last executing test programs: 2m17.938849384s ago: executing program 0 (id=449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x10000180, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x19ba5feb, [0x1]}}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x1, 0x1, 0x3, 0x0, 0xfffb, 0x9}, 0x20) write$apparmor_exec(r3, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000100)) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000050005000100000008000400000000000500060000000000080003"], 0x34}}, 0x0) 2m17.860729596s ago: executing program 0 (id=450): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x00\x00\x00\x00') (async) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x00\x00\x00\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x3278c0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) writev(r5, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1412, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x26880) 2m16.809795093s ago: executing program 0 (id=464): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) (async) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="fb", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') readv(r3, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="072000000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m16.771849479s ago: executing program 0 (id=466): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000040)="008d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r4 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000140)='smaps\x00') syz_usb_disconnect(0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r7 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x200, 0x81, 0x23, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x3ff, 0xa, 0x7, 0x4}, {0x9, 0x5, 0xa, 0x3, 0x10, 0x8, 0xf3, 0xfe}}}}}}]}}, 0x0) syz_usb_ep_read(r7, 0x3, 0xb6, &(0x7f00000005c0)=""/182) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="001153000000a4bb55643ba1c1bff6afcdcacae9bd912a91949940b922ea88b7bb62b5e22a0652626cde0bdc700743a81ad798764cb4a29bfed2aa58a6f040f5f8d8afe23aa65b0bfb7739773dab71386649aad9df843e107bf91a11febafef8ac04cd9600663ca6fd45d4f00d7eed504620aac1bd0955567105af5dedfd0a792e4b359d8e9e389d06fd08cb62197208d5d198a296992435ebf02d3d138a11812b4f71319d2b2f6dc243c5baae84c9d74a68bd58a87ec798d4b4493a9cee72faa9f1d208772c6ff242012f41"], 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m13.659720747s ago: executing program 0 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'nr0\x00', @local}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe74e) removexattr(&(0x7f0000000180)='./bus/../file0\x00', &(0x7f00000001c0)=@random={'system.', 'workdir'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0) 2m12.294661607s ago: executing program 0 (id=483): prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(r5, r4, &(0x7f0000000040)=0xd, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2}], 0x1, 0x40800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x20000000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1190}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0xfffffffffffffce8, &(0x7f0000000100)=[{&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40012040) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0xfffffffffffffcca) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r9, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r11, r0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r12, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1m57.011105322s ago: executing program 32 (id=483): prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(r5, r4, &(0x7f0000000040)=0xd, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2}], 0x1, 0x40800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x20000000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9011000034000701fefffffffcdbdf25017c0000040042800800018004001b8066110280ec0083801c0028800c005700ffffffffffffffff0c002100070000000000000014002a00200100000000000000000000000000010b0033002f2424212c2b00009f005a008e4e190646e60bac24aff4fa0b12af3ef61dff9de5cb1274d55e10ae50ac0542d2c29cf02240a936bd30adc7ceb7dc648fb8adc86175a399b067060e3b5f0c406a65e908912abbd881dc1936fcad006b58cfa6f9eec90c67fac6b0bdeb2aff1774827614496976ca19e7022379ec4f01e70396458760d5e6a915a53efe0c3af034e35fb01d57fa6a461f18f2d9b9d2e6bb2ab17f995abfb7cb4fd8e9fd000c00aa00a629000000000000d69033b30fa3507a7525aee39762c0d38496f55a87f972822f27ced4368e3e4a5631cc1ae8846c2105a40d0ab12fa731b2a2a5471097800800de800400318014002d0000000000000000000000ffffffffffff1ea359d65e04113c8b202c16e504f080f0e7344874fc6f688d17554f878c700800f100"], 0x1190}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0xfffffffffffffce8, &(0x7f0000000100)=[{&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40012040) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0xfffffffffffffcca) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r9, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r11, r0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r12, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 33.840819642s ago: executing program 3 (id=964): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="2e00000029008188e6b62aa73772cc8600a1f848430000005e1406", 0x1b}], 0x1}, 0x4c084) r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r1], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000040)=[{&(0x7f0000000000)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0xffffffffffffff64, 0x5865}, 0x4028094) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfe33) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/156) 33.82462937s ago: executing program 3 (id=965): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2000}) r1 = syz_open_dev$evdev(0x0, 0x6, 0x0) epoll_create(0xd2e) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004079004618000000000001090224000100000064090400000103000d000921000000012207000905810300"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="e3a2004e5700603ea0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 32.146120645s ago: executing program 3 (id=970): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x7b732fe0383e61a5}, 0xc) syz_usbip_server_init(0x5) syz_usb_connect(0x1, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 30.770178757s ago: executing program 3 (id=978): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(essiv(cbc(aes),sha256),sm3)\x00'}, 0x58) close(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) userfaultfd(0x80001) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f00000000c0), 0x0) creat(&(0x7f00000002c0)='./file0/../file0\x00', 0x41) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0xc0481273, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x80000000) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="480100001a0001002cbd7000fddbdf250a010102000000000000000000000000fe88000000000000000000000000010100000000000000000a00000016c468dd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0xc75c2b196d661e27}, 0x0) 30.542702611s ago: executing program 3 (id=979): ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@host, 0x2}, 0x400, "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"}, 0x418, 0x7ffffffc}) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x45040) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') read$FUSE(r0, &(0x7f0000008200)={0x2020}, 0x2020) prctl$PR_GET_SECCOMP(0x15) 29.819948529s ago: executing program 3 (id=983): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800600) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x400, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040008000000005f8a654e14dc7c4cc6020004003b3acc0002cd3eac1ae657b534bfa1142100696b29", "c921095856cd2394e3c7a178fb1c16c99189819ef400", [0x1, 0x9]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x200000000000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='@\t#'], 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800600) (async) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x400, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040008000000005f8a654e14dc7c4cc6020004003b3acc0002cd3eac1ae657b534bfa1142100696b29", "c921095856cd2394e3c7a178fb1c16c99189819ef400", [0x1, 0x9]}}) (async) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x200000000000000) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='@\t#'], 0x0}, 0x0) (async) 29.591650873s ago: executing program 33 (id=983): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800600) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x400, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040008000000005f8a654e14dc7c4cc6020004003b3acc0002cd3eac1ae657b534bfa1142100696b29", "c921095856cd2394e3c7a178fb1c16c99189819ef400", [0x1, 0x9]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x200000000000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='@\t#'], 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800600) (async) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x400, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040008000000005f8a654e14dc7c4cc6020004003b3acc0002cd3eac1ae657b534bfa1142100696b29", "c921095856cd2394e3c7a178fb1c16c99189819ef400", [0x1, 0x9]}}) (async) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x200000000000000) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='@\t#'], 0x0}, 0x0) (async) 29.278394562s ago: executing program 4 (id=988): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x0, 0x0, {0xa, 0x4e22, 0x400, @loopback, 0x4}}}, 0x3a) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0600000021a500000c003a80"], 0x2c}], 0x1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 28.102965951s ago: executing program 4 (id=992): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r2], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r3, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x3, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x8d2}, {0xd, 0x24, 0xf, 0x1, 0x1564c000, 0x1, 0x9, 0x9}, [@mdlm_detail={0x4, 0x24, 0x13, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 26.398221722s ago: executing program 4 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async, rerun: 64) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) (async, rerun: 64) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000000)={0x6, 0x6, 0x26, "3e551f1ab6cac2a9ce8bd439ed3d58cf47e18945e70ae733578bbbc4cba122921bc606254a5f4a38b731aec575b3755d380c36b51ec3ffaf2f12762f", 0x4, "34420e7376f5fbf82050e754fa0e1b0aa89e29e7d7fc2f62ee7e090000008aa04e9c0af50c89c2837372b3b5cd2c053b1760f3db259b78632c31667b", 0x40}) (async) socket$kcm(0xa, 0x3, 0x87) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="baf80c66b880b1e88d66efbafc0cb025ee650f01c266b92103000066b8baf7e4e366baf141f4290f30f30fc7b60200662e660f7623f30fc7b1c3116581dd518566b8008000000f23d80f21f86635000000300f23f80f08f32ee3e7", 0x5b}], 0x1, 0x63, &(0x7f0000000180), 0x0) (async) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014000400", @ANYRES16=r2], 0x58}}, 0x0) userfaultfd(0x1) 26.209215685s ago: executing program 4 (id=999): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006, 0x0, 0x5}) close(r2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') syz_io_uring_setup(0x6c02, &(0x7f0000000480)={0x0, 0x40f6, 0x4, 0x2, 0xf0}, 0x0, 0x0) 25.968180293s ago: executing program 4 (id=1001): r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x43) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x1005, 0xfffffffffffffffe) write$P9_RWALK(r0, &(0x7f0000000040)={0x30, 0x6f, 0x1, {0x3, [{0x4, 0x2, 0x5}, {0x1, 0x1, 0x5}, {0x2, 0x4, 0x2}]}}, 0x30) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYRES16], 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x80a00) 25.162202575s ago: executing program 4 (id=1004): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0xd, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_gettime(r1, &(0x7f00000000c0)) (async) timer_settime(r1, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) 24.8580973s ago: executing program 34 (id=1004): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0xd, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_gettime(r1, &(0x7f00000000c0)) (async) timer_settime(r1, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) 7.606946865s ago: executing program 5 (id=1061): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x7a}, 0x0}) 5.914794112s ago: executing program 5 (id=1067): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) socket$can_bcm(0x1d, 0x2, 0x2) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.35543232s ago: executing program 6 (id=1071): syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100024b030910991115902d9901f5030109022414eca6dbd5ebeee009040009004583d603095001ffffff0800"/56], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000002fc0), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) write$UHID_INPUT(r0, &(0x7f0000001040)={0xf, {"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", 0xfffffffffffffe40}}, 0x1047) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x2496, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x7, 0x16, "00000000000000080000000ffffffc040100"}) sendto$inet6(r2, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TCFLSH(r4, 0x400455cb, 0x2) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000300)=0x7, 0x4) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) dup(0xffffffffffffffff) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) recvmmsg(r2, &(0x7f0000005340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/68, 0x44}, 0x7}], 0x1, 0x12000, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/284, 0x11c}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000fc0)=""/4076, 0xfec}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000f00)=""/159, 0x9f}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000001fc0)=""/4087, 0xff7}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f0000000d00)=""/152, 0x98}, {&(0x7f0000000a00)=""/219, 0xdb}], 0xa, 0x0, 0x31}, 0x40000102) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 4.299309968s ago: executing program 1 (id=1078): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000415000/0x2000)=nil, 0x2000}}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00003d1000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1}) ptrace(0x10, r2) ptrace$getregset(0x4212, r2, 0x200, &(0x7f00000001c0)={&(0x7f00000000c0)=""/102, 0x66}) r4 = socket$kcm(0x15, 0x5, 0x0) r5 = socket(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_opts(r5, 0x0, 0x19, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000500)={&(0x7f0000000380)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, 0x0}, 0x4000000) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 3.970613143s ago: executing program 1 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0800d21c935b18", @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRESOCT=r2, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000010c0)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0800d21c935b18", @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRESOCT=r2, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) (async) 3.742382222s ago: executing program 1 (id=1080): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200402, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.623988409s ago: executing program 5 (id=1082): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000040)={{@local, 0x2}, 0x5, 0x5, 0x3, 0x40}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x6}, @host, 0x5, 0x1, 0x5e, 0xfffffffffffffff9}) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c090212000500020000090400dcecd1d6f600"], 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000040)={{@local, 0x2}, 0x5, 0x5, 0x3, 0x40}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x6}, @host, 0x5, 0x1, 0x5e, 0xfffffffffffffff9}) (async) close(r0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c090212000500020000090400dcecd1d6f600"], 0x0) (async) 2.978660412s ago: executing program 1 (id=1083): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (async) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) sendto$unix(r0, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0xffffffffffffff89, 0x12001, 0x0, 0x0) syz_usb_connect(0x2, 0x247, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000047e4ae20d118af1ef8b1010203010902350201000000000904"], 0x0) (async) syz_usb_connect(0x2, 0x247, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000047e4ae20d118af1ef8b1010203010902350201000000000904"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 2.099127224s ago: executing program 6 (id=1085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macvlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f00000011c0), 0x12) 2.015627451s ago: executing program 6 (id=1087): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000180)) r4 = socket$isdn_base(0x22, 0x3, 0x0) dup2(r0, r4) 1.820702014s ago: executing program 6 (id=1088): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102bc"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72aa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x29, {0x9, 0x21, 0x46d, 0x5, 0x1, {0x22, 0x9b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x9, 0xe4}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0x81, 0x6, 0x8, 0x4}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0xad, 0x0, 0x1, [0x3f30, 0xc0c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x8e, 0x9}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2001}}]}) 1.626917747s ago: executing program 1 (id=1089): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x14ad) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0xf, 0x1, "81"}, 0x0, 0x0}) 876.450332ms ago: executing program 2 (id=1091): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x7ffffffe}], 0xdeadbeef, 0x8, 0x1}) 730.780007ms ago: executing program 2 (id=1092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000004100), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004140)={0x1c, r3, 0x601, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x800) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x10c0) (async, rerun: 64) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES32=r6, @ANYBLOB="080001"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x8010) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00@', @ANYRES16=r8, @ANYBLOB="0e0427bd7000fbdbdf2510000000080034003b02000008003a0002000000250039000400000005002a00000000000a000900aaaaaaaaaaaa0000050035000400000008002b000100000008003a0018000000"], 0x58}, 0x1, 0x0, 0x0, 0x4040030}, 0x26040081) 679.019122ms ago: executing program 2 (id=1093): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001080)={r1, @in={{0x2, 0x4e22, @broadcast}}, 0x1, 0x7, 0x1, 0x7, 0xbee74b8b3423e99b, 0x6c000000, 0x3}, 0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) (async) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) 594.738308ms ago: executing program 2 (id=1094): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0xfffffffffffffffe}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c00599c6d0e0000ded650492d"], 0xfe33) 470.735846ms ago: executing program 5 (id=1095): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x6) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 446.932282ms ago: executing program 2 (id=1096): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getpgid(0x0) (async) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='net/psched\x00') (async) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/psched\x00') fchdir(r2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x5750c0}, 0x18) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r0, &(0x7f0000000040)="00f8348643506bf12c24a106af83880000000000000000000000080000331219", 0x20, 0xd1, 0x0, 0x0) 386.479769ms ago: executing program 5 (id=1097): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r1, &(0x7f0000001f80)=""/4096, 0x1000) 322.656349ms ago: executing program 6 (id=1098): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffdfffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x101ff, 0x1, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 272.543903ms ago: executing program 2 (id=1099): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8042, 0x8) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00210000000000180000000700000073000000000000000a000200"], 0x28}}, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4001) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x448c0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) close_range(r9, 0xffffffffffffffff, 0x0) 261.979691ms ago: executing program 5 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r4, &(0x7f0000000100)=@xdp, &(0x7f0000000080)=0x80) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x30, r2, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xaece, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000044030000000300030000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES16=r7], 0x1cc}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r8, r9, 0x80000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 86.657151ms ago: executing program 1 (id=1101): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x60140, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000140)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0x2020) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000080)={0x0, 0x5, 0x1d, {0x1d, 0x21, "64d936ad19c576ac020e485a96545fdf089596cb8f65aca2830fa3"}}, &(0x7f0000000400)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "6244195c080b04b73642cc1281c1a249b8c0a6658c5b292c17f3c878bedbf267b02beee9ac543bad7d7aa30a2f9760bc80bd24dfa2c71874beb63835fd42d4f9ca1a72482183544ba728f0a736"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000180)={0x0, 0x31, 0x10, "00e17f90ffd96b0d87fbe5b3a6a5859f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0xc0, 0x5, 0x2, "55b1"}, &(0x7f0000000580)={0x40, 0x5, 0x6, "3ca8774b81c0"}}) syz_usb_control_io(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="001446000000fd07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0x31, 0x48, "c5c7b06b922ce5cff694e64e5ca68260f4fc80eca568661d31a7d7fb3c5146d5439a400d279a8f6a44cc378cb430e2b84b640968f5fe2f0415c7b50a0dbcfe23c6db2af5effdc8a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0xa23) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004801}, 0x9080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 0s ago: executing program 6 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x36, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8"}}}}, 0x44) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090501", @ANYRES64], 0x0) kernel console output (not intermixed with test programs): umber 68 using dummy_hcd [ 249.746318][ T5923] zl10353_read_register: readreg error (reg=127, ret==0) [ 249.794386][ T5923] usb 5-1: USB disconnect, device number 30 [ 249.874132][ T5995] usb 3-1: device descriptor read/64, error -71 [ 249.877826][ T9] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 249.898113][ T9] airspy 4-1:0.0: Registered as swradio24 [ 249.903976][ T9] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 249.919588][ T9] usb 4-1: USB disconnect, device number 94 [ 249.984579][ T5995] usb usb3-port1: attempt power cycle [ 250.167316][ T9] usb 2-1: USB disconnect, device number 77 [ 250.334195][ T5995] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 250.375377][ T5995] usb 3-1: device descriptor read/8, error -71 [ 250.594784][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.616577][ T5995] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 250.621665][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.687773][ T5995] usb 3-1: device descriptor read/8, error -71 [ 250.804045][ T5995] usb usb3-port1: unable to enumerate USB device [ 250.823818][ T5868] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 250.874583][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.883431][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.987474][ T5868] usb 4-1: device descriptor read/all, error -61 [ 251.123601][ T5868] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 251.273495][ T5868] usb 4-1: device descriptor read/64, error -71 [ 251.383859][ T5868] usb usb4-port1: attempt power cycle [ 251.573440][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 251.723327][ T5868] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 251.739479][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.752181][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.754095][ T5868] usb 4-1: device descriptor read/8, error -71 [ 251.765341][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 251.786656][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.802162][ T9] usb 5-1: config 0 descriptor?? [ 252.114967][ T5868] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 252.143984][ T5868] usb 4-1: device descriptor read/8, error -71 [ 252.145697][ T8796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.772'. [ 252.235061][ T9] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 252.245145][ T9] hid-steam 0003:28DE:1142.001C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 252.263495][ T5868] usb usb4-port1: unable to enumerate USB device [ 252.313793][ T9] hid-steam 0003:28DE:1142.001C: Steam wireless receiver connected [ 252.322095][ T9] hid-steam 0003:28DE:1142.001C: No HID_FEATURE_REPORT submitted - nothing to read [ 252.386570][ T9] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 252.401747][ T9] hid-steam 0003:28DE:1142.001D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 252.442887][ T5995] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 252.460165][ T9] usb 5-1: USB disconnect, device number 31 [ 252.480593][ T9] hid-steam 0003:28DE:1142.001C: Steam wireless receiver disconnected [ 252.490351][ T8803] fido_id[8803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 252.602894][ T5868] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 252.627148][ T5995] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 252.636344][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.644403][ T5995] usb 3-1: Product: syz [ 252.648671][ T5995] usb 3-1: Manufacturer: syz [ 252.654065][ T5995] usb 3-1: SerialNumber: syz [ 252.661543][ T5995] usb 3-1: config 0 descriptor?? [ 252.670683][ T5995] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 252.772840][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 252.781660][ T5868] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 252.790934][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.798968][ T5868] usb 2-1: Product: syz [ 252.803280][ T5868] usb 2-1: Manufacturer: syz [ 252.807908][ T5868] usb 2-1: SerialNumber: syz [ 253.020618][ T5868] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 253.030504][ T5868] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 253.046267][ T5868] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 253.134295][ T8807] comedi: No check for data length of config insn id 19534 is implemented [ 253.143428][ T8807] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 253.152869][ T8807] comedi: Assuming n=1 is correct [ 253.225838][ T5868] usb 2-1: USB disconnect, device number 78 [ 253.234091][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 253.242290][ T5868] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 253.258175][ T5868] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 253.269721][ T5868] visor 2-1:1.0: device disconnected [ 253.382357][ T24] usb 5-1: device descriptor read/64, error -71 [ 253.623740][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 253.762403][ T24] usb 5-1: device descriptor read/64, error -71 [ 253.882512][ T24] usb usb5-port1: attempt power cycle [ 254.227893][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 254.252624][ T24] usb 5-1: device descriptor read/8, error -71 [ 254.260202][ T8819] ÿ: renamed from ip6gretap0 (while UP) [ 254.491829][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 254.513059][ T24] usb 5-1: device descriptor read/8, error -71 [ 254.608568][ T30] audit: type=1326 audit(1757234256.491:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3d18ebe9 code=0x7fc00000 [ 254.639765][ T24] usb usb5-port1: unable to enumerate USB device [ 254.647001][ T30] audit: type=1326 audit(1757234256.491:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb3d18ebe9 code=0x7fc00000 [ 254.786224][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 255.031519][ T5923] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 255.151492][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 255.191571][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 255.199085][ T5923] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 255.207465][ T5923] usb 2-1: config 0 has no interface number 0 [ 255.217966][ T5923] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 255.227676][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.235891][ T5923] usb 2-1: Product: syz [ 255.241526][ T5923] usb 2-1: Manufacturer: syz [ 255.250580][ T5868] usb 3-1: USB disconnect, device number 71 [ 255.250669][ T5923] usb 2-1: SerialNumber: syz [ 255.272320][ T5923] usb 2-1: config 0 descriptor?? [ 255.287297][ T5923] smsc95xx v2.0.0 [ 255.303111][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.314822][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.332838][ T9] usb 4-1: config 0 descriptor?? [ 255.343793][ T9] cp210x 4-1:0.0: cp210x converter detected [ 255.406978][ T8838] binder: 8837:8838 ioctl c0306201 200000000080 returned -14 [ 255.420139][ T8838] binder: 8837:8838 ioctl c0585609 200000000000 returned -22 [ 255.680711][ T5923] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 255.692193][ T5923] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 255.740602][ T9] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 255.741181][ T5868] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 255.759420][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 255.815494][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.825457][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.911071][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 255.917892][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 255.932315][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 255.944117][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 255.955527][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 255.959712][ T5938] usb 4-1: USB disconnect, device number 99 [ 255.975569][ T5868] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 255.976908][ T5938] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.987285][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.014783][ T5868] usb 3-1: Product: syz [ 256.018984][ T5868] usb 3-1: Manufacturer: syz [ 256.029715][ T5868] usb 3-1: SerialNumber: syz [ 256.033596][ T5938] cp210x 4-1:0.0: device disconnected [ 256.037669][ T5868] usb 3-1: config 0 descriptor?? [ 256.056176][ T8838] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 256.076700][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 256.097890][ T5868] port100 3-1:0.0: NFC: Could not get supported command types [ 256.176318][ T8842] 9pnet_fd: Insufficient options for proto=fd [ 256.275108][ T5938] usb 3-1: USB disconnect, device number 72 [ 256.636866][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 256.702985][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 257.325259][ T8865] netlink: 'syz.4.794': attribute type 4 has an invalid length. [ 257.364070][ T8865] netlink: 'syz.4.794': attribute type 4 has an invalid length. [ 257.590306][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 257.720173][ T24] usb 3-1: device descriptor read/64, error -71 [ 257.733731][ T5938] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 257.906658][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.923701][ T5938] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 257.936364][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.951791][ T5938] usb 4-1: config 0 descriptor?? [ 257.971882][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 258.120192][ T24] usb 3-1: device descriptor read/64, error -71 [ 258.169270][ T5938] usbhid 4-1:0.0: can't add hid device: -71 [ 258.190695][ T5938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 258.207158][ T5938] usb 4-1: USB disconnect, device number 100 [ 258.240539][ T24] usb usb3-port1: attempt power cycle [ 258.524974][ T5938] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 258.599811][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 258.633841][ T24] usb 3-1: device descriptor read/8, error -71 [ 258.679703][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 258.690954][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.708599][ T5938] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 258.725046][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.737792][ T5938] usb 4-1: config 0 descriptor?? [ 258.751258][ T5938] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 258.790555][ T5938] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 258.860234][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 258.874438][ T5923] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 258.887173][ T5923] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 258.896649][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 258.914969][ T5923] usb 2-1: USB disconnect, device number 79 [ 258.931961][ T24] usb 3-1: device descriptor read/8, error -71 [ 258.945682][ T8885] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.801'. [ 258.955929][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.968577][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.012132][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.034088][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.044531][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.058044][ T24] usb usb3-port1: unable to enumerate USB device [ 259.058507][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 259.075051][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.084822][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.093737][ T9] usb 5-1: Product: syz [ 259.099321][ T9] usb 5-1: Manufacturer: syz [ 259.104426][ T9] usb 5-1: SerialNumber: syz [ 259.190605][ T5996] usb 4-1: USB disconnect, device number 101 [ 259.207575][ T5996] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 259.349418][ T5923] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 259.502292][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.515709][ T5923] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 259.524852][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.532949][ T5923] usb 2-1: Product: syz [ 259.537131][ T5923] usb 2-1: Manufacturer: syz [ 259.541786][ T5923] usb 2-1: SerialNumber: syz [ 259.548453][ T5923] usb 2-1: config 0 descriptor?? [ 259.567814][ T5923] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 259.775554][ T5868] usb 2-1: USB disconnect, device number 80 [ 259.854197][ T9] cdc_mbim 5-1:1.0: probe with driver cdc_mbim failed with error -71 [ 259.868466][ T9] usb 5-1: USB disconnect, device number 36 [ 259.979109][ T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 260.138962][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 260.146328][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 260.155708][ T24] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 260.164131][ T24] usb 4-1: config 128 has an invalid descriptor of length 1, skipping remainder of the config [ 260.174792][ T24] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 260.183885][ T24] usb 4-1: config 128 has no interface number 0 [ 260.190206][ T24] usb 4-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0x37, changing to 0x7 [ 260.202139][ T24] usb 4-1: config 128 interface 127 has no altsetting 0 [ 260.210935][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 260.220045][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.228563][ T24] usb 4-1: Product: syz [ 260.232839][ T24] usb 4-1: Manufacturer: syz [ 260.237444][ T24] usb 4-1: SerialNumber: syz [ 260.478357][ T8901] netlink: 'syz.2.807': attribute type 25 has an invalid length. [ 260.515688][ T24] usb 4-1: USB disconnect, device number 102 [ 260.566438][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.592124][ T5868] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 260.732235][ T8908] 9pnet_fd: Insufficient options for proto=fd [ 260.772698][ T5868] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 260.786414][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.794598][ T5868] usb 2-1: Product: syz [ 260.804687][ T5868] usb 2-1: Manufacturer: syz [ 260.809382][ T5868] usb 2-1: SerialNumber: syz [ 260.839273][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 260.990597][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 261.001477][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 261.013049][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.031209][ T9] usb 3-1: Product: syz [ 261.043854][ T9] usb 3-1: Manufacturer: syz [ 261.058550][ T9] usb 3-1: SerialNumber: syz [ 261.061676][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 261.074551][ T9] usb 3-1: config 0 descriptor?? [ 261.087520][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 261.096235][ T5923] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 261.186175][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 261.271361][ T5923] usb 5-1: config 0 has no interfaces? [ 261.277085][ T5923] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 261.287657][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.299382][ T5923] usb 5-1: config 0 descriptor?? [ 261.438346][ T24] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 261.569862][ T24] usb 4-1: device descriptor read/64, error -71 [ 261.715301][ T8913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.724170][ T8913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.780387][ T5967] usb 5-1: USB disconnect, device number 37 [ 261.808432][ T24] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 261.938110][ T24] usb 4-1: device descriptor read/64, error -71 [ 262.062701][ T24] usb usb4-port1: attempt power cycle [ 262.297966][ T9] gspca_ov534_9: reg_r err -32 [ 262.410251][ T24] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 262.438826][ T24] usb 4-1: device descriptor read/8, error -71 [ 262.557795][ T9] gspca_ov534_9: Unknown sensor 0000 [ 262.557895][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 262.677826][ T24] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 262.719557][ T24] usb 4-1: device descriptor read/8, error -71 [ 262.829149][ T24] usb usb4-port1: unable to enumerate USB device [ 262.850950][ T5868] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 263.055966][ T5868] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 263.071001][ T5868] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 263.083081][ T5868] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 263.094316][ T5868] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 263.105027][ T5868] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 263.117330][ T5868] usb 2-1: USB disconnect, device number 81 [ 263.351263][ T8929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.358385][ T8929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.364433][ T8929] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 263.377361][ T8929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.383868][ T8929] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.392865][ T8929] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.563591][ T8947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.821'. [ 263.665594][ T5868] usb 3-1: USB disconnect, device number 77 [ 263.708277][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.729681][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.767622][ T8959] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 263.776530][ T8959] overlayfs: missing 'lowerdir' [ 263.917863][ T5995] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 264.057073][ T5868] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 264.067012][ T5995] usb 5-1: Using ep0 maxpacket: 16 [ 264.074903][ T5995] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.084489][ T5995] usb 5-1: config 1 interface 0 altsetting 126 bulk endpoint 0x1 has invalid maxpacket 16 [ 264.094645][ T5995] usb 5-1: config 1 interface 0 altsetting 126 bulk endpoint 0x82 has invalid maxpacket 64 [ 264.105328][ T5995] usb 5-1: config 1 interface 0 has no altsetting 0 [ 264.115492][ T5995] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 264.124748][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.134443][ T5995] usb 5-1: Product: syz [ 264.147823][ T5995] usb 5-1: Manufacturer: syz [ 264.152467][ T5995] usb 5-1: SerialNumber: syz [ 264.164569][ T8954] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.191310][ T8954] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.230114][ T8966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.241970][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 264.249637][ T8966] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 264.257387][ T5868] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 264.265624][ T5868] usb 3-1: config 0 has no interface number 0 [ 264.272699][ T5868] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.283898][ T5868] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.293943][ T5868] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 264.298787][ T8966] evm: overlay not supported [ 264.303095][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.307541][ T5868] usb 3-1: config 0 descriptor?? [ 264.452824][ T5995] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 126 proto 2 vid 0x0525 pid 0xA4A8 [ 264.471979][ T5995] usb 5-1: USB disconnect, device number 38 [ 264.496327][ T5995] usblp0: removed [ 264.636766][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 264.644885][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.655897][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.794182][ T5875] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 264.803490][ T5875] Bluetooth: hci1: unexpected event for opcode 0x203e [ 264.814746][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.824843][ T24] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 264.834674][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.845038][ T24] usb 4-1: config 0 descriptor?? [ 264.866041][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.874841][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.999109][ T5868] usbhid 3-1:0.24: can't add hid device: -71 [ 265.024058][ T5868] usbhid 3-1:0.24: probe with driver usbhid failed with error -71 [ 265.032062][ T5923] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 265.057211][ T5868] usb 3-1: USB disconnect, device number 78 [ 265.070499][ T8975] kAFS: No cell specified [ 265.206552][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 265.216075][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.224836][ T5923] usb 2-1: config 8 has an invalid interface number: 74 but max is 0 [ 265.233140][ T5923] usb 2-1: config 8 has no interface number 0 [ 265.240838][ T5923] usb 2-1: config 8 interface 74 has no altsetting 0 [ 265.251843][ T5923] usb 2-1: New USB device found, idVendor=1ee9, idProduct=34ff, bcdDevice=cd.ac [ 265.262677][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.270867][ T5923] usb 2-1: Product: syz [ 265.275299][ T5923] usb 2-1: Manufacturer: syz [ 265.276629][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 265.280284][ T5923] usb 2-1: SerialNumber: syz [ 265.295066][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 265.309220][ T24] usb 4-1: USB disconnect, device number 107 [ 265.386386][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 265.407202][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 265.407222][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 265.407237][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 265.508199][ T5923] usb 2-1: USB disconnect, device number 82 [ 265.516626][ T9] usb 5-1: device descriptor read/64, error -71 [ 265.756294][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 265.896481][ T9] usb 5-1: device descriptor read/64, error -71 [ 266.018431][ T9] usb usb5-port1: attempt power cycle [ 266.289290][ T9007] tmpfs: Bad value for 'mpol' [ 266.295488][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 266.305237][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 266.316625][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 266.377141][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 266.406626][ T9] usb 5-1: device descriptor read/8, error -71 [ 266.645802][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 266.677103][ T9] usb 5-1: device descriptor read/8, error -71 [ 266.756704][ T5923] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 266.788293][ T9] usb usb5-port1: unable to enumerate USB device [ 266.917538][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 266.927153][ T5923] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 266.937482][ T5923] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 266.944531][ T9024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.945650][ T5923] usb 2-1: can't read configurations, error -61 [ 267.088013][ T5923] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 267.155598][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 267.245737][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 267.251379][ T5923] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 267.261159][ T5923] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 267.268833][ T5923] usb 2-1: can't read configurations, error -61 [ 267.275547][ T5923] usb usb2-port1: attempt power cycle [ 267.305448][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 267.314498][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 267.323821][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.332211][ T9] usb 3-1: Product: syz [ 267.336812][ T9] usb 3-1: Manufacturer: syz [ 267.341425][ T9] usb 3-1: SerialNumber: syz [ 267.346105][ T24] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 267.355224][ T9] usb 3-1: config 0 descriptor?? [ 267.485495][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 267.500838][ T9030] binder: 9029:9030 ioctl c0306201 200000000080 returned -14 [ 267.509520][ T9030] binder: 9029:9030 ioctl 5441 fff returned -22 [ 267.518202][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 267.529046][ T24] usb 4-1: can't read configurations, error -71 [ 267.625427][ T5923] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 267.649021][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 267.655250][ T5923] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 267.665051][ T5923] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 267.672884][ T5923] usb 2-1: can't read configurations, error -61 [ 267.766770][ T9] airspy 3-1:0.0: Board ID: 00 [ 267.771669][ T9] airspy 3-1:0.0: Firmware version: [ 267.808360][ T5923] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 267.835667][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 267.842098][ T5923] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 267.852079][ T5923] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 267.859719][ T5923] usb 2-1: can't read configurations, error -61 [ 267.866490][ T5923] usb usb2-port1: unable to enumerate USB device [ 268.124226][ T9036] netlink: 44 bytes leftover after parsing attributes in process `syz.3.850'. [ 268.160576][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.850'. [ 268.172763][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.190183][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.587044][ T24] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 268.607278][ T9] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 268.628431][ T9] airspy 3-1:0.0: Registered as swradio24 [ 268.634203][ T9] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 268.646918][ T9] usb 3-1: USB disconnect, device number 79 [ 268.747617][ T24] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 268.771704][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.783397][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.796509][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.806892][ T9053] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x1 [ 268.818111][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.829585][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.840176][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.850640][ T5875] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 268.853933][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.861583][ T5875] Bluetooth: hci1: Injecting HCI hardware error event [ 268.873885][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.877621][ T5875] Bluetooth: hci1: hardware error 0x00 [ 268.896493][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=e5.08 [ 268.906125][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 268.914296][ T24] usb 4-1: Product: syz [ 268.934153][ T24] usb 4-1: Manufacturer: syz [ 268.939220][ T24] usb 4-1: SerialNumber: syz [ 268.954152][ T24] usb 4-1: config 0 descriptor?? [ 269.614362][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 269.747531][ T9] usb 4-1: USB disconnect, device number 109 [ 269.773699][ T9083] fuse: Unknown parameter 'group\d' [ 269.910745][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 269.934152][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 269.954291][ T9093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.867'. [ 269.959294][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 269.982505][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.993793][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.010036][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.019312][ T24] usb 3-1: Product: syz [ 270.020431][ T9093] devtmpfs: Cannot enable quota on remount [ 270.023496][ T24] usb 3-1: Manufacturer: syz [ 270.023515][ T24] usb 3-1: SerialNumber: syz [ 270.034689][ T24] usb 3-1: config 0 descriptor?? [ 270.183543][ T9103] CIFS: Unable to determine destination address [ 270.204479][ T5868] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 270.373867][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 270.381882][ T5868] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.390837][ T5868] usb 5-1: config 0 has no interface number 0 [ 270.400389][ T5868] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 270.410991][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.419463][ T5868] usb 5-1: Product: syz [ 270.424264][ T5868] usb 5-1: Manufacturer: syz [ 270.429015][ T5868] usb 5-1: SerialNumber: syz [ 270.440938][ T5868] usb 5-1: config 0 descriptor?? [ 270.456725][ T5868] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 270.464170][ T5967] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 270.533817][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 270.637009][ T5967] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.654293][ T5967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.671280][ T5967] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.674559][ T9] usb 2-1: device descriptor read/64, error -71 [ 270.687002][ T5868] gspca_spca1528: reg_w err -71 [ 270.687127][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.705416][ T5967] usb 4-1: SerialNumber: syz [ 270.713758][ T5868] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 270.738178][ T5868] usb 5-1: USB disconnect, device number 43 [ 270.923738][ T5875] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 270.953677][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 271.093553][ T9] usb 2-1: device descriptor read/64, error -71 [ 271.213744][ T9] usb usb2-port1: attempt power cycle [ 271.564236][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 271.594025][ T9] usb 2-1: device descriptor read/8, error -71 [ 271.843234][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 271.874069][ T9] usb 2-1: device descriptor read/8, error -71 [ 271.983511][ T9] usb usb2-port1: unable to enumerate USB device [ 272.294792][ T5967] usb 4-1: 0:2 : does not exist [ 272.313081][ T24] usb 3-1: USB disconnect, device number 80 [ 272.319258][ T5967] usb 4-1: unit 5: unexpected type 0x0a [ 272.351776][ T5967] usb 4-1: USB disconnect, device number 110 [ 272.408416][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 272.544063][ T9121] netlink: 'syz.2.875': attribute type 4 has an invalid length. [ 272.865497][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 273.034267][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 273.042458][ T9] usb 4-1: config 0 has no interface number 0 [ 273.048575][ T9] usb 4-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 255 [ 273.058606][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 273.067720][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.078692][ T9] usb 4-1: config 0 descriptor?? [ 273.092308][ T9124] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 273.131573][ T9127] netlink: 'syz.2.877': attribute type 83 has an invalid length. [ 273.308096][ T9] usb 4-1: USB disconnect, device number 111 [ 273.393581][ T5967] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 273.501922][ T9133] openvswitch: netlink: Tunnel attr 79 out of range max 16 [ 273.557038][ T5967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 273.566139][ T5967] usb 3-1: not running at top speed; connect to a high speed hub [ 273.566357][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 273.578569][ T5967] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 273.591929][ T5967] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.602503][ T5967] usb 3-1: config 1 has no interface number 0 [ 273.608637][ T5967] usb 3-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 273.620586][ T5967] usb 3-1: config 1 interface 138 has no altsetting 0 [ 273.629749][ T5967] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 273.640033][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.648280][ T5967] usb 3-1: Product: syz [ 273.652676][ T5967] usb 3-1: Manufacturer: syz [ 273.657347][ T5967] usb 3-1: SerialNumber: syz [ 273.880731][ T5967] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.994278][ T5967] usb 3-1: USB disconnect, device number 81 [ 274.056039][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.202080][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 274.216040][ T9149] netlink: 68 bytes leftover after parsing attributes in process `syz.3.882'. [ 274.354418][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 274.368465][ T24] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 274.392084][ T24] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 274.410669][ T24] usb 2-1: config 166 has no interface number 0 [ 274.420778][ T24] usb 2-1: config 166 has no interface number 1 [ 274.443701][ T24] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 274.463276][ T24] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 274.475000][ T24] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 274.490899][ T24] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 274.615300][ T9159] netlink: 'syz.4.886': attribute type 4 has an invalid length. [ 274.628076][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 274.665833][ T24] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 274.676278][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 274.687478][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 274.697653][ T24] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 274.710919][ T24] usb 2-1: config 166 interface 177 has no altsetting 0 [ 274.733899][ T24] usb 2-1: config 166 interface 34 has no altsetting 0 [ 274.746006][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 274.756220][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.765035][ T24] usb 2-1: Product: syz [ 274.769248][ T24] usb 2-1: Manufacturer: syz [ 274.781628][ T24] usb 2-1: SerialNumber: syz [ 274.861875][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 274.952195][ T9167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.009015][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.037689][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 275.044198][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.048339][ T9] usb 4-1: can't read configurations, error -22 [ 275.084098][ T24] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 275.162401][ T24] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 275.192176][ T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 275.215128][ T24] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 275.230925][ T24] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 275.230958][ T24] usb 2-1: No valid video chain found. [ 275.245590][ T24] usb 2-1: USB disconnect, device number 91 [ 275.343338][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 275.352347][ T9] usb 4-1: can't read configurations, error -22 [ 275.359376][ T9] usb usb4-port1: attempt power cycle [ 275.421348][ T5967] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 275.574483][ T5967] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 275.585680][ T5967] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.598806][ T5967] usb 5-1: config 1 interface 0 has no altsetting 0 [ 275.609510][ T5967] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 275.634281][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=3 [ 275.649033][ T5967] usb 5-1: Product: syz [ 275.654640][ T5967] usb 5-1: SerialNumber: syz [ 275.701241][ T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 275.723882][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 275.736592][ T9] usb 4-1: can't read configurations, error -22 [ 275.871292][ T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 275.904808][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 275.917096][ T5967] usb 5-1: USB disconnect, device number 44 [ 275.928032][ T9] usb 4-1: can't read configurations, error -22 [ 275.939128][ T9] usb usb4-port1: unable to enumerate USB device [ 276.015023][ T9196] binder: 9195:9196 ioctl c020f509 2000000002c0 returned -22 [ 276.074236][ T9200] syzkaller1: entered promiscuous mode [ 276.079715][ T9200] syzkaller1: entered allmulticast mode [ 276.260971][ T24] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 276.332459][ T5967] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 276.412586][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 276.424380][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 276.438232][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 276.447896][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.456263][ T24] usb 2-1: Product: syz [ 276.460562][ T24] usb 2-1: Manufacturer: syz [ 276.468568][ T24] usb 2-1: SerialNumber: syz [ 276.476056][ T24] usb 2-1: config 0 descriptor?? [ 276.482761][ T9196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.493463][ T24] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 276.502618][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 276.510506][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 276.518608][ T5967] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 276.530894][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 276.538517][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 276.546407][ T5967] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.556637][ T5967] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 276.570184][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 276.578104][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 276.585955][ T5967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.594049][ T5967] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 276.604701][ T24] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 276.615213][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.627309][ T5967] usb 3-1: config 0 descriptor?? [ 276.701089][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 276.860684][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 276.867204][ T9] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 276.877093][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 276.885238][ T9] usb 5-1: config 0 has no interface number 0 [ 276.890313][ T24] usb 2-1: USB disconnect, device number 92 [ 276.893003][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 276.913896][ T9] usb 5-1: config 0 has no interface number 0 [ 276.924382][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 276.925522][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 276.945510][ T9] usb 5-1: config 0 has no interface number 0 [ 276.955226][ T24] keyspan 2-1:0.0: device disconnected [ 276.956006][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 276.975338][ T9] usb 5-1: config 0 has no interface number 0 [ 276.982516][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 276.993601][ T9] usb 5-1: config 0 has no interface number 0 [ 277.000960][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 277.013422][ T9] usb 5-1: config 0 has no interface number 0 [ 277.021514][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 277.029521][ T9] usb 5-1: config 0 has no interface number 0 [ 277.037677][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.046181][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 277.051191][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.054325][ T9] usb 5-1: config 0 has no interface number 0 [ 277.074081][ T9] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 277.083782][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.091981][ T9] usb 5-1: Product: syz [ 277.096287][ T9] usb 5-1: Manufacturer: syz [ 277.101057][ T9] usb 5-1: SerialNumber: syz [ 277.108324][ T9] usb 5-1: config 0 descriptor?? [ 277.118117][ T9] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 277.322252][ T9] etas_es58x 5-1:0.2: could not parse product info: '' [ 277.336409][ T5967] usb 3-1: string descriptor 0 read error: -71 [ 277.359367][ T5967] uclogic 0003:5543:004D.001E: failed retrieving string descriptor #200: -71 [ 277.376480][ T5967] uclogic 0003:5543:004D.001E: failed retrieving pen parameters: -71 [ 277.384987][ T5967] uclogic 0003:5543:004D.001E: failed probing pen v2 parameters: -71 [ 277.394311][ T5967] uclogic 0003:5543:004D.001E: failed probing parameters: -71 [ 277.402634][ T5967] uclogic 0003:5543:004D.001E: probe with driver uclogic failed with error -71 [ 277.437446][ T5967] usb 3-1: USB disconnect, device number 82 [ 277.720363][ T5868] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 277.905353][ T5868] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 277.928318][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.962128][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.975036][ T5868] usb 2-1: config 0 descriptor?? [ 278.040647][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.225452][ T5868] kaweth 2-1:0.0: Firmware present in device. [ 278.312454][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 278.323637][ C1] etas_es58x 5-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: 9) [ 278.332505][ C1] etas_es58x 5-1:0.2: es58x_fd_handle_urb_cmd: Unknown command type (0x00) and command ID (0x00) combination [ 278.344054][ C1] etas_es58x 5-1:0.2: ops->handle_urb_cmd() returned error -EBADRQC [ 278.358030][ T9] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 278.366271][ T5533] etas_es58x 5-1:0.2 can1: bit-timing not yet defined [ 278.393194][ T5868] kaweth 2-1:0.0: Statistics collection: 0 [ 278.399163][ T5868] kaweth 2-1:0.0: Multicast filter limit: 0 [ 278.405532][ T5868] kaweth 2-1:0.0: MTU: 0 [ 278.409865][ T5868] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 278.501063][ T9] usb 3-1: device descriptor read/64, error -71 [ 278.514799][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 278.524008][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 278.533213][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 278.542397][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 278.551583][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 278.560791][ C1] etas_es58x 5-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 278.568970][ T5533] etas_es58x 5-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 278.570791][ T5995] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 278.586231][ T24] usb 5-1: USB disconnect, device number 45 [ 278.595283][ T5868] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 278.603451][ T24] etas_es58x 5-1:0.2: Disconnecting syz syz [ 278.620445][ T5868] usb 2-1: USB disconnect, device number 93 [ 278.739727][ T9] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 278.784177][ T5995] usb 4-1: Using ep0 maxpacket: 32 [ 278.792959][ T5995] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 278.802946][ T5995] usb 4-1: config 0 has no interface number 0 [ 278.810166][ T5995] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 278.828180][ T5995] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 278.853672][ T5995] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 278.869687][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.870154][ T9] usb 3-1: device descriptor read/64, error -71 [ 278.887935][ T5995] usb 4-1: Product: syz [ 278.897909][ T5995] usb 4-1: Manufacturer: syz [ 278.910390][ T5995] usb 4-1: SerialNumber: syz [ 278.925942][ T5995] usb 4-1: config 0 descriptor?? [ 278.938419][ T9243] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 278.947621][ T9243] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 278.981379][ T5995] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, da:33:8a:64:9b:7d [ 279.013287][ T9] usb usb3-port1: attempt power cycle [ 279.178855][ T5995] usb 4-1: USB disconnect, device number 116 [ 279.199329][ T5995] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 279.369482][ T9] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 279.390707][ T9] usb 3-1: device descriptor read/8, error -71 [ 279.449739][ T5938] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 279.611085][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.629499][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.641413][ T9] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 279.649248][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.662608][ T5938] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.673790][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.682638][ T9] usb 3-1: device descriptor read/8, error -71 [ 279.691813][ T5938] usb 5-1: config 0 descriptor?? [ 279.729304][ T5996] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 279.800759][ T9] usb usb3-port1: unable to enumerate USB device [ 279.889749][ T5996] usb 2-1: Using ep0 maxpacket: 16 [ 279.911310][ T5996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.942870][ T5996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.973305][ T5996] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.993614][ T5996] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 280.004343][ T5996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.035120][ T5996] usb 2-1: config 0 descriptor?? [ 280.247852][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.271418][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.317316][ T5938] usbhid 5-1:0.0: can't add hid device: -71 [ 280.326663][ T5938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 280.363501][ T5938] usb 5-1: USB disconnect, device number 46 [ 280.756789][ T5996] shield 0003:0955:7214.001F: unknown main item tag 0x2 [ 280.767473][ T5996] shield 0003:0955:7214.001F: item fetching failed at offset 3/5 [ 280.775980][ T5996] shield 0003:0955:7214.001F: Parse failed [ 280.782610][ T5996] shield 0003:0955:7214.001F: probe with driver shield failed with error -22 [ 280.953576][ T48] usb 2-1: USB disconnect, device number 94 [ 281.118537][ T5938] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 281.166539][ T9308] sctp: [Deprecated]: syz.2.917 (pid 9308) Use of int in max_burst socket option. [ 281.166539][ T9308] Use struct sctp_assoc_value instead [ 281.199287][ T9310] netlink: 'syz.3.918': attribute type 12 has an invalid length. [ 281.213033][ T9310] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.918'. [ 281.290434][ T5938] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 281.316902][ T5938] usb 5-1: config 0 has no interface number 0 [ 281.326578][ T9315] netlink: 'syz.3.919': attribute type 62 has an invalid length. [ 281.330531][ T5938] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 281.350017][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.358121][ T5938] usb 5-1: Product: syz [ 281.362812][ T5938] usb 5-1: Manufacturer: syz [ 281.367796][ T5938] usb 5-1: SerialNumber: syz [ 281.383417][ T5938] usb 5-1: config 0 descriptor?? [ 281.488444][ T48] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 281.526732][ T9321] comedi comedi0: dt2801: I/O port conflict (0x4f27,2) [ 281.604201][ T9306] netlink: 92 bytes leftover after parsing attributes in process `syz.4.916'. [ 281.614567][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 281.627625][ T5938] f81534a_ctrl 5-1:0.74: failed to set register 0x116: -5 [ 281.635229][ T5938] f81534a_ctrl 5-1:0.74: failed to enable ports: -5 [ 281.638293][ T48] usb 3-1: device descriptor read/64, error -71 [ 281.645243][ T5938] f81534a_ctrl 5-1:0.74: probe with driver f81534a_ctrl failed with error -5 [ 281.660615][ T5938] usb 5-1: USB disconnect, device number 47 [ 281.828190][ T24] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 281.888430][ T48] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 281.988125][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 281.995243][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 282.003374][ T24] usb 2-1: config 0 has no interface number 0 [ 282.009696][ T24] usb 2-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 282.021329][ T24] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x83 has invalid maxpacket 15813, setting to 1024 [ 282.033046][ T48] usb 3-1: device descriptor read/64, error -71 [ 282.039583][ T24] usb 2-1: config 0 interface 2 altsetting 2 bulk endpoint 0x83 has invalid maxpacket 1024 [ 282.050010][ T24] usb 2-1: config 0 interface 2 has no altsetting 0 [ 282.059965][ T24] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 282.069126][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.077117][ T24] usb 2-1: Product: syz [ 282.081420][ T24] usb 2-1: Manufacturer: syz [ 282.086013][ T24] usb 2-1: SerialNumber: syz [ 282.093413][ T24] usb 2-1: config 0 descriptor?? [ 282.099391][ T9326] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 282.158321][ T48] usb usb3-port1: attempt power cycle [ 282.482240][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 282.495687][ T9349] kernel read not supported for file /file1 (pid: 9349 comm: syz.3.928) [ 282.507956][ T48] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 282.515634][ T30] audit: type=1800 audit(1757234284.395:11): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.928" name="file1" dev="mqueue" ino=24415 res=0 errno=0 [ 282.574718][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.596136][ T48] usb 3-1: device descriptor read/8, error -71 [ 282.623915][ T9351] batadv_slave_1: entered allmulticast mode [ 282.632386][ T9354] dvmrp0: left allmulticast mode [ 282.637679][ T9354] batadv_slave_1: left allmulticast mode [ 282.664430][ T24] usb 2-1: USB disconnect, device number 95 [ 282.698458][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.848382][ T48] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 282.868457][ T48] usb 3-1: device descriptor read/8, error -71 [ 282.980048][ T48] usb usb3-port1: unable to enumerate USB device [ 283.058782][ T24] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 283.224946][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.234232][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.242313][ T24] usb 2-1: Product: syz [ 283.246475][ T24] usb 2-1: Manufacturer: syz [ 283.256644][ T24] usb 2-1: SerialNumber: syz [ 283.387565][ T48] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 283.484082][ T24] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 283.497628][ T24] cdc_ncm 2-1:1.0: bind() failure [ 283.512226][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 283.523971][ T24] cdc_ncm 2-1:1.1: bind() failure [ 283.537306][ T48] usb 5-1: device descriptor read/64, error -71 [ 283.547387][ T24] usb 2-1: USB disconnect, device number 96 [ 283.621987][ T9372] netlink: 164 bytes leftover after parsing attributes in process `syz.1.937'. [ 283.644411][ T9372] sp0: Synchronizing with TNC [ 283.688466][ T9371] [U] è [ 283.707302][ T5995] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 283.787656][ T48] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 283.895011][ T5995] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 283.911034][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.931562][ T5995] usb 4-1: Product: syz [ 283.937301][ T48] usb 5-1: device descriptor read/64, error -71 [ 283.948263][ T5995] usb 4-1: Manufacturer: syz [ 283.952905][ T5995] usb 4-1: SerialNumber: syz [ 283.975152][ T5995] usb 4-1: config 0 descriptor?? [ 284.009560][ T5995] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 284.025356][ T5995] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 284.046204][ T5995] usb-storage 4-1:0.0: USB Mass Storage device detected [ 284.054101][ T48] usb usb5-port1: attempt power cycle [ 284.081320][ T5995] usb-storage 4-1:0.0: device ignored [ 284.203796][ T24] usb 4-1: USB disconnect, device number 117 [ 284.355960][ T9386] No buffer was provided with the request [ 284.411090][ T48] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 284.448471][ T48] usb 5-1: device descriptor read/8, error -71 [ 284.515522][ T9390] comedi comedi3: pcl724: a I/O base address must be specified [ 284.543708][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 284.701465][ T48] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 284.737574][ T48] usb 5-1: device descriptor read/8, error -71 [ 284.771897][ T9402] sctp: [Deprecated]: syz.1.946 (pid 9402) Use of int in max_burst socket option. [ 284.771897][ T9402] Use struct sctp_assoc_value instead [ 284.868492][ T48] usb usb5-port1: unable to enumerate USB device [ 285.055424][ T9414] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 285.065787][ T9414] overlayfs: missing 'lowerdir' [ 285.086933][ T24] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 285.117817][ T9416] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 285.125680][ T9416] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 285.134833][ T9416] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 285.142902][ T9416] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 285.216441][ T5995] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 285.269170][ T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 285.277608][ T24] usb 4-1: config 0 has no interface number 0 [ 285.285905][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 285.295478][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.304142][ T24] usb 4-1: Product: syz [ 285.308369][ T24] usb 4-1: Manufacturer: syz [ 285.312968][ T24] usb 4-1: SerialNumber: syz [ 285.323037][ T24] usb 4-1: config 0 descriptor?? [ 285.371845][ T5995] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.382127][ T5995] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.399658][ T5995] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.409797][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 285.418430][ T5995] usb 3-1: Product: syz [ 285.422657][ T5995] usb 3-1: Manufacturer: syz [ 285.426354][ T5938] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 285.427774][ T5995] usb 3-1: SerialNumber: syz [ 285.445615][ T5995] cdc_mbim 3-1:1.0: skipping garbage [ 285.451395][ T5995] usb 3-1: selecting invalid altsetting 1 [ 285.578068][ T5938] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 285.586554][ T5938] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 285.597363][ T5938] usb 2-1: config 220 has no interface number 2 [ 285.603675][ T5938] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 285.618288][ T5938] usb 2-1: config 220 interface 0 has no altsetting 0 [ 285.625091][ T5938] usb 2-1: config 220 interface 76 has no altsetting 0 [ 285.632036][ T5938] usb 2-1: config 220 interface 1 has no altsetting 0 [ 285.641277][ T5938] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 285.650450][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.651578][ T5995] cdc_mbim 3-1:1.0: bind() failure [ 285.658564][ T5938] usb 2-1: Product: syz [ 285.658586][ T5938] usb 2-1: Manufacturer: syz [ 285.658600][ T5938] usb 2-1: SerialNumber: syz [ 285.703010][ T5995] usb 3-1: USB disconnect, device number 91 [ 285.872126][ T5938] usb 2-1: selecting invalid altsetting 0 [ 285.878856][ T5938] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 285.885243][ T5938] usb 2-1: No valid video chain found. [ 285.895478][ T5938] usb 2-1: selecting invalid altsetting 0 [ 285.901353][ T5938] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 285.919538][ T5938] usb 2-1: USB disconnect, device number 97 [ 285.948201][ T9407] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 285.955725][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 285.964791][ T24] usb 4-1: Please update to version 0.2 or newer [ 286.088890][ T24] usb 4-1: USB disconnect, device number 118 [ 286.505822][ T5938] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 286.575916][ T5868] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 286.670405][ T5938] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 286.684933][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.694943][ T5938] usb 3-1: Product: syz [ 286.696627][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 286.705885][ T5938] usb 3-1: Manufacturer: syz [ 286.711320][ T5938] usb 3-1: SerialNumber: syz [ 286.731574][ T5938] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 286.739148][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.758511][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.792525][ T5996] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 286.796166][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 31658, setting to 64 [ 286.833102][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.847084][ T24] usb 2-1: device descriptor read/64, error -71 [ 286.865352][ T5868] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 286.879093][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.887824][ T5868] usb 5-1: Product: syz [ 286.892158][ T5868] usb 5-1: Manufacturer: syz [ 286.901092][ T5868] usb 5-1: SerialNumber: syz [ 286.921332][ T5868] usb 5-1: config 0 descriptor?? [ 286.930598][ T9424] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.961471][ T5868] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32 [ 287.086369][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 287.154118][ T9447] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 287.160009][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.169518][ T9447] netlink: 17 bytes leftover after parsing attributes in process `syz.3.963'. [ 287.170776][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.198852][ T5868] usb 3-1: USB disconnect, device number 92 [ 287.215078][ T48] usb 5-1: USB disconnect, device number 52 [ 287.245835][ T24] usb 2-1: device descriptor read/64, error -71 [ 287.294895][ T9449] netlink: 10 bytes leftover after parsing attributes in process `syz.3.964'. [ 287.358179][ T24] usb usb2-port1: attempt power cycle [ 287.615226][ T5938] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 287.695521][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 287.720019][ T24] usb 2-1: device descriptor read/8, error -71 [ 287.774981][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.791391][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.812663][ T5938] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 287.822917][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.849687][ T5938] usb 4-1: config 0 descriptor?? [ 287.877876][ T5996] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 287.900677][ T5996] ath9k_htc: Failed to initialize the device [ 287.911854][ T5868] usb 3-1: ath9k_htc: USB layer deinitialized [ 287.976561][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 288.005666][ T24] usb 2-1: device descriptor read/8, error -71 [ 288.115457][ T24] usb usb2-port1: unable to enumerate USB device [ 288.125038][ T48] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 288.235143][ T5868] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 288.276400][ T48] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 288.284607][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.295241][ T48] usb 5-1: config 0 has no interface number 0 [ 288.301377][ T48] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 288.310670][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.322137][ T48] usb 5-1: config 0 descriptor?? [ 288.399280][ T5868] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 288.407604][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.417944][ T5868] usb 3-1: config 0 has no interface number 0 [ 288.425896][ T5868] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=44.ca [ 288.440830][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.448909][ T5868] usb 3-1: Product: syz [ 288.453099][ T5868] usb 3-1: Manufacturer: syz [ 288.457750][ T5868] usb 3-1: SerialNumber: syz [ 288.463751][ T5938] usbhid 4-1:0.0: can't add hid device: -71 [ 288.467323][ T5868] usb 3-1: config 0 descriptor?? [ 288.478305][ T5938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 288.487324][ T5868] HFC-S_USB 3-1:0.238: probe with driver HFC-S_USB failed with error -5 [ 288.498968][ T5938] usb 4-1: USB disconnect, device number 119 [ 288.530851][ T5868] usb 5-1: USB disconnect, device number 53 [ 288.913051][ T5868] usb 3-1: USB disconnect, device number 93 [ 289.028105][ T9462] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 289.034641][ T9462] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 289.044913][ T9462] vhci_hcd vhci_hcd.0: Device attached [ 289.057875][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.081841][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.296606][ T5996] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 289.317494][ T5938] usb 40-1: SetAddress Request (2) to port 0 [ 289.323887][ T5938] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 289.374990][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 289.471852][ T5996] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 289.532886][ T5996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.541429][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 289.562634][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.591821][ T5996] usb 4-1: config 0 descriptor?? [ 289.616825][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 289.638781][ T5996] hso 4-1:0.0: Can't find BULK IN endpoint [ 289.663823][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 289.673510][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.688322][ T10] usb 5-1: config 0 descriptor?? [ 289.832903][ T5996] usb 4-1: USB disconnect, device number 120 [ 289.842796][ T9463] vhci_hcd: connection reset by peer [ 289.852778][ T3514] vhci_hcd: stop threads [ 289.857655][ T3514] vhci_hcd: release socket [ 289.868220][ T3514] vhci_hcd: disconnect device [ 289.900029][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.972'. [ 289.944404][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 290.009459][ T9479] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 290.020349][ T9479] qnx6: wrong signature (magic) in superblock #1. [ 290.028219][ T9479] qnx6: unable to read the first superblock [ 290.119464][ T9] usb 2-1: config 0 has an invalid interface number: 190 but max is 0 [ 290.131255][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 290.148259][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 290.156414][ T9] usb 2-1: config 0 has no interface number 0 [ 290.166894][ T9] usb 2-1: config 0 interface 190 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 290.181122][ T10] usb 5-1: USB disconnect, device number 54 [ 290.192361][ T9] usb 2-1: config 0 interface 190 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 290.219913][ T9] usb 2-1: config 0 interface 190 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 290.236548][ T9] usb 2-1: config 0 interface 190 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 290.250620][ T9] usb 2-1: config 0 interface 190 altsetting 0 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 290.266925][ T9] usb 2-1: config 0 interface 190 altsetting 0 endpoint 0xE has invalid maxpacket 1999, setting to 64 [ 290.280219][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice=cb.35 [ 290.293247][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.301566][ T9] usb 2-1: Product: syz [ 290.306027][ T9] usb 2-1: Manufacturer: syz [ 290.310681][ T9] usb 2-1: SerialNumber: syz [ 290.319540][ T9] usb 2-1: config 0 descriptor?? [ 290.466258][ T9496] sctp: [Deprecated]: syz.3.978 (pid 9496) Use of int in max_burst socket option. [ 290.466258][ T9496] Use struct sctp_assoc_value instead [ 290.523988][ T48] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 290.548273][ T5868] usb 2-1: USB disconnect, device number 102 [ 290.695957][ T48] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.706437][ T48] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.717185][ T48] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.728130][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.737064][ T48] usb 3-1: SerialNumber: syz [ 290.962006][ T48] usb 3-1: 0:2 : does not exist [ 291.019149][ T48] usb 3-1: USB disconnect, device number 94 [ 291.057727][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.234634][ T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0) [ 291.362254][ T3570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.450231][ T3570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.534697][ T3570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.649674][ T3570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.934905][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 291.960339][ T9516] netlink: 'syz.4.988': attribute type 58 has an invalid length. [ 291.980791][ T3570] bridge_slave_1: left allmulticast mode [ 291.991644][ T3570] bridge_slave_1: left promiscuous mode [ 292.009774][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.072214][ T3570] bridge_slave_0: left allmulticast mode [ 292.104437][ T3570] bridge_slave_0: left promiscuous mode [ 292.112554][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.158939][ T30] audit: type=1326 audit(1757234294.060:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.990" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb3d18ebe9 code=0x0 [ 292.211547][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.228009][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.241477][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.251943][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.270110][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.293867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.624107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.875037][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.885971][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.896923][ T3570] bond0 (unregistering): (slave team0): Releasing backup interface [ 292.907216][ T3570] bond0 (unregistering): Released all slaves [ 292.920314][ T9518] netlink: 176 bytes leftover after parsing attributes in process `syz.2.989'. [ 292.930027][ T9518] netlink: 176 bytes leftover after parsing attributes in process `syz.2.989'. [ 293.382381][ T5868] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 293.436735][ T3570] hsr_slave_0: left promiscuous mode [ 293.445514][ T3570] hsr_slave_1: left promiscuous mode [ 293.451749][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.461284][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.474768][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.485005][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.528287][ T3570] veth1_macvtap: left promiscuous mode [ 293.534878][ T3570] veth0_macvtap: left promiscuous mode [ 293.540581][ T3570] veth1_vlan: left promiscuous mode [ 293.546384][ T3570] veth0_vlan: left promiscuous mode [ 293.552666][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 293.563341][ T5868] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 293.575224][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.602866][ T5868] pvrusb2: Hardware description: Terratec Grabster AV400 [ 293.620031][ T5868] pvrusb2: ********** [ 293.638952][ T5868] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 293.664913][ T5868] pvrusb2: Important functionality might not be entirely working. [ 293.709026][ T5868] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 293.751105][ T5868] pvrusb2: ********** [ 293.808735][ T2343] pvrusb2: Invalid write control endpoint [ 293.937513][ T2343] pvrusb2: Invalid write control endpoint [ 293.950152][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 293.961577][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 293.987185][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 294.004607][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.007350][ T2343] pvrusb2: Device being rendered inoperable [ 294.013452][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 294.021311][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 294.037572][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.054229][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 294.079944][ T2343] pvrusb2: Attached sub-driver cx25840 [ 294.080942][ T9544] pvrusb2: Attempted to execute control transfer when device not ok [ 294.091613][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 294.106005][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 294.126318][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.136508][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.154661][ T48] usb 5-1: USB disconnect, device number 55 [ 294.204680][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 294.236965][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.246654][ T10] usb 2-1: config 14 has an invalid interface number: 120 but max is 0 [ 294.256503][ T10] usb 2-1: config 14 has no interface number 0 [ 294.265764][ T10] usb 2-1: config 14 interface 120 has no altsetting 0 [ 294.277735][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=22.cd [ 294.287133][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.295296][ T10] usb 2-1: Product: syz [ 294.299479][ T10] usb 2-1: Manufacturer: syz [ 294.304250][ T5923] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 294.313894][ T10] usb 2-1: SerialNumber: syz [ 294.352193][ T5870] Bluetooth: hci2: command tx timeout [ 294.363485][ T5938] usb 40-1: device descriptor read/8, error -110 [ 294.465356][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 294.479249][ T5923] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 294.488787][ T5923] usb 3-1: config 0 has no interface number 0 [ 294.495661][ T5923] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 294.506144][ T5923] usb 3-1: config 0 interface 196 has no altsetting 0 [ 294.517214][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 294.526403][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.550009][ T10] ftdi_sio 2-1:14.120: FTDI USB Serial Device converter detected [ 294.559556][ T10] ftdi_sio ttyUSB0: unknown device type: 0x22cd [ 294.567393][ T5923] usb 3-1: Product: syz [ 294.571605][ T5923] usb 3-1: Manufacturer: syz [ 294.585086][ T10] usb 2-1: USB disconnect, device number 103 [ 294.592457][ T5923] usb 3-1: SerialNumber: syz [ 294.607153][ T5923] usb 3-1: config 0 descriptor?? [ 294.618392][ T10] ftdi_sio 2-1:14.120: device disconnected [ 294.633964][ T9574] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 294.685550][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 294.754115][ T5938] usb usb40-port1: attempt power cycle [ 294.842227][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 294.860652][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.879100][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.910447][ T5923] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 294.943173][ T5923] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 294.975496][ T5923] usb 3-1: USB disconnect, device number 95 [ 295.229527][ T9590] input: syz1 as /devices/virtual/input/input33 [ 295.333140][ T5923] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 295.365725][ T5938] usb usb40-port1: unable to enumerate USB device [ 295.499065][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 295.528088][ T5923] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 295.538660][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.548048][ T9594] IPVS: persistence engine module ip_vs_pe_ not found [ 295.563081][ T5923] usb 3-1: Product: syz [ 295.567277][ T5923] usb 3-1: Manufacturer: syz [ 295.572058][ T5923] usb 3-1: SerialNumber: syz [ 295.579659][ T5923] usb 3-1: config 0 descriptor?? [ 295.621395][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 295.632562][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'. [ 295.793989][ T5923] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 295.875091][ T9526] chnl_net:caif_netlink_parms(): no params data found [ 296.262923][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.270279][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.277796][ T9526] bridge_slave_0: entered allmulticast mode [ 296.321624][ T9526] bridge_slave_0: entered promiscuous mode [ 296.342527][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.349795][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.381042][ T9526] bridge_slave_1: entered allmulticast mode [ 296.389273][ T9526] bridge_slave_1: entered promiscuous mode [ 296.430923][ T5870] Bluetooth: hci2: command tx timeout [ 296.582969][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.599127][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.623575][ T5923] usb write operation failed. (-71) [ 296.677434][ T5923] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.700059][ T5923] dvbdev: DVB: registering new adapter (Terratec H7) [ 296.707585][ T5923] usb 3-1: media controller created [ 296.720802][ T5923] usb read operation failed. (-71) [ 296.732149][ T5923] usb write operation failed. (-71) [ 296.759208][ T5923] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 296.794133][ T9526] team0: Port device team_slave_0 added [ 296.812411][ T5923] usb 3-1: USB disconnect, device number 96 [ 296.897101][ T9526] team0: Port device team_slave_1 added [ 297.009918][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.019956][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.021674][ T1342] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.049042][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.058570][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.071359][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.135291][ T1342] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.180446][ T48] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 297.202473][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.210069][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.240885][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.265298][ T1342] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.299772][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.308082][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.334027][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.342068][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.362007][ T48] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 297.382920][ T1342] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.394285][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.412166][ T48] usb 2-1: config 0 descriptor?? [ 297.462751][ T9526] hsr_slave_0: entered promiscuous mode [ 297.469548][ T9526] hsr_slave_1: entered promiscuous mode [ 297.480349][ T24] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 297.658212][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 297.671703][ T24] usb 3-1: can't read configurations, error -61 [ 297.830937][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 297.931845][ T1342] bridge_slave_1: left allmulticast mode [ 297.947897][ T1342] bridge_slave_1: left promiscuous mode [ 297.954740][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.967402][ T1342] bridge_slave_0: left allmulticast mode [ 297.973823][ T1342] bridge_slave_0: left promiscuous mode [ 297.979650][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.022963][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 298.037049][ T24] usb 3-1: can't read configurations, error -61 [ 298.046054][ T24] usb usb3-port1: attempt power cycle [ 298.400523][ T24] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 298.433692][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 298.452682][ T24] usb 3-1: can't read configurations, error -61 [ 298.519890][ T5875] Bluetooth: hci2: command tx timeout [ 298.553176][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.565199][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.576814][ T1342] bond0 (unregistering): Released all slaves [ 298.600313][ T24] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 298.645615][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 298.684267][ T24] usb 3-1: can't read configurations, error -61 [ 298.700233][ T24] usb usb3-port1: unable to enumerate USB device [ 298.828308][ T9627] chnl_net:caif_netlink_parms(): no params data found [ 298.859952][ T9526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.909983][ T9526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.925246][ T9526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 299.022774][ T9526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.088912][ T1342] hsr_slave_0: left promiscuous mode [ 299.096307][ T1342] hsr_slave_1: left promiscuous mode [ 299.104028][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.115332][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.128718][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.136706][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.160930][ T5875] Bluetooth: hci4: command tx timeout [ 299.174505][ T1342] veth1_macvtap: left promiscuous mode [ 299.189187][ T1342] veth0_macvtap: left promiscuous mode [ 299.194987][ T1342] veth1_vlan: left promiscuous mode [ 299.206833][ T1342] veth0_vlan: left promiscuous mode [ 299.857528][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 299.912099][ T1342] team0 (unregistering): Port device team_slave_0 removed [ 300.308863][ T48] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 300.340423][ T48] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 300.353364][ T48] asix 2-1:0.0: probe with driver asix failed with error -71 [ 300.364506][ T48] usb 2-1: USB disconnect, device number 104 [ 300.509748][ T9672] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 300.590304][ T5875] Bluetooth: hci2: command tx timeout [ 300.609105][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.630267][ T9627] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.637557][ T9627] bridge_slave_0: entered allmulticast mode [ 300.659146][ T9627] bridge_slave_0: entered promiscuous mode [ 300.695200][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.707030][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.718467][ T9627] bridge_slave_1: entered allmulticast mode [ 300.726831][ T9627] bridge_slave_1: entered promiscuous mode [ 300.826617][ T9627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.890894][ T9627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.036334][ T9627] team0: Port device team_slave_0 added [ 301.052642][ T9627] team0: Port device team_slave_1 added [ 301.066365][ T9690] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 301.066405][ T9693] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 301.137962][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.164926][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.185651][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.227179][ T9627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.248604][ T5875] Bluetooth: hci4: command tx timeout [ 301.271094][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.278097][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.304480][ T9627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.366924][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.430381][ T9627] hsr_slave_0: entered promiscuous mode [ 301.437306][ T9627] hsr_slave_1: entered promiscuous mode [ 301.447834][ T9627] debugfs: 'hsr0' already exists in 'hsr' [ 301.453756][ T9627] Cannot create hsr debugfs directory [ 301.498790][ T5967] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 301.532752][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.539980][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.555526][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.562739][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.680344][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.704628][ T5967] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 301.715808][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.728950][ T5967] usb 2-1: config 0 descriptor?? [ 301.823125][ T9526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.848352][ T5995] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 301.962470][ T9627] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 301.993106][ T9627] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.009194][ T5995] usb 3-1: Using ep0 maxpacket: 8 [ 302.023225][ T5995] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.024335][ T9627] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.033561][ T5995] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.054503][ T5995] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.070729][ T5995] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.081994][ T9627] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 302.104961][ T5995] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.128099][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.166756][ T5967] lenovo 0003:17EF:60A3.0020: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 302.343803][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.351379][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.380638][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.406281][ T5995] usb 3-1: GET_CAPABILITIES returned 0 [ 302.419229][ T5967] usb 2-1: USB disconnect, device number 105 [ 302.435505][ T5995] usbtmc 3-1:16.0: can't read capabilities [ 302.451677][ T9627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.523103][ T9627] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.563703][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.570922][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.593213][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.600451][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.625305][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.634753][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.643882][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.653783][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.662899][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.672012][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.681117][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.691857][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.701088][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.710190][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.719304][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.730882][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.740028][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.749135][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.758210][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.767280][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 302.782889][ T5938] usb 3-1: USB disconnect, device number 101 [ 303.160732][ T9526] veth0_vlan: entered promiscuous mode [ 303.200722][ T9526] veth1_vlan: entered promiscuous mode [ 303.276501][ T9526] veth0_macvtap: entered promiscuous mode [ 303.288532][ T5938] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 303.305754][ T9526] veth1_macvtap: entered promiscuous mode [ 303.311781][ T5875] Bluetooth: hci4: command tx timeout [ 303.386079][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.467778][ T9627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.469796][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 303.482736][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.498686][ T5938] usb 2-1: No eUSB2 isoc ep 129 companion for config 1 interface 0 altsetting 0 [ 303.506449][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.533390][ T5938] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 303.538775][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.577435][ T5938] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 303.609048][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.613342][ T5938] usb 2-1: string descriptor 0 read error: -22 [ 303.635431][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.641150][ T5938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.687621][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.773930][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.800373][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.861978][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.878943][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.919136][ T5967] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 303.942876][ T5938] cdc_ncm 2-1:1.0: bind() failure [ 303.988189][ T5938] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 304.027454][ T5938] cdc_ncm 2-1:1.1: bind() failure [ 304.067493][ T5938] usb 2-1: USB disconnect, device number 106 [ 304.097675][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 304.121332][ T5967] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 304.151087][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.164389][ T5967] usb 3-1: Product: syz [ 304.169270][ T5967] usb 3-1: Manufacturer: syz [ 304.174063][ T5967] usb 3-1: SerialNumber: syz [ 304.295202][ T9627] veth0_vlan: entered promiscuous mode [ 304.310603][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 304.326182][ T9627] veth1_vlan: entered promiscuous mode [ 304.403010][ T9627] veth0_macvtap: entered promiscuous mode [ 304.425045][ T9627] veth1_macvtap: entered promiscuous mode [ 304.470609][ T9627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.488706][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 304.506513][ T9627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.510858][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 304.548476][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.572879][ T1342] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.615652][ T24] usb 6-1: config 0 descriptor?? [ 304.645854][ T1342] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.653995][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 304.674882][ T5967] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 304.687193][ T5967] mxuport 3-1:254.0: probe with driver mxuport failed with error -5 [ 304.726985][ T5967] usb 3-1: USB disconnect, device number 102 [ 304.742806][ T1342] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.772626][ T1342] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.920981][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.941534][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.004734][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.025233][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.386985][ T5875] Bluetooth: hci4: command tx timeout [ 305.432359][ T9776] infiniband syz2: set down [ 305.438477][ T983] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 305.446691][ T9776] infiniband syz2: added veth1_vlan [ 305.547115][ T24] gspca_nw80x: reg_w err -110 [ 305.549024][ T9776] RDS/IB: syz2: added [ 305.552015][ T24] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 305.586467][ T983] usb 7-1: device descriptor read/64, error -71 [ 305.587276][ T9776] smc: adding ib device syz2 with port count 1 [ 305.603769][ T9776] smc: ib device syz2 port 1 has no pnetid [ 305.866609][ T983] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 305.875150][ T24] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 306.016564][ T983] usb 7-1: device descriptor read/64, error -71 [ 306.036545][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 306.044645][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.058344][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.077413][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 306.094376][ T24] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 306.118803][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.128785][ T983] usb usb7-port1: attempt power cycle [ 306.143362][ T24] usb 3-1: Product: syz [ 306.156173][ T24] usb 3-1: Manufacturer: syz [ 306.160848][ T24] usb 3-1: SerialNumber: syz [ 306.179717][ T24] usb 3-1: config 0 descriptor?? [ 306.201713][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.299842][ T24] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 306.371679][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.409145][ T9793] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.424147][ T24] usb 3-1: USB disconnect, device number 103 [ 306.486918][ T983] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 306.506497][ T983] usb 7-1: device descriptor read/8, error -71 [ 306.748118][ T983] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 306.778770][ T983] usb 7-1: device descriptor read/8, error -71 [ 306.898918][ T983] usb usb7-port1: unable to enumerate USB device [ 307.079995][ T980] usb 6-1: USB disconnect, device number 2 [ 307.178157][ T9804] overlayfs: failed to resolve './file0': -2 [ 307.386989][ T9811] cgroup2: Unknown parameter 'memory_hugeôIÜ' [ 307.398261][ T9811] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1026'. [ 307.585279][ T980] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 307.751098][ T980] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 307.760503][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.773165][ T980] usb 6-1: config 0 descriptor?? [ 307.792857][ T980] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 307.814195][ T9826] overlayfs: failed to resolve './file1': -2 [ 308.007998][ T980] gp8psk: usb in 128 operation failed. [ 308.010799][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.023759][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.037005][ T9809] cgroup: Bad value for 'name' [ 308.243303][ T980] gp8psk: FW Version = 161.50.142 (0xa1328e) Build 2144/173/204 [ 308.453352][ T980] gp8psk: usb in 149 operation failed. [ 308.459108][ T980] gp8psk: failed to get FPGA version [ 308.465036][ T980] gp8psk: usb in 138 operation failed. [ 308.470643][ T980] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 308.481246][ T980] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 308.492814][ T980] usb 6-1: USB disconnect, device number 3 [ 308.574799][ T983] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 308.751661][ T983] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 308.760126][ T983] usb 7-1: config 0 has no interface number 1 [ 308.766403][ T983] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 308.778724][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.789343][ T983] usb 7-1: config 0 descriptor?? [ 308.802234][ T983] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.809298][ T983] usb 7-1: MIDIStreaming interface descriptor not found [ 308.851267][ T5923] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 308.853650][ T983] gspca_main: spca561-2.14.0 probing abcd:cdee [ 308.885410][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 309.003228][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.028451][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.036692][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 309.047758][ T5923] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 309.063348][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.079998][ T5923] usb 3-1: config 0 has no interface number 0 [ 309.089816][ T5923] usb 3-1: config 0 interface 48 has no altsetting 0 [ 309.091945][ T983] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 309.098885][ T10] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 309.127961][ T983] usb 7-1: USB disconnect, device number 6 [ 309.136062][ T5923] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 309.157038][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.173201][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.185958][ T10] usb 2-1: Product: syz [ 309.190934][ T5923] usb 3-1: Product: syz [ 309.200402][ T10] usb 2-1: Manufacturer: syz [ 309.205166][ T5923] usb 3-1: Manufacturer: syz [ 309.209883][ T10] usb 2-1: SerialNumber: syz [ 309.218276][ T5923] usb 3-1: SerialNumber: syz [ 309.229686][ T10] usb 2-1: config 0 descriptor?? [ 309.245488][ T5923] usb 3-1: config 0 descriptor?? [ 309.474683][ T10] usb 2-1: USB disconnect, device number 107 [ 309.646748][ T983] usb 3-1: USB disconnect, device number 104 [ 309.773937][ T5875] Bluetooth: hci0: SCO packet for unknown connection handle 2 [ 310.163994][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 310.337082][ T10] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 310.351657][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.360197][ T10] usb 7-1: Product: syz [ 310.369190][ T10] usb 7-1: Manufacturer: syz [ 310.374275][ T10] usb 7-1: SerialNumber: syz [ 310.383695][ T10] usb 7-1: config 0 descriptor?? [ 310.604025][ T983] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 310.607794][ T10] usb 7-1: ignoring: probably an ADSL modem [ 310.753666][ T983] usb 6-1: Invalid ep0 maxpacket: 64 [ 310.883656][ T983] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 311.018896][ T10] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 311.043680][ T983] usb 6-1: Invalid ep0 maxpacket: 64 [ 311.054551][ T983] usb usb6-port1: attempt power cycle [ 311.221162][ T9881] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 311.235549][ T10] usb 7-1: USB disconnect, device number 7 [ 311.393510][ T983] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 311.427614][ T983] usb 6-1: Invalid ep0 maxpacket: 64 [ 311.563631][ T983] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 311.579540][ T9883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 311.594004][ T983] usb 6-1: Invalid ep0 maxpacket: 64 [ 311.599815][ T983] usb usb6-port1: unable to enumerate USB device [ 311.829381][ T9889] nvme_fabrics: missing parameter 'transport=%s' [ 311.839107][ T9889] nvme_fabrics: missing parameter 'nqn=%s' [ 311.901150][ T9895] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.034261][ T9895] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.125369][ T9895] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.143254][ T5995] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 312.206716][ T9895] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.306646][ T5995] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 312.327274][ T48] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 312.342416][ T5995] usb 7-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.363774][ T5995] usb 7-1: config 2 interface 0 has no altsetting 0 [ 312.377615][ T1342] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.387899][ T5995] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 312.397446][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 312.405728][ T5995] usb 7-1: SerialNumber: syz [ 312.420888][ T1342] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.432441][ T1342] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.452040][ T50] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.513962][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 312.520903][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 312.531688][ T48] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 312.541698][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 312.551110][ T48] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 312.560568][ T48] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 312.568798][ T48] usb 3-1: Product: syz [ 312.573133][ T48] usb 3-1: Manufacturer: syz [ 312.577771][ T48] usb 3-1: SerialNumber: syz [ 312.586913][ T48] usb 3-1: config 0 descriptor?? [ 312.642531][ T5995] ims_pcu 7-1:2.0: Union descriptor too short (2 vs 5) [ 312.649736][ T5995] ims_pcu 7-1:2.0: probe with driver ims_pcu failed with error -22 [ 312.660514][ T5995] usb 7-1: USB disconnect, device number 8 [ 312.999174][ T48] gs_usb 3-1:0.0: Configuring for 241 interfaces [ 313.006001][ T48] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 313.018521][ T48] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 313.211347][ T48] usb 3-1: USB disconnect, device number 105 [ 313.390378][ T9935] netlink: 'syz.5.1060': attribute type 2 has an invalid length. [ 313.399952][ T9935] netlink: 'syz.5.1060': attribute type 2 has an invalid length. [ 313.408828][ T9933] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1059'. [ 313.419488][ T9935] netlink: 'syz.5.1060': attribute type 2 has an invalid length. [ 313.428634][ T9935] netlink: 'syz.5.1060': attribute type 2 has an invalid length. [ 313.432366][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 313.448118][ T9935] netlink: 'syz.5.1060': attribute type 2 has an invalid length. [ 313.458342][ T9935] netlink: 'syz.5.1060': attribute type 2 has an invalid length. [ 313.467600][ T9935] netlink: 'syz.5.1060': attribute type 2 has an invalid length. [ 313.602240][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 313.609416][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.620645][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.630440][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.643337][ T10] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 313.654018][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.665304][ T10] usb 7-1: config 0 descriptor?? [ 313.792373][ T5995] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 313.962120][ T5995] usb 6-1: Using ep0 maxpacket: 16 [ 313.982350][ T5995] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 313.991435][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.000399][ T5995] usb 6-1: Product: syz [ 314.004636][ T5995] usb 6-1: Manufacturer: syz [ 314.009257][ T5995] usb 6-1: SerialNumber: syz [ 314.017926][ T5995] usb 6-1: config 0 descriptor?? [ 314.031143][ T5995] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 314.078525][ T10] hid (null): unknown global tag 0xd [ 314.088406][ T10] shield 0003:0955:7214.0021: unknown global tag 0xd [ 314.095565][ T10] shield 0003:0955:7214.0021: item 0 0 1 13 parsing failed [ 314.103588][ T10] shield 0003:0955:7214.0021: Parse failed [ 314.109458][ T10] shield 0003:0955:7214.0021: probe with driver shield failed with error -22 [ 314.125344][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 314.204381][ T9947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.219770][ T9947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.282083][ T24] usb 3-1: device descriptor read/64, error -71 [ 314.282412][ T9926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.297209][ T9926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.308981][ T48] usb 7-1: USB disconnect, device number 9 [ 314.432911][ T5923] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 314.450111][ T5995] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 314.542676][ T24] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 314.600579][ T5923] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 314.617802][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.632441][ T5923] usb 2-1: config 0 descriptor?? [ 314.639987][ T5923] cp210x 2-1:0.0: cp210x converter detected [ 314.649833][ T10] usb 6-1: USB disconnect, device number 8 [ 314.685642][ T10] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 314.700325][ T10] visor 6-1:0.0: device disconnected [ 314.702467][ T24] usb 3-1: device descriptor read/64, error -71 [ 314.822402][ T24] usb usb3-port1: attempt power cycle [ 314.847587][ T5923] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 314.871099][ T5923] cp210x 2-1:0.0: querying part number failed [ 314.916309][ T5923] usb 2-1: cp210x converter now attached to ttyUSB0 [ 314.948620][ T5923] usb 2-1: USB disconnect, device number 108 [ 314.997407][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 315.017712][ T5923] cp210x 2-1:0.0: device disconnected [ 315.026493][ T9967] program syz.6.1065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.191698][ T24] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 315.245959][ T24] usb 3-1: device descriptor read/8, error -71 [ 315.379990][ T9976] could not allocate digest TFM handle sha512-avx [ 315.525084][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 315.572415][ T24] usb 3-1: device descriptor read/8, error -71 [ 315.666403][ T9990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.674281][ T9990] IPv6: NLM_F_CREATE should be set when creating new route [ 315.681586][ T9990] IPv6: NLM_F_CREATE should be set when creating new route [ 315.688813][ T9990] IPv6: NLM_F_CREATE should be set when creating new route [ 315.706733][ T24] usb usb3-port1: unable to enumerate USB device [ 315.719797][ T9994] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 316.113678][ T5868] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 316.295333][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 316.309752][ T5868] usb 7-1: config index 0 descriptor too short (expected 5156, got 36) [ 316.332782][ T5868] usb 7-1: config 166 has too many interfaces: 236, using maximum allowed: 32 [ 316.373402][ T5868] usb 7-1: config 166 has an invalid descriptor of length 238, skipping remainder of the config [ 316.392968][ T5868] usb 7-1: config 166 has 0 interfaces, different from the descriptor's value: 236 [ 316.437816][ T5868] usb 7-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 316.458316][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=245, SerialNumber=3 [ 316.490862][ T5868] usb 7-1: Product: syz [ 316.508440][ T5868] usb 7-1: Manufacturer: syz [ 316.530793][ T5868] usb 7-1: SerialNumber: syz [ 316.850862][ T3526] Bluetooth: hci5: Frame reassembly failed (-84) [ 316.871212][T10001] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1071'. [ 316.881445][T10001] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1071'. [ 316.897580][T10001] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1071'. [ 317.229410][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.740590][ T5923] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 317.840572][ T980] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 317.917468][ T5923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.950186][ T5923] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 317.965239][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.982006][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.000370][ T980] usb 6-1: device descriptor read/64, error -71 [ 318.013346][T10050] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 318.041479][ T5923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 318.239924][ T980] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 318.239980][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.261232][ T5923] usb 3-1: USB disconnect, device number 110 [ 318.272861][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.409928][ T980] usb 6-1: device descriptor read/64, error -71 [ 318.489852][ T48] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 318.530161][ T980] usb usb6-port1: attempt power cycle [ 318.673220][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.686791][ T48] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=b1.f8 [ 318.696294][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.704459][ T48] usb 2-1: Product: syz [ 318.708929][ T48] usb 2-1: Manufacturer: syz [ 318.713707][ T48] usb 2-1: SerialNumber: syz [ 318.722106][ T48] usb 2-1: config 0 descriptor?? [ 318.858678][T10087] syzkaller1: entered promiscuous mode [ 318.864474][T10087] syzkaller1: entered allmulticast mode [ 318.871300][ T980] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 318.900691][ T5870] Bluetooth: hci5: command 0x1003 tx timeout [ 318.908297][ T5875] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 318.936465][ T980] usb 6-1: device descriptor read/8, error -71 [ 318.938705][ T48] usb 2-1: Cannot retrieve CPort count: -71 [ 318.960355][ T48] usb 2-1: Cannot retrieve CPort count: -71 [ 318.968526][ T48] es2_ap_driver 2-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 318.992393][ T48] usb 2-1: USB disconnect, device number 109 [ 319.020488][ T5868] usb 7-1: USB disconnect, device number 10 [ 319.229735][ T980] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 319.240808][T10098] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1087'. [ 319.285010][ T980] usb 6-1: device descriptor read/8, error -71 [ 319.420094][ T980] usb usb6-port1: unable to enumerate USB device [ 319.430052][ T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 319.589643][ T5923] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 319.620399][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.639191][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.655081][ T24] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 319.664328][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.681009][ T24] usb 3-1: config 0 descriptor?? [ 319.739341][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 319.757526][ T5923] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 319.769533][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 319.781554][ T980] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 319.789349][ T5923] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 319.804709][ T5923] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 319.830380][ T5923] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 319.843188][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.851295][ T5923] usb 7-1: Product: syz [ 319.855470][ T5923] usb 7-1: Manufacturer: syz [ 319.865648][ T5923] usb 7-1: SerialNumber: syz [ 319.882765][ T5923] usb 7-1: config 0 descriptor?? [ 319.888516][T10103] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 319.909379][T10103] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 319.933621][ T5923] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 319.933746][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 319.933908][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 319.971385][T10120] fuseblk: Bad value for 'user_id' [ 319.971428][T10120] fuseblk: Bad value for 'user_id' [ 319.978693][ T980] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 320.014776][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.040114][ T980] usb 2-1: config 0 descriptor?? [ 320.072446][ T980] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 320.111741][ T24] usb 3-1: string descriptor 0 read error: -71 [ 320.145573][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.146432][ T24] usb 3-1: USB disconnect, device number 111 [ 320.176450][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.203087][ T5923] usb 7-1: USB disconnect, device number 11 [ 320.221389][ T5923] mcba_usb 7-1:0.0 can0: device disconnected [ 320.257113][ T980] gp8psk: usb in 128 operation failed. [ 320.314645][T10133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.466567][ T980] gp8psk: usb in 146 operation failed. [ 320.476645][ T980] gp8psk: failed to get FW version [ 320.488845][ T980] gp8psk: usb in 149 operation failed. [ 320.494350][ T980] gp8psk: failed to get FPGA version [ 320.517762][ T980] gp8psk: usb in 138 operation failed. [ 320.528422][ T980] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 320.539377][ T980] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 320.566821][ T980] usb 2-1: USB disconnect, device number 110 [ 321.024394][ T30] audit: type=1326 audit(1757234322.934:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10165 comm="syz.2.1099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff76998ebe9 code=0x0 [ 321.081011][T10172] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1100'. [ 321.253585][T10177] syzkaller1: entered promiscuous mode [ 321.266404][T10166] [ 321.268765][T10166] ====================================================== [ 321.275792][T10166] WARNING: possible circular locking dependency detected [ 321.282838][T10166] syzkaller #0 Not tainted [ 321.287263][T10166] ------------------------------------------------------ [ 321.294287][T10166] syz.2.1099/10166 is trying to acquire lock: [ 321.300358][T10166] ffffffff8e642920 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710 [ 321.310224][T10166] [ 321.310224][T10166] but task is already holding lock: [ 321.317605][T10166] ffffffff8fcbb888 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 321.328171][T10166] [ 321.328171][T10166] which lock already depends on the new lock. [ 321.328171][T10166] [ 321.338564][T10166] [ 321.338564][T10166] the existing dependency chain (in reverse order) is: [ 321.347564][T10166] [ 321.347564][T10166] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 321.355378][T10166] lock_acquire+0x120/0x360 [ 321.360395][T10166] __mutex_lock+0x187/0x1350 [ 321.365522][T10166] kobject_uevent_net_broadcast+0x27e/0x560 [ 321.371929][T10166] kobject_uevent_env+0x55b/0x8c0 [ 321.377467][T10166] device_add+0x557/0xb50 [ 321.382307][T10166] device_create+0x25b/0x2f0 [ 321.387411][T10166] msr_device_create+0x33/0x50 [ 321.392692][T10166] cpuhp_invoke_callback+0x442/0x860 [ 321.398490][T10166] cpuhp_thread_fun+0x3f4/0x850 [ 321.403855][T10166] smpboot_thread_fn+0x542/0xa60 [ 321.409301][T10166] kthread+0x70e/0x8a0 [ 321.413883][T10166] ret_from_fork+0x47c/0x820 [ 321.418983][T10166] ret_from_fork_asm+0x1a/0x30 [ 321.424259][T10166] [ 321.424259][T10166] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 321.431808][T10166] lock_acquire+0x120/0x360 [ 321.437605][T10166] cpuhp_thread_fun+0x182/0x850 [ 321.442971][T10166] smpboot_thread_fn+0x542/0xa60 [ 321.448425][T10166] kthread+0x70e/0x8a0 [ 321.453008][T10166] ret_from_fork+0x47c/0x820 [ 321.458108][T10166] ret_from_fork_asm+0x1a/0x30 [ 321.463385][T10166] [ 321.463385][T10166] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 321.471127][T10166] lock_acquire+0x120/0x360 [ 321.476154][T10166] cpus_read_lock+0x42/0x160 [ 321.481254][T10166] static_key_slow_inc+0x12/0x30 [ 321.486704][T10166] tcp_md5_do_add+0x21f/0x3a0 [ 321.491894][T10166] tcp_v4_parse_md5_keys+0x412/0x600 [ 321.497780][T10166] do_tcp_setsockopt+0x11dc/0x1f20 [ 321.503405][T10166] do_sock_setsockopt+0x179/0x1b0 [ 321.508937][T10166] __x64_sys_setsockopt+0x13f/0x1b0 [ 321.514650][T10166] do_syscall_64+0xfa/0xfa0 [ 321.519671][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.526076][T10166] [ 321.526076][T10166] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 321.533820][T10166] lock_acquire+0x120/0x360 [ 321.538837][T10166] lock_sock_nested+0x48/0x100 [ 321.544117][T10166] inet_sendmsg+0x108/0x370 [ 321.549136][T10166] __sock_sendmsg+0x19c/0x270 [ 321.554322][T10166] sock_sendmsg+0x158/0x230 [ 321.559338][T10166] __sock_xmit+0x1c1/0x470 [ 321.564262][T10166] nbd_send_cmd+0x863/0x1ba0 [ 321.569358][T10166] nbd_queue_rq+0xcdb/0xf10 [ 321.574369][T10166] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 321.580442][T10166] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 321.587287][T10166] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 321.593783][T10166] blk_mq_run_hw_queue+0x348/0x4f0 [ 321.599406][T10166] blk_mq_dispatch_list+0xd0c/0xe00 [ 321.605120][T10166] blk_mq_flush_plug_list+0x469/0x550 [ 321.611006][T10166] __blk_flush_plug+0x3d3/0x4b0 [ 321.616374][T10166] __submit_bio+0x2d3/0x5a0 [ 321.621388][T10166] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 321.627569][T10166] block_read_full_folio+0x7b7/0x830 [ 321.633374][T10166] filemap_read_folio+0x114/0x380 [ 321.638933][T10166] do_read_cache_folio+0x350/0x590 [ 321.644667][T10166] read_part_sector+0xb6/0x2b0 [ 321.649955][T10166] adfspart_check_ICS+0xa4/0xa50 [ 321.655427][T10166] bdev_disk_changed+0x75c/0x14b0 [ 321.660974][T10166] blkdev_get_whole+0x380/0x510 [ 321.666345][T10166] bdev_open+0x31e/0xd30 [ 321.671103][T10166] blkdev_open+0x457/0x600 [ 321.676120][T10166] do_dentry_open+0x950/0x13f0 [ 321.681409][T10166] vfs_open+0x3b/0x340 [ 321.686054][T10166] path_openat+0x2ee5/0x3830 [ 321.691160][T10166] do_filp_open+0x1fa/0x410 [ 321.696179][T10166] do_sys_openat2+0x121/0x1c0 [ 321.701360][T10166] __x64_sys_openat+0x138/0x170 [ 321.706715][T10166] do_syscall_64+0xfa/0xfa0 [ 321.711724][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.718125][T10166] [ 321.718125][T10166] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 321.725765][T10166] lock_acquire+0x120/0x360 [ 321.730782][T10166] __mutex_lock+0x187/0x1350 [ 321.735880][T10166] nbd_queue_rq+0x257/0xf10 [ 321.740892][T10166] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 321.746973][T10166] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 321.753823][T10166] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 321.760322][T10166] blk_mq_run_hw_queue+0x348/0x4f0 [ 321.765943][T10166] blk_mq_dispatch_list+0xd0c/0xe00 [ 321.771658][T10166] blk_mq_flush_plug_list+0x469/0x550 [ 321.777545][T10166] __blk_flush_plug+0x3d3/0x4b0 [ 321.782920][T10166] __submit_bio+0x2d3/0x5a0 [ 321.787927][T10166] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 321.794075][T10166] block_read_full_folio+0x7b7/0x830 [ 321.799881][T10166] filemap_read_folio+0x114/0x380 [ 321.805419][T10166] do_read_cache_folio+0x350/0x590 [ 321.811043][T10166] read_part_sector+0xb6/0x2b0 [ 321.816322][T10166] adfspart_check_ICS+0xa4/0xa50 [ 321.821780][T10166] bdev_disk_changed+0x75c/0x14b0 [ 321.827341][T10166] blkdev_get_whole+0x380/0x510 [ 321.832735][T10166] bdev_open+0x31e/0xd30 [ 321.837498][T10166] blkdev_open+0x457/0x600 [ 321.842504][T10166] do_dentry_open+0x950/0x13f0 [ 321.847873][T10166] vfs_open+0x3b/0x340 [ 321.852464][T10166] path_openat+0x2ee5/0x3830 [ 321.857570][T10166] do_filp_open+0x1fa/0x410 [ 321.862587][T10166] do_sys_openat2+0x121/0x1c0 [ 321.867771][T10166] __x64_sys_openat+0x138/0x170 [ 321.873131][T10166] do_syscall_64+0xfa/0xfa0 [ 321.878149][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.884556][T10166] [ 321.884556][T10166] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 321.891761][T10166] lock_acquire+0x120/0x360 [ 321.896778][T10166] __mutex_lock+0x187/0x1350 [ 321.901879][T10166] nbd_queue_rq+0xc8/0xf10 [ 321.906805][T10166] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 321.912871][T10166] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 321.919718][T10166] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 321.926221][T10166] blk_mq_run_hw_queue+0x348/0x4f0 [ 321.931855][T10166] blk_mq_dispatch_list+0xd0c/0xe00 [ 321.937570][T10166] blk_mq_flush_plug_list+0x469/0x550 [ 321.943466][T10166] __blk_flush_plug+0x3d3/0x4b0 [ 321.948841][T10166] __submit_bio+0x2d3/0x5a0 [ 321.953882][T10166] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 321.960047][T10166] block_read_full_folio+0x7b7/0x830 [ 321.965901][T10166] filemap_read_folio+0x114/0x380 [ 321.971487][T10166] do_read_cache_folio+0x350/0x590 [ 321.977125][T10166] read_part_sector+0xb6/0x2b0 [ 321.982404][T10166] adfspart_check_ICS+0xa4/0xa50 [ 321.987857][T10166] bdev_disk_changed+0x75c/0x14b0 [ 321.993410][T10166] blkdev_get_whole+0x380/0x510 [ 321.998780][T10166] bdev_open+0x31e/0xd30 [ 322.003540][T10166] blkdev_open+0x457/0x600 [ 322.008463][T10166] do_dentry_open+0x950/0x13f0 [ 322.013744][T10166] vfs_open+0x3b/0x340 [ 322.018327][T10166] path_openat+0x2ee5/0x3830 [ 322.023444][T10166] do_filp_open+0x1fa/0x410 [ 322.028457][T10166] do_sys_openat2+0x121/0x1c0 [ 322.033642][T10166] __x64_sys_openat+0x138/0x170 [ 322.039000][T10166] do_syscall_64+0xfa/0xfa0 [ 322.044010][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.050415][T10166] [ 322.050415][T10166] -> #3 (set->srcu){.+.+}-{0:0}: [ 322.057532][T10166] lock_sync+0xba/0x160 [ 322.062201][T10166] __synchronize_srcu+0x96/0x3a0 [ 322.067652][T10166] elevator_switch+0x12b/0x640 [ 322.072931][T10166] elevator_change+0x2d4/0x450 [ 322.078211][T10166] elevator_set_default+0x186/0x260 [ 322.083926][T10166] blk_register_queue+0x34e/0x3f0 [ 322.089460][T10166] __add_disk+0x677/0xd50 [ 322.094297][T10166] add_disk_fwnode+0xfc/0x480 [ 322.099485][T10166] nbd_dev_add+0x717/0xae0 [ 322.104418][T10166] nbd_init+0x168/0x1f0 [ 322.109084][T10166] do_one_initcall+0x233/0x820 [ 322.114357][T10166] do_initcall_level+0x104/0x190 [ 322.119809][T10166] do_initcalls+0x59/0xa0 [ 322.124653][T10166] kernel_init_freeable+0x334/0x4b0 [ 322.130365][T10166] kernel_init+0x1d/0x1d0 [ 322.135209][T10166] ret_from_fork+0x47c/0x820 [ 322.140309][T10166] ret_from_fork_asm+0x1a/0x30 [ 322.145591][T10166] [ 322.145591][T10166] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 322.153405][T10166] lock_acquire+0x120/0x360 [ 322.158428][T10166] __mutex_lock+0x187/0x1350 [ 322.163526][T10166] elevator_change+0x19b/0x450 [ 322.168804][T10166] elevator_set_none+0x42/0xb0 [ 322.174096][T10166] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 322.180410][T10166] nbd_start_device+0x17f/0xb10 [ 322.185767][T10166] nbd_genl_connect+0x135b/0x18f0 [ 322.191412][T10166] genl_family_rcv_msg_doit+0x212/0x300 [ 322.197473][T10166] genl_rcv_msg+0x60e/0x790 [ 322.202519][T10166] netlink_rcv_skb+0x208/0x470 [ 322.207819][T10166] genl_rcv+0x28/0x40 [ 322.212325][T10166] netlink_unicast+0x82c/0x9e0 [ 322.217603][T10166] netlink_sendmsg+0x805/0xb30 [ 322.222877][T10166] __sock_sendmsg+0x219/0x270 [ 322.228067][T10166] ____sys_sendmsg+0x505/0x830 [ 322.233340][T10166] ___sys_sendmsg+0x21f/0x2a0 [ 322.238530][T10166] __x64_sys_sendmsg+0x19b/0x260 [ 322.244004][T10166] do_syscall_64+0xfa/0xfa0 [ 322.249017][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.255422][T10166] [ 322.255422][T10166] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 322.264033][T10166] lock_acquire+0x120/0x360 [ 322.269063][T10166] blk_alloc_queue+0x538/0x620 [ 322.274346][T10166] __blk_mq_alloc_disk+0x15c/0x340 [ 322.279972][T10166] nbd_dev_add+0x46c/0xae0 [ 322.284907][T10166] nbd_init+0x168/0x1f0 [ 322.289576][T10166] do_one_initcall+0x233/0x820 [ 322.294850][T10166] do_initcall_level+0x104/0x190 [ 322.300306][T10166] do_initcalls+0x59/0xa0 [ 322.305156][T10166] kernel_init_freeable+0x334/0x4b0 [ 322.310867][T10166] kernel_init+0x1d/0x1d0 [ 322.315707][T10166] ret_from_fork+0x47c/0x820 [ 322.320810][T10166] ret_from_fork_asm+0x1a/0x30 [ 322.326084][T10166] [ 322.326084][T10166] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 322.333287][T10166] validate_chain+0xb9b/0x2140 [ 322.338563][T10166] __lock_acquire+0xab9/0xd20 [ 322.343757][T10166] lock_acquire+0x120/0x360 [ 322.348771][T10166] fs_reclaim_acquire+0x72/0x100 [ 322.354223][T10166] kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.360538][T10166] __alloc_skb+0x112/0x2d0 [ 322.365465][T10166] alloc_uevent_skb+0x7d/0x230 [ 322.370743][T10166] kobject_uevent_net_broadcast+0x2fa/0x560 [ 322.377158][T10166] kobject_uevent_env+0x55b/0x8c0 [ 322.382695][T10166] set_disk_ro+0x19e/0x1f0 [ 322.387713][T10166] nbd_start_device+0x272/0xb10 [ 322.393081][T10166] nbd_genl_connect+0x135b/0x18f0 [ 322.398627][T10166] genl_family_rcv_msg_doit+0x212/0x300 [ 322.404684][T10166] genl_rcv_msg+0x60e/0x790 [ 322.409700][T10166] netlink_rcv_skb+0x208/0x470 [ 322.414993][T10166] genl_rcv+0x28/0x40 [ 322.419486][T10166] netlink_unicast+0x82c/0x9e0 [ 322.424766][T10166] netlink_sendmsg+0x805/0xb30 [ 322.430033][T10166] __sock_sendmsg+0x219/0x270 [ 322.435221][T10166] ____sys_sendmsg+0x505/0x830 [ 322.440498][T10166] ___sys_sendmsg+0x21f/0x2a0 [ 322.445684][T10166] __x64_sys_sendmsg+0x19b/0x260 [ 322.451133][T10166] do_syscall_64+0xfa/0xfa0 [ 322.456164][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.462567][T10166] [ 322.462567][T10166] other info that might help us debug this: [ 322.462567][T10166] [ 322.472786][T10166] Chain exists of: [ 322.472786][T10166] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 322.472786][T10166] [ 322.485473][T10166] Possible unsafe locking scenario: [ 322.485473][T10166] [ 322.492938][T10166] CPU0 CPU1 [ 322.498288][T10166] ---- ---- [ 322.503639][T10166] lock(uevent_sock_mutex); [ 322.508220][T10166] lock(cpuhp_state-up); [ 322.515058][T10166] lock(uevent_sock_mutex); [ 322.522160][T10166] lock(fs_reclaim); [ 322.526135][T10166] [ 322.526135][T10166] *** DEADLOCK *** [ 322.526135][T10166] [ 322.534262][T10166] 4 locks held by syz.2.1099/10166: [ 322.539466][T10166] #0: ffffffff8f9b8e50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.547648][T10166] #1: ffffffff8f9b8c68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.556619][T10166] #2: ffff888143728a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_start_device+0x189/0xb10 [ 322.566624][T10166] #3: ffffffff8fcbb888 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 322.577588][T10166] [ 322.577588][T10166] stack backtrace: [ 322.583480][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.2.1099 Not tainted syzkaller #0 PREEMPT(full) [ 322.583500][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.583517][T10166] Call Trace: [ 322.583525][T10166] [ 322.583533][T10166] dump_stack_lvl+0x189/0x250 [ 322.583552][T10166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.583566][T10166] ? __pfx__printk+0x10/0x10 [ 322.583590][T10166] ? print_lock_name+0xde/0x100 [ 322.583613][T10166] print_circular_bug+0x2ee/0x310 [ 322.583635][T10166] check_noncircular+0x134/0x160 [ 322.583658][T10166] validate_chain+0xb9b/0x2140 [ 322.583680][T10166] ? __lock_acquire+0xab9/0xd20 [ 322.583700][T10166] ? __mutex_trylock_common+0x153/0x260 [ 322.583722][T10166] __lock_acquire+0xab9/0xd20 [ 322.583746][T10166] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.583762][T10166] lock_acquire+0x120/0x360 [ 322.583778][T10166] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.583796][T10166] ? __lock_acquire+0xab9/0xd20 [ 322.583814][T10166] fs_reclaim_acquire+0x72/0x100 [ 322.583832][T10166] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.583848][T10166] kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.583864][T10166] ? __alloc_skb+0x112/0x2d0 [ 322.583881][T10166] __alloc_skb+0x112/0x2d0 [ 322.583901][T10166] alloc_uevent_skb+0x7d/0x230 [ 322.583922][T10166] kobject_uevent_net_broadcast+0x2fa/0x560 [ 322.583942][T10166] kobject_uevent_env+0x55b/0x8c0 [ 322.583962][T10166] set_disk_ro+0x19e/0x1f0 [ 322.583980][T10166] ? __pfx_set_disk_ro+0x10/0x10 [ 322.584003][T10166] nbd_start_device+0x272/0xb10 [ 322.584020][T10166] ? device_create_file+0xf4/0x1c0 [ 322.584037][T10166] nbd_genl_connect+0x135b/0x18f0 [ 322.584063][T10166] ? __pfx_nbd_genl_connect+0x10/0x10 [ 322.584088][T10166] ? rcu_is_watching+0x15/0xb0 [ 322.584109][T10166] ? __nla_parse+0x40/0x60 [ 322.584131][T10166] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 322.584155][T10166] genl_family_rcv_msg_doit+0x212/0x300 [ 322.584178][T10166] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 322.584202][T10166] ? stack_trace_save+0x9c/0xe0 [ 322.584226][T10166] genl_rcv_msg+0x60e/0x790 [ 322.584247][T10166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.584265][T10166] ? __pfx_nbd_genl_connect+0x10/0x10 [ 322.584292][T10166] netlink_rcv_skb+0x208/0x470 [ 322.584315][T10166] ? __lock_acquire+0xab9/0xd20 [ 322.584336][T10166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.584355][T10166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.584384][T10166] ? down_read+0x1ad/0x2e0 [ 322.584403][T10166] genl_rcv+0x28/0x40 [ 322.584420][T10166] netlink_unicast+0x82c/0x9e0 [ 322.584444][T10166] ? __pfx_netlink_unicast+0x10/0x10 [ 322.584466][T10166] ? netlink_sendmsg+0x642/0xb30 [ 322.584481][T10166] ? skb_put+0x11b/0x210 [ 322.584496][T10166] netlink_sendmsg+0x805/0xb30 [ 322.584515][T10166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.584531][T10166] ? aa_sock_msg_perm+0xf1/0x1d0 [ 322.584554][T10166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.584576][T10166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.584591][T10166] __sock_sendmsg+0x219/0x270 [ 322.584613][T10166] ____sys_sendmsg+0x505/0x830 [ 322.584631][T10166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.584651][T10166] ? import_iovec+0x74/0xa0 [ 322.584668][T10166] ___sys_sendmsg+0x21f/0x2a0 [ 322.584685][T10166] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.584714][T10166] ? __fget_files+0x2a/0x420 [ 322.584740][T10166] ? __fget_files+0x3a0/0x420 [ 322.584764][T10166] __x64_sys_sendmsg+0x19b/0x260 [ 322.584782][T10166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.584805][T10166] ? do_syscall_64+0xbe/0xfa0 [ 322.584820][T10166] do_syscall_64+0xfa/0xfa0 [ 322.584835][T10166] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.584849][T10166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.584865][T10166] ? clear_bhb_loop+0x60/0xb0 [ 322.584882][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.584898][T10166] RIP: 0033:0x7ff76998ebe9 [ 322.584920][T10166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.584935][T10166] RSP: 002b:00007ff76a825038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.584952][T10166] RAX: ffffffffffffffda RBX: 00007ff769bc5fa0 RCX: 00007ff76998ebe9 [ 322.584965][T10166] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 322.584976][T10166] RBP: 00007ff769a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 322.584986][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.584996][T10166] R13: 00007ff769bc6038 R14: 00007ff769bc5fa0 R15: 00007ffde3951578 [ 322.585014][T10166] [ 322.591371][T10177] syzkaller1: entered allmulticast mode [ 322.623697][ T5875] block nbd0: Receive control failed (result -32) [ 322.678553][ T5870] block nbd0: Receive control failed (result -32) [ 323.057789][ T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 323.069808][T10166] nbd0: detected capacity change from 0 to 127 [ 323.076867][ T5877] block nbd0: Dead connection, failed to find a fallback [ 323.085104][ T5877] block nbd0: shutting down sockets [ 323.090515][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.099649][ T5877] buffer_io_error: 56 callbacks suppressed [ 323.099664][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 323.113425][ T5877] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.123890][ T5877] Buffer I/O error on dev nbd0, logical block 1, async page read [ 323.131876][ T5877] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.141393][ T5877] Buffer I/O error on dev nbd0, logical block 2, async page read [ 323.149389][ T5877] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.158657][ T5877] Buffer I/O error on dev nbd0, logical block 3, async page read [ 323.166533][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.176851][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 323.184840][ T5877] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.193891][ T5877] Buffer I/O error on dev nbd0, logical block 1, async page read [ 323.201790][ T5877] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.210895][ T5877] Buffer I/O error on dev nbd0, logical block 2, async page read [ 323.217419][ T48] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 323.218855][ T5877] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.235207][ T5877] Buffer I/O error on dev nbd0, logical block 3, async page read [ 323.237934][ T24] usb 2-1: device descriptor read/64, error -71 [ 323.243220][ T5877] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.258403][ T5877] Buffer I/O error on dev nbd0, logical block 0, async page read [ 323.266304][ T5877] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.276670][ T5877] Buffer I/O error on dev nbd0, logical block 1, async page read [ 323.286363][ T5877] ldm_validate_partition_table(): Disk read failed. [ 323.293776][ T5877] Dev nbd0: unable to read RDB block 0 [ 323.300182][ T5877] nbd0: unable to read partition table [ 323.309589][ T5877] ldm_validate_partition_table(): Disk read failed. [ 323.316988][ T5877] Dev nbd0: unable to read RDB block 0 [ 323.323478][ T5877] nbd0: unable to read partition table [ 323.387558][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 323.394389][ T48] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 323.404970][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 323.416060][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 323.429176][ T48] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 323.438233][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.446228][ T48] usb 7-1: Product: syz [ 323.450424][ T48] usb 7-1: Manufacturer: syz [ 323.455017][ T48] usb 7-1: SerialNumber: syz [ 323.460582][ T48] usb 7-1: config 0 descriptor?? [ 323.466001][T10181] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 323.497435][ T24] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 323.627292][ T24] usb 2-1: device descriptor read/64, error -71 [ 323.677529][ T983] usb 7-1: USB disconnect, device number 12 [ 323.737638][ T24] usb usb2-port1: attempt power cycle [ 324.087020][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 324.114419][ T24] usb 2-1: device descriptor read/8, error -71