] pvrusb2 2-1:9.137: probe with driver pvrusb2 failed with error -12 [ 296.974068][ T5923] usb 7-1: device descriptor read/64, error -71 [ 296.993379][ T8843] overlayfs: failed to resolve './file0': -2 [ 297.102468][ T5960] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 297.114464][ T5960] pvrusb2: Failed to create hdw handler [ 297.120053][ T5960] pvrusb2 2-1:9.68: probe with driver pvrusb2 failed with error -12 [ 297.172094][ T5960] usb 2-1: USB disconnect, device number 60 [ 297.256364][ T5923] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 297.256419][ T5860] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 297.395848][ T5923] usb 7-1: device descriptor read/64, error -71 [ 297.529367][ T5923] usb usb7-port1: attempt power cycle [ 297.688028][ T8845] tipc: Enabling of bearer rejected, already enabled [ 297.709135][ T5860] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 297.756827][ T5860] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 297.800096][ T5860] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 297.838558][ T5860] usb 6-1: USB disconnect, device number 12 [ 297.924282][ T5923] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 297.974831][ T5923] usb 7-1: device descriptor read/8, error -71 [ 298.218001][ T5923] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 298.268878][ T5923] usb 7-1: device descriptor read/8, error -71 [ 298.400421][ T5923] usb usb7-port1: unable to enumerate USB device [ 298.817455][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 298.870776][ T8857] tipc: Enabling of bearer rejected, already enabled [ 299.024107][ T5923] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 299.220351][ T5923] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 299.256952][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.304476][ T5923] usb 2-1: Product: syz [ 299.314528][ T5923] usb 2-1: Manufacturer: syz [ 299.349929][ T5923] usb 2-1: SerialNumber: syz [ 299.385531][ T5923] usb 2-1: config 0 descriptor?? [ 299.426255][ T5923] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 299.641571][ T10] usb 2-1: USB disconnect, device number 61 [ 299.703900][ T5904] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 299.883962][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 299.915095][ T5904] usb 6-1: unable to get BOS descriptor or descriptor too short [ 299.943708][ T5904] usb 6-1: config 10 has an invalid interface number: 81 but max is 0 [ 299.988078][ T5904] usb 6-1: config 10 has no interface number 0 [ 300.017151][ T5904] usb 6-1: config 10 interface 81 has no altsetting 0 [ 300.035666][ T5904] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 300.067012][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.113863][ T5904] usb 6-1: Product: syz [ 300.132394][ T5904] usb 6-1: Manufacturer: syz [ 300.179632][ T5904] usb 6-1: SerialNumber: syz [ 300.438004][ T5904] ums-jumpshot 6-1:10.81: USB Mass Storage device detected [ 300.508840][ T5904] ums-jumpshot 6-1:10.81: Quirks match for vid 05dc pid 0001: 2 [ 300.530746][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 300.594153][ T5904] usb 6-1: USB disconnect, device number 13 [ 300.703868][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 300.730114][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 300.754103][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 300.775431][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 300.789255][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 300.815754][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.874596][ T10] usb 2-1: Product: syz [ 300.885489][ T10] usb 2-1: Manufacturer: syz [ 300.901122][ T10] usb 2-1: SerialNumber: syz [ 300.927584][ T10] usb 2-1: config 0 descriptor?? [ 300.964588][ T8883] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 301.007732][ T10] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 301.042135][ T10] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 301.195228][ T8883] syz.1.1099: attempt to access beyond end of device [ 301.195228][ T8883] md0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 301.244195][ T8883] hpfs: hpfs_map_sector(): read error [ 301.284461][ T5860] usb 2-1: USB disconnect, device number 62 [ 301.415352][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 301.583935][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 301.613975][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 301.629843][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.659693][ T10] usb 6-1: Product: syz [ 301.665402][ T10] usb 6-1: Manufacturer: syz [ 301.683165][ T10] usb 6-1: SerialNumber: syz [ 301.697195][ T10] usb 6-1: config 0 descriptor?? [ 301.756949][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 301.917288][ T8902] syzkaller1: entered promiscuous mode [ 301.944275][ T8902] syzkaller1: entered allmulticast mode [ 302.035736][ T8905] hpfs: Bad magic ... probably not HPFS [ 302.128462][ T8905] syz.1.1108 (8905) used obsolete PPPIOCDETACH ioctl [ 302.437911][ T8908] loop3: detected capacity change from 0 to 1 [ 302.465031][ T5836] Dev loop3: unable to read RDB block 1 [ 302.475998][ T5836] loop3: unable to read partition table [ 302.482104][ T5836] loop3: partition table beyond EOD, truncated [ 302.492533][ T8908] Dev loop3: unable to read RDB block 1 [ 302.541967][ T8908] loop3: unable to read partition table [ 302.550660][ T8908] loop3: partition table beyond EOD, truncated [ 302.560687][ T8908] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 302.842304][ T8897] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 302.899386][ T8897] UDF-fs: Scanning with blocksize 4096 failed [ 302.926777][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.054925][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.089940][ T10] gspca_sonixj: reg_w1 err -110 [ 303.194827][ T10] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 303.267168][ T10] usb 6-1: USB disconnect, device number 14 [ 304.145878][ T5960] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 304.321742][ T5960] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 304.351241][ T5960] usb 7-1: config 0 has no interface number 0 [ 304.368162][ T5960] usb 7-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 304.403945][ T5960] usb 7-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 304.433865][ T5960] usb 7-1: config 0 interface 230 has no altsetting 0 [ 304.464575][ T5960] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 304.508790][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.523886][ T5860] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 304.553822][ T5960] usb 7-1: Product: syz [ 304.578332][ T5960] usb 7-1: Manufacturer: syz [ 304.602198][ T5960] usb 7-1: SerialNumber: syz [ 304.628735][ T5960] usb 7-1: config 0 descriptor?? [ 304.665501][ T8928] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 304.683502][ T8928] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 304.705020][ T5960] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 304.805147][ T5960] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 305.024101][ T5166] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 305.185085][ T5166] usb 2-1: not running at top speed; connect to a high speed hub [ 305.199482][ T5166] usb 2-1: config 9 has an invalid interface number: 44 but max is 2 [ 305.214393][ T5166] usb 2-1: config 9 has an invalid interface number: 137 but max is 2 [ 305.222833][ T5166] usb 2-1: config 9 has an invalid interface number: 68 but max is 2 [ 305.232096][ T5166] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 305.245298][ T5166] usb 2-1: config 9 has no interface number 0 [ 305.251411][ T5166] usb 2-1: config 9 has no interface number 1 [ 305.258731][ T5166] usb 2-1: config 9 has no interface number 2 [ 305.268318][ T5166] usb 2-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 305.279389][ T5166] usb 2-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.294521][ T5166] usb 2-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 305.308504][ T5166] usb 2-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.319746][ T5166] usb 2-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 305.331193][ T5166] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 305.343295][ T5166] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 305.364982][ T5166] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 305.376510][ T5166] usb 2-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 305.389771][ T5166] usb 2-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 305.407424][ T5166] usb 2-1: config 9 interface 137 has no altsetting 0 [ 305.415440][ T5166] usb 2-1: config 9 interface 68 has no altsetting 0 [ 305.434310][ T5166] usb 2-1: Dual-Role OTG device on HNP port [ 305.452721][ T5166] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 305.481094][ T5166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.521023][ T5166] usb 2-1: Product: syz [ 305.533065][ T5166] usb 2-1: Manufacturer: syz [ 305.539630][ T5166] usb 2-1: SerialNumber: syz [ 305.552046][ T8942] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 305.564401][ T8949] tipc: Started in network mode [ 305.569307][ T8949] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 305.586652][ T8949] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 305.598764][ T8949] tipc: Enabled bearer , priority 10 [ 305.601096][ T5166] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 305.647996][ T5166] pvrusb2: Failed to create hdw handler [ 305.653617][ T5166] pvrusb2 2-1:9.44: probe with driver pvrusb2 failed with error -12 [ 305.812187][ T5166] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 305.835839][ T5166] pvrusb2: Failed to create hdw handler [ 305.843101][ T5166] pvrusb2 2-1:9.137: probe with driver pvrusb2 failed with error -12 [ 305.855552][ T5166] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 305.871369][ T5166] pvrusb2: Failed to create hdw handler [ 305.877246][ T5166] pvrusb2 2-1:9.68: probe with driver pvrusb2 failed with error -12 [ 305.889643][ T5166] usb 2-1: USB disconnect, device number 63 [ 305.960276][ T8954] netlink: 'syz.5.1126': attribute type 20 has an invalid length. [ 306.244059][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 306.413055][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 306.438331][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.470397][ T10] usb 6-1: Product: syz [ 306.473685][ T8959] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.1128'. [ 306.505072][ T10] usb 6-1: Manufacturer: syz [ 306.514886][ T10] usb 6-1: SerialNumber: syz [ 306.534729][ T10] usb 6-1: config 0 descriptor?? [ 306.714025][ T5923] tipc: Node number set to 1 [ 307.025535][ T5960] ums-usbat 7-1:0.230: probe with driver ums-usbat failed with error -5 [ 307.147325][ T10] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 307.156035][ T10] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 307.163675][ T10] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 307.181151][ T10] usb 6-1: USB disconnect, device number 16 [ 307.994109][ T5882] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 308.186839][ T5882] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.254146][ T5882] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 308.266182][ T10] usb 7-1: USB disconnect, device number 10 [ 308.298443][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 308.324535][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 308.363488][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 308.389898][ T5882] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 308.401411][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.426702][ T5882] usb 2-1: Product: syz [ 308.432236][ T5882] usb 2-1: Manufacturer: syz [ 308.444825][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 308.450066][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 308.510579][ T5882] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 308.525367][ T5882] cdc_wdm 2-1:1.0: Unknown control protocol [ 308.593941][ T5166] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 308.645253][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 308.660269][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.666988][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.673593][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.680183][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.686919][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.693507][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.699696][ T5882] usb 2-1: USB disconnect, device number 64 [ 308.699980][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 308.712437][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 308.718504][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 308.814202][ T5166] usb 6-1: Using ep0 maxpacket: 32 [ 308.834291][ T5166] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 308.843099][ T5166] usb 6-1: config 0 has no interface number 0 [ 308.862544][ T5166] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 308.872164][ T5166] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.882179][ T5166] usb 6-1: Product: syz [ 308.886879][ T5166] usb 6-1: Manufacturer: syz [ 308.886979][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 308.891590][ T5166] usb 6-1: SerialNumber: syz [ 308.914772][ T5166] usb 6-1: config 0 descriptor?? [ 308.930211][ T5166] smsc95xx v2.0.0 [ 308.934404][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 308.964491][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.028715][ T10] usb 7-1: Product: syz [ 309.033951][ T10] usb 7-1: Manufacturer: syz [ 309.039070][ T10] usb 7-1: SerialNumber: syz [ 309.051255][ T10] usb 7-1: config 0 descriptor?? [ 309.076977][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 309.348666][ T5166] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 309.374010][ T5166] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 309.580568][ T8986] loop3: detected capacity change from 0 to 1 [ 309.588450][ T5166] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 309.599657][ T8986] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 309.610134][ T8986] loop3: p1 start 791543808 is beyond EOD, truncated [ 309.618282][ T5166] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 309.634541][ T8986] loop3: p2 start 1633771873 is beyond EOD, truncated [ 309.656498][ T8986] loop3: p3 start 1633771873 is beyond EOD, truncated [ 309.685951][ T8986] loop3: p4 start 1633771873 is beyond EOD, truncated [ 309.715391][ T8986] loop3: p5 start 1633771873 is beyond EOD, truncated [ 309.728296][ T8986] loop3: p6 start 1633771776 is beyond EOD, truncated [ 309.737797][ T8986] loop3: p7 start 1633771873 is beyond EOD, truncated [ 309.745335][ T8986] loop3: p8 start 1886744434 is beyond EOD, truncated [ 309.752376][ T8986] loop3: p9 start 1633771873 is beyond EOD, truncated [ 309.762364][ T8986] loop3: p10 start 1633771873 is beyond EOD, truncated [ 310.280892][ T8982] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 310.302257][ T8982] UDF-fs: Scanning with blocksize 4096 failed [ 310.318024][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.330950][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.434267][ T10] gspca_sonixj: reg_w1 err -110 [ 310.544126][ T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 310.561128][ T10] usb 7-1: USB disconnect, device number 11 [ 310.654606][ T5923] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 310.833211][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 310.842251][ T5923] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 310.853373][ T5923] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 310.867440][ T5923] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 310.879090][ T5923] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 310.911322][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 310.951086][ T5923] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 310.991052][ T5923] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 311.030341][ T5923] usb 2-1: Product: syz [ 311.040754][ T5923] usb 2-1: Manufacturer: syz [ 311.045515][ T5923] usb 2-1: SerialNumber: syz [ 311.059385][ T5923] usb 2-1: config 0 descriptor?? [ 311.073480][ T5923] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 311.155401][ T5923] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 311.328555][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 311.328555][ T5960] usb 2-1: USB disconnect, device number 65 [ 311.344365][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 311.374871][ T5960] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 311.390027][ T9] usb 6-1: USB disconnect, device number 17 [ 311.574628][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 311.594956][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.611717][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.622981][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 311.638190][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.658628][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.677907][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 311.695275][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.727777][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.742834][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 311.758218][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.785128][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.805412][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 311.843515][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.855116][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.867830][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 311.894857][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.933148][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.968359][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 311.998753][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.015126][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.034594][ T9] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 312.046039][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 312.067485][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.087328][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.146179][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 312.172895][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 312.185578][ T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 312.195707][ T10] usb 7-1: Product: syz [ 312.204208][ T10] usb 7-1: Manufacturer: syz [ 312.209963][ T9005] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1145'. [ 312.221070][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 312.242360][ T9] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 312.251591][ T10] usb 7-1: SerialNumber: syz [ 312.278155][ T10] usb 7-1: config 0 descriptor?? [ 312.287101][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.318017][ T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 312.342415][ T9] usb 6-1: config 0 descriptor?? [ 312.351519][ T9001] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 312.585077][ T10] usb 7-1: USB disconnect, device number 12 [ 312.660759][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 312.854654][ T9] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 313.133954][ T9] usb 6-1: USB disconnect, device number 18 [ 313.633993][ T5166] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 313.843890][ T5166] usb 2-1: Using ep0 maxpacket: 32 [ 313.888008][ T5166] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 313.918396][ T5166] usb 2-1: config 0 has no interface number 0 [ 313.931473][ T5166] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 313.960561][ T5166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.983859][ T5166] usb 2-1: Product: syz [ 313.988077][ T5166] usb 2-1: Manufacturer: syz [ 314.017437][ T5166] usb 2-1: SerialNumber: syz [ 314.040262][ T5166] usb 2-1: config 0 descriptor?? [ 314.062086][ T5166] smsc95xx v2.0.0 [ 314.504071][ T5166] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 314.527109][ T5166] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 314.685967][ T5960] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 314.766330][ T5166] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 314.781094][ T5166] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 314.854169][ T5960] usb 6-1: Using ep0 maxpacket: 32 [ 315.012765][ T9] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 315.255196][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 315.640936][ T9] usb 7-1: config 9 has an invalid interface number: 44 but max is 2 [ 315.965884][ T9] usb 7-1: config 9 has an invalid interface number: 137 but max is 2 [ 315.975329][ T9] usb 7-1: config 9 has an invalid interface number: 68 but max is 2 [ 315.985297][ T9] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 315.995851][ T9] usb 7-1: config 9 has no interface number 0 [ 316.001936][ T9] usb 7-1: config 9 has no interface number 1 [ 316.008872][ T9] usb 7-1: config 9 has no interface number 2 [ 316.016542][ T9] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 316.027801][ T9] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.038939][ T9] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 316.051158][ T9] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.062283][ T9] usb 7-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 316.079083][ T9] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 316.363850][ T9] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 316.381854][ T9] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 316.392924][ T9] usb 7-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 316.403912][ T9] usb 7-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 316.418047][ T9] usb 7-1: config 9 interface 137 has no altsetting 0 [ 316.443939][ T9] usb 7-1: config 9 interface 68 has no altsetting 0 [ 316.464055][ T9] usb 7-1: Dual-Role OTG device on HNP port [ 316.482219][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 316.619273][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.628339][ T9] usb 7-1: Product: syz [ 316.632531][ T9] usb 7-1: Manufacturer: syz [ 316.829244][ T5860] usb 2-1: USB disconnect, device number 66 [ 316.883856][ T9] usb 7-1: SerialNumber: syz [ 317.160618][ T9032] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 317.184098][ T9] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 317.192062][ T9] pvrusb2: Failed to create hdw handler [ 317.199360][ T9] pvrusb2 7-1:9.44: probe with driver pvrusb2 failed with error -12 [ 317.223299][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.230936][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.467266][ T9] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 317.482236][ T9] pvrusb2: Failed to create hdw handler [ 317.489737][ T9] pvrusb2 7-1:9.137: probe with driver pvrusb2 failed with error -12 [ 317.506538][ T9] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 317.534991][ T9] pvrusb2: Failed to create hdw handler [ 317.540618][ T9] pvrusb2 7-1:9.68: probe with driver pvrusb2 failed with error -12 [ 317.567753][ T9] usb 7-1: USB disconnect, device number 13 [ 317.575277][ T5960] usb 6-1: unable to get BOS descriptor or descriptor too short [ 317.609381][ T9040] loop6: detected capacity change from 0 to 7 [ 317.647264][ T5960] usb 6-1: no configurations [ 317.649123][ T9040] Dev loop6: unable to read RDB block 7 [ 317.651916][ T5960] usb 6-1: can't read configurations, error -22 [ 317.707509][ T9040] loop6: AHDI p3 p4 [ 317.711493][ T9040] loop6: partition table partially beyond EOD, truncated [ 317.732655][ T9042] binder: 9041:9042 ioctl c0306201 2000000001c0 returned -14 [ 317.784330][ T9040] loop6: p3 start 1886353253 is beyond EOD, truncated [ 317.880066][ T9044] loop3: detected capacity change from 0 to 1 [ 317.949767][ T9044] Dev loop3: unable to read RDB block 1 [ 317.986533][ T9044] loop3: unable to read partition table [ 317.992502][ T9044] loop3: partition table beyond EOD, truncated [ 318.104293][ T9044] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 318.365255][ T5166] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 318.597518][ T5166] usb 7-1: not running at top speed; connect to a high speed hub [ 318.639506][ T5166] usb 7-1: config 9 has an invalid interface number: 44 but max is 2 [ 318.668784][ T5166] usb 7-1: config 9 has an invalid interface number: 137 but max is 2 [ 318.683402][ T5166] usb 7-1: config 9 has an invalid interface number: 68 but max is 2 [ 318.707461][ T5166] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 318.746906][ T5166] usb 7-1: config 9 has no interface number 0 [ 318.783312][ T5166] usb 7-1: config 9 has no interface number 1 [ 318.793848][ T5166] usb 7-1: config 9 has no interface number 2 [ 318.804956][ T5166] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 318.862894][ T5166] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 318.886521][ T5166] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 318.898695][ T5166] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 318.914214][ T5166] usb 7-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 318.926995][ T5166] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 318.947687][ T5166] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 318.978056][ T5166] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 319.025351][ T5166] usb 7-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 319.045651][ T5166] usb 7-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 319.072966][ T5166] usb 7-1: config 9 interface 137 has no altsetting 0 [ 319.092919][ T5166] usb 7-1: config 9 interface 68 has no altsetting 0 [ 319.117080][ T5166] usb 7-1: Dual-Role OTG device on HNP port [ 319.123738][ T5166] usb 7-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 319.168651][ T5166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.209092][ T5166] usb 7-1: Product: syz [ 319.213308][ T5166] usb 7-1: Manufacturer: syz [ 319.247422][ T5166] usb 7-1: SerialNumber: syz [ 319.282292][ T9048] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 319.316960][ T5166] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 319.342041][ T5166] pvrusb2: Failed to create hdw handler [ 319.359625][ T5166] pvrusb2 7-1:9.44: probe with driver pvrusb2 failed with error -12 [ 319.535448][ T5166] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 319.543701][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.554383][ T5166] pvrusb2: Failed to create hdw handler [ 319.561040][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.568881][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.580513][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.589901][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.598655][ T5166] pvrusb2 7-1:9.137: probe with driver pvrusb2 failed with error -12 [ 319.734408][ T5166] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 319.742927][ T5166] pvrusb2: Failed to create hdw handler [ 319.784760][ T5166] pvrusb2 7-1:9.68: probe with driver pvrusb2 failed with error -12 [ 319.829927][ T5166] usb 7-1: USB disconnect, device number 14 [ 320.848125][ T9067] chnl_net:caif_netlink_parms(): no params data found [ 321.132958][ T9104] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1182'. [ 321.420937][ T9114] loop3: detected capacity change from 0 to 1 [ 321.442020][ T9114] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 321.473602][ T9114] loop3: p1 start 791543808 is beyond EOD, truncated [ 321.490098][ T9114] loop3: p2 start 1633771873 is beyond EOD, truncated [ 321.493389][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.497486][ T9114] loop3: p3 start 1633771873 is beyond EOD, truncated [ 321.514663][ T9114] loop3: p4 start 1633771873 is beyond EOD, truncated [ 321.521551][ T9114] loop3: p5 start 1633771873 is beyond EOD, truncated [ 321.528952][ T9114] loop3: p6 start 1633771776 is beyond EOD, truncated [ 321.534871][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.536552][ T9114] loop3: p7 start 1633771873 is beyond EOD, truncated [ 321.555494][ T9114] loop3: p8 start 1886744434 is beyond EOD, truncated [ 321.562429][ T9114] loop3: p9 start 1633771873 is beyond EOD, truncated [ 321.570712][ T9067] bridge_slave_0: entered allmulticast mode [ 321.578278][ T9114] loop3: p10 start 1633771873 is beyond EOD, truncated [ 321.589367][ T9067] bridge_slave_0: entered promiscuous mode [ 321.605359][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.622827][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.640852][ T9067] bridge_slave_1: entered allmulticast mode [ 321.674402][ T9067] bridge_slave_1: entered promiscuous mode [ 321.706023][ T5840] Bluetooth: hci7: command tx timeout [ 321.713834][ T5904] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 321.903890][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 321.930102][ T5904] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 321.953539][ T5904] usb 2-1: config 0 has no interface number 0 [ 321.967925][ T5904] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 322.003965][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.026485][ T5904] usb 2-1: Product: syz [ 322.040779][ T5904] usb 2-1: Manufacturer: syz [ 322.050838][ T9067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.063912][ T5904] usb 2-1: SerialNumber: syz [ 322.084493][ T5904] usb 2-1: config 0 descriptor?? [ 322.100038][ T9067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.115668][ T5904] smsc95xx v2.0.0 [ 322.341508][ T9067] team0: Port device team_slave_0 added [ 322.397385][ T9067] team0: Port device team_slave_1 added [ 322.518636][ T5904] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 322.604387][ T5904] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 322.630889][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.673883][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.753931][ T9067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.845104][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.852984][ T5904] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 322.874858][ T5904] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 322.890615][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.937120][ T9067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.332385][ T9067] hsr_slave_0: entered promiscuous mode [ 323.356567][ T9067] hsr_slave_1: entered promiscuous mode [ 323.379777][ T9067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.392486][ T9067] Cannot create hsr debugfs directory [ 323.645947][ T5890] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 323.777528][ T5840] Bluetooth: hci7: command tx timeout [ 323.867910][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.923679][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.981414][ T5890] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 324.050897][ T5890] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 324.096199][ T5890] usb 7-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 324.154017][ T5890] usb 7-1: Manufacturer: syz [ 324.201588][ T5890] usb 7-1: config 0 descriptor?? [ 324.386183][ T10] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 324.470365][ T5904] usb 2-1: USB disconnect, device number 67 [ 324.565281][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 324.596708][ T9067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 324.616445][ T10] usb 6-1: config 9 has an invalid interface number: 44 but max is 2 [ 324.634026][ T10] usb 6-1: config 9 has an invalid interface number: 137 but max is 2 [ 324.668315][ T9067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 324.683031][ T10] usb 6-1: config 9 has an invalid interface number: 68 but max is 2 [ 324.720689][ T10] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 324.728210][ T5890] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 324.771973][ T10] usb 6-1: config 9 has no interface number 0 [ 324.793209][ T10] usb 6-1: config 9 has no interface number 1 [ 324.797382][ T9067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 324.818965][ T10] usb 6-1: config 9 has no interface number 2 [ 324.854608][ T10] usb 6-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 324.876343][ T9067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 324.942435][ T10] usb 6-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.944414][ T9141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.980967][ T10] usb 6-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 325.033971][ T10] usb 6-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.085827][ T10] usb 6-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 325.102325][ T9141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.148307][ T10] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 325.192929][ T10] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 325.240622][ T10] usb 6-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 325.263395][ T9163] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1200'. [ 325.355315][ T10] usb 6-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 325.412127][ T10] usb 6-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 325.460126][ T10] usb 6-1: config 9 interface 137 has no altsetting 0 [ 325.479334][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.513945][ T10] usb 6-1: config 9 interface 68 has no altsetting 0 [ 325.531554][ T10] usb 6-1: Dual-Role OTG device on HNP port [ 325.538246][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 325.559849][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 325.583806][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.601633][ T9067] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.623798][ T10] usb 6-1: Product: syz [ 325.643820][ T10] usb 6-1: Manufacturer: syz [ 325.654695][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.661846][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.674566][ T10] usb 6-1: SerialNumber: syz [ 325.708052][ T9147] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 325.720592][ T10] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 325.745339][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.752530][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.824411][ T10] pvrusb2: Failed to create hdw handler [ 325.835448][ T10] pvrusb2 6-1:9.44: probe with driver pvrusb2 failed with error -12 [ 325.854455][ T5840] Bluetooth: hci7: command tx timeout [ 325.931222][ T10] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 325.949873][ T10] pvrusb2: Failed to create hdw handler [ 325.959360][ T10] pvrusb2 6-1:9.137: probe with driver pvrusb2 failed with error -12 [ 326.047697][ T10] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 326.114421][ T10] pvrusb2: Failed to create hdw handler [ 326.148352][ T10] pvrusb2 6-1:9.68: probe with driver pvrusb2 failed with error -12 [ 326.196670][ T10] usb 6-1: USB disconnect, device number 21 [ 326.313107][ T5890] usb 7-1: USB disconnect, device number 15 [ 326.513866][ T5904] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 326.717924][ T5904] usb 2-1: not running at top speed; connect to a high speed hub [ 326.725324][ T9178] loop6: detected capacity change from 0 to 7 [ 326.734229][ T5904] usb 2-1: config 9 has an invalid interface number: 44 but max is 2 [ 326.743894][ T5904] usb 2-1: config 9 has an invalid interface number: 137 but max is 2 [ 326.752093][ T5904] usb 2-1: config 9 has an invalid interface number: 68 but max is 2 [ 326.754329][ T9178] Dev loop6: unable to read RDB block 7 [ 326.784150][ T5904] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 326.794681][ T9178] loop6: AHDI p3 p4 [ 326.802141][ T9178] loop6: partition table partially beyond EOD, truncated [ 326.824312][ T9178] loop6: p3 start 1886353253 is beyond EOD, truncated [ 326.832094][ T5904] usb 2-1: config 9 has no interface number 0 [ 326.887791][ T5904] usb 2-1: config 9 has no interface number 1 [ 326.919359][ T9067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.941659][ T5904] usb 2-1: config 9 has no interface number 2 [ 326.964333][ T5904] usb 2-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 327.007864][ T5904] usb 2-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.047584][ T5904] usb 2-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 327.070578][ T5904] usb 2-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.082344][ T5904] usb 2-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 327.097058][ T5904] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 327.120403][ T5904] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 327.141499][ T5904] usb 2-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 327.156185][ T5904] usb 2-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 327.191977][ T5904] usb 2-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 327.229843][ T5904] usb 2-1: config 9 interface 137 has no altsetting 0 [ 327.259006][ T5904] usb 2-1: config 9 interface 68 has no altsetting 0 [ 327.279624][ T5904] usb 2-1: Dual-Role OTG device on HNP port [ 327.286157][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 327.351455][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.400329][ T5904] usb 2-1: Product: syz [ 327.416734][ T5904] usb 2-1: Manufacturer: syz [ 327.441794][ T5904] usb 2-1: SerialNumber: syz [ 327.477394][ T9171] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 327.561759][ T5904] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 327.600533][ T5904] pvrusb2: Failed to create hdw handler [ 327.634056][ T5904] pvrusb2 2-1:9.44: probe with driver pvrusb2 failed with error -12 [ 327.651434][ T9189] loop3: detected capacity change from 0 to 1 [ 327.694906][ T9189] Dev loop3: unable to read RDB block 1 [ 327.700594][ T9189] loop3: unable to read partition table [ 327.737801][ T5904] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 327.751585][ T9192] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.1208'. [ 327.769651][ T5904] pvrusb2: Failed to create hdw handler [ 327.804203][ T9189] loop3: partition table beyond EOD, truncated [ 327.817866][ T5904] pvrusb2 2-1:9.137: probe with driver pvrusb2 failed with error -12 [ 327.832534][ T9189] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 327.854797][ T9192] hpfs: Bad magic ... probably not HPFS [ 327.934954][ T5840] Bluetooth: hci7: command tx timeout [ 327.948651][ T5904] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 327.962287][ T5904] pvrusb2: Failed to create hdw handler [ 327.980833][ T5904] pvrusb2 2-1:9.68: probe with driver pvrusb2 failed with error -12 [ 328.024124][ T5904] usb 2-1: USB disconnect, device number 68 [ 328.041376][ T9067] veth0_vlan: entered promiscuous mode [ 328.182617][ T9067] veth1_vlan: entered promiscuous mode [ 328.297476][ T9067] veth0_macvtap: entered promiscuous mode [ 328.312755][ T9067] veth1_macvtap: entered promiscuous mode [ 328.480177][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.570175][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.631456][ T1112] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.668010][ T1112] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.709235][ T1112] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.754313][ T5960] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 328.774724][ T1112] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.938294][ T5960] usb 7-1: not running at top speed; connect to a high speed hub [ 328.949160][ T5960] usb 7-1: config 9 has an invalid interface number: 44 but max is 2 [ 328.974230][ T5960] usb 7-1: config 9 has an invalid interface number: 137 but max is 2 [ 328.978655][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.001509][ T5960] usb 7-1: config 9 has an invalid interface number: 68 but max is 2 [ 329.031961][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.040711][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 329.084378][ T5960] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 329.133982][ T5960] usb 7-1: config 9 has no interface number 0 [ 329.140474][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.151986][ T5960] usb 7-1: config 9 has no interface number 1 [ 329.157341][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.191275][ T5960] usb 7-1: config 9 has no interface number 2 [ 329.203908][ T10] usb 2-1: device descriptor read/64, error -71 [ 329.225929][ T5960] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 329.270538][ T5960] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.316617][ T5960] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 329.353952][ T5960] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.385095][ T5960] usb 7-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 329.423033][ T5960] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 329.464350][ T5960] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 329.464958][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 329.503305][ T5960] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 329.629260][ T5960] usb 7-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 329.644076][ T10] usb 2-1: device descriptor read/64, error -71 [ 329.681336][ T5960] usb 7-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 329.719031][ T5960] usb 7-1: config 9 interface 137 has no altsetting 0 [ 329.753861][ T5960] usb 7-1: config 9 interface 68 has no altsetting 0 [ 329.768839][ T10] usb usb2-port1: attempt power cycle [ 329.782888][ T5960] usb 7-1: Dual-Role OTG device on HNP port [ 329.792974][ T5960] usb 7-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 329.814196][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 329.822627][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.842944][ T5960] usb 7-1: Product: syz [ 329.847875][ T5960] usb 7-1: Manufacturer: syz [ 329.863199][ T5960] usb 7-1: SerialNumber: syz [ 329.889056][ T9202] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 329.915904][ T5960] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 329.935509][ T5960] pvrusb2: Failed to create hdw handler [ 329.941421][ T5960] pvrusb2 7-1:9.44: probe with driver pvrusb2 failed with error -12 [ 330.017804][ T9] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 330.037116][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.118131][ T9] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 330.132362][ T5960] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 330.135200][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.182633][ T5960] pvrusb2: Failed to create hdw handler [ 330.184013][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 330.208100][ T9] usb 8-1: config 0 descriptor?? [ 330.238620][ T5960] pvrusb2 7-1:9.137: probe with driver pvrusb2 failed with error -12 [ 330.246748][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 330.267593][ T10] usb 2-1: device descriptor read/8, error -71 [ 330.294974][ T5960] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 330.305426][ T5960] pvrusb2: Failed to create hdw handler [ 330.312600][ T5960] pvrusb2 7-1:9.68: probe with driver pvrusb2 failed with error -12 [ 330.353356][ T5960] usb 7-1: USB disconnect, device number 16 [ 330.463955][ T5923] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 330.534233][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 330.604664][ T10] usb 2-1: device descriptor read/8, error -71 [ 330.672837][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 330.681781][ T5923] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 330.690431][ T5923] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 330.702374][ T5166] usb 8-1: USB disconnect, device number 2 [ 330.735689][ T10] usb usb2-port1: unable to enumerate USB device [ 330.744634][ T5923] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 330.756901][ T9234] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.1221'. [ 330.824905][ T5923] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 330.861326][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.880955][ T5923] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 330.892730][ T5923] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 330.932898][ T5923] usb 6-1: Product: syz [ 330.951726][ T5923] usb 6-1: Manufacturer: syz [ 330.961859][ T5923] usb 6-1: SerialNumber: syz [ 330.996705][ T5923] usb 6-1: config 0 descriptor?? [ 331.026865][ T5923] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 331.094990][ T5923] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 331.285320][ T5923] usb 6-1: USB disconnect, device number 22 [ 331.356428][ T5923] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 331.774134][ T5166] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 331.894539][ T9250] tipc: Enabling of bearer rejected, already enabled [ 331.948360][ T5166] usb 8-1: config 16 has an invalid interface number: 7 but max is 0 [ 331.983064][ T5166] usb 8-1: config 16 has no interface number 0 [ 332.013694][ T5166] usb 8-1: config 16 interface 7 has no altsetting 0 [ 332.044819][ T5166] usb 8-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=e1.e1 [ 332.069167][ T9254] loop3: detected capacity change from 0 to 1 [ 332.103960][ T5166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.114349][ T9254] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 332.128354][ T5166] usb 8-1: Product: syz [ 332.137023][ T9254] loop3: p1 start 791543808 is beyond EOD, truncated [ 332.144031][ T5166] usb 8-1: Manufacturer: syz [ 332.158872][ T5166] usb 8-1: SerialNumber: syz [ 332.168067][ T9254] loop3: p2 start 1633771873 is beyond EOD, truncated [ 332.205676][ T9254] loop3: p3 start 1633771873 is beyond EOD, truncated [ 332.213600][ T9254] loop3: p4 start 1633771873 is beyond EOD, truncated [ 332.234080][ T9254] loop3: p5 start 1633771873 is beyond EOD, truncated [ 332.251390][ T9254] loop3: p6 start 1633771776 is beyond EOD, truncated [ 332.268777][ T9254] loop3: p7 start 1633771873 is beyond EOD, truncated [ 332.278917][ T9254] loop3: p8 start 1886744434 is beyond EOD, truncated [ 332.288999][ T9254] loop3: p9 start 1633771873 is beyond EOD, truncated [ 332.307686][ T9254] loop3: p10 start 1633771873 is beyond EOD, truncated [ 332.408849][ T9246] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 332.413997][ T9] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 332.450793][ T9246] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 332.515924][ T5166] gspca_main: touptek-2.14.0 probing 0547:6801 [ 332.590866][ T5166] usb 8-1: USB disconnect, device number 3 [ 332.644703][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 332.679015][ T9] usb 7-1: config 9 has an invalid interface number: 44 but max is 2 [ 332.699533][ T9] usb 7-1: config 9 has an invalid interface number: 137 but max is 2 [ 332.757625][ T9263] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.1233'. [ 332.762295][ T9] usb 7-1: config 9 has an invalid interface number: 68 but max is 2 [ 332.805771][ T9] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 332.838809][ T9] usb 7-1: config 9 has no interface number 0 [ 332.864971][ T9265] hfs: can't find a HFS filesystem on dev rnullb0 [ 332.872135][ T9] usb 7-1: config 9 has no interface number 1 [ 332.902977][ T9] usb 7-1: config 9 has no interface number 2 [ 332.952472][ T9] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 332.997498][ T9] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 333.049433][ T9] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 333.119754][ T9] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 333.173865][ T9] usb 7-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 333.243540][ T9] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 333.268413][ T9] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 333.291346][ T9] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 333.322780][ T9] usb 7-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 333.353909][ T9] usb 7-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 333.394031][ T9] usb 7-1: config 9 interface 137 has no altsetting 0 [ 333.449994][ T9] usb 7-1: config 9 interface 68 has no altsetting 0 [ 333.479963][ T9] usb 7-1: Dual-Role OTG device on HNP port [ 333.486606][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 333.528433][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.554330][ T9] usb 7-1: Product: syz [ 333.579024][ T9] usb 7-1: Manufacturer: syz [ 333.588462][ T5166] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 333.589051][ T9] usb 7-1: SerialNumber: syz [ 333.645646][ T9256] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 333.676900][ T9] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 333.714487][ T9] pvrusb2: Failed to create hdw handler [ 333.734064][ T9] pvrusb2 7-1:9.44: probe with driver pvrusb2 failed with error -12 [ 333.754324][ T9279] loop6: detected capacity change from 0 to 7 [ 333.776949][ T9279] Dev loop6: unable to read RDB block 7 [ 333.792794][ T5166] usb 8-1: Using ep0 maxpacket: 16 [ 333.802983][ T9279] loop6: AHDI p3 p4 [ 333.816772][ T5166] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 333.839350][ T9279] loop6: partition table partially beyond EOD, truncated [ 333.878652][ T9] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 333.894687][ T5166] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 55, changing to 7 [ 333.898381][ T9] pvrusb2: Failed to create hdw handler [ 333.914283][ T9279] loop6: p3 start 1886353253 is beyond EOD, truncated [ 333.942378][ T5166] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8496, setting to 1024 [ 333.969001][ T9] pvrusb2 7-1:9.137: probe with driver pvrusb2 failed with error -12 [ 333.997202][ T5166] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 334.027767][ T5166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.029976][ T9] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 334.065637][ T9] pvrusb2: Failed to create hdw handler [ 334.069076][ T5166] usb 8-1: Product: syz [ 334.099008][ T5166] usb 8-1: Manufacturer: syz [ 334.099077][ T9] pvrusb2 7-1:9.68: probe with driver pvrusb2 failed with error -12 [ 334.112061][ T5166] usb 8-1: SerialNumber: syz [ 334.135644][ T5166] usb 8-1: config 0 descriptor?? [ 334.157810][ T5166] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 334.167963][ T9] usb 7-1: USB disconnect, device number 17 [ 334.191870][ T5166] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 334.653695][ T9290] loop3: detected capacity change from 0 to 1 [ 334.672563][ T9290] Dev loop3: unable to read RDB block 1 [ 334.682643][ T9290] loop3: unable to read partition table [ 334.703184][ T9290] loop3: partition table beyond EOD, truncated [ 334.719624][ T9290] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 334.758557][ T5166] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 334.794056][ T5166] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 334.834374][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 335.056850][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 335.467487][ T5166] em28xx 8-1:0.0: AC97 command still being executed: not handled properly! [ 335.958684][ T5166] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 336.175962][ T5166] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 336.474053][ T5166] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 336.483957][ T5166] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 336.503950][ T5166] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 336.510824][ T5166] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 336.535636][ T5166] usb 8-1: USB disconnect, device number 4 [ 336.646206][ T9310] /dev/nullb0: Can't open blockdev [ 337.722738][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.734228][ T10] usb 6-1: no configurations [ 337.738865][ T10] usb 6-1: can't read configurations, error -22 [ 337.910322][ T9324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.221235][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1260'. [ 338.626572][ T9337] netlink: 'syz.5.1262': attribute type 1 has an invalid length. [ 338.684620][ T9337] netlink: 'syz.5.1262': attribute type 1 has an invalid length. [ 338.692887][ T9338] /dev/rnullb0: Can't open blockdev [ 338.803893][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1255'. [ 338.863972][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1255'. [ 338.939035][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1255'. [ 339.343905][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 339.536948][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 339.569057][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 339.609221][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 55, changing to 7 [ 339.659900][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8496, setting to 1024 [ 339.722100][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 339.752093][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.780875][ T10] usb 6-1: Product: syz [ 339.807519][ T10] usb 6-1: Manufacturer: syz [ 339.839029][ T10] usb 6-1: SerialNumber: syz [ 339.865221][ T10] usb 6-1: config 0 descriptor?? [ 339.893432][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 339.916573][ T9358] loop3: detected capacity change from 0 to 1 [ 339.938683][ T9358] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 339.957218][ T9358] loop3: p1 start 791543808 is beyond EOD, truncated [ 339.966200][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 339.968939][ T9358] loop3: p2 start 1633771873 is beyond EOD, truncated [ 339.988412][ T9358] loop3: p3 start 1633771873 is beyond EOD, truncated [ 340.011676][ T9358] loop3: p4 start 1633771873 is beyond EOD, truncated [ 340.041158][ T9358] loop3: p5 start 1633771873 is beyond EOD, truncated [ 340.072560][ T9358] loop3: p6 start 1633771776 is beyond EOD, truncated [ 340.100607][ T9358] loop3: p7 start 1633771873 is beyond EOD, truncated [ 340.128925][ T9358] loop3: p8 start 1886744434 is beyond EOD, truncated [ 340.152178][ T9358] loop3: p9 start 1633771873 is beyond EOD, truncated [ 340.182013][ T9358] loop3: p10 start 1633771873 is beyond EOD, truncated [ 340.548535][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 340.577837][ T10] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 340.834752][ T9371] tipc: Enabling of bearer rejected, already enabled [ 341.079384][ T9376] vxfs: WRONG superblock magic 00000000 at 1 [ 341.122877][ T9376] vxfs: WRONG superblock magic 00000000 at 8 [ 341.133634][ T9375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.174280][ T9376] vxfs: can't find superblock. [ 341.224004][ T10] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 341.242861][ T10] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 341.424666][ T10] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 341.472253][ T10] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 341.615673][ T10] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 341.622473][ T10] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 341.642993][ T10] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 341.685071][ T10] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 341.732935][ T10] usb 6-1: USB disconnect, device number 25 [ 343.105193][ T9418] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 343.173956][ T9418] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 343.644585][ T9434] syz.6.1300 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 343.934765][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 344.123853][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 344.328183][ T9445] Can't find a SQUASHFS superblock on rnullb0 [ 344.417231][ T9447] Can't find a SQUASHFS superblock on rnullb0 [ 346.104312][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 346.353821][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 346.520755][ T9457] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1307'. [ 346.616468][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 346.633824][ T9] usb 6-1: config 0 has no interface number 0 [ 346.643564][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 346.658561][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.666869][ T9] usb 6-1: Product: syz [ 346.672675][ T9] usb 6-1: Manufacturer: syz [ 346.715912][ T9] usb 6-1: SerialNumber: syz [ 346.729279][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 346.801955][ T9] usb 6-1: config 0 descriptor?? [ 346.830738][ T10] usb 8-1: no configurations [ 346.866100][ T9] smsc95xx v2.0.0 [ 346.913051][ T10] usb 8-1: can't read configurations, error -22 [ 347.270050][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 347.326877][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 347.952514][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 347.991630][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 348.042772][ T9] usb 6-1: USB disconnect, device number 26 [ 348.049158][ T5923] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 348.253993][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 348.268124][ T5923] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 348.313725][ T5923] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 348.337804][ T5923] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 348.349700][ T5923] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 348.363384][ T5923] usb 7-1: config 0 interface 0 has no altsetting 0 [ 348.375459][ T5923] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 348.393600][ T5923] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 348.402517][ T5923] usb 7-1: Product: syz [ 348.407377][ T5923] usb 7-1: Manufacturer: syz [ 348.414619][ T5923] usb 7-1: SerialNumber: syz [ 348.431631][ T5923] usb 7-1: config 0 descriptor?? [ 348.473511][ T5923] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 348.523573][ T5923] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 348.710293][ T9476] tipc: Enabling of bearer rejected, already enabled [ 348.720698][ T5960] usb 7-1: USB disconnect, device number 18 [ 348.726884][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 348.788595][ T5960] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 349.552587][ T9487] /dev/rnullb0: Can't open blockdev [ 349.794158][ T5960] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 349.964229][ T5960] usb 6-1: device descriptor read/64, error -71 [ 350.074332][ T5903] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 350.234254][ T5960] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 350.255927][ T5903] usb 7-1: not running at top speed; connect to a high speed hub [ 350.287812][ T5903] usb 7-1: config 9 has an invalid interface number: 44 but max is 2 [ 350.314655][ T5903] usb 7-1: config 9 has an invalid interface number: 137 but max is 2 [ 350.342745][ T5903] usb 7-1: config 9 has an invalid interface number: 68 but max is 2 [ 350.385020][ T5903] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 350.397783][ T5903] usb 7-1: config 9 has no interface number 0 [ 350.406990][ T5903] usb 7-1: config 9 has no interface number 1 [ 350.413652][ T5903] usb 7-1: config 9 has no interface number 2 [ 350.420389][ T5960] usb 6-1: device descriptor read/64, error -71 [ 350.435099][ T5903] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 350.479277][ T5903] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.530415][ T5903] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 350.555509][ T5960] usb usb6-port1: attempt power cycle [ 350.588859][ T5903] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.644834][ T5903] usb 7-1: config 9 interface 137 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 350.699153][ T5903] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 350.746313][ T5903] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 350.793638][ T5903] usb 7-1: config 9 interface 137 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 350.807312][ T5903] usb 7-1: config 9 interface 68 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 350.818932][ T5903] usb 7-1: config 9 interface 68 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 350.832998][ T5903] usb 7-1: config 9 interface 137 has no altsetting 0 [ 350.842174][ T5903] usb 7-1: config 9 interface 68 has no altsetting 0 [ 350.865821][ T5903] usb 7-1: Dual-Role OTG device on HNP port [ 350.877671][ T5903] usb 7-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 350.903038][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.925194][ T5903] usb 7-1: Product: syz [ 350.930136][ T5903] usb 7-1: Manufacturer: syz [ 350.964457][ T5903] usb 7-1: SerialNumber: syz [ 350.992729][ T9491] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 351.000629][ T5960] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 351.028329][ T5903] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 351.039910][ T5960] usb 6-1: device descriptor read/8, error -71 [ 351.064293][ T5166] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 351.074503][ T5903] pvrusb2: Failed to create hdw handler [ 351.091259][ T5903] pvrusb2 7-1:9.44: probe with driver pvrusb2 failed with error -12 [ 351.241449][ T5903] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 351.249064][ T5166] usb 8-1: Using ep0 maxpacket: 32 [ 351.296210][ T5166] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 351.314362][ T5903] pvrusb2: Failed to create hdw handler [ 351.319999][ T5960] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 351.343921][ T5166] usb 8-1: config 0 has no interface number 0 [ 351.350313][ T5903] pvrusb2 7-1:9.137: probe with driver pvrusb2 failed with error -12 [ 351.379171][ T5960] usb 6-1: device descriptor read/8, error -71 [ 351.391109][ T5166] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 351.423565][ T5166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.436798][ T5166] usb 8-1: Product: syz [ 351.446649][ T5903] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 351.464796][ T5166] usb 8-1: Manufacturer: syz [ 351.478590][ T5903] pvrusb2: Failed to create hdw handler [ 351.485611][ T5166] usb 8-1: SerialNumber: syz [ 351.495770][ T5903] pvrusb2 7-1:9.68: probe with driver pvrusb2 failed with error -12 [ 351.507395][ T5166] usb 8-1: config 0 descriptor?? [ 351.524377][ T5960] usb usb6-port1: unable to enumerate USB device [ 351.554610][ T5166] smsc95xx v2.0.0 [ 351.562142][ T5903] usb 7-1: USB disconnect, device number 19 [ 351.951096][ T5166] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 352.003889][ T5166] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.676470][ T5166] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 352.708143][ T5166] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 352.765857][ T5166] usb 8-1: USB disconnect, device number 7 [ 353.725988][ T5166] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 353.934153][ T5166] usb 7-1: Using ep0 maxpacket: 16 [ 353.948071][ T5166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.971822][ T5166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.024711][ T5166] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.089762][ T5166] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 354.136159][ T5166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.171050][ T9518] program syz.5.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.174853][ T5166] usb 7-1: config 0 descriptor?? [ 354.343007][ T9] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 354.977801][ T9501] netlink: 'syz.6.1325': attribute type 2 has an invalid length. [ 357.233929][ T5205] udevd[5205]: worker [6255] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 358.191179][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 358.204036][ T2345] pvrusb2: Failure uploading firmware1 [ 358.209557][ T2345] pvrusb2: Device initialization was not successful. [ 358.216372][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 358.228827][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 358.238746][ T24] pvrusb2: Device being rendered inoperable [ 358.245717][ T2345] usb 3-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 358.281157][ T9501] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1325'. [ 358.296341][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 358.333949][ T2345] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 358.605090][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1334'. [ 359.047193][ T5166] usbhid 7-1:0.0: can't add hid device: -71 [ 359.053251][ T5166] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 359.074462][ T9] usb 8-1: device descriptor read/64, error -71 [ 359.095975][ T5166] usb 7-1: USB disconnect, device number 20 [ 359.344008][ T9] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 359.665401][ T9] usb 8-1: not running at top speed; connect to a high speed hub [ 359.703378][ T9] usb 8-1: config 9 has an invalid interface number: 44 but max is 0 [ 359.751278][ T9] usb 8-1: config 9 has no interface number 0 [ 359.764429][ T9] usb 8-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 359.863896][ T9] usb 8-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.898236][ T9] usb 8-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 359.939486][ T9] usb 8-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.971236][ T9536] tipc: Enabling of bearer rejected, already enabled [ 359.974971][ T9] usb 8-1: Dual-Role OTG device on HNP port [ 360.018251][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 360.041381][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.093895][ T9] usb 8-1: Product: syz [ 360.098107][ T9] usb 8-1: Manufacturer: syz [ 360.164030][ T9] usb 8-1: SerialNumber: syz [ 360.235050][ T9527] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 360.271363][ T9] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 360.315222][ T9538] loop3: detected capacity change from 0 to 1 [ 360.333675][ T9] pvrusb2: Failed to create hdw handler [ 360.342153][ T9538] Dev loop3: unable to read RDB block 1 [ 360.372864][ T9] pvrusb2 8-1:9.44: probe with driver pvrusb2 failed with error -12 [ 360.383911][ T9538] loop3: unable to read partition table [ 360.442971][ T9538] loop3: partition table beyond EOD, truncated [ 360.479752][ T9] usb 8-1: USB disconnect, device number 9 [ 360.498138][ T9538] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 360.708947][ T9542] FAT-fs (rnullb0): bogus number of reserved sectors [ 360.781825][ T5847] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 360.782784][ T9542] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 360.796447][ T5847] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 360.817247][ T5847] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 360.829246][ T5847] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 360.839135][ T5847] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 361.084953][ T5882] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 361.199482][ T3513] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.294989][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 361.330124][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 361.389467][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.417656][ T3513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.451261][ T5882] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 361.481906][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.504836][ T5882] usb 6-1: Product: syz [ 361.518716][ T5882] usb 6-1: Manufacturer: syz [ 361.533920][ T5882] usb 6-1: SerialNumber: syz [ 361.560270][ T5882] usb 6-1: config 0 descriptor?? [ 361.619564][ T5882] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 361.649804][ T5882] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 361.744167][ T9561] XFS (rnullb0): Invalid superblock magic number [ 361.749926][ T3513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.110156][ T3513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.322178][ T5882] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 362.355197][ T5882] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 362.894063][ T5847] Bluetooth: hci8: command tx timeout [ 362.994879][ T9543] chnl_net:caif_netlink_parms(): no params data found [ 363.014329][ T5882] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 363.026960][ T5882] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 363.227274][ T3513] bridge_slave_1: left allmulticast mode [ 363.229901][ T5882] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 363.233140][ T3513] bridge_slave_1: left promiscuous mode [ 363.290911][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.291684][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 363.395177][ T3513] bridge_slave_0: left allmulticast mode [ 363.400880][ T3513] bridge_slave_0: left promiscuous mode [ 363.429088][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 363.462036][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 363.463462][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.504143][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 363.553039][ T5882] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 363.585017][ T5882] usb 6-1: USB disconnect, device number 31 [ 364.074749][ T5882] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 364.281677][ T5882] usb 7-1: not running at top speed; connect to a high speed hub [ 364.301407][ T5882] usb 7-1: config 9 has an invalid interface number: 44 but max is 0 [ 364.325948][ T5882] usb 7-1: config 9 has no interface number 0 [ 364.332115][ T5882] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 364.372509][ T5882] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.399833][ T5882] usb 7-1: config 9 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 364.453722][ T5882] usb 7-1: config 9 interface 44 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.540871][ T5882] usb 7-1: Dual-Role OTG device on HNP port [ 364.560870][ T5882] usb 7-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=d3.2d [ 364.601488][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.614196][ T5890] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 364.632205][ T5882] usb 7-1: Product: syz [ 364.656418][ T5882] usb 7-1: Manufacturer: syz [ 364.691559][ T5882] usb 7-1: SerialNumber: syz [ 364.714620][ T9592] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 364.755567][ T5882] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 364.803908][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 364.804307][ T5882] pvrusb2: Failed to create hdw handler [ 364.869864][ T3513] team0: Port device geneve1 removed [ 364.962087][ T5882] pvrusb2 7-1:9.44: probe with driver pvrusb2 failed with error -12 [ 364.974411][ T5847] Bluetooth: hci8: command tx timeout [ 365.111125][ T5882] usb 7-1: USB disconnect, device number 21 [ 367.063993][ T5847] Bluetooth: hci8: command tx timeout [ 367.506167][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short [ 367.523680][ T5890] usb 6-1: no configurations [ 367.547254][ T5890] usb 6-1: can't read configurations, error -22 [ 367.593880][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 367.792680][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.804427][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 367.816074][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 367.862942][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.878029][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.901555][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.913023][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.915741][ T3513] bond0 (unregistering): Released all slaves [ 367.941555][ T10] usb 8-1: Product: syz [ 367.961466][ T10] usb 8-1: Manufacturer: syz [ 367.998240][ T10] usb 8-1: SerialNumber: syz [ 368.071702][ T10] usb 8-1: config 0 descriptor?? [ 368.100861][ T10] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 368.113810][ T10] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 368.179353][ T3513] tipc: Disabling bearer [ 368.195961][ T3513] tipc: Disabling bearer [ 368.203155][ T3513] tipc: Left network mode [ 368.461760][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.484456][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.505719][ T9543] bridge_slave_0: entered allmulticast mode [ 368.518208][ T9543] bridge_slave_0: entered promiscuous mode [ 368.561438][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.604212][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.611638][ T9543] bridge_slave_1: entered allmulticast mode [ 368.639867][ T9543] bridge_slave_1: entered promiscuous mode [ 368.731267][ T10] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 368.758396][ T10] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 369.134771][ T5847] Bluetooth: hci8: command tx timeout [ 369.202725][ T9543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.327330][ T9543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.393838][ T10] em28xx 8-1:0.0: AC97 command still being executed: not handled properly! [ 369.424568][ T10] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 369.455409][ T3513] hsr_slave_0: left promiscuous mode [ 369.499328][ T3513] hsr_slave_1: left promiscuous mode [ 369.533128][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.565447][ T5882] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 369.583845][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.605746][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.613232][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.614866][ T10] em28xx 8-1:0.0: AC97 command still being executed: not handled properly! [ 369.660171][ T10] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 369.737673][ T5882] usb 7-1: Using ep0 maxpacket: 16 [ 369.751487][ T5882] usb 7-1: config 254 has an invalid interface number: 235 but max is 0 [ 369.772794][ T3513] veth1_macvtap: left promiscuous mode [ 369.784101][ T5882] usb 7-1: config 254 has no interface number 0 [ 369.803847][ T5882] usb 7-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 369.816148][ T10] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 369.836833][ T10] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 369.837432][ T3513] veth0_macvtap: left promiscuous mode [ 369.843430][ T5882] usb 7-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.863914][ T10] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 369.908214][ T3513] veth1_vlan: left promiscuous mode [ 369.924029][ T10] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 369.953511][ T5882] usb 7-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 369.959472][ T3513] veth0_vlan: left promiscuous mode [ 369.974396][ T10] usb 8-1: USB disconnect, device number 10 [ 370.000801][ T5882] usb 7-1: config 254 interface 235 has no altsetting 0 [ 370.033591][ T30] audit: type=1800 audit(1751359538.382:5): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1371" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 370.079445][ T5847] Bluetooth: hci5: unexpected cc 0x0c2d length: 69 > 4 [ 370.087458][ T5882] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 370.103863][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 370.119680][ T5882] usb 7-1: Product: syz [ 370.124711][ T5882] usb 7-1: Manufacturer: syz [ 370.129338][ T5882] usb 7-1: SerialNumber: syz [ 370.166399][ T9652] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 370.523892][ T5882] usbtest 7-1:254.235: couldn't get endpoints, -71 [ 370.573420][ T5882] usbtest 7-1:254.235: probe with driver usbtest failed with error -71 [ 370.577504][ T9666] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1372'. [ 370.667983][ T5882] usb 7-1: USB disconnect, device number 22 [ 371.029683][ T9670] NILFS (rnullb0): couldn't find nilfs on the device [ 371.794799][ T5923] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 371.945248][ T5923] usb 8-1: device descriptor read/64, error -71 [ 372.204076][ T5923] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 372.352855][ T5923] usb 8-1: device descriptor read/64, error -71 [ 372.426249][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 372.465564][ T5923] usb usb8-port1: attempt power cycle [ 372.551122][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 372.833951][ T5923] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 372.866517][ T5923] usb 8-1: device descriptor read/8, error -71 [ 373.159883][ T5923] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 373.237062][ T5923] usb 8-1: device descriptor read/8, error -71 [ 373.348427][ T5923] usb usb8-port1: unable to enumerate USB device [ 374.119836][ T9543] team0: Port device team_slave_0 added [ 374.162855][ T9543] team0: Port device team_slave_1 added [ 374.316980][ T9691] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 374.485480][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.504668][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.555378][ T9543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.612817][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.643476][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.714036][ T9543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.099506][ T9543] hsr_slave_0: entered promiscuous mode [ 375.142650][ T9543] hsr_slave_1: entered promiscuous mode [ 375.214083][ T9715] Mount JFS Failure: -22 [ 375.617848][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 375.740972][ T9724] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 376.214172][ T5960] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 376.375135][ T5960] usb 7-1: device descriptor read/64, error -71 [ 376.600544][ T9543] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 376.636026][ T9543] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 376.645136][ T5960] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 376.724432][ T9543] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 376.784101][ T5960] usb 7-1: device descriptor read/64, error -71 [ 376.801456][ T9543] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 376.925799][ T9753] tipc: Enabled bearer , priority 10 [ 376.949518][ T5960] usb usb7-port1: attempt power cycle [ 377.136208][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.237974][ T5890] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 377.277422][ T9543] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.304140][ T5960] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 377.322775][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.329910][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.389149][ T5960] usb 7-1: device descriptor read/8, error -71 [ 377.429030][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.437010][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.443972][ T5890] usb 8-1: Using ep0 maxpacket: 32 [ 377.644752][ T5960] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 377.738735][ T5960] usb 7-1: device descriptor read/8, error -71 [ 378.175869][ T5960] usb usb7-port1: unable to enumerate USB device [ 378.363881][ T10] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 378.542963][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 378.606842][ T10] usb 6-1: can't read configurations, error -71 [ 378.662884][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.669610][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.201792][ T5890] usb 8-1: unable to get BOS descriptor or descriptor too short [ 380.204568][ T30] audit: type=1107 audit(1751359548.552:6): pid=9781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='d' [ 380.222350][ T5890] usb 8-1: no configurations [ 380.232772][ T5890] usb 8-1: can't read configurations, error -22 [ 380.881178][ T9543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.129023][ T30] audit: type=1326 audit(1751359549.482:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5598e929 code=0x7ffc0000 [ 381.202562][ T30] audit: type=1326 audit(1751359549.512:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5598e929 code=0x7ffc0000 [ 381.273832][ T30] audit: type=1326 audit(1751359549.512:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0a5598e929 code=0x7ffc0000 [ 381.310299][ T30] audit: type=1326 audit(1751359549.512:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5598e929 code=0x7ffc0000 [ 381.332918][ T30] audit: type=1326 audit(1751359549.512:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5598e929 code=0x7ffc0000 [ 381.386363][ T30] audit: type=1326 audit(1751359549.512:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0a5598e929 code=0x7ffc0000 [ 381.527628][ T30] audit: type=1326 audit(1751359549.512:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5598e929 code=0x7ffc0000 [ 381.643304][ T30] audit: type=1326 audit(1751359549.512:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5598e929 code=0x7ffc0000 [ 381.734533][ T5882] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 381.745193][ T30] audit: type=1326 audit(1751359549.522:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.6.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0a5598e929 code=0x7ffc0000 [ 381.863874][ T5890] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 381.935212][ T5882] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 381.942835][ T5882] usb 7-1: can't read configurations, error -71 [ 381.994030][ T5890] usb 8-1: device descriptor read/64, error -71 [ 382.223166][ T9543] veth0_vlan: entered promiscuous mode [ 382.244745][ T5890] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 382.297308][ T9543] veth1_vlan: entered promiscuous mode [ 382.394035][ T5890] usb 8-1: device descriptor read/64, error -71 [ 382.395007][ T9543] veth0_macvtap: entered promiscuous mode [ 382.472825][ T9543] veth1_macvtap: entered promiscuous mode [ 382.533062][ T5890] usb usb8-port1: attempt power cycle [ 382.607538][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.696528][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.785968][ T3541] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.824625][ T3541] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.908067][ T3513] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.914384][ T5890] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 382.958767][ T5890] usb 8-1: device descriptor read/8, error -71 [ 382.982614][ T3513] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.093909][ T5882] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 383.174613][ T5960] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 383.180882][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.220141][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.244136][ T5890] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 383.264960][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 383.295298][ T5882] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 383.295580][ T5890] usb 8-1: device descriptor read/8, error -71 [ 383.303418][ T5882] usb 7-1: config 0 has no interface number 0 [ 383.337550][ T5882] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 383.339866][ T5960] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 383.359670][ T5960] usb 6-1: config 0 has no interface number 0 [ 383.367892][ T5960] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.387572][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.405028][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.419053][ T5960] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 383.430819][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.442399][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.464760][ T5890] usb usb8-port1: unable to enumerate USB device [ 383.481365][ T5882] usb 7-1: Product: syz [ 383.481453][ T5960] usb 6-1: Product: syz [ 383.505279][ T5882] usb 7-1: Manufacturer: syz [ 383.508807][ T5960] usb 6-1: Manufacturer: syz [ 383.509913][ T5882] usb 7-1: SerialNumber: syz [ 383.516733][ T5960] usb 6-1: SerialNumber: syz [ 383.565131][ T5960] usb 6-1: config 0 descriptor?? [ 383.581941][ T5882] usb 7-1: config 0 descriptor?? [ 383.606426][ T5960] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 383.622626][ T5882] smsc95xx v2.0.0 [ 383.792909][ C1] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 383.846714][ T9845] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 384.025646][ T5882] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 384.057141][ T5960] usb 6-1: USB disconnect, device number 36 [ 384.081878][ T5882] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 384.087795][ T5960] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 384.323044][ T5882] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 384.397028][ T5882] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 385.446828][ T9878] tipc: Enabling of bearer rejected, already enabled [ 385.688393][ T9882] loop3: detected capacity change from 0 to 1 [ 385.703867][ T5860] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 385.709017][ T9882] Dev loop3: unable to read RDB block 1 [ 385.741567][ T9882] loop3: unable to read partition table [ 385.759204][ T9882] loop3: partition table beyond EOD, truncated [ 385.778601][ T5904] usb 7-1: USB disconnect, device number 28 [ 385.830855][ T9882] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 385.903916][ T5860] usb 8-1: Using ep0 maxpacket: 32 [ 385.961743][ T5860] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 386.012463][ T5860] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 386.066965][ T5860] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 386.153444][ T5860] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 386.219812][ T5860] usb 8-1: config 0 interface 0 has no altsetting 0 [ 386.270936][ T5860] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 386.303986][ T5860] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 386.361524][ T5860] usb 8-1: Product: syz [ 386.392050][ T5860] usb 8-1: Manufacturer: syz [ 386.429382][ T5860] usb 8-1: SerialNumber: syz [ 386.468245][ T5860] usb 8-1: config 0 descriptor?? [ 386.517874][ T5860] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 386.554669][ T5860] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 386.564014][ T5904] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 386.724076][ T5904] usb 9-1: device descriptor read/64, error -71 [ 386.787191][ T5860] usb 8-1: USB disconnect, device number 21 [ 386.793179][ C1] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 386.857267][ T5860] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 386.975982][ T31] INFO: task syz.0.814:8123 blocked for more than 143 seconds. [ 386.984185][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 387.014544][ T5904] usb 9-1: new high-speed USB device number 3 using dummy_hcd SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 387.033947][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.091773][ T31] task:syz.0.814 state:D stack:26920 pid:8123 tgid:8123 ppid:5831 task_flags:0x440040 flags:0x00004004 [ 387.174421][ T5904] usb 9-1: device descriptor read/64, error -71 [ 387.203812][ T31] Call Trace: [ 387.225144][ T31] [ 387.228135][ T31] __schedule+0x16f5/0x4d00 [ 387.232698][ T31] ? schedule+0x165/0x360 [ 387.279854][ T31] ? __pfx___schedule+0x10/0x10 [ 387.313922][ T31] ? schedule+0x91/0x360 [ 387.318245][ T31] schedule+0x165/0x360 [ 387.323346][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 387.364345][ T5904] usb usb9-port1: attempt power cycle [ 387.384329][ T31] schedule_preempt_disabled+0x13/0x30 [ 387.403818][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 387.409439][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 387.462540][ T31] down_read+0x98/0x2e0 [ 387.475160][ T31] page_cache_ra_order+0x318/0xd40 [ 387.503998][ T31] ? maybe_unlock_mmap_for_io+0x225/0x2d0 [ 387.509797][ T31] do_sync_mmap_readahead+0x25e/0x7a0 [ 387.554022][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 387.560004][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 387.593783][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 387.599156][ T31] filemap_fault+0x62c/0x1200 [ 387.623940][ T31] ? __pagetable_ctor+0x253/0x340 [ 387.653626][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 387.662792][ T31] ? rcu_is_watching+0x15/0xb0 [ 387.685132][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 387.703919][ T31] __do_fault+0x135/0x390 [ 387.708317][ T31] __handle_mm_fault+0x1719/0x5440 [ 387.713458][ T31] ? __lock_acquire+0xab9/0xd20 [ 387.754296][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 387.759839][ T31] ? __pfx_do_futex+0x10/0x10 [ 387.773787][ T31] ? lock_vma_under_rcu+0xe0/0x410 [ 387.774737][ T5904] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 387.778950][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 387.834649][ T31] handle_mm_fault+0x40a/0x8e0 [ 387.839495][ T31] do_user_addr_fault+0xa81/0x1390 [ 387.913804][ T31] ? rcu_is_watching+0x15/0xb0 [ 387.918650][ T31] ? trace_page_fault_user+0x84/0x1e0 [ 387.963922][ T31] exc_page_fault+0x76/0xf0 [ 387.968512][ T31] asm_exc_page_fault+0x26/0x30 [ 387.973403][ T31] RIP: 0033:0x7fd5e6254f03 [ 388.023894][ T31] RSP: 002b:00007ffe1f23b5c0 EFLAGS: 00010246 [ 388.030037][ T31] RAX: 00002000000000c0 RBX: 0000000000000008 RCX: 0000000000000000 [ 388.073961][ T31] RDX: 00000000000000aa RSI: 0000000000000000 RDI: 000055557139e3c8 [ 388.081998][ T31] RBP: 00007ffe1f23b6c8 R08: 0000000000000000 R09: 0000000000000000 [ 388.123808][ T31] R10: 0000000000000000 R11: 0000000000000001 R12: 00007fd5e65b5fac [ 388.131845][ T31] R13: 00007fd5e65b5fa0 R14: fffffffffffffffe R15: 00007ffe1f23b710 [ 388.174902][ T31] [ 388.178033][ T31] [ 388.178033][ T31] Showing all locks held in the system: [ 388.274299][ T31] 6 locks held by kworker/1:0/24: [ 388.279383][ T31] #0: ffff8880222a4d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 388.387469][ T31] #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 388.406375][ T31] #2: ffff8881453fb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 388.416011][ T31] #3: ffff88807649b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 388.425529][ T31] #4: ffff888075cc7160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 388.436260][ T31] #5: ffff88807b078188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500 [ 388.477860][ T31] 1 lock held by khungtaskd/31: [ 388.482768][ T31] #0: ffffffff8e33bee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 388.564015][ T31] 2 locks held by pvrusb2-context/2345: [ 388.569614][ T31] #0: ffff88807b078188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xc6/0x3ac0 [ 388.633863][ T31] #1: ffffffff8e1e1410 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 388.683284][ T31] 2 locks held by kworker/u8:9/3541: [ 388.704046][ T31] #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 388.743880][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 388.783865][ T31] 2 locks held by getty/5595: [ 388.803871][ T31] #0: ffff88814dcb80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 388.843795][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 388.874386][ T31] 5 locks held by kworker/0:4/5904: [ 388.879636][ T31] #0: ffff8880222a4d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 388.933863][ T31] #1: ffffc90005397bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 388.984005][ T31] #2: ffff888028b49198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 388.992979][ T31] #3: ffff888028b4c510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 389.043843][ T31] #4: ffff888028a63a68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 389.053604][ T31] 2 locks held by kworker/0:6/5946: [ 389.083815][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.109702][ T31] #1: ffffc90005467bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.143815][ T31] 4 locks held by udevd/6255: [ 389.148713][ T31] #0: ffff88807d60a0a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 389.165259][ T31] #1: ffff88805a0c3488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 389.193868][ T31] #2: ffff8880317bbe18 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 389.203452][ T31] #3: ffff88807649b198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 389.254198][ T31] 4 locks held by syz.3.485/7235: [ 389.259291][ T31] 1 lock held by syz.0.814/8123: [ 389.294435][ T31] #0: ffff888148c4e540 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 389.323818][ T31] 5 locks held by syz-executor/8300: [ 389.329763][ T31] #0: ffff8880576e0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 389.360578][ T31] #1: ffff8880576e00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 389.404247][ T31] #2: ffffffff8f88ff68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 389.444205][ T31] #3: ffff888079472b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 389.484834][ T31] #4: ffffffff8e3419f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 389.513856][ T31] 1 lock held by syz.4.886/8302: [ 389.518872][ T31] #0: ffff888148c4e3a0 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_write_iter+0x50b/0x710 [ 389.554089][ T31] 1 lock held by syz.2.1114/8917: [ 389.559213][ T31] #0: ffff888148c4e540 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 389.586213][ T31] 3 locks held by syz-executor/9067: [ 389.591633][ T31] #0: ffff8880458a0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 389.603844][ T31] #1: ffff8880458a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 389.613635][ T31] #2: ffffffff8f88ff68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 389.643848][ T31] 3 locks held by syz.8.1424/9893: [ 389.649030][ T31] #0: ffff8880308ecdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 389.676794][ T31] #1: ffff8880308ec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 389.713822][ T31] #2: ffffffff8f88ff68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 389.753949][ T31] 1 lock held by syz.6.1428/9908: [ 389.768400][ T31] #0: ffffffff8e3419f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 389.781345][ T31] 1 lock held by dhcpcd/9931: [ 389.787310][ T31] #0: ffff888034116258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 389.813830][ T31] 1 lock held by dhcpcd/9932: [ 389.818588][ T31] #0: ffff88805a176258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 389.863808][ T31] 4 locks held by dhcpcd-run-hook/9941: [ 389.890146][ T31] [ 389.945687][ T31] ============================================= [ 389.945687][ T31] [ 389.973762][ T31] NMI backtrace for cpu 0 [ 389.973796][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 389.973819][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.973832][ T31] Call Trace: [ 389.973840][ T31] [ 389.973848][ T31] dump_stack_lvl+0x189/0x250 [ 389.973873][ T31] ? __wake_up_klogd+0xd9/0x110 [ 389.973900][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.973921][ T31] ? __pfx__printk+0x10/0x10 [ 389.973954][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 389.973976][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 389.973990][ T31] ? _printk+0xcf/0x120 [ 389.974016][ T31] ? __pfx__printk+0x10/0x10 [ 389.974041][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 389.974070][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 389.974093][ T31] watchdog+0xfee/0x1030 [ 389.974122][ T31] ? watchdog+0x1de/0x1030 [ 389.974157][ T31] kthread+0x70e/0x8a0 [ 389.974183][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.974208][ T31] ? __pfx_kthread+0x10/0x10 [ 389.974233][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.974254][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.974275][ T31] ? __pfx_kthread+0x10/0x10 [ 389.974299][ T31] ret_from_fork+0x3fc/0x770 [ 389.974331][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.974366][ T31] ? __switch_to_asm+0x39/0x70 [ 389.974387][ T31] ? __switch_to_asm+0x33/0x70 [ 389.974409][ T31] ? __pfx_kthread+0x10/0x10 [ 389.974433][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.974472][ T31] [ 389.974504][ T31] Sending NMI from CPU 0 to CPUs 1: [ 390.150846][ C1] NMI backtrace for cpu 1 [ 390.150865][ C1] CPU: 1 UID: 0 PID: 7235 Comm: syz.3.485 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 390.150883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.150892][ C1] RIP: 0010:check_preemption_disabled+0x2d/0x120 [ 390.150919][ C1] Code: 41 56 53 48 83 ec 10 65 48 8b 05 7e ca 4c 07 48 89 44 24 08 65 8b 05 86 ca 4c 07 65 8b 0d 7b ca 4c 07 f7 c1 ff ff ff 7f 74 23 <65> 48 8b 0d 5b ca 4c 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 [ 390.150932][ C1] RSP: 0018:ffffc9000c8df380 EFLAGS: 00000046 [ 390.150947][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000000 [ 390.150958][ C1] RDX: 0000000000000000 RSI: ffffffff8dc588fc RDI: ffffffff8be4a9c0 [ 390.150969][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8216db4d [ 390.150979][ C1] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000246 [ 390.150988][ C1] R13: ffff888025175a00 R14: ffffffff8e33bfa0 R15: 0000000000000002 [ 390.151000][ C1] FS: 00007f026f5a86c0(0000) GS:ffff888125ae4000(0000) knlGS:0000000000000000 [ 390.151013][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.151023][ C1] CR2: 00007fadd6fe2368 CR3: 000000007a378000 CR4: 00000000003526f0 [ 390.151039][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 390.151049][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 390.151058][ C1] Call Trace: [ 390.151064][ C1] [ 390.151072][ C1] lock_is_held_type+0xfe/0x190 [ 390.151092][ C1] __might_resched+0xf5/0x610 [ 390.151109][ C1] ? __pfx___might_resched+0x10/0x10 [ 390.151122][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 390.151143][ C1] ? fs_reclaim_acquire+0x7d/0x100 [ 390.151162][ C1] mempool_alloc_noprof+0x106/0x510 [ 390.151181][ C1] ? __pfx_mempool_alloc_noprof+0x10/0x10 [ 390.151196][ C1] ? bio_split_rw_at+0xa80/0xbf0 [ 390.151220][ C1] bio_alloc_bioset+0x241/0x1110 [ 390.151236][ C1] ? __pfx_bio_split_rw_at+0x10/0x10 [ 390.151256][ C1] bio_split+0x110/0x4a0 [ 390.151275][ C1] bio_submit_split+0x96/0x5e0 [ 390.151292][ C1] ? bio_split_rw+0x2ac/0x3f0 [ 390.151312][ C1] blk_mq_submit_bio+0x166a/0x2520 [ 390.151335][ C1] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 390.151360][ C1] __submit_bio+0x207/0x5a0 [ 390.151380][ C1] ? __pfx___submit_bio+0x10/0x10 [ 390.151399][ C1] ? blk_cgroup_bio_start+0x59d/0x640 [ 390.151423][ C1] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 390.151441][ C1] ? pfn_valid+0x125/0x4d0 [ 390.151459][ C1] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 390.151484][ C1] bio_chain_and_submit+0xeb/0x130 [ 390.151501][ C1] __blkdev_issue_zero_pages+0x24f/0x2c0 [ 390.151518][ C1] blkdev_issue_zeroout+0x56c/0x7c0 [ 390.151534][ C1] ? __pfx_blkdev_issue_zeroout+0x10/0x10 [ 390.151552][ C1] ? down_write+0x162/0x1f0 [ 390.151577][ C1] ? __pfx_down_write+0x10/0x10 [ 390.151594][ C1] ? __lock_acquire+0xab9/0xd20 [ 390.151615][ C1] ? truncate_bdev_range+0xc9/0x100 [ 390.151635][ C1] blkdev_fallocate+0x3e6/0x4b0 [ 390.151651][ C1] vfs_fallocate+0x6a3/0x830 [ 390.151669][ C1] ? __fget_files+0x2a/0x420 [ 390.151689][ C1] ? __pfx_vfs_fallocate+0x10/0x10 [ 390.151706][ C1] ? __fget_files+0x2a/0x420 [ 390.151727][ C1] __x64_sys_fallocate+0xc0/0x110 [ 390.151746][ C1] do_syscall_64+0xfa/0x3b0 [ 390.151763][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.151780][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.151794][ C1] ? clear_bhb_loop+0x60/0xb0 [ 390.151810][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.151824][ C1] RIP: 0033:0x7f026e78e929 [ 390.151837][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.151849][ C1] RSP: 002b:00007f026f5a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 390.151865][ C1] RAX: ffffffffffffffda RBX: 00007f026e9b5fa0 RCX: 00007f026e78e929 [ 390.151876][ C1] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 390.151885][ C1] RBP: 00007f026e810b39 R08: 0000000000000000 R09: 0000000000000000 [ 390.151895][ C1] R10: 0000400000000008 R11: 0000000000000246 R12: 0000000000000000 [ 390.151905][ C1] R13: 0000000000000000 R14: 00007f026e9b5fa0 R15: 00007ffc6a39d348 [ 390.151921][ C1] [ 390.307204][ T3513] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 390.496356][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 390.496380][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 390.496403][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.496416][ T31] Call Trace: [ 390.496425][ T31] [ 390.496435][ T31] dump_stack_lvl+0x99/0x250 [ 390.496464][ T31] ? __asan_memcpy+0x40/0x70 [ 390.496494][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.496516][ T31] ? __pfx__printk+0x10/0x10 [ 390.496552][ T31] panic+0x2db/0x790 [ 390.496588][ T31] ? __pfx_panic+0x10/0x10 [ 390.496606][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 390.496632][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 390.496661][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 390.496690][ T31] watchdog+0x102d/0x1030 [ 390.496719][ T31] ? watchdog+0x1de/0x1030 [ 390.496754][ T31] kthread+0x70e/0x8a0 [ 390.496781][ T31] ? __pfx_watchdog+0x10/0x10 [ 390.496807][ T31] ? __pfx_kthread+0x10/0x10 [ 390.496831][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.496853][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.496876][ T31] ? __pfx_kthread+0x10/0x10 [ 390.496900][ T31] ret_from_fork+0x3fc/0x770 [ 390.496934][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 390.496970][ T31] ? __switch_to_asm+0x39/0x70 [ 390.496992][ T31] ? __switch_to_asm+0x33/0x70 [ 390.497013][ T31] ? __pfx_kthread+0x10/0x10 [ 390.497037][ T31] ret_from_fork_asm+0x1a/0x30 [ 390.497077][ T31] [ 390.497251][ T31] Kernel Offset: disabled