last executing test programs: 1m13.438374868s ago: executing program 1 (id=404): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80200, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000200)) r1 = socket$xdp(0x2c, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r3 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x105002, 0x10}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000140)={0x2c, 0x4, r2, 0x2f, r3}, 0x10) 1m13.39161372s ago: executing program 1 (id=405): prctl$PR_GET_NO_NEW_PRIVS(0x27) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x7, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/144, 0x90}], 0x1, 0x800, 0xfffffc00) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000056000106000000000000000007daaf948b49"], 0x1c}], 0x1}, 0x0) 1m13.348150958s ago: executing program 1 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x420000) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x420000) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000010403000000000000000000050000030a00020000000000010000000a00020000000006010000000500010001"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) (async) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000010403000000000000000000050000030a00020000000000010000000a00020000000006010000000500010001"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01c30f07f20f11fb2a950010660f300f080f06640f01cf0f485c55baf80c66b88a23348266efbafc0cb80200ef", 0x2e}], 0x1, 0x52, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01c30f07f20f11fb2a950010660f300f080f06640f01cf0f485c55baf80c66b88a23348266efbafc0cb80200ef", 0x2e}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m13.150152512s ago: executing program 1 (id=407): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz1\x00', {0x4f36, 0x2ac4, 0x1}, 0x18, [0x100, 0x1ff, 0x8, 0x0, 0x3, 0x10, 0x1800000, 0xa, 0xfffffff5, 0x4, 0x2d25aaaf, 0x6, 0x0, 0x61, 0x7, 0x9a, 0x37c, 0x8, 0x7, 0x5, 0xb, 0xf, 0xfff, 0x1, 0x0, 0x458a, 0x3, 0x6, 0x3, 0x0, 0x4, 0x101, 0x10001, 0x2, 0x9049, 0x3, 0x0, 0x9, 0x7, 0x1, 0x3, 0x8, 0x40, 0xbdb4, 0x1, 0x9, 0x81, 0x7, 0x62, 0x9, 0x7fffffff, 0x10, 0x2, 0x8, 0x2, 0x8, 0x10000, 0x5, 0x7ff, 0x2, 0x1, 0x1, 0xffff, 0x6], [0x10001, 0x6, 0x4, 0x8, 0x3, 0x6, 0x128f00, 0xb488, 0xfffffff7, 0x0, 0x81, 0x8, 0x4d, 0x7, 0x401, 0xf03, 0x3, 0x1, 0x0, 0x8, 0xb, 0x1, 0xb7b, 0x7, 0x5, 0x4, 0xa1, 0xfffff000, 0x3ff, 0x10000, 0x6, 0x4, 0x7, 0xe, 0x7fffffff, 0x4, 0x5d2acac, 0x0, 0xaed, 0x10001, 0x91f, 0x1000, 0x100, 0x7, 0x4, 0x9, 0x6, 0xc00, 0x10, 0x7, 0x80000000, 0x2, 0x7d76, 0x2, 0x3, 0x5, 0x5, 0xffffffff, 0x4, 0xffff, 0x2, 0x3, 0x4, 0x8], [0x7, 0x5, 0x7fff, 0x1, 0x4, 0xe7c, 0x3ffc000, 0x6, 0x80000000, 0x9, 0x4, 0x7fff, 0x7, 0x4, 0x3, 0x7, 0x5, 0x800, 0x0, 0x10, 0x8, 0x0, 0x400, 0x7, 0x1ff, 0x2, 0x6, 0xfffff000, 0x2, 0x5, 0x0, 0x7, 0x7, 0xcc, 0x2, 0x5, 0x6, 0xf9, 0x8, 0x4, 0x3, 0x7fffffff, 0x1, 0x7, 0xcff, 0xc, 0x66, 0x9, 0x42f, 0x2, 0x4, 0x7f, 0x401, 0x5, 0x1, 0x7ff, 0x9, 0x9, 0x459, 0x5, 0x8, 0x0, 0x3, 0x1ff], [0x1, 0x6b, 0x8, 0x2, 0x6, 0xfffffff9, 0x80, 0x9, 0x6, 0x6, 0x5a666cf9, 0xac0e, 0x2baf, 0x79, 0x1, 0x5, 0x7, 0x2, 0x6, 0x8, 0x8, 0x0, 0x13, 0xfffffff7, 0x4, 0x5, 0x6, 0x8, 0x3, 0x80, 0xffff, 0x29dd, 0x80000001, 0x6, 0x401, 0x7, 0x9, 0x7, 0xb6, 0xfffffffa, 0x6a9c, 0x2, 0x4, 0x800, 0x9, 0x9, 0x6, 0x6, 0x9, 0x1000, 0xc590, 0x6, 0xe679, 0x776, 0x401, 0x100, 0x4, 0x1, 0x200, 0xfffffffb, 0xe8, 0x1, 0x7, 0x5]}, 0x45c) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, "1f7ad0d63640b9b0", "f504eecc885a06081dc29685fda2b36e84ac973a1e76b5381b094380913a8672", "86dc5d28", "c77db8a183a78126"}, 0x38) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) 1m13.148536426s ago: executing program 1 (id=408): memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 1m13.128639365s ago: executing program 1 (id=409): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000180)=0x9, 0x4) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 32) sendmmsg$sock(r2, &(0x7f00000007c0)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @any, 0x9639, 0x1}, 0x80, 0x0}}], 0x1, 0x20000850) (async, rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) wait4(r3, &(0x7f0000000080), 0x80000000, 0x0) (async) capget(&(0x7f0000000100)={0x19980330}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "05000100", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", '\x00', "df0a0400"]}) (async, rerun: 64) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) (async, rerun: 64) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000001e0800fb51", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007"], 0x38}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) syz_usb_connect(0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102cb460e400a1a01012e010102030109021e0001fe4e80c70904cd0901ff01010509050b0110000451040303000000f6f80669c402ef2c5e3eece85a63446c7204c003ab25b6c5dc75ae6003435f95607d61b94d8e75801d13b465360c009418a86bfcdbaf625eb39ff345eb99b51f0f1116e113acd3227bcc219da290ce3b55a7a196f162822f9aa42243212b5516c2f77101"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x2, 0x20, 0x0, 0x1000000}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xc45, 0x760b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x30, 0x40, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xf54}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x9, 0x6}}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000706010200000000000000000200000005000100070000000a00064000000002"], 0x24}, 0x1, 0x0, 0x0, 0x4040014}, 0x20004080) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) 57.617685039s ago: executing program 32 (id=409): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000180)=0x9, 0x4) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 32) sendmmsg$sock(r2, &(0x7f00000007c0)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @any, 0x9639, 0x1}, 0x80, 0x0}}], 0x1, 0x20000850) (async, rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = syz_clone(0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) wait4(r3, &(0x7f0000000080), 0x80000000, 0x0) (async) capget(&(0x7f0000000100)={0x19980330}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "05000100", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", '\x00', "df0a0400"]}) (async, rerun: 64) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) (async, rerun: 64) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000001e0800fb51", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007"], 0x38}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) syz_usb_connect(0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102cb460e400a1a01012e010102030109021e0001fe4e80c70904cd0901ff01010509050b0110000451040303000000f6f80669c402ef2c5e3eece85a63446c7204c003ab25b6c5dc75ae6003435f95607d61b94d8e75801d13b465360c009418a86bfcdbaf625eb39ff345eb99b51f0f1116e113acd3227bcc219da290ce3b55a7a196f162822f9aa42243212b5516c2f77101"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x2, 0x20, 0x0, 0x1000000}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xc45, 0x760b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x30, 0x40, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xf54}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x9, 0x6}}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000706010200000000000000000200000005000100070000000a00064000000002"], 0x24}, 0x1, 0x0, 0x0, 0x4040014}, 0x20004080) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) 5.514616852s ago: executing program 3 (id=867): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001680)={0x1c, &(0x7f0000001140)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0}) 4.294258665s ago: executing program 2 (id=881): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000019b740, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x23) shutdown(r1, 0x1) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) r4 = fanotify_init(0x10, 0x0) fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0) r5 = open$dir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x200000, 0x0) getdents64(r5, &(0x7f0000000180)=""/128, 0x80) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f000000ae00), 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r6, 0x80304d25, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x2) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) r10 = accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000400)=0x10, 0x180800) recvfrom$llc(r10, &(0x7f00000004c0)=""/246, 0xf6, 0x2000, &(0x7f00000003c0)={0x1a, 0x311, 0x2, 0x0, 0x81, 0x4, @local}, 0x10) writev(r9, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c700"/72, 0x48}], 0x1) setsockopt(r8, 0x1, 0x50, &(0x7f0000000740)="60de8165", 0x4) 4.251727225s ago: executing program 2 (id=882): syz_usb_connect(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) accept$inet(r1, 0x0, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xe) 2.93266426s ago: executing program 2 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000240)={0x51, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18) fsetxattr(r0, &(0x7f0000000280)=@known='com.apple.system.Security\x00', &(0x7f0000001480)='syz2\x00', 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) sendmsg$nl_generic(r0, &(0x7f0000001400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000380)={0x1020, 0x22, 0x400, 0x70bd27, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x14e, 0x0, 0x0, @u32=0x6}, @nested={0x1004, 0x12b, 0x0, 0x1, [@generic="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"]}]}, 0x1020}, 0x1, 0x0, 0x0, 0x84}, 0x40) r4 = dup3(r1, r0, 0x0) ioctl$DVB_DVR_DMX_QUERYBUF(r4, 0xc0186f3d, &(0x7f00000014c0)={0x9, 0x2380, 0x5, 0xffffffff, 0x4, 0x7}) read(r0, &(0x7f0000000080)=""/186, 0xba) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001440)={0x14, r6, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x800) 2.435194802s ago: executing program 3 (id=898): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) connect$inet(r0, &(0x7f0000000480)={0x2, 0x6, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x16d102, 0x0) ioctl$BLKGETZONESZ(r2, 0x80041284, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000005000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb", 0x9e}], 0x1}, 0x48002) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100002008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e000400"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, 0x0}, 0x494) 2.314256959s ago: executing program 3 (id=899): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x79) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r1, &(0x7f0000001b40)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000940)=0x80, 0x80800) r2 = accept4(r1, 0x0, 0x0, 0x800) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000040)={{0x2, 0x40, 0x3}, 'syz1\x00', 0x33}) (async) socket$netlink(0x10, 0x3, 0x8) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) r4 = memfd_secret(0x80000) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r6 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (rerun: 32) setresuid(r9, r9, 0x0) (async) sendmmsg$unix(r8, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x24044000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="14000400b66bfbb11a34489b000001000000", @ANYRES32=r7, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x20008010}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000001a40)=[{{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/21, 0x15}], 0x2, &(0x7f0000000340)=""/136, 0x88}, 0x9}, {{&(0x7f0000000240)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/221, 0xdd}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/57, 0x39}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/53, 0x35}, {&(0x7f0000000640)=""/204, 0xcc}], 0x6, &(0x7f00000007c0)=""/170, 0xaa}, 0x8000}, {{&(0x7f00000008c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001b00)=""/4, 0x4}, {&(0x7f0000000980)=""/48, 0x30}], 0x2}, 0xffffffff}], 0x3, 0x6060, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000000600), 0xffffffff, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r12, 0x0) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r11, 0x8004550f, &(0x7f0000000180)=0x6) (async) read$FUSE(r10, &(0x7f0000002200)={0x2020}, 0x2077) 2.313809819s ago: executing program 3 (id=900): r0 = fsopen(&(0x7f0000000100)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f0000000140)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r1, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000340)=""/159, 0x9f) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x2, &(0x7f0000000140)={0x4, "b7fc741714bd8325de9540e3cfc840d0b9352014000000000001aa80277f6cd2e2"}}) bind$rose(r2, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000e00200024000000ecff0002", @ANYRES32=r8], 0x20, 0x2400e044}, 0x0) fsopen(&(0x7f0000000400)='debugfs\x00', 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmofe=00000000000000000010000,usev_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000002b25,\x00']) r10 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r10, &(0x7f0000002780)={0x2020}, 0x5ecfb203) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00', &(0x7f00000002c0)='7E\xe7!<\xa2{\xe1bN\xf3\xb6\x1aR8%t\x90Nq\xdd&$\x83o\xd1\x89U@r\xfb\x8f\xa2\x00\x00\x00\x00\x00\x00\x00\x80\f\xf5M&Z\xd2\xaa', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x7, 0x7, 0xcb, 0x5, 0x1, "351699663f8e94bc3758e26a1f2a681dcc8937", 0x800, 0x9}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xffff, 0x909f, 0x6667, 0x40000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4, @ANYRES8=r2, @ANYRESHEX=r7, @ANYBLOB="4b594f8a2775891f68fd4a296658d1ada5bc6a59a73ea1f5526d198a842f518afb75d0be3463bdfee965e29bfd60bb46a077f49ca2b04bb7df7b573761bbae8bf956f796321f52e8facee6beeac94c5743143ef657d32b6e820f2eec4f"], 0x28}}, 0x800) 2.267847569s ago: executing program 0 (id=901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x81}) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x1}, {0x6}, 0x104, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="2d85b65faee7334c998d58fe378c6cac845ba9ea7e89e5e65e8f59df017fa13e35bd521b1d121e851f5975be5d6bee8cb01415e35c3804ef72954a841a3a629e8d1bd35f543cad1e6e6a6d0904b77a8b6c5b58960cd39713b5b1a6e4e961e980", 0x60, 0x0, &(0x7f0000000300)={0x2, 0x126, {0x1, 0xc, 0xda, "88646b3914337f63369a08cf53fce012d4771d500b84e30155d39bfd354abd1384cdfbf5a4a360f17211118d6c478bf3f79bdc067f7fb51a13192a2fc225560cee8d6b36d4772954a27befc5e1d8eb6de84064476df98a7070e09f9e029f32f36cfbab4ef9a4385b43778bdc0fa0d8d0ef7cbdeec213e151fe50086a4f2056c8810f80fadada583deb75a54c07ee429defdccefc4486249e3f12550d30bf7915050656def774bf1edd7550e658cc9c8f836ce2c8ae41ae1178ca9d476cec603d2e40addebc68b90e46640d432a2c89de0462ad9205d2ff8d7732", 0x3f, "99a1b09757e1909fc969473f360b7bb9aa7fb3cdaa26d5bf2cfa282681c2c04d1742ec4d328141238add5e393692e2bac14437dd99e6f5d78fec3d87983b4c"}, 0xc5, "251654a57e83aa26dac41c0141b3d0384eff3fd1601e73f3425b93806077b5caa8217876f20624318fccddaefa8a57ceb6bd14032f2ab16703b5abceb693fcc81f0da922d907c6385c67825001cb9e100118cdbf2f65892c483e5d0e640fb53263fa818969027cbb07e8c1641b256d95b36fb90c617ff0e82c27d8ba5f1d08d8428583f1574c8740cd2ced66addda9fc44cfd61e0877edc4fa5232ba27a2275c1374d871c3c582de068507088f9bb85ce74a5cdb24754e7cd9484da0e8a74079656a1fa210"}, 0x1f7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e80000002c00070102000000ffdb5f250644ce000800018004"], 0xe8}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) 2.147666373s ago: executing program 0 (id=902): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x2, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00', 0xfffffffffffffffd, 0x80000800, 0x16, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.758856933s ago: executing program 0 (id=904): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2f02, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d04, 0x0, 0x8}]}) ppoll(&(0x7f00000000c0)=[{r4, 0x100}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x11) 1.641017186s ago: executing program 2 (id=905): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) 1.508933879s ago: executing program 2 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x44}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}]}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb, 0xffff}}, [@q_dsmark={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x8001, 0x0, {{0x27, 0x4, 0x2, 0xf, 0x9c, 0x66, 0x0, 0x9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x13, [@remote]}, @timestamp_addr={0x44, 0x1c, 0x6a, 0x1, 0x8, [{@loopback, 0x401}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xa3, 0x0, 0x9, [0x7]}, @rr={0x7, 0x13, 0x2a, [@private=0xa010101, @remote, @remote, @private=0xa010101]}, @generic={0x7, 0x4, "bb69"}, @timestamp_prespec={0x44, 0x1c, 0xfc, 0x3, 0x3, [{@remote, 0x4}, {@private=0xa010100, 0x100}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x10}]}, @ssrr={0x89, 0x23, 0x58, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x27}, @local, @empty]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x78, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002300090425bd7000ffd3df2502"], 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) 1.414773298s ago: executing program 3 (id=907): memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000a4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 1.282341107s ago: executing program 4 (id=908): syz_open_dev$evdev(&(0x7f0000000300), 0x7, 0xc402) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x58c, 0x3, 0x40, 0x4, 0x682, 0x9, 0xce, 0x1, 0x6, 0x6, 0x5, 0x200053, 0x2, 0x109, 0x7, 0x4], 0xeeef8000, 0x2003}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x81, 0x3f, 0x6, "3eccd25569e20900"}) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000140)) landlock_restrict_self(r0, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xf, 0x2000) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000200)=""/182) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x400, 0x1, 0x7}, 0xf, 0x2) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2, 0x4, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x9) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x9) landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) 1.279420047s ago: executing program 3 (id=909): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x80000000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28000000070a0101000000000000000024584a55310000"], 0x28}, 0x1, 0x0, 0x0, 0x4048084}, 0x40) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x5, 0x1, 0x6, 0x6, 0x0, 0x8, 0x1}, &(0x7f0000000040)={0x6, 0x3, 0x4, 0x985d, 0x0, 0xc, 0x80, 0x7fff}, &(0x7f0000000080)={0x80, 0x1ff, 0x100000000, 0x280, 0x1000, 0x1, 0x7, 0xfffffffffffffffd}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000100), 0x8}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) 1.166822405s ago: executing program 2 (id=910): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) 677.35363ms ago: executing program 4 (id=911): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r3, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r3) 618.740144ms ago: executing program 0 (id=912): r0 = socket(0x22, 0x2, 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) (async) iopl(0x3) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000000)={0x0, 0x55, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) iopl(0x3) (async) prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000001800000f8ffe53f070c0000002ad001"], 0x0}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000080080000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x43, 0x81, &(0x7f0000000340)={0x11, 0x0, r7, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) (async) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x4, r7, 0x401}, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000014000100ff0004000100"/28], 0x1c}}, 0x0) (async) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 517.258327ms ago: executing program 4 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4044880) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[], 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x80, 0x20, 0x7, 0x4, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x29, 0x0, @multicast1, @empty}}}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x6d6) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) 437.411816ms ago: executing program 0 (id=915): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) close_range(r0, 0xffffffffffffffff, 0x0) 263.774738ms ago: executing program 4 (id=916): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3305000000fd140000007ef12f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f4f98c", 0x28, 0x14, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x720441) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) 263.368086ms ago: executing program 0 (id=917): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x400000c, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x40000, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000086857fd3a914ed6b4c0e2a5952edc7291a5dec563357b67350cd40b5e8b257fe7ef751e73ee861b0e5839d3c70553cb4535bbcfc6cb05c5567e3566543a7998d33f727d2b8766c988cc48f23f407086fa2c224c6ae06c21d649b3bc11a3135c1d8b683a4c2ca92580ce7ee25d94d4952d3774c9bde9c408a88a0f8e98282694a66a28642c593a8eebc214b3892796948edc62df488732eea8e949064c8a7a96907b448d3eaf990d94a590df8ba469a9c377618c49155cb1770b1018a7f4581959c577b3511662ba8", @ANYRES16=r7, @ANYBLOB="010026bd70007cdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="28002d80040000000a000000020202020202000004000000040000000a0000000101010101010000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40400d0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r7, @ANYBLOB="00032cbd7000ffcddf252b0000000867fe25000300", @ANYRES32=r8, @ANYBLOB="08000c00640000001e001f0000200805000000000000000c000a0005000000000008000000fd00001e00940000080101000100000000000e000f000e0000000008010000000700000a00060059f1ad1f3f75000004003c000400cc001e0094004000130300000000000000010000001b0000000003e70000000000000a000600a589bff7e4740000"], 0xa4}, 0x1, 0x0, 0x0, 0x8840}, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10, {0x2, 0x4e23, @multicast2}, 'dvmrp1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502"], 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000ed0f000a40000000080a00090000000000000000030000010c0300000000005588b46406d383550031000000000900020073797a300000000008000b40000000031400007c0a250bf114ca1e20a20e53480011000100010000000000000700000a00000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 171.964222ms ago: executing program 4 (id=918): keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) mount$9p_rdma(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x2200000, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@msize={'msize', 0x3d, 0x36138084}}]}}) 0s ago: executing program 4 (id=919): memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) kernel console output (not intermixed with test programs): em28xx 3-1:0.0: No AC97 audio processor [ 122.243751][ T29] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 122.330453][ T29] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 122.342809][ T5862] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 122.362391][ T29] usb 2-1: USB disconnect, device number 25 [ 122.519300][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 122.530775][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.541460][ T5862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.550791][ T5862] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.561970][ T5862] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 122.571080][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.590276][ T5862] hub 4-1:1.0: bad descriptor, ignoring hub [ 122.602652][ T5862] hub 4-1:1.0: probe with driver hub failed with error -5 [ 122.617162][ T5862] cdc_wdm 4-1:1.0: skipping garbage [ 122.623247][ T5862] cdc_wdm 4-1:1.0: skipping garbage [ 122.628506][ T5862] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 122.728319][ T7117] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 122.918137][ T5876] usb 4-1: USB disconnect, device number 21 [ 122.989590][ T7127] netlink: 'syz.0.376': attribute type 10 has an invalid length. [ 122.997693][ T7127] netlink: 55 bytes leftover after parsing attributes in process `syz.0.376'. [ 123.174139][ T7130] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.185422][ T7130] block device autoloading is deprecated and will be removed. [ 123.423973][ T7137] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 123.550020][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.382'. [ 123.561398][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.382'. [ 123.598416][ T7147] 9p: Bad value for 'rfdno' [ 123.816500][ T7160] tipc: Started in network mode [ 123.824048][ T7160] tipc: Node identity 84e, cluster identity 4711 [ 123.833906][ T7160] tipc: Node number set to 2126 [ 123.854758][ T803] usb 3-1: USB disconnect, device number 15 [ 123.873205][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 123.884750][ T7157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.384'. [ 123.898632][ T803] em28xx 3-1:0.0: Disconnecting em28xx [ 123.933137][ T803] em28xx 3-1:0.0: Freeing device [ 124.090146][ T5862] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 124.229280][ T803] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 124.251367][ T5862] usb 1-1: config 5 has an invalid interface number: 51 but max is 1 [ 124.260275][ T5862] usb 1-1: config 5 has an invalid interface number: 156 but max is 1 [ 124.268494][ T5862] usb 1-1: config 5 has no interface number 0 [ 124.274721][ T5862] usb 1-1: config 5 has no interface number 1 [ 124.280894][ T5862] usb 1-1: config 5 interface 51 altsetting 202 has an endpoint descriptor with address 0x3E, changing to 0xE [ 124.292896][ T5862] usb 1-1: config 5 interface 51 altsetting 202 endpoint 0xE has an invalid bInterval 82, changing to 4 [ 124.304135][ T5862] usb 1-1: config 5 interface 51 altsetting 202 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 124.315388][ T5862] usb 1-1: config 5 interface 51 altsetting 202 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 124.326451][ T5862] usb 1-1: config 5 interface 156 altsetting 4 has an endpoint descriptor with address 0x73, changing to 0x3 [ 124.338188][ T5862] usb 1-1: config 5 interface 156 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 124.349303][ T5862] usb 1-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 124.360071][ T5862] usb 1-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 124.369252][ T803] usb 3-1: device descriptor read/64, error -71 [ 124.377147][ T5862] usb 1-1: config 5 interface 156 altsetting 4 endpoint 0xD has invalid maxpacket 528, setting to 64 [ 124.388324][ T5862] usb 1-1: config 5 interface 51 has no altsetting 0 [ 124.395154][ T5862] usb 1-1: config 5 interface 156 has no altsetting 0 [ 124.404102][ T5862] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=56.2a [ 124.415164][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.423297][ T5862] usb 1-1: Product: syz [ 124.427496][ T5862] usb 1-1: Manufacturer: 趟ѳ [ 124.432605][ T5862] usb 1-1: SerialNumber: syz [ 124.524278][ T7169] overlayfs: workdir and upperdir must reside under the same mount [ 124.609214][ T803] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 124.757010][ T5862] usb 1-1: USB disconnect, device number 25 [ 124.771449][ T803] usb 3-1: device descriptor read/64, error -71 [ 124.900769][ T803] usb usb3-port1: attempt power cycle [ 124.940281][ T5876] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 124.959500][ T7193] netlink: 14 bytes leftover after parsing attributes in process `syz.1.395'. [ 125.111025][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 125.120703][ T5862] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 125.123114][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 125.141115][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.152231][ T5876] usb 4-1: config 0 descriptor?? [ 125.158656][ T7183] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 125.250200][ T803] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 125.280570][ T803] usb 3-1: device descriptor read/8, error -71 [ 125.286511][ T7204] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 125.297743][ T7204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.400'. [ 125.309624][ T5862] usb 1-1: not running at top speed; connect to a high speed hub [ 125.320116][ T5862] usb 1-1: config 240 has an invalid interface number: 129 but max is 2 [ 125.328569][ T5862] usb 1-1: config 240 has an invalid interface number: 244 but max is 2 [ 125.337356][ T5862] usb 1-1: config 240 has no interface number 0 [ 125.340351][ T7204] team0: Port device geneve0 added [ 125.343723][ T5862] usb 1-1: config 240 has no interface number 1 [ 125.355270][ T5862] usb 1-1: config 240 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 125.366200][ T5862] usb 1-1: config 240 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 125.378223][ T5862] usb 1-1: config 240 interface 2 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 125.389559][ T5862] usb 1-1: config 240 interface 129 altsetting 248 has a duplicate endpoint with address 0xE, skipping [ 125.402762][ T5862] usb 1-1: config 240 interface 244 altsetting 173 has a duplicate endpoint with address 0x1, skipping [ 125.414112][ T5862] usb 1-1: config 240 interface 244 altsetting 173 has a duplicate endpoint with address 0x1, skipping [ 125.425254][ T5862] usb 1-1: config 240 interface 244 altsetting 173 endpoint 0xC has invalid maxpacket 1015, setting to 64 [ 125.436647][ T5862] usb 1-1: config 240 interface 244 altsetting 173 has a duplicate endpoint with address 0xC, skipping [ 125.448493][ T5862] usb 1-1: config 240 interface 2 has no altsetting 0 [ 125.457918][ T5862] usb 1-1: config 240 interface 129 has no altsetting 0 [ 125.464983][ T5862] usb 1-1: config 240 interface 244 has no altsetting 0 [ 125.476429][ T5862] usb 1-1: string descriptor 0 read error: -22 [ 125.489303][ T5862] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1060, bcdDevice=14.26 [ 125.498619][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.549364][ T803] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 125.571066][ T7211] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 125.580143][ T7211] netlink: 96 bytes leftover after parsing attributes in process `syz.1.402'. [ 125.580826][ T803] usb 3-1: device descriptor read/8, error -71 [ 125.589263][ T7211] netlink: 1 bytes leftover after parsing attributes in process `syz.1.402'. [ 125.598659][ T5876] hid (null): global environment stack underflow [ 125.604567][ T7211] netlink: 658 bytes leftover after parsing attributes in process `syz.1.402'. [ 125.618424][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.628181][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.636974][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.645678][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.655209][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.663424][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.671622][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.680707][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.688864][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.701340][ T803] usb usb3-port1: unable to enumerate USB device [ 125.707913][ T5876] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 125.718947][ T5876] logitech-djreceiver 0003:046D:C71F.0003: reserved main item tag 0xe [ 125.737945][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.747367][ T5876] logitech-djreceiver 0003:046D:C71F.0003: global environment stack underflow [ 125.757937][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.765806][ T5876] logitech-djreceiver 0003:046D:C71F.0003: item 0 1 1 11 parsing failed [ 125.767654][ T7186] Invalid ELF header len 16 [ 125.774957][ T5876] logitech-djreceiver 0003:046D:C71F.0003: logi_dj_probe: parse failed [ 125.787520][ T5876] logitech-djreceiver 0003:046D:C71F.0003: probe with driver logitech-djreceiver failed with error -22 [ 125.817405][ T803] usb 1-1: USB disconnect, device number 26 [ 125.854767][ T7183] block nbd3: shutting down sockets [ 125.896109][ T5862] usb 4-1: USB disconnect, device number 22 [ 125.961694][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 125.963177][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 126.514630][ T7243] bpf: Bad value for 'gid' [ 126.522753][ T7243] vxfs: WRONG superblock magic 00000000 at 1 [ 126.529085][ T7243] vxfs: WRONG superblock magic 00000000 at 8 [ 126.536319][ T7243] vxfs: can't find superblock. [ 126.684636][ T7247] netlink: 'syz.0.414': attribute type 13 has an invalid length. [ 126.692587][ T7247] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.414'. [ 126.719295][ T5862] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 126.859313][ T5862] usb 4-1: device descriptor read/64, error -71 [ 127.099284][ T5862] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 127.239332][ T5862] usb 4-1: device descriptor read/64, error -71 [ 127.359557][ T5862] usb usb4-port1: attempt power cycle [ 127.409224][ T5876] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 127.539364][ T5876] usb 3-1: device descriptor read/64, error -71 [ 127.552677][ T7261] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 127.560830][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'. [ 127.699348][ T5862] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 127.720802][ T5862] usb 4-1: device descriptor read/8, error -71 [ 127.779779][ T5876] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 127.909230][ T5876] usb 3-1: device descriptor read/64, error -71 [ 127.969381][ T5862] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 127.989988][ T5862] usb 4-1: device descriptor read/8, error -71 [ 128.019468][ T5876] usb usb3-port1: attempt power cycle [ 128.099910][ T5862] usb usb4-port1: unable to enumerate USB device [ 128.359267][ T5876] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 128.380007][ T5876] usb 3-1: device descriptor read/8, error -71 [ 128.629850][ T5876] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 128.650415][ T5876] usb 3-1: device descriptor read/8, error -71 [ 128.760609][ T5876] usb usb3-port1: unable to enumerate USB device [ 128.879405][ T803] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 129.029804][ T803] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 129.038613][ T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.047796][ T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.058850][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.066444][ T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.075562][ T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.086520][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.094138][ T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.103186][ T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.114125][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.121685][ T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.130810][ T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.141961][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.149910][ T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.158825][ T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.169763][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.177288][ T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.186463][ T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.197553][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.205254][ T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.214476][ T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.225560][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.233389][ T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.242579][ T803] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.253501][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.262055][ T803] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 129.271311][ T803] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 129.279702][ T803] usb 1-1: Product: syz [ 129.283853][ T803] usb 1-1: Manufacturer: syz [ 129.288433][ T803] usb 1-1: SerialNumber: syz [ 129.296709][ T803] usb 1-1: config 0 descriptor?? [ 129.306472][ T803] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 129.574354][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 129.574688][ T5862] usb 1-1: USB disconnect, device number 27 [ 129.596047][ T5862] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 129.909222][ T5862] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 130.079249][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 130.086202][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.095037][ T5862] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 130.104761][ T5862] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 130.114831][ T5862] usb 4-1: config 1 interface 0 has no altsetting 0 [ 130.123757][ T5862] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 130.132858][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.140897][ T5862] usb 4-1: Product: syz [ 130.145047][ T5862] usb 4-1: Manufacturer: syz [ 130.149686][ T5862] usb 4-1: SerialNumber: syz [ 130.156822][ T7280] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 130.164354][ T7280] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 130.386038][ T7288] loop8: detected capacity change from 0 to 1 [ 130.397270][ T7288] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 130.405215][ T7288] loop8: p1 start 540042604 is beyond EOD, truncated [ 130.416262][ T7288] loop8: p2 start 1640453368 is beyond EOD, truncated [ 130.423516][ T7288] loop8: p3 start 1935506780 is beyond EOD, truncated [ 130.423635][ T5862] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8 [ 130.431764][ T7288] loop8: p4 start 3893138939 is beyond EOD, truncated [ 130.448194][ T5862] usb 4-1: USB disconnect, device number 27 [ 130.453954][ T7288] loop8: p5 start 287485722 is beyond EOD, truncated [ 130.462264][ T7288] loop8: p6 start 3376667143 is beyond EOD, truncated [ 130.470754][ T7288] loop8: p7 start 2111012381 is beyond EOD, truncated [ 130.477199][ T5862] usblp0: removed [ 130.477688][ T7288] loop8: p8 start 3147612238 is beyond EOD, truncated [ 130.489077][ T7288] loop8: p9 start 2252824347 is beyond EOD, truncated [ 130.498130][ T7288] loop8: p10 start 489633540 is beyond EOD, truncated [ 130.505413][ T7288] loop8: p11 start 1985099615 is beyond EOD, truncated [ 130.514402][ T7288] loop8: p12 start 2132828001 is beyond EOD, truncated [ 130.581793][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'. [ 130.650149][ T803] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 130.811045][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 130.817738][ T803] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 130.826080][ T803] usb 1-1: config 0 has no interface number 0 [ 130.834411][ T803] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 130.843607][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.852355][ T803] usb 1-1: Product: syz [ 130.856546][ T803] usb 1-1: Manufacturer: syz [ 130.861212][ T803] usb 1-1: SerialNumber: syz [ 130.867601][ T803] usb 1-1: config 0 descriptor?? [ 130.942732][ T7296] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 130.950681][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 130.960953][ T7296] netlink: 658 bytes leftover after parsing attributes in process `syz.3.434'. [ 130.970351][ T7296] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 131.063147][ T7300] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 131.281719][ T803] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 131.295909][ T803] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.459273][ T5883] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 131.576946][ T7317] openvswitch: netlink: IP tunnel dst address not specified [ 131.621491][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.638018][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.652529][ T5883] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 131.662000][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.670971][ T5883] usb 3-1: Product: syz [ 131.675208][ T5883] usb 3-1: Manufacturer: syz [ 131.680204][ T5883] usb 3-1: SerialNumber: syz [ 131.869267][ T5908] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 131.904544][ T5883] usb 3-1: 0:1 : does not exist [ 131.909568][ T5883] usb 3-1: BAAD SPEAKER p_chmask mismatch [ 131.951469][ T5883] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 131.963528][ T5883] usb 3-1: USB disconnect, device number 24 [ 131.977980][ T6136] udevd[6136]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.022057][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.033755][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.043650][ T5908] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 132.052727][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.063073][ T5908] usb 4-1: config 0 descriptor?? [ 132.140673][ T803] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 132.153590][ T803] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 132.475758][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0xe3 [ 132.489558][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x63 [ 132.504657][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x423 [ 132.513919][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x422 [ 132.524736][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x4e9 [ 132.534657][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x490 [ 132.544197][ T5908] usbhid 4-1:0.0: can't add hid device: -71 [ 132.550644][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 132.568016][ T5908] usb 4-1: USB disconnect, device number 28 [ 132.576157][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1d9 [ 132.586225][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x5c9 [ 132.604418][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x7d0 [ 132.613513][ T7322] kvm: kvm [7321]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x715 [ 132.736140][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742577][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.759258][ T29] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 132.910939][ T29] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 132.919668][ T29] usb 3-1: config 0 has no interface number 0 [ 132.925835][ T29] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 132.937843][ T29] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 132.947046][ T29] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 132.955149][ T29] usb 3-1: Manufacturer: syz [ 132.959841][ T29] usb 3-1: SerialNumber: syz [ 132.966334][ T29] usb 3-1: config 0 descriptor?? [ 133.178728][ T29] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 133.187377][ T29] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 133.202613][ T29] usb 3-1: USB disconnect, device number 25 [ 133.380084][ T803] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 133.406936][ T9] usb 1-1: USB disconnect, device number 28 [ 133.529721][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 133.537019][ T803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.548180][ T803] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 133.557968][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.566438][ T803] usb 4-1: Product: syz [ 133.570712][ T803] usb 4-1: Manufacturer: syz [ 133.575356][ T803] usb 4-1: SerialNumber: syz [ 133.587521][ T803] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 133.787219][ T803] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 133.833120][ T803] usb 4-1: USB disconnect, device number 29 [ 133.866648][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.174426][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 134.419702][ T7356] netlink: 'syz.3.454': attribute type 6 has an invalid length. [ 134.433786][ T7354] syzkaller1: entered promiscuous mode [ 134.436858][ T7356] netlink: 168 bytes leftover after parsing attributes in process `syz.3.454'. [ 134.443923][ T7354] syzkaller1: entered allmulticast mode [ 134.466478][ T7356] team_slave_0: entered promiscuous mode [ 134.473696][ T7356] team_slave_1: entered promiscuous mode [ 134.482334][ T7356] Invalid logical block size (2) [ 134.563724][ T7360] loop8: detected capacity change from 0 to 7 [ 134.573680][ T7360] Dev loop8: unable to read RDB block 7 [ 134.579405][ T7360] loop8: unable to read partition table [ 134.585301][ T7360] loop8: partition table beyond EOD, truncated [ 134.591931][ T7360] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 134.592390][ T7355] team_slave_0: left promiscuous mode [ 134.609277][ T7355] team_slave_1: left promiscuous mode [ 134.699509][ T5908] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 134.756222][ T7365] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 134.859562][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 134.866871][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 134.877999][ T5908] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 134.888028][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 39684, setting to 1024 [ 134.899463][ T5908] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 134.911558][ T5908] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 134.920830][ T29] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 134.928763][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.937106][ T5908] usb 3-1: Product: syz [ 134.941462][ T5908] usb 3-1: Manufacturer: syz [ 134.946488][ T5908] usb 3-1: SerialNumber: syz [ 134.953187][ T5908] usb 3-1: config 0 descriptor?? [ 134.958765][ T7354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.967163][ T7354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.979368][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 134.986185][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 134.993786][ T5908] port100 3-1:0.0: NFC: Could not get supported command types [ 135.091502][ T29] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.102806][ T29] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.112792][ T29] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.122083][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.133662][ T7363] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.144609][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.199637][ T7354] binder: 7353:7354 ioctl c0306201 200000000640 returned -22 [ 135.223728][ T5908] usb 3-1: USB disconnect, device number 26 [ 135.348133][ T9] usb 4-1: USB disconnect, device number 30 [ 135.819302][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 135.889250][ T29] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 135.941056][ T7381] overlayfs: overlapping lowerdir path [ 135.947875][ T7381] overlayfs: overlapping lowerdir path [ 135.955882][ T7381] overlayfs: overlapping lowerdir path [ 135.964864][ T7381] overlayfs: overlapping lowerdir path [ 135.971868][ T7381] overlayfs: overlapping lowerdir path [ 135.984841][ T7381] overlayfs: overlapping lowerdir path [ 135.990032][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 135.997096][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 136.005576][ T9] usb 4-1: config 179 has no interface number 0 [ 136.013036][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 136.025990][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 136.037458][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 10 [ 136.039223][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 136.048988][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 136.067811][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 136.072571][ T29] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 136.098664][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 136.103443][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 136.110240][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.123477][ T29] usb 1-1: Product: syz [ 136.128249][ T7363] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.134854][ T29] usb 1-1: Manufacturer: syz [ 136.140439][ T29] usb 1-1: SerialNumber: syz [ 136.145388][ T7384] overlay: Bad value for 'workdir' [ 136.157955][ T29] usb 1-1: config 0 descriptor?? [ 136.180008][ T29] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 136.376607][ T29] gspca_sn9c2028: read1 error -32 [ 136.409367][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 136.558283][ T5862] usb 4-1: USB disconnect, device number 31 [ 136.558283][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 136.594191][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.614992][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.636956][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 136.647036][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 136.655448][ T9] usb 3-1: Manufacturer: syz [ 136.663722][ T9] usb 3-1: config 0 descriptor?? [ 136.889974][ T29] gspca_sn9c2028: read1 error -110 [ 136.895302][ T29] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -110 [ 137.202733][ T29] usb 1-1: USB disconnect, device number 29 [ 137.214770][ T7372] syz.0.460 (7372) used greatest stack depth: 17408 bytes left [ 137.448354][ T803] kernel read not supported for file /ppp (pid: 803 comm: kworker/0:2) [ 137.541010][ T29] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 137.678680][ T9] uclogic 0003:256C:006D.0004: v1 frame probing failed: -71 [ 137.691003][ T9] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 137.698770][ T9] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 137.719193][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 137.720773][ T29] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 137.720797][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.720814][ T29] usb 4-1: config 0 has no interface number 0 [ 137.722675][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 137.722699][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.722715][ T29] usb 4-1: Product: syz [ 137.722727][ T29] usb 4-1: Manufacturer: syz [ 137.722741][ T29] usb 4-1: SerialNumber: syz [ 137.725661][ T29] usb 4-1: config 0 descriptor?? [ 137.736467][ T29] uvcvideo 4-1:0.105: Found Unit with invalid ID 0 [ 137.736533][ T29] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 137.736565][ T29] uvcvideo 4-1:0.105: No valid video chain found. [ 137.828298][ T9] usb 3-1: USB disconnect, device number 27 [ 137.931705][ T803] usb 4-1: USB disconnect, device number 32 [ 138.009233][ T29] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 138.201312][ T29] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 138.209747][ T29] usb 1-1: config 0 has no interface number 0 [ 138.215875][ T29] usb 1-1: too many endpoints for config 0 interface 72 altsetting 147: 149, using maximum allowed: 30 [ 138.228999][ T29] usb 1-1: config 0 interface 72 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 138.252598][ T29] usb 1-1: config 0 interface 72 has no altsetting 0 [ 138.270703][ T29] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 138.287259][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.297861][ T29] usb 1-1: Product: syz [ 138.302666][ T29] usb 1-1: Manufacturer: syz [ 138.307295][ T29] usb 1-1: SerialNumber: syz [ 138.319093][ T29] usb 1-1: config 0 descriptor?? [ 138.809287][ T29] i2c-tiny-usb 1-1:0.72: version 6d.cc found at bus 001 address 030 [ 138.823106][ T29] (null): failure setting delay to 10us [ 138.830005][ T29] i2c-tiny-usb 1-1:0.72: probe with driver i2c-tiny-usb failed with error -5 [ 138.847141][ T29] usb 1-1: USB disconnect, device number 30 [ 138.931049][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'. [ 139.031905][ T7425] netlink: 'syz.2.475': attribute type 11 has an invalid length. [ 139.045583][ T30] audit: type=1800 audit(1773589709.157:7): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.475" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 139.494328][ T7432] 9p: Bad value for 'rfdno' [ 139.501242][ T7432] netlink: 104 bytes leftover after parsing attributes in process `syz.3.478'. [ 139.599242][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 139.635034][ T7435] tipc: Enabled bearer , priority 0 [ 139.645253][ T7437] tipc: Enabling of bearer rejected, already enabled [ 139.729530][ T9] usb 1-1: device descriptor read/64, error -71 [ 139.970444][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 140.061299][ T7459] IPv6: Can't replace route, no match found [ 140.121371][ T9] usb 1-1: device descriptor read/64, error -71 [ 140.239592][ T9] usb usb1-port1: attempt power cycle [ 140.266379][ T7466] 9p: Bad value for 'rfdno' [ 140.384968][ T7471] binder: 7468:7471 ioctl c018620c 200000000640 returned -22 [ 140.589226][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 140.610009][ T9] usb 1-1: device descriptor read/8, error -71 [ 140.739270][ T29] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 140.802852][ T7476] IPVS: length: 68 != 24 [ 140.849650][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 140.884318][ T9] usb 1-1: device descriptor read/8, error -71 [ 140.890506][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 140.891543][ T29] usb 4-1: config 3 has an invalid interface number: 87 but max is 0 [ 140.907244][ T29] usb 4-1: config 3 has no interface number 0 [ 140.919022][ T29] usb 4-1: config 3 interface 87 has no altsetting 0 [ 140.929290][ T29] usb 4-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 140.946965][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.955141][ T29] usb 4-1: Product: syz [ 140.959667][ T29] usb 4-1: Manufacturer: syz [ 140.964326][ T29] usb 4-1: SerialNumber: syz [ 140.999793][ T9] usb usb1-port1: unable to enumerate USB device [ 141.182588][ T29] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 141.191838][ T29] usb 4-1: selecting invalid altsetting 0 [ 141.198132][ T2354] pvrusb2: Invalid write control endpoint [ 141.200172][ T29] usb 4-1: USB disconnect, device number 33 [ 141.242576][ T2354] pvrusb2: Invalid write control endpoint [ 141.248531][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 141.258073][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 141.265720][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 141.276881][ T2354] pvrusb2: Device being rendered inoperable [ 141.285986][ T2354] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 141.293434][ T2354] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 141.305803][ T2354] pvrusb2: Attached sub-driver cx25840 [ 141.331019][ T2354] pvrusb2: Attempted to execute control transfer when device not ok [ 141.339380][ T2354] pvrusb2: Attempted to execute control transfer when device not ok [ 141.347384][ T2354] pvrusb2: Attempted to execute control transfer when device not ok [ 141.357306][ T2354] pvrusb2: Attempted to execute control transfer when device not ok [ 141.366320][ T2354] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 141.421520][ T2354] TUNER: Unable to find symbol tda829x_probe() [ 141.451897][ T2354] DVB: Unable to find symbol tda9887_attach() [ 141.459078][ T2354] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 141.466723][ T2354] pvrusb2: Attached sub-driver tuner [ 141.472146][ T2354] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 141.485363][ T2354] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 141.818916][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.830494][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.842022][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.850980][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.858627][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.890855][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.905719][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.913706][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.931917][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.941874][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.992241][ T7506] netlink: 140 bytes leftover after parsing attributes in process `syz.2.500'. [ 142.079222][ T29] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 142.200085][ T7497] chnl_net:caif_netlink_parms(): no params data found [ 142.259196][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 142.266750][ T29] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 142.275976][ T29] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 142.287373][ T29] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 142.288960][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.298613][ T29] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 142.318928][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.326500][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.327735][ T29] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 142.335266][ T7497] bridge_slave_0: entered allmulticast mode [ 142.344269][ T29] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 142.353504][ T7497] bridge_slave_0: entered promiscuous mode [ 142.358714][ T29] usb 4-1: Product: syz [ 142.368651][ T29] usb 4-1: Manufacturer: syz [ 142.373693][ T29] usb 4-1: SerialNumber: syz [ 142.377186][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.381782][ T29] usb 4-1: config 0 descriptor?? [ 142.395284][ T29] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 142.405255][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.408206][ T29] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 142.415684][ T7497] bridge_slave_1: entered allmulticast mode [ 142.452169][ T7497] bridge_slave_1: entered promiscuous mode [ 142.491763][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.504536][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.536989][ T7497] team0: Port device team_slave_0 added [ 142.546713][ T7497] team0: Port device team_slave_1 added [ 142.604376][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.612993][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.636408][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.502'. [ 142.639048][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.665357][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.673181][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.715925][ T29] usb 4-1: USB disconnect, device number 34 [ 142.716094][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 142.733898][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.744704][ T29] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 142.837191][ T7497] hsr_slave_0: entered promiscuous mode [ 142.844387][ T7497] hsr_slave_1: entered promiscuous mode [ 143.200281][ T7497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.237735][ T7497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.264053][ T7497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.305043][ T7497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.340929][ T7539] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 143.353792][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b459800: rx timeout, send abort [ 143.365025][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b459800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 143.486468][ T7548] comedi comedi3: aio_iiro_16: I/O port conflict (0x5,8) [ 143.519602][ T7548] comedi comedi3: aio_iiro_16: I/O port conflict (0x5,8) [ 143.539350][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.588815][ T7497] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.602880][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.611958][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.651085][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.658347][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.659341][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 143.829199][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 143.841610][ T7555] x_tables: duplicate underflow at hook 1 [ 143.845105][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.876956][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.887485][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.912207][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.943935][ T9] usb 1-1: config 0 descriptor?? [ 143.979954][ T9] hub 1-1:0.0: USB hub found [ 144.012430][ T5827] Bluetooth: hci4: command tx timeout [ 144.075920][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.429394][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 144.454123][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 144.473162][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 144.532873][ T9] usb 1-1: USB disconnect, device number 35 [ 144.614884][ T7561] can0: slcan on ptm0. [ 144.654977][ T7584] bond0: entered promiscuous mode [ 144.661593][ T7584] bond_slave_0: entered promiscuous mode [ 144.667422][ T7584] bond_slave_1: entered promiscuous mode [ 144.690029][ T7561] can0 (unregistered): slcan off ptm0. [ 144.705194][ T7497] veth0_vlan: entered promiscuous mode [ 144.744556][ T7497] veth1_vlan: entered promiscuous mode [ 144.802890][ T7497] veth0_macvtap: entered promiscuous mode [ 144.818837][ T7497] veth1_macvtap: entered promiscuous mode [ 144.857633][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.915769][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.944796][ T7592] kAFS: No cell specified [ 144.953414][ T1011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.974370][ T1011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.999636][ T1011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.039080][ T1011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.184177][ T7601] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.184218][ T7601] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 145.184249][ T7601] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.185776][ T7602] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.185802][ T7602] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 145.185832][ T7602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.352034][ T7601] netlink: 188 bytes leftover after parsing attributes in process `syz.2.519'. [ 145.384362][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.404247][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.440930][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.456228][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.529842][ T803] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 145.687313][ T7619] kvm: vcpu 0: requested 3584 ns lapic timer period limited to 200000 ns [ 145.695313][ T30] audit: type=1400 audit(1773589715.797:8): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7620 comm="syz.0.525" [ 145.713667][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 145.720859][ T803] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 145.720886][ T803] usb 4-1: config 0 has no interface number 0 [ 145.720924][ T803] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 145.720947][ T803] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.720968][ T803] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 145.720989][ T803] usb 4-1: config 0 interface 196 has no altsetting 0 [ 145.725546][ T803] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 145.725574][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.725592][ T803] usb 4-1: Product: syz [ 145.725606][ T803] usb 4-1: Manufacturer: syz [ 145.725618][ T803] usb 4-1: SerialNumber: syz [ 145.750506][ T803] usb 4-1: config 0 descriptor?? [ 145.751605][ T7604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.788858][ T7626] netlink: 116 bytes leftover after parsing attributes in process `syz.0.525'. [ 145.788911][ T7626] openvswitch: netlink: Flow actions attr not present in new flow. [ 145.879257][ T5883] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 146.031205][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.043012][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.053434][ T5883] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 146.063240][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.075094][ T5883] usb 3-1: config 0 descriptor?? [ 146.090370][ T5827] Bluetooth: hci4: command tx timeout [ 146.149316][ T5908] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.249238][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 146.301223][ T5908] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 146.309448][ T5908] usb 5-1: config 0 has no interface number 0 [ 146.315605][ T5908] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.325029][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.336124][ T5908] usb 5-1: config 0 descriptor?? [ 146.345382][ T5908] cp210x 5-1:0.3: cp210x converter detected [ 146.399340][ T24] usb 1-1: device descriptor read/64, error -71 [ 146.417045][ T803] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 146.443187][ T803] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 146.454753][ T803] usb 4-1: USB disconnect, device number 35 [ 146.487338][ T5883] hid_parser_main: 128 callbacks suppressed [ 146.487360][ T5883] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 146.502137][ T5883] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 146.508986][ T5883] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 146.516071][ T5883] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 146.524888][ T803] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 146.532661][ T5883] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 146.546733][ T7628] 9pnet_virtio: no channels available for device 127.0.0.1 [ 146.546762][ T5883] elan 0003:04F3:0755.0005: failed to start in urb: -90 [ 146.603951][ T5883] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 146.659287][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 146.712114][ T5883] usb 3-1: USB disconnect, device number 29 [ 146.765529][ T5908] cp210x 5-1:0.3: failed to get vendor val 0x000e size 3: -71 [ 146.779825][ T5908] usb 5-1: cp210x converter now attached to ttyUSB0 [ 146.792152][ T5908] usb 5-1: USB disconnect, device number 2 [ 146.805604][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 146.816404][ T24] usb 1-1: device descriptor read/64, error -71 [ 146.823815][ T5908] cp210x 5-1:0.3: device disconnected [ 146.939472][ T24] usb usb1-port1: attempt power cycle [ 147.250803][ T30] audit: type=1326 audit(1773589717.367:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.2.530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f651ab9c799 code=0x0 [ 147.291362][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 147.330759][ T24] usb 1-1: device descriptor read/8, error -71 [ 147.565238][ T5908] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.575464][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 147.593280][ T7645] syzkaller1: entered promiscuous mode [ 147.598791][ T7645] syzkaller1: entered allmulticast mode [ 147.607645][ T7645] binder: 7644:7645 ioctl c0306201 200000000180 returned -14 [ 147.616354][ T24] usb 1-1: device descriptor read/8, error -71 [ 147.739914][ T24] usb usb1-port1: unable to enumerate USB device [ 147.760648][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.771138][ T5908] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 147.780550][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.790736][ T5908] usb 5-1: config 0 descriptor?? [ 147.979308][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 148.121164][ T7650] netlink: 'syz.2.535': attribute type 21 has an invalid length. [ 148.129230][ T7650] netlink: 156 bytes leftover after parsing attributes in process `syz.2.535'. [ 148.141853][ T7650] netlink: 'syz.2.535': attribute type 21 has an invalid length. [ 148.150407][ T7650] netlink: 156 bytes leftover after parsing attributes in process `syz.2.535'. [ 148.169977][ T5827] Bluetooth: hci4: command tx timeout [ 148.170088][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 148.185970][ T24] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 148.194194][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.204403][ T24] usb 4-1: config 0 has no interface number 0 [ 148.210713][ T5908] ath6kl: Unsupported hardware version: 0x0 [ 148.217346][ T24] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.231853][ T5908] ath6kl: Failed to init ath6kl core: -22 [ 148.253671][ T24] usb 4-1: config 0 interface 85 has no altsetting 0 [ 148.261367][ T5908] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 148.272332][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 148.288780][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.307784][ T24] usb 4-1: Product: syz [ 148.312116][ T24] usb 4-1: Manufacturer: syz [ 148.316807][ T24] usb 4-1: SerialNumber: syz [ 148.326816][ T24] usb 4-1: config 0 descriptor?? [ 148.336199][ T24] appletouch 4-1:0.85: Could not find int-in endpoint [ 148.343580][ T24] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 148.353388][ T24] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 148.362109][ T7654] kernel profiling enabled (shift: 25) [ 148.393753][ T7654] kvm_pr_unimpl_wrmsr: 10 callbacks suppressed [ 148.393765][ T7654] kvm: kvm [7653]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 148.413240][ T7654] kvm: kvm [7653]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 148.414392][ T5908] usb 5-1: USB disconnect, device number 3 [ 148.421927][ T7654] kvm: kvm [7653]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 148.424053][ T7654] kvm_intel: kvm [7653]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 148.541067][ T24] usb 4-1: USB disconnect, device number 36 [ 148.901091][ T7663] netlink: 72 bytes leftover after parsing attributes in process `syz.2.538'. [ 149.589162][ T7691] XFS (nullb0): Invalid superblock magic number [ 149.889217][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 150.082159][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 150.092914][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 150.103153][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 150.113374][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 150.124962][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 150.134392][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.146157][ T24] usb 4-1: config 0 descriptor?? [ 150.209211][ T803] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.250446][ T5827] Bluetooth: hci4: command tx timeout [ 150.299621][ T7688] syz.0.546 (7688): drop_caches: 2 [ 150.348713][ T7710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.552'. [ 150.362914][ T24] hdpvr 4-1:0.0: firmware version 0xaf dated vM>@1chY9; [ 150.380392][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 150.383875][ T24] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 150.387733][ T803] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.421642][ T803] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 150.437711][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.456363][ T803] usb 5-1: Product: syz [ 150.467096][ T803] usb 5-1: Manufacturer: syz [ 150.474979][ T803] usb 5-1: SerialNumber: syz [ 150.811574][ T5908] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 150.835396][ T24] hdpvr 4-1:0.0: Could not setup controls [ 150.841944][ T24] hdpvr 4-1:0.0: registering videodev failed [ 150.857946][ T24] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 150.868943][ T24] usb 4-1: USB disconnect, device number 37 [ 150.973827][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 150.983275][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.994602][ T5908] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 151.004055][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.012107][ T5908] usb 3-1: Product: syz [ 151.016283][ T5908] usb 3-1: Manufacturer: syz [ 151.021023][ T5908] usb 3-1: SerialNumber: syz [ 151.050533][ T29] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 151.220152][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 151.226954][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.239588][ T29] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 151.249565][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.258319][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.267882][ T29] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 151.285654][ T29] usb 1-1: Product: syz [ 151.290681][ T29] usb 1-1: SerialNumber: syz [ 151.295997][ T5908] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 151.305537][ T29] usb 1-1: config 0 descriptor?? [ 151.313650][ T5908] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 151.400965][ T5908] usb 3-1: USB disconnect, device number 30 [ 151.454768][ T6136] udevd[6136]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.528305][ T5883] usb 1-1: USB disconnect, device number 40 [ 151.849309][ T5908] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 151.999206][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 152.014676][ T5908] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 152.031508][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.043565][ T5908] usb 4-1: config 0 descriptor?? [ 152.051851][ T5883] IPVS: starting estimator thread 0... [ 152.068076][ T7744] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 152.149546][ T7745] IPVS: using max 29 ests per chain, 69600 per kthread [ 152.234650][ T7749] overlay: Unknown parameter 'subj_role' [ 152.255872][ T5908] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 152.268949][ T5908] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 152.277926][ T5908] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 152.319370][ T5883] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 152.470829][ T5883] usb 3-1: no configurations [ 152.476329][ T5883] usb 3-1: can't read configurations, error -22 [ 152.589351][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 152.609280][ T5883] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 152.741845][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.753265][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.763504][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 152.772663][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.781541][ T5883] usb 3-1: no configurations [ 152.786177][ T5883] usb 3-1: can't read configurations, error -22 [ 152.794499][ T9] usb 1-1: config 0 descriptor?? [ 152.802590][ T5883] usb usb3-port1: attempt power cycle [ 153.007985][ T803] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 153.032971][ T803] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 153.120724][ T803] usb 5-1: USB disconnect, device number 4 [ 153.161930][ T5883] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 153.188704][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.211834][ T5883] usb 3-1: no configurations [ 153.217768][ T5883] usb 3-1: can't read configurations, error -22 [ 153.240021][ T9] arvo 0003:1E7D:30D4.0006: item fetching failed at offset 5/7 [ 153.256122][ T9] arvo 0003:1E7D:30D4.0006: parse failed [ 153.263634][ T9] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -22 [ 153.379308][ T5883] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 153.400315][ T5883] usb 3-1: no configurations [ 153.404972][ T5883] usb 3-1: can't read configurations, error -22 [ 153.411810][ T5883] usb usb3-port1: unable to enumerate USB device [ 153.559260][ T5883] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.711304][ T5883] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.722368][ T5883] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.732839][ T5883] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.741983][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.753370][ T7762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.763774][ T5883] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.963425][ T5883] usb 5-1: USB disconnect, device number 5 [ 154.348784][ T7770] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.569'. [ 155.290050][ T29] usb 1-1: USB disconnect, device number 41 [ 155.397222][ T7781] netlink: 208 bytes leftover after parsing attributes in process `syz.0.573'. [ 155.499218][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 155.654073][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.666548][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.677994][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.687254][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.700286][ T9] usb 5-1: config 0 descriptor?? [ 155.711582][ T9] hub 5-1:0.0: USB hub found [ 155.754374][ T7791] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 155.779265][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 155.911212][ T9] hub 5-1:0.0: 1 port detected [ 155.949280][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 155.956743][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.967057][ T24] usb 1-1: config 0 has no interfaces? [ 155.974691][ T24] usb 1-1: New USB device found, idVendor=19d2, idProduct=0004, bcdDevice=65.88 [ 155.983829][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.992410][ T24] usb 1-1: Product: syz [ 155.996591][ T24] usb 1-1: Manufacturer: syz [ 156.001254][ T24] usb 1-1: SerialNumber: syz [ 156.008309][ T24] usb 1-1: config 0 descriptor?? [ 156.099231][ T803] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 156.112794][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.121450][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.121760][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.134918][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.146988][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.156298][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.166353][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.175162][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.186202][ T9] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 156.194236][ T9] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 156.204365][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 156.210498][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 156.222922][ T24] usb 1-1: USB disconnect, device number 42 [ 156.241459][ T9] usb 5-1: USB disconnect, device number 6 [ 156.250397][ T803] usb 3-1: Using ep0 maxpacket: 16 [ 156.263225][ T803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.282222][ T803] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 107, changing to 7 [ 156.295725][ T803] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 156.305045][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.313240][ T803] usb 3-1: Product: syz [ 156.317413][ T803] usb 3-1: Manufacturer: syz [ 156.322071][ T803] usb 3-1: SerialNumber: syz [ 156.541632][ T803] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.548755][ T803] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 156.579693][ T803] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 156.593248][ T803] usb 3-1: USB disconnect, device number 35 [ 156.628052][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.961897][ T7812] netlink: 'syz.0.583': attribute type 4 has an invalid length. [ 156.969821][ T7812] netlink: 240 bytes leftover after parsing attributes in process `syz.0.583'. [ 157.361207][ T7828] netlink: 'syz.2.586': attribute type 4 has an invalid length. [ 157.370266][ T7825] netlink: 'syz.2.586': attribute type 4 has an invalid length. [ 157.581351][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 157.627569][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 157.638406][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 157.670091][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 157.712394][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 157.731511][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 157.751224][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 158.085322][ T7862] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 158.188885][ T7867] sctp: [Deprecated]: syz.2.598 (pid 7867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.188885][ T7867] Use struct sctp_sack_info instead [ 158.541235][ T7871] syzkaller1: entered promiscuous mode [ 158.546751][ T7871] syzkaller1: entered allmulticast mode [ 159.059296][ T803] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.219223][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 159.225988][ T803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 159.237512][ T803] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 159.251523][ T803] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.261320][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.270428][ T803] usb 5-1: Product: syz [ 159.274685][ T803] usb 5-1: Manufacturer: syz [ 159.289053][ T803] usb 5-1: SerialNumber: syz [ 159.504646][ T7888] netlink: 'syz.0.607': attribute type 29 has an invalid length. [ 159.525350][ T7888] netlink: 'syz.0.607': attribute type 29 has an invalid length. [ 159.525581][ T803] cdc_ncm 5-1:1.0: bind() failure [ 159.543142][ T7888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.544740][ T803] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 159.558989][ T803] cdc_ncm 5-1:1.1: bind() failure [ 159.575082][ T803] usb 5-1: USB disconnect, device number 7 [ 159.581435][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 159.749890][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 159.757232][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.767887][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.782426][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 159.791755][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.799862][ T9] usb 3-1: Product: syz [ 159.804216][ T9] usb 3-1: Manufacturer: syz [ 159.808844][ T9] usb 3-1: SerialNumber: syz [ 159.929479][ T5913] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 160.061548][ T9] usb 3-1: USB disconnect, device number 36 [ 160.079478][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 160.092817][ T5913] usb 1-1: config 0 has no interfaces? [ 160.102414][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.106301][ T5913] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 160.132191][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.146347][ T5913] usb 1-1: config 0 descriptor?? [ 160.241063][ T7900] __nla_validate_parse: 93 callbacks suppressed [ 160.241084][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.613'. [ 160.362606][ T24] usb 1-1: USB disconnect, device number 43 [ 160.365352][ T7905] netlink: 'syz.4.615': attribute type 10 has an invalid length. [ 160.390963][ T7905] netlink: 55 bytes leftover after parsing attributes in process `syz.4.615'. [ 160.669579][ T24] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 160.809241][ T24] usb 1-1: device descriptor read/64, error -71 [ 160.817528][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.620'. [ 160.829897][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.841556][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.620'. [ 160.851083][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.860791][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.620'. [ 160.870279][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.880694][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.620'. [ 160.891600][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.899332][ T803] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 160.901677][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.620'. [ 160.917822][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.931088][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.620'. [ 160.954973][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.000658][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.620'. [ 161.051977][ T24] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 161.053284][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.072339][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 161.079729][ T803] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.091996][ T803] usb 5-1: config 0 interface 0 has no altsetting 0 [ 161.099334][ T803] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 161.113203][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.128492][ T803] usb 5-1: config 0 descriptor?? [ 161.137563][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.620'. [ 161.153006][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.169005][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.189612][ T24] usb 1-1: device descriptor read/64, error -71 [ 161.264123][ T7916] cgroup: fork rejected by pids controller in /syz2 [ 161.299691][ T24] usb usb1-port1: attempt power cycle [ 161.575180][ T803] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 161.582414][ T803] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 161.589804][ T803] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 161.597053][ T803] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 161.604340][ T803] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 161.612607][ T803] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 161.650619][ T24] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 161.691400][ T24] usb 1-1: device descriptor read/8, error -71 [ 161.771966][ C0] usb 5-1: input irq status -75 received [ 161.939246][ T24] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 161.970518][ T24] usb 1-1: device descriptor read/8, error -71 [ 162.033331][ T803] usb 5-1: USB disconnect, device number 8 [ 162.080377][ T24] usb usb1-port1: unable to enumerate USB device [ 162.199212][ T5876] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 162.349230][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 162.355847][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.364699][ T5876] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 162.374797][ T5876] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 162.384708][ T5876] usb 3-1: config 1 interface 0 has no altsetting 0 [ 162.393754][ T5876] usb 3-1: string descriptor 0 read error: -22 [ 162.400249][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.409564][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.420866][ T7958] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 162.428423][ T7958] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 162.643484][ T5876] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 162.662818][ T5876] usb 3-1: USB disconnect, device number 37 [ 162.775110][ T7963] comedi comedi3: pcm3724: I/O port conflict (0x9,16) [ 162.886691][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.960935][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.081134][ T803] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 163.242296][ T803] usb 1-1: config 0 has no interfaces? [ 163.287494][ T803] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.309231][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.324337][ T803] usb 1-1: SerialNumber: syz [ 163.334820][ T7981] netlink: 'syz.2.627': attribute type 9 has an invalid length. [ 163.355652][ T803] usb 1-1: config 0 descriptor?? [ 163.392876][ T7981] 5gQ[: renamed from lo (while UP) [ 163.879340][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 163.929697][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.049287][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 164.058007][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.072131][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.082988][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.099246][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 164.100257][ T24] usb 3-1: config 0 descriptor?? [ 164.109518][ T5876] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 164.125998][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.141882][ T5876] usb 5-1: config 0 has no interface number 0 [ 164.152021][ T5876] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 164.168900][ T5876] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 164.181263][ T5876] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 164.192955][ T5876] usb 5-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.208127][ T5876] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 164.220707][ T5876] usb 5-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 164.236824][ T5876] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 164.249319][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.258766][ T5876] usb 5-1: Product: syz [ 164.263178][ T5876] usb 5-1: Manufacturer: syz [ 164.269762][ T5876] usb 5-1: SerialNumber: syz [ 164.277864][ T5876] usb 5-1: config 0 descriptor?? [ 164.285250][ T7994] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 164.293616][ T7994] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 164.510796][ T5876] usb 5-1: NFC: intf ffff888026944000 id ffffffff8f5fc800 [ 164.530392][ T24] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 164.556016][ T5876] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 164.569962][ T5876] usb 5-1: USB disconnect, device number 9 [ 164.583371][ T5876] usb 5-1: NFC: intf ffff888026944000 [ 164.726341][ T9] usb 3-1: USB disconnect, device number 38 [ 165.272366][ T8012] __nla_validate_parse: 27 callbacks suppressed [ 165.272383][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 165.295840][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 165.495138][ T8024] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 165.514147][ T8026] overlayfs: failed lookup in lower (newroot/205, name='file0', err=-40): overlapping layers [ 165.526108][ T8024] evm: overlay not supported [ 165.792127][ T24] usb 1-1: USB disconnect, device number 48 [ 165.920348][ T5876] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 166.091006][ T5876] usb 3-1: config 0 has an invalid interface number: 245 but max is 0 [ 166.111915][ T5876] usb 3-1: config 0 has no interface number 0 [ 166.125719][ T5876] usb 3-1: New USB device found, idVendor=699b, idProduct=9cbd, bcdDevice=76.2a [ 166.144622][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.163551][ T5876] usb 3-1: config 0 descriptor?? [ 166.199221][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.369184][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 166.380642][ T5876] usb 3-1: string descriptor 0 read error: -71 [ 166.392775][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.404996][ T5876] usb-storage 3-1:0.245: USB Mass Storage device detected [ 166.413870][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.435192][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.453740][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.468516][ T24] usb 5-1: Product: syz [ 166.478668][ T24] usb 5-1: Manufacturer: syz [ 166.493708][ T5876] usb 3-1: USB disconnect, device number 39 [ 166.502012][ T24] usb 5-1: SerialNumber: syz [ 166.532648][ T24] usb 5-1: config 0 descriptor?? [ 166.965966][ T8073] netlink: 'syz.0.645': attribute type 58 has an invalid length. [ 167.148404][ T30] audit: type=1326 audit(1773589737.257:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.3.647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd93d99c799 code=0x0 [ 167.240137][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 167.324561][ T8086] netlink: 'syz.0.648': attribute type 39 has an invalid length. [ 167.399354][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 167.413034][ T24] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 167.428523][ T24] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 167.456579][ T24] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.481855][ T24] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 167.517854][ T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 167.541690][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.559176][ T24] usb 3-1: Product: syz [ 167.569541][ T24] usb 3-1: Manufacturer: syz [ 167.579027][ T24] usb 3-1: SerialNumber: syz [ 167.600987][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 167.626166][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input14 [ 167.810022][ T24] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 167.829026][ T24] (id 0x00) [ 167.925122][ T8108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.650'. [ 167.949170][ T24] rc_core: IR keymap rc-imon-pad not found [ 167.966751][ T24] Registered IR keymap rc-empty [ 167.984218][ T24] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 168.013140][ T24] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 168.045487][ T8111] netlink: 'syz.3.651': attribute type 10 has an invalid length. [ 168.063859][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 168.075826][ T8111] netlink: 152 bytes leftover after parsing attributes in process `syz.3.651'. [ 168.120578][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input15 [ 168.136741][ T8111] net_ratelimit: 24 callbacks suppressed [ 168.145333][ T8111] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 168.164459][ T24] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:40> initialized [ 168.318693][ T24] usb 3-1: USB disconnect, device number 40 [ 168.326182][ T8077] imon:send_packet: packet tx failed (-71) [ 168.390335][ T8077] imon:vfd_write: send packet #0 failed [ 168.757919][ T8141] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 168.776167][ T8141] netlink: 224 bytes leftover after parsing attributes in process `syz.2.657'. [ 168.811268][ T8142] sp0: Synchronizing with TNC [ 168.839750][ T8142] sp0: Found TNC [ 168.870504][ T8140] [U] ` [ 168.996057][ T5913] usb 5-1: USB disconnect, device number 10 [ 169.429604][ T5913] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.618175][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.656438][ T5913] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 169.687740][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.736705][ T5913] usb 5-1: config 0 descriptor?? [ 169.756886][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 170.149266][ T5876] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 170.162251][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 170.172115][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 170.180257][ T8152] random: crng reseeded on system resumption [ 170.188597][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 170.211554][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 170.219454][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 170.287375][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 170.296209][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 170.304033][ T5913] pwc: recv_control_msg error -32 req 02 val 2100 [ 170.311602][ T5913] pwc: recv_control_msg error -32 req 04 val 1500 [ 170.319183][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 170.335923][ T5876] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 170.359438][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.369241][ T5876] usb 1-1: Product: syz [ 170.379301][ T5876] usb 1-1: Manufacturer: syz [ 170.389205][ T5876] usb 1-1: SerialNumber: syz [ 170.402325][ T5876] usb 1-1: config 0 descriptor?? [ 170.526126][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 170.533406][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 170.540428][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 170.547337][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 170.554514][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 170.561586][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 170.578428][ T5913] pwc: Registered as video103. [ 170.586756][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 170.610678][ T5913] usb 5-1: USB disconnect, device number 11 [ 170.716895][ T30] audit: type=1326 audit(1773589740.827:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ab9c799 code=0x7fc00000 [ 170.746489][ T30] audit: type=1326 audit(1773589740.827:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f651ab9c799 code=0x7fc00000 [ 170.768875][ T30] audit: type=1326 audit(1773589740.827:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ab9c799 code=0x7fc00000 [ 170.791320][ T30] audit: type=1326 audit(1773589740.827:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ab9c799 code=0x7fc00000 [ 170.815938][ T30] audit: type=1326 audit(1773589740.827:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ab9c799 code=0x7fc00000 [ 170.838276][ T30] audit: type=1326 audit(1773589740.827:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ab9c799 code=0x7fc00000 [ 170.861023][ T30] audit: type=1326 audit(1773589740.827:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ab9c799 code=0x7fc00000 [ 170.861238][ T5876] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 170.886007][ T30] audit: type=1326 audit(1773589740.827:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ab9c799 code=0x7fc00000 [ 170.914026][ T30] audit: type=1326 audit(1773589740.827:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ab9c799 code=0x7fc00000 [ 170.941176][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.954628][ T5876] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 170.979852][ T5876] usb 1-1: media controller created [ 171.001911][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.070622][ T5876] zl10353_read_register: readreg error (reg=127, ret==0) [ 171.077865][ T5876] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 171.100722][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 171.145939][ T5876] usb 1-1: USB disconnect, device number 49 [ 171.172940][ T8193] xt_socket: unknown flags 0xe4 [ 171.196116][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'. [ 171.227467][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 171.362434][ T8200] netlink: 'syz.4.672': attribute type 29 has an invalid length. [ 171.389470][ T8199] netlink: 'syz.4.672': attribute type 29 has an invalid length. [ 171.466363][ T8203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.673'. [ 171.897224][ T8218] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 172.074582][ T8215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.251831][ T8228] netlink: 57 bytes leftover after parsing attributes in process `syz.2.679'. [ 172.391188][ T8232] syzkaller1: entered promiscuous mode [ 172.398622][ T8232] syzkaller1: entered allmulticast mode [ 172.462986][ T8236] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.682'. [ 172.474923][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 172.649395][ T5876] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 172.803468][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 172.815717][ T5876] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 172.825361][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.833492][ T5876] usb 1-1: Product: syz [ 172.837732][ T5876] usb 1-1: Manufacturer: syz [ 172.843818][ T5876] usb 1-1: SerialNumber: syz [ 172.850966][ T5876] usb 1-1: config 0 descriptor?? [ 172.900543][ T5883] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 172.974250][ T8252] netlink: 'syz.4.688': attribute type 29 has an invalid length. [ 173.059693][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.074738][ T8234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.075897][ T5883] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.089987][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.100668][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.103543][ T8234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.111865][ T5883] usb 3-1: Product: syz [ 173.128495][ T5876] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 173.137288][ T5876] airspy 1-1:0.0: Could not detect board [ 173.144002][ T5883] usb 3-1: Manufacturer: syz [ 173.148800][ T5883] usb 3-1: SerialNumber: syz [ 173.153595][ T5876] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 173.168654][ T5883] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.179046][ T8252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.183223][ T5876] usb 1-1: USB disconnect, device number 50 [ 173.188903][ T8252] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 173.211129][ T803] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.179196][ T5913] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 174.309215][ T5913] usb 1-1: device descriptor read/64, error -71 [ 174.332106][ T803] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 174.343264][ T803] ath9k_htc: Failed to initialize the device [ 174.367303][ T803] usb 3-1: ath9k_htc: USB layer deinitialized [ 174.549202][ T5913] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 174.679205][ T5913] usb 1-1: device descriptor read/64, error -71 [ 174.790475][ T5913] usb usb1-port1: attempt power cycle [ 175.050354][ T5827] Bluetooth: hci4: command 0x2016 tx timeout [ 175.129242][ T5913] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 175.149670][ T5913] usb 1-1: device descriptor read/8, error -71 [ 175.249847][ T29] usb 3-1: USB disconnect, device number 41 [ 175.340675][ T5876] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.399241][ T5913] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 175.419859][ T5913] usb 1-1: device descriptor read/8, error -71 [ 175.501021][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.512590][ T5876] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 175.521778][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.533263][ T5876] usb 5-1: config 0 descriptor?? [ 175.542159][ T5913] usb usb1-port1: unable to enumerate USB device [ 175.611654][ T29] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 175.769685][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 175.776690][ T29] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 175.784921][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.795224][ T29] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 175.804343][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.814740][ T29] usb 3-1: config 0 descriptor?? [ 175.822847][ T29] pxrc 3-1:0.0: Could not find endpoint [ 175.951181][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 175.958368][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 175.965262][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 175.972166][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 175.978955][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 175.985809][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 175.992748][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 175.999878][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 176.006759][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 176.013755][ T5876] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 176.025051][ T5876] asus 0003:0B05:1ABE.000A: item fetching failed at offset 454/483 [ 176.033729][ T5876] asus 0003:0B05:1ABE.000A: Asus hid parse failed: -22 [ 176.040840][ T5876] asus 0003:0B05:1ABE.000A: probe with driver asus failed with error -22 [ 176.044317][ T5862] usb 3-1: USB disconnect, device number 42 [ 176.157571][ T5876] usb 5-1: USB disconnect, device number 12 [ 176.956656][ T8322] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.009248][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 177.079222][ T5862] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 177.129275][ T5827] Bluetooth: hci4: command 0x2016 tx timeout [ 177.169236][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 177.177058][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.185960][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 177.197628][ T29] usb 5-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 177.206794][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.215455][ T29] usb 5-1: Product: syz [ 177.219885][ T29] usb 5-1: Manufacturer: syz [ 177.224513][ T29] usb 5-1: SerialNumber: syz [ 177.232939][ T8317] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 177.249228][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 177.255941][ T5862] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 177.264428][ T5862] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.272649][ T5862] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.281953][ T5862] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.290257][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.299641][ T5862] usb 3-1: config 0 has no interface number 0 [ 177.305788][ T5862] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 177.316911][ T5862] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 177.326805][ T5862] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.336684][ T5862] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.349800][ T24] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 177.357316][ T5862] usb 3-1: config 0 interface 125 has no altsetting 2 [ 177.366475][ T5862] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 177.376221][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.384299][ T5862] usb 3-1: Product: syz [ 177.388488][ T5862] usb 3-1: Manufacturer: syz [ 177.393128][ T5862] usb 3-1: SerialNumber: syz [ 177.400135][ T5862] usb 3-1: config 0 descriptor?? [ 177.408105][ T5862] usb 3-1: selecting invalid altsetting 2 [ 177.413942][ T5862] uss720 3-1:0.125: probe with driver uss720 failed with error -22 [ 177.450904][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.458184][ T29] usb 5-1: invalid MIDI in EP 0 [ 177.498513][ T29] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 177.510268][ T29] usb 5-1: USB disconnect, device number 13 [ 177.523577][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.544062][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.545184][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.580811][ T24] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 177.590584][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.602081][ T24] usb 1-1: config 0 descriptor?? [ 177.608023][ T5862] usb 3-1: USB disconnect, device number 43 [ 178.034679][ T24] aquacomputer_d5next 0003:0C70:F0B6.000B: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 178.249318][ T5862] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 178.253946][ T5876] usb 1-1: USB disconnect, device number 55 [ 178.271694][ T8330] IPVS: length: 4096 != 8 [ 178.419217][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 178.426802][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.436779][ T5862] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 32 [ 178.447994][ T5862] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1023 [ 178.459048][ T5862] usb 5-1: config 1 interface 0 has no altsetting 0 [ 178.468651][ T5862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.478162][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.486316][ T5862] usb 5-1: Product: syz [ 178.491265][ T5862] usb 5-1: Manufacturer: syz [ 178.497522][ T5862] usb 5-1: SerialNumber: syz [ 178.512618][ T8327] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 178.528100][ T8327] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 178.751891][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.778803][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.813487][ T5862] usb 5-1: bad CDC descriptors [ 178.846341][ T5862] usb 5-1: USB disconnect, device number 14 [ 178.902511][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 179.127986][ T5862] IPVS: starting estimator thread 0... [ 179.219275][ T8372] IPVS: using max 37 ests per chain, 88800 per kthread [ 179.331232][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.725'. [ 179.455898][ T8387] netlink: 168 bytes leftover after parsing attributes in process `syz.4.729'. [ 179.474674][ T8385] overlayfs: failed lookup in lower (newroot/178, name='file0', err=-40): overlapping layers [ 179.735073][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'. [ 179.759808][ T5876] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 179.866237][ T8395] fuse: Bad value for 'user_id' [ 179.871174][ T8395] fuse: Bad value for 'user_id' [ 179.919230][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 179.932773][ T5876] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 179.945132][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.958487][ T5876] usb 5-1: config 0 descriptor?? [ 179.971228][ T5876] gspca_main: sunplus-2.14.0 probing 041e:400b [ 180.026337][ T8402] netlink: 'syz.2.735': attribute type 1 has an invalid length. [ 180.034378][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 180.043575][ T8402] netlink: 658 bytes leftover after parsing attributes in process `syz.2.735'. [ 180.053848][ T8402] netlink: 'syz.2.735': attribute type 1 has an invalid length. [ 180.066892][ T8402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.735'. [ 180.080385][ T8402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.735'. [ 180.637043][ T8426] Bluetooth: MGMT ver 1.23 [ 180.681468][ T5876] gspca_sunplus: reg_r err -71 [ 180.686491][ T5876] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 180.696358][ T5876] usb 5-1: USB disconnect, device number 15 [ 180.879235][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 181.039183][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 181.047116][ T24] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 181.055454][ T24] usb 1-1: config 0 has no interface number 0 [ 181.063506][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 181.072597][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.080671][ T24] usb 1-1: Product: syz [ 181.084832][ T24] usb 1-1: Manufacturer: syz [ 181.089485][ T24] usb 1-1: SerialNumber: syz [ 181.096134][ T24] usb 1-1: config 0 descriptor?? [ 181.303762][ T24] uvcvideo 1-1:0.31: Found Unit with invalid ID 0 [ 181.315862][ T24] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 181.323542][ T24] uvcvideo 1-1:0.31: No valid video chain found. [ 181.327486][ T8432] netlink: 168 bytes leftover after parsing attributes in process `syz.4.745'. [ 181.332350][ T24] usb 1-1: USB disconnect, device number 56 [ 181.470972][ T5876] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 181.629257][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 181.635981][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.647254][ T5876] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.656561][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.666439][ T5876] usb 3-1: config 0 descriptor?? [ 181.839229][ T5883] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 181.875707][ T5876] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 181.906293][ T8446] erofs (device nbd0): cannot find valid erofs superblock [ 181.989202][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 181.996813][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.005892][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.016774][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.032083][ T5883] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 182.041392][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.049547][ T5883] usb 5-1: Product: syz [ 182.053951][ T5883] usb 5-1: Manufacturer: syz [ 182.058564][ T5883] usb 5-1: SerialNumber: syz [ 182.277816][ T5883] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.287766][ T5883] usb 5-1: MIDIStreaming interface descriptor not found [ 182.342077][ T5883] usb 5-1: USB disconnect, device number 16 [ 183.066249][ T8471] tmpfs: Unknown parameter 'nr' [ 183.152109][ T5883] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 183.240761][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.251578][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.260481][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.269459][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.278098][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.286964][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.297663][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.306420][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.315703][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.320019][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 183.326016][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.353962][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 183.369062][ T5883] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 183.396786][ T5883] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 183.408725][ T5883] usb 5-1: Product: syz [ 183.413507][ T5883] usb 5-1: Manufacturer: syz [ 183.418226][ T5883] usb 5-1: SerialNumber: syz [ 183.470483][ T29] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 183.633854][ T5883] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 183.651636][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.651933][ T5883] usb 5-1: Handspring Visor / Palm OS: port 191, is for unknown use [ 183.665358][ T29] usb 1-1: not running at top speed; connect to a high speed hub [ 183.672581][ T5883] usb 5-1: Handspring Visor / Palm OS: port 206, is for unknown use [ 183.677025][ T29] usb 1-1: config 14 has an invalid interface number: 169 but max is 0 [ 183.684132][ T5883] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 183.692344][ T29] usb 1-1: config 14 has no interface number 0 [ 183.704966][ T5883] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 183.719046][ T29] usb 1-1: config 14 interface 169 has no altsetting 0 [ 183.728156][ T5883] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 183.750221][ T5883] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 183.753011][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice=e4.82 [ 183.768378][ T29] usb 1-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 183.777855][ T29] usb 1-1: Product: syz [ 183.782668][ T29] usb 1-1: Manufacturer: syz [ 183.785988][ T5883] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 183.787408][ T29] usb 1-1: SerialNumber: syz [ 183.813046][ T5883] usb 5-1: USB disconnect, device number 17 [ 183.833281][ T5883] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 183.876064][ T5883] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 183.891027][ T5883] visor 5-1:1.0: device disconnected [ 183.918882][ T8499] mkiss: ax0: crc mode is auto. [ 184.048043][ T29] usb 1-1: cannot find UAC_HEADER [ 184.158620][ T29] snd-usb-audio 1-1:14.169: probe with driver snd-usb-audio failed with error -22 [ 184.175278][ T29] usb 1-1: USB disconnect, device number 57 [ 184.191902][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:14.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.231479][ T1598] usb 3-1: USB disconnect, device number 44 [ 184.380231][ T5883] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 184.540775][ T5883] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 184.551757][ T5883] usb 5-1: config 1 has no interface number 0 [ 184.558531][ T5883] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 184.568613][ T5883] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 184.587185][ T5883] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 184.597086][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.606092][ T5883] usb 5-1: Product: syz [ 184.611964][ T5883] usb 5-1: Manufacturer: syz [ 184.616599][ T5883] usb 5-1: SerialNumber: syz [ 184.626401][ T8503] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 184.649896][ T5883] usb 5-1: Error in usbnet_get_endpoints (-22) [ 184.699551][ T8523] syzkaller1: entered promiscuous mode [ 184.705047][ T8523] syzkaller1: entered allmulticast mode [ 184.749236][ T29] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 184.809246][ T5151] Bluetooth: hci4: command 0x2016 tx timeout [ 184.814038][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.771'. [ 184.862960][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.881142][ T8530] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 184.884083][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.891984][ T8530] netlink: 228 bytes leftover after parsing attributes in process `syz.0.772'. [ 184.900436][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.909273][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 184.915742][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.935825][ T5876] usb 5-1: USB disconnect, device number 18 [ 184.939526][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 184.956364][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.971842][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.982736][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.992666][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.010763][ T29] usb 3-1: config 0 descriptor?? [ 185.026716][ T29] hub 3-1:0.0: USB hub found [ 185.222208][ T29] hub 3-1:0.0: 1 port detected [ 185.424827][ T8543] sit0: entered promiscuous mode [ 185.437515][ T8543] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 185.449648][ T8543] netlink: 1 bytes leftover after parsing attributes in process `syz.0.776'. [ 185.458617][ T8542] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 185.469254][ T8542] netlink: 1 bytes leftover after parsing attributes in process `syz.0.776'. [ 185.858849][ T29] usb 3-1: USB disconnect, device number 45 [ 186.388766][ T8574] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 186.395328][ T8574] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.446804][ T8574] vhci_hcd vhci_hcd.0: Device attached [ 186.546785][ T8581] netlink: 156 bytes leftover after parsing attributes in process `syz.3.788'. [ 186.630701][ T5883] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 186.670291][ T5876] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 186.699610][ T5883] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 186.819416][ T5876] usb 1-1: device descriptor read/64, error -71 [ 186.892735][ T8596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'. [ 186.910980][ T8596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.791'. [ 187.089694][ T5876] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 187.229262][ T5876] usb 1-1: device descriptor read/64, error -71 [ 187.320473][ T803] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 187.349657][ T5876] usb usb1-port1: attempt power cycle [ 187.479205][ T803] usb 3-1: Using ep0 maxpacket: 16 [ 187.495602][ T803] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 187.528261][ T803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.558272][ T803] usb 3-1: config 1 has no interface number 0 [ 187.584467][ T803] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.620905][ T803] usb 3-1: config 1 interface 105 has no altsetting 0 [ 187.631436][ T803] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 187.643675][ T803] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 187.656157][ T803] usb 3-1: Product: syz [ 187.660598][ T803] usb 3-1: Manufacturer: syz [ 187.665279][ T803] usb 3-1: SerialNumber: syz [ 187.700232][ T5876] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 187.721073][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 187.731562][ T5876] usb 1-1: device descriptor read/8, error -71 [ 187.887365][ T803] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 187.979295][ T5876] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 188.000585][ T5876] usb 1-1: device descriptor read/8, error -71 [ 188.094354][ T24] usb 3-1: USB disconnect, device number 46 [ 188.110556][ T5876] usb usb1-port1: unable to enumerate USB device [ 188.636009][ T8630] dvmrp1: entered allmulticast mode [ 188.977562][ T8656] fuse: Bad value for 'fd' [ 188.977562][ T8655] fuse: Bad value for 'fd' [ 189.383300][ T8575] vhci_hcd: connection reset by peer [ 189.400753][ T36] vhci_hcd vhci_hcd.0: stop threads [ 189.414249][ T36] vhci_hcd vhci_hcd.0: release socket [ 189.422604][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 189.636729][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 189.728662][ T8676] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 189.741382][ T8676] overlayfs: missing 'lowerdir' [ 189.754275][ T8676] kAFS: unable to lookup cell 'syz0' [ 189.764687][ T8676] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 189.765602][ T8678] kAFS: unable to lookup cell 'syz0' [ 189.778011][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 189.784100][ T8676] overlayfs: missing 'lowerdir' [ 189.939351][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 189.946650][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.959841][ T24] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 189.985618][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.995803][ T24] usb 1-1: SerialNumber: syz [ 190.216549][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.246197][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 190.257420][ T24] usb 1-1: USB disconnect, device number 62 [ 190.273632][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.349347][ T5876] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 190.493517][ T5876] usb 3-1: device descriptor read/64, error -71 [ 190.653784][ T8701] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20001 [ 190.739342][ T5876] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 190.880748][ T5876] usb 3-1: device descriptor read/64, error -71 [ 190.888549][ T8709] syzkaller1: entered promiscuous mode [ 190.895388][ T8709] syzkaller1: entered allmulticast mode [ 190.989196][ T29] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 190.999475][ T5876] usb usb3-port1: attempt power cycle [ 191.058192][ T8717] (syz.3.831,8717,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 191.066989][ T8717] (syz.3.831,8717,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 191.075162][ T8717] (syz.3.831,8717,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 191.084129][ T8717] (syz.3.831,8717,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 191.159889][ T29] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 191.183184][ T29] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 191.199147][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 191.215565][ T29] usb 1-1: Product: syz [ 191.229157][ T29] usb 1-1: Manufacturer: syz [ 191.234000][ T29] usb 1-1: SerialNumber: syz [ 191.243342][ T29] usb 1-1: config 0 descriptor?? [ 191.339236][ T5876] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 191.360478][ T5876] usb 3-1: device descriptor read/8, error -71 [ 191.599200][ T5876] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 191.619787][ T5876] usb 3-1: device descriptor read/8, error -71 [ 191.641932][ T24] usb 1-1: USB disconnect, device number 63 [ 191.729463][ T5876] usb usb3-port1: unable to enumerate USB device [ 191.839301][ T5883] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 192.205214][ T8741] 9p: Bad value for 'rfdno' [ 192.296066][ T8750] batadv_slave_1: entered promiscuous mode [ 192.362869][ T8755] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 192.434977][ T8757] netlink: 'syz.4.843': attribute type 12 has an invalid length. [ 192.443779][ T8757] netlink: 132 bytes leftover after parsing attributes in process `syz.4.843'. [ 192.452960][ T8749] batadv_slave_1: left promiscuous mode [ 192.739307][ T12] wlan1: Trigger new scan to find an IBSS to join [ 193.048639][ T12] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 193.059238][ T8792] binder: BINDER_SET_CONTEXT_MGR already set [ 193.067086][ T8792] binder: 8786:8792 ioctl 40046207 0 returned -16 [ 193.154827][ T8787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.178042][ T8794] netlink: 'syz.2.854': attribute type 5 has an invalid length. [ 193.515710][ T8809] overlayfs: missing 'lowerdir' [ 193.599954][ T5883] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 193.667043][ T8818] netlink: 'syz.3.864': attribute type 3 has an invalid length. [ 193.682226][ T8818] netlink: 766 bytes leftover after parsing attributes in process `syz.3.864'. [ 193.773295][ T5883] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 193.793896][ T5883] usb 3-1: config 0 has no interface number 0 [ 193.811556][ T5883] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.844931][ T5883] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 193.869943][ T8829] dlm: no locking on control device [ 193.885490][ T5883] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 193.915992][ T5883] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 193.928670][ T5883] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 193.941013][ T5883] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 193.970684][ T5883] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 193.991561][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.017623][ T5883] usb 3-1: config 0 descriptor?? [ 194.026466][ T8799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.034901][ T8799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.055878][ T5883] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 194.179385][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.249320][ T24] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 194.257553][ T8797] netlink: 'syz.2.856': attribute type 10 has an invalid length. [ 194.268338][ T8797] veth0_vlan: entered allmulticast mode [ 194.300744][ T8797] veth0_vlan: left promiscuous mode [ 194.302360][ T8799] netlink: 'syz.2.856': attribute type 10 has an invalid length. [ 194.328235][ T8797] veth0_vlan: entered promiscuous mode [ 194.346292][ T8797] team0: Device veth0_vlan failed to register rx_handler [ 194.389265][ T24] usb 1-1: device descriptor read/64, error -71 [ 194.398840][ T8799] ipvlan1: entered promiscuous mode [ 194.422909][ T8799] team0: Device ipvlan1 failed to register rx_handler [ 194.434427][ T5151] Bluetooth: hci4: unexpected event for opcode 0x0002 [ 194.455403][ T5883] usb 3-1: USB disconnect, device number 51 [ 194.469516][ T5883] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 194.639316][ T24] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 194.769243][ T24] usb 1-1: device descriptor read/64, error -71 [ 194.879673][ T24] usb usb1-port1: attempt power cycle [ 195.138002][ T8861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.145349][ T8861] IPv6: NLM_F_CREATE should be set when creating new route [ 195.152664][ T8861] IPv6: NLM_F_CREATE should be set when creating new route [ 195.159923][ T8861] IPv6: NLM_F_CREATE should be set when creating new route [ 195.229253][ T24] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 195.249803][ T24] usb 1-1: device descriptor read/8, error -71 [ 195.320038][ T5876] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 195.406732][ T8876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.888'. [ 195.489254][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 195.497730][ T5876] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 195.509433][ T24] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 195.519168][ T5876] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 195.529949][ T5876] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 195.541447][ T5876] usb 3-1: config 127 has no interface number 0 [ 195.542053][ T24] usb 1-1: device descriptor read/8, error -71 [ 195.547772][ T5876] usb 3-1: config 127 interface 171 has no altsetting 0 [ 195.567360][ T5876] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 195.589172][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.597331][ T5876] usb 3-1: Product: syz [ 195.601967][ T5876] usb 3-1: Manufacturer: syz [ 195.608095][ T5876] usb 3-1: SerialNumber: syz [ 195.670260][ T24] usb usb1-port1: unable to enumerate USB device [ 195.769364][ T36] wlan1: Trigger new scan to find an IBSS to join [ 195.842098][ T5876] usb 3-1: USB disconnect, device number 52 [ 196.578246][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 196.618748][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.897'. [ 196.627981][ T5883] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 196.672629][ T36] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 196.779555][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 196.786399][ T5883] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 196.794476][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.804848][ T5883] usb 3-1: config 0 has no interface number 0 [ 196.811359][ T5883] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.826110][ T5883] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 196.835541][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 196.858899][ T5883] usb 3-1: Product: syz [ 196.863207][ T5883] usb 3-1: SerialNumber: syz [ 196.871698][ T5883] usb 3-1: config 0 descriptor?? [ 196.881909][ T5883] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 197.052760][ T8913] netlink: 204 bytes leftover after parsing attributes in process `syz.0.901'. [ 197.055028][ T8914] fuse: Unknown parameter 'rootmofe' [ 197.100228][ T1598] usb 3-1: USB disconnect, device number 53 [ 197.715893][ T8924] can0: slcan on pty20. [ 197.986236][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 198.059410][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 198.059426][ T30] audit: type=1326 audit(2000000001.110:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8947 comm="syz.3.909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd93d99c799 code=0x80000000 [ 198.439263][ T803] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 198.535927][ T8921] can0 (unregistered): slcan off pty20. [ 198.589438][ T803] usb 3-1: device descriptor read/64, error -71 [ 198.731788][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 198.852017][ T803] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 199.009600][ T803] usb 3-1: device descriptor read/64, error -71 [ 199.092519][ T8987] loop6: detected capacity change from 0 to 8 [ 199.155642][ T803] usb usb3-port1: attempt power cycle [ 199.352401][ T8987] Dev loop6: unable to read RDB block 8 [ 199.355371][ T8988] [ 199.360345][ T8988] ====================================================== [ 199.367361][ T8988] WARNING: possible circular locking dependency detected [ 199.374410][ T8988] syzkaller #0 Tainted: G L [ 199.378774][ T8987] loop6: unable to read partition table [ 199.380385][ T8988] ------------------------------------------------------ [ 199.380394][ T8988] syz.0.917/8988 is trying to acquire lock: [ 199.380404][ T8988] ffff88801bed5210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 199.386293][ T8987] loop6: partition table beyond EOD, [ 199.393219][ T8988] [ 199.393219][ T8988] but task is already holding lock: [ 199.393233][ T8988] ffff888026ee8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 199.393293][ T8988] [ 199.393293][ T8988] which lock already depends on the new lock. [ 199.393293][ T8988] [ 199.393299][ T8988] [ 199.393299][ T8988] the existing dependency chain (in reverse order) is: [ 199.393305][ T8988] [ 199.393305][ T8988] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 199.393333][ T8988] blk_alloc_queue+0x546/0x680 [ 199.393353][ T8988] __blk_mq_alloc_disk+0x197/0x390 [ 199.415038][ T8987] truncated [ 199.422196][ T8988] loop_add+0x482/0xb40 [ 199.422227][ T8988] loop_init+0xd9/0x170 [ 199.422250][ T8988] do_one_initcall+0x250/0x8d0 [ 199.422272][ T8988] do_initcall_level+0x104/0x190 [ 199.422290][ T8988] do_initcalls+0x59/0xa0 [ 199.422307][ T8988] kernel_init_freeable+0x2a6/0x3e0 [ 199.443915][ T8987] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 199.451397][ T8988] kernel_init+0x1d/0x1d0 [ 199.451421][ T8988] ret_from_fork+0x51e/0xb90 [ 199.451443][ T8988] ret_from_fork_asm+0x1a/0x30 [ 199.451458][ T8988] [ 199.451458][ T8988] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 199.451484][ T8988] fs_reclaim_acquire+0x71/0x100 [ 199.451499][ T8988] kmem_cache_alloc_noprof+0x40/0x650 [ 199.451520][ T8988] __kernfs_iattrs+0xdf/0x320 [ 199.451541][ T8988] kernfs_iop_setattr+0xea/0x3f0 [ 199.451561][ T8988] notify_change+0xc1a/0xf40 [ 199.451578][ T8988] do_truncate+0x1c2/0x250 [ 199.451592][ T8988] path_openat+0x2f89/0x3860 [ 199.451604][ T8988] do_file_open+0x23e/0x4a0 [ 199.451626][ T8988] do_sys_openat2+0x113/0x200 [ 199.451645][ T8988] __x64_sys_openat+0x138/0x170 [ 199.451663][ T8988] do_syscall_64+0x14d/0xf80 [ 199.598174][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.604587][ T8988] [ 199.604587][ T8988] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 199.613104][ T8988] __lock_acquire+0x15a5/0x2cf0 [ 199.618477][ T8988] lock_acquire+0xf0/0x2e0 [ 199.623406][ T8988] down_read+0x47/0x2e0 [ 199.628067][ T8988] kernfs_iop_getattr+0x9e/0x450 [ 199.633513][ T8988] vfs_getattr_nosec+0x2e1/0x430 [ 199.638958][ T8988] loop_assign_backing_file+0x27a/0x4b0 [ 199.645007][ T8988] lo_ioctl+0x1acb/0x1fb0 [ 199.649852][ T8988] blkdev_ioctl+0x5e3/0x740 [ 199.654872][ T8988] __se_sys_ioctl+0xfc/0x170 [ 199.659971][ T8988] do_syscall_64+0x14d/0xf80 [ 199.665065][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.671461][ T8988] [ 199.671461][ T8988] other info that might help us debug this: [ 199.671461][ T8988] [ 199.681673][ T8988] Chain exists of: [ 199.681673][ T8988] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 199.681673][ T8988] [ 199.696094][ T8988] Possible unsafe locking scenario: [ 199.696094][ T8988] [ 199.703524][ T8988] CPU0 CPU1 [ 199.708959][ T8988] ---- ---- [ 199.714310][ T8988] lock(&q->q_usage_counter(io)#23); [ 199.719698][ T8988] lock(fs_reclaim); [ 199.726183][ T8988] lock(&q->q_usage_counter(io)#23); [ 199.734062][ T8988] rlock(&root->kernfs_iattr_rwsem); [ 199.739420][ T8988] [ 199.739420][ T8988] *** DEADLOCK *** [ 199.739420][ T8988] [ 199.747546][ T8988] 3 locks held by syz.0.917/8988: [ 199.752637][ T8988] #0: ffff888027064430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 199.761687][ T8988] #1: ffff888026ee8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 199.771866][ T8988] #2: ffff888026ee8098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 199.782230][ T8988] [ 199.782230][ T8988] stack backtrace: [ 199.788153][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.0.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.788181][ T8988] Tainted: [L]=SOFTLOCKUP [ 199.788188][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.788202][ T8988] Call Trace: [ 199.788211][ T8988] [ 199.788218][ T8988] dump_stack_lvl+0xe8/0x150 [ 199.788244][ T8988] print_circular_bug+0x2e1/0x300 [ 199.788263][ T8988] check_noncircular+0x12e/0x150 [ 199.788281][ T8988] __lock_acquire+0x15a5/0x2cf0 [ 199.788309][ T8988] lock_acquire+0xf0/0x2e0 [ 199.788329][ T8988] ? kernfs_iop_getattr+0x9e/0x450 [ 199.788350][ T8988] down_read+0x47/0x2e0 [ 199.788365][ T8988] ? kernfs_iop_getattr+0x9e/0x450 [ 199.788384][ T8988] kernfs_iop_getattr+0x9e/0x450 [ 199.788403][ T8988] vfs_getattr_nosec+0x2e1/0x430 [ 199.788422][ T8988] loop_assign_backing_file+0x27a/0x4b0 [ 199.788438][ T8988] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 199.788462][ T8988] lo_ioctl+0x1acb/0x1fb0 [ 199.788485][ T8988] ? __pfx_lo_ioctl+0x10/0x10 [ 199.788505][ T8988] ? is_bpf_text_address+0x26/0x2b0 [ 199.788526][ T8988] ? kernel_text_address+0xa5/0xe0 [ 199.788546][ T8988] ? __kernel_text_address+0xd/0x30 [ 199.788564][ T8988] ? unwind_get_return_address+0x4d/0x90 [ 199.788580][ T8988] ? __lock_acquire+0x6b5/0x2cf0 [ 199.788601][ T8988] ? __lock_acquire+0x6b5/0x2cf0 [ 199.788622][ T8988] ? __lock_acquire+0x6b5/0x2cf0 [ 199.788644][ T8988] ? __lock_acquire+0x6b5/0x2cf0 [ 199.788665][ T8988] ? __lock_acquire+0x6b5/0x2cf0 [ 199.788696][ T8988] ? __lock_acquire+0x6b5/0x2cf0 [ 199.788717][ T8988] ? __lock_acquire+0x6b5/0x2cf0 [ 199.788740][ T8988] ? unwind_next_frame+0xa5/0x23c0 [ 199.788760][ T8988] ? is_bpf_text_address+0x26/0x2b0 [ 199.788780][ T8988] ? is_bpf_text_address+0x292/0x2b0 [ 199.788798][ T8988] ? is_bpf_text_address+0x26/0x2b0 [ 199.788818][ T8988] ? kernel_text_address+0xa5/0xe0 [ 199.788835][ T8988] ? __kernel_text_address+0xd/0x30 [ 199.788852][ T8988] ? unwind_get_return_address+0x4d/0x90 [ 199.788865][ T8988] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 199.788884][ T8988] ? arch_stack_walk+0xfb/0x150 [ 199.788901][ T8988] ? stack_trace_save+0xa9/0x100 [ 199.788917][ T8988] ? __pfx_stack_trace_save+0x10/0x10 [ 199.788934][ T8988] ? kasan_save_free_info+0x46/0x50 [ 199.788953][ T8988] ? stack_depot_save_flags+0x33/0x810 [ 199.788968][ T8988] ? format_decode+0x90/0xe10 [ 199.788986][ T8988] ? kasan_save_track+0x4f/0x80 [ 199.789007][ T8988] ? kasan_save_track+0x3e/0x80 [ 199.789026][ T8988] ? kasan_save_free_info+0x46/0x50 [ 199.789043][ T8988] ? __kasan_slab_free+0x5c/0x80 [ 199.789054][ T8988] ? kfree+0x1c5/0x650 [ 199.789072][ T8988] ? tomoyo_path_number_perm+0x501/0x630 [ 199.789090][ T8988] ? security_file_ioctl+0xc3/0x2a0 [ 199.789106][ T8988] ? __se_sys_ioctl+0x47/0x170 [ 199.789118][ T8988] ? do_syscall_64+0x14d/0xf80 [ 199.789130][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.789148][ T8988] ? __asan_memset+0x22/0x50 [ 199.789166][ T8988] ? blk_get_meta_cap+0x16d/0x7a0 [ 199.789188][ T8988] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 199.789210][ T8988] ? blkdev_common_ioctl+0x14b7/0x3250 [ 199.789235][ T8988] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 199.789256][ T8988] ? kasan_quarantine_put+0xbb/0x1f0 [ 199.789278][ T8988] ? tomoyo_path_number_perm+0x219/0x630 [ 199.789296][ T8988] ? tomoyo_path_number_perm+0x219/0x630 [ 199.789314][ T8988] ? do_vfs_ioctl+0x1166/0x1530 [ 199.789329][ T8988] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 199.789346][ T8988] ? freezing_slow_path+0x115/0x160 [ 199.789367][ T8988] ? __pfx_lo_ioctl+0x10/0x10 [ 199.789398][ T8988] blkdev_ioctl+0x5e3/0x740 [ 199.789420][ T8988] ? __pfx_blkdev_ioctl+0x10/0x10 [ 199.789440][ T8988] ? __fget_files+0x2a/0x420 [ 199.789459][ T8988] ? bpf_lsm_file_ioctl+0x9/0x20 [ 199.789473][ T8988] ? __pfx_blkdev_ioctl+0x10/0x10 [ 199.789493][ T8988] __se_sys_ioctl+0xfc/0x170 [ 199.789508][ T8988] do_syscall_64+0x14d/0xf80 [ 199.789520][ T8988] ? trace_irq_disable+0x3b/0x150 [ 199.789537][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.789551][ T8988] ? clear_bhb_loop+0x40/0x90 [ 199.789567][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.789581][ T8988] RIP: 0033:0x7ff57579c799 [ 199.789601][ T8988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.789615][ T8988] RSP: 002b:00007ff576667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.789631][ T8988] RAX: ffffffffffffffda RBX: 00007ff575a16090 RCX: 00007ff57579c799 [ 199.789642][ T8988] RDX: 0000000000000009 RSI: 0000000000004c06 RDI: 0000000000000008 [ 199.789651][ T8988] RBP: 00007ff575832c99 R08: 0000000000000000 R09: 0000000000000000 [ 199.789661][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.789670][ T8988] R13: 00007ff575a16128 R14: 00007ff575a16090 R15: 00007fff27084458 [ 199.789691][ T8988] [ 200.333694][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 200.339281][ T803] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 200.360858][ T6147] Dev loop6: unable to read RDB block 8 [ 200.366699][ T6147] loop6: unable to read partition table [ 200.374202][ T6147] loop6: partition table beyond EOD, truncated [ 200.385218][ T803] usb 3-1: device descriptor read/8, error -71 [ 200.419321][ T5883] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 200.441927][ T8988] Dev loop6: unable to read RDB block 8 [ 200.447616][ T8988] loop6: unable to read partition table [ 200.453551][ T8988] loop6: partition table beyond EOD, truncated [ 200.459907][ T8988] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 200.569710][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 200.576155][ T5883] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 200.584393][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.594767][ T5883] usb 1-1: config 0 has no interface number 0 [ 200.601162][ T5883] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.611040][ T5883] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.624137][ T5883] usb 1-1: config 0 interface 196 has no altsetting 0 [ 200.632785][ T5883] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 200.641884][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.650167][ T5883] usb 1-1: Product: syz [ 200.654321][ T5883] usb 1-1: Manufacturer: syz [ 200.658888][ T5883] usb 1-1: SerialNumber: syz [ 200.664705][ T5883] usb 1-1: config 0 descriptor?? [ 200.689249][ T803] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 200.710592][ T803] usb 3-1: device descriptor read/8, error -71 [ 200.819408][ T803] usb usb3-port1: unable to enumerate USB device [ 200.879790][ T5883] ipheth 1-1:0.196: Unable to find endpoints [ 200.888873][ T5883] usb 1-1: USB disconnect, device number 68