last executing test programs: 3m35.875143555s ago: executing program 0 (id=1): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, 0x42, 0x107, 0xfffffffe, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1a, 0xae, 0x0, 0x1, [@generic, @generic="a6f72707", @generic="cd7a9bfd147aa595b1557372e6de", @typed={0x4, 0xf6}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r4, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r5, r6}}, './file0\x00'}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x8, 0x7) write$FUSE_ENTRY(r4, &(0x7f0000000100)={0x90, 0x0, 0x0, {0x0, 0x0, 0x7ff, 0x400, 0xffffffff, 0x70, {0x4, 0x8000, 0x3ff, 0x3, 0x0, 0xe, 0x9, 0x8, 0xffff, 0x2000, 0x80000001, r7, r6, 0x9, 0x10}}}, 0x90) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 3m35.525402271s ago: executing program 0 (id=10): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x40, 0x19ef, 0x4, 0x3, 0x2800, 0x1002800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "23f89556"}]}}, 0x0}, 0x0) 3m35.051870683s ago: executing program 0 (id=12): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000240)="02844c94a28f6b6301c916c66b57f7cf7e25dbd6630f6d8c5279fdddf5e306b84800d322ce352da84319cbe699ff5e02272384817307290f93cbe91e96b924e53d857ecdffc3ea4f7a302c37c4ec30fab75279d3"}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x98, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1040}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/30, 0x1e, 0x1, 0x2d}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002180)={0xc, 0x0, &(0x7f0000002140)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 3m34.724194007s ago: executing program 32 (id=12): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000240)="02844c94a28f6b6301c916c66b57f7cf7e25dbd6630f6d8c5279fdddf5e306b84800d322ce352da84319cbe699ff5e02272384817307290f93cbe91e96b924e53d857ecdffc3ea4f7a302c37c4ec30fab75279d3"}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x98, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1040}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/30, 0x1e, 0x1, 0x2d}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002180)={0xc, 0x0, &(0x7f0000002140)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 1m50.483962001s ago: executing program 1 (id=635): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) (async) r0 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) capset(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)={0x8001, 0x92a, 0x7, 0xd1bd, 0x0, 0x29}) 1m50.456664545s ago: executing program 1 (id=637): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000015c0)={&(0x7f0000001580)=[{0x1, 0x4200, 0x0, 0x0}, {0x1ff, 0xa800, 0x0, 0x0}], 0x2}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bf079c3ad6226232eddc0ee98d5dbed6ccea44753b7c05daea53e61e657eaa7c57ae55f886400000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x1c, &(0x7f0000000380)}, 0x101}], 0x4, 0x40010022, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="100025bd7000fcdbdf250200000008000400006e0000a68197d079"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20000800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r6, &(0x7f0000001400)=""/4076, 0xfffffeea) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 1m47.202527841s ago: executing program 1 (id=667): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r0, 0xfffff000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x50, 0xf2, 0xb7, 0x68, 0x8, 0x5e3, 0x503, 0xe559, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x5, 0x94, 0xf0, 0x7, [{{0x9, 0x4, 0xc5, 0x9, 0x0, 0xff, 0x76, 0xef, 0x8}}, {{0x9, 0x4, 0xae, 0x7f, 0x0, 0x3, 0xc7, 0x2, 0x8}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 1m43.934928209s ago: executing program 1 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, r2, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r11, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) recvfrom(0xffffffffffffffff, &(0x7f0000000ac0)=""/4096, 0x1000, 0x10100, 0x0, 0x0) 1m42.462819588s ago: executing program 1 (id=689): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5434, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0xfff7, 0x7, 0x3b, 0x9, 0x4, "b3bdb51ef3447e15"}) 1m42.37568611s ago: executing program 1 (id=690): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x9e, 0x40, 0x7]}, &(0x7f0000000040)=0xa) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}]}}) 1m42.175988492s ago: executing program 33 (id=690): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x9e, 0x40, 0x7]}, &(0x7f0000000040)=0xa) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}]}}) 5.418907586s ago: executing program 4 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @loopback}], 0x20) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x0, {"402c9e3f4881400de52a28ea030e9999"}}}}, 0xa0) 5.309905668s ago: executing program 4 (id=1356): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5, 0xc0, 0x7f, 0x3, 0x80000001, 0x963, 0x0, 0x0, 0x4, 0x10001}}, 0x50) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 5.18783598s ago: executing program 4 (id=1357): syz_usb_connect(0x0, 0x2d, &(0x7f0000000b80)=ANY=[@ANYRESDEC], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x79cb, &(0x7f00000000c0)={0x0, 0x8430, 0x10000, 0x2, 0x293}, &(0x7f0000000040), 0x0) syz_clone(0x8a042400, 0x0, 0x0, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de030100c0"]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x2, &(0x7f0000000000)="8b820a00b47dc00a4f796e3ea07cb7c50084ac6cc55a1614ed47533483183efda878d93fc4f5b8e9292ad4de4af26a16a2202cb93d472deebc4ee534b54161f8abe4e0fc34c8a7ca711d7366e70370deded88ddf42d4880367ceb99e9789b19e960b40d5927e73ece61a0b73e081a26701507c928ac375787bb769cd72170d8e3b32e316188b2b87fadfef3a62112a42d1014b925e7ba6fcf6cacd927368a8aa2847625b484b3ac04277368409c85c11") 3.398485024s ago: executing program 2 (id=1375): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000700000000180004801300646361d6d1faa198d1c8d9f15dfa66f09c7388b2492cdc2214fe1f71bd0dde4edffcd6f7854a89456f33ce342a4f08d039a71c0729f0c4f593b9e6fa73825c3e6a46ce4e3336c8633c322d1caf374c0da2c1f1037d215595888e14768a3603c9f1d8ee892978c18c7932ded7b6d55488"], 0x2c}}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x4d}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40084) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000180)={0x1000, 0x0, "bfa9d3a8e0111abf46d83648e1223d2257f1aae247cfda6dcd92143779f6fcccf6176d59539352f582635dad90898a1880409f142f64a86a1568c9ef7f5021539c7706496295f8b9f155c157cd9c5f34283d1b09ec3d94b4352d8278899b1750caa6ec5155ea0eb182a436de1ef436171da1a97d01824850d5f14420975ef76ae489ce95fb85e02f289a5c6c9a21cd9c2fbb5c9a1fbcb4b7cfac545526b7a4196863d4c6f029e68020d849598c7884655205477d60beafe55164133bd8a7b2fafb40a6708cb99758f12f83ebf3d286abf1fa3eb4ee6a699477020647d8c93a8a5726c9492efea4316ffc567e3866bcc877e06105eb663f326328bb771f0b5763"}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) (async) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000700000000180004801300646361d6d1faa198d1c8d9f15dfa66f09c7388b2492cdc2214fe1f71bd0dde4edffcd6f7854a89456f33ce342a4f08d039a71c0729f0c4f593b9e6fa73825c3e6a46ce4e3336c8633c322d1caf374c0da2c1f1037d215595888e14768a3603c9f1d8ee892978c18c7932ded7b6d55488"], 0x2c}}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x4d}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40084) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000180)={0x1000, 0x0, "bfa9d3a8e0111abf46d83648e1223d2257f1aae247cfda6dcd92143779f6fcccf6176d59539352f582635dad90898a1880409f142f64a86a1568c9ef7f5021539c7706496295f8b9f155c157cd9c5f34283d1b09ec3d94b4352d8278899b1750caa6ec5155ea0eb182a436de1ef436171da1a97d01824850d5f14420975ef76ae489ce95fb85e02f289a5c6c9a21cd9c2fbb5c9a1fbcb4b7cfac545526b7a4196863d4c6f029e68020d849598c7884655205477d60beafe55164133bd8a7b2fafb40a6708cb99758f12f83ebf3d286abf1fa3eb4ee6a699477020647d8c93a8a5726c9492efea4316ffc567e3866bcc877e06105eb663f326328bb771f0b5763"}) (async) 3.360820481s ago: executing program 2 (id=1376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x0, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x1, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0x3, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x0, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x2, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='pstore\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e22, 0x3, 'nq\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}, @SEG6_ATTR_ALGID={0x5}]}, 0x38}}, 0x20048815) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x0, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x1, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0x3, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x0, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x2, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='pstore\x00', 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e22, 0x3, 'nq\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) (async) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}, @SEG6_ATTR_ALGID={0x5}]}, 0x38}}, 0x20048815) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) (async) 3.239986485s ago: executing program 2 (id=1377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000247000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000323000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x2000000, 0x0, "f700", '\x00', "030200", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffbdae00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000100)={0x1}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(0x3) 2.638705225s ago: executing program 2 (id=1385): syz_usb_connect(0x3, 0x3c2, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xe2, 0x34, 0x79, 0x40, 0x12d1, 0xda7c, 0x2038, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8ae, 0x4, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x49, 0x80, 0x1, 0xff, 0x6, 0xa, 0x4, [@hid_hid={0x9, 0x21, 0xfff0, 0xff, 0x1, {0x22, 0x77b}}], [{{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0x0, 0x2d}}]}}, {{0x9, 0x4, 0x7b, 0x6, 0xc, 0x36, 0xff, 0xc7, 0x4, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x7, 0xe, 0x1, [@generic={0xf2, 0xe, "4df03439374b104ba470a07f1b169779087687c12e69ca2bbd1fe1371c914ee914a1b4c770e5efe38aecec8b437350bb6e08909a9fd7cfecc96d89f95d4b206e86bc0c170f22daa9a046f2d2d527d4396e8230bfddf03206528f1600c2b15fcd9b19d7feb17e3c1f9ff83e642b1cbdd2bf9e59b2a53ab5fcdf6f84c80948a1c3c76a24a563d39b59a20ba35ae9a8665fff93c49e45022a135c06527e688fb3422ba5a5263e479d30c1cf124d7af9df6543acef95f5710aaa980fd250d2cc155f22dcb7b556b8e7473ae058d151a44f423ef14c2d2829f03e7643920b86642f29e32115ea39e77e65c13609a05f8395c2"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xf}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x6, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0xc5b9}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x5a, 0x0, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xff13}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xf, 0x0, 0x6, [@generic={0xcf, 0x5, "2f6e6df03f7c6c1439034a7894e83be12a9fa9b9c0133f0ae192cd16664f45983fb01afa2d38ab5858ce44bf4db86b674cd96cca167816eef7f6666c6a91693a72bd4e7f1de6db907c3784c1f12be668a97da85acdeff880170ffb315d2c216b3ec4c5349b601d765c9d665b760a3786647525e896bc7d60b834b2430f90963fa90cc43d706f721e060108fc3c717f069688535c53a9dea61db85e8dd00a1dcbb228d2ec035466af5f347a6b54656f57ca2c3d3aa6382928fe3644b969a264857605722584cb06986d55ab62ae"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x79, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9f, 0x61}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x7f, 0xe, [@generic={0x21, 0x11, "1e6ef429d51c40765ff520adbd0ee098fc961c4ea7aba3c9b27da1576e9358"}, @generic={0x51, 0xb, "68e1c746bc4ffd22f31a7e1ce39bfecf2dee0baab84829d3929d4ed9d532c0f3c4ba17733874b7549446abbbd631a827a7618b91ffe715a6850e4bca238dd5e4fb1fb0e5200d4b57693c790226e347"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x2d, 0xff, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x5, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x6}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x2, 0x15, 0x9}}, {{0x9, 0x5, 0x8, 0x10, 0xff94dc2af67d95c4, 0xe, 0x7, 0x2}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x4, 0x7, 0x6, [@generic={0x65, 0x9, "e1aeed424666dc39993301f8332ea483689a1f7e48178c558ead3dee48b6c83bf3cd13ed3cc4151f95023f5cb3c7f0c42ab7593125a9dd73e775a31364929767ade0ac6953b6786790924fe0dc3ac2a3a5e4df2c7cdd068b4b0f1d9ed8da209c40e5e9"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0xd1, 0xe8, 0xfc}}]}}, {{0x9, 0x4, 0x63, 0x80, 0x0, 0x4e, 0xc7, 0xf4, 0x2, [@generic={0xe4, 0xf, "01c0c6944fcbac5a254d0ac0862e78e81539580723c51810daec84632563c5441ede8cd941ef46e6f83026f697eae50386ea5e99559f9776b4ed963b3ce7d35fa8793f565fac57358d78aa669db0caed56f8fca5fc47215c7cfdb3c240b903b248a6147d78a6699fef5f7e3db31b9c39b69a2deeb57ede5477ad0eb6747578e567f121531212363536722e3c1272c12b84cf927f38a685ff14e87c144b8020ae51dd9c0d05a0164f51d266ec547f713930b33a420a77922a0aab250bbfce06694655c1caf60ec5a773382d04ad3f2a9cbbbb751f6b6ed4f541519c451c2394285dbb"}]}}, {{0x9, 0x4, 0xa0, 0x0, 0xe, 0xa4, 0xb5, 0x22, 0x7, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "f0049ba2da15"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8000, 0x7, 0x22}, {0x6, 0x24, 0x1a, 0x1ff, 0x1}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0xfffb, [0x1, 0x101, 0x1, 0x1]}, @dmm={0x7, 0x24, 0x14, 0x8, 0x7}]}, @hid_hid={0x9, 0x21, 0x8, 0x7f, 0x1, {0x22, 0xe35}}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x7, 0x6, 0x8, [@generic={0xba, 0x22, "99237e45cbe0ff0e9cac3788bdd650619293ba7528ce9d8ad1674f06f157a2f2507e183a80d053c397c7c656a6c2007f46c2a359ef9ca40f3bf3165369a209ae4bb9151bf1f8b9d990e7e4be3fc0c73997ebd82a64168c0ebeff8dbbb2ea2d725383f769ec7f5c10b9577031475c8048ef4d7f653bb5d5eb4b1eac81e0e54babf6d7c42aa1165958521b42a5b1765b51aac4dfe268834dc58385da260a51f480736ec4e4f3002285485c310b824ea563ccf28740396879b5"}, @generic={0x41, 0xa, "ec028469cff267693278f3856beda9c79a835d16f724fc2b27b9a11345a6e6e7ff8421b9a235a9a38cdbb7badb1a343304743b41509163925700bed275daa3"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x5, 0x6, 0xd3, [@generic={0x46, 0xc, "1a227f042b027cceecb6bb44f8eb4d241482a22dd0c14a8a0710aa7449255a3f1c00593c936eba30c96e05dbbf4879a8cb9ad04c31879e9d5934b7a62f2ab93eea3c9b4b"}]}}, {{0x9, 0x5, 0x86, 0x0, 0x8, 0xe, 0x93, 0x9}}, {{0x9, 0x5, 0x6, 0x12, 0x10, 0x8, 0xb, 0x3, [@generic={0x37, 0x23, "021e0776e3e5ff09baee6c4ab5c2c0722e5d69c2ee59d38d0a4448971a00e05eaa03d707003740ca7b7a02b4d569ed3f340fa39239"}, @generic={0x89, 0xa, "db58de635165a31aed063e8f193d79153dee7b8db315f145112b62535b8fd7ce0df215d0220bc5ed36e1bc6079230c6e0f55d0f48644a972699fbfd42236297038d587612d08d89d673b0da92b6e5c9f6663c0add39f085718ef29e8a4731375c26c3574e3c7be74ab9adee8ddbe275b30851938c3e52e66b9d9251d2bcff32df7d16666305920"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x4, 0x6, 0x38}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x9, 0x85, 0x3}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x6, 0x7f, 0x4, [@generic={0xfc, 0xd, "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"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x9, 0x3a, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x8}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x8, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x4db2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x91, 0x4, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x0, 0x8, 0x99, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x2}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0xe0, 0xfe, 0x7}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x6, 0x7, 0x2}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x9, 0xa1, 0xe, [@generic={0x44, 0x3, "17621790b24a9ff1e88a570bf1a629dc96068f6ac64f229a5641ddf0acb48b27e087336dd1b6ef6257d3781e7e5545c7e1fc456ce5dd991e00616c66b62c8ac1a6a9"}, @generic={0x3a, 0x4, "a142cc03df0329aedb0f8c18fdad08cc20fc921ba9f046408b6401814c191427339657059fec7ec9756a1524abae5d28c24824b3e667ad1b"}]}}]}}]}}]}}, 0x0) 2.319799477s ago: executing program 5 (id=1386): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="3ca218219691a73240eb5c2f52501cfc547299d873a1b65498d4e24633d60d5a1a18f07f682d8aa3d6849712372e41a56d2a74f85246c982cfe7cedf5e25ada7f712e0e639860a8043f1a3ba27a0b185de19af4aae4e4cae8a44592aecf0810ab509ba87b397386d32264c57be55338a2e7c6e204a9d80109ea887d0dd0c8f93fa4c7b27847f6fbf962d9f8ffac4b161f110adecbddbf469a7d5940b9450e2213bd70c2c488746fa91715b93", @ANYRES8=r0, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) (async) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="3ca218219691a73240eb5c2f52501cfc547299d873a1b65498d4e24633d60d5a1a18f07f682d8aa3d6849712372e41a56d2a74f85246c982cfe7cedf5e25ada7f712e0e639860a8043f1a3ba27a0b185de19af4aae4e4cae8a44592aecf0810ab509ba87b397386d32264c57be55338a2e7c6e204a9d80109ea887d0dd0c8f93fa4c7b27847f6fbf962d9f8ffac4b161f110adecbddbf469a7d5940b9450e2213bd70c2c488746fa91715b93", @ANYRES8=r0, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) (async) 2.308139127s ago: executing program 5 (id=1387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000004000010000000900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000058000000060a0104000000000000000001000000300004802c0001800b0001007470726f787900001c0002800800014000000000080002400000000d080001400000000108000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="766ecaf090b51002a7be6c1c06186ccc", 0x10) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000500000052"]) 2.230681547s ago: executing program 5 (id=1388): syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x1f59c02d299effd2) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x6, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r6, &(0x7f0000000380)=ANY=[@ANYRES8=r3], 0x40) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x1}, 0xe) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x1ff, 0x4) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000180)=[{{0x2, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1}}], 0x10) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r11, 0x8}, 0x8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES16=r13, @ANYRES16=r13, @ANYBLOB="0103000100f6dbdf0658156c480821f98d", @ANYRES32=r14, @ANYBLOB="20004ef2b6d703459a7ae3b34f3eb4020058"], 0x3c}}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.012784754s ago: executing program 5 (id=1390): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r0, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000180)=0x49) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="45c999ad548a68d24cb382e1f5bd3041f9884f8990703258496b7b6a6418f550713221f9f123c297c41a3ab48d257d4af0bcd8e8951296389ec2667b14002218ecf51f99bec3a9211093d92f349b6302e462527cc085631c67c48e8578389d30cbfe2deea37bc363a1c97e95f2d634b6fce5c301235f8d17beba75db0a3ca2262c3cf664b45d5ed292dc367d0964e396614c0e2a946e7ba5b1725e81383391eb38d8425d7ba0fd1bbcdda643223aba28594d68522f8ce68fef4a8f060c09fe5f05961eb517870930e05ac9317946fc8391d7834406808f648268533fe7"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x20008000}, 0x20004000) 1.907903676s ago: executing program 4 (id=1392): openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1eed2c00000000000109022400010000000009040000010300080009210000040122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000112"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 1.584361038s ago: executing program 2 (id=1393): r0 = socket$pppl2tp(0x18, 0x1, 0x1) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0xcc9dd, 0x0, 0x1000}], 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x84000, 0x19d) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000016080002400000000208000440080000070900010073797a30007f00000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000780), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'ip6gre0\x00', 0x9}) 1.52262936s ago: executing program 2 (id=1394): syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406b1d010140001502010000008100030105a0020904000000010100000a2401a80ea4020102082408050b0004230b240801400002f27b72f80904010000010200000904010101010200000905010977399bb40207250183810900090402000001020000090402010101020000082402010503060a072401c10302000905820910000d06060725010202ff07"], 0x0) 1.227061962s ago: executing program 3 (id=1396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001040)={{0x2, 0xeeef0000, 0xb, 0x4, 0xf3, 0xc, 0x2, 0x8, 0xe0, 0x1, 0x6}, {0x1000, 0x2, 0xd, 0x5, 0x0, 0x6, 0x7f, 0x8, 0x80, 0x1, 0x81}, {0xffff1000, 0xdddd1000, 0xf, 0xc, 0x3, 0x3, 0x0, 0x4, 0x8, 0x8, 0x37}, {0x5000, 0xd000, 0xf, 0x9, 0x3, 0x5, 0x6, 0x7, 0x3, 0x0, 0x10, 0x6}, {0x8080000, 0x8080000, 0xe, 0x8, 0xfd, 0x5, 0x4, 0x9, 0x4, 0xf7, 0x3, 0x8}, {0x4002, 0xffff1005, 0x10, 0xfe, 0x1, 0xf, 0x5, 0x5c, 0x10, 0xe, 0x0, 0x9}, {0x100000, 0x10000, 0x3, 0x5f, 0x0, 0x7, 0xba, 0x8, 0xf6, 0x9, 0x5, 0x4}, {0x8080000, 0xeeef0000, 0x0, 0x6f, 0x6e, 0x78, 0x7, 0x4c, 0x6, 0x6, 0x8, 0x5}, {0x2, 0x8000}, {0xdddd1000, 0x6}, 0x40001, 0x0, 0x2000, 0x400, 0x2, 0x6000, 0xeeee0000, [0xc1, 0x4, 0x9, 0x6]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x38, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x28, 0x0, 0x0, 0x0, [@typed={0x24, 0x0, 0x0, 0x0, @str='%\x00\xf9[\x00+\xd9\t\xbb\xfb=%\xa2+\xbf\xd0\xa0\xe8\xd21\xef#\xe4\xee\xc1f\xc6{\xd5\xa0\xd6w'}]}]}, 0x38}], 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000008, 0x13, r0, 0xa57eb000) 1.073551704s ago: executing program 3 (id=1397): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) socket$inet6_tcp(0xa, 0x1, 0x0) 995.911225ms ago: executing program 5 (id=1398): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) 995.547161ms ago: executing program 3 (id=1399): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x7, &(0x7f00000001c0)=[{0x7fff, 0x8, 0x66, 0xfffffffb}, {0x0, 0x2, 0x3, 0xb}, {0x100, 0x1, 0x40, 0x1}, {0x6, 0x0, 0x4, 0x6}, {0x10, 0x6, 0x6, 0x5}, {0x0, 0xa, 0x52, 0x7}, {0x6793, 0x5, 0x3, 0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x181603, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'wg0\x00', 0x1}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd703dfcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@e={0xff, 0x1, 0xb, 0x2, @SEQ_NOTEON=@note=0x57, 0x2, 0x7, 0x8b}) 932.614573ms ago: executing program 3 (id=1400): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44008870) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{}, {0xf8}}}}, 0xd) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[], 0x40) r2 = syz_open_dev$sndctrl(0x0, 0xc3, 0x140) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f00000003c0)={0x5, 0x3, 0x2, 0x0, 'syz1\x00', 0x8}) syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) 880.183256ms ago: executing program 3 (id=1401): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503af6c"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x40) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x800, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 399.935971ms ago: executing program 5 (id=1402): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x2000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000100)) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x8, 0x2, "1145"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x82, 0x2, "8370"}, 0x0, 0x0, 0x0}) listen(r0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000340)=0xa00) 303.971794ms ago: executing program 3 (id=1403): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5028, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2}}}}}]}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r1 = dup(r0) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000011d9b438fb8e740a72e02001c3f901ff7b99219ba27e80f55a291c1926a478a04d0782891dcdae7a4adfc7768941b252fa98e620c1a862abb04c0398cd9b7379d796f89bc03559a0e6f18021524732493a", @ANYRESDEC=r4, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f0070687931000000000c0005000200aaaaaaaaaaaa0500200000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 89.005175ms ago: executing program 4 (id=1404): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xf, 0x121902) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)="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", 0xff}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000200)={0x5, 0x5, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x401, r0}) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r0, 0x83000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f0000000380)={&(0x7f0000000340)=@can={{0x4, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "6602b22e7d087b9e"}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) iopl(0x1) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x20810, 0xffffffffffffffff, 0x83000000) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000400)={0x2, 0x2, 0xfffffff7, 0x4, 0x6, "e89967762e28f46d93f364ab58e6c7885f3e28", 0x8, 0x8}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @rose}, [@netrom, @default, @remote, @remote, @rose, @remote, @bcast, @netrom]}, &(0x7f00000004c0)=0x48, 0x0) recvmmsg(r4, &(0x7f0000002640)=[{{&(0x7f0000000500)=@can, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000680)=""/123, 0x7b}, {&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f00000008c0)=""/209, 0xd1}], 0x6, &(0x7f0000000a40)=""/61, 0x3d}, 0x2}, {{&(0x7f0000000a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/147, 0x93}, {&(0x7f0000000bc0)=""/40, 0x28}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f0000000d00)=""/27, 0x1b}, {&(0x7f0000000d40)=""/101, 0x65}], 0x5, &(0x7f0000000e40)=""/30, 0x1e}, 0x6}, {{&(0x7f0000000e80)=@alg, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000f00)=""/64, 0x40}, {&(0x7f0000000f40)=""/190, 0xbe}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/136, 0x88}], 0x4, &(0x7f0000002100)=""/203, 0xcb}, 0x10}, {{&(0x7f0000002200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002280)=""/112, 0x70}, {&(0x7f0000002300)=""/64, 0x40}, {&(0x7f0000002340)=""/76, 0x4c}, {&(0x7f00000023c0)=""/135, 0x87}, {&(0x7f0000002480)=""/30, 0x1e}, {&(0x7f00000024c0)=""/4, 0x4}, {&(0x7f0000002500)=""/188, 0xbc}], 0x7}, 0x4}], 0x4, 0x2060, 0x0) r5 = userfaultfd(0x80001) r6 = dup2(r4, r5) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000002740)={{r1}, "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"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000003740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000037c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000003840)={0x28, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000003800)}) sendto$inet6(r6, &(0x7f0000003880)="16bb88c0d0f79df4bf10073f908c339ba942b5ee5b0d4d60ef498c2c104d4239ad1519", 0x23, 0x4000, &(0x7f00000038c0)={0xa, 0x4e20, 0x30000, @remote, 0xfff}, 0x1c) bind$unix(r6, &(0x7f0000003900)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r9 = add_key$fscrypt_provisioning(&(0x7f0000003980), &(0x7f00000039c0)={'syz', 0x1}, &(0x7f0000003a00)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000003a40)='logon\x00', 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000003ac0)={'tunl0\x00', &(0x7f0000003a80)=@ethtool_sset_info={0x37, 0x8, 0x4, [0x6, 0x59, 0x84b, 0xd2, 0x1, 0x500, 0x8]}}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000003b00), &(0x7f0000003b40)=0x4) iopl(0x4) 0s ago: executing program 4 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c, 0x0, 0x20008800}, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r3 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) kernel console output (not intermixed with test programs): ew USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.187544][ T10] usb 5-1: Product: syz [ 217.191853][ T10] usb 5-1: Manufacturer: syz [ 217.196535][ T10] usb 5-1: SerialNumber: syz [ 217.204786][ T10] usb 5-1: config 0 descriptor?? [ 217.206814][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 217.218257][ T6002] usb 3-1: USB disconnect, device number 82 [ 217.236372][ T6002] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 217.256921][ T6002] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 217.269705][ T6002] quatech2 3-1:0.51: device disconnected [ 217.433986][ T43] usb 5-1: USB disconnect, device number 80 [ 218.060819][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 218.222589][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.233377][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.244434][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.254464][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.263203][ T10] usb 3-1: SerialNumber: syz [ 218.296019][ T5970] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 218.451119][ T8809] program syz.5.859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.472030][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 218.484596][ T5970] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 218.507372][ T5970] usb 5-1: config 0 has no interface number 0 [ 218.513733][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.522624][ T5970] usb 5-1: config 0 interface 184 has no altsetting 0 [ 218.532447][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 218.541257][ T5970] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 218.565707][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.578278][ T5970] usb 5-1: Product: syz [ 218.582448][ T5970] usb 5-1: Manufacturer: syz [ 218.608847][ T5970] usb 5-1: SerialNumber: syz [ 218.623166][ T5970] usb 5-1: config 0 descriptor?? [ 218.634507][ T10] usb 3-1: USB disconnect, device number 83 [ 218.649690][ T5970] smsc75xx v1.0.0 [ 218.701537][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.768315][ T8816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.845744][ T8818] EXT4-fs: Conflicting test_dummy_encryption options [ 219.145823][ T8825] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 219.145823][ T8825] The task syz.2.865 (8825) triggered the difference, watch for misbehavior. [ 219.161875][ T6002] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 219.322251][ T6002] usb 6-1: Using ep0 maxpacket: 16 [ 219.333891][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.348488][ T6002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.358488][ T6002] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.379319][ T6002] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.395284][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.408330][ T6002] usb 6-1: config 0 descriptor?? [ 219.852688][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.872127][ T6002] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 219.882219][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.890022][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.897386][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.906553][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.914236][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.921735][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.929401][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.937068][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.950424][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.960628][ T6002] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 219.968519][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.979893][ T6002] microsoft 0003:045E:07DA.0011: unsupported Resolution Multiplier 0 [ 219.992523][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.005817][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.034637][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 220.056259][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 220.066450][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 220.082690][ T6002] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 220.085481][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 220.110131][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 220.120954][ T6002] microsoft 0003:045E:07DA.0011: no inputs found [ 220.142193][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 220.159544][ T6002] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 220.170911][ T5970] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 220.183296][ T6002] usb 6-1: USB disconnect, device number 13 [ 220.208622][ T5970] usb 5-1: USB disconnect, device number 81 [ 220.333218][ T8849] comedi comedi1: pcl726: I/O port conflict (0x8,16) [ 220.666804][ T30] audit: type=1800 audit(6049247367.417:102): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 220.708909][ T30] audit: type=1800 audit(6049247367.455:103): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 220.729881][ T30] audit: type=1800 audit(6049247367.455:104): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 220.750625][ T30] audit: type=1800 audit(6049247367.455:105): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 220.771466][ T5970] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 220.800044][ T30] audit: type=1800 audit(6049247367.455:106): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 220.821822][ T30] audit: type=1800 audit(6049247367.464:107): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 220.842497][ T30] audit: type=1800 audit(6049247367.464:108): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 220.893808][ T30] audit: type=1800 audit(6049247367.502:109): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 220.931810][ T30] audit: type=1800 audit(6049247367.502:110): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 220.958378][ T5970] usb 3-1: device descriptor read/64, error -71 [ 220.970856][ T30] audit: type=1800 audit(6049247367.511:111): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.878" name="bus" dev="tmpfs" ino=174 res=0 errno=0 [ 221.105002][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 221.114926][ T2345] pvrusb2: Failure uploading firmware1 [ 221.124133][ T2345] pvrusb2: Device initialization was not successful. [ 221.140889][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 221.152881][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 221.162437][ T5923] pvrusb2: Device being rendered inoperable [ 221.215373][ T5970] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 221.364323][ T5970] usb 3-1: device descriptor read/64, error -71 [ 221.487532][ T8878] netlink: 165 bytes leftover after parsing attributes in process `syz.3.884'. [ 221.496961][ T5970] usb usb3-port1: attempt power cycle [ 221.587625][ T8884] overlay: Bad value for 'workdir' [ 221.877984][ T5970] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 221.931687][ T5970] usb 3-1: device descriptor read/8, error -71 [ 222.198236][ T5970] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 222.221463][ T5970] usb 3-1: device descriptor read/8, error -71 [ 222.337687][ T5970] usb usb3-port1: unable to enumerate USB device [ 222.358405][ T6002] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 222.401128][ T6058] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 222.520783][ T6002] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 222.528949][ T6002] usb 5-1: config 0 has no interface number 0 [ 222.537713][ T6002] usb 5-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice=b1.c5 [ 222.546822][ T6002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.554899][ T6002] usb 5-1: Product: syz [ 222.559055][ T6002] usb 5-1: Manufacturer: syz [ 222.563708][ T6002] usb 5-1: SerialNumber: syz [ 222.570445][ T6058] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 222.572580][ T6002] usb 5-1: config 0 descriptor?? [ 222.581787][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.593013][ T6058] usb 6-1: Product: syz [ 222.596863][ T6002] snd-usb-caiaq 5-1:0.87: can't set alt interface. [ 222.597363][ T6058] usb 6-1: Manufacturer: syz [ 222.604535][ T6002] usb 5-1: unable to init card! (ret=-5) [ 222.614068][ T6058] usb 6-1: SerialNumber: syz [ 222.614332][ T6002] snd-usb-caiaq 5-1:0.87: probe with driver snd-usb-caiaq failed with error -5 [ 222.622061][ T6058] usb 6-1: config 0 descriptor?? [ 222.829825][ T6002] usb 5-1: USB disconnect, device number 82 [ 222.856587][ T6058] airspy 6-1:0.0: Board ID: 00 [ 222.872674][ T6058] airspy 6-1:0.0: Firmware version: [ 223.067183][ T8937] netlink: 'syz.4.905': attribute type 11 has an invalid length. [ 223.316429][ T6058] airspy 6-1:0.0: usb_control_msg() failed -71 request 0e [ 223.345582][ T6058] airspy 6-1:0.0: Registered as swradio24 [ 223.351584][ T6058] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 223.401298][ T6058] usb 6-1: USB disconnect, device number 14 [ 223.666526][ T8961] syzkaller1: entered promiscuous mode [ 223.672043][ T8961] syzkaller1: entered allmulticast mode [ 223.702391][ T8961] syzkaller1: left promiscuous mode [ 223.724279][ T8961] syzkaller1: left allmulticast mode [ 223.964082][ T5923] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 224.027959][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 224.123827][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.134942][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.144776][ T5923] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 224.153827][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.154503][ T6058] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 224.164418][ T5923] usb 6-1: config 0 descriptor?? [ 224.197247][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 224.203764][ T10] usb 5-1: config 86 has an invalid interface number: 133 but max is 1 [ 224.213107][ T10] usb 5-1: config 86 has an invalid interface number: 169 but max is 1 [ 224.222050][ T10] usb 5-1: config 86 has an invalid interface number: 175 but max is 1 [ 224.232876][ T10] usb 5-1: config 86 has 3 interfaces, different from the descriptor's value: 2 [ 224.242026][ T10] usb 5-1: config 86 has no interface number 0 [ 224.248186][ T10] usb 5-1: config 86 has no interface number 1 [ 224.255118][ T10] usb 5-1: config 86 has no interface number 2 [ 224.261649][ T10] usb 5-1: config 86 interface 133 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 224.272775][ T10] usb 5-1: config 86 interface 133 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 224.283901][ T10] usb 5-1: config 86 interface 133 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 224.294995][ T10] usb 5-1: config 86 interface 169 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 224.305888][ T10] usb 5-1: config 86 interface 169 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 224.320053][ T10] usb 5-1: config 86 interface 169 altsetting 6 endpoint 0x6 has invalid maxpacket 520, setting to 64 [ 224.332603][ T10] usb 5-1: config 86 interface 169 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 224.344613][ T10] usb 5-1: too many endpoints for config 86 interface 175 altsetting 73: 100, using maximum allowed: 30 [ 224.356376][ T10] usb 5-1: config 86 interface 175 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 224.369960][ T10] usb 5-1: config 86 interface 133 has no altsetting 0 [ 224.377042][ T10] usb 5-1: config 86 interface 169 has no altsetting 0 [ 224.388581][ T10] usb 5-1: config 86 interface 175 has no altsetting 0 [ 224.388721][ T6058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 224.390562][ T8970] tmpfs: Bad value for 'mpol' [ 224.395709][ T6058] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 224.436224][ T6058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 224.446354][ T6058] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 224.446544][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=98.41 [ 224.465708][ T6058] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 224.474782][ T6058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.483268][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.495322][ T10] usb 5-1: Product: ﶲ䯯峾槦쾛᫑ዹ᪴鄀◛燀뺌㰐ᴢ鑶팔ᵥ同餡反灉佳ꍰಅ [ 224.507081][ T6058] usb 3-1: config 0 descriptor?? [ 224.529587][ T10] usb 5-1: Manufacturer: ఌ [ 224.534238][ T10] usb 5-1: SerialNumber: 耴쫸铼鸢؁苖嘱밎匥刘௕蔍稥摹递籴 怽蕷盏토垜목∾聋チ蔯ꜯ䎎ᗹ쏢旃팪౷㼆㨊⠖璢겛ㄍⴋ텵嬜柨劬㫖웍⬚產ｔ楦澆脈櫚ኙ⍬幡툰㓉赥렂헨ᓬῦﲾ䣎筞凊句辁秾䓚홡ꇨ옻辧봿৿ʤⲫ佐辺⿊攼㆞攕ⴹ뵪嶾鉳ⰾ贛램簐긝ꏍ맺뀞䍜 [ 224.630747][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.635033][ T8981] overlayfs: failed to clone upperpath [ 224.641045][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.642577][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.671535][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.704837][ T5923] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 224.729998][ T6058] hdpvr 3-1:0.0: firmware version 0x88 dated _= ˆ}nDT,w#OR^Yhandle_urb_cmd() returned error -EBADRQC [ 236.052581][ T5528] etas_es58x 6-1:0.2 can1: bit-timing not yet defined [ 236.119254][ T10] usb 3-1: USB disconnect, device number 93 [ 236.128010][ T43] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 236.227815][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 236.228981][ T5923] usb 6-1: USB disconnect, device number 18 [ 236.237032][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 236.237107][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 236.237170][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 236.270596][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 236.279739][ C0] etas_es58x 6-1:0.2 can0: es58x_write_bulk_callback: error -ESHUTDOWN [ 236.288255][ T43] usb 5-1: device descriptor read/64, error -71 [ 236.289221][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 236.294543][ T5923] etas_es58x 6-1:0.2: Disconnecting syz syz [ 236.303672][ T5528] etas_es58x 6-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 236.566242][ T43] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 236.739137][ T43] usb 5-1: device descriptor read/64, error -71 [ 236.840782][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.857305][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.868075][ T43] usb usb5-port1: attempt power cycle [ 237.026122][ T10] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 237.112122][ T6058] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 237.188276][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 237.196433][ T10] usb 3-1: config 0 has no interface number 0 [ 237.202676][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.213545][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 237.224239][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 237.236364][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 237.242579][ T43] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 237.247450][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 237.267193][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.282106][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.293936][ T43] usb 5-1: device descriptor read/8, error -71 [ 237.300326][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.310860][ T6058] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.314825][ T9273] netlink: 'syz.3.1016': attribute type 7 has an invalid length. [ 237.326566][ T6058] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.335044][ T9273] netlink: 'syz.3.1016': attribute type 5 has an invalid length. [ 237.339572][ T10] usb 3-1: config 0 descriptor?? [ 237.347628][ T9273] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1016'. [ 237.362517][ T9273] netlink: 'syz.3.1016': attribute type 7 has an invalid length. [ 237.365025][ T6058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.371037][ T9273] netlink: 'syz.3.1016': attribute type 5 has an invalid length. [ 237.386667][ T9268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 237.388197][ T9273] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1016'. [ 237.395135][ T6058] usb 6-1: config 0 descriptor?? [ 237.403919][ T9268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 237.418168][ T9273] netlink: 'syz.3.1016': attribute type 7 has an invalid length. [ 237.427597][ T9273] netlink: 'syz.3.1016': attribute type 5 has an invalid length. [ 237.432285][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 237.441391][ T9273] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1016'. [ 237.447950][ T6058] pwc: Askey VC010 type 2 USB webcam detected. [ 237.456897][ T9273] netlink: 'syz.3.1016': attribute type 7 has an invalid length. [ 237.471328][ T9273] netlink: 'syz.3.1016': attribute type 5 has an invalid length. [ 237.479519][ T9273] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1016'. [ 237.488879][ T9273] netlink: 'syz.3.1016': attribute type 7 has an invalid length. [ 237.497090][ T9273] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1016'. [ 237.506287][ T9273] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1016'. [ 237.518429][ T9273] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1016'. [ 237.527858][ T9273] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1016'. [ 237.560448][ T43] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 237.582303][ T43] usb 5-1: device descriptor read/8, error -71 [ 237.710577][ T43] usb usb5-port1: unable to enumerate USB device [ 237.805307][ T10] usb 3-1: USB disconnect, device number 94 [ 237.819330][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 238.122226][ T9278] 9p filesystem being mounted at /442/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 238.737898][ T9310] 9p filesystem being mounted at /236/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 238.881116][ T6058] pwc: recv_control_msg error -71 req 02 val 2b00 [ 238.890175][ T6058] pwc: recv_control_msg error -71 req 02 val 2700 [ 238.897245][ T6058] pwc: recv_control_msg error -71 req 02 val 2c00 [ 238.904102][ T6058] pwc: recv_control_msg error -71 req 04 val 1000 [ 238.913301][ T6058] pwc: recv_control_msg error -71 req 04 val 1300 [ 238.923714][ T6058] pwc: recv_control_msg error -71 req 04 val 1400 [ 238.939057][ T6058] pwc: recv_control_msg error -71 req 02 val 2000 [ 238.959005][ T6058] pwc: recv_control_msg error -71 req 02 val 2100 [ 238.971441][ T6058] pwc: recv_control_msg error -71 req 04 val 1500 [ 238.978726][ T6058] pwc: recv_control_msg error -71 req 02 val 2500 [ 238.985768][ T6058] pwc: recv_control_msg error -71 req 02 val 2400 [ 238.994274][ T6058] pwc: recv_control_msg error -71 req 02 val 2600 [ 239.001208][ T6058] pwc: recv_control_msg error -71 req 02 val 2900 [ 239.008346][ T6058] pwc: recv_control_msg error -71 req 02 val 2800 [ 239.017543][ T6058] pwc: recv_control_msg error -71 req 04 val 1100 [ 239.024598][ T6058] pwc: recv_control_msg error -71 req 04 val 1200 [ 239.045944][ T6058] pwc: Registered as video103. [ 239.072834][ T6058] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 239.109324][ T6058] usb 6-1: USB disconnect, device number 19 [ 239.258938][ T9328] binder: 9327:9328 ioctl 4018620d 0 returned -22 [ 239.313743][ T5923] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 239.324129][ T9329] binder: 9327:9329 ioctl c018620c 0 returned -14 [ 239.480860][ T5923] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 239.491316][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.506060][ T5923] usb 3-1: Product: syz [ 239.510247][ T5923] usb 3-1: Manufacturer: syz [ 239.514847][ T5923] usb 3-1: SerialNumber: syz [ 239.522414][ T5923] usb 3-1: config 0 descriptor?? [ 239.536497][ T5923] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 239.549200][ T5923] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 239.565422][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 239.629028][ T9337] 9p filesystem being mounted at /452/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 239.720170][ T6058] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 239.748930][ T5923] usb 3-1: USB disconnect, device number 95 [ 239.880503][ T6058] usb 6-1: Using ep0 maxpacket: 32 [ 239.889360][ T6058] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 239.898777][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.906840][ T6058] usb 6-1: Product: syz [ 239.910996][ T6058] usb 6-1: Manufacturer: syz [ 239.915696][ T6058] usb 6-1: SerialNumber: syz [ 239.922165][ T6058] usb 6-1: config 0 descriptor?? [ 239.929713][ T6058] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 240.143053][ T6058] gspca_topro: reg_w err -71 [ 240.182683][ T6058] gspca_topro: Sensor soi763a [ 240.199273][ T6058] usb 6-1: USB disconnect, device number 20 [ 240.502049][ T9354] 9pnet: Found fid 0 not clunked [ 240.770662][ T6058] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 240.784226][ T9372] 9p filesystem being mounted at /60/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 240.951145][ T6058] usb 3-1: config 7 has an invalid interface number: 30 but max is 0 [ 240.952599][ T43] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 240.960389][ T6058] usb 3-1: config 7 has no interface number 0 [ 240.974035][ T6058] usb 3-1: config 7 interface 30 has no altsetting 0 [ 240.985002][ T6058] usb 3-1: string descriptor 0 read error: -22 [ 240.991327][ T6058] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=10.9c [ 241.000592][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.030858][ T6058] usb_ehset_test 3-1:7.30: probe with driver usb_ehset_test failed with error -32 [ 241.074662][ T9380] binder: 9379:9380 ioctl 400c620e 0 returned -14 [ 241.147300][ T43] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 241.166767][ T43] usb 5-1: config 0 has no interface number 0 [ 241.179533][ T43] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 241.193408][ T43] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.203877][ T43] usb 5-1: config 0 interface 113 has no altsetting 0 [ 241.213528][ T43] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 241.238489][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.256383][ T5923] usb 3-1: USB disconnect, device number 96 [ 241.266778][ T43] usb 5-1: Product: syz [ 241.281185][ T43] usb 5-1: Manufacturer: syz [ 241.286834][ T43] usb 5-1: SerialNumber: syz [ 241.296317][ T43] usb 5-1: config 0 descriptor?? [ 241.314165][ C1] usb 5-1: NFC: Urb failure (status -71) [ 241.320205][ T43] usb 5-1: NFC: Unable to get FW version [ 241.328057][ T43] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 241.480853][ T9391] batadv_slave_1: entered promiscuous mode [ 241.491091][ T9391] batadv_slave_1: left promiscuous mode [ 241.534949][ T9354] __nla_validate_parse: 25 callbacks suppressed [ 241.534964][ T9354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1043'. [ 241.552029][ T43] usb 5-1: USB disconnect, device number 92 [ 241.577232][ T9387] validate_nla: 57 callbacks suppressed [ 241.577345][ T9387] netlink: 'syz.5.1051': attribute type 4 has an invalid length. [ 241.616667][ T9387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.813417][ T9399] 9p filesystem being mounted at /66/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 241.889039][ T9401] Cache volume key already in use (9p,(null),) [ 242.205101][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 242.275083][ T6058] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 242.371173][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 242.378188][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.393403][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.404691][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.414483][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 242.424136][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.438268][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.447365][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.455358][ T10] usb 3-1: Manufacturer: syz [ 242.460236][ T6058] usb 6-1: Using ep0 maxpacket: 8 [ 242.469234][ T10] usb 3-1: config 0 descriptor?? [ 242.501790][ T6058] usb 6-1: unable to get BOS descriptor or descriptor too short [ 242.511225][ T6058] usb 6-1: config 1 interface 0 altsetting 201 bulk endpoint 0x82 has invalid maxpacket 16 [ 242.521757][ T6058] usb 6-1: config 1 interface 0 altsetting 201 bulk endpoint 0x3 has invalid maxpacket 8 [ 242.531701][ T6058] usb 6-1: config 1 interface 0 has no altsetting 0 [ 242.545311][ T6058] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.554641][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.562676][ T6058] usb 6-1: Product: syz [ 242.567990][ T6058] usb 6-1: Manufacturer: syz [ 242.572611][ T6058] usb 6-1: SerialNumber: syz [ 242.581050][ T9404] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 242.588459][ T9404] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 242.606423][ T928] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 242.767675][ T10] rc_core: IR keymap rc-hauppauge not found [ 242.773575][ T10] Registered IR keymap rc-empty [ 242.782180][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.803054][ T928] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 242.815564][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.817306][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.824735][ T928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.838270][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.849067][ T928] usb 5-1: Product: syz [ 242.855207][ T928] usb 5-1: Manufacturer: syz [ 242.858217][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.864015][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 242.869492][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.880680][ T928] usb 5-1: SerialNumber: syz [ 242.896562][ T928] usb 5-1: config 0 descriptor?? [ 242.898046][ T9404] netlink: 'syz.5.1056': attribute type 23 has an invalid length. [ 242.911301][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 242.917704][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.933598][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.945398][ T9401] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 242.945946][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.952315][ T9401] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 242.957568][ T9401] vhci_hcd vhci_hcd.0: Device attached [ 242.985933][ T9401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.997361][ T6058] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 243.005826][ T9401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.015032][ T9421] vhci_hcd: connection closed [ 243.020640][ T50] vhci_hcd: stop threads [ 243.043393][ T6058] usb 6-1: USB disconnect, device number 21 [ 243.050274][ T50] vhci_hcd: release socket [ 243.050396][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.081515][ T50] vhci_hcd: disconnect device [ 243.091564][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.119735][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.141316][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.149982][ T928] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.163218][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.184046][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.205622][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.226719][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.258611][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.283504][ T10] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 243.291681][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 243.305874][ T10] usb 3-1: USB disconnect, device number 97 [ 243.578823][ T9430] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1061'. [ 243.592886][ T9430] openvswitch: netlink: Message has 512 unknown bytes. [ 243.601333][ T9430] sit0: entered promiscuous mode [ 243.609850][ T9430] netlink: 'syz.5.1061': attribute type 1 has an invalid length. [ 243.617965][ T9430] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1061'. [ 243.803442][ T928] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 244.017807][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 244.181655][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.192716][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.202554][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.215479][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.224571][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.234487][ T10] usb 3-1: config 0 descriptor?? [ 244.688116][ T10] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 244.876220][ T9448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1067'. [ 245.342290][ T43] usb 3-1: USB disconnect, device number 98 [ 245.527335][ T5908] usb 5-1: USB disconnect, device number 93 [ 245.745994][ T5862] block nbd5: Receive control failed (result -32) [ 245.746926][ T9448] block nbd5: shutting down sockets [ 245.815607][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1069'. [ 245.937117][ T5908] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 245.996686][ T9460] 9pnet_fd: Insufficient options for proto=fd [ 246.095138][ T5908] usb 5-1: device descriptor read/64, error -71 [ 246.102327][ T9458] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1070'. [ 246.144682][ T9465] 9p filesystem being mounted at /244/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 246.283056][ T9471] syzkaller1: entered promiscuous mode [ 246.292526][ T9471] syzkaller1: entered allmulticast mode [ 246.311785][ T10] IPVS: starting estimator thread 0... [ 246.358789][ T5908] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 246.416841][ T9473] IPVS: using max 29 ests per chain, 69600 per kthread [ 246.491527][ T9480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.510911][ T5908] usb 5-1: device descriptor read/64, error -71 [ 246.571545][ T9484] netlink: 'syz.5.1081': attribute type 10 has an invalid length. [ 246.626462][ T5908] usb usb5-port1: attempt power cycle [ 247.010946][ T928] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 247.021707][ T5908] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 247.045016][ T5908] usb 5-1: device descriptor read/8, error -71 [ 247.142317][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 247.171567][ T928] usb 6-1: Using ep0 maxpacket: 16 [ 247.178038][ T928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.189317][ T928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.199544][ T928] usb 6-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 247.208754][ T928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.218887][ T928] usb 6-1: config 0 descriptor?? [ 247.300752][ T5908] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 247.315234][ T10] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 247.324339][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.332453][ T10] usb 3-1: Product: syz [ 247.335833][ T5908] usb 5-1: device descriptor read/8, error -71 [ 247.336637][ T10] usb 3-1: Manufacturer: syz [ 247.347485][ T10] usb 3-1: SerialNumber: syz [ 247.354927][ T10] usb 3-1: config 0 descriptor?? [ 247.364254][ T10] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 099 [ 247.472664][ T5908] usb usb5-port1: unable to enumerate USB device [ 247.646183][ T10] (null): failure setting delay to 10us [ 247.652916][ T10] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 247.672334][ T10] usb 3-1: USB disconnect, device number 99 [ 247.690868][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.702464][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.717676][ T928] asus 0003:0B05:19B6.0016: unknown main item tag 0x0 [ 247.724918][ T928] asus 0003:0B05:19B6.0016: unknown main item tag 0x0 [ 247.732864][ T928] asus 0003:0B05:19B6.0016: unknown main item tag 0x0 [ 247.741967][ T928] asus 0003:0B05:19B6.0016: unknown main item tag 0x0 [ 247.750144][ T928] asus 0003:0B05:19B6.0016: unknown main item tag 0x0 [ 247.764322][ T928] asus 0003:0B05:19B6.0016: hidraw0: USB HID v0.00 Device [HID 0b05:19b6] on usb-dummy_hcd.5-1/input0 [ 247.775944][ T928] asus 0003:0B05:19B6.0016: Asus input not registered [ 247.792968][ T928] asus 0003:0B05:19B6.0016: probe with driver asus failed with error -12 [ 247.860379][ T928] usb 6-1: USB disconnect, device number 22 [ 248.414264][ T9521] binder: 9520:9521 ioctl c018620c 200000000140 returned -22 [ 248.534965][ T9527] 9p filesystem being mounted at /81/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 248.723908][ T9546] netlink: 'syz.5.1096': attribute type 39 has an invalid length. [ 249.096055][ T9552] 9pnet: Could not find request transport: unx [ 249.237447][ T9561] kvm: apic: phys broadcast and lowest prio [ 249.243709][ T9561] kvm: Disabled LAPIC found during irq injection [ 249.288425][ T5908] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 249.441752][ T9570] netlink: 'syz.5.1100': attribute type 4 has an invalid length. [ 249.443303][ T9571] netlink: 'syz.5.1100': attribute type 4 has an invalid length. [ 249.462118][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 249.470648][ T9571] netlink: 'syz.5.1100': attribute type 4 has an invalid length. [ 249.478499][ T9571] netlink: 'syz.5.1100': attribute type 4 has an invalid length. [ 249.483665][ T5908] usb 5-1: config 0 has an invalid interface number: 111 but max is 0 [ 249.511879][ T5908] usb 5-1: config 0 has no interface number 0 [ 249.524695][ T5908] usb 5-1: too many endpoints for config 0 interface 111 altsetting 216: 177, using maximum allowed: 30 [ 249.551820][ T5908] usb 5-1: config 0 interface 111 altsetting 216 has 0 endpoint descriptors, different from the interface descriptor's value: 177 [ 249.576267][ T5908] usb 5-1: config 0 interface 111 has no altsetting 0 [ 249.603440][ T5908] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 249.630154][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.638153][ T5908] usb 5-1: Product: syz [ 249.643444][ T5908] usb 5-1: Manufacturer: syz [ 249.648053][ T5908] usb 5-1: SerialNumber: syz [ 249.665640][ T5908] usb 5-1: config 0 descriptor?? [ 249.898374][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.907279][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.920452][ T9552] netlink: 'syz.4.1097': attribute type 5 has an invalid length. [ 249.929089][ T9552] netlink: 115 bytes leftover after parsing attributes in process `syz.4.1097'. [ 249.948159][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1103'. [ 249.950906][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 249.957294][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1103'. [ 249.983759][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1103'. [ 250.006842][ T5908] speedtch 5-1:0.111: speedtch_bind: data interface not found! [ 250.030584][ T5908] speedtch 5-1:0.111: usbatm_usb_probe: bind failed: -19! [ 250.049541][ T5908] usb 5-1: USB disconnect, device number 98 [ 250.132700][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 250.140467][ T9584] 9p filesystem being mounted at /87/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 250.143013][ T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 250.175372][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 250.199071][ T10] usb 3-1: Product: syz [ 250.203258][ T10] usb 3-1: Manufacturer: syz [ 250.207971][ T10] usb 3-1: SerialNumber: syz [ 250.219332][ T10] usb 3-1: config 0 descriptor?? [ 250.233008][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 250.424469][ T9588] 9p: Unknown Cache mode or invalid value fscaqhe [ 250.493300][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'. [ 250.774073][ T5923] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 250.945160][ T928] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 250.963786][ T5923] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 250.972971][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 250.981056][ T5923] usb 6-1: Product: syz [ 250.985257][ T5923] usb 6-1: SerialNumber: syz [ 250.993248][ T5923] usb 6-1: config 0 descriptor?? [ 251.116194][ T928] usb 5-1: Using ep0 maxpacket: 32 [ 251.123938][ T928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.141411][ T928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.153858][ T928] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.166288][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.189232][ T928] usb 5-1: config 0 descriptor?? [ 251.201338][ T928] hub 5-1:0.0: USB hub found [ 251.221304][ T5923] hso 6-1:0.0: Failed to find BULK IN ep [ 251.304556][ T10] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 251.319873][ T10] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 251.339244][ T10] usb 3-1: USB disconnect, device number 100 [ 251.413582][ T928] hub 5-1:0.0: 1 port detected [ 251.760695][ T928] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 251.769626][ T5923] usb 5-1: USB disconnect, device number 99 [ 251.915202][ T9609] 9p filesystem being mounted at /256/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 252.174642][ T5923] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 252.356864][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 252.363452][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.376581][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.387530][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 252.404946][ T5923] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 252.414016][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.422952][ T5923] usb 5-1: Product: syz [ 252.427112][ T5923] usb 5-1: Manufacturer: syz [ 252.431881][ T5923] usb 5-1: SerialNumber: syz [ 252.439275][ T5923] usb 5-1: config 0 descriptor?? [ 252.691610][ T5923] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 252.704710][ T5923] usb 5-1: USB disconnect, device number 100 [ 253.233970][ T9629] netlink: 'syz.2.1119': attribute type 29 has an invalid length. [ 253.355763][ T9632] bond0: (slave erspan0): Opening slave failed [ 253.444174][ T9634] pim6reg9: entered allmulticast mode [ 253.564363][ T5908] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 253.703540][ T5908] usb 3-1: device descriptor read/64, error -71 [ 253.723043][ T6058] usb 6-1: USB disconnect, device number 23 [ 253.766456][ T9641] support for cryptoloop has been removed. Use dm-crypt instead. [ 253.842363][ T5923] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 253.883279][ T9645] program syz.5.1124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.970585][ T5908] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 254.011107][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.041868][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.053431][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.072711][ T5923] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.082199][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.100547][ T5923] usb 5-1: config 0 descriptor?? [ 254.109504][ T5908] usb 3-1: device descriptor read/64, error -71 [ 254.227418][ T5908] usb usb3-port1: attempt power cycle [ 254.389409][ T9654] loop4: detected capacity change from 0 to 2560 [ 254.397567][ T6073] buffer_io_error: 352 callbacks suppressed [ 254.397579][ T6073] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.412297][ T6073] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.420286][ T6073] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.428782][ T6073] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.436822][ T6073] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.444876][ T6073] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.458232][ T6073] loop4: unable to read partition table [ 254.459975][ T9655] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 254.472383][ T9655] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 254.481061][ T9654] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 254.489687][ T9654] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 254.511960][ T9656] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1127'. [ 254.531107][ T9654] ldm_validate_partition_table(): Disk read failed. [ 254.545030][ T9654] Dev loop4: unable to read RDB block 0 [ 254.551807][ T9654] loop4: unable to read partition table [ 254.554240][ T5923] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 254.557991][ T9654] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 254.603505][ T5908] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 254.611154][ T9656] syz.5.1127 (9656) used greatest stack depth: 17832 bytes left [ 254.632684][ T5908] usb 3-1: device descriptor read/8, error -71 [ 254.649637][ T5923] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 254.818898][ T9661] 9p filesystem being mounted at /476/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 254.840566][ T5923] usb 5-1: USB disconnect, device number 101 [ 254.853588][ T9639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1123'. [ 254.902886][ T5908] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 254.945432][ T5908] usb 3-1: device descriptor read/8, error -71 [ 255.072842][ T5908] usb usb3-port1: unable to enumerate USB device [ 255.167916][ T955] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 255.349739][ T955] usb 6-1: Using ep0 maxpacket: 8 [ 255.356455][ T955] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 255.364860][ T955] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 255.373018][ T955] usb 6-1: config 0 has no interface number 0 [ 255.379098][ T955] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 255.391484][ T955] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0xE has an invalid bInterval 211, changing to 11 [ 255.402716][ T955] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0xE has invalid maxpacket 57888, setting to 1024 [ 255.420151][ T955] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 255.429640][ T955] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 255.437829][ T955] usb 6-1: Product: syz [ 255.445584][ T955] usb 6-1: config 0 descriptor?? [ 255.675752][ T928] usb 6-1: USB disconnect, device number 24 [ 255.895033][ T6058] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 256.055210][ T6058] usb 5-1: Using ep0 maxpacket: 32 [ 256.061780][ T6058] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 256.071533][ T6058] usb 5-1: config 0 has no interface number 0 [ 256.077844][ T6058] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 256.088189][ T6058] usb 5-1: config 0 interface 196 has no altsetting 0 [ 256.096786][ T6058] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 256.106001][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.114222][ T6058] usb 5-1: Product: syz [ 256.118499][ T6058] usb 5-1: Manufacturer: syz [ 256.123171][ T6058] usb 5-1: SerialNumber: syz [ 256.129696][ T6058] usb 5-1: config 0 descriptor?? [ 256.135575][ T9675] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 256.335677][ T9685] ALSA: mixer_oss: invalid index 100000 [ 256.579148][ T955] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 256.589137][ T6058] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 256.598376][ T6058] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 256.728690][ T955] usb 6-1: device descriptor read/64, error -71 [ 256.883661][ T9695] openvswitch: netlink: Flow key attr not present in new flow. [ 257.006776][ T955] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 257.145645][ T955] usb 6-1: device descriptor read/64, error -71 [ 257.266552][ T955] usb usb6-port1: attempt power cycle [ 257.470275][ T9709] syz.2.1147: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.486071][ T9709] CPU: 1 UID: 0 PID: 9709 Comm: syz.2.1147 Not tainted syzkaller #0 PREEMPT(full) [ 257.486094][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.486113][ T9709] Call Trace: [ 257.486121][ T9709] [ 257.486129][ T9709] dump_stack_lvl+0x189/0x250 [ 257.486157][ T9709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.486177][ T9709] ? __pfx__printk+0x10/0x10 [ 257.486202][ T9709] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.486229][ T9709] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.486257][ T9709] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 257.486285][ T9709] warn_alloc+0x214/0x310 [ 257.486308][ T9709] ? stack_depot_save_flags+0x40/0x860 [ 257.486339][ T9709] ? __pfx_warn_alloc+0x10/0x10 [ 257.486363][ T9709] ? kasan_save_track+0x3e/0x80 [ 257.486382][ T9709] ? __kasan_kmalloc+0x93/0xb0 [ 257.486405][ T9709] ? xsk_setsockopt+0x4dc/0x8d0 [ 257.486422][ T9709] ? do_sock_setsockopt+0x17c/0x1b0 [ 257.486444][ T9709] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 257.486465][ T9709] ? do_syscall_64+0xfa/0xfa0 [ 257.486497][ T9709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.486527][ T9709] __vmalloc_node_range_noprof+0x125/0x12f0 [ 257.486582][ T9709] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.486603][ T9709] ? xskq_create+0x56/0x170 [ 257.486625][ T9709] ? __kasan_kmalloc+0x93/0xb0 [ 257.486653][ T9709] vmalloc_user_noprof+0xad/0xf0 [ 257.486675][ T9709] ? xskq_create+0xbf/0x170 [ 257.486695][ T9709] xskq_create+0xbf/0x170 [ 257.486719][ T9709] xsk_init_queue+0xb0/0x110 [ 257.486746][ T9709] xsk_setsockopt+0x4dc/0x8d0 [ 257.486769][ T9709] ? __pfx_xsk_setsockopt+0x10/0x10 [ 257.486789][ T9709] ? __pfx_aa_sk_perm+0x10/0x10 [ 257.486821][ T9709] ? aa_sock_opt_perm+0xff/0x1b0 [ 257.486843][ T9709] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 257.486867][ T9709] ? __pfx_xsk_setsockopt+0x10/0x10 [ 257.486888][ T9709] do_sock_setsockopt+0x17c/0x1b0 [ 257.486917][ T9709] __x64_sys_setsockopt+0x13f/0x1b0 [ 257.486946][ T9709] do_syscall_64+0xfa/0xfa0 [ 257.486966][ T9709] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.486987][ T9709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.487004][ T9709] ? clear_bhb_loop+0x60/0xb0 [ 257.487027][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.487046][ T9709] RIP: 0033:0x7f0ace58eba9 [ 257.487071][ T9709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.487088][ T9709] RSP: 002b:00007f0acc7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 257.487108][ T9709] RAX: ffffffffffffffda RBX: 00007f0ace7d5fa0 RCX: 00007f0ace58eba9 [ 257.487122][ T9709] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 257.487134][ T9709] RBP: 00007f0ace611e19 R08: 0000000000000004 R09: 0000000000000000 [ 257.487146][ T9709] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.487158][ T9709] R13: 00007f0ace7d6038 R14: 00007f0ace7d5fa0 R15: 00007fff611200f8 [ 257.487193][ T9709] [ 257.487266][ T9709] Mem-Info: [ 257.562390][ T9711] overlayfs: failed to clone upperpath [ 257.567293][ T9709] active_anon:25786 inactive_anon:0 isolated_anon:0 [ 257.567293][ T9709] active_file:7306 inactive_file:49276 isolated_file:0 [ 257.567293][ T9709] unevictable:768 dirty:55 writeback:0 [ 257.567293][ T9709] slab_reclaimable:11062 slab_unreclaimable:95680 [ 257.567293][ T9709] mapped:25164 shmem:20839 pagetables:1496 [ 257.567293][ T9709] sec_pagetables:0 bounce:0 [ 257.567293][ T9709] kernel_misc_reclaimable:0 [ 257.567293][ T9709] free:1295590 free_pcp:22367 free_cma:0 [ 257.844116][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.852417][ T955] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 257.856974][ T9709] Node 0 active_anon:103208kB inactive_anon:0kB active_file:29204kB inactive_file:196832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100512kB dirty:4kB writeback:0kB shmem:81812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12584kB pagetables:5696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.896654][ T955] usb 6-1: device descriptor read/8, error -71 [ 257.897213][ T9709] Node 1 active_anon:8kB inactive_anon:0kB active_file:20kB inactive_file:272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:16kB writeback:0kB shmem:1544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.933761][ T9709] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.965427][ T9709] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 257.971562][ T9709] Node 0 DMA32 free:1289452kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103260kB inactive_anon:0kB active_file:29204kB inactive_file:195760kB unevictable:1536kB writepending:104kB zspages:0kB present:3129332kB managed:2555276kB mlocked:0kB bounce:0kB free_pcp:55004kB local_pcp:22388kB free_cma:0kB [ 258.005704][ T9709] lowmem_reserve[]: 0 0 1 1 1 [ 258.010497][ T9709] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1072kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 258.041820][ T9709] lowmem_reserve[]: 0 0 0 0 0 [ 258.049748][ T9709] Node 1 Normal free:3879152kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:20kB inactive_file:272kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:33044kB local_pcp:16256kB free_cma:0kB [ 258.082172][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.088384][ T9709] lowmem_reserve[]: 0 0 0 0 0 [ 258.093126][ T9709] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.105906][ T9709] Node 0 DMA32: 1169*4kB (UME) 843*8kB (UM) 383*16kB (UME) 327*32kB (UME) 113*64kB (UM) 74*128kB (UME) 56*256kB (UM) 33*512kB (UM) 15*1024kB (UM) 3*2048kB (UM) 291*4096kB (UME) = 1289388kB [ 258.125486][ T9709] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 258.137501][ T9709] Node 1 Normal: 208*4kB (UE) 52*8kB (UE) 41*16kB (UE) 120*32kB (UME) 26*64kB (UE) 12*128kB (UME) 2*256kB (UM) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 943*4096kB (M) = 3879152kB [ 258.157094][ T9709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.166720][ T9709] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 258.176134][ T9709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.185962][ T955] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 258.189007][ T9709] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 258.203096][ T9709] 77417 total pagecache pages [ 258.207858][ T9709] 0 pages in swap cache [ 258.212005][ T9709] Free swap = 124996kB [ 258.216434][ T9709] Total swap = 124996kB [ 258.220615][ T9709] 2097051 pages RAM [ 258.224417][ T9709] 0 pages HighMem/MovableOnly [ 258.226091][ T955] usb 6-1: device descriptor read/8, error -71 [ 258.229451][ T9709] 426334 pages reserved [ 258.240228][ T9709] 0 pages cma reserved [ 258.343469][ T955] usb usb6-port1: unable to enumerate USB device [ 258.567500][ T5908] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 258.679855][ T9727] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 258.689003][ T9727] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 258.749344][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 258.761374][ T5908] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 258.772222][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.780524][ T5908] usb 3-1: Product: syz [ 258.785467][ T5908] usb 3-1: Manufacturer: syz [ 258.790484][ T5908] usb 3-1: SerialNumber: syz [ 258.866460][ T955] usb 5-1: USB disconnect, device number 102 [ 259.027687][ T5908] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 259.049389][ T5908] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 259.081001][ T5908] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 259.242230][ T6058] usb 3-1: USB disconnect, device number 105 [ 259.261600][ T6058] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 259.289738][ T6058] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 259.304820][ T6058] visor 3-1:1.0: device disconnected [ 259.347547][ T9740] 9p filesystem being mounted at /492/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 259.412807][ T5908] IPVS: starting estimator thread 0... [ 259.511895][ T9744] IPVS: using max 32 ests per chain, 76800 per kthread [ 259.990324][ T9771] kthread_run failed with err -4 [ 260.142232][ T9786] blk_print_req_error: 135 callbacks suppressed [ 260.142251][ T9786] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 260.210926][ T9786] FAT-fs (loop4): unable to read boot sector [ 260.210998][ T9792] netlink: 'syz.4.1171': attribute type 12 has an invalid length. [ 260.270767][ T9792] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1171'. [ 260.415304][ T9800] mkiss: ax0: crc mode is auto. [ 260.572462][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 260.694888][ T5908] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 260.740283][ T9811] 9pnet_fd: Insufficient options for proto=fd [ 260.786982][ T6058] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 260.860880][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.872137][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.883843][ T5908] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 260.893770][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.908005][ T5908] usb 5-1: config 0 descriptor?? [ 260.951528][ T6058] usb 6-1: Using ep0 maxpacket: 16 [ 260.960802][ T6058] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.975154][ T6058] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.989820][ T6058] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 261.002732][ T6058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.023718][ T6058] usb 6-1: config 0 descriptor?? [ 261.040319][ T6058] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 261.103897][ T955] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 261.141508][ T9804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.154428][ T9804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.267503][ T6058] usb 6-1: USB disconnect, device number 29 [ 261.299480][ T955] usb 3-1: not running at top speed; connect to a high speed hub [ 261.313801][ T955] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 261.338420][ T955] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 261.373380][ T955] usb 3-1: config 1 interface 0 has no altsetting 0 [ 261.393864][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 261.399863][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 261.419562][ T955] usb 3-1: New USB device found, idVendor=05ac, idProduct=027e, bcdDevice= 0.40 [ 261.437178][ T5908] usb 5-1: USB disconnect, device number 103 [ 261.444645][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.452649][ T955] usb 3-1: Product: syz [ 261.470306][ T955] usb 3-1: Manufacturer: syz [ 261.474944][ T955] usb 3-1: SerialNumber: syz [ 261.490753][ T9813] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.749438][ T955] usbhid 3-1:1.0: can't add hid device: -71 [ 261.755750][ T955] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 261.885677][ T955] usb 3-1: USB disconnect, device number 106 [ 262.241168][ T9842] 9p filesystem being mounted at /103/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 262.345813][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 262.455146][ T9850] program syz.5.1189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.597931][ T955] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 262.640586][ T6058] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 262.779565][ T955] usb 5-1: Using ep0 maxpacket: 32 [ 262.786149][ T955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.796318][ T955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.801103][ T6058] usb 3-1: Using ep0 maxpacket: 32 [ 262.814231][ T955] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 262.815445][ T6058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.824269][ T955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.842216][ T6058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.842934][ T955] usb 5-1: Product: syz [ 262.853809][ T6058] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 262.858071][ T955] usb 5-1: Manufacturer: syz [ 262.870887][ T6058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.870920][ T955] usb 5-1: SerialNumber: syz [ 262.884488][ T6058] usb 3-1: config 0 descriptor?? [ 262.888013][ T955] usb 5-1: config 0 descriptor?? [ 263.147333][ T955] usb 5-1: USB disconnect, device number 104 [ 263.547179][ T6058] usbhid 3-1:0.0: can't add hid device: -71 [ 263.563285][ T6058] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 263.589629][ T6058] usb 3-1: USB disconnect, device number 107 [ 264.081221][ T9879] 9p filesystem being mounted at /507/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 264.447446][ T955] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 264.612230][ T955] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 264.621477][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.630614][ T955] usb 3-1: Product: syz [ 264.637719][ T955] usb 3-1: Manufacturer: syz [ 264.643897][ T955] usb 3-1: SerialNumber: syz [ 264.882170][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.888558][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.891924][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.912956][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.926847][ T955] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 264.949454][ T955] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 264.986206][ T955] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 265.006521][ T955] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 265.038972][ T955] usb 3-1: USB disconnect, device number 108 [ 265.572226][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 265.572241][ T30] audit: type=1326 audit(6049247409.436:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.2.1203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ace58eba9 code=0x0 [ 265.943984][ T928] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 266.117046][ T928] usb 3-1: Using ep0 maxpacket: 16 [ 266.132381][ T928] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 266.138894][ T9923] 9p filesystem being mounted at /226/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 266.153933][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.174997][ T30] audit: type=1800 audit(6049247409.978:168): pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1209" name="/" dev="9p" ino=54043195528773634 res=0 errno=0 [ 266.195838][ T928] usb 3-1: Product: syz [ 266.200008][ T928] usb 3-1: Manufacturer: syz [ 266.206904][ T928] usb 3-1: SerialNumber: syz [ 266.229453][ T928] r8152-cfgselector 3-1: Unknown version 0x0000 [ 266.235807][ T928] r8152-cfgselector 3-1: config 0 descriptor?? [ 266.618306][ T5970] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 266.638956][ T6058] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 266.693353][ T928] r8152-cfgselector 3-1: USB disconnect, device number 109 [ 266.796996][ T5970] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 266.806383][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.815473][ T5970] usb 5-1: Product: syz [ 266.831383][ T5970] usb 5-1: Manufacturer: syz [ 266.836014][ T5970] usb 5-1: SerialNumber: syz [ 266.840732][ T6058] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 266.855009][ T6058] usb 6-1: string descriptor 0 read error: -22 [ 266.861435][ T6058] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 266.873495][ T5970] usb 5-1: config 0 descriptor?? [ 266.878811][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.106667][ T5970] usb 5-1: ignoring: probably an ADSL modem [ 267.115605][ T955] usb 6-1: USB disconnect, device number 30 [ 267.178367][ T9951] 9p filesystem being mounted at /513/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 267.280564][ T6058] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 267.462083][ T6058] usb 3-1: Using ep0 maxpacket: 32 [ 267.469205][ T6058] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.478000][ T6058] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.488171][ T6058] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 267.500385][ T6058] usb 3-1: string descriptor 0 read error: -22 [ 267.506927][ T6058] usb 3-1: New USB device found, idVendor=1bc7, idProduct=10c4, bcdDevice=c6.0a [ 267.516219][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.526439][ T6058] usb 3-1: config 0 descriptor?? [ 267.536235][ T5970] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 267.755362][ T9962] input: syz0 as /devices/virtual/input/input22 [ 267.761284][ T6058] usb 5-1: USB disconnect, device number 105 [ 267.796582][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 268.221463][ T955] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 268.360845][ T955] usb 6-1: device descriptor read/64, error -71 [ 268.616682][ T955] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 268.758036][ T6058] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 268.767181][ T955] usb 6-1: device descriptor read/64, error -71 [ 268.833925][ T9977] 9p filesystem being mounted at /516/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 268.895071][ T955] usb usb6-port1: attempt power cycle [ 268.930617][ T6058] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.942292][ T6058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.953362][ T6058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 268.963316][ T6058] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.977284][ T6058] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.992977][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.007698][ T6058] usb 5-1: config 0 descriptor?? [ 269.279452][ T955] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 269.304343][ T955] usb 6-1: device descriptor read/8, error -71 [ 269.451539][ T6058] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 269.466696][ T6058] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 269.578846][ T955] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 269.611611][ T955] usb 6-1: device descriptor read/8, error -71 [ 269.677476][ T5923] usb 5-1: USB disconnect, device number 106 [ 269.701978][ T9988] netlink: 5092 bytes leftover after parsing attributes in process `syz.3.1231'. [ 269.729482][ T955] usb usb6-port1: unable to enumerate USB device [ 269.783826][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 269.833274][ T9997] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 269.918021][T10004] 9p filesystem being mounted at /525/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 270.125491][ T5923] usb 3-1: USB disconnect, device number 110 [ 270.190288][T10011] comedi comedi1: comedi_config --init_data is deprecated [ 270.206683][T10012] comedi comedi1: comedi_config --init_data is deprecated [ 270.551631][ T6058] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 270.637157][ T5923] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 270.716356][ T6058] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 270.725566][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.734427][ T6058] usb 5-1: Product: syz [ 270.738594][ T6058] usb 5-1: Manufacturer: syz [ 270.743184][ T6058] usb 5-1: SerialNumber: syz [ 270.804798][ T5923] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 270.815067][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.826938][ T5923] usb 3-1: Product: syz [ 270.832632][ T5923] usb 3-1: Manufacturer: syz [ 270.837387][ T5923] usb 3-1: SerialNumber: syz [ 270.853937][ T5923] usb 3-1: config 0 descriptor?? [ 270.867684][ T5923] usb 3-1: disable ehci-hcd to run US-144 [ 271.016978][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 271.080266][ T928] usb 3-1: USB disconnect, device number 111 [ 271.503151][ T5923] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 271.663438][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 271.670140][ T5923] usb 6-1: config 0 has an invalid interface number: 201 but max is 0 [ 271.678447][ T5923] usb 6-1: config 0 has no interface number 0 [ 271.689573][ T5923] usb 6-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=56.29 [ 271.698725][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.706909][ T5923] usb 6-1: Product: syz [ 271.711069][ T5923] usb 6-1: Manufacturer: syz [ 271.715662][ T5923] usb 6-1: SerialNumber: syz [ 271.725824][ T5923] usb 6-1: config 0 descriptor?? [ 271.956711][T10045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.966881][T10045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.017046][ T5923] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in warm state. [ 272.044223][ T5923] dvb-usb: bulk message failed: -22 (3/0) [ 272.062805][ T928] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 272.094137][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.107745][T10053] overlayfs: cannot append lower layer [ 272.118847][ T5923] dvbdev: DVB: registering new adapter (DiBcom USB1.1 DVB-T reference design (MOD3000)) [ 272.139881][ T5923] usb 6-1: media controller created [ 272.208447][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.240399][ T5923] dvb-usb: bulk message failed: -22 (6/0) [ 272.249971][ T5923] dvb-usb: no frontend was attached by 'DiBcom USB1.1 DVB-T reference design (MOD3000)' [ 272.261131][ T928] usb 3-1: Using ep0 maxpacket: 16 [ 272.274129][T10060] overlay: Bad value for 'nfs_export' [ 272.277274][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 272.281762][ T928] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 272.320899][ T928] usb 3-1: config 254 has no interface number 0 [ 272.321384][ T5923] dvb-usb: schedule remote query interval to 150 msecs. [ 272.334498][ T5923] dvb-usb: bulk message failed: -22 (3/0) [ 272.334620][ T928] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 272.371900][ T5923] dvb-usb: DiBcom USB1.1 DVB-T reference design (MOD3000) successfully initialized and connected. [ 272.379699][ T928] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.397052][ T5923] usb 6-1: USB disconnect, device number 35 [ 272.401084][ T928] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 272.454640][ T928] usb 3-1: config 254 interface 235 has no altsetting 0 [ 272.470587][ T928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 272.482761][ T928] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 272.494328][ T928] usb 3-1: Product: syz [ 272.499792][ T928] usb 3-1: Manufacturer: syz [ 272.504487][ T928] usb 3-1: SerialNumber: syz [ 272.528412][T10041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 272.556093][ T5923] dvb-usb: DiBcom USB1.1 DVB-T reference design (M successfully deinitialized and disconnected. [ 272.679948][T10069] netlink: del zone limit has 4 unknown bytes [ 272.707906][ T6058] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 272.731781][ T6058] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 272.742432][ T6058] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 272.756689][T10041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 272.757713][ T6058] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 272.779397][ T928] usbtest 3-1:254.235: Linux gadget zero [ 272.787610][ T6058] usb 5-1: USB disconnect, device number 107 [ 272.793638][ T928] usbtest 3-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 272.882322][ T5923] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 272.997163][ T928] usb 3-1: USB disconnect, device number 112 [ 273.042809][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 273.051291][ T5923] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 273.062179][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.070369][ T5923] usb 6-1: Product: syz [ 273.074715][ T5923] usb 6-1: Manufacturer: syz [ 273.079321][ T5923] usb 6-1: SerialNumber: syz [ 273.086571][ T5923] usb 6-1: config 0 descriptor?? [ 273.096377][ T5923] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 273.331656][ T5923] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 273.340391][ T5923] visor 6-1:0.0: probe with driver visor failed with error -71 [ 273.356901][ T5923] usb 6-1: USB disconnect, device number 36 [ 273.518588][T10086] 9pnet_fd: Insufficient options for proto=fd [ 273.606757][T10090] overlayfs: invalid redirect ((null)) [ 273.844360][ T5923] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 273.848708][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1266'. [ 273.983455][ T5923] usb 5-1: device descriptor read/64, error -71 [ 274.012364][T10107] hub 9-0:1.0: USB hub found [ 274.018545][T10107] hub 9-0:1.0: 1 port detected [ 274.122924][ T928] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 274.255810][ T5923] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 274.327351][ T928] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 274.344037][ T928] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.353228][T10122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1272'. [ 274.355343][ T928] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 274.377417][ T928] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.384129][ T928] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 274.393222][ T928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.404422][ T928] usb 3-1: config 0 descriptor?? [ 274.410996][ T5923] usb 5-1: device descriptor read/64, error -71 [ 274.529058][ T5923] usb usb5-port1: attempt power cycle [ 274.551267][ T6058] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 274.714494][ T6058] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 274.724801][ T6058] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 274.736021][ T6058] usb 6-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 274.751592][ T6058] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.760694][ T6058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 274.768839][ T6058] usb 6-1: SerialNumber: syz [ 274.856808][ T928] hid-alps 0003:044E:120C.0019: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 274.892107][ T5923] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 274.933823][ T5923] usb 5-1: device descriptor read/8, error -71 [ 275.004664][ T6058] usb 6-1: bad CDC descriptors [ 275.015512][ T6058] usb 6-1: USB disconnect, device number 37 [ 275.067957][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1266'. [ 275.078230][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1266'. [ 275.089720][ T955] usb 3-1: USB disconnect, device number 113 [ 275.202035][ T5923] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 275.225126][ T5923] usb 5-1: device descriptor read/8, error -71 [ 275.343384][ T5923] usb usb5-port1: unable to enumerate USB device [ 275.591038][T10130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1274'. [ 275.601769][T10129] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1274'. [ 275.605289][T10130] overlay: ./file0 is not a directory [ 275.817960][T10136] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 275.851844][T10136] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 276.132230][ T6058] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 276.305174][ T6058] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 276.313428][ T6058] usb 6-1: config 0 has no interface number 0 [ 276.320070][ T6058] usb 6-1: config 0 interface 29 has no altsetting 0 [ 276.329645][ T6058] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 276.344758][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.352829][ T6058] usb 6-1: Product: syz [ 276.360528][ T6058] usb 6-1: Manufacturer: syz [ 276.365158][ T6058] usb 6-1: SerialNumber: syz [ 276.379145][ T6058] usb 6-1: config 0 descriptor?? [ 276.617313][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.642888][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.675500][ T6058] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 276.911611][T10158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1284'. [ 276.927983][ T6058] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 276.943010][ T6058] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 276.999787][ T6058] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 277.016401][ T6058] usb 6-1: USB disconnect, device number 38 [ 277.190653][ T928] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 277.329658][ T928] usb 3-1: device descriptor read/64, error -71 [ 277.597132][ T928] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 277.746711][ T928] usb 3-1: device descriptor read/64, error -71 [ 277.865201][ T928] usb usb3-port1: attempt power cycle [ 277.896208][ T5923] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 277.928188][ T955] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 278.047196][ T5923] usb 6-1: device descriptor read/64, error -71 [ 278.103072][ T955] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 278.113962][ T955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.126903][ T955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.137154][ T955] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 278.153691][ T955] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 278.162726][ T955] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 278.171482][ T955] usb 5-1: Manufacturer: syz [ 278.179476][ T955] usb 5-1: config 0 descriptor?? [ 278.238216][ T928] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 278.260277][ T928] usb 3-1: device descriptor read/8, error -71 [ 278.313070][ T5923] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 278.462769][ T5923] usb 6-1: device descriptor read/64, error -71 [ 278.516186][ T928] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 278.540126][ T928] usb 3-1: device descriptor read/8, error -71 [ 278.580564][ T5923] usb usb6-port1: attempt power cycle [ 278.621194][ T955] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 278.632782][ T955] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 278.658273][ T928] usb usb3-port1: unable to enumerate USB device [ 278.943843][ T5923] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 278.976598][ T5923] usb 6-1: device descriptor read/8, error -71 [ 279.243563][ T5923] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 279.264877][ T5923] usb 6-1: device descriptor read/8, error -71 [ 279.393384][ T5923] usb usb6-port1: unable to enumerate USB device [ 280.219906][T10181] overlayfs: failed to resolve './file1': -2 [ 280.268495][T10181] fuse: Unknown parameter 'Na;Āgroqp_id' [ 280.326520][T10184] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1294'. [ 280.486042][T10194] binder: 10193:10194 ioctl c018620c 200000000140 returned -22 [ 280.889960][ T928] usb 5-1: reset high-speed USB device number 112 using dummy_hcd [ 280.978480][T10203] binder: 10202:10203 ioctl 40046210 0 returned -14 [ 280.987136][T10203] binder: 10202:10203 ioctl 40046210 0 returned -14 [ 281.039950][ T928] usb 5-1: device descriptor read/64, error -71 [ 281.296095][ T928] usb 5-1: reset high-speed USB device number 112 using dummy_hcd [ 281.445529][ T928] usb 5-1: device descriptor read/64, error -71 [ 281.701998][ T928] usb 5-1: reset high-speed USB device number 112 using dummy_hcd [ 281.725013][ T928] usb 5-1: device descriptor read/8, error -71 [ 281.766084][ T955] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 281.832190][ T5970] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 281.937111][ T955] usb 3-1: Using ep0 maxpacket: 16 [ 281.945611][ T955] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 281.955198][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.963272][ T955] usb 3-1: Product: syz [ 281.967446][ T955] usb 3-1: Manufacturer: syz [ 281.972149][ T955] usb 3-1: SerialNumber: syz [ 281.982713][ T955] r8152-cfgselector 3-1: Unknown version 0x0000 [ 281.988976][ T955] r8152-cfgselector 3-1: config 0 descriptor?? [ 282.001768][ T928] usb 5-1: reset high-speed USB device number 112 using dummy_hcd [ 282.013735][ T5970] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 282.023155][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.031188][ T5970] usb 6-1: Product: syz [ 282.035798][ T928] usb 5-1: device descriptor read/8, error -71 [ 282.041991][ T5970] usb 6-1: Manufacturer: syz [ 282.046726][ T5970] usb 6-1: SerialNumber: syz [ 282.054359][ T5970] usb 6-1: config 0 descriptor?? [ 282.155800][ T5923] usb 5-1: USB disconnect, device number 112 [ 282.275333][ T5970] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 282.282851][ T5970] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 282.293136][ T5970] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 282.306299][ T5970] usb 6-1: USB disconnect, device number 43 [ 282.322562][ T5923] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 282.432641][ T928] r8152-cfgselector 3-1: USB disconnect, device number 118 [ 282.460992][ T5923] usb 5-1: device descriptor read/64, error -71 [ 282.728250][ T5923] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 282.888671][ T5923] usb 5-1: device descriptor read/64, error -71 [ 283.020840][ T5923] usb usb5-port1: attempt power cycle [ 283.113763][ T928] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 283.151329][T10220] infiniband syz2: set active [ 283.156742][T10220] infiniband syz2: added bond_slave_0 [ 283.196582][T10220] RDS/IB: syz2: added [ 283.201900][T10220] smc: adding ib device syz2 with port count 1 [ 283.208155][T10220] smc: ib device syz2 port 1 has no pnetid [ 283.291870][ T928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 283.303047][ T928] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.316268][ T928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.316541][ T955] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 283.323418][ T928] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 283.340425][ T928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.359926][ T928] usb 6-1: config 0 descriptor?? [ 283.365495][T10218] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 283.391070][ T5923] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 283.414742][ T5923] usb 5-1: device descriptor read/8, error -71 [ 283.510714][ T955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 283.535922][ T955] usb 3-1: not running at top speed; connect to a high speed hub [ 283.555631][ T955] usb 3-1: config 13 has an invalid interface number: 120 but max is 0 [ 283.565718][ T955] usb 3-1: config 13 has no interface number 0 [ 283.571899][ T955] usb 3-1: config 13 interface 120 has no altsetting 0 [ 283.583846][ T955] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=a1.c9 [ 283.593744][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.607136][ T955] usb 3-1: Product: syz [ 283.611360][ T955] usb 3-1: Manufacturer: syz [ 283.618178][ T955] usb 3-1: SerialNumber: syz [ 283.701643][ T5923] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 283.729385][ T5923] usb 5-1: device descriptor read/8, error -71 [ 283.817366][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.836931][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.856439][ T5923] usb usb5-port1: unable to enumerate USB device [ 283.886385][ T928] kye 0003:0458:5015.001B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 283.930826][ T928] kye 0003:0458:5015.001B: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0 [ 283.962044][ T928] kye 0003:0458:5015.001B: tablet-enabling feature report not found [ 283.983090][ T928] kye 0003:0458:5015.001B: tablet enabling failed [ 284.100750][ T5970] usb 6-1: USB disconnect, device number 44 [ 284.289242][ T5923] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 284.466369][ T5923] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 284.476876][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.488840][ T5923] usb 5-1: Product: syz [ 284.495889][ T5923] usb 5-1: Manufacturer: syz [ 284.502953][ T5923] usb 5-1: SerialNumber: syz [ 284.522995][ T5923] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 284.562793][ T5908] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 284.721187][ T955] usb 3-1: USB disconnect, device number 119 [ 284.798846][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.027202][ T5970] usb 5-1: USB disconnect, device number 117 [ 285.112384][ T928] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 285.129170][T10250] nfs: Unknown parameter '}-' [ 285.231842][T10257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.240549][T10257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.258449][T10257] overlayfs: missing 'lowerdir' [ 285.265355][T10258] binder: BINDER_SET_CONTEXT_MGR already set [ 285.271779][T10258] binder: 10255:10258 ioctl 4018620d 200000000280 returned -16 [ 285.280363][T10257] binder: 10255:10257 ioctl c0306201 200000000080 returned -14 [ 285.283050][ T928] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 285.293388][T10257] binder_alloc: binder_alloc_mmap_handler: 10255 200000ffd000-200001000000 already mapped failed -16 [ 285.298118][ T928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.316729][ T928] usb 6-1: Product: syz [ 285.320892][ T928] usb 6-1: Manufacturer: syz [ 285.325479][ T928] usb 6-1: SerialNumber: syz [ 285.333089][ T928] usb 6-1: config 0 descriptor?? [ 285.699770][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 285.752079][ T5908] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 285.764057][ T5908] ath9k_htc: Failed to initialize the device [ 285.796067][ T5970] usb 5-1: ath9k_htc: USB layer deinitialized [ 286.099222][ T1095] Bluetooth: hci4: Frame reassembly failed (-84) [ 286.265011][ T928] mos7840 6-1:0.0: required endpoints missing [ 286.321848][ T928] usb 6-1: USB disconnect, device number 45 [ 286.371308][T10307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1335'. [ 286.449232][ T955] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 286.609571][ T955] usb 3-1: Using ep0 maxpacket: 32 [ 286.616451][ T955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.627466][ T955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.637228][ T955] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 286.646364][ T5908] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 286.654102][ T955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.665750][ T955] usb 3-1: config 0 descriptor?? [ 286.823535][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 286.830975][ T5908] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 286.839746][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.849896][ T5908] usb 5-1: config 1 has no interface number 1 [ 286.862394][ T5908] usb 5-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 286.873242][ T5908] usb 5-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 286.891005][ T5908] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 286.900209][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.908241][ T5908] usb 5-1: Product: syz [ 286.912481][ T5908] usb 5-1: Manufacturer: syz [ 286.917087][ T5908] usb 5-1: SerialNumber: syz [ 287.062878][T10315] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1337'. [ 287.072248][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 287.128921][ T955] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 287.198423][ T5908] usb 5-1: USB disconnect, device number 118 [ 287.218045][T10321] netlink: 'syz.3.1339': attribute type 1 has an invalid length. [ 287.243260][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.340472][ T928] usb 3-1: USB disconnect, device number 120 [ 287.953406][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 288.085313][ T928] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 288.235173][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 288.241617][ T5862] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 288.255781][ T928] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.280176][ T928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 288.283924][ T5908] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 288.301456][ T928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 255, setting to 64 [ 288.355739][ T928] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 288.368797][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.377402][ T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.379826][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.389083][ T928] usb 5-1: config 0 descriptor?? [ 288.403913][T10332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 288.446636][ T928] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 288.487015][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 288.505557][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.513388][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.515198][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.520712][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.537898][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.545275][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.552597][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.559902][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.565036][ T5908] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 288.567233][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.567436][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.576894][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.584587][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.599813][ T5908] usb 3-1: config 0 descriptor?? [ 288.606850][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.618642][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.626158][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.634310][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.642343][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.649662][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.657364][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.665078][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.672395][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.676776][ T5218] usb 5-1: control msg error: -71 [ 288.679718][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.692771][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.700255][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.707618][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.714938][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.722249][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.729553][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.736861][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.744070][ C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 288.764046][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 288.766307][ T928] usb 5-1: USB disconnect, device number 119 [ 288.771171][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19 [ 288.786513][ T5218] usb 5-1: control msg error: -71 [ 289.067413][T10340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.076152][T10340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.165347][ T5970] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 289.212999][T10367] overlayfs: failed to clone upperpath [ 289.328285][ T5970] usb 6-1: config 0 interface 0 has no altsetting 0 [ 289.334973][ T5970] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 289.347007][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.371675][ T5970] usb 6-1: config 0 descriptor?? [ 289.631199][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 289.647964][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 289.671702][ T5908] usb 3-1: USB disconnect, device number 121 [ 289.742807][ T5923] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 289.881943][ T5923] usb 5-1: device descriptor read/64, error -71 [ 290.040662][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.050966][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.062250][ T5970] video4linux radio48: keene_cmd_set failed (-71) [ 290.069308][ T5970] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 290.079065][ T5970] usb 6-1: USB disconnect, device number 46 [ 290.163010][ T5923] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 290.309575][ T5923] usb 5-1: device descriptor read/64, error -71 [ 290.406137][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 290.427776][ T5923] usb usb5-port1: attempt power cycle [ 290.491567][T10397] netlink: 'syz.3.1366': attribute type 27 has an invalid length. [ 290.590256][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 290.598807][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 290.620040][ T10] usb 3-1: config 220 has no interface number 2 [ 290.626365][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 290.658958][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 290.666407][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 290.674585][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 290.683689][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 290.701034][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.720032][ T10] usb 3-1: Product: syz [ 290.724249][ T10] usb 3-1: Manufacturer: syz [ 290.729017][ T10] usb 3-1: SerialNumber: syz [ 290.790864][ T5923] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 290.816220][ T5923] usb 5-1: device descriptor read/8, error -71 [ 290.962040][ T5970] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 291.039671][ T10] usb 3-1: selecting invalid altsetting 0 [ 291.056767][ T10] usb 3-1: selecting invalid altsetting 0 [ 291.072085][ T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 291.078460][ T10] usb 3-1: No valid video chain found. [ 291.079738][ T5923] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 291.103288][ T10] usb 3-1: selecting invalid altsetting 0 [ 291.109056][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 291.118028][ T5923] usb 5-1: device descriptor read/8, error -71 [ 291.123571][ T10] usb 3-1: USB disconnect, device number 122 [ 291.162623][ T5970] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 291.179422][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 291.187799][ T5970] usb 6-1: Product: syz [ 291.191972][ T5970] usb 6-1: SerialNumber: syz [ 291.203352][ T5970] usb 6-1: config 0 descriptor?? [ 291.240304][ T5923] usb usb5-port1: unable to enumerate USB device [ 291.340209][T10435] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 291.347292][T10435] IPVS: set_ctl: invalid protocol: 31091 0.0.0.0:0 [ 291.461098][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.469857][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.482722][ T5970] hso 6-1:0.0: Failed to find BULK IN ep [ 291.698768][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.710276][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.728635][ T5970] usb 6-1: USB disconnect, device number 47 [ 291.761704][T10450] bridge0: port 3(gretap0) entered blocking state [ 291.769354][T10450] bridge0: port 3(gretap0) entered disabled state [ 291.777556][T10450] gretap0: entered allmulticast mode [ 291.783960][T10450] gretap0: entered promiscuous mode [ 291.789961][T10450] bridge0: port 3(gretap0) entered blocking state [ 291.796531][T10450] bridge0: port 3(gretap0) entered forwarding state [ 292.320071][ T5970] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 292.401746][T10467] program syz.5.1387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.510166][ T5970] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.532498][ T5970] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 292.547581][ T5970] usb 3-1: can't read configurations, error -71 [ 293.132744][ T5908] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 293.303959][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 293.310706][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.321856][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.331882][ T5908] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 293.341186][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.352682][ T5908] usb 5-1: config 0 descriptor?? [ 293.472340][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1396'. [ 293.485897][ T5970] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 293.537574][T10493] team0: Port device team_slave_0 removed [ 293.690013][ T5970] usb 3-1: no configurations [ 293.694652][ T5970] usb 3-1: can't read configurations, error -22 [ 293.707420][ T5970] usb usb3-port1: attempt power cycle [ 293.802439][ T5908] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 293.811248][ T5908] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 293.818449][ T5908] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 293.825225][ T5908] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 293.832732][ T5908] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 293.842835][ T5908] kone 0003:1E7D:2CED.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 294.014597][ T5908] usb 5-1: USB disconnect, device number 124 [ 294.076145][ T5970] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 294.098195][ T5970] usb 3-1: no configurations [ 294.102823][ T5970] usb 3-1: can't read configurations, error -22 [ 294.245103][ T5970] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 294.279262][ T5970] usb 3-1: no configurations [ 294.283861][ T5970] usb 3-1: can't read configurations, error -22 [ 294.290542][ T5970] usb usb3-port1: unable to enumerate USB device [ 294.524846][ T5908] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 294.686068][T10514] [ 294.688409][T10514] ====================================================== [ 294.694017][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 294.695397][T10514] WARNING: possible circular locking dependency detected [ 294.695413][T10514] syzkaller #0 Not tainted [ 294.701757][ T5908] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 294.707479][T10514] ------------------------------------------------------ [ 294.707489][T10514] syz.4.1405/10514 is trying to acquire lock: [ 294.707499][T10514] ffff8880213e0260 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 294.707542][T10514] [ 294.707542][T10514] but task is already holding lock: [ 294.707549][T10514] ffff888076b1b270 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 294.707592][T10514] [ 294.707592][T10514] which lock already depends on the new lock. [ 294.707592][T10514] [ 294.707599][T10514] [ 294.707599][T10514] the existing dependency chain (in reverse order) is: [ 294.707606][T10514] [ 294.707606][T10514] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 294.715148][ T5908] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.720665][T10514] lock_acquire+0x120/0x360 [ 294.720688][T10514] __mutex_lock+0x187/0x1350 [ 294.720708][T10514] nbd_queue_rq+0x257/0xf10 [ 294.720727][T10514] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 294.720743][T10514] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 294.720760][T10514] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 294.720777][T10514] blk_mq_run_hw_queue+0x348/0x4f0 [ 294.720798][T10514] blk_mq_dispatch_list+0xd0c/0xe00 [ 294.720813][T10514] blk_mq_flush_plug_list+0x469/0x550 [ 294.720828][T10514] __blk_flush_plug+0x3d3/0x4b0 [ 294.720844][T10514] __submit_bio+0x2d3/0x5a0 [ 294.720859][T10514] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 294.720874][T10514] block_read_full_folio+0x599/0x830 [ 294.720893][T10514] filemap_read_folio+0x117/0x380 [ 294.720914][T10514] do_read_cache_folio+0x350/0x590 [ 294.881466][T10514] read_part_sector+0xb6/0x2b0 [ 294.886742][T10514] adfspart_check_ICS+0xa4/0xa50 [ 294.892183][T10514] bdev_disk_changed+0x75f/0x14b0 [ 294.897705][T10514] blkdev_get_whole+0x380/0x510 [ 294.903071][T10514] bdev_open+0x31e/0xd30 [ 294.907817][T10514] blkdev_open+0x457/0x600 [ 294.912750][T10514] do_dentry_open+0x953/0x13f0 [ 294.918013][T10514] vfs_open+0x3b/0x340 [ 294.922585][T10514] path_openat+0x2ee5/0x3830 [ 294.927721][T10514] do_filp_open+0x1fa/0x410 [ 294.932735][T10514] do_sys_openat2+0x121/0x1c0 [ 294.937916][T10514] __x64_sys_openat+0x138/0x170 [ 294.943623][T10514] do_syscall_64+0xfa/0xfa0 [ 294.948635][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.955030][T10514] [ 294.955030][T10514] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 294.962223][T10514] lock_acquire+0x120/0x360 [ 294.967227][T10514] __mutex_lock+0x187/0x1350 [ 294.972324][T10514] nbd_queue_rq+0xc8/0xf10 [ 294.977243][T10514] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 294.983290][T10514] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 294.990119][T10514] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 294.996598][T10514] blk_mq_run_hw_queue+0x348/0x4f0 [ 295.002218][T10514] blk_mq_dispatch_list+0xd0c/0xe00 [ 295.007916][T10514] blk_mq_flush_plug_list+0x469/0x550 [ 295.013787][T10514] __blk_flush_plug+0x3d3/0x4b0 [ 295.019147][T10514] __submit_bio+0x2d3/0x5a0 [ 295.024150][T10514] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 295.030282][T10514] submit_bio_wait+0x104/0x200 [ 295.035550][T10514] bdev_rw_virt+0x331/0x4c0 [ 295.040567][T10514] hfsplus_read_wrapper+0x516/0x1050 [ 295.046354][T10514] hfsplus_fill_super+0x37d/0x1b50 [ 295.051970][T10514] get_tree_bdev_flags+0x40e/0x4d0 [ 295.057595][T10514] vfs_get_tree+0x92/0x2b0 [ 295.062539][T10514] do_new_mount+0x302/0xa10 [ 295.067551][T10514] __se_sys_mount+0x313/0x410 [ 295.072741][T10514] do_syscall_64+0xfa/0xfa0 [ 295.077751][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.084144][T10514] [ 295.084144][T10514] -> #4 (set->srcu){.+.+}-{0:0}: [ 295.091287][T10514] lock_sync+0xba/0x160 [ 295.095945][T10514] __synchronize_srcu+0x96/0x3a0 [ 295.101381][T10514] elevator_switch+0x12b/0x640 [ 295.106647][T10514] elevator_change+0x315/0x4c0 [ 295.111917][T10514] elevator_set_default+0x186/0x260 [ 295.117615][T10514] blk_register_queue+0x34e/0x3f0 [ 295.123139][T10514] __add_disk+0x677/0xd50 [ 295.127967][T10514] add_disk_fwnode+0xfc/0x480 [ 295.133153][T10514] nbd_dev_add+0x717/0xae0 [ 295.138071][T10514] nbd_init+0x168/0x1f0 [ 295.142931][T10514] do_one_initcall+0x236/0x820 [ 295.148200][T10514] do_initcall_level+0x104/0x190 [ 295.153648][T10514] do_initcalls+0x59/0xa0 [ 295.158499][T10514] kernel_init_freeable+0x334/0x4b0 [ 295.164204][T10514] kernel_init+0x1d/0x1d0 [ 295.169039][T10514] ret_from_fork+0x4bc/0x870 [ 295.174139][T10514] ret_from_fork_asm+0x1a/0x30 [ 295.179411][T10514] [ 295.179411][T10514] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 295.187210][T10514] lock_acquire+0x120/0x360 [ 295.192233][T10514] __mutex_lock+0x187/0x1350 [ 295.197324][T10514] elevator_change+0x1e5/0x4c0 [ 295.202599][T10514] elevator_set_none+0x42/0xb0 [ 295.207859][T10514] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 295.214173][T10514] nbd_start_device+0x17f/0xb10 [ 295.219544][T10514] nbd_genl_connect+0x135b/0x18f0 [ 295.225068][T10514] genl_family_rcv_msg_doit+0x215/0x300 [ 295.231120][T10514] genl_rcv_msg+0x60e/0x790 [ 295.236137][T10514] netlink_rcv_skb+0x208/0x470 [ 295.241410][T10514] genl_rcv+0x28/0x40 [ 295.246075][T10514] netlink_unicast+0x82f/0x9e0 [ 295.251352][T10514] netlink_sendmsg+0x805/0xb30 [ 295.256626][T10514] __sock_sendmsg+0x21c/0x270 [ 295.261817][T10514] ____sys_sendmsg+0x505/0x830 [ 295.267094][T10514] ___sys_sendmsg+0x21f/0x2a0 [ 295.272279][T10514] __x64_sys_sendmsg+0x19b/0x260 [ 295.277725][T10514] do_syscall_64+0xfa/0xfa0 [ 295.282732][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.289128][T10514] [ 295.289128][T10514] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 295.297716][T10514] lock_acquire+0x120/0x360 [ 295.302722][T10514] blk_alloc_queue+0x538/0x620 [ 295.307986][T10514] __blk_mq_alloc_disk+0x15c/0x340 [ 295.313600][T10514] nbd_dev_add+0x46c/0xae0 [ 295.318520][T10514] nbd_init+0x168/0x1f0 [ 295.323176][T10514] do_one_initcall+0x236/0x820 [ 295.328442][T10514] do_initcall_level+0x104/0x190 [ 295.333894][T10514] do_initcalls+0x59/0xa0 [ 295.338728][T10514] kernel_init_freeable+0x334/0x4b0 [ 295.344429][T10514] kernel_init+0x1d/0x1d0 [ 295.349263][T10514] ret_from_fork+0x4bc/0x870 [ 295.354355][T10514] ret_from_fork_asm+0x1a/0x30 [ 295.359633][T10514] [ 295.359633][T10514] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 295.366832][T10514] lock_acquire+0x120/0x360 [ 295.371844][T10514] fs_reclaim_acquire+0x72/0x100 [ 295.377290][T10514] kmem_cache_alloc_node_noprof+0x48/0x710 [ 295.383601][T10514] __alloc_skb+0x112/0x2d0 [ 295.388524][T10514] tcp_stream_alloc_skb+0x3d/0x340 [ 295.394137][T10514] tcp_sendmsg_locked+0xf38/0x5620 [ 295.399754][T10514] tcp_sendmsg+0x2f/0x50 [ 295.404499][T10514] __sock_sendmsg+0x19c/0x270 [ 295.409675][T10514] sock_write_iter+0x279/0x360 [ 295.414936][T10514] vfs_write+0x5c9/0xb30 [ 295.419685][T10514] ksys_write+0x145/0x250 [ 295.424516][T10514] do_syscall_64+0xfa/0xfa0 [ 295.429522][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.435916][T10514] [ 295.435916][T10514] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 295.443549][T10514] validate_chain+0xb9b/0x2140 [ 295.448829][T10514] __lock_acquire+0xab9/0xd20 [ 295.454006][T10514] lock_acquire+0x120/0x360 [ 295.459011][T10514] lock_sock_nested+0x48/0x100 [ 295.464305][T10514] inet_shutdown+0x6a/0x390 [ 295.469311][T10514] nbd_mark_nsock_dead+0x2e9/0x560 [ 295.474927][T10514] sock_shutdown+0x15e/0x260 [ 295.480021][T10514] nbd_config_put+0x342/0x790 [ 295.485208][T10514] nbd_release+0xfe/0x140 [ 295.490045][T10514] bdev_release+0x536/0x650 [ 295.495057][T10514] blkdev_release+0x15/0x20 [ 295.500061][T10514] __fput+0x44c/0xa70 [ 295.504551][T10514] task_work_run+0x1d4/0x260 [ 295.509661][T10514] exit_to_user_mode_loop+0xec/0x130 [ 295.515448][T10514] do_syscall_64+0x2bd/0xfa0 [ 295.520539][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.526937][T10514] [ 295.526937][T10514] other info that might help us debug this: [ 295.526937][T10514] [ 295.537140][T10514] Chain exists of: [ 295.537140][T10514] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 295.537140][T10514] [ 295.549729][T10514] Possible unsafe locking scenario: [ 295.549729][T10514] [ 295.557154][T10514] CPU0 CPU1 [ 295.562498][T10514] ---- ---- [ 295.567839][T10514] lock(&nsock->tx_lock); [ 295.572239][T10514] lock(&cmd->lock); [ 295.578729][T10514] lock(&nsock->tx_lock); [ 295.585647][T10514] lock(sk_lock-AF_INET); [ 295.590046][T10514] [ 295.590046][T10514] *** DEADLOCK *** [ 295.590046][T10514] [ 295.598168][T10514] 3 locks held by syz.4.1405/10514: [ 295.603344][T10514] #0: ffff888025a7d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 295.612905][T10514] #1: ffff888025a84270 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 295.623587][T10514] #2: ffff888076b1b270 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 295.633057][T10514] [ 295.633057][T10514] stack backtrace: [ 295.638925][T10514] CPU: 0 UID: 0 PID: 10514 Comm: syz.4.1405 Not tainted syzkaller #0 PREEMPT(full) [ 295.638941][T10514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.638949][T10514] Call Trace: [ 295.638955][T10514] [ 295.638962][T10514] dump_stack_lvl+0x189/0x250 [ 295.638977][T10514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.638989][T10514] ? __pfx__printk+0x10/0x10 [ 295.639006][T10514] ? stack_trace_save+0x9c/0xe0 [ 295.639028][T10514] print_circular_bug+0x2ee/0x310 [ 295.639047][T10514] check_noncircular+0x134/0x160 [ 295.639065][T10514] validate_chain+0xb9b/0x2140 [ 295.639084][T10514] ? __mutex_trylock_common+0x153/0x260 [ 295.639100][T10514] ? look_up_lock_class+0x74/0x170 [ 295.639116][T10514] ? register_lock_class+0x51/0x320 [ 295.639130][T10514] __lock_acquire+0xab9/0xd20 [ 295.639146][T10514] ? inet_shutdown+0x6a/0x390 [ 295.639159][T10514] lock_acquire+0x120/0x360 [ 295.639172][T10514] ? inet_shutdown+0x6a/0x390 [ 295.639186][T10514] ? sock_shutdown+0x14f/0x260 [ 295.639202][T10514] ? __lock_acquire+0xab9/0xd20 [ 295.639216][T10514] lock_sock_nested+0x48/0x100 [ 295.639230][T10514] ? inet_shutdown+0x6a/0x390 [ 295.639243][T10514] inet_shutdown+0x6a/0x390 [ 295.639257][T10514] nbd_mark_nsock_dead+0x2e9/0x560 [ 295.639276][T10514] sock_shutdown+0x15e/0x260 [ 295.639294][T10514] nbd_config_put+0x342/0x790 [ 295.639312][T10514] nbd_release+0xfe/0x140 [ 295.639329][T10514] ? __pfx_nbd_release+0x10/0x10 [ 295.639345][T10514] bdev_release+0x536/0x650 [ 295.639360][T10514] ? __pfx_blkdev_release+0x10/0x10 [ 295.639375][T10514] blkdev_release+0x15/0x20 [ 295.639389][T10514] __fput+0x44c/0xa70 [ 295.639406][T10514] task_work_run+0x1d4/0x260 [ 295.639420][T10514] ? __pfx_task_work_run+0x10/0x10 [ 295.639433][T10514] ? exit_to_user_mode_loop+0x40/0x130 [ 295.639448][T10514] exit_to_user_mode_loop+0xec/0x130 [ 295.639461][T10514] do_syscall_64+0x2bd/0xfa0 [ 295.639475][T10514] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.639490][T10514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.639503][T10514] ? clear_bhb_loop+0x60/0xb0 [ 295.639517][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.639530][T10514] RIP: 0033:0x7f8b3eb8eba9 [ 295.639542][T10514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.639559][T10514] RSP: 002b:00007ffdda1a57c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 295.639573][T10514] RAX: 0000000000000000 RBX: 0000000000045316 RCX: 00007f8b3eb8eba9 [ 295.639582][T10514] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 295.639590][T10514] RBP: 00007f8b3edd7da0 R08: 0000000000000001 R09: 00000006da1a5abf [ 295.639599][T10514] R10: 0000001b2c420000 R11: 0000000000000246 R12: 00007f8b3edd5fac [ 295.639608][T10514] R13: 00007f8b3edd5fa0 R14: ffffffffffffffff R15: 00007ffdda1a58e0 [ 295.639623][T10514] [ 295.639676][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.648005][ T5908] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.670910][T10514] block nbd4: shutting down sockets [ 295.695129][ T5908] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.955531][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.963553][ T5908] usb 6-1: Product: syz [ 295.967751][ T5908] usb 6-1: Manufacturer: syz [ 295.972318][ T5908] usb 6-1: SerialNumber: syz [ 296.409343][ T5908] usb 6-1: 0:2 : does not exist [ 297.066499][ T5908] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 297.086628][ T5908] usb 6-1: USB disconnect, device number 48