last executing test programs: 1m33.123354902s ago: executing program 3 (id=3027): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) fchdir(r0) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x2000775) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000000c0)=""/40, 0x28) 1m33.044309109s ago: executing program 3 (id=3028): r0 = socket(0x200000000000011, 0x2, 0x0) unshare(0x2c020400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) 1m32.940797046s ago: executing program 3 (id=3030): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x7fffffff, 0x2101100, 0x2, 0xd, 0x9, 0xff, 0x0, 0x0, 0xe463b89b55537b6f, 0x1398}}, 0x50) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x62941, 0x2, 0x10}, 0x18) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x80000000000000, 0x556, 0x3, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m32.029042551s ago: executing program 3 (id=3036): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m31.891572011s ago: executing program 3 (id=3039): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1400, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 1m30.819277498s ago: executing program 3 (id=3052): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)=""/85, 0x55}], 0x2) 1m30.508403549s ago: executing program 32 (id=3052): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)=""/85, 0x55}], 0x2) 8.179356274s ago: executing program 4 (id=3670): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x1000)=nil, 0x0, 0x1, 0x40010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x0, '\x00', @p_u32=0x0}}) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f00000000c0)="1d53465f91b4013d1d6aed1ff06762a8395b04c835838736", 0x0, 0x18) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000540)={0x0, [[0x223], [0xfffffffb], [0x3]], '\x00', [{0x40000000}, {0x0, 0xffffffff, 0x0, 0x1}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') pipe(&(0x7f00000000c0)) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f0000000100)="04") syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES32=r6], 0x0) mount$afs(0x0, 0x0, 0x0, 0x4080, 0x0) prctl$PR_SET_MM_EXE_FILE(0x59616d61, 0xd, 0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x7ab000) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000000)={r8, 0x0, 0x0, 0x0, 0x0}) 6.078645874s ago: executing program 4 (id=3686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690100000109021b00010000000009040000010e01000009058103"], 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000001000000240000002b0000000000000712"], 0x30}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a00000000060a559d0000000000000400000000090000726aaafc400000000200000b4000000002000003400000000000000004140000001100010000000000000000000000000a"], 0x12c}}, 0x20004000) 4.842479108s ago: executing program 4 (id=3689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 4.266375627s ago: executing program 4 (id=3691): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x11d, 0x65, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001b00)=""/260, 0x104}, {&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000640)=""/151, 0x97}, {&(0x7f0000000300)=""/15, 0xf}], 0x5, &(0x7f0000000b00)=""/4086, 0xff6}, 0xffffffff}], 0x1, 0x10100, &(0x7f00000007c0)={0x77359400}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0xffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x480440, 0x0) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@arm64={0xd6, 0x80, 0x4, '\x00', 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x13) syz_clone3(&(0x7f0000000140)={0x60004000, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1, {r6}}, 0x58) lseek(r6, 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f0000000180)={0x18, "99af38784cefd0f2c3f821a3b45391995f40175a5c5ef352e27426564ab4f9736d4e243f01a3b86ae0ee47159572b91fd1395e62df315d586a662bdc0f0b61a03da0fd9730cbc530f66c1021c37d28df2052835539d60a0dc627ca1540f17582ff9b045f7f4e05d906746e5bf4f8b44dded4ec9c8ae5ea80fb0ad10e24111315"}) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000280)={0x80, 0x0, 0x4}) getdents64(r6, 0x0, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000580)) fstat(r0, &(0x7f0000000940)) 3.324943205s ago: executing program 4 (id=3696): syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc00000001097c99e0a0af0acd0600ad533970022b00bc7b451d37b8ef4700022ee5cd0009058010ff037f790209050e0320070000000000000078", @ANYRES64=0x0, @ANYRESHEX], 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)='Y', 0x1}], 0x1) 3.007945868s ago: executing program 1 (id=3700): time(&(0x7f0000000000)) (async) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0xe96, @mcast1, 0x3}}, 0x7fff, 0x333e}, &(0x7f0000000180)=0x90) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x10000000}) r4 = socket$packet(0x11, 0x3, 0x300) (async) syncfs(r2) (async) io_setup(0x9, &(0x7f0000000200)=0x0) (async) r6 = signalfd4(r1, &(0x7f0000000280)={[0x100000001]}, 0x8, 0x800) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = eventfd(0x400) (async) r9 = eventfd2(0x7, 0x1) (async) r10 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) io_submit(r5, 0x6, &(0x7f0000000680)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xc70f, r4, &(0x7f0000000240)="1f2e16", 0x3, 0x4, 0x0, 0x1, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000300)="1ce60cd3", 0x4, 0x333, 0x0, 0x2, r8}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xf, 0x9, r1, &(0x7f0000000380)="b165dbfa31fa31a44e59613d3a3c20bf00b2d120e8d51d745675d2873e0248020debbdcc7433c7d2441fe9ac5393546b85286926e7591c04c14b2da7d5bf47ed0f024b581f96e3d206884d6e59c2bd05e81797265c0d61212501cf191c8308806f190b1dab06e9034646a2215dc97a83d5f7e7eda69cc9ee5a1a3b79cf1374e2796de3c9b1ea214f4ae4a445b430e94d63e59db681fc6a100aff10d376fb6962998abbe594a5f973f7080fb0125a8628b8754c908f3c6e0615ef31db42e99fe462027b6962834525ac5b6f5e47c2b6f2f4b49d31df583d98a93ccd184b2d7d11e4", 0xe1, 0x8, 0x0, 0x2, r9}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x7, r4, &(0x7f00000004c0)="0c0e96b8466d260e776c43a834d8af9236392f60ef76e8a946cfa2daf271f2b13c34dbe0a3888910b55048f9ff15e5d49c2b96bd886b40a170a09e76b3a7790cb610bf1c3cc35c009a467dad", 0x4c, 0x9, 0x0, 0x1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x101, r10, &(0x7f0000000580)="fd253705ca712dd2a0c5a389", 0xc, 0x6, 0x0, 0x1, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000000600)="30cf43887c25d8a64fd4870557d3e7a72c227a621d4840c5f49fe43c303fe541f9a4e2cae207c91d4d4fc1a95d4514e118e2", 0x32, 0x0, 0x0, 0x1, r3}]) (async) syz_clone(0x20000000, &(0x7f00000006c0)="e25c46c3ed55e5dc59217db85c4ccee8ff1f7738b6b9334b8a4d44086293ea3306b3fe2e36cea2c8ca5b3696b3a7bafff34b4ee0c85e2fb872c9a8560137c39fd5b6df7a6851a040c1d955977f2818", 0x4f, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="636b9624993ad7663cad717e5a6da9fa51ae6b5bc52f415be055e0e9da0e48187adb9f3d5da2348d379fe0a0e50470a6af981e3aa5fbf64db7802f1ef8e4396d8d") (async) r11 = eventfd(0x8000) write$eventfd(r11, &(0x7f0000000840)=0x100000000, 0x8) (async) ioctl$SOUND_PCM_READ_BITS(r6, 0x80045005, &(0x7f0000000880)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r12, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xfae9aa8c39629da6}, 0x1) (async) connect$netlink(r2, &(0x7f0000000a00)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc) (async) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000a40)=0x1) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x80}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/resume_offset', 0x408280, 0xa) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r13, 0x84, 0x1e, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) (async) getsockname$packet(r4, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d00)=0x14) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000000d40)=[@in6={0xa, 0x4e22, 0xa6a, @mcast2, 0xfdfb}, @in={0x2, 0x6, @private=0xa010100}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, @in6={0xa, 0x4e22, 0x7, @empty, 0xfffffff8}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}], 0xdc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r13, 0x6, 0x23, &(0x7f0000000f80)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/42, 0x2a, 0x1, &(0x7f0000000e80)=""/231, 0xe7}, &(0x7f0000000fc0)=0x40) (async) connect(r2, &(0x7f0000001000)=@can, 0x80) getsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000001080), &(0x7f00000010c0)=0x4) 2.862550155s ago: executing program 1 (id=3702): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000c00)={0x2020}, 0x2020) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000300)={@local, @initdev}, &(0x7f0000000340)=0x8) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = dup(r2) getsockopt$inet_buf(r3, 0x118, 0x26, 0x0, &(0x7f00000003c0)) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x4e24, 0xb45, 0x4e24, 0x1, 0x2, 0x180, 0x60, 0x6, 0x0, r5}, {0x9, 0x1, 0x1, 0x7fffffffffffffff, 0x4, 0xcc7, 0xa, 0x8}, {0xce, 0x5, 0x0, 0x1000}, 0x4, 0x6e6bb2, 0x2, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d4, 0x32}, 0xa, @in=@multicast1, 0x34ff, 0x1, 0x1, 0x0, 0x50000, 0x5d0b23f2, 0xa2}}, 0xe8) (async) r6 = accept4(r0, 0x0, 0x0, 0x40000) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)}}], 0x2, 0x0, 0x0) 2.726524161s ago: executing program 1 (id=3703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)={0x24, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1b, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x24}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) sendto$inet(r1, &(0x7f0000000040)="6d1ef5994133d71097f6eddb73534a152531407f5f035df307ea5482cd440d284eba7302fd42b25d05dc27e48a9468f84bba108a0c2bfd252d1db1c9e9311af8b140d09fd418b11e4b0cb5ea107ffc48e6fedd01cc12ebf7db2185000fe6a3fc24f3df9c2585aed4c42c5f18bd498a6969cbfb65780f2bd4582a4354f5232509ca5ec96139cfdf264a73b8b76c47f72a36ac08b3b2322e1efcd68e9442b9316fa3e0182b8c475c0e092fd9de232e042bc1369107c09169307e957758397fe1e33f647eafdc94ff282bb9b5edfa7a19d9b969b44dec855594155d19bc09e8b8e729", 0xe1, 0x1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) listen(r1, 0xfffffffe) 2.681005553s ago: executing program 0 (id=3705): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=0x20) (async) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), 0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@empty, 0x1, 0x0, 0x40, 0x0, [{@broadcast}, {@private}, {@remote}, {@empty}]}}) (async) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x7, 0x280) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) (async) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x100) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xfb, 0x0, 0x38, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb7b5ac42f7235107, 0x40, 0x2, 0x3}}) sendto$packet(r3, &(0x7f0000000200)="20d589364e76149e1cf6825129fed29bf69189273abd38b9f927ec3cf077f15229fa94aa2d", 0x25, 0x20001484, &(0x7f0000000300)={0x11, 0x18, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000340)={0x8, "7ade2a160fe9922318d4f85e4d2857008d81431d5621a16ad07085bfdde7a7fa", 0x1, 0x1}) (async) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) (async) syz_usb_connect(0x3, 0xe2, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x4e, 0x86, 0x41, 0x8, 0x5c6, 0x9225, 0x9b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x1, 0x8, 0x9, 0xa0, 0x4, [{{0x9, 0x4, 0x65, 0x9, 0x3, 0xb5, 0x59, 0x51, 0x3, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x4023, 0x7, "b908d16687"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xffff, 0x1, 0x0, "e132e545bb37f5d2"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0xf9, 0x9, "19eefb88"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xe, 0x2, 0x2, 0x6, "516dd737c99a"}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x5, 0x17, '`'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0xff, "b1c222bf"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x101, 0xfff, 0x2, "da99bb"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xff, 0x2}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4000, 0x8, 0x10, "a926"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x1b, "a7"}]}], [{{0x9, 0x5, 0x2, 0xc, 0x20, 0x9, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x66, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc9}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x5, 0x7, 0x5e, [@generic={0x19, 0xf, "5c5b0b58b99c92100616e26c5976c2422289d89a2853a8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x1, 0x6, 0x4}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x5, 0x80, 0x7, 0x10, 0xf1}, 0x13, &(0x7f00000004c0)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xe, 0xa9d, 0x1}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x408}}]}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0088}, 0x4000880) (async) sendmsg$can_raw(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@canfd={{0x3, 0x1}, 0x8, 0x1, 0x0, 0x0, "e170fdeb4347c103b891d7708e2f7406d715e6b9eef0bad39486f00c7761052a50ac5bda69219c1239c883d7493b5afe1d3d68162eb3379f81d31c3b8aef98cb"}, 0x48}, 0x1, 0x0, 0x0, 0x400d0}, 0x50) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800), 0x6440c0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000001840)={&(0x7f0000000840)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000001980)={r5, 0xe6, &(0x7f0000001880)=""/230}) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f00000019c0)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r6, &(0x7f0000001d80)=[{{&(0x7f0000001ac0)=@alg, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/165, 0xa5}, {&(0x7f0000001c00)=""/19, 0x13}], 0x2, &(0x7f0000001c80)=""/249, 0xf9}}], 0x1, 0x40012123, &(0x7f0000001dc0)) (async) connect$bt_sco(r3, &(0x7f0000001e00)={0x1f, @none}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001e40)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000001e80)='net/ip_vs_stats_percpu\x00') sendmsg$sock(r8, &(0x7f0000002000)={&(0x7f0000001ec0)=@rc={0x1f, @none, 0x10}, 0x80, &(0x7f0000001f40), 0x0, &(0x7f0000001f80)=[@timestamping={{0x14, 0x1, 0x25, 0x190000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xb4}}, @timestamping={{0x14, 0x1, 0x25, 0x6000000}}], 0x78}, 0x8802) (async) getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, &(0x7f0000002040)=""/165, &(0x7f0000002100)=0xa5) (async) r9 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r9, &(0x7f0000003700)={&(0x7f0000002140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002640)=[{&(0x7f00000021c0)=""/41, 0x29}, {&(0x7f0000002200)=""/4, 0x4}, {&(0x7f0000002240)=""/167, 0xa7}, {&(0x7f0000002300)=""/177, 0xb1}, {&(0x7f00000023c0)=""/123, 0x7b}, {&(0x7f0000002440)=""/22, 0x16}, {&(0x7f0000002480)=""/181, 0xb5}, {&(0x7f0000002540)=""/95, 0x5f}, {&(0x7f00000025c0)=""/49, 0x31}, {&(0x7f0000002600)=""/53, 0x35}], 0xa, &(0x7f0000002700)=""/4096, 0x1000}, 0x163) 2.529916093s ago: executing program 0 (id=3708): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @global=@item_012={0x2, 0x1, 0x3, '[:'}, @local=@item_012={0x1, 0x2, 0x5, "c9"}]}}, 0x0}, 0x0) 1.960731382s ago: executing program 0 (id=3710): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_usb_disconnect(r0) 1.790312188s ago: executing program 1 (id=3711): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = openat$uhid(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"fd634b4a6a2f105afb14814a0a38c47508ad86be7696302da5e6c82366825b02b7db7b945008f3042ffbf29ba0eabd8c5c0bfac768ed0ce6e23cb1d166148336c95612b74d80b963b8de708fdfde4ef4c267a18dac94cd6cda5010edd82044829cc58d3d312649ab4a2d91573f847aeda3c4c7adf1e1d8e2063612ea66555c19578c0ba83f21cd6c06c3fe2c5c288ee86c5398cefbc7022e5423c72e34706dc4a3406150289451f9bac3e6fa0c784c2ecd1af4d413dfabca0a16ceecb346bd4cef7c4027c978d2e29e44cfb1abaa5bba2a2d9c0753ae37f348009b89c0d3bdeae3c878e4416db1eced318928cd5547f6de0af6ff7315fbfbd7f6660fcd602b885e1d2d15519ff8728dfd61bda40ce3736c9f34951e96c76fb57fa185231a0cc3c7dfc0381cc2d24b5f1f8a5333726c781c57488f911e7b392cd85dad43d2138e00a3cdff691f5506d5a33b85599cfc92d655a3b9e38c1a75f261aa96b4a4b9c6bf4131abfbdce63f0ff2e53437f1361cab87caf4822b18ce79bb18f277d9a1ade6bbf627266da0ab4f23ea3cbd2dcdaa3c092db5b08f4fb655bdc38a804e7c246b9b6f48015a431f9a1995e82510e0aeebc15e4c275f1b39d0f8ba978d0104e40384623adc1911af9ec7d41d33e3c187c30cd0408bdb22dbd204576a962f47ae76800f036fee473f054065851c07cd49cc0e7fbdcd9714fbf9ceb239a037e09d9d9af0b6955608d6fa43743dd0fdd9facc9694e71d3fe657b84e4116e1457dfda29d9b15811bc2ecae9a5c00cebb45879083a219fa3432fa3596c90661b2cadfcda8781ade4e1d594669a3f6161a9973cc9b2ed2ab01fb6e37b4ba9874fd8bf9f521a00ee9f3e6158a73abb4cf781ac27346ffa8422c0a8b26d8164cb793f3edf8271b1bfc753048c96b57b9dd3465fdb8e0835f14335483e701f55150416496014ec07b3669f30895c64ca369cf423f8c0d291cddcfc61e6fab076d096a927c7378fe8f73710a6566614ffa1c08eea8a8ca32541bb5fb18e5b0b23a7390fc1814cfb50f625848289fd030b4922418b4020f4f0acb711c9c63cd6f99f589cc708a2e5fa8511e90cebfdfc9beb2ec66aeb7926f0396412012edc92f28838e4ac9760dbe5d60ef21859b87ffedc03dffa72a3fa5efc3b80e0aec49231dd38ca6284f0868e486ab20202cbebe975ca8a9a9eac4a8ec30d94af450ac78715641a2f790fab18072a474886b99715ea45770f89929b6bea4b1629b952bf9cecedc3be1a1347e1c6b147769abb12b4abe240b104540b6ad3978ae5c2027199a8bf1c365a086e0ec7e693a2a2623864eed4dd43aeba408a40750dfe56a3f5d004723950280bdb825f8c30ed61154e03f5e3f863e033e6d80bb8b3f84207f54c7d3bdb5d5639ef159c1bb614a3bd0ec6f68403b38224285659eb20e9ee6625bb1030f498450715750650e91b7b5f8b594aad637b832e87b87076d5761c67a7756bfb7d169321acc4c1ca7f1bedac1e7630b45150ed5474d493982cbf389f3f2961c08eb7628394314dd0bf8144a52cf3f25a0d67237cec6357b9aa71aefdef85fcf3c464744da7b3e4238b04438c5ea486f303c6f8e24e2cebf58fb2cd7adaf53a321551395353f38da669d1035f22bc88a1363cc65444d78509d0fadff75b78dfd8803d9b8be5b94fb56d2f5c5c41d30b525649001cf588bee7ad871dee0bbfb4b7847c95b8cb2f297ed66695915f32c7961e509488066fb51024f35af28a097d2522d7e661f596af6ebd309f0783832fb39ba6eb5e6fd058c163e494c30213db1ccd73c87e2bdbbcf91baa3653206c581464ed691798d351f2c2d0063bd66befe3d53ab313178eef812d2bec31674935fae5f7933656ee70118bfd66f8cfc5af4085e2add8a56afa282ab6ac4baa885bb35bcee8577440e86faa75ce2baecc5c8f11160a1977718530c6866fab89dab4c35eafed9b3dd117f634b9d0e68ed6dd6b9f9b37d4c8242bee1dd96b4d79b6f90a3c980533a2403f0e8718a5a580ffe54303bb2d4cd28d42371bd3b6cbe0c1336a631ed9e61ab8b6e464b23a13e357372581cf48ab34fca306203440a4f3f6052bc70e0f3124a57a3fa88fb9452e4c109b443863dc79cd210c96cfbe6db725ebbde6272bf1ccc93e3a548f4300912c423bf9f5bf596d37c6fc740656cd27f0e8a8507c3e19086c40caf7725e3c2334de81748cf934a9e86f92e033e5543fcc4fe857c57ea9eb133793896f33d18de48511484c31725be30a36363faa75bfc649b2f41806c62f0f562b02091cd1f6cab9505b90d5fddc7a91c17b15d54974e969bffa944481c1e7e85ab6e2fe1720e5d631d9e1d18a5fffab87022255ff5ccf9b3ecc7cefaca96bcc58ad5678aa76db7777c19f1b9964f010ee9fdbcdd2a97349f2aa373819a02a46ecb8cad1a641edc507cee75c8199fedc31f8b84e98b86a5a4aec7aa196d810f232b8edaf2b9a2e281a7d00615324a24be410bbeedc01a6fd56c81a8ca8b3fed701f766c709d686fe7bfb81b311bb1c8e9b59a0eb94d39c8e9874fa12b4d21c1f647381e4628cdca87d24f624f93821eb17218d03bd6efacafcd209150fa45f0884964b266f5dacf162b04e2764409a81f4d41866b764ad9810c833aaa152a4b47e2acaf2bc899ad31726bc863291ebf871c5486c4d3e5edf1e4db4b86ed12e7d54a17141bba564dd4eeabda75c10a17905769324655066e0cc296d282878d0113784791b25b4fc0021116a559517a383e71f59921322c29ed346a9f68fea4d5fbb645df76c9ef6026b18b440af8b255b0d7328665b7106a113a7ac728a62a1e510fbc99edd6f95d5e9d6144f69caf40f100c243b28d2933854a2723413a353b0d2fcc6517fdbf6f9f111f5575f35f635e2d5ae22a7db19e1619ad567cdca6200f35d93b4cefc1ac20057cd9547a185123f98b426e85882087f7b343759aeb26193a6dad231f98f961f2545e58edcd55baf5444a8dd95495ae799ec4ff43d7ec4d674172907e3b6e98216878d07d929a1287481982abd6233338364d59eaed2a6fff423749f721cd043ab36f9525730b16d8886d58177f54d25045957927f4844f274ba74a249d57829086aef740b830647773efedaec0ebf0439182074947dce85f03c2b98dddc22ea741c97c30a7c1edad149a77c5608b60d0f5d461287738011f0613f974147388b057926d28a0e38f73341c8eb9d0ac49266c5c0f8d5875cac6674cea1f45a0af9f3ce1b9903b44240beca990ae325e9a4284a1f07897ce2eeadb75474859011a048e756f1bca6a3f9abac2c7d294655ae7b09647d68a3b7db2d47dfc11680ac857fec976bfbea96724f85b6d3e8e6d65e29b1fea97da3d753061b4e8f6493c546694cfdfb00bc1a2e875fbc0c94624f6e8c393c6f23e88e24ba68e4150765df6829b85e1db089f9c87cf7d0e38a3d09b25cb0469db16fc547a8bef6232e7967fd733bcd982cf14d191adb71d95fe1f6406ca31c4228cff1310269eb7865bf15e5b0cf5ac2609cef93de5c8969e7bcfa609f2c8b68f187d0b05c22f55ce12347a0baa6a956b40088f6a514d68ffe220361f82da1afa29b45bd704e777de7ad3bd5fcbc5ad8ac596e7bf60897f174932d5193ea5df5e6536fa6aeb62727f0f581025878e99a3cd48a56071402c58b36a3c94cbb71b9a3a1b79fc34a799c130f203bc2ca732f6167b3c3ff5860b2544ed55f07a3f03abfaccd9338a0f582cad2e7e8437101349fb396bd0138c319a945f5501bd10ab85d11af67b24c2ea8176662a72c2170ede4462826d8d1414ca70fd55a9c5101fcc0121d90a35f39ca63205c3ef8423f13731d0f198c518c9b7c8960f1d9b32ffb16e1d7c13043d3558039741cc7e9aae56bd9f875b29a94a8eaa8f2994a965df995078cd3b752ebfb86c80095a7888ed2a9b2f5594721a47d422e585bfa124918af0902fdb119c71065765b1bdcd7a1bd32b8d2bcec6f29537c96a174fe2d30ef467aef6ea8219175dd977d916e3bbd5871f52e40f046227d20a6f2805f9e8b711dbcf68ac746ab441cb3c1b942739e0bc7dca8eae18c2606a6d79196f193c348a6ce141a48cdfa650c6f38c91d234cf3ef01fd8c5dd1abe8a8b487102262889ab172a2346455bd58a9caf64e4772c2b75ef10b5b13eeb957ee7d14eda0809ee981ac11457eb8a257cd4385554723bd0de766946d166a3322b1397e75e0f6ebbcc74a701534dae0f12f41cfda3ed7ae30b721005f20ec4077c7df97f045f458cedde9fea2dea6bf9c0eca011c5198a41e838ed009db88367638807a6d55ee2640326efaae184d54c2e6ba2bcb87c7aa6619ec221dc922f317026bb6b7bee929da7d33f9d516d7e78f12927c524448ef918c361ebdbb219b8922c7f81cbdf994aed042b57a63e5a313a07847ad36f8e54f7196b39b9f9dc6a9662025b9e6f42330970d8a2939590a0da3d2bd9e534c7c7f92153a0a22d0bf7ef829b0dcb36b2923575eb89c3284f9acde39b6df891bfcc56f4bd8b958671b388f5d844309c92c66690680ce958d7acc571ea8d7b823b00051356010addf6af6a6a2929cf9376e7cbaa509dd0e1becfe05a911c1f6e22b8b705df7714df7e48a371491ebab498ffb426698c29b4f8457de3a86c411c6d23d04f610d7842fe3569be4249d7d53856430a11f73591552999684bf72af84f1996d418886ffa4d8c14c47ac057ea7c2b157e1ad6261ac88835076887ea169ce85a465a9bc7fbb70c228052bb6f8924284a91919d600972d1241236d9f954ccc4e51d5abfc9c1852f541f8c441bf70119448748464b566be3c1fb13bf29188a155f969ba768852ac76a44547bbbb843bc2fa7173e23bb4468d0675bb2f0860c39b18859fa8e265022a43c0ba067e048d0a7265c69ffff3ab27fc5106d6c697c4e44301f1725acb9421a3e8a59a7b8b6c66ce655fa8de98446765ef7bbfb0363b4d8ea82167aea9f495b28cb944247f7cdcfe12925bc70b408e453d62e95e7e00eeec5db1aca1549772d4e3183754a0a063e9164b8f902687b09a21396bc13a517cdac50e35ed9c3813c3050aa0698b41c8e3dd56bd51d095f8131c11eadd1ce879e26840ce5ea2144052f866ce72fa28ac7f930888532f478f8c39118d5f9cb0c6137912f56e371d65a2cb80b37dcb8d0ead5c73b439e0db39af6dc44c1969e62b706a925d97b88db0a7c678fadbbb531e99e34ed14e7fe1cf0910a78c04ab25b7f9093f3f13c74d6944fe827918ad0fa3ddde00038e8578a2929b7df10f6343fea135f1663dc69d1158120aedcae9d85bf1cd2b2acb54c937f46176f8d6e80afe7c087f82898e074c9116bc2f1ad96992ac374463ec9856d2cf796c32502134ec18d6cbeab2d233dfdbd9706ca28ae469f57d1c572a2c20ee817dcad05b04a0f1a94936e96efb2d2e533cce32a32fb71c11d4920c41da9a3dbce4d6f1829506b216db4ea4a5465add1ca507cd246d183ad07b3adc0de309f28ad9cc889555373d92806a9cb84675d363b0d69ed0e500e16732fc7c0ac0c0a3fa624e20487f64ea4025e3635902b227814b7342f3dc2b4e1d2dccf3fa203bee3720451a54aa30f78433afbe8ccf3219c434d7902e472fcec112ef4fd640e99e9cb29e27b5e4eb617989ca9c1bd18abaab56ed3d6120f78c7325aab6ccec02bcc28404ac766c4fd1c5ac43b38d77cb7d8d4c2d328d12aaf57ffffaab46c00b1db25c45c48fde7482184be026c8eec29a93897fda46dd3bb751df66cbde6e0a2020e2a036f4777", 0x1000}}, 0x1006) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x120, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x79a}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000004}, 0xc011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07402abd7000000000002d"], 0x14}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) accept$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="813f3036", 0x4}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="10000000000040000a01000000000000"], 0x10}}, {{&(0x7f0000000940)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0xb, 0xe, "e5a214cf582ca371ca822ae5b6b474addee3d4548106f96307696a711ab08fba08780e55b451ddc620da13053209012618100eb47d5ef8b66ba3a0c7431a74", 0x1}, 0x80, 0x0}}], 0x2, 0x40000) 1.779942879s ago: executing program 1 (id=3712): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x1000, 0x1030002, 0xfffd}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fchdir(r0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x5, 0xffff, 0x1000}, 0xc) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18, 0x81}, 0x4c800) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r12, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) recvmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10120) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r13, &(0x7f0000000440)=ANY=[@ANYBLOB='unlock me'], 0xb) ioctl(r6, 0x7fffffff, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000200)={0x4, {0xfffffffd, 0xad2, 0xffffffc0}, {0x20, 0x9, 0x96, 0x4}, {0x5, 0x2}}) 1.662269239s ago: executing program 1 (id=3713): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c0300021800000535", 0x1e}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc010) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600001e42000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e875988b147043022effffb3"], 0x0}, 0x0) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2001"], 0x0}) syz_usb_control_io$sierra_net(r3, &(0x7f0000000a00)={0x14, &(0x7f00000008c0)={0x20, 0x2, 0xc6, {0xc6, 0xe, "56dd37294a5727d688414c65f2b589a3b06d9c2e827e5d55213ed7591972ff461ca19edf170acc6e301f09ea4556e384bf0ef7cc993a26832edf4acd6e0a249786f535fdb9ea61a635c9a56a98e2f11e6a380411037502259b614bf6b0e69a3cf7cfe99fa73c50f673fb615a8a08a753e7f5b087293a6d4584648fe2b6c9ad3fe2bf2edefb9fc699e8dcf60f91448c0dcb34a6d4dc0340403c2738bdb5322c0faad6fdebe0fadfed1c51390a99eeb5bf0cb6e60095ea13649f36f16a95200eca06633df9"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000fc0)={0x1c, &(0x7f0000000a40)={0x20, 0xd, 0xf2, "f2e3db6ef14fb61edfb8d829658985f067db085a5a3375c514e02202914a7d7efb41a1aa8ce581d810aae73c185024dbb959fa55fb2bcdc27fc63d735f0a57853ce64bf2e947d3f7210ff8afc7bea8b438e4d63d8760fde344ac5aa9bcec0065a2784a6c84f960c0e57345211b3298674832e69dcaf5c2b01289b6f23ab219b6367771fb1fc51114394d7367fe750e360b554c296b62a1aa458e200ee054c7d3ed0f381aee3a50b75850605df736ce5dfd6bbc91ce29b8e011b3792bb4dcd1c847a90b703b5d56e300c80437164d4a0fd6364663961c48cf3983e2a02ac133092e36178f7b3069e27271cf9bee2d1f66f66f"}, &(0x7f0000000b40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000f80)={0x21, 0x0, 0x2, "975b"}}) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0xc, 0x1e, {0x1e, 0x23, "3712107a94aba0b3e54680766522266536135472fd3b1b13dd0cff7c"}}, &(0x7f00000001c0)={0x0, 0x3, 0x38, @string={0x38, 0x3, "477303f3b09115a8856d82b41ae68a81749ae6cd759299482f1e685af0e21c34f85ca93153d185daa32db98acbec4b5f421ae49935e0"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="000100000000050f43000414100405423a7619cedd01fadb608040a44d5abf03100b0710020267040020100a06250000008f08130ef00000000f0000000f3fff0000c0ff00c042f51afc645f2b2c84a08c45c00000"], &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x3, 0xae, "a2a960c4", "d20636de"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x30, 0x60, 0x8e, 0xe7, 0x80, 0x0, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0xa, 0x49, "d2c6660b2bf7e87913f722647ee30ede65ddc593e42a8e451f01611cb750423cd7887fa2300bfa7557af45da4bb9a98293cbfeae962e5d92a08b09f29500a2aba41acdebb9a424ce08"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x400, 0x1, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "23c5"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x81}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="a76b2ab38c1d"}, &(0x7f0000000640)={0x40, 0x19, 0x2, "a77e"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x5}}) 1.312556418s ago: executing program 2 (id=3716): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/comedi4\x00', 0xa0040, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f00000331c0)={0x1, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x18, 0x3b, 0x92, 0x20, 0x13b1, 0x42, 0x5816, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xca, 0x0, 0x1, 0x7a, 0x8b, 0xb5, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff}}]}}]}}]}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/comedi4\x00', 0xa0040, 0x0) (async) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f00000331c0)={0x1, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x18, 0x3b, 0x92, 0x20, 0x13b1, 0x42, 0x5816, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xca, 0x0, 0x1, 0x7a, 0x8b, 0xb5, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff}}]}}]}}]}}, 0x0) (async) 1.052072054s ago: executing program 0 (id=3717): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 962.195387ms ago: executing program 0 (id=3718): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000004, 0x2, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000f1ff05010040"]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r11, &(0x7f0000000080)={0x1d, r12}, 0x10) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r14 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r14, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="d367a3bf7a4f5c72f3ae988934d51b8a7a982e111290b8f21835ec220ce0b7eac2b93f9cd5ab2368b7df5d0b3d84c459b9c62b622da88d05a6cc297180b7854858d6256f69fa99271bbcaa145653d5076de2f3844686f28be3f61e22e36d371e389b98afb7390c7af30038ff7fc7bc65faced3fa4e12bdf8b7a874674e711ce106dcc34529da0d57765ed2a3422b13b0f80f59dc95259496f0ef39a160ddb9a04f60409dd7b4ab9af2853f248c31dd7db9db03c7af8d574f26987bab2b5875fd6642c69fa600addb62308b11ece239a673da034e3494739711cb0fda9fe83dd26369a0556a4f251bc0359dc5f45f4608b8a2073dca85f205cc1baf988ecc45ac0500000000000000ea6f4ef7a4597b4583b34fc550e3dd01d561de5f", @ANYRES8=r13, @ANYRESOCT=r13], 0x8) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) userfaultfd(0x1) userfaultfd(0x0) syz_usb_control_io(r14, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 762.054061ms ago: executing program 2 (id=3719): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$mouse(&(0x7f0000000100), 0x3d, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xe4, 0x0, 0x42, 0x5c}) 338.78898ms ago: executing program 0 (id=3720): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, &(0x7f0000000100)) 178.423692ms ago: executing program 4 (id=3721): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@private=0xa010102, 0x0, 0x0, 0x4e20, 0x400, 0x2, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x400}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r1 = syz_io_uring_setup(0x73e2, &(0x7f0000000040)={0x0, 0x2e67, 0x400, 0x1, 0xc1}, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x7cde, &(0x7f0000000140)={0x0, 0x80627b, 0x200, 0x2, 0x285, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000700)) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x79, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x65, 0x80, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "1d2d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x8, 0x87b0, 0x2}, {0x6, 0x24, 0x1a, 0x401, 0x31}, [@acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x83, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0xf}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x56, 0x40, 0x8, 0x10, 0xa4}, 0x1c8, &(0x7f00000004c0)={0x5, 0xf, 0x1c8, 0x6, [@generic={0xcf, 0x10, 0x1, "da1cff8e5f808dd65963b0aad1a6dbac955be4c680eac3f12fb8c1cf4c0a9821a2eb855084474299f479066cb6ad490badfbbaac2740c9ffc7b36f82c89aed18ce4fec909e8da1d1a93f7066caaa71f3f58b6a72e5e63955feb88b93c1401ae894951574cd0a3c28ad506ffdff6ddfb6a566ffc7c58984c7b349adeef2269300c3b65a02683ff31409cb138e5ce5d4c01274d289401f07fd09d777f15738532f735a177fe8f402d40fac0e6fd1379d0382d4ae1977851d1f502132c70b85575f2f30def8b2c41659dd0cac37"}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "c248163a3866ba503a65268c0c7cdb10"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1c, 0x8, 0x0, 0x401}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x5, 0x5}, @generic={0xcc, 0x10, 0x9, "61c5c4a8e689fd6aacf5f33b466390c376f8159861833c4b0ec1719484dec46e2ff2bfb60d5e1a0e5be59d75fcb03353c4975bd735708d1ee30a785566ba3a96bddeb9857c2408a43368ef1038e87a6c42999d5ffcc014279aeb189b8e4ed584551712c08dadfca8a8ae533994172b12fab2713922803d34eee26b8553d1be59de37c693ce6e9f83b7c5fad97f6e22572a89718f8a87b3ced6d5438f02faf4553e23cd9921d7336ffe8ebfd861899d6db72fc5b1abcb18a0b4b7851a96aea16289895bfa634f16f3de"}]}, 0x1, [{0x1c, &(0x7f0000000380)=@string={0x1c, 0x3, "8bd219d29f7afea11baf6f98ea42b1a8c8a7a5193cd4fc5174eb"}}]}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) msgsnd(0xffffffffffffffff, &(0x7f0000000740)={0x1, "6f1cd75dc9afa85ddcc1f961bcd7a4dac560fedbdd81432e3dcdbfbdfc1e39d5a6bd82f42768fd46c5a0c5c0dbda0a6de1357b66a4d341a7b04e2e7fa5e819141de4060b219d6525571f5cd63bed7a752cc56eb952eff3ac939d0b964dd326c3fa465f25c7be2a5137180f4f661883c336b595fab70c992536d914eb3c3b121d1bbe364aafe289b805d1b2c821782ba8"}, 0x98, 0x0) 147.581726ms ago: executing program 2 (id=3722): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0x0, 0x4}}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000080)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0xfffffffffffffff7, 0x4, 0x1, 0x0, 0x0, [{{r0}, 0x1}]}) r1 = semget(0x3, 0x0, 0x400) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4, 0x9, 0x9, 0x5, 0x5, 0x4, 0x6, 0x80, 0x8]) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@sg0, r2, &(0x7f0000000240)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) accept$unix(r0, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1, 0x1}}, 0x4, 0x8}, &(0x7f0000000480)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000004c0)={r4, 0x8001, 0x93, "941fff8b63b73e71f94dcfd07295e05ca501dd529e45d03a74c460dc84a6ef72da96d0de46755f631e81a1897aadb736ad1f211fbb1585ff89d2f3f7f79e8904359fe2f18043c7154101d337081d966054f6b2933256a97d93084279a4f183fc76c02bc5dc1b57ef85bfcc0ca2386807dc393527546a61afdfde34dc326d0a1f67ccac502d1197b7215792182864a8a7b74af9"}, 0x9b) r5 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r5, &(0x7f0000000b80)=[{{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000600)=""/64, 0x40}, {&(0x7f0000000640)=""/229, 0xe5}, {&(0x7f0000000740)=""/240, 0xf0}], 0x3, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/175, 0xaf}, {&(0x7f0000000980)=""/79, 0x4f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/58, 0x3a}, {&(0x7f0000000a80)=""/176, 0xb0}], 0x2}}], 0x3, 0x40000160, &(0x7f0000000c40)={0x0, 0x3938700}) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000c80)={r4, 0x338, 0x10}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000dc0)=0xe8) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000702, r7, &(0x7f0000000e00)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) close(r8) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r9, &(0x7f0000002000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000f00)={0x109c, 0x15, 0x200, 0x70bd2b, 0x25dfdbfb, {0x5, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "5f11d9c883f055be5b43ee4322d3ef6b45f7111df04d848071569a2c67f854f8fb60ade2f0e00f2556c4575a2aec82502076bbdf153641b8251065cfa28a1825112833515fdd0cec22d89f192081c789e618a54403caeb724c6d9ea2564fae06bcdcfe7ca55a4829f8d723e1fcbf0cd967b9e8ad5f9d3a0ef66fe540f7047961"}]}, 0x109c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) gettid() setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000002040)={r4, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000002080)={r4, 0x92}, &(0x7f00000020c0)=0x8) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002100)={'caif0\x00'}) 101.500672ms ago: executing program 2 (id=3723): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x5d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x3, 0x0, 0x8000000000000002, 0xfffffffffff7fe00}) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x14) setsockopt$packet_buf(r1, 0x107, 0x5, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76011203010902240001040004000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r3}}, './bus/file0\x00'}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x1000800, &(0x7f0000000240)={[], [{@fsname={'fsname', 0x3d, '+*:+'}}, {@subj_user={'subj_user', 0x3d, 'lowerdir'}}, {@obj_user={'obj_user', 0x3d, ':[^[6\x0ff\\'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', r4}}]}) 2.37926ms ago: executing program 2 (id=3724): syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 0s ago: executing program 2 (id=3725): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x9, 0x32315659, 0x2, @stepwise={0xbf1, 0x401, 0x100000, 0x3, 0x3, 0x27b7}}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x1, 0x0, 0x8, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2000, @private2}}, @sadb_sa={0x2, 0x1, 0x1, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000840)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@posixacl}]}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r11) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) kernel console output (not intermixed with test programs): rialNumber=0 [ 628.013644][T10854] usb 2-1: config 0 descriptor?? [ 628.204402][ T5953] savu 0003:1E7D:2D5A.0052: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 628.450584][T10869] usb 1-1: USB disconnect, device number 54 [ 628.458078][T10854] savu 0003:1E7D:2D5A.0053: hiddev2,hidraw2: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 628.734262][T10858] usb 4-1: USB disconnect, device number 57 [ 628.825451][T10869] usb 2-1: USB disconnect, device number 32 [ 629.019990][T14972] 9pnet_fd: Insufficient options for proto=fd [ 629.224798][T14987] binder: 14985:14987 ioctl 400c620e 2000000003c0 returned -22 [ 629.912212][T15016] 9p filesystem being mounted at /71/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 631.487346][T10846] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 631.661407][T10846] usb 2-1: Using ep0 maxpacket: 16 [ 631.676607][T10846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.697245][T10846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.709491][T10846] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.735880][T10846] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 631.752402][T10846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.790882][T10846] usb 2-1: config 0 descriptor?? [ 632.142914][T15079] usb usb8: usbfs: process 15079 (syz.0.3031) did not claim interface 0 before use [ 632.242942][T10846] microsoft 0003:045E:07DA.0054: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 632.266413][T10846] microsoft 0003:045E:07DA.0054: no inputs found [ 632.278851][T10846] microsoft 0003:045E:07DA.0054: could not initialize ff, continuing anyway [ 632.424667][T10858] usb 2-1: USB disconnect, device number 33 [ 632.577001][T10846] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 632.747928][T10846] usb 1-1: Using ep0 maxpacket: 16 [ 632.755667][T10846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.766184][T10846] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 632.777292][T10846] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 632.787690][T10846] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.800956][T10846] usb 1-1: config 0 interface 0 has no altsetting 0 [ 632.810098][T10846] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 632.819617][T10846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.832444][T10846] usb 1-1: Product: syz [ 632.836985][T10846] usb 1-1: Manufacturer: syz [ 632.841967][T10846] usb 1-1: SerialNumber: syz [ 632.850184][T10846] usb 1-1: config 0 descriptor?? [ 633.301519][T10858] usb 1-1: USB disconnect, device number 55 [ 634.151394][T15122] 9pnet_fd: Insufficient options for proto=fd [ 634.951154][T15143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 634.962074][T15143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 634.973250][T15143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 634.983818][T15143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 634.992677][T15143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 635.341201][T15141] chnl_net:caif_netlink_parms(): no params data found [ 636.363569][T15141] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.394997][T15141] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.413910][T15141] bridge_slave_0: entered allmulticast mode [ 636.422781][T15141] bridge_slave_0: entered promiscuous mode [ 636.432618][T15141] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.440332][T15141] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.448030][T15141] bridge_slave_1: entered allmulticast mode [ 636.467370][T15141] bridge_slave_1: entered promiscuous mode [ 636.523742][ T30] audit: type=1326 audit(6291402747.273:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.1.3065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc48b8eba9 code=0x0 [ 636.619545][T15141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.648922][T15141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.757890][T15141] team0: Port device team_slave_0 added [ 636.773057][T15141] team0: Port device team_slave_1 added [ 636.819830][T15141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.827029][T15141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.834791][T10854] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 636.856228][T15141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.875543][T15141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.883602][T15141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.910887][T15141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.982018][T15186] 9p filesystem being mounted at /168/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 637.003767][T15141] hsr_slave_0: entered promiscuous mode [ 637.011677][T15141] hsr_slave_1: entered promiscuous mode [ 637.019345][T15141] debugfs: 'hsr0' already exists in 'hsr' [ 637.019966][T10854] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 637.027642][T15141] Cannot create hsr debugfs directory [ 637.044512][T10854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.061388][T10854] usb 1-1: config 0 descriptor?? [ 637.081541][T15143] Bluetooth: hci1: command tx timeout [ 638.128279][T15216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3087'. [ 639.152750][T15143] Bluetooth: hci1: command tx timeout [ 639.366373][T10854] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 639.385092][T10854] asix 1-1:0.0: probe with driver asix failed with error -71 [ 639.406189][T10854] usb 1-1: USB disconnect, device number 56 [ 640.710737][T15141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 640.773892][T15141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 640.793959][T15141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 640.829550][T15141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 641.032593][ T5953] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 641.058205][T15141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.082057][T15141] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.098910][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.106074][ T6363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.123432][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.130666][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.205455][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.220661][ T5953] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.231556][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.241295][ T5953] usb 2-1: Product: syz [ 641.245743][T10854] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 641.248158][T15143] Bluetooth: hci1: command tx timeout [ 641.257247][ T5953] usb 2-1: Manufacturer: syz [ 641.264203][ T5953] usb 2-1: SerialNumber: syz [ 641.412649][T10854] usb 1-1: Using ep0 maxpacket: 16 [ 641.426805][T10854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.431742][T15141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.448326][T10854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.449973][T10854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.484438][T10854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.506436][T10854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.524057][T10854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.553219][T10854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.573932][T10854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.590197][T10854] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.600344][T10854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=245 [ 641.611664][T10854] usb 1-1: SerialNumber: syz [ 641.634442][T10854] cdc_acm 1-1:1.0: Zero length descriptor references [ 641.643948][T10854] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 641.851545][T10854] usb 1-1: USB disconnect, device number 57 [ 641.920439][T15141] veth0_vlan: entered promiscuous mode [ 641.938230][T15141] veth1_vlan: entered promiscuous mode [ 641.983810][T15141] veth0_macvtap: entered promiscuous mode [ 641.996187][T15141] veth1_macvtap: entered promiscuous mode [ 642.019690][T15141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.043033][T15141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.064623][T14030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.073637][T14030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.087925][T14030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.097281][T14030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.209799][ T6363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.218593][ T6363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.261474][ T3168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.279660][ T3168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.312786][ T5953] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 642.319395][ T5953] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 642.349502][ T5953] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 642.530579][ T5953] cdc_ncm 2-1:1.0: setting tx_max = 68 [ 642.611881][ T5953] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 642.643115][ T5953] usb 2-1: USB disconnect, device number 34 [ 642.660938][ T5953] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 642.810936][T15273] fuse: root generation should be zero [ 642.860730][T15275] support for the xor transformation has been removed. [ 643.389263][T15291] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3110'. [ 643.974109][T15295] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3115'. [ 644.242977][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'. [ 644.809073][ T1157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.390495][T10854] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 645.468870][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 645.483624][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 645.493494][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 645.503878][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 645.513565][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 645.562669][T10854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.580052][T10854] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 645.590566][T10854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.611074][T10854] usb 2-1: config 0 descriptor?? [ 645.865395][T15344] chnl_net:caif_netlink_parms(): no params data found [ 646.034396][T10854] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 646.071204][T10854] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0055/input/input78 [ 646.137164][T15344] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.145559][T15344] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.158768][T15344] bridge_slave_0: entered allmulticast mode [ 646.184889][T15344] bridge_slave_0: entered promiscuous mode [ 646.212427][T15344] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.225129][T10854] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 646.238181][T15344] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.274715][T15344] bridge_slave_1: entered allmulticast mode [ 646.301505][T15344] bridge_slave_1: entered promiscuous mode [ 646.450199][T15344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.465477][T10846] usb 2-1: USB disconnect, device number 35 [ 646.487315][T15344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.667160][ T1157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.715647][T15344] team0: Port device team_slave_0 added [ 646.776884][ T1157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.801417][T15344] team0: Port device team_slave_1 added [ 646.840645][T15380] input: syz1 as /devices/virtual/input/input79 [ 646.918942][ T1157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.960362][T15344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.967501][T15344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.009180][T15344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.024758][T15344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.032364][T15344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.059329][T15344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.295308][T15344] hsr_slave_0: entered promiscuous mode [ 647.303644][T15344] hsr_slave_1: entered promiscuous mode [ 647.311053][T15344] debugfs: 'hsr0' already exists in 'hsr' [ 647.316966][T15344] Cannot create hsr debugfs directory [ 647.543711][T15143] Bluetooth: hci1: command tx timeout [ 647.793789][ T1157] bridge_slave_1: left allmulticast mode [ 647.803926][ T1157] bridge_slave_1: left promiscuous mode [ 647.816176][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.836290][ T1157] bridge_slave_0: left allmulticast mode [ 647.858531][ T1157] bridge_slave_0: left promiscuous mode [ 647.865114][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.964260][T15424] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3162'. [ 649.618373][T15143] Bluetooth: hci1: command tx timeout [ 650.308696][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.325783][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.337255][ T1157] bond0 (unregistering): Released all slaves [ 650.403392][T15441] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3176'. [ 650.820248][T15448] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 651.697297][T15143] Bluetooth: hci1: command tx timeout [ 651.796581][T15479] kvm: kvm [15478]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x6161616161616021 [ 651.957742][ T1157] hsr_slave_0: left promiscuous mode [ 651.965793][ T1157] hsr_slave_1: left promiscuous mode [ 652.017332][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.024778][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.063828][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.086865][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.163900][ T1157] veth1_macvtap: left promiscuous mode [ 652.186150][ T1157] veth0_macvtap: left promiscuous mode [ 652.215886][ T1157] veth1_vlan: left promiscuous mode [ 652.244464][ T1157] veth0_vlan: left promiscuous mode [ 652.817833][T10846] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 652.996702][T10846] usb 1-1: Using ep0 maxpacket: 16 [ 653.020787][T10846] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 653.045135][T10846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 653.060826][T10846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 653.072237][T10846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 653.083103][T10846] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 653.093974][T10846] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 653.108604][T10846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.119196][T10846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 653.127502][T10846] usb 1-1: SerialNumber: syz [ 653.191142][T10846] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 653.214808][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 653.300854][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 653.368012][ T5953] usb 1-1: USB disconnect, device number 58 [ 653.781011][T15143] Bluetooth: hci1: command tx timeout [ 654.014639][T15515] netlink: 37 bytes leftover after parsing attributes in process `syz.0.3200'. [ 654.264053][T15505] bond_slave_0: entered promiscuous mode [ 654.271483][T15505] bond_slave_0: entered allmulticast mode [ 654.351131][T10846] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 654.546864][T10846] usb 2-1: Using ep0 maxpacket: 16 [ 654.570965][T10846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.597549][T10846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.618323][T10846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.644236][T10846] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 654.675690][T10846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.696923][T10846] usb 2-1: config 0 descriptor?? [ 654.748750][T15344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 654.777482][T10867] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 654.780791][T15344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 654.813269][T15344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 654.846230][T15344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 654.950694][T10867] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 654.975323][T10867] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 654.986230][T10867] usb 1-1: config 1 interface 0 has no altsetting 0 [ 654.999951][T10867] usb 1-1: string descriptor 0 read error: -22 [ 655.006893][T10867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.028318][T10867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.050674][T15526] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 655.073235][T15526] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 655.116539][T10867] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 655.162918][T15517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.163726][T15344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.189468][T15517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.210843][T15344] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.233610][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.240874][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.262394][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.269729][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.305563][T10846] hid-picolcd 0003:04D8:F002.0056: No report with id 0xf3 found [ 655.325481][T10846] hid-picolcd 0003:04D8:F002.0056: No report with id 0xf4 found [ 655.364162][T10846] usb 1-1: USB disconnect, device number 59 [ 655.434524][T10854] usb 2-1: USB disconnect, device number 36 [ 655.711528][T15344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.102740][T15344] veth0_vlan: entered promiscuous mode [ 656.140228][T15344] veth1_vlan: entered promiscuous mode [ 656.224544][T15344] veth0_macvtap: entered promiscuous mode [ 656.254029][T15344] veth1_macvtap: entered promiscuous mode [ 656.290233][T15344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.297749][ T30] audit: type=1800 audit(6291402767.053:298): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3210" name="memory.events" dev="tmpfs" ino=1614 res=0 errno=0 [ 656.329552][T15344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.344660][ T30] audit: type=1804 audit(6291402767.053:299): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3210" name="memory.events" dev="tmpfs" ino=1614 res=1 errno=0 [ 656.374256][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.400309][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.428316][ T5953] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 656.442161][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.477724][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.585573][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 656.594879][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.599121][ T5953] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 656.613287][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.628979][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.642620][ T5953] usb 2-1: Product: syz [ 656.647012][ T5953] usb 2-1: Manufacturer: syz [ 656.662286][ T5953] usb 2-1: SerialNumber: syz [ 656.686142][ T5953] usb 2-1: config 0 descriptor?? [ 656.701878][ T5953] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 656.720011][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.731432][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.192520][ T5953] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 657.227946][ T5953] usb 2-1: USB disconnect, device number 37 [ 657.427298][ T981] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 657.464496][T10867] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 657.636538][T10867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.656129][T10867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 657.675786][T10867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 657.692428][T10867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.706161][T10867] usb 1-1: Product: syz [ 657.711009][T10867] usb 1-1: Manufacturer: syz [ 657.716357][T10867] usb 1-1: SerialNumber: syz [ 657.725618][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 657.748176][ T981] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 657.756119][ T981] usb 5-1: can't read configurations, error -71 [ 657.966496][T10867] usb 1-1: 0:2 : does not exist [ 657.989256][T10867] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 658.050812][T10867] usb 1-1: USB disconnect, device number 60 [ 658.122972][ T6195] udevd[6195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.644022][ T981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 658.783647][ T981] usb 5-1: device descriptor read/64, error -71 [ 658.849888][T15637] netlink: 'syz.0.3232': attribute type 2 has an invalid length. [ 658.857861][T15637] netlink: 'syz.0.3232': attribute type 8 has an invalid length. [ 658.866374][T15637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3232'. [ 658.882536][T15639] netlink: 'syz.0.3232': attribute type 2 has an invalid length. [ 658.891414][T15639] netlink: 'syz.0.3232': attribute type 8 has an invalid length. [ 658.899539][T15639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3232'. [ 658.909813][ T981] usb usb5-port1: attempt power cycle [ 659.010750][T15644] cgroup: Invalid name [ 659.106671][T15647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.263660][T10869] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 659.273666][ T981] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 659.294089][ T981] usb 5-1: device descriptor read/8, error -71 [ 659.415579][T10869] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 659.425999][T10869] usb 1-1: config 0 has no interface number 0 [ 659.432171][T10869] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 659.442348][T10869] usb 1-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 659.453885][T10869] usb 1-1: config 0 interface 11 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 659.468988][T10869] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 659.479260][T10869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.488530][T10869] usb 1-1: Product: syz [ 659.492759][T10869] usb 1-1: Manufacturer: syz [ 659.498011][T10869] usb 1-1: SerialNumber: syz [ 659.517491][T10869] usb 1-1: config 0 descriptor?? [ 659.527135][T15644] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 659.542479][T10869] usb 1-1: Error in usbnet_get_endpoints (-22) [ 659.549297][ T981] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 659.574184][ T981] usb 5-1: device descriptor read/8, error -71 [ 659.686879][ T981] usb usb5-port1: unable to enumerate USB device [ 659.826965][T15644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.842132][T15644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.856495][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 660.029394][T15672] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3245'. [ 660.517918][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.550162][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.627805][T15681] netlink: 'syz.2.3248': attribute type 1 has an invalid length. [ 661.620219][T15707] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3258'. [ 661.636827][T15707] syzkaller1: entered promiscuous mode [ 661.642931][T15707] syzkaller1: entered allmulticast mode [ 661.792568][T10846] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 661.850561][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.865329][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.965075][T10846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.976199][T10846] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 661.987012][T10846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.999950][T10846] usb 5-1: config 0 descriptor?? [ 662.151996][ T5953] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 662.291997][ T5953] usb 2-1: device descriptor read/64, error -71 [ 662.332042][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 662.422576][T10846] keytouch 0003:0926:3333.0057: fixing up Keytouch IEC report descriptor [ 662.440676][T15726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.450815][T15726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.456237][T10846] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0057/input/input80 [ 662.531854][ T5953] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 662.562480][T10846] keytouch 0003:0926:3333.0057: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 662.625858][T10855] usb 5-1: USB disconnect, device number 6 [ 662.666740][T15727] fido_id[15727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 662.672535][ T5953] usb 2-1: device descriptor read/64, error -71 [ 662.802377][ T5953] usb usb2-port1: attempt power cycle [ 663.142517][ T5953] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 663.178352][ T5953] usb 2-1: device descriptor read/8, error -71 [ 663.421678][ T5953] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 663.453405][ T5953] usb 2-1: device descriptor read/8, error -71 [ 663.575131][ T5953] usb usb2-port1: unable to enumerate USB device [ 663.764196][T10855] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 663.822168][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3279'. [ 663.873555][T15768] xt_HMARK: proto mask must be zero with L3 mode [ 663.883143][T15768] netlink: 'syz.0.3280': attribute type 10 has an invalid length. [ 663.892009][T15768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3280'. [ 663.908545][T15768] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 663.917642][T15768] team0: Failed to send options change via netlink (err -105) [ 663.925557][T15768] team0: Port device geneve0 added [ 663.942244][T15749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.954660][T15749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.966154][T15749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.987783][T15749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.001597][T15749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.015461][T15749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.027442][T15749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.046436][T15749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.059975][T15749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.080825][T15749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.101276][T10855] usb 5-1: unable to get BOS descriptor or descriptor too short [ 664.118292][T10855] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 664.126736][T10855] usb 5-1: can't read configurations, error -71 [ 664.807279][T15796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.818908][T15796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.240541][T10855] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 665.360622][T10858] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 665.396001][T10855] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 665.406913][T10855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.426843][T10855] usb 5-1: config 0 descriptor?? [ 665.448965][T10855] cp210x 5-1:0.0: cp210x converter detected [ 665.520762][T10858] usb 2-1: Using ep0 maxpacket: 32 [ 665.539639][T10858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.565799][T10858] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 665.582913][T10858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.602253][T10858] usb 2-1: config 0 descriptor?? [ 665.619667][T10858] hub 2-1:0.0: USB hub found [ 665.818601][T10858] hub 2-1:0.0: 1 port detected [ 665.841711][T10855] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 665.875036][T10855] usb 5-1: cp210x converter now attached to ttyUSB0 [ 666.061617][T10869] usb 5-1: USB disconnect, device number 9 [ 666.075911][T10869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 666.102075][T10869] cp210x 5-1:0.0: device disconnected [ 666.175857][T15823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.185659][T15823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.248104][T10846] usb 2-1: USB disconnect, device number 42 [ 666.248290][T10858] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 666.884770][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.899028][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.940122][T10846] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 667.119470][T10846] usb 5-1: device descriptor read/64, error -71 [ 667.380116][T10846] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 667.444861][T15859] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3308'. [ 667.460433][T10869] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 667.539919][T10846] usb 5-1: device descriptor read/64, error -71 [ 667.647560][T10869] usb 2-1: unable to get BOS descriptor set [ 667.655883][T10846] usb usb5-port1: attempt power cycle [ 667.664084][T10869] usb 2-1: not running at top speed; connect to a high speed hub [ 667.674926][T10869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.683654][T15871] No buffer was provided with the request [ 667.692798][T10869] usb 2-1: config 0 has no interfaces? [ 667.707674][T10869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.721499][T10869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.735610][T10869] usb 2-1: Product: syz [ 667.741790][T10869] usb 2-1: Manufacturer: syz [ 667.746514][T10869] usb 2-1: SerialNumber: syz [ 667.760410][T10869] usb 2-1: config 0 descriptor?? [ 667.982521][T10869] usb 2-1: USB disconnect, device number 43 [ 668.021822][T10846] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 668.051088][T10846] usb 5-1: device descriptor read/8, error -71 [ 668.137493][T15886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.146541][T15886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.160631][T15886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.171479][T15886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.186482][T15886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.204986][T15886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.228535][T15886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.253326][T15892] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3319'. [ 668.254141][T15886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.267330][T15891] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3319'. [ 668.276093][T15886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.290346][T15886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.304271][T15886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.312798][T10846] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 668.313248][T15886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.337943][T10846] usb 5-1: device descriptor read/8, error -71 [ 668.459260][T10846] usb usb5-port1: unable to enumerate USB device [ 668.487637][T15895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.504481][T15895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.788861][T10858] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 668.941151][T10858] usb 2-1: unable to get BOS descriptor or descriptor too short [ 668.950793][T10858] usb 2-1: config 0 has an invalid interface number: 92 but max is 0 [ 668.959144][T10858] usb 2-1: config 0 has no interface number 0 [ 668.965313][T10858] usb 2-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 668.976967][T10858] usb 2-1: config 0 interface 92 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 668.988312][T10858] usb 2-1: config 0 interface 92 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 668.998825][T10858] usb 2-1: config 0 interface 92 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 669.009024][T10858] usb 2-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.022983][T10858] usb 2-1: New USB device found, idVendor=1482, idProduct=3c09, bcdDevice=60.76 [ 669.032333][T10858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.041014][T10858] usb 2-1: Product: syz [ 669.045373][T10858] usb 2-1: Manufacturer: syz [ 669.050525][T10858] usb 2-1: SerialNumber: syz [ 669.069020][T10858] usb 2-1: config 0 descriptor?? [ 669.076673][T15897] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 669.127605][T15904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.153514][T15904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.300158][T10869] usb 2-1: USB disconnect, device number 44 [ 669.418853][T15913] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3328'. [ 669.805949][T15928] overlayfs: unescaped trailing colons in lowerdir mount option. [ 670.178084][T10858] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 670.218271][T10846] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 670.292651][T15943] netlink: 'syz.0.3339': attribute type 1 has an invalid length. [ 670.340129][T10858] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 670.352573][T10858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.372323][T10858] usb 2-1: config 0 descriptor?? [ 670.390462][T10858] cp210x 2-1:0.0: cp210x converter detected [ 670.397806][T10846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 670.425220][T10846] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 670.446845][T10846] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 670.457395][T10846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.471406][T10846] usb 5-1: Product: syz [ 670.477929][T10846] usb 5-1: Manufacturer: syz [ 670.483058][T10846] usb 5-1: SerialNumber: syz [ 670.592464][T15955] 9pnet_fd: Insufficient options for proto=fd [ 670.821456][T10858] usb 2-1: cp210x converter now attached to ttyUSB0 [ 671.008185][ T981] usb 2-1: USB disconnect, device number 45 [ 671.033494][ T981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 671.052465][ T981] cp210x 2-1:0.0: device disconnected [ 671.063060][T15971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.073352][T15971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.316852][T15988] QAT: Invalid ioctl 21531 [ 671.378267][T15990] netlink: 14428 bytes leftover after parsing attributes in process `syz.0.3353'. [ 671.388159][T15990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.407656][T10846] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 671.596557][T10846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 671.632643][T10846] usb 5-1: device firmware changed [ 671.676738][T10846] usb 5-1: USB disconnect, device number 14 [ 672.569899][ T5863] Bluetooth: hci4: command 0x0406 tx timeout [ 672.677047][T16022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.686189][T16022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.700494][T16044] loop2: detected capacity change from 0 to 7 [ 672.711300][T16044] Dev loop2: unable to read RDB block 7 [ 672.721513][T16044] loop2: AHDI p1 p2 p3 [ 672.725750][T16044] loop2: partition table partially beyond EOD, truncated [ 672.742657][T16046] netlink: 'syz.2.3370': attribute type 39 has an invalid length. [ 672.751045][T16044] loop2: p1 start 1601398130 is beyond EOD, truncated [ 672.758646][T16044] loop2: p2 start 1702059890 is beyond EOD, truncated [ 672.789276][T16046] cgroup: Invalid name [ 672.887900][T16049] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.3372'. [ 672.898609][T16049] openvswitch: netlink: Missing key (keys=40, expected=80) [ 672.908462][T16049] Invalid logical block size (65538) [ 674.136092][ T981] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 674.206330][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3383'. [ 674.296115][ T981] usb 5-1: device descriptor read/64, error -71 [ 674.374446][T16084] : renamed from bond_slave_0 (while UP) [ 674.556049][ T981] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 674.735707][ T981] usb 5-1: device descriptor read/64, error -71 [ 674.856253][ T981] usb usb5-port1: attempt power cycle [ 675.205617][ T981] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 675.226562][ T981] usb 5-1: device descriptor read/8, error -71 [ 675.475460][ T981] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 675.511352][ T981] usb 5-1: device descriptor read/8, error -71 [ 675.626415][ T981] usb usb5-port1: unable to enumerate USB device [ 676.686790][T16126] trusted_key: encrypted_key: insufficient parameters specified [ 677.062489][T16134] 9pnet_fd: Insufficient options for proto=fd [ 677.623101][T16147] FAULT_INJECTION: forcing a failure. [ 677.623101][T16147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.636663][T16147] CPU: 1 UID: 0 PID: 16147 Comm: syz.1.3407 Not tainted syzkaller #0 PREEMPT(full) [ 677.636692][T16147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 677.636705][T16147] Call Trace: [ 677.636714][T16147] [ 677.636724][T16147] dump_stack_lvl+0x189/0x250 [ 677.636749][T16147] ? __pfx____ratelimit+0x10/0x10 [ 677.636773][T16147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.636794][T16147] ? __pfx__printk+0x10/0x10 [ 677.636823][T16147] ? __might_fault+0xb0/0x130 [ 677.636860][T16147] should_fail_ex+0x414/0x560 [ 677.636896][T16147] _copy_from_user+0x2d/0xb0 [ 677.636922][T16147] ___sys_sendmsg+0x158/0x2a0 [ 677.636965][T16147] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.637035][T16147] ? __fget_files+0x2a/0x420 [ 677.637063][T16147] ? __fget_files+0x3a0/0x420 [ 677.637105][T16147] __x64_sys_sendmsg+0x19b/0x260 [ 677.637137][T16147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.637184][T16147] ? __pfx_ksys_write+0x10/0x10 [ 677.637217][T16147] ? do_syscall_64+0xbe/0xfa0 [ 677.637246][T16147] do_syscall_64+0xfa/0xfa0 [ 677.637268][T16147] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.637291][T16147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.637312][T16147] ? clear_bhb_loop+0x60/0xb0 [ 677.637339][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.637359][T16147] RIP: 0033:0x7fcc48b8eba9 [ 677.637378][T16147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.637395][T16147] RSP: 002b:00007fcc49acd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.637418][T16147] RAX: ffffffffffffffda RBX: 00007fcc48dd5fa0 RCX: 00007fcc48b8eba9 [ 677.637434][T16147] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 000000000000000d [ 677.637447][T16147] RBP: 00007fcc49acd090 R08: 0000000000000000 R09: 0000000000000000 [ 677.637460][T16147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.637474][T16147] R13: 00007fcc48dd6038 R14: 00007fcc48dd5fa0 R15: 00007ffe5f1a22f8 [ 677.637510][T16147] [ 678.521256][T16163] netlink: 'syz.2.3412': attribute type 1 has an invalid length. [ 678.531998][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3412'. [ 679.283482][T15143] Bluetooth: hci0: command 0x0406 tx timeout [ 679.283652][T16140] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 680.143126][T16140] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 680.159034][T16140] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 680.165420][T16140] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 680.176066][T16140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 680.182820][T16140] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 680.192045][T16140] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 680.211620][T16140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 680.221071][T16140] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 680.233774][T16140] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 680.440653][T16181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.464904][T16181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.513194][T10869] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 680.672896][T10869] usb 2-1: Using ep0 maxpacket: 8 [ 680.677911][T10858] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 680.680521][T10869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 680.697069][T10869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.706867][T10869] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 680.716821][T10869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 680.737074][T10869] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 680.749018][T10869] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 680.758471][T10869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.779294][T10869] usb 2-1: config 0 descriptor?? [ 680.785573][T16149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 680.836430][T10858] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 680.845350][T10858] usb 5-1: config 0 has no interface number 0 [ 680.856022][T10858] usb 5-1: New USB device found, idVendor=09fb, idProduct=6022, bcdDevice=ba.d6 [ 680.866410][T10858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.875034][T10858] usb 5-1: Product: syz [ 680.879492][T10858] usb 5-1: Manufacturer: syz [ 680.884753][T10858] usb 5-1: SerialNumber: syz [ 680.893223][T10858] usb 5-1: config 0 descriptor?? [ 680.909683][T10858] ftdi_sio 5-1:0.1: FTDI USB Serial Device converter detected [ 680.919535][T10858] ftdi_sio ttyUSB0: unknown device type: 0xbad6 [ 680.939594][T10858] usb 2-1: USB disconnect, device number 46 [ 680.945696][T15143] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 681.091273][T16193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.105274][T16193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.107560][T10854] usb 5-1: USB disconnect, device number 19 [ 681.126666][T16194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.140791][T10854] ftdi_sio 5-1:0.1: device disconnected [ 681.143739][T16194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.183633][T16198] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 681.294245][T16204] overlay: Bad value for 'workdir' [ 681.362829][T15143] Bluetooth: hci0: command 0x0406 tx timeout [ 681.943192][ T981] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 682.117115][ T981] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 682.125566][ T981] usb 5-1: config 0 has no interface number 1 [ 682.131742][ T981] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 682.146519][ T981] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 682.159041][ T981] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 682.168217][T15143] Bluetooth: hci4: command 0x0406 tx timeout [ 682.175462][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 682.184895][ T981] usb 5-1: SerialNumber: syz [ 682.193074][ T981] usb 5-1: config 0 descriptor?? [ 682.210657][ T981] usb 5-1: Found UVC 0.00 device (0002:0000) [ 682.217712][ T981] usb 5-1: No valid video chain found. [ 682.244553][T15143] Bluetooth: hci1: command 0x0c1a tx timeout [ 682.244565][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 682.437046][ T981] usb 5-1: USB disconnect, device number 20 [ 683.119022][T16264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.159281][T16264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.275434][T16270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.591464][ T981] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 683.756008][ T981] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 683.765509][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 683.778954][ T981] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 683.791993][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.805117][ T981] usb 5-1: config 0 descriptor?? [ 684.241717][T15143] Bluetooth: hci4: command 0x0406 tx timeout [ 684.274201][T16291] Attempt to restore checkpoint with obsolete wellknown handles [ 684.321153][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 684.328901][T15143] Bluetooth: hci1: command 0x0c1a tx timeout [ 684.332419][T16292] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3455'. [ 684.881644][ T981] ath6kl: Failed to submit usb control message: -110 [ 684.919445][ T981] ath6kl: unable to send the bmi data to the device: -110 [ 684.966079][ T981] ath6kl: Unable to send get target info: -110 [ 684.981581][ T981] ath6kl: Failed to init ath6kl core: -110 [ 685.017869][ T981] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 685.851102][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.857507][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.170081][ T981] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 686.378969][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 686.382152][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 686.401751][T15143] Bluetooth: hci1: command 0x0c1a tx timeout [ 686.401826][T15143] Bluetooth: hci3: command 0x0c1a tx timeout [ 686.402843][ T981] usb 2-1: config 6 has an invalid interface number: 254 but max is 0 [ 686.446437][ T981] usb 2-1: config 6 has no interface number 0 [ 686.455938][ T981] usb 2-1: config 6 interface 254 has no altsetting 0 [ 686.474078][ T981] usb 2-1: New USB device found, idVendor=1b5c, idProduct=0104, bcdDevice=30.00 [ 686.496359][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.514998][ T981] usb 2-1: Product: syz [ 686.530611][ T981] usb 2-1: Manufacturer: syz [ 686.535357][ T981] usb 2-1: SerialNumber: syz [ 686.666517][ T30] audit: type=1326 audit(6291402797.438:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16335 comm="syz.0.3465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bd518eba9 code=0x0 [ 686.714139][ T30] audit: type=1326 audit(6291402797.438:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16335 comm="syz.0.3465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bd518eba9 code=0x0 [ 686.775852][T16324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.800180][T16324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.826020][ T981] ftdi_sio 2-1:6.254: FTDI USB Serial Device converter detected [ 686.858016][ T981] usb 2-1: Detected FT2232HP [ 686.884823][ T981] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 686.904225][ T981] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 686.948695][ T981] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 686.979973][ T981] usb 2-1: USB disconnect, device number 47 [ 686.996627][T16345] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3466'. [ 687.017113][ T981] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 687.047743][ T981] ftdi_sio 2-1:6.254: device disconnected [ 687.259512][T16344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.272870][T16344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.406801][T16344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.451026][T16344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.224977][T10869] usb 5-1: USB disconnect, device number 21 [ 688.366866][T16368] 9pnet_fd: Insufficient options for proto=fd [ 688.378340][T16368] 9pnet_fd: Insufficient options for proto=fd [ 688.397275][T16372] netlink: 'syz.0.3473': attribute type 39 has an invalid length. [ 688.517411][T16375] usb usb8: usbfs: process 16375 (syz.4.3475) did not claim interface 0 before use [ 688.778828][T10858] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 688.868730][T10854] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 688.938626][T10858] usb 5-1: Using ep0 maxpacket: 8 [ 688.956026][T10858] usb 5-1: config 162 has an invalid interface number: 97 but max is 0 [ 688.965414][T10858] usb 5-1: config 162 has an invalid descriptor of length 64, skipping remainder of the config [ 688.977801][T10858] usb 5-1: config 162 has no interface number 0 [ 688.997077][T10858] usb 5-1: config 162 interface 97 altsetting 1 endpoint 0x8 has invalid maxpacket 2308, setting to 64 [ 689.009951][T10858] usb 5-1: config 162 interface 97 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.023546][T10858] usb 5-1: config 162 interface 97 has no altsetting 0 [ 689.034910][T10854] usb 2-1: config 0 interface 0 has no altsetting 0 [ 689.047391][T10854] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 689.057755][T10854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.066339][T10858] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 689.076145][T10858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.084711][T10854] usb 2-1: Product: syz [ 689.089544][T10854] usb 2-1: Manufacturer: syz [ 689.093982][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.094167][T10854] usb 2-1: SerialNumber: syz [ 689.107609][T10858] usb 5-1: Product: syz [ 689.111934][T10858] usb 5-1: Manufacturer: syz [ 689.115541][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.116635][T10858] usb 5-1: SerialNumber: syz [ 689.136022][T10854] usb 2-1: config 0 descriptor?? [ 689.147535][T10854] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 689.168144][T10854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 689.179276][T10854] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 689.186507][T10854] usb 2-1: media controller created [ 689.212142][T10854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.372854][T10858] metro_usb 5-1:162.97: required endpoints missing [ 689.385527][T10858] usb 5-1: USB disconnect, device number 22 [ 689.619792][T10854] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 689.689451][T10854] rc_core: IR keymap rc-twinhan1027 not found [ 689.695905][T10854] Registered IR keymap rc-empty [ 689.709000][T10854] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 689.731607][T10854] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input81 [ 689.752253][T10854] dvb-usb: schedule remote query interval to 150 msecs. [ 689.760925][T10854] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 689.770548][T10854] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 689.784607][T10854] usb 2-1: USB disconnect, device number 48 [ 689.925900][T10858] m920x_read = error: -19 [ 689.946788][T10858] dvb-usb: error -19 while querying for an remote control event. [ 690.128070][T10854] m920x_read = error: -19 [ 690.146378][T10854] dvb-usb: error -19 while querying for an remote control event. [ 690.338404][T10854] m920x_read = error: -19 [ 690.342903][T10854] dvb-usb: error -19 while querying for an remote control event. [ 690.418489][T16413] fuse: Bad value for 'group_id' [ 690.420243][T16399] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 690.423627][T16413] fuse: Bad value for 'group_id' [ 690.430451][T16399] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 690.477240][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 690.496882][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 690.513777][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 690.527263][T10854] m920x_read = error: -19 [ 690.531846][T10854] dvb-usb: error -19 while querying for an remote control event. [ 690.613956][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 690.623916][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 690.633882][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 690.697805][T10855] m920x_read = error: -19 [ 690.702358][T10855] dvb-usb: error -19 while querying for an remote control event. [ 690.741689][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 690.751827][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 690.762141][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 690.817753][T10854] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 690.856557][T10869] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 690.871621][T10855] m920x_read = error: -19 [ 690.876041][T10855] dvb-usb: error -19 while querying for an remote control event. [ 690.977588][T10854] usb 5-1: Using ep0 maxpacket: 32 [ 690.994401][T10854] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 691.014234][T10854] usb 5-1: config 0 has no interface number 0 [ 691.027724][T10854] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.050453][T10869] usb 2-1: too many configurations: 43, using maximum allowed: 8 [ 691.051853][T10855] m920x_read = error: -19 [ 691.064668][T10855] dvb-usb: error -19 while querying for an remote control event. [ 691.086095][T10854] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.109070][T10869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 691.115253][T10854] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 691.122862][T10869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.128396][T10854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.145536][T10869] usb 2-1: Product: syz [ 691.171905][T10869] usb 2-1: Manufacturer: syz [ 691.204442][T10869] usb 2-1: SerialNumber: syz [ 691.205799][T10854] usb 5-1: config 0 descriptor?? [ 691.216903][T10869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 691.257545][T10855] m920x_read = error: -19 [ 691.262053][T10855] dvb-usb: error -19 while querying for an remote control event. [ 691.320770][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 691.330828][ T981] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 691.428050][T10855] m920x_read = error: -19 [ 691.433854][T10855] dvb-usb: error -19 while querying for an remote control event. [ 691.534636][T10855] usb 2-1: USB disconnect, device number 49 [ 691.598134][T10856] m920x_read = error: -19 [ 691.602622][T10856] dvb-usb: error -19 while querying for an remote control event. [ 691.630736][T16439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.646007][T16439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.676153][T16439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.710730][T16439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.767306][T10856] m920x_read = error: -19 [ 691.771738][T10856] dvb-usb: error -19 while querying for an remote control event. [ 691.947444][T10856] m920x_read = error: -19 [ 691.951912][T10856] dvb-usb: error -19 while querying for an remote control event. [ 692.002221][T10854] uclogic 0003:28BD:0094.0058: failed retrieving string descriptor #100: -71 [ 692.012843][T10854] uclogic 0003:28BD:0094.0058: failed retrieving pen parameters: -71 [ 692.022292][T10854] uclogic 0003:28BD:0094.0058: pen probing failed: -71 [ 692.029726][T10854] uclogic 0003:28BD:0094.0058: failed probing parameters: -71 [ 692.037592][T10854] uclogic 0003:28BD:0094.0058: probe with driver uclogic failed with error -71 [ 692.052671][T10854] usb 5-1: USB disconnect, device number 23 [ 692.122794][T16447] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿ [ 692.127144][T10856] m920x_read = error: -19 [ 692.137914][T10856] dvb-usb: error -19 while querying for an remote control event. [ 692.298942][T10854] m920x_read = error: -19 [ 692.303366][T10854] dvb-usb: error -19 while querying for an remote control event. [ 692.361251][T16452] binfmt_misc: register: failed to install interpreter file ./cgroup [ 692.400502][ T981] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 692.433554][ T981] ath9k_htc: Failed to initialize the device [ 692.450103][T10855] usb 2-1: ath9k_htc: USB layer deinitialized [ 692.487076][T10856] m920x_read = error: -19 [ 692.499392][T10856] dvb-usb: error -19 while querying for an remote control event. [ 692.679485][ T5953] m920x_read = error: -19 [ 692.683996][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 692.698947][T16469] tmpfs: Bad value for 'mpol' [ 692.717434][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.738952][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.861048][ T5953] m920x_read = error: -19 [ 692.875646][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 692.894646][T16485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.938234][T16485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.060298][ T5953] m920x_read = error: -19 [ 693.076644][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 693.237384][ T5953] m920x_read = error: -19 [ 693.242725][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 693.346698][T10867] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 693.406888][ T5953] m920x_read = error: -19 [ 693.411341][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 693.523058][T10867] usb 5-1: Using ep0 maxpacket: 16 [ 693.537492][T10867] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 693.548902][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.557135][T10867] usb 5-1: Product: syz [ 693.561457][T10867] usb 5-1: Manufacturer: syz [ 693.566329][T10867] usb 5-1: SerialNumber: syz [ 693.575278][T10867] usb 5-1: config 0 descriptor?? [ 693.578127][ T5953] m920x_read = error: -19 [ 693.583207][T10867] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 693.585843][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 693.597626][T10867] usb 5-1: Detected FT-X [ 693.771728][ T5953] m920x_read = error: -19 [ 693.776235][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 693.782311][T10867] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 693.936309][ T5953] m920x_read = error: -19 [ 693.940804][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 694.012811][T10867] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 694.116288][ T5953] m920x_read = error: -19 [ 694.120879][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 694.206562][T10846] usb 5-1: USB disconnect, device number 24 [ 694.250423][T10846] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 694.274163][T10846] ftdi_sio 5-1:0.0: device disconnected [ 694.306005][T10855] m920x_read = error: -19 [ 694.314039][T10855] dvb-usb: error -19 while querying for an remote control event. [ 694.500259][T10855] m920x_read = error: -19 [ 694.504843][T10855] dvb-usb: error -19 while querying for an remote control event. [ 694.610511][T16519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.619771][T16519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.676066][T10855] m920x_read = error: -19 [ 694.685275][T10855] dvb-usb: error -19 while querying for an remote control event. [ 694.769191][T16521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.797418][T16521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.846990][T10856] m920x_read = error: -19 [ 694.851461][T10856] dvb-usb: error -19 while querying for an remote control event. [ 695.016108][T10856] m920x_read = error: -19 [ 695.039322][T10856] dvb-usb: error -19 while querying for an remote control event. [ 695.216625][T10855] m920x_read = error: -19 [ 695.221053][T10855] dvb-usb: error -19 while querying for an remote control event. [ 695.295892][T10846] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 695.395687][T10855] m920x_read = error: -19 [ 695.400098][T10855] dvb-usb: error -19 while querying for an remote control event. [ 695.459055][T10846] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 695.467864][T10846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.481243][T10846] usb 5-1: config 0 has no interface number 0 [ 695.488951][T10846] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 695.499053][T10846] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.514546][T10846] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 695.524131][T10846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.532325][T10867] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 695.540122][T10846] usb 5-1: Product: syz [ 695.544280][T10846] usb 5-1: Manufacturer: syz [ 695.549406][T10846] usb 5-1: SerialNumber: syz [ 695.558061][T10846] usb 5-1: config 0 descriptor?? [ 695.565863][T10856] m920x_read = error: -19 [ 695.571693][T10856] dvb-usb: error -19 while querying for an remote control event. [ 695.711700][T10867] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 695.722922][T10867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.734316][T10867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 695.747591][T10867] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 695.755861][T10856] m920x_read = error: -19 [ 695.757040][T10867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.767807][T10856] dvb-usb: error -19 while querying for an remote control event. [ 695.778893][T10867] usb 2-1: config 0 descriptor?? [ 695.870981][T16533] overlay: Bad value for 'workdir' [ 695.956009][T10856] m920x_read = error: -19 [ 695.965581][T10856] dvb-usb: error -19 while querying for an remote control event. [ 696.112901][T16536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.122572][T16536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.130748][ T5953] m920x_read = error: -19 [ 696.138455][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 696.151705][T16536] netlink: 'syz.0.3529': attribute type 6 has an invalid length. [ 696.161565][T16536] __nla_validate_parse: 3 callbacks suppressed [ 696.161585][T16536] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3529'. [ 696.183148][T10846] usb 5-1: USB disconnect, device number 25 [ 696.323456][T10856] m920x_read = error: -19 [ 696.328098][T10856] dvb-usb: error -19 while querying for an remote control event. [ 696.418846][T10867] waterforce 0003:1044:7A4D.0059: item fetching failed at offset 0/3 [ 696.432477][T10867] waterforce 0003:1044:7A4D.0059: hid parse failed with -22 [ 696.443984][T10867] waterforce 0003:1044:7A4D.0059: probe with driver waterforce failed with error -22 [ 696.496569][T10856] m920x_read = error: -19 [ 696.500994][T10856] dvb-usb: error -19 while querying for an remote control event. [ 696.523874][ T30] audit: type=1326 audit(6291402808.301:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16542 comm="syz.2.3531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba4838eba9 code=0x0 [ 696.665841][T10856] m920x_read = error: -19 [ 696.670285][T10856] dvb-usb: error -19 while querying for an remote control event. [ 696.835709][T10856] m920x_read = error: -19 [ 696.840166][T10856] dvb-usb: error -19 while querying for an remote control event. [ 697.008507][T10856] m920x_read = error: -19 [ 697.012952][T10856] dvb-usb: error -19 while querying for an remote control event. [ 697.175746][T10856] m920x_read = error: -19 [ 697.180265][T10856] dvb-usb: error -19 while querying for an remote control event. [ 697.347368][T10856] m920x_read = error: -19 [ 697.351853][T10856] dvb-usb: error -19 while querying for an remote control event. [ 697.516364][T10856] m920x_read = error: -19 [ 697.520777][T10856] dvb-usb: error -19 while querying for an remote control event. [ 697.686609][T10856] m920x_read = error: -19 [ 697.693821][T10856] dvb-usb: error -19 while querying for an remote control event. [ 697.855687][T10856] m920x_read = error: -19 [ 697.860085][T10856] dvb-usb: error -19 while querying for an remote control event. [ 697.895680][T10869] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 698.027883][T10856] m920x_read = error: -19 [ 698.032311][T10856] dvb-usb: error -19 while querying for an remote control event. [ 698.055868][T10869] usb 5-1: Using ep0 maxpacket: 16 [ 698.068895][T10869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 698.081971][T10869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 698.092444][T10869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 698.108052][T10869] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 698.119844][T10869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.129108][T10869] usb 5-1: Product: syz [ 698.133299][T10869] usb 5-1: Manufacturer: syz [ 698.139390][T10869] usb 5-1: SerialNumber: syz [ 698.148904][T10869] usb 5-1: config 0 descriptor?? [ 698.154631][T16550] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 698.176007][T10869] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 698.182051][T10869] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 698.189018][T10869] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 698.194901][T10869] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 698.196059][T10856] m920x_read = error: -19 [ 698.201569][T10869] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 698.211152][T10856] dvb-usb: error -19 while querying for an remote control event. [ 698.376210][T10855] m920x_read = error: -19 [ 698.402752][T10855] dvb-usb: error -19 while querying for an remote control event. [ 698.420441][T10869] usb 5-1: USB disconnect, device number 26 [ 698.421317][T10856] usb 2-1: USB disconnect, device number 50 [ 698.432667][T10869] mcba_usb 5-1:0.0 can0: device disconnected [ 698.597216][T10855] m920x_read = error: -19 [ 698.602021][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3535'. [ 698.611995][T10855] dvb-usb: error -19 while querying for an remote control event. [ 698.786036][T10856] m920x_read = error: -19 [ 698.790569][T10856] dvb-usb: error -19 while querying for an remote control event. [ 698.960261][T10855] m920x_read = error: -19 [ 698.971999][T10855] dvb-usb: error -19 while querying for an remote control event. [ 699.136435][T10855] m920x_read = error: -19 [ 699.142629][T10855] dvb-usb: error -19 while querying for an remote control event. [ 699.346159][T10855] m920x_read = error: -19 [ 699.350676][T10855] dvb-usb: error -19 while querying for an remote control event. [ 699.417883][T10856] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 699.575787][T10855] m920x_read = error: -19 [ 699.580906][T10855] dvb-usb: error -19 while querying for an remote control event. [ 699.588875][T10856] usb 2-1: device descriptor read/64, error -71 [ 699.630257][T16604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3544'. [ 699.762499][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3545'. [ 699.771745][T10855] m920x_read = error: -19 [ 699.787810][T10855] dvb-usb: error -19 while querying for an remote control event. [ 699.837906][T16613] input: syz0 as /devices/virtual/input/input84 [ 699.856178][T10856] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 699.889846][T10854] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 699.986446][T10858] m920x_read = error: -19 [ 699.991506][T10858] dvb-usb: error -19 while querying for an remote control event. [ 700.007295][T10856] usb 2-1: device descriptor read/64, error -71 [ 700.054365][T10854] usb 5-1: Using ep0 maxpacket: 32 [ 700.075011][T10854] usb 5-1: config 0 has an invalid interface number: 250 but max is 2 [ 700.077650][T16619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.097273][T10854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.104202][T16619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.115141][T10854] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 700.127420][T10856] usb usb2-port1: attempt power cycle [ 700.154247][T10854] usb 5-1: config 0 has no interface number 0 [ 700.194242][T10858] m920x_read = error: -19 [ 700.210400][T10858] dvb-usb: error -19 while querying for an remote control event. [ 700.220872][T10854] usb 5-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 700.247694][T10854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.256199][T10854] usb 5-1: Product: syz [ 700.260403][T10854] usb 5-1: Manufacturer: syz [ 700.265037][T10854] usb 5-1: SerialNumber: syz [ 700.273969][T10854] usb 5-1: config 0 descriptor?? [ 700.286766][T10854] uvcvideo 5-1:0.250: probe with driver uvcvideo failed with error -22 [ 700.406094][T10858] m920x_read = error: -19 [ 700.411858][T10858] dvb-usb: error -19 while querying for an remote control event. [ 700.496346][T10856] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 700.537953][T10856] usb 2-1: device descriptor read/8, error -71 [ 700.540789][T16631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.575700][T10854] m920x_read = error: -19 [ 700.580119][T10854] dvb-usb: error -19 while querying for an remote control event. [ 700.607244][T16631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.736097][T10867] usb 5-1: USB disconnect, device number 27 [ 700.786338][T10854] m920x_read = error: -19 [ 700.790752][T10854] dvb-usb: error -19 while querying for an remote control event. [ 700.805622][T10856] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 700.870039][T10856] usb 2-1: device descriptor read/8, error -71 [ 700.890732][T16644] trusted_key: encrypted_key: insufficient parameters specified [ 701.015776][T10858] m920x_read = error: -19 [ 701.020181][T10858] dvb-usb: error -19 while querying for an remote control event. [ 701.020560][T10856] usb usb2-port1: unable to enumerate USB device [ 701.220022][T10854] m920x_read = error: -19 [ 701.224442][T10854] dvb-usb: error -19 while querying for an remote control event. [ 701.245764][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.275121][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.316354][T10856] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 701.425677][T10854] m920x_read = error: -19 [ 701.430293][T10854] dvb-usb: error -19 while querying for an remote control event. [ 701.477623][T10856] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 701.490470][T10856] usb 5-1: config 0 has no interface number 0 [ 701.515812][T10856] usb 5-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.549055][T10856] usb 5-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.583364][T10856] usb 5-1: config 0 interface 85 has no altsetting 0 [ 701.605687][T10856] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 701.621189][ T10] m920x_read = error: -19 [ 701.626472][ T10] dvb-usb: error -19 while querying for an remote control event. [ 701.635254][T10856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.679949][T10856] usb 5-1: config 0 descriptor?? [ 701.806804][T10854] m920x_read = error: -19 [ 701.815693][T10854] dvb-usb: error -19 while querying for an remote control event. [ 701.985924][ T10] m920x_read = error: -19 [ 701.995728][ T10] dvb-usb: error -19 while querying for an remote control event. [ 702.102516][T16654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3553'. [ 702.146468][T10856] hid-led 0003:1D34:0004.005A: unknown main item tag 0x1 [ 702.167211][T10854] m920x_read = error: -19 [ 702.171707][T10854] dvb-usb: error -19 while querying for an remote control event. [ 702.315719][T15143] Bluetooth: hci0: command 0x0406 tx timeout [ 702.332509][T10855] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 702.341778][T10854] m920x_read = error: -19 [ 702.347135][T10856] hid-led 0003:1D34:0004.005A: probe with driver hid-led failed with error -71 [ 702.363838][T10854] dvb-usb: error -19 while querying for an remote control event. [ 702.371869][T10855] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 702.390715][T10856] usb 5-1: USB disconnect, device number 28 [ 702.556278][ T10] m920x_read = error: -19 [ 702.560709][ T10] dvb-usb: error -19 while querying for an remote control event. [ 702.597608][T10867] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 702.735898][ T10] m920x_read = error: -19 [ 702.743623][ T10] dvb-usb: error -19 while querying for an remote control event. [ 702.801519][T10867] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 702.830306][T10867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.854698][T10867] usb 2-1: config 0 descriptor?? [ 702.911885][T10867] gspca_main: spca508-2.14.0 probing 8086:0110 [ 702.917942][ T10] m920x_read = error: -19 [ 702.922556][ T10] dvb-usb: error -19 while querying for an remote control event. [ 703.110782][T10867] gspca_spca508: reg_read err -32 [ 703.130308][T10856] m920x_read = error: -19 [ 703.146140][T10856] dvb-usb: error -19 while querying for an remote control event. [ 703.195888][T15143] Bluetooth: hci1: command 0x0c1a tx timeout [ 703.316308][T10856] m920x_read = error: -19 [ 703.333127][T16681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.344880][T10856] dvb-usb: error -19 while querying for an remote control event. [ 703.367951][T16681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.404856][T10867] gspca_spca508: reg_read err -71 [ 703.416059][T10867] gspca_spca508: reg_read err -71 [ 703.440294][T10867] gspca_spca508: reg_read err -71 [ 703.456113][T10867] gspca_spca508: reg write: error -71 [ 703.461810][T10867] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 703.498148][T10867] usb 2-1: USB disconnect, device number 55 [ 703.535774][T10856] m920x_read = error: -19 [ 703.558955][T10856] dvb-usb: error -19 while querying for an remote control event. [ 703.756966][T10856] m920x_read = error: -19 [ 703.782133][T10856] dvb-usb: error -19 while querying for an remote control event. [ 703.965721][T10856] m920x_read = error: -19 [ 703.985364][T10856] dvb-usb: error -19 while querying for an remote control event. [ 704.165776][T10854] m920x_read = error: -19 [ 704.173365][T10854] dvb-usb: error -19 while querying for an remote control event. [ 704.261767][T16745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.283461][T16745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.356587][T10856] m920x_read = error: -19 [ 704.361170][T10856] dvb-usb: error -19 while querying for an remote control event. [ 704.444326][T10854] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 704.547928][T10856] m920x_read = error: -19 [ 704.552442][T10856] dvb-usb: error -19 while querying for an remote control event. [ 704.575099][ T30] audit: type=1326 audit(6291402816.351:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.2.3573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba4838eba9 code=0x0 [ 704.628793][T10854] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 704.642450][T15143] Bluetooth: hci4: command 0x0406 tx timeout [ 704.655653][T10855] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 704.661785][T10855] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 704.675633][T10854] usb 2-1: config 0 has no interface number 0 [ 704.681860][T10854] usb 2-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 704.701155][T10854] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 704.712507][T10854] usb 2-1: config 0 interface 11 has no altsetting 0 [ 704.723754][T10854] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 704.737611][T10854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.745878][T10858] m920x_read = error: -19 [ 704.750373][T10858] dvb-usb: error -19 while querying for an remote control event. [ 704.775780][T10854] usb 2-1: config 0 descriptor?? [ 704.794527][T10854] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 704.820216][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 704.829033][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 704.865748][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 704.873654][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 704.881748][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 704.916022][T10858] m920x_read = error: -19 [ 704.920439][T10858] dvb-usb: error -19 while querying for an remote control event. [ 704.928502][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 704.951367][T10854] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 705.015687][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 705.044131][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 705.076998][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 705.089977][T16773] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3576'. [ 705.106541][T10858] m920x_read = error: -19 [ 705.111800][T10858] dvb-usb: error -19 while querying for an remote control event. [ 705.120106][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 705.150797][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 705.170023][T10854] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 705.199582][T10854] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 705.249120][T10854] usb 2-1: USB disconnect, device number 56 [ 705.289926][T10854] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 705.315950][T10858] m920x_read = error: -19 [ 705.320450][T10858] dvb-usb: error -19 while querying for an remote control event. [ 705.354606][T10854] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 705.388613][T10854] keyspan 2-1:0.11: device disconnected [ 705.526129][T10858] m920x_read = error: -19 [ 705.530802][T10858] dvb-usb: error -19 while querying for an remote control event. [ 705.552933][T16791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.563880][T16791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.735720][T10858] m920x_read = error: -19 [ 705.742107][T10858] dvb-usb: error -19 while querying for an remote control event. [ 705.916398][ T981] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 705.926145][T10858] m920x_read = error: -19 [ 705.941964][T10858] dvb-usb: error -19 while querying for an remote control event. [ 706.109753][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 706.123562][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.135759][T10858] m920x_read = error: -19 [ 706.140161][T10858] dvb-usb: error -19 while querying for an remote control event. [ 706.155979][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.166511][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 706.207518][T10867] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 706.217979][ T981] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 706.240688][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.266365][ T981] usb 2-1: config 0 descriptor?? [ 706.326207][ T10] m920x_read = error: -19 [ 706.330618][ T10] dvb-usb: error -19 while querying for an remote control event. [ 706.386217][T10867] usb 5-1: device descriptor read/64, error -71 [ 706.442743][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.453610][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.473021][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.493033][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.502597][ T10] m920x_read = error: -19 [ 706.512619][ T10] dvb-usb: error -19 while querying for an remote control event. [ 706.635809][T10867] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 706.685667][ T10] m920x_read = error: -19 [ 706.690148][ T10] dvb-usb: error -19 while querying for an remote control event. [ 706.701252][ T981] microsoft 0003:045E:07DA.005B: ignoring exceeding usage max [ 706.717760][ T981] microsoft 0003:045E:07DA.005B: unsupported Resolution Multiplier 0 [ 706.742064][ T981] microsoft 0003:045E:07DA.005B: implement() called with n (152) > 32! (kworker/1:2) [ 706.785695][T10867] usb 5-1: device descriptor read/64, error -71 [ 706.856443][ T10] m920x_read = error: -19 [ 706.860936][ T10] dvb-usb: error -19 while querying for an remote control event. [ 706.875718][T15143] Bluetooth: hci3: command 0x0c1a tx timeout [ 706.881964][T10855] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 706.889694][T10855] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 706.902750][T16796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.912191][T10867] usb usb5-port1: attempt power cycle [ 706.932445][T16796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.968790][ T981] microsoft 0003:045E:07DA.005B: unsupported Resolution Multiplier 0 [ 706.992404][ T981] microsoft 0003:045E:07DA.005B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 707.014542][ T981] microsoft 0003:045E:07DA.005B: no inputs found [ 707.022327][ T981] microsoft 0003:045E:07DA.005B: could not initialize ff, continuing anyway [ 707.026932][ T10] m920x_read = error: -19 [ 707.066013][ T10] dvb-usb: error -19 while querying for an remote control event. [ 707.231021][T10854] m920x_read = error: -19 [ 707.235485][T10854] dvb-usb: error -19 while querying for an remote control event. [ 707.251438][T10869] usb 2-1: USB disconnect, device number 57 [ 707.268695][T16836] nftables ruleset with unbound set [ 707.285677][T10867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 707.326948][T10867] usb 5-1: device descriptor read/8, error -71 [ 707.385293][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 707.395900][T10854] m920x_read = error: -19 [ 707.400377][T10854] dvb-usb: error -19 while querying for an remote control event. [ 707.491185][T16845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.509442][T16847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.528103][T16845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.547590][T16847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.588762][T10867] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 707.596468][T10854] m920x_read = error: -19 [ 707.596500][T10854] dvb-usb: error -19 while querying for an remote control event. [ 707.630319][T10867] usb 5-1: device descriptor read/8, error -71 [ 707.756160][T10867] usb usb5-port1: unable to enumerate USB device [ 707.765579][T10854] m920x_read = error: -19 [ 707.770439][T10854] dvb-usb: error -19 while querying for an remote control event. [ 707.962969][T10854] m920x_read = error: -19 [ 707.979603][T10854] dvb-usb: error -19 while querying for an remote control event. [ 708.162228][T10854] m920x_read = error: -19 [ 708.175610][T10854] dvb-usb: error -19 while querying for an remote control event. [ 708.335821][ T10] m920x_read = error: -19 [ 708.337246][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.340226][ T10] dvb-usb: error -19 while querying for an remote control event. [ 708.400683][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.444226][T16883] netlink: 'syz.2.3598': attribute type 10 has an invalid length. [ 708.453856][T16883] bond0: (slave wlan1): Opening slave failed [ 708.477147][T16883] IPv6: syztnl0: Disabled Multicast RS [ 708.488928][T16882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.495701][ T10] m920x_read = error: -19 [ 708.506932][ T10] dvb-usb: error -19 while querying for an remote control event. [ 708.525965][T10867] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 708.667582][ T10] m920x_read = error: -19 [ 708.672471][ T10] dvb-usb: error -19 while querying for an remote control event. [ 708.691810][T10867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.702761][T10867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 708.723484][T10867] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 708.732925][T10867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.747588][T10867] usb 2-1: config 0 descriptor?? [ 708.836712][T10854] m920x_read = error: -19 [ 708.841153][T10854] dvb-usb: error -19 while querying for an remote control event. [ 709.006202][T10854] m920x_read = error: -19 [ 709.022141][T10854] dvb-usb: error -19 while querying for an remote control event. [ 709.196030][T15143] Bluetooth: hci1: command 0x0c1a tx timeout [ 709.202342][T10854] m920x_read = error: -19 [ 709.207491][T10855] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 709.223351][T16895] netlink: 'syz.2.3601': attribute type 4 has an invalid length. [ 709.233746][T10854] dvb-usb: error -19 while querying for an remote control event. [ 709.243471][T10855] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 709.263563][T16895] netlink: 'syz.2.3601': attribute type 4 has an invalid length. [ 709.395690][T10867] usbhid 2-1:0.0: can't add hid device: -71 [ 709.401796][T10867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 709.417220][T10854] m920x_read = error: -19 [ 709.422726][T10854] dvb-usb: error -19 while querying for an remote control event. [ 709.426196][T10867] usb 2-1: USB disconnect, device number 58 [ 709.483612][T16901] overlayfs: failed to resolve './bus': -2 [ 709.595155][T16909] 8021q: VLANs not supported on ipvlan0 [ 709.616127][T10854] m920x_read = error: -19 [ 709.620538][T10854] dvb-usb: error -19 while querying for an remote control event. [ 709.697461][T16916] IPVS: set_ctl: invalid protocol: 44 172.20.20.38:20002 [ 709.704585][T16915] IPVS: set_ctl: invalid protocol: 44 172.20.20.38:20002 [ 709.795690][T10854] m920x_read = error: -19 [ 709.800200][T10854] dvb-usb: error -19 while querying for an remote control event. [ 709.810462][T10855] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 709.860263][T16926] Invalid ELF header magic: != ELF [ 709.968087][T10855] usb 5-1: unable to get BOS descriptor or descriptor too short [ 709.979022][T10854] m920x_read = error: -19 [ 709.983532][T10854] dvb-usb: error -19 while querying for an remote control event. [ 710.005117][T10855] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 710.020518][T10855] usb 5-1: string descriptor 0 read error: -22 [ 710.027269][T10855] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 710.029515][T16931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.050734][T16931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.055621][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.175789][T10854] m920x_read = error: -19 [ 710.194396][T10854] dvb-usb: error -19 while querying for an remote control event. [ 710.215767][T10855] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 710.385859][T10854] m920x_read = error: -19 [ 710.396038][T10854] dvb-usb: error -19 while querying for an remote control event. [ 710.560842][T16955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.570522][T16955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.586167][T10858] m920x_read = error: -19 [ 710.590718][T10858] dvb-usb: error -19 while querying for an remote control event. [ 710.758745][T10858] m920x_read = error: -19 [ 710.763272][T10858] dvb-usb: error -19 while querying for an remote control event. [ 710.772949][T10854] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 710.784726][T16968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.799912][T16968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.906123][T10855] usb 5-1: device descriptor read/64, error -71 [ 710.935908][T10858] m920x_read = error: -19 [ 710.940296][T10858] dvb-usb: error -19 while querying for an remote control event. [ 710.951482][T10854] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 710.963345][T10854] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 710.973687][T10854] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 710.983821][T10854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.001851][T16953] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 711.011805][T10854] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 711.105756][T10854] m920x_read = error: -19 [ 711.110182][T10854] dvb-usb: error -19 while querying for an remote control event. [ 711.155759][T10855] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 711.286067][T10854] m920x_read = error: -19 [ 711.290562][T10854] dvb-usb: error -19 while querying for an remote control event. [ 711.340185][T10855] usb 5-1: unable to get BOS descriptor or descriptor too short [ 711.363350][T10855] usb 5-1: device firmware changed [ 711.380576][T10855] usb 5-1: USB disconnect, device number 33 [ 711.394150][T16976] overlayfs: missing 'lowerdir' [ 711.466356][T10854] m920x_read = error: -19 [ 711.470807][T10854] dvb-usb: error -19 while querying for an remote control event. [ 711.495704][T10867] usb 2-1: USB disconnect, device number 59 [ 711.647229][T10855] m920x_read = error: -19 [ 711.651658][T10855] dvb-usb: error -19 while querying for an remote control event. [ 711.815671][T10855] m920x_read = error: -19 [ 711.820235][T10855] dvb-usb: error -19 while querying for an remote control event. [ 711.987539][T10855] m920x_read = error: -19 [ 711.991966][T10855] dvb-usb: error -19 while querying for an remote control event. [ 712.165670][T10854] m920x_read = error: -19 [ 712.170091][T10854] dvb-usb: error -19 while querying for an remote control event. [ 712.345683][T10855] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 712.363994][T10854] m920x_read = error: -19 [ 712.368817][T10854] dvb-usb: error -19 while querying for an remote control event. [ 712.455620][T10866] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 712.520297][T10855] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 712.532183][T10855] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 712.545805][T10858] m920x_read = error: -19 [ 712.550292][T10858] dvb-usb: error -19 while querying for an remote control event. [ 712.564362][T10855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 712.582299][T10855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59332, setting to 1024 [ 712.594137][T10855] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 712.622877][T10855] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 712.634481][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.643267][T10855] usb 5-1: Product: syz [ 712.645579][T10866] usb 2-1: Using ep0 maxpacket: 16 [ 712.647651][T10855] usb 5-1: Manufacturer: syz [ 712.657408][T10855] usb 5-1: SerialNumber: syz [ 712.663103][T10866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.684704][T10866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.686901][T10855] usb 5-1: config 0 descriptor?? [ 712.694791][T10866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 712.716778][T16992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 712.719758][T10866] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 712.730779][T10855] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 712.740673][T10858] m920x_read = error: -19 [ 712.745056][T10858] dvb-usb: error -19 while querying for an remote control event. [ 712.775030][T10855] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 712.775568][T10866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.804299][T10855] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 712.823810][T10866] usb 2-1: config 0 descriptor?? [ 712.849136][T16996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.881946][T16996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.915686][T10858] m920x_read = error: -19 [ 712.920114][T10858] dvb-usb: error -19 while querying for an remote control event. [ 712.938727][T10855] usb 5-1: USB disconnect, device number 34 [ 712.956617][T10855] garmin_gps 5-1:0.0: device disconnected [ 713.098127][T16996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.107077][T10858] m920x_read = error: -19 [ 713.111463][T10858] dvb-usb: error -19 while querying for an remote control event. [ 713.130462][T16996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.274847][T10866] microsoft 0003:045E:07DA.005C: ignoring exceeding usage max [ 713.295864][T10855] m920x_read = error: -19 [ 713.297472][T10866] microsoft 0003:045E:07DA.005C: unsupported Resolution Multiplier 0 [ 713.300263][T10855] dvb-usb: error -19 while querying for an remote control event. [ 713.310765][T10866] microsoft 0003:045E:07DA.005C: implement() called with n (152) > 32! (kworker/1:12) [ 713.472475][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.495746][T10855] m920x_read = error: -19 [ 713.500243][T10855] dvb-usb: error -19 while querying for an remote control event. [ 713.502878][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.560736][T10866] microsoft 0003:045E:07DA.005C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 713.586854][T10866] microsoft 0003:045E:07DA.005C: no inputs found [ 713.593796][T10866] microsoft 0003:045E:07DA.005C: could not initialize ff, continuing anyway [ 713.619015][T10866] usb 2-1: USB disconnect, device number 60 [ 713.715670][T10858] m920x_read = error: -19 [ 713.720122][T10858] dvb-usb: error -19 while querying for an remote control event. [ 713.770411][T17009] fido_id[17009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 713.921128][T10858] m920x_read = error: -19 [ 713.925833][T10858] dvb-usb: error -19 while querying for an remote control event. [ 714.086100][T10858] m920x_read = error: -19 [ 714.092573][T10858] dvb-usb: error -19 while querying for an remote control event. [ 714.209321][T17024] openvswitch: netlink: Flow actions attr not present in new flow. [ 714.285746][T10858] m920x_read = error: -19 [ 714.290168][T10858] dvb-usb: error -19 while querying for an remote control event. [ 714.485875][T10855] m920x_read = error: -19 [ 714.490285][T10855] dvb-usb: error -19 while querying for an remote control event. [ 714.665760][T10858] m920x_read = error: -19 [ 714.680431][T10858] dvb-usb: error -19 while querying for an remote control event. [ 714.855752][T10858] m920x_read = error: -19 [ 714.865591][T10858] dvb-usb: error -19 while querying for an remote control event. [ 714.963427][T17044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.006485][T17044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.035724][T10855] m920x_read = error: -19 [ 715.040450][T10855] dvb-usb: error -19 while querying for an remote control event. [ 715.216280][T10858] m920x_read = error: -19 [ 715.220950][T10858] dvb-usb: error -19 while querying for an remote control event. [ 715.395992][T10854] m920x_read = error: -19 [ 715.401396][T10854] dvb-usb: error -19 while querying for an remote control event. [ 715.445699][T10855] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 715.575864][T10858] m920x_read = error: -19 [ 715.583039][T10858] dvb-usb: error -19 while querying for an remote control event. [ 715.618428][T10855] usb 5-1: config 4 has an invalid interface number: 149 but max is 0 [ 715.640642][T10855] usb 5-1: config 4 has an invalid descriptor of length 228, skipping remainder of the config [ 715.667876][T10855] usb 5-1: config 4 has no interface number 0 [ 715.691448][T10855] usb 5-1: New USB device found, idVendor=12d1, idProduct=a3a9, bcdDevice=94.04 [ 715.715466][T10855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.745086][T10855] usb 5-1: Product: syz [ 715.754963][T10855] usb 5-1: Manufacturer: syz [ 715.760621][T10855] usb 5-1: SerialNumber: syz [ 715.771536][T10858] m920x_read = error: -19 [ 715.787867][T10858] dvb-usb: error -19 while querying for an remote control event. [ 715.795388][T17071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.842406][T17071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.966370][T10858] m920x_read = error: -19 [ 715.970834][T10858] dvb-usb: error -19 while querying for an remote control event. [ 716.011714][T10855] option 5-1:4.149: GSM modem (1-port) converter detected [ 716.041755][T10855] usb 5-1: USB disconnect, device number 35 [ 716.052621][T10855] option 5-1:4.149: device disconnected [ 716.145735][T10858] m920x_read = error: -19 [ 716.150183][T10858] dvb-usb: error -19 while querying for an remote control event. [ 716.315932][T10858] m920x_read = error: -19 [ 716.320534][T10858] dvb-usb: error -19 while querying for an remote control event. [ 716.494958][T10858] m920x_read = error: -19 [ 716.505184][T10858] dvb-usb: error -19 while querying for an remote control event. [ 716.577333][T10866] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 716.685728][T10855] m920x_read = error: -19 [ 716.690222][T10855] dvb-usb: error -19 while querying for an remote control event. [ 716.757814][T10866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.776079][T10866] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 716.796252][T10866] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 1.bb [ 716.806813][T10866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.822028][T10866] usb 2-1: config 0 descriptor?? [ 716.836800][T10866] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 716.856261][T10855] m920x_read = error: -19 [ 716.860665][T10855] dvb-usb: error -19 while querying for an remote control event. [ 717.030563][T17078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.040049][T17078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.045722][T10855] m920x_read = error: -19 [ 717.052900][T10855] dvb-usb: error -19 while querying for an remote control event. [ 717.054355][T17078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.072933][T17078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.081922][T17078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.092336][T17078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.103023][T17078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.112191][T17078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.123300][T17078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.128456][ T5953] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 717.133922][T17078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.215669][T10855] m920x_read = error: -19 [ 717.220057][T10855] dvb-usb: error -19 while querying for an remote control event. [ 717.305635][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 717.330817][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.352361][ T5953] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 717.380533][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.388967][T10855] m920x_read = error: -19 [ 717.393343][T10855] dvb-usb: error -19 while querying for an remote control event. [ 717.414885][ T5953] usb 5-1: config 0 descriptor?? [ 717.573940][T10855] m920x_read = error: -19 [ 717.578727][T10855] dvb-usb: error -19 while querying for an remote control event. [ 717.628554][ T981] usb 2-1: USB disconnect, device number 61 [ 717.734808][T17121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3677'. [ 717.757877][T10855] m920x_read = error: -19 [ 717.762328][T10855] dvb-usb: error -19 while querying for an remote control event. [ 717.771404][T17121] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3677'. [ 717.862784][ T5953] mcp2221 0003:04D8:00DD.005D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 717.936950][T10855] m920x_read = error: -19 [ 717.962495][T10855] dvb-usb: error -19 while querying for an remote control event. [ 718.145812][ T5953] m920x_read = error: -19 [ 718.150361][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 718.287994][T17100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.333875][T17100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.342531][ T5953] m920x_read = error: -19 [ 718.347962][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 718.381930][ T981] usb 5-1: USB disconnect, device number 36 [ 718.538000][T10854] m920x_read = error: -19 [ 718.542460][T10854] dvb-usb: error -19 while querying for an remote control event. [ 718.572131][T17121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.586201][T17121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.597535][T17121] bond0 (unregistering): Released all slaves [ 718.610004][T17140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3682'. [ 718.716273][T10854] m920x_read = error: -19 [ 718.720775][T10854] dvb-usb: error -19 while querying for an remote control event. [ 718.767428][T17147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.777844][T17147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.895854][T10854] m920x_read = error: -19 [ 718.900501][T10854] dvb-usb: error -19 while querying for an remote control event. [ 719.058960][T10866] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 719.075901][T10854] m920x_read = error: -19 [ 719.080725][T10854] dvb-usb: error -19 while querying for an remote control event. [ 719.185737][ T981] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 719.219427][T10866] usb 2-1: not running at top speed; connect to a high speed hub [ 719.228819][T10866] usb 2-1: config 9 has an invalid interface number: 133 but max is 0 [ 719.237435][T10866] usb 2-1: config 9 has no interface number 0 [ 719.243632][T10866] usb 2-1: config 9 interface 133 has no altsetting 0 [ 719.245714][T10854] m920x_read = error: -19 [ 719.253123][T10866] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.9b [ 719.255381][T10854] dvb-usb: error -19 while querying for an remote control event. [ 719.265190][T10866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.280370][T10866] usb 2-1: Product: syz [ 719.284823][T10866] usb 2-1: Manufacturer: syz [ 719.289481][T10866] usb 2-1: SerialNumber: syz [ 719.352563][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.367201][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.384232][ T981] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 719.394067][ T981] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 719.402433][ T981] usb 5-1: Manufacturer: syz [ 719.412455][ T981] usb 5-1: config 0 descriptor?? [ 719.424583][ T981] usb 5-1: Found UVC 0.00 device (18ec:3288) [ 719.432316][ T981] usb 5-1: No valid video chain found. [ 719.436096][T10854] m920x_read = error: -19 [ 719.459543][T10854] dvb-usb: error -19 while querying for an remote control event. [ 719.509530][T10866] pegasus 2-1:9.133: probe with driver pegasus failed with error -71 [ 719.530346][T10866] usb 2-1: USB disconnect, device number 62 [ 719.624160][T10854] usb 5-1: USB disconnect, device number 37 [ 719.637513][T10855] m920x_read = error: -19 [ 719.642498][T10855] dvb-usb: error -19 while querying for an remote control event. [ 719.806033][T10854] m920x_read = error: -19 [ 719.810436][T10854] dvb-usb: error -19 while querying for an remote control event. [ 719.976210][T10855] m920x_read = error: -19 [ 719.980763][T10855] dvb-usb: error -19 while querying for an remote control event. [ 720.145891][T10855] m920x_read = error: -19 [ 720.159409][T10855] dvb-usb: error -19 while querying for an remote control event. [ 720.266544][T17159] FAULT_INJECTION: forcing a failure. [ 720.266544][T17159] name failslab, interval 1, probability 0, space 0, times 0 [ 720.280174][T17159] CPU: 0 UID: 0 PID: 17159 Comm: syz.4.3689 Not tainted syzkaller #0 PREEMPT(full) [ 720.280205][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 720.280218][T17159] Call Trace: [ 720.280227][T17159] [ 720.280237][T17159] dump_stack_lvl+0x189/0x250 [ 720.280266][T17159] ? __pfx____ratelimit+0x10/0x10 [ 720.280291][T17159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.280312][T17159] ? __pfx__printk+0x10/0x10 [ 720.280348][T17159] ? __pfx___might_resched+0x10/0x10 [ 720.280380][T17159] should_fail_ex+0x414/0x560 [ 720.280417][T17159] should_failslab+0xa8/0x100 [ 720.280447][T17159] __kmalloc_noprof+0xcb/0x7f0 [ 720.280470][T17159] ? kfree+0x4d/0x6d0 [ 720.280487][T17159] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 720.280519][T17159] tomoyo_realpath_from_path+0xe3/0x5d0 [ 720.280555][T17159] ? tomoyo_domain+0xd9/0x130 [ 720.280585][T17159] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 720.280615][T17159] tomoyo_path_number_perm+0x1e8/0x5a0 [ 720.280648][T17159] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 720.280723][T17159] ? __fget_files+0x2a/0x420 [ 720.280760][T17159] ? __fget_files+0x3a0/0x420 [ 720.280788][T17159] ? __fget_files+0x2a/0x420 [ 720.280823][T17159] security_file_ioctl+0xcb/0x2d0 [ 720.280854][T17159] __se_sys_ioctl+0x47/0x170 [ 720.280888][T17159] do_syscall_64+0xfa/0xfa0 [ 720.280912][T17159] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.280946][T17159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.280966][T17159] ? clear_bhb_loop+0x60/0xb0 [ 720.280992][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.281012][T17159] RIP: 0033:0x7fb90cf8eba9 [ 720.281033][T17159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.281051][T17159] RSP: 002b:00007fb90de7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.281076][T17159] RAX: ffffffffffffffda RBX: 00007fb90d1d5fa0 RCX: 00007fb90cf8eba9 [ 720.281091][T17159] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 720.281104][T17159] RBP: 00007fb90de7f090 R08: 0000000000000000 R09: 0000000000000000 [ 720.281118][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.281131][T17159] R13: 00007fb90d1d6038 R14: 00007fb90d1d5fa0 R15: 00007ffcab8b3d98 [ 720.281169][T17159] [ 720.281263][T17159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 720.335624][T10866] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 720.345677][T10855] m920x_read = error: -19 [ 720.534080][T10855] dvb-usb: error -19 while querying for an remote control event. [ 720.554115][T10866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.579029][T10866] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 720.591890][T10866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.629540][T10866] usb 2-1: config 0 descriptor?? [ 720.659376][T10866] pwc: Askey VC010 type 2 USB webcam detected. [ 720.699294][T10855] m920x_read = error: -19 [ 720.713998][T10855] dvb-usb: error -19 while querying for an remote control event. [ 720.750497][T17169] overlayfs: missing 'workdir' [ 720.898417][T10855] m920x_read = error: -19 [ 720.902924][T10855] dvb-usb: error -19 while querying for an remote control event. [ 720.911738][T17176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.920767][T17176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.060684][T10866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 721.065780][T10855] m920x_read = error: -19 [ 721.068945][T10866] pwc: recv_control_msg error -32 req 02 val 2700 [ 721.072581][T10855] dvb-usb: error -19 while querying for an remote control event. [ 721.079577][T10866] pwc: recv_control_msg error -32 req 02 val 2c00 [ 721.093508][T10866] pwc: recv_control_msg error -32 req 04 val 1000 [ 721.101865][T10866] pwc: recv_control_msg error -32 req 04 val 1300 [ 721.109933][T10866] pwc: recv_control_msg error -32 req 04 val 1400 [ 721.117364][T10866] pwc: recv_control_msg error -32 req 02 val 2000 [ 721.125034][T10866] pwc: recv_control_msg error -32 req 02 val 2100 [ 721.246618][T10855] m920x_read = error: -19 [ 721.251174][T10855] dvb-usb: error -19 while querying for an remote control event. [ 721.375831][T10866] pwc: recv_control_msg error -71 req 02 val 2500 [ 721.384108][T10866] pwc: recv_control_msg error -71 req 02 val 2400 [ 721.391504][T10866] pwc: recv_control_msg error -71 req 02 val 2600 [ 721.398660][T10866] pwc: recv_control_msg error -71 req 02 val 2900 [ 721.405454][T10866] pwc: recv_control_msg error -71 req 02 val 2800 [ 721.412842][T10866] pwc: recv_control_msg error -71 req 04 val 1100 [ 721.417678][T10855] m920x_read = error: -19 [ 721.420341][T10866] pwc: recv_control_msg error -71 req 04 val 1200 [ 721.423790][T10855] dvb-usb: error -19 while querying for an remote control event. [ 721.434620][T10866] pwc: Registered as video103. [ 721.463783][T10866] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input85 [ 721.497107][T10866] usb 2-1: USB disconnect, device number 63 [ 721.596793][T10855] m920x_read = error: -19 [ 721.604266][T17179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.611600][T10855] dvb-usb: error -19 while querying for an remote control event. [ 721.631366][T17179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.706489][T17179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.715413][T17179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.805697][ T5953] m920x_read = error: -19 [ 721.810242][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 721.961572][T17193] pimreg: entered allmulticast mode [ 721.971642][T17193] pimreg: left allmulticast mode [ 721.975771][T10855] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 721.990966][ T5953] m920x_read = error: -19 [ 721.997325][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 722.146398][T10855] usb 5-1: Using ep0 maxpacket: 8 [ 722.159596][T10855] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 722.176118][T10855] usb 5-1: can't read configurations, error -61 [ 722.193753][ T5953] m920x_read = error: -19 [ 722.202892][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 722.258377][T17208] netlink: 'syz.1.3703': attribute type 27 has an invalid length. [ 722.317577][T10855] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 722.368886][T17215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.377002][ T5953] m920x_read = error: -19 [ 722.381418][T17215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.381795][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 722.462100][ T5953] IPVS: starting estimator thread 0... [ 722.470245][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.480135][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.488094][T10855] usb 5-1: Using ep0 maxpacket: 8 [ 722.495404][T10855] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 722.503180][T10855] usb 5-1: can't read configurations, error -61 [ 722.509958][T10855] usb usb5-port1: attempt power cycle [ 722.555922][T17223] IPVS: using max 28 ests per chain, 67200 per kthread [ 722.565773][ T5953] m920x_read = error: -19 [ 722.570556][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 722.736518][ T5953] m920x_read = error: -19 [ 722.741104][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 722.855806][T10855] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 722.876687][T10855] usb 5-1: Using ep0 maxpacket: 8 [ 722.884406][T10855] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 722.892325][T10855] usb 5-1: can't read configurations, error -61 [ 722.905739][ T5953] m920x_read = error: -19 [ 722.910256][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 723.011495][T17226] trusted_key: encrypted_key: insufficient parameters specified [ 723.023860][T17226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3709'. [ 723.033614][T10855] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 723.056273][T10855] usb 5-1: Using ep0 maxpacket: 8 [ 723.067201][T10855] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 723.069414][T17228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.075225][T10855] usb 5-1: can't read configurations, error -61 [ 723.090515][ T5953] m920x_read = error: -19 [ 723.090616][T17228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.094886][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 723.125891][T10855] usb usb5-port1: unable to enumerate USB device [ 723.286134][T10855] m920x_read = error: -19 [ 723.290661][T10855] dvb-usb: error -19 while querying for an remote control event. [ 723.456431][T10855] m920x_read = error: -19 [ 723.460839][T10855] dvb-usb: error -19 while querying for an remote control event. [ 723.601324][ T5953] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 723.625785][T10855] m920x_read = error: -19 [ 723.632574][T10855] dvb-usb: error -19 while querying for an remote control event. [ 723.755739][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 723.762754][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.774483][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.784494][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 723.800804][ T5953] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 723.811026][T10855] m920x_read = error: -19 [ 723.815394][T10855] dvb-usb: error -19 while querying for an remote control event. [ 723.823381][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.833767][ T5953] usb 2-1: config 0 descriptor?? [ 723.988531][T10855] m920x_read = error: -19 [ 723.993199][T10855] dvb-usb: error -19 while querying for an remote control event. [ 724.038883][T17249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.050204][T17249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.166872][T10855] m920x_read = error: -19 [ 724.171318][T10855] dvb-usb: error -19 while querying for an remote control event. [ 724.262037][ T5953] microsoft 0003:045E:07DA.005E: ignoring exceeding usage max [ 724.278278][ T5953] microsoft 0003:045E:07DA.005E: unsupported Resolution Multiplier 0 [ 724.288705][ T5953] microsoft 0003:045E:07DA.005E: implement() called with n (152) > 32! (kworker/0:6) [ 724.335755][T10858] m920x_read = error: -19 [ 724.340383][T10858] dvb-usb: error -19 while querying for an remote control event. [ 724.458669][T17238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.469179][T17238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.484437][ T5953] microsoft 0003:045E:07DA.005E: unsupported Resolution Multiplier 0 [ 724.494337][ T5953] microsoft 0003:045E:07DA.005E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 724.509918][ T5953] microsoft 0003:045E:07DA.005E: no inputs found [ 724.517316][T10858] m920x_read = error: -19 [ 724.521693][T10858] dvb-usb: error -19 while querying for an remote control event. [ 724.535963][ T5953] microsoft 0003:045E:07DA.005E: could not initialize ff, continuing anyway [ 724.687201][ T981] usb 2-1: USB disconnect, device number 64 [ 724.695758][ T5953] m920x_read = error: -19 [ 724.704630][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 724.876240][ T5953] m920x_read = error: -19 [ 724.883862][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 724.916574][T17262] overlayfs: failed to clone upperpath [ 725.046030][ T5953] m920x_read = error: -19 [ 725.054873][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 725.092985][T17268] ------------[ cut here ]------------ [ 725.099172][T17268] WARNING: mm/page_alloc.c:5135 at __alloc_frozen_pages_noprof+0x2c8/0x370, CPU#1: syz.2.3725/17268 [ 725.110076][T17268] Modules linked in: [ 725.114397][T17268] CPU: 1 UID: 0 PID: 17268 Comm: syz.2.3725 Not tainted syzkaller #0 PREEMPT(full) [ 725.123822][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.133940][T17268] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 725.140872][T17268] Code: 74 10 4c 89 e7 89 54 24 0c e8 a4 a4 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 13 40 b8 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 725.160768][T17268] RSP: 0018:ffffc9000b507880 EFLAGS: 00010246 [ 725.167112][T17268] RAX: ffffc9000b507800 RBX: 000000000000002a RCX: 0000000000000000 [ 725.175136][T17268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b5078e8 [ 725.183178][T17268] RBP: ffffc9000b507970 R08: ffffc9000b5078e7 R09: 0000000000000000 [ 725.191256][T17268] R10: ffffc9000b5078c0 R11: fffff520016a0f1d R12: 0000000000000000 [ 725.199308][T17268] R13: 1ffff920016a0f14 R14: 0000000000040d40 R15: dffffc0000000000 [ 725.207370][T17268] FS: 00007fba4926a6c0(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000 [ 725.216930][T17268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.223573][T17268] CR2: 000000110c3977ab CR3: 000000007c3fe000 CR4: 00000000003526f0 [ 725.225843][ T5953] m920x_read = error: -19 [ 725.231628][T17268] Call Trace: [ 725.239513][T17268] [ 725.242491][T17268] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 725.245079][ T5953] dvb-usb: error -19 while querying for an remote control event. [ 725.248935][T17268] ? p9_client_clunk+0x1b6/0x250 [ 725.248980][T17268] alloc_pages_mpol+0x232/0x4a0 [ 725.249017][T17268] ___kmalloc_large_node+0x5f/0x1b0 [ 725.249051][T17268] __kmalloc_large_node_noprof+0x18/0x90 [ 725.249082][T17268] __kmalloc_noprof+0x4bd/0x7f0 [ 725.282592][T17268] ? v9fs_fid_get_acl+0x4f/0x100 [ 725.287788][T17268] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 725.294265][T17268] v9fs_fid_get_acl+0x4f/0x100 [ 725.299107][T17268] v9fs_get_acl+0x9a/0x360 [ 725.303655][T17268] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 725.309318][T17268] v9fs_mount+0x6eb/0xa50 [ 725.313866][T17268] ? __pfx_v9fs_mount+0x10/0x10 [ 725.318839][T17268] legacy_get_tree+0xfd/0x1a0 [ 725.323619][T17268] ? __pfx_v9fs_mount+0x10/0x10 [ 725.328558][T17268] vfs_get_tree+0x92/0x2b0 [ 725.333033][T17268] do_new_mount+0x302/0xa10 [ 725.337625][T17268] ? apparmor_capable+0x137/0x1b0 [ 725.342702][T17268] ? __pfx_do_new_mount+0x10/0x10 [ 725.347930][T17268] ? ns_capable+0x8a/0xf0 [ 725.352298][T17268] ? path_mount+0x61c/0xfe0 [ 725.357075][T17268] ? kmem_cache_free+0x19a/0x690 [ 725.362150][T17268] __se_sys_mount+0x313/0x410 [ 725.366969][T17268] ? __pfx___se_sys_mount+0x10/0x10 [ 725.372236][T17268] ? do_syscall_64+0xbe/0xfa0 [ 725.376982][T17268] ? __x64_sys_mount+0x20/0xc0 [ 725.381798][T17268] do_syscall_64+0xfa/0xfa0 [ 725.386381][T17268] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.391638][T17268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.397778][T17268] ? clear_bhb_loop+0x60/0xb0 [ 725.402483][T17268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.408629][T17268] RIP: 0033:0x7fba4838eba9 [ 725.413076][T17268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.432774][T17268] RSP: 002b:00007fba4926a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 725.435987][T10858] m920x_read = error: -19 [ 725.441457][T17268] RAX: ffffffffffffffda RBX: 00007fba485d5fa0 RCX: 00007fba4838eba9 [ 725.453885][T17268] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 725.461983][T17268] RBP: 00007fba48411e19 R08: 0000200000000500 R09: 0000000000000000 [ 725.470036][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.470147][T10858] dvb-usb: error -19 while querying for an remote control event. [ 725.478092][T17268] R13: 00007fba485d6038 R14: 00007fba485d5fa0 R15: 00007ffdcea2b9a8 [ 725.478138][T17268] [ 725.478152][T17268] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 725.478170][T17268] CPU: 1 UID: 0 PID: 17268 Comm: syz.2.3725 Not tainted syzkaller #0 PREEMPT(full) [ 725.478196][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.478210][T17268] Call Trace: [ 725.478221][T17268] [ 725.478231][T17268] dump_stack_lvl+0x99/0x250 [ 725.478260][T17268] ? __asan_memcpy+0x40/0x70 [ 725.478282][T17268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.478303][T17268] ? __pfx__printk+0x10/0x10 [ 725.478344][T17268] vpanic+0x237/0x6d0 [ 725.478368][T17268] ? __pfx_vpanic+0x10/0x10 [ 725.478389][T17268] ? is_bpf_text_address+0x292/0x2b0 [ 725.478413][T17268] ? is_bpf_text_address+0x26/0x2b0 [ 725.478443][T17268] panic+0xb9/0xc0 [ 725.478466][T17268] ? __pfx_panic+0x10/0x10 [ 725.478507][T17268] __warn+0x334/0x4c0 [ 725.478529][T17268] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 725.478560][T17268] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 725.478587][T17268] report_bug+0x2be/0x4f0 [ 725.478609][T17268] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 725.478645][T17268] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 725.478672][T17268] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 725.478699][T17268] handle_bug+0x84/0x160 [ 725.478726][T17268] exc_invalid_op+0x1a/0x50 [ 725.478753][T17268] asm_exc_invalid_op+0x1a/0x20 [ 725.478772][T17268] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 725.478800][T17268] Code: 74 10 4c 89 e7 89 54 24 0c e8 a4 a4 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 13 40 b8 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 725.478818][T17268] RSP: 0018:ffffc9000b507880 EFLAGS: 00010246 [ 725.478838][T17268] RAX: ffffc9000b507800 RBX: 000000000000002a RCX: 0000000000000000 [ 725.478854][T17268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b5078e8 [ 725.478867][T17268] RBP: ffffc9000b507970 R08: ffffc9000b5078e7 R09: 0000000000000000 [ 725.478882][T17268] R10: ffffc9000b5078c0 R11: fffff520016a0f1d R12: 0000000000000000 [ 725.478896][T17268] R13: 1ffff920016a0f14 R14: 0000000000040d40 R15: dffffc0000000000 [ 725.478933][T17268] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 725.478971][T17268] ? p9_client_clunk+0x1b6/0x250 [ 725.479005][T17268] alloc_pages_mpol+0x232/0x4a0 [ 725.479038][T17268] ___kmalloc_large_node+0x5f/0x1b0 [ 725.479066][T17268] __kmalloc_large_node_noprof+0x18/0x90 [ 725.479092][T17268] __kmalloc_noprof+0x4bd/0x7f0 [ 725.479113][T17268] ? v9fs_fid_get_acl+0x4f/0x100 [ 725.479142][T17268] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 725.479174][T17268] v9fs_fid_get_acl+0x4f/0x100 [ 725.479210][T17268] v9fs_get_acl+0x9a/0x360 [ 725.479239][T17268] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 725.479267][T17268] v9fs_mount+0x6eb/0xa50 [ 725.479302][T17268] ? __pfx_v9fs_mount+0x10/0x10 [ 725.479341][T17268] legacy_get_tree+0xfd/0x1a0 [ 725.479360][T17268] ? __pfx_v9fs_mount+0x10/0x10 [ 725.479390][T17268] vfs_get_tree+0x92/0x2b0 [ 725.479420][T17268] do_new_mount+0x302/0xa10 [ 725.479447][T17268] ? apparmor_capable+0x137/0x1b0 [ 725.479478][T17268] ? __pfx_do_new_mount+0x10/0x10 [ 725.479505][T17268] ? ns_capable+0x8a/0xf0 [ 725.479531][T17268] ? path_mount+0x61c/0xfe0 [ 725.479557][T17268] ? kmem_cache_free+0x19a/0x690 [ 725.479591][T17268] __se_sys_mount+0x313/0x410 [ 725.479633][T17268] ? __pfx___se_sys_mount+0x10/0x10 [ 725.479665][T17268] ? do_syscall_64+0xbe/0xfa0 [ 725.479686][T17268] ? __x64_sys_mount+0x20/0xc0 [ 725.479717][T17268] do_syscall_64+0xfa/0xfa0 [ 725.479739][T17268] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.479762][T17268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.479782][T17268] ? clear_bhb_loop+0x60/0xb0 [ 725.479807][T17268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.479825][T17268] RIP: 0033:0x7fba4838eba9 [ 725.479844][T17268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.479861][T17268] RSP: 002b:00007fba4926a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 725.479882][T17268] RAX: ffffffffffffffda RBX: 00007fba485d5fa0 RCX: 00007fba4838eba9 [ 725.479897][T17268] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 725.479911][T17268] RBP: 00007fba48411e19 R08: 0000200000000500 R09: 0000000000000000 [ 725.479924][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.479937][T17268] R13: 00007fba485d6038 R14: 00007fba485d5fa0 R15: 00007ffdcea2b9a8 [ 725.479970][T17268] [ 725.486238][T17268] Kernel Offset: disabled