last executing test programs: 5m16.78633797s ago: executing program 1 (id=1080): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x624180, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000046}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x4837b4b407cb1b4c, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "304d13720ec9369a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="47c088234a8214d4a4efcd2c662dc038"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000300)={0x7, 0x7c, 0x1ff, 0x7, 0x101}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x1, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000004c0)={0x400000000000000, r3, r4, 0x95959595}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000600)=0x27) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x1404, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, r6, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r7 = msgget$private(0x0, 0x462) msgrcv(r7, &(0x7f0000000b40)={0x0, ""/63}, 0x47, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xe0, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x22}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff8000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x68d}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x86}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) r8 = accept4(r0, &(0x7f0000000d80)=@nfc_llcp, &(0x7f0000000e00)=0x80, 0x80800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r8) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f0000000f80)={&(0x7f0000000e40), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x4c, r10, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffc, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x890) sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, r10, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c4) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001140), r8) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r11, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r8, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x158, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_IE={0xd7, 0x2a, [@fast_bss_trans={0x37, 0xd1, {0xb, 0x6, "826c0a98ed375c3763bc30fe9209dc7d", "4af656fa803b91e79e6bdaf534481f8a979823d902ce778bab987fee169a1bd2", "77959faf594afe69213b0924640a5ec3b49ee5e408940a3d02637a73e21d91f3", [{0x1, 0x24, "1217748e53ba0754a97a82238c703b225f9cc1c09d0db067f8430ada482baa6d6109397c"}, {0x1, 0x17, "f2687f4f6f54336e38e7dee747148db0b15685ac35b3a6"}, {0x3, 0xe, "8bde4909a65a5bcf628fde65259e"}, {0x3, 0xa, "7baf7f2cdf8ad0000479"}, {0x4, 0x18, "46b6ead8ab25b9113327e9607b79dc12ddbbc56f09ed75fc"}, {0x4, 0x8, "1d1142cbd6d808bb"}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xf}, @NL80211_ATTR_IE={0x33, 0x2a, [@mesh_id={0x72, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x4, @device_b, 0x8, @value, 0xfffffff6, 0xda, @device_a, 0x2}}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, 0x8}}, @mesh_chsw={0x76, 0x6, {0x1, 0x1, 0x18, 0x8001}}, @ibss={0x6, 0x2, 0x9}, @ssid={0x0, 0xc, @random="b7d1332f8999e8fa6fcc5648"}]}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0d0}, 0x20000084) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, r10, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x3}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x20000005) 5m15.860715711s ago: executing program 1 (id=1083): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x3b1}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x9c}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="8bc8b1ff83b91856506ecad5e9cef3108629d51f1804b86545a64106186e3b3c47", @ANYRESHEX=0x0, @ANYRES64], 0x0) 5m12.776907791s ago: executing program 1 (id=1093): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x120, 0x3, 0x1, 0x70bd27, 0x25dfdbff, "", [@typed={0xfe, 0x0, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x127}]}]}, 0x120}], 0x1}, 0x0) socket(0x21, 0x3, 0xfffffff5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc537, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x40, {0x9, 0x21, 0x3, 0x80, 0x1, {0x22, 0xc7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x9, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0x7, 0x7f}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x3, 0xc4, 0x7, 0x20, 0x8}, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x93, 0xfb, 0x5, 0xffff, 0x6}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x16, &(0x7f0000000300)=@string={0x16, 0x3, "82ec35d8115978aa384bb5d09dcdcba8f66385b9"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c12}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x240a}}]}) 5m11.48934462s ago: executing program 1 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0xc4, 0x24, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x9}, {0x6, 0x2}, {0x6, 0xd}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000004}, 0x9b4d6469db4f3c33) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x100000, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5m11.448753794s ago: executing program 1 (id=1101): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 5m8.448661208s ago: executing program 1 (id=1114): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="7c0100001900010025bd700001000000000000000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10200, 0x80) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000880)={0x4bc, 0x1, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0xffff}, 0x5, 0x14, 0x5, 0x3, 0x0, 'syz0\x00', "828a1248b5684a7860adeb0888b3dd7bbcbbb20436d7f143a477a8472b265a1a", "4a1a78d8c69e9ed2447117085f4f093603ddf1cac72da908e071e510eb6a2888", [{0xac, 0x4, {0x2, 0xd}}, {0x8, 0xfffc, {0x1, 0x5}}, {0xff, 0x7, {0x1, 0x2}}, {0xfff8, 0x5, {0x1, 0x1}}, {0x7fff, 0x40, {0x3, 0x7ff}}, {0x0, 0x9, {0x1, 0x1}}, {0x1000, 0x4, {0x0, 0x8}}, {0x2, 0x2, {0x1, 0x6}}, {0x7, 0xd3a4, {0x0, 0x4}}, {0x800, 0x0, {0x3, 0x614f}}, {0x1ff, 0xfa8c, {0x1, 0x5}}, {0x9, 0xffff, {0x3, 0x2}}, {0x40, 0x36b, {0x2, 0x7ff}}, {0x2, 0x1, {0x0, 0xa}}, {0x6f35, 0x0, {0x1}}, {0x9, 0x5b9a, {0x1, 0xe}}, {0xf3, 0xe, {0x0, 0x5}}, {0x1000, 0x3b6, {0x3, 0x8000}}, {0xfff, 0x5, {0x2, 0x4}}, {0x3, 0xfff9, {0x3, 0x9}}, {0x5, 0x80, {0x1}}, {0x800, 0x6, {0x2, 0x9}}, {0x0, 0x1, {0x3, 0x5c}}, {0x200, 0x3, {0x3, 0x1000}}, {0x5, 0x26, {0x1, 0x4}}, {0x1, 0x3, {0x3}}, {0x9, 0x2bf, {0x3, 0x7fff}}, {0x67, 0x4, {0x2, 0xffffffff}}, {0xffff, 0x2, {0x2, 0x6}}, {0xb715, 0xb15, {0x0, 0x7}}, {0x3, 0x7f, {0x1, 0x6}}, {0x8, 0xfff8, {0x1, 0xb8ad}}, {0x2, 0x4, {0x1, 0x9}}, {0x5, 0x9, {0x1, 0xffff}}, {0x1, 0x4, {0x0, 0x1}}, {0x3, 0x6, {0x2, 0x9}}, {0xbd, 0xc1, {0x1, 0x1800}}, {0x5b, 0x4, {0x1, 0x3ff}}, {0x7fff, 0x3, {0x3, 0x200}}, {0x81, 0x6, {0x1, 0x24}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x28, 0x3, 0x2, 0xfffa, 0x11, 'syz0\x00', "a95b5ba0d3f0616a4cdf1933adbccb67e152f311c8e3e58b4ff0e87e74a90d79", "e6d150dbe3ddd924c5108d79c85313fe8eeb8539621268b5e94ab17c1bbd8b3f", [{0x69, 0xcddb, {0x0, 0x8}}, {0x1, 0x1, {0x0, 0x2}}, {0x6, 0xfffa, {0x0, 0x1000}}, {0x1, 0x3, {0x1, 0x3}}, {0x9, 0x7, {0x3, 0x6}}, {0x4, 0x800, {0x2, 0x15000}}, {0x0, 0xfffb, {0x1, 0x3}}, {0x6, 0x37, {0x0, 0x100}}, {0x40, 0x3e6d, {0x3, 0x101}}, {0x9, 0x0, {0x0, 0x7}}, {0x9, 0x7e8, {0x2, 0xc4600000}}, {0xd, 0x3, {0x2, 0x80000000}}, {0x157, 0x2, {0x2, 0xa}}, {0x1, 0x5, {0x2, 0x3217}}, {0x40, 0x0, {0x1}}, {0xdff, 0x7940, {0x0, 0x3}}, {0x81, 0x2, {0x2, 0x10001}}, {0x3, 0x3, {0x0, 0x8}}, {0x2, 0x1, {0x0, 0x3}}, {0xf6c, 0x6, {0x2, 0x1}}, {0xffff, 0x6, {0x2, 0xa}}, {0x7, 0x1, {0x3, 0x6}}, {0x9, 0x7, {0x1, 0xc}}, {0x3, 0xd8a, {0x3, 0x8}}, {0x6, 0x1, {0x1, 0x9}}, {0xa6d, 0x3}, {0x4, 0x0, {0x3, 0x8e}}, {0x5, 0x4, {0x2, 0x10001}}, {0x3, 0x3, {0x1, 0x100}}, {0xa, 0x59fd, {0x3, 0x5}}, {0x4, 0x1, {0x1, 0x3}}, {0x9, 0xfff, {0x1, 0xacf7}}, {0x3, 0x4, {0x5863a52508453645, 0x5}}, {0x5, 0x3, {0x1}}, {0xf001, 0x8, {0x2, 0x3}}, {0x4, 0x6, {0x0, 0x8000}}, {0x0, 0x30c, {0x0, 0x4fd}}, {0x3, 0xff, {0x2, 0x8}}, {0x800, 0x12, {0x2, 0x3448}}, {0x180, 0x6, {0x1}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a40)={{0x108, 0xf, 0x1, 0x1fc, 0x5d, 0x10, 0x3b0, 0x9}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x620) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe20, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffff01}, 0x1c) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000380)=ANY=[], 0x4000) close(r4) gettid() 5m8.178886741s ago: executing program 32 (id=1114): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="7c0100001900010025bd700001000000000000000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000020000000000000100010000000000c4000500000000000000000000000000000000000000000033000000020000006401010000000000000000000000000000000000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe800000000000000000000000000000000000000000000000000000ffffffff000000007f000001000000000000000000000000000000006c00000000000000200100000000000000000000000000010000000000000000000000000000000000000000e78e2bf794df3b0df2653a11655b6d7f533a250c3ee5747c329683838b493127d171b6eee27639ef74b92a8b563a8e3cfa1581ff3cf29025164568100d095bcb4714b9f1a08cdf18a16eff771007adc050aeaf7fe8c55d1249de1af8f171834a3b6ff9b9616bf7"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10200, 0x80) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000880)={0x4bc, 0x1, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0xffff}, 0x5, 0x14, 0x5, 0x3, 0x0, 'syz0\x00', "828a1248b5684a7860adeb0888b3dd7bbcbbb20436d7f143a477a8472b265a1a", "4a1a78d8c69e9ed2447117085f4f093603ddf1cac72da908e071e510eb6a2888", [{0xac, 0x4, {0x2, 0xd}}, {0x8, 0xfffc, {0x1, 0x5}}, {0xff, 0x7, {0x1, 0x2}}, {0xfff8, 0x5, {0x1, 0x1}}, {0x7fff, 0x40, {0x3, 0x7ff}}, {0x0, 0x9, {0x1, 0x1}}, {0x1000, 0x4, {0x0, 0x8}}, {0x2, 0x2, {0x1, 0x6}}, {0x7, 0xd3a4, {0x0, 0x4}}, {0x800, 0x0, {0x3, 0x614f}}, {0x1ff, 0xfa8c, {0x1, 0x5}}, {0x9, 0xffff, {0x3, 0x2}}, {0x40, 0x36b, {0x2, 0x7ff}}, {0x2, 0x1, {0x0, 0xa}}, {0x6f35, 0x0, {0x1}}, {0x9, 0x5b9a, {0x1, 0xe}}, {0xf3, 0xe, {0x0, 0x5}}, {0x1000, 0x3b6, {0x3, 0x8000}}, {0xfff, 0x5, {0x2, 0x4}}, {0x3, 0xfff9, {0x3, 0x9}}, {0x5, 0x80, {0x1}}, {0x800, 0x6, {0x2, 0x9}}, {0x0, 0x1, {0x3, 0x5c}}, {0x200, 0x3, {0x3, 0x1000}}, {0x5, 0x26, {0x1, 0x4}}, {0x1, 0x3, {0x3}}, {0x9, 0x2bf, {0x3, 0x7fff}}, {0x67, 0x4, {0x2, 0xffffffff}}, {0xffff, 0x2, {0x2, 0x6}}, {0xb715, 0xb15, {0x0, 0x7}}, {0x3, 0x7f, {0x1, 0x6}}, {0x8, 0xfff8, {0x1, 0xb8ad}}, {0x2, 0x4, {0x1, 0x9}}, {0x5, 0x9, {0x1, 0xffff}}, {0x1, 0x4, {0x0, 0x1}}, {0x3, 0x6, {0x2, 0x9}}, {0xbd, 0xc1, {0x1, 0x1800}}, {0x5b, 0x4, {0x1, 0x3ff}}, {0x7fff, 0x3, {0x3, 0x200}}, {0x81, 0x6, {0x1, 0x24}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x28, 0x3, 0x2, 0xfffa, 0x11, 'syz0\x00', "a95b5ba0d3f0616a4cdf1933adbccb67e152f311c8e3e58b4ff0e87e74a90d79", "e6d150dbe3ddd924c5108d79c85313fe8eeb8539621268b5e94ab17c1bbd8b3f", [{0x69, 0xcddb, {0x0, 0x8}}, {0x1, 0x1, {0x0, 0x2}}, {0x6, 0xfffa, {0x0, 0x1000}}, {0x1, 0x3, {0x1, 0x3}}, {0x9, 0x7, {0x3, 0x6}}, {0x4, 0x800, {0x2, 0x15000}}, {0x0, 0xfffb, {0x1, 0x3}}, {0x6, 0x37, {0x0, 0x100}}, {0x40, 0x3e6d, {0x3, 0x101}}, {0x9, 0x0, {0x0, 0x7}}, {0x9, 0x7e8, {0x2, 0xc4600000}}, {0xd, 0x3, {0x2, 0x80000000}}, {0x157, 0x2, {0x2, 0xa}}, {0x1, 0x5, {0x2, 0x3217}}, {0x40, 0x0, {0x1}}, {0xdff, 0x7940, {0x0, 0x3}}, {0x81, 0x2, {0x2, 0x10001}}, {0x3, 0x3, {0x0, 0x8}}, {0x2, 0x1, {0x0, 0x3}}, {0xf6c, 0x6, {0x2, 0x1}}, {0xffff, 0x6, {0x2, 0xa}}, {0x7, 0x1, {0x3, 0x6}}, {0x9, 0x7, {0x1, 0xc}}, {0x3, 0xd8a, {0x3, 0x8}}, {0x6, 0x1, {0x1, 0x9}}, {0xa6d, 0x3}, {0x4, 0x0, {0x3, 0x8e}}, {0x5, 0x4, {0x2, 0x10001}}, {0x3, 0x3, {0x1, 0x100}}, {0xa, 0x59fd, {0x3, 0x5}}, {0x4, 0x1, {0x1, 0x3}}, {0x9, 0xfff, {0x1, 0xacf7}}, {0x3, 0x4, {0x5863a52508453645, 0x5}}, {0x5, 0x3, {0x1}}, {0xf001, 0x8, {0x2, 0x3}}, {0x4, 0x6, {0x0, 0x8000}}, {0x0, 0x30c, {0x0, 0x4fd}}, {0x3, 0xff, {0x2, 0x8}}, {0x800, 0x12, {0x2, 0x3448}}, {0x180, 0x6, {0x1}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a40)={{0x108, 0xf, 0x1, 0x1fc, 0x5d, 0x10, 0x3b0, 0x9}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x620) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe20, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffff01}, 0x1c) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000380)=ANY=[], 0x4000) close(r4) gettid() 5.27546991s ago: executing program 0 (id=2764): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x1010080, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}], [], 0x2c}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) 5.156882126s ago: executing program 0 (id=2765): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x7, 0x9, 0x2}) renameat2(r0, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000002c0)='./file7\x00', 0x2) 5.028302287s ago: executing program 0 (id=2767): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="001765"], 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r0, 0x0) r2 = socket(0xa, 0x3, 0x2) sendmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfb, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000580)=[{0x28, 0x29, 0x2, "bda12be6155a8741e8fdd7c150982be6b0"}], 0x28}}], 0x1, 0x20004080) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) read$rfkill(r3, &(0x7f0000000080), 0xffffff1c) 3.292755245s ago: executing program 3 (id=2780): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = getpgrp(0xffffffffffffffff) r1 = gettid() kcmp(r1, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) r2 = syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/net\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc"], 0x420100) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="00000500000000e2"], 0x7) r3 = eventfd(0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000000)={0x1000001e, &(0x7f0000000200)}) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000001d00)={0x0, 0x9, 0x0, "1e84d371de9f846a771156105f6fc587877b756b9180039d6c4e17d9fb7faebc"}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x10, 0x10, 0x9, 0xfffffffd, {{0x5, 0x4, 0x1, 0x27, 0x14, 0x66, 0x0, 0x8c, 0x29, 0x0, @private=0xa010100, @multicast2}}}}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r8, 0x0, &(0x7f0000e0f000/0x1000)=nil, 0x1000, 0x1004000}) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP(r9, 0x3b86, &(0x7f0000000900)={0x18, r8, 0xa33c, 0x4000000001004000}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000001c0)={0x28, 0x1, r8, r10, 0x0, 0x5, 0x112000}) r11 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) mlockall(0x4) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000080)={0x89, @multicast1, 0x4e21, 0x1, 'fo\x00', 0x28, 0x81, 0x53}, 0x2c) syz_usb_connect(0x1, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="120901020959fce940039e1bafc9010d030109520c00000401000109040768008fe495fa0904f39e00020a0070"], &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000340)={{{@in=@initdev, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) 2.724814392s ago: executing program 4 (id=2784): syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x40, 0x11, 0x59, {0x59, 0x3, "9536f61391ca016aa45bd171ccc991e3db46632701ff7372654779f595719c285b22993a056d373eb2f2d29fe3ff216ac92232e6dd0f5d3ec36a313d9c705f25e134f682feab2e0bc510f46958c8359cf92f79f1289ca6"}}, 0x0}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a3000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc000700801955aaffff0000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 2.158384276s ago: executing program 4 (id=2785): syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000020ba0d00104000010203010902750003e6061002080b0100010c200009040000000101200009240180ff071500040c2403020503050400ff"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf18142054f"}) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 1.984687896s ago: executing program 0 (id=2786): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140)=0x6, 0x1) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)=@mmap={0x4, 0x1, 0x4, 0x40, 0x200, {}, {0x5, 0x0, 0x7, 0x3, 0x1, 0x8, "ed4b61c3"}, 0x2, 0x1, {}, 0x25c}) (async) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (async, rerun: 64) r3 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x6b) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) (async) r5 = socket(0x40000000015, 0x4, 0xfffffffd) getsockopt(r5, 0x114, 0x271b, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f00000029c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r8, 0x14}, 0x80, 0x0}}], 0x1, 0x0) (async) syz_open_dev$sg(0xfffffffffffffffc, 0x2e, 0x281) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x52b2d2d) (async) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, r9) syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000300000020392a8c3f4000010203010902a500030104007f080b0101010a20020904000a00010120000924010700063500b207240904cfa80a0924070503000103000c24030104038305001500221024020101040907936f0000000307010904010000010220000904010101010220001024010505000400000005050000004409050109000206998008250101181c0000090402000001022000090402010101022000090582090002010000002501040f43ce03"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 1.72535328s ago: executing program 0 (id=2788): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "64a743cf40aea777e54cd3600acf02da7aa063f29b12a36e5d75ba9813a8607a", "65c7dee5c208e50f00f018e4d8592c005fca4a41baffdfeb5f7a2ce30a140bfa", "531ebcac5778abc034b1bc97390d7dd916344ad27ad961c22352b98cb9d54181", "dd331eece02e937a5c6fa71a387ac8f2603f2120efbb858c5a67c05b67147951", "09734341a556917bda79788a3d46c25457627659e65de6689b8f5493f0057a0f", "f5db54d2a08a16703cb5b62d", 0x3ff, 0x0, 0x5, 0x4, 0x7}}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f00000016c0)) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "64a743cf40aea777e54cd3600acf02da7aa063f29b12a36e5d75ba9813a8607a", "65c7dee5c208e50f00f018e4d8592c005fca4a41baffdfeb5f7a2ce30a140bfa", "531ebcac5778abc034b1bc97390d7dd916344ad27ad961c22352b98cb9d54181", "dd331eece02e937a5c6fa71a387ac8f2603f2120efbb858c5a67c05b67147951", "09734341a556917bda79788a3d46c25457627659e65de6689b8f5493f0057a0f", "f5db54d2a08a16703cb5b62d", 0x3ff, 0x0, 0x5, 0x4, 0x7}}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f00000016c0)) (async) 1.638801221s ago: executing program 0 (id=2790): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'batadv0\x00', 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_cmd={0x27, 0xc9, 0x6, 0xe2, 0xf4, 0xa, 0x8, 0xe4, 0x3, 0x0, 0x9, 0xa, 0x5f30, 0x1, 0xff, 0x7fffffff, [0x0, 0x9]}}) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r4 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r5 = dup(r4) write$binfmt_elf64(r5, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x78, 0xa0, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0xd, 0x6b4, 0x400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x3, 0x3}]}, 0x78) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x300, 0x300, 0x47425247}}) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = socket$inet(0x2, 0x3, 0x9) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) write$sndseq(r8, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1=0xe000006a}, 0x10) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000280)={0x0, {0xff, 0x5}}) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000800000000001001000102000000"], 0x10}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0xaa) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000140)=0x8) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000015006b03000000d86e6c1d0002847ea622fb5645fe004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000002c0)={{r10, &(0x7f0000000000)='\x00', 0x90140, &(0x7f0000000080)={@align=0xe, {0x7fff, 0x3, 0x6, 0x1}}, 0x96, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}, {[0x7f, 0x0, 0x5, 0x2]}, 0x7ff, 0xaf, &(0x7f0000000340)=""/175}) 1.627021593s ago: executing program 2 (id=2791): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x3, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.532809232s ago: executing program 4 (id=2792): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth0_to_bond\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x38, 0x2, [0x1, 0xc0]}}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x5291e25947bfd668) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40044103, &(0x7f0000000080)) syz_usb_connect(0x3, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="1201030109024f0001040300000904740305ffffff0609050c08ff0306c605080b41fbb8f46a690905081040040303c0090580014000038c0309050d03000406728609050d000800000106080b6d6f9537917da55f2f8bbf9047a8c784337ecaec1b231d59ace1020db9b7c5f117ed2ce6ad5049a0c98e13643493771942f38ffa29f90eadc58271a15516869e4c354907d24180f138a74b9f9a896186e3c6fb6b852de3d09839b1f3d5bef4c7a75f4545000000000000000000000000000050bdec2de6d654bf176a61b0ba36b884951a7a72a7f96d4add859a9fd89cc230dbfbc867ddb8e5018f69f88001c9d0afb58702"], 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x80009, &(0x7f0000000440)) r3 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000010007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) bind$vsock_stream(r3, &(0x7f00000004c0)={0x28, 0x0, 0x1389, @host}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x900000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4e0000}]}, 0x68}, 0x1, 0x0, 0x0, 0xc804}, 0x8080) 1.465689003s ago: executing program 2 (id=2793): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socket(0x14, 0x2, 0x4) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000140)={{0xffff1000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x10000, 0xeeef0000, 0x1b, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0x0, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0xeeef0000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x5, 0x0, 0x8}, {0x100000, 0x405}, {0x80a0000, 0xff81}, 0x60000010, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x800f900, 0x0, [0x6, 0x2, 0x3, 0x1]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000002fc0)='^', 0x1, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r10, 0xf, &(0x7f0000000100)={0x1, r0}) sendmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 1.371909803s ago: executing program 2 (id=2794): syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x40, 0x11, 0x59, {0x59, 0x3, "9536f61391ca016aa45bd171ccc991e3db46632701ff7372654779f595719c285b22993a056d373eb2f2d29fe3ff216ac92232e6dd0f5d3ec36a313d9c705f25e134f682feab2e0bc510f46958c8359cf92f79f1289ca6"}}, 0x0}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a3000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc000700801956abffff0000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 921.76127ms ago: executing program 4 (id=2795): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close(r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) 855.485465ms ago: executing program 4 (id=2796): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001b00)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000000)="846bb66f", 0x18, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd0600e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730c5af785f0b6acb07f73e6b493e177d0f41ea9f444c9b1c759e26c0a0fcb0fc7811b38c9f091a22dfbb6cea5b13d08c3b788ee1eeb9d5262bd5797e23f4868a3083f4c7bfa5b81c2e33", 0x95}], 0x2, 0x0, 0x0, 0x20040890}], 0x1, 0x20000090) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="31091a000000cf6b37195a9527d8f9654b3076aa322fe3dfc32b897c635e26c84e9a2829092c98df8bffd93055a884ee52b103539ca327b68da738"], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040803dfe4000000010902b901010000003f0904"], 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc0049364, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1021) socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6d00) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@remote, 0x4e24, 0x4, 0x4e20, 0x7, 0xa, 0x0, 0x20, 0x29, 0x0, r8}, {0x6cf, 0x4, 0x1, 0x5, 0x1, 0x1, 0xfae, 0xf272}, {0x4, 0x4, 0xc5e8, 0x4}, 0x80000001, 0x6e6bbf, 0x1, 0x1, 0x2, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x33}, 0xa, @in=@local, 0x3506, 0x1, 0x0, 0x0, 0x5, 0x0, 0x100}}, 0xe8) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) 802.22378ms ago: executing program 2 (id=2797): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x3a, 0xd2, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 674.363544ms ago: executing program 2 (id=2798): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="318321bd70009fff0000190000000c0001800800030007000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000440)={0x75b7, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) bind$unix(r6, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r6, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 581.807742ms ago: executing program 2 (id=2799): sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000100020801040000000000000000000400000500030084000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0d4) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000040)=0x700) syz_usb_connect(0x1, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100010000000000000049114401820301090212000df2f700050908280400fdc3570c"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 257.897467ms ago: executing program 3 (id=2800): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0xcda0e060a485121d, 0x0, 0xfffffef2) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7f, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 229.71478ms ago: executing program 3 (id=2801): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x3, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 157.355755ms ago: executing program 4 (id=2802): r0 = syz_open_dev$media(&(0x7f0000000280), 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x204002) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r2, 0x0, 0x0}) syz_usb_connect(0x3, 0x5e, &(0x7f0000002fc0)={{0x12, 0x1, 0x200, 0xd2, 0xb0, 0x33, 0x20, 0x4e2, 0x1414, 0x17ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x7, 0x90, 0x8, "", [{{0x9, 0x4, 0xd8, 0x67, 0x0, 0x2, 0x74, 0xd1, 0x40, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2b8, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x82f6, 0x23}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x36c}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x716f, 0xd8c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x29}}]}}]}}]}}, 0x0) 148.953759ms ago: executing program 3 (id=2803): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe654, 0x2, 0x4, 0x48, 0xff}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async) sendmsg$inet6(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)="7f39fb", 0x3}], 0x1}, 0x4040851) (async) write$P9_RGETATTR(r2, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0x46, {0x40, 0x4, 0x6}, 0x101, 0x0, 0x0, 0xe, 0x8, 0x1, 0x100000000, 0x1, 0xffffffffffffffff, 0x10001, 0x400, 0x200000, 0x0, 0xffff, 0x4, 0x0, 0x37b, 0x3}}, 0xa0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000003040)=ANY=[], 0x3d8) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) (async) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) shutdown(r3, 0x1) 96.908022ms ago: executing program 3 (id=2804): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140), 0x4) setrlimit(0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4212, r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 0s ago: executing program 3 (id=2805): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x40000014}, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x1e9100, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x100000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) (async) listen(r6, 0x90004) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r7, &(0x7f00000000c0)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) (async) ppoll(&(0x7f00000000c0)=[{r6, 0x60}], 0x1, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 532.672447][T13229] dt2811-pgh [ 532.672452][T13229] dt2811-pgl [ 532.672456][T13229] comedi: valid board names for dt2801 driver are: [ 532.672461][T13229] dt2801 [ 532.672465][T13229] comedi: valid board names for das6402 driver are: [ 532.672471][T13229] das6402-12 [ 532.672475][T13229] das6402-16 [ 532.672481][T13229] comedi: valid board names for das1800 driver are: [ 532.672488][T13229] das-1701st [ 532.672492][T13229] das-1701st-da [ 532.672496][T13229] das-1702st [ 532.672501][T13229] das-1702st-da [ 532.672505][T13229] das-1702hr [ 532.672509][T13229] das-1702hr-da [ 532.672513][T13229] das-1701ao [ 532.672517][T13229] das-1702ao [ 532.672521][T13229] das-1801st [ 532.672525][T13229] das-1801st-da [ 532.672529][T13229] das-1802st [ 532.672534][T13229] das-1802st-da [ 532.672538][T13229] das-1802hr [ 532.672542][T13229] das-1802hr-da [ 532.672546][T13229] das-1801hc [ 532.672550][T13229] das-1802hc [ 532.672554][T13229] das-1801ao [ 532.672558][T13229] das-1802ao [ 532.672562][T13229] comedi: valid board names for das800 driver are: [ 532.672567][T13229] das-800 [ 532.672571][T13229] cio-das800 [ 532.672575][T13229] das-801 [ 532.672579][T13229] cio-das801 [ 532.672583][T13229] das-802 [ 532.672587][T13229] cio-das802 [ 532.672594][T13229] cio-das802/16 [ 532.672601][T13229] comedi: valid board names for isa-das08 driver are: [ 532.672610][T13229] isa-das08 [ 532.672618][T13229] das08-pgm [ 532.672625][T13229] das08-pgh [ 532.672629][T13229] das08-pgl [ 532.672633][T13229] das08-aoh [ 532.672637][T13229] das08-aol [ 532.672641][T13229] das08-aom [ 532.672645][T13229] das08/jr-ao [ 532.672649][T13229] das08jr-16-ao [ 532.672653][T13229] pc104-das08 [ 532.672657][T13229] das08jr/16 [ 532.672662][T13229] comedi: valid board names for das16m1 driver are: [ 532.672667][T13229] das16m1 [ 532.672671][T13229] comedi: valid board names for dac02 driver are: [ 532.672676][T13229] dac02 [ 532.672680][T13229] comedi: valid board names for rti802 driver are: [ 532.672685][T13229] rti802 [ 532.672690][T13229] comedi: valid board names for rti800 driver are: [ 532.672695][T13229] rti800 [ 532.672699][T13229] rti815 [ 532.672703][T13229] comedi: valid board names for pcm3724 driver are: [ 532.672708][T13229] pcm3724 [ 532.672712][T13229] comedi: valid board names for pcl818 driver are: [ 532.672717][T13229] pcl818l [ 532.672722][T13229] pcl818h [ 532.672726][T13229] pcl818hd [ 532.672730][T13229] pcl818hg [ 532.672734][T13229] pcl818 [ 532.672738][T13229] pcl718 [ 532.672742][T13229] pcm3718 [ 532.672746][T13229] comedi: valid board names for pcl816 driver are: [ 532.672751][T13229] pcl816 [ 532.672755][T13229] pcl814b [ 532.672759][T13229] comedi: valid board names for pcl812 driver are: [ 532.672764][T13229] pcl812 [ 532.672768][T13229] pcl812pg [ 532.672772][T13229] acl8112pg [ 532.672776][T13229] acl8112dg [ 532.672780][T13229] acl8112hg [ 532.672784][T13229] a821pgl [ 532.672788][T13229] a821pglnda [ 532.672792][T13229] a821pgh [ 532.672796][T13229] a822pgl [ 532.672800][T13229] a822pgh [ 532.672804][T13229] a823pgl [ 532.672808][T13229] a823pgh [ 532.672812][T13229] pcl813 [ 532.672816][T13229] pcl813b [ 532.672820][T13229] acl8113 [ 532.672824][T13229] iso813 [ 532.672828][T13229] acl8216 [ 532.672832][T13229] a826pg [ 532.672836][T13229] comedi: valid board names for pcl730 driver are: [ 532.672841][T13229] pcl730 [ 532.672845][T13229] iso730 [ 532.672849][T13229] acl7130 [ 532.672853][T13229] pcm3730 [ 532.672857][T13229] pcl725 [ 532.672861][T13229] p8r8dio [ 532.672865][T13229] acl7225b [ 532.672868][T13229] p16r16dio [ 532.672873][T13229] pcl733 [ 532.672877][T13229] pcl734 [ 532.672881][T13229] opmm-1616-xt [ 532.672885][T13229] pearl-mm-p [ 532.672889][T13229] ir104-pbf [ 532.672893][T13229] comedi: valid board names for pcl726 driver are: [ 532.672898][T13229] pcl726 [ 532.672902][T13229] pcl727 [ 532.672906][T13229] pcl728 [ 532.672910][T13229] acl6126 [ 532.672914][T13229] acl6128 [ 532.672918][T13229] comedi: valid board names for pcl724 driver are: [ 532.672923][T13229] pcl724 [ 532.672927][T13229] pcl722 [ 532.672931][T13229] pcl731 [ 532.672935][T13229] acl7122 [ 532.672939][T13229] acl7124 [ 532.672943][T13229] pet48dio [ 532.672947][T13229] pcmio48 [ 532.672951][T13229] onyx-mm-dio [ 532.672955][T13229] comedi: valid board names for pcl711 driver are: [ 532.672961][T13229] pcl711 [ 532.672964][T13229] pcl711b [ 532.672968][T13229] acl8112hg [ 532.672972][T13229] acl8112dg [ 532.672977][T13229] comedi: valid board names for amplc_pc263 driver are: [ 532.672982][T13229] pc263 [ 532.672986][T13229] comedi: valid board names for amplc_pc236 driver are: [ 532.672992][T13229] pc36at [ 532.672996][T13229] comedi: valid board names for amplc_dio200 driver are: [ 532.673001][T13229] pc212e [ 532.673005][T13229] pc214e [ 532.673009][T13229] pc215e [ 532.673013][T13229] pc218e [ 532.673017][T13229] pc272e [ 532.673021][T13229] comedi: valid board names for comedi_parport driver are: [ 532.673027][T13229] comedi_parport [ 532.673031][T13229] comedi: valid board names for comedi_test driver are: [ 532.673036][T13229] comedi_test [ 532.673040][T13229] comedi: valid board names for comedi_bond driver are: [ 532.673046][T13229] comedi_bond [ 532.694712][ T5686] usb 4-1: unable to get BOS descriptor or descriptor too short [ 532.695740][ T5686] usb 4-1: not running at top speed; connect to a high speed hub [ 532.698293][ T5686] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.698317][ T5686] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.705470][ T5686] usb 4-1: string descriptor 0 read error: -22 [ 532.705605][ T5686] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.705629][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.756753][ T5686] usb 4-1: 0:2 : does not exist [ 533.841367][T13241] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2325'. [ 533.945340][T13246] netlink: 'syz.4.2327': attribute type 10 has an invalid length. [ 533.945360][T13246] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2327'. [ 534.083366][T13252] loop9: detected capacity change from 0 to 7 [ 534.107617][ T3575] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 534.113303][T13252] Dev loop9: unable to read RDB block 7 [ 534.113409][T13252] loop9: unable to read partition table [ 534.113800][T13252] loop9: partition table beyond EOD, truncated [ 534.113879][T13252] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 534.174303][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 534.402064][ T5686] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 534.412630][ T5686] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 534.521864][ T5686] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 534.552488][ T5608] Bluetooth: hci2: command 0x2016 tx timeout [ 534.561375][ T5686] usb 4-1: USB disconnect, device number 118 [ 535.010218][T13276] batadv_slave_0: entered promiscuous mode [ 535.027642][ T37] audit: type=1800 audit(1778883263.759:35): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2331" name="bus" dev="tmpfs" ino=2846 res=0 errno=0 [ 535.027693][ T37] audit: type=1800 audit(1778883263.759:36): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2331" name="bus" dev="tmpfs" ino=2846 res=0 errno=0 [ 535.075418][T13274] batadv_slave_0: left promiscuous mode [ 535.334885][T13297] netlink: zone id is out of range [ 535.334928][T13297] netlink: del zone limit has 8 unknown bytes [ 535.714720][T13315] loop9: detected capacity change from 0 to 7 [ 535.715318][ T3620] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 535.715584][T13315] Dev loop9: unable to read RDB block 7 [ 535.715622][T13315] loop9: unable to read partition table [ 535.715811][T13315] loop9: partition table beyond EOD, truncated [ 535.715830][T13315] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 535.729165][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 536.542297][ T5686] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 536.701203][ T5686] usb 4-1: Using ep0 maxpacket: 16 [ 536.703326][ T5686] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 536.703359][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 536.705938][ T5686] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 536.705969][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.705991][ T5686] usb 4-1: Product: syz [ 536.706007][ T5686] usb 4-1: Manufacturer: syz [ 536.706023][ T5686] usb 4-1: SerialNumber: syz [ 536.714790][ T5686] usb 4-1: config 0 descriptor?? [ 536.733757][ T5686] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 536.733789][ T5686] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 537.332214][ T5686] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 537.332802][ T5686] em28xx 4-1:0.0: Config register raw data: 0x41 [ 537.537997][ T5686] usb 4-1: USB disconnect, device number 119 [ 537.583897][ T5686] em28xx 4-1:0.0: Disconnecting em28xx [ 537.589363][ T5686] em28xx 4-1:0.0: Freeing device [ 537.734581][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.735274][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.281757][T13339] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2345'. [ 538.281780][T13339] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2345'. [ 538.333606][T13343] netlink: 'syz.4.2347': attribute type 21 has an invalid length. [ 538.333699][T13343] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2347'. [ 538.333855][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'. [ 538.439883][T13348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.460158][T13348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.501302][T13351] loop9: detected capacity change from 0 to 7 [ 538.501956][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 538.527730][T13351] Dev loop9: unable to read RDB block 7 [ 538.527772][T13351] loop9: unable to read partition table [ 538.548774][T13351] loop9: partition table beyond EOD, truncated [ 538.548818][T13351] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 538.578628][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 539.171217][ T5789] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 539.172777][T13367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.173368][T13367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.324519][ T5789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.324584][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 539.324608][ T5789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 539.324633][ T5789] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 539.324646][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.328987][ T5789] usb 4-1: config 0 descriptor?? [ 539.531928][ T5789] ath6kl: Failed to submit usb control message: -71 [ 539.531974][ T5789] ath6kl: unable to send the bmi data to the device: -71 [ 539.531990][ T5789] ath6kl: Unable to send get target info: -71 [ 539.532938][ T5789] ath6kl: Failed to init ath6kl core: -71 [ 539.534653][ T5789] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 539.540438][ T5789] usb 4-1: USB disconnect, device number 120 [ 539.823689][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.824283][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.826368][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.826966][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.370114][T13384] loop9: detected capacity change from 0 to 7 [ 540.370811][ T3620] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 540.373244][T13384] Dev loop9: unable to read RDB block 7 [ 540.373286][T13384] loop9: unable to read partition table [ 540.373477][T13384] loop9: partition table beyond EOD, truncated [ 540.373510][T13384] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 540.388938][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 540.491173][ T5789] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 540.652780][ T5789] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 540.652809][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 540.652825][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 64 [ 540.652841][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 540.655607][ T5789] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 540.655636][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.655648][ T5789] usb 4-1: Product: syz [ 540.655660][ T5789] usb 4-1: Manufacturer: syz [ 540.655669][ T5789] usb 4-1: SerialNumber: syz [ 540.659221][ T5789] usb 4-1: config 0 descriptor?? [ 541.065999][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.066462][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.066898][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.068548][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.068958][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.069349][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.069741][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.070186][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.070587][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.072814][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.073501][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.074179][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.074990][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.075580][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.076342][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.076751][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.077148][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.077532][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.077928][ T5789] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 541.077964][ T5789] input input50: Timeout waiting for response from device. [ 541.087410][ T5789] usb 4-1: USB disconnect, device number 121 [ 541.843300][T13395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.844731][T13395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.845794][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'. [ 541.845824][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'. [ 542.103243][ T5615] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 542.351136][ T5789] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 542.475405][ T5615] Bluetooth: hci2: unexpected event for opcode 0x040d [ 542.481273][ T5789] usb 4-1: device descriptor read/64, error -71 [ 542.622048][T13406] loop9: detected capacity change from 0 to 7 [ 542.625810][ T184] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 542.626032][T13406] Dev loop9: unable to read RDB block 7 [ 542.626071][T13406] loop9: unable to read partition table [ 542.626244][T13406] loop9: partition table beyond EOD, truncated [ 542.630388][T13406] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 542.680310][ T5790] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 542.741471][ T5789] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 542.856149][T13414] tmpfs: Bad value for 'mpol' [ 542.881174][ T5789] usb 4-1: device descriptor read/64, error -71 [ 542.991561][ T5789] usb usb4-port1: attempt power cycle [ 543.206325][T13420] exFAT-fs (nbd4): unable to read boot sector [ 543.206340][T13420] exFAT-fs (nbd4): failed to read boot sector [ 543.206350][T13420] exFAT-fs (nbd4): failed to recognize exfat type [ 543.343077][ T5789] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 543.374421][ T5789] usb 4-1: device descriptor read/8, error -71 [ 543.414635][T13427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.415351][T13427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.419019][T13427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.419583][T13427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.621192][ T5789] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 543.642335][ T5789] usb 4-1: device descriptor read/8, error -71 [ 543.762876][ T5789] usb usb4-port1: unable to enumerate USB device [ 544.018813][T13432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2380'. [ 544.050526][T13435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.055625][T13435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.605356][T13439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.606110][T13439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.628938][T13439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.629670][T13439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.866409][T13443] loop9: detected capacity change from 0 to 7 [ 544.878406][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 544.878636][T13443] Dev loop9: unable to read RDB block 7 [ 544.878679][T13443] loop9: unable to read partition table [ 544.878881][T13443] loop9: partition table beyond EOD, truncated [ 544.878899][T13443] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 544.929989][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 545.210925][T13449] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 545.210954][T13449] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2388'. [ 545.438668][T13455] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2390'. [ 545.873406][T13478] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.038996][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2399'. [ 546.050295][T13478] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.094079][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 546.094102][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 546.213878][ T5686] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 546.225797][T13478] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.261533][T13494] : renamed from veth0_vlan (while UP) [ 546.383782][T13478] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.391446][ T5686] usb 4-1: Using ep0 maxpacket: 32 [ 546.406466][ T5686] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 546.406498][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 546.406523][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 546.406537][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 546.455299][ T5686] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 546.455327][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.455349][ T5686] usb 4-1: Product: syz [ 546.455364][ T5686] usb 4-1: Manufacturer: syz [ 546.455379][ T5686] usb 4-1: SerialNumber: syz [ 546.466055][ T5686] usb 4-1: config 0 descriptor?? [ 546.588644][ T4334] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.609433][ T4334] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.625178][ T4334] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.640236][ T4334] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.673064][T13496] loop9: detected capacity change from 0 to 7 [ 546.673666][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 546.673934][T13496] Dev loop9: unable to read RDB block 7 [ 546.673975][T13496] loop9: unable to read partition table [ 546.674163][T13496] loop9: partition table beyond EOD, truncated [ 546.674187][T13496] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 546.693191][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 546.734922][ T5006] usb 4-1: USB disconnect, device number 126 [ 547.140555][T13506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.140864][T13506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.232604][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.232641][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.232668][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.232695][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.232722][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.232757][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.232784][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.232810][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.232863][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.232890][ T5006] hid-generic 0006:0008:0001.0015: unknown main item tag 0x0 [ 547.328792][ T5006] hid-generic 0006:0008:0001.0015: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 547.399165][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2406'. [ 547.545869][T13522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.546428][T13522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.580190][T13520] fido_id[13520]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 548.467372][T13536] binder: BINDER_SET_CONTEXT_MGR already set [ 548.467390][T13536] binder: 13535:13536 ioctl 4018620d 200000004a80 returned -16 [ 548.487427][T13541] loop9: detected capacity change from 0 to 7 [ 548.492214][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 548.492466][T13541] Dev loop9: unable to read RDB block 7 [ 548.492506][T13541] loop9: unable to read partition table [ 548.492708][T13541] loop9: partition table beyond EOD, truncated [ 548.492725][T13541] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 548.519659][T13539] binder: 13535:13539 ioctl c0306201 0 returned -14 [ 548.543501][ T184] bridge_slave_1: left allmulticast mode [ 548.543531][ T184] bridge_slave_1: left promiscuous mode [ 548.543808][ T184] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.559792][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 548.652850][ T184] bridge_slave_0: left allmulticast mode [ 548.652881][ T184] bridge_slave_0: left promiscuous mode [ 548.653131][ T184] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.252246][ T184] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 549.433440][ T184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.511642][ T184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.554243][ T184] bond0 (unregistering): Released all slaves [ 549.829552][T13527] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.331184][ T5006] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 550.331936][T13527] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.489785][ T5006] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 550.489815][ T5006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.522741][ T5006] pwc: Logitech QuickCam Zoom USB webcam detected. [ 550.723415][ T5006] pwc: Failed to set LED on/off time (-71) [ 550.724830][ T5006] pwc: send_video_command error -71 [ 550.724845][ T5006] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 550.724960][ T5006] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 550.768977][ T5006] usb 4-1: USB disconnect, device number 127 [ 550.889055][T13527] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.365959][T13527] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.551194][ T184] hsr_slave_0: left promiscuous mode [ 551.594663][ T184] hsr_slave_1: left promiscuous mode [ 551.608294][ T184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.608321][ T184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.641810][ T184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.641832][ T184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.842309][ T184] veth1_macvtap: left promiscuous mode [ 551.842367][ T184] veth0_macvtap: left promiscuous mode [ 551.842523][ T184] veth1_vlan: left promiscuous mode [ 551.851672][ T184] veth0_vlan: left promiscuous mode [ 552.592362][ T184] team0 (unregistering): Port device team_slave_1 removed [ 552.631580][ T184] team0 (unregistering): Port device team_slave_0 removed [ 552.844496][T13569] loop9: detected capacity change from 0 to 7 [ 552.845228][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 552.845474][T13569] Dev loop9: unable to read RDB block 7 [ 552.845515][T13569] loop9: unable to read partition table [ 552.845713][T13569] loop9: partition table beyond EOD, truncated [ 552.845731][T13569] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 552.846393][T13568] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 553.060381][ T114] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.172465][ T1185] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.198794][ T1185] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.268406][ T114] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.353941][T13574] tmpfs: Unknown parameter 'usrqHÎÝfI˜fôdztuêãÙ'Á?' [ 553.931127][ T5686] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 554.009710][ T184] IPVS: stop unused estimator thread 0... [ 554.094289][ T5686] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.094353][ T5686] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.094394][ T5686] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 554.094422][ T5686] usb 4-1: config 1 interface 1 has no altsetting 0 [ 554.097483][ T5686] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.097512][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.097533][ T5686] usb 4-1: Product: syz [ 554.097550][ T5686] usb 4-1: Manufacturer: syz [ 554.097565][ T5686] usb 4-1: SerialNumber: syz [ 554.109239][ T5686] cdc_ncm 4-1:1.0: skipping garbage [ 554.109257][ T5686] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 554.109295][ T5686] cdc_ncm 4-1:1.0: bind() failure [ 554.352399][T13584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.354237][T13584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.376796][T13584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.380133][T13584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.433633][ T5686] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 554.512842][ T5686] usb 4-1: USB disconnect, device number 2 [ 554.604416][ T5780] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 554.733634][T13594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.734095][T13594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.080044][T13596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.164127][T13605] loop9: detected capacity change from 0 to 7 [ 555.164772][ T1185] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 555.165017][T13605] Dev loop9: unable to read RDB block 7 [ 555.165057][T13605] loop9: unable to read partition table [ 555.165255][T13605] loop9: partition table beyond EOD, truncated [ 555.165287][T13605] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 555.225802][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 555.377277][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.378834][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.544752][T13596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.915362][T13596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.961276][ T1596] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 556.063321][T13617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.064061][T13617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.111421][ T1596] usb 4-1: Using ep0 maxpacket: 32 [ 556.113928][ T1596] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 556.113955][ T1596] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 556.113980][ T1596] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.116044][ T1596] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 556.116072][ T1596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.116106][ T1596] usb 4-1: Product: syz [ 556.116115][ T1596] usb 4-1: Manufacturer: syz [ 556.116124][ T1596] usb 4-1: SerialNumber: syz [ 556.119589][ T1596] usb 4-1: config 0 descriptor?? [ 556.460084][T13596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.540323][ T1596] gs_usb 4-1:0.0: Configuring for 55 interfaces [ 556.718838][ T1185] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.748276][ T1596] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 556.757626][ T1596] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 556.765849][ T1596] usb 4-1: USB disconnect, device number 3 [ 556.866002][ T114] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.918576][ T4334] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.933451][ T4334] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.447416][T13639] loop9: detected capacity change from 0 to 7 [ 557.448044][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 557.448256][T13639] Dev loop9: unable to read RDB block 7 [ 557.448293][T13639] loop9: unable to read partition table [ 557.448462][T13639] loop9: partition table beyond EOD, truncated [ 557.448480][T13639] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 557.450146][T13638] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 558.004753][T13641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.005358][T13641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.144714][ T5715] Bluetooth: Patch file not found ar3k/AthrBT_0xcb770ae3.dfu [ 558.144725][ T5715] Bluetooth: Loading patch file failed [ 558.144748][ T5715] ath3k 3-1:0.0: probe with driver ath3k failed with error -110 [ 558.155015][ T5715] usb 3-1: USB disconnect, device number 106 [ 558.164474][ T37] audit: type=1800 audit(1779407574.852:37): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2446" name="/" dev="fuse" ino=9 res=0 errno=0 [ 558.316989][T13644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2450'. [ 558.317097][T13644] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2450'. [ 558.482273][ T5715] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 558.504064][T13648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 558.654127][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 558.655831][ T5715] usb 3-1: config 7 has an invalid interface number: 228 but max is 1 [ 558.655858][ T5715] usb 3-1: config 7 has an invalid interface number: 150 but max is 1 [ 558.655880][ T5715] usb 3-1: config 7 has an invalid interface number: 38 but max is 1 [ 558.655963][ T5715] usb 3-1: config 7 has 3 interfaces, different from the descriptor's value: 2 [ 558.655976][ T5715] usb 3-1: config 7 has no interface number 0 [ 558.655986][ T5715] usb 3-1: config 7 has no interface number 1 [ 558.655995][ T5715] usb 3-1: config 7 has no interface number 2 [ 558.656036][ T5715] usb 3-1: config 7 interface 150 altsetting 112 endpoint 0x8 has invalid maxpacket 1056, setting to 64 [ 558.656053][ T5715] usb 3-1: config 7 interface 150 altsetting 112 has a duplicate endpoint with address 0x8, skipping [ 558.656067][ T5715] usb 3-1: config 7 interface 150 altsetting 112 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 558.656083][ T5715] usb 3-1: too many endpoints for config 7 interface 38 altsetting 5: 235, using maximum allowed: 30 [ 558.656113][ T5715] usb 3-1: config 7 interface 38 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 558.656126][ T5715] usb 3-1: config 7 interface 38 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 558.656138][ T5715] usb 3-1: config 7 interface 38 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 235 [ 558.656153][ T5715] usb 3-1: config 7 interface 228 has no altsetting 0 [ 558.656163][ T5715] usb 3-1: config 7 interface 150 has no altsetting 0 [ 558.656173][ T5715] usb 3-1: config 7 interface 38 has no altsetting 0 [ 558.658391][ T5715] usb 3-1: New USB device found, idVendor=0403, idProduct=eee9, bcdDevice=33.7d [ 558.658418][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.658438][ T5715] usb 3-1: Product: syz [ 558.658452][ T5715] usb 3-1: Manufacturer: syz [ 558.658466][ T5715] usb 3-1: SerialNumber: syz [ 558.807862][T13651] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2461'. [ 558.840792][T13651] Invalid source name [ 558.978928][ T5715] ftdi_sio 3-1:7.228: FTDI USB Serial Device converter detected [ 558.990920][ T5715] ftdi_sio ttyUSB0: unknown device type: 0x337d [ 559.015868][ T5715] ftdi_sio 3-1:7.150: FTDI USB Serial Device converter detected [ 559.025721][ T5715] ftdi_sio ttyUSB1: unknown device type: 0x337d [ 559.059917][ T5715] ftdi_sio 3-1:7.38: FTDI USB Serial Device converter detected [ 559.065762][ T5715] ftdi_sio ttyUSB2: unknown device type: 0x337d [ 559.117232][ T5715] usb 3-1: USB disconnect, device number 107 [ 559.154059][ T5715] ftdi_sio 3-1:7.228: device disconnected [ 559.178707][ T5715] ftdi_sio 3-1:7.150: device disconnected [ 559.243838][ T5715] ftdi_sio 3-1:7.38: device disconnected [ 559.248266][T13669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.249023][T13669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.308238][T13673] loop9: detected capacity change from 0 to 7 [ 559.310171][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 559.310365][T13673] Dev loop9: unable to read RDB block 7 [ 559.310406][T13673] loop9: unable to read partition table [ 559.310601][T13673] loop9: partition table beyond EOD, truncated [ 559.310620][T13673] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 559.311356][T13672] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 559.719880][T13653] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.246113][T13653] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.324279][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.325059][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.530434][T13653] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.776577][T13653] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.970824][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'. [ 561.058788][T13704] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2468'. [ 561.071496][T13705] binder: BINDER_SET_CONTEXT_MGR already set [ 561.071505][T13705] binder: 13701:13705 ioctl 4018620d 200000000040 returned -16 [ 561.077136][T13705] binder: 13701:13705 ioctl c0306201 200000000180 returned -14 [ 561.133639][T13708] loop9: detected capacity change from 0 to 7 [ 561.135164][ T3620] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 561.135344][T13708] Dev loop9: unable to read RDB block 7 [ 561.135381][T13708] loop9: unable to read partition table [ 561.135524][T13708] loop9: partition table beyond EOD, truncated [ 561.135548][T13708] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 561.147897][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 561.802838][ T5615] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 561.952100][ T5715] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 562.102133][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 562.104444][ T5715] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 562.104471][ T5715] usb 4-1: config 0 has no interface number 0 [ 562.104504][ T5715] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 562.104540][ T5715] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 562.104556][ T5715] usb 4-1: config 0 interface 49 has no altsetting 0 [ 562.107001][ T5715] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 562.107029][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.107051][ T5715] usb 4-1: Product: syz [ 562.107066][ T5715] usb 4-1: Manufacturer: syz [ 562.107075][ T5715] usb 4-1: SerialNumber: syz [ 562.110793][ T5715] usb 4-1: config 0 descriptor?? [ 562.469201][ T5715] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 562.726828][ T5715] gspca_ov534_9: reg_w failed -71 [ 562.736299][T13737] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 562.902199][ T5782] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 563.062501][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 563.066030][ T5782] usb 3-1: no configurations [ 563.066047][ T5782] usb 3-1: can't read configurations, error -22 [ 563.123832][T13750] loop9: detected capacity change from 0 to 7 [ 563.124553][ T184] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 563.124805][T13750] Dev loop9: unable to read RDB block 7 [ 563.124846][T13750] loop9: unable to read partition table [ 563.125151][T13750] loop9: partition table beyond EOD, truncated [ 563.125171][T13750] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 563.125865][T13749] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 563.143630][ T5715] gspca_ov534_9: Unknown sensor 0000 [ 563.143717][ T5715] ov534_9 4-1:0.49: probe with driver ov534_9 failed with error -22 [ 563.205423][ T5782] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 563.208764][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.208852][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.232750][ T5715] usb 4-1: USB disconnect, device number 4 [ 563.350969][T13756] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.353269][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 563.354242][ T5782] usb 3-1: no configurations [ 563.354258][ T5782] usb 3-1: can't read configurations, error -22 [ 563.354577][ T5782] usb usb3-port1: attempt power cycle [ 563.686328][ T5715] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 563.691709][T13759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.692526][ T5782] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 563.693259][T13759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.723727][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 563.725126][T13759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.725282][ T5782] usb 3-1: no configurations [ 563.725297][ T5782] usb 3-1: can't read configurations, error -22 [ 563.731139][T13759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.843010][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 563.843054][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.843068][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 563.843092][ T5715] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 563.843107][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.847474][ T5715] usb 4-1: config 0 descriptor?? [ 563.853567][ T5782] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 563.898608][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 563.910630][ T5782] usb 3-1: no configurations [ 563.910647][ T5782] usb 3-1: can't read configurations, error -22 [ 563.912993][ T5782] usb usb3-port1: unable to enumerate USB device [ 564.257337][ T5715] usbhid 4-1:0.0: can't add hid device: -71 [ 564.257409][ T5715] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 564.277216][ T5715] usb 4-1: USB disconnect, device number 5 [ 564.377983][T13763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.379830][T13763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.928831][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.929427][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.943350][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.943891][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.951065][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.952158][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.042549][ T5782] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 565.192480][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 565.195293][ T5782] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 565.195329][ T5782] usb 4-1: can't read configurations, error -22 [ 565.322502][ T5782] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 565.472548][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 565.474603][ T5782] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 565.474639][ T5782] usb 4-1: can't read configurations, error -22 [ 565.475043][ T5782] usb usb4-port1: attempt power cycle [ 565.538545][T13770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.539073][T13770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.586751][T13771] netlink: 4416 bytes leftover after parsing attributes in process `syz.4.2488'. [ 565.812569][ T5782] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 565.833173][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 565.835225][ T5782] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 565.835262][ T5782] usb 4-1: can't read configurations, error -22 [ 565.962697][ T5782] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 565.983106][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 565.985152][ T5782] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 565.985186][ T5782] usb 4-1: can't read configurations, error -22 [ 565.985597][ T5782] usb usb4-port1: unable to enumerate USB device [ 566.242432][T13778] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 566.356301][T13782] netlink: 'syz.0.2491': attribute type 11 has an invalid length. [ 566.427959][T13785] loop9: detected capacity change from 0 to 7 [ 566.431099][ T114] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 566.431295][T13785] Dev loop9: unable to read RDB block 7 [ 566.431337][T13785] loop9: unable to read partition table [ 566.431511][T13785] loop9: partition table beyond EOD, truncated [ 566.431531][T13785] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 566.442686][ T5693] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 566.469997][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 566.602695][ T5693] usb 3-1: Using ep0 maxpacket: 32 [ 566.604379][ T5693] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.604411][ T5693] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.604439][ T5693] usb 3-1: config 0 interface 0 has no altsetting 0 [ 566.604460][ T5693] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 566.604474][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.608420][ T5693] usb 3-1: config 0 descriptor?? [ 566.616870][ T5693] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 566.821817][T13776] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2490'. [ 566.826084][T13776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.828078][T13776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.871352][ T5693] usbhid 3-1:0.0: can't add hid device: -71 [ 566.871471][ T5693] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 566.879140][ T5693] usb 3-1: USB disconnect, device number 113 [ 567.195298][T13796] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2496'. [ 567.334055][T13796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.395667][T13796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.474307][T13796] bond0 (unregistering): (slave team0): Releasing backup interface [ 567.482554][T13800] binder: 13799:13800 ioctl 40046210 0 returned -14 [ 567.528984][T13796] bond0 (unregistering): Released all slaves [ 567.847746][T13811] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 567.864725][T13812] loop9: detected capacity change from 0 to 7 [ 567.877003][ T1185] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 567.877263][T13812] Dev loop9: unable to read RDB block 7 [ 567.877302][T13812] loop9: unable to read partition table [ 567.877497][T13812] loop9: partition table beyond EOD, truncated [ 567.877534][T13812] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.948730][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 567.968643][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.969380][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.431799][ T5615] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 568.642115][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.653608][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.947080][T13848] random: crng reseeded on system resumption [ 569.162180][T13853] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 569.300845][T13859] netlink: 'syz.3.2515': attribute type 21 has an invalid length. [ 569.300865][T13859] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2515'. [ 569.610863][T13871] loop9: detected capacity change from 0 to 7 [ 569.611555][ T3620] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 569.611805][T13871] Dev loop9: unable to read RDB block 7 [ 569.611844][T13871] loop9: unable to read partition table [ 569.612037][T13871] loop9: partition table beyond EOD, truncated [ 569.612056][T13871] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 569.612703][T13870] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 569.765077][T13875] [U]  [ 569.765102][T13875] [U] +ÞÇ [ 569.765120][T13875] [U]  $ÜP~ÆŠQúàÝr­ÂèAí«e`Gè’-Rº„ij笨¹ƒmA·­ÀŽ¥ë)߀ÈNûo4ÀgˆVŠ¸ª«Ÿ;ÇヾuáQ` [ 569.765174][T13875] [U] WgÛËçƒ-u]‚¿}ÝFyȘëeŠÆ®«œ«)¸>äôÈ,>f„}a&\°¿msO–H§nƒ'Ä=Ë#$Ǧ×&gíÌ C„†Œ.,jPï±^{ß"çÁO·‘­‘º¯ØÏiňo°¢;pʪáÃ6ðqwS_{ßCWÜfs½+RÁˆ~¸»ÓßqªèuÓ›‡ÂŸNn! [ 569.765203][T13875] [U] ZphÂÑ5òÖLaÓ8HÝî [ 569.765268][T13875] [U] ˆV)*Á¯Gr£•Ý [ 569.765291][T13875] [U] —gë©ïËåüM£D9¡i^g÷‘Î[‰…&šT×Xd}y^÷#"‰ïZ©&|”JiYûŠéDXÐ~reÍG¼¾ÀiUMNk¯ŠâqèGJc”²Ó”ï0 Ìr¦08½8†Dÿ<ŸU0P9Ú=>âȪËùU¡×[ÛÚƒìuW‚³9ùŒ¹÷ñ…jþl"ƒhñ¦îZGæ+EÎÄ–#ã µLY`zéÚõî½2 [ 569.765311][T13875] [U] }{_SŒ–|jèÎ\ùpè©Â¶²ëtÚ˜„’1¸bÚå-S4—°!{û9C5-ßÁ>ãM [ 569.765323][T13875] [U] ·©¥–°UËÐáX†B”HØ®,±ËÙÇ~Þnmž¯ÐáIM³/a ‘ [ 569.765337][T13875] [U] VS•ö6©Óe^ ÍS’Hkã"ï(õÞ*:$ä}<¾ö^Y¼Dî?ŠrÈðn¤‚HE«¯ùX#¥×XÀ3Ys6 [ 569.765348][T13875] [U] °¦ [ 569.765382][T13875] [U] ¦—«71D§%ñÞ}7¤ïÕG\ñ4™²¾'÷Kp°¡7U¥,ƒñóø"ˆ^|¾–-âBÑÅ g&@÷ƒb£ÍWÑRY [ 569.765412][T13875] [U] ùÅóp~ÔÕê [ 569.765435][T13875] [U] hQV™ÈùOKõ) ÂƵÙØòZ>‰uÖY`XÔ¶Þ–ðQtšBûhvMådR¿/úÿ²ã%¸ÂÊÛF²ä8Ô`¡yÇ¥øY䦈Fؾýx@­-dìÖ›øþ ÄÓ0¹Ê©zÚ;¼èÞD¿"•Ç)ÝtRgiL(â)dÂ6áîœ"BnBíüfÚ?Ó›<ªFÞÍκ¦þxÓAJfoûÈ·‘Ñ%­} [ 569.765464][T13875] [U] û²Ñ„…F“ðéÆ [ 569.765519][T13875] [U] ”†æõ›á*ž"DšìŠ n’ªÒ–®ü…6vRœÖÞçªrÕøè‰Cï‚/[J3¶¢îïeÞßPœªû)Â1??Üt´r8Þÿ¦5«_‰„1áÚ2>š,ѧ`’'LÛáq“ ‘Û6‚›ùtô2tê°òäê@F@pô6¡ív’˜Èà•õ]Ùtü4ÉNÊξ”¼œây÷RΓvøPà':ÑJ°Û«¥ñÛ†ôãÊE—­*Ì£]ª;ÛMø4˜TÌqüBÓ_5½ÞpM [ 569.765557][T13875] [U] †±_ÖmÖ±¿«×9KU""^®¯s6r‚P [ 569.765629][T13875] [U] ’Â¥çºÖUˆ¢ ¿ÔÎ[m öŒ´§¾ôñj0z²¾íOÓoFÁ¸|èàÈý×:!ö ú/$@RŽH²(ΗƒÑ1ŒK@Çš/¡w³¨±4|x郺àJÇ3ý‘á¨:<æfû…±÷&~[„J¦r&J2t߈[ðEú*nú½¿H¢”~×4Ð ë–ŒÆDF GýPjw„~ã5Åtl?aø9¡Yð™ ®ÖHyn}¸k‹ ÷A†CZuî2èÌû¦í7S‡Pî1¥9ɦHú=[&ðƒäŸç<í›J´”ÉÚ‰rf!Í ð [ 569.765687][T13875] [U] ¡€3¹kT²2±¹lUM­3(4–ÑxNÖ*Y”ô£%Üf]â’ [ 569.765759][T13875] [U] ñŸaê™1ݯt8ß úd+ê¿{úŽýÐÍ÷GÄ—J)+LE‹dbN¡!§¶D‰ƒçÚ½k‘¾‡–{¦‰…Ÿî¡#ÕÒJ©¬M0ž [ 569.765777][T13875] [U] â«ãLÐÏ¿I> [ 569.765846][T13875] [U] VÑ :áëpºÁ\UÞâ 5ÚV"¡c“ædøõ:nŠbá3Ob,%ǯe‚ë jÜ9¾>Þ\rCˉiV‰üüE‰<ßõ¦\½7;å¨+ȨÈý"ª‹IÆ”/6FNÙhgÇw«~åxc—Wö¸}H6‹TIŸáø³¤‡ž¥¨ªØ†ó6a•A耹îCš1ƒŠëžâv]b¸²a›´»9»¡xT•»ÍÛÔý Ý [ 569.765871][T13875] [U] åùÝïßÛ¼u•³ðãJÍÓêD‹åãâ ™þ(š›"ðwZ[(s1yX´NׯtA÷ÝÚc‰/pæiÇŽÂâj Ð…#æª{Â0¢Ì`y£,²ÂHp+œÌ„¡ßj5•4åæ?@ÕºNˆa›^!ä4ÅíÉ^3"­ [ 569.765916][T13875] [U] I\xÛÇezÇèWƒ80“íïÜš¤Püfz¿qîöëi^ù@O [ 569.765935][T13875] [U] gÚ‘£/P€+ùõ€ÐØ’b£=é®pY¶Yâ1gJ©d¤<±?*^㺓{•†”ØÞõ™Kçus [ 569.766003][T13875] [U] «R‰.6ý ¶/-èÎùoÐÁó‹}üMXÒ…ƒ¢×;{€™‚œ‘)&ä»ü¶2¸Žr[_ ÉnÒÁ¸¹¹Ü&ÈÕL K4 —“Ghz6a:O Þf¨ÖÛ“zÑæ|O4H6JÈ ¯ EÇ&Tδ¬^éJúÆ}×Rî!K]"ÜäÉÍÍyÈL4N©\W.úæ+O®¦¹@˜ÍSÁ¿åïêbÚ;"ˆÇk\ðvð)i%ê&1ò†ú~]²F+|·ˆŸ/÷ÛO•Þ ‡h¼‘ÓJûÓË6°dxJ¬o³­.:ýîÎHŸ¦ÛݹÄ}Ýw{J®3%õêM=*pÔx˜ï—ÔîÉùl5¾fX+¦Š“ǃó*××ëËÙilÛ(H6ôü¨!NkÝ [ 569.766038][T13875] [U] [ 569.766073][T13875] [U] ÞÌÔ)•kP˜#î.é,ÏêUm¼tŸ…ÁâCçû Ã·Nãýïý2vÿaì˼†¨Ž˜”•ÂUîô¼r;Ž8@ÂLÙoñ7B’Ï0:S’¡v‚ç»CÀ»—ØDëùš~ÝƄ߈QidA”©¡<O'‘V2Þàkƹ¤—Á«ifûÝʺ [ 569.766100][T13875] [U] ¦v [ 569.766181][T13875] [U] ]ëðþà5E©Îº 6¶Ÿ`Ó41Hý)‰²ë øBtZáá¼Cà’à3ö Ò¢È†ådBHÒæu>Œ!x¡ÄÏà´¨K£øTà˜˜a°;úPÄaoùFl’­uŸ¾¡ æ­8:!V¿‹˜DÖéËý Œü™G©\zwi¢=Œ)™m)o!ÉÒ–Ë>08jõŒþÍ»¾ïù*(‰‘±ÿ¥ñ ‰¯sL¹¿Q@Š0KeÓ—¸ž±ÆòâV÷ŠîszÚKËP?°eéóÀ/¦©K¼ä MœR®l‹ya´?Ôë …À'EtU{ŒR˜]ÜÖˆS$¨€í9ùO¨u®Äå(Å€‹~le/©I8Ìãª#à‚ìÆë a ì? ,#pÝ;ºŸüR{ó¯4ÛÓH wÿ"îX{îÝë­Ð\¥Ã\ž§± ž.K·VÛ2$Ēί܀°Ÿ6< [ 569.766232][T13875] [U] qÊ òOuÏlv~-ó†Ü_•¬²® óç¢8¸˜Í?Oá6¡×$Ÿ“z«…eêAÉÇO_ƒNO/C °÷±.þbŸyrŒäË‹»ã§<¨è[³ÊÊDx²àÀ¯…Ò¿š”åWW´Xÿ‡Þ [ 569.766265][T13875] [U] ܲ|Œü9¿ªû$næ`iþ(ÌRÇ¿DtÙA»ü4¦o/Í„eVÎ2ÏÄB§‚l¦n|Å ¿:KY´W&;¨¢lË1; [ 569.766325][T13875] [U] ;JO6P£ÿ [ 569.766994][T13875] [U] q1nÎâÔ#ðßÂGµý4“ËìY›ÀrM€nìUf[Xi^ƒ˜='ø÷ÛÚ‰Ãzª’;Ç:Qƒ¹7àš,E [ 569.770406][T13875] tipc: Enabling not permitted [ 569.770435][T13875] tipc: Enabling of bearer rejected, failed to enable media [ 570.482251][T13873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.482860][T13873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.594948][T13893] 8021q: VLANs not supported on vcan0 [ 570.670341][T13898] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 570.696403][T13897] overlayfs: upper fs does not support file handles, falling back to index=off. [ 570.835129][ T5693] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 570.983372][ T5693] usb 3-1: Using ep0 maxpacket: 8 [ 570.988387][ T5693] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 570.988419][ T5693] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 570.988445][ T5693] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.988459][ T5693] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.988483][ T5693] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.988497][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.219909][ T5693] usb 3-1: GET_CAPABILITIES returned 0 [ 571.219957][ T5693] usbtmc 3-1:16.0: can't read capabilities [ 571.346619][T13905] loop9: detected capacity change from 0 to 7 [ 571.360050][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 571.362070][T13905] Dev loop9: unable to read RDB block 7 [ 571.362111][T13905] loop9: unable to read partition table [ 571.362335][T13905] loop9: partition table beyond EOD, truncated [ 571.362366][T13905] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 571.430423][ T5693] usb 3-1: USB disconnect, device number 114 [ 571.461165][ T5790] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 571.528417][T13907] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2530'. [ 571.647955][T13903] ./file0: Can't lookup blockdev [ 571.656749][T13903] fuse: Bad value for 'group_id' [ 571.656766][T13903] fuse: Bad value for 'group_id' [ 571.775216][T13912] dvmrp0: entered allmulticast mode [ 571.796185][T13912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.799753][T13912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.963249][T13917] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 571.963276][T13917] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 572.005193][T13917] vhci_hcd vhci_hcd.0: Device attached [ 572.179630][T13923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2533'. [ 572.263591][ T824] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 572.443536][ T5693] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 572.573530][ T5693] usb 4-1: device descriptor read/64, error -71 [ 572.645901][T13936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.654320][T13936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.659939][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.660879][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.833519][ T5693] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 572.913145][T13939] netlink: 'syz.2.2538': attribute type 1 has an invalid length. [ 572.913163][T13939] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2538'. [ 572.965633][ T5693] usb 4-1: device descriptor read/64, error -71 [ 573.076978][ T5693] usb usb4-port1: attempt power cycle [ 573.356120][T13947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.382680][T13947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.413700][ T5693] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 573.441793][ T5693] usb 4-1: device descriptor read/8, error -71 [ 573.614351][ T5782] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 573.673717][ T5693] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 573.694430][ T5693] usb 4-1: device descriptor read/8, error -71 [ 573.765657][ T5782] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 573.765683][ T5782] usb 3-1: config 0 has no interface number 0 [ 573.765726][ T5782] usb 3-1: config 0 interface 183 altsetting 87 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 573.765755][ T5782] usb 3-1: config 0 interface 183 has no altsetting 0 [ 573.768064][ T5782] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 573.768093][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.768111][ T5782] usb 3-1: Product: syz [ 573.768120][ T5782] usb 3-1: Manufacturer: syz [ 573.768130][ T5782] usb 3-1: SerialNumber: syz [ 573.779682][T13950] loop9: detected capacity change from 0 to 7 [ 573.780912][ T5782] usb 3-1: config 0 descriptor?? [ 573.804108][ T5693] usb usb4-port1: unable to enumerate USB device [ 573.813883][ T1185] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 573.883787][T13950] Dev loop9: unable to read RDB block 7 [ 573.883881][T13950] loop9: unable to read partition table [ 573.884190][T13950] loop9: partition table beyond EOD, truncated [ 573.884220][T13950] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 573.926425][ T5790] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 574.497286][T13966] openvswitch: netlink: Flow key attribute not present in set flow. [ 574.851194][T13975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.852016][T13975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.966657][T13918] vhci_hcd: connection reset by peer [ 574.967190][ T1185] vhci_hcd vhci_hcd.3: stop threads [ 574.967217][ T1185] vhci_hcd vhci_hcd.3: release socket [ 574.992709][ T1185] vhci_hcd vhci_hcd.3: disconnect device [ 575.354614][ T5006] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 575.523905][ T5006] usb 4-1: Using ep0 maxpacket: 32 [ 575.525994][ T5006] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 575.531555][ T5006] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 575.531572][ T5006] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 575.531585][ T5006] usb 4-1: Product: syz [ 575.531593][ T5006] usb 4-1: Manufacturer: syz [ 575.531602][ T5006] usb 4-1: SerialNumber: syz [ 575.556806][ T5006] usb 4-1: config 0 descriptor?? [ 575.577383][T13977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.582415][ T5006] hub 4-1:0.0: bad descriptor, ignoring hub [ 575.582451][ T5006] hub 4-1:0.0: probe with driver hub failed with error -5 [ 575.687360][T13983] loop9: detected capacity change from 0 to 7 [ 575.703369][ T3620] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 575.703652][T13983] Dev loop9: unable to read RDB block 7 [ 575.703695][T13983] loop9: unable to read partition table [ 575.722917][T13983] loop9: partition table beyond EOD, truncated [ 575.722937][T13983] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 575.754471][ T5780] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 576.084327][ T5700] usb 4-1: USB disconnect, device number 14 [ 576.148094][ T5782] cx82310_eth 3-1:0.183: probe with driver cx82310_eth failed with error -22 [ 576.152353][ T5782] cxacru 3-1:0.183: usbatm_usb_probe: bind failed: -19! [ 576.168632][ T5782] usb 3-1: USB disconnect, device number 115 [ 576.285206][T13986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.285672][T13986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.338745][T13988] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 576.338745][T13988] program syz.2.2558 not setting count and/or reply_len properly [ 576.452157][T13996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2561'. [ 576.592925][T14003] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 576.848655][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2564'. [ 576.848693][T14010] openvswitch: netlink: Missing key (keys=40, expected=80) [ 576.927747][T14013] loop9: detected capacity change from 0 to 7 [ 576.928452][ T114] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 576.928687][T14013] Dev loop9: unable to read RDB block 7 [ 576.928728][T14013] loop9: unable to read partition table [ 576.928894][T14013] loop9: partition table beyond EOD, truncated [ 576.928915][T14013] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 576.982710][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 577.354893][ T824] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 577.467886][T14019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.472106][T14019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.495420][ T5700] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 577.530755][T14024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.532318][T14024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.607967][T14024] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2569'. [ 577.646567][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 577.649049][ T5700] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 577.664228][ T5700] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 577.664256][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 577.664278][ T5700] usb 3-1: Product: syz [ 577.664294][ T5700] usb 3-1: Manufacturer: syz [ 577.664310][ T5700] usb 3-1: SerialNumber: syz [ 577.715020][ T5700] usb 3-1: config 0 descriptor?? [ 577.719401][T14017] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 577.721480][ T5700] hub 3-1:0.0: bad descriptor, ignoring hub [ 577.721516][ T5700] hub 3-1:0.0: probe with driver hub failed with error -5 [ 577.838827][T14041] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 578.132918][T14055] loop9: detected capacity change from 0 to 7 [ 578.147200][T14057] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 578.149069][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 578.186237][T14055] Dev loop9: unable to read RDB block 7 [ 578.186280][T14055] loop9: unable to read partition table [ 578.186472][T14055] loop9: partition table beyond EOD, truncated [ 578.190616][T14055] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 578.209551][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 578.294511][ T5006] usb 3-1: USB disconnect, device number 116 [ 578.304415][ T5700] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 578.467404][ T5700] usb 4-1: config 2 has an invalid interface number: 39 but max is 0 [ 578.467431][ T5700] usb 4-1: config 2 has no interface number 0 [ 578.467476][ T5700] usb 4-1: config 2 interface 39 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 578.467503][ T5700] usb 4-1: config 2 interface 39 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 578.467529][ T5700] usb 4-1: config 2 interface 39 has no altsetting 0 [ 578.470048][ T5700] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0119, bcdDevice=e4.9a [ 578.470078][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.470099][ T5700] usb 4-1: Product: syz [ 578.470115][ T5700] usb 4-1: Manufacturer: syz [ 578.470131][ T5700] usb 4-1: SerialNumber: syz [ 578.551620][T14052] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 578.551877][T14052] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 578.873574][ T5700] kvaser_usb 4-1:2.39: error -ENODEV: Cannot get usb endpoint(s) [ 578.902861][ T5700] usb 4-1: USB disconnect, device number 15 [ 578.964444][ T5789] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 579.007523][T14074] vivid-004: disconnect [ 579.023074][T14073] vivid-004: reconnect [ 579.024086][T14074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.027525][T14074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.104535][ T5789] usb 3-1: device descriptor read/64, error -71 [ 579.294506][ T5700] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 579.314098][T14081] loop4: detected capacity change from 0 to 523370496 [ 579.326094][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.346543][ T5789] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 579.384492][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.387396][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.388361][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.391404][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.392545][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.411740][T14084] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 579.445285][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.446356][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.447520][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.450244][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.451006][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.452689][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.453444][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.454526][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 579.454804][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.458636][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 579.458663][ T5700] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 579.488461][ T5700] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 579.488507][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 579.488529][ T5700] usb 4-1: Product: syz [ 579.488544][ T5700] usb 4-1: Manufacturer: syz [ 579.488561][ T5700] usb 4-1: SerialNumber: syz [ 579.489213][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.492611][ T4334] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.518658][ T5789] usb 3-1: device descriptor read/64, error -71 [ 579.625949][ T5789] usb usb3-port1: attempt power cycle [ 579.630981][ T5700] usb 4-1: config 0 descriptor?? [ 579.647908][ T114] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.651154][ T114] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.657966][ T114] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.707682][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.710487][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.731464][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.733960][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.749654][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.754240][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.800741][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.818491][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.822818][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.826398][ T5615] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 579.826813][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.842551][ T5006] usb 4-1: USB disconnect, device number 16 [ 579.852556][ T114] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.869126][ T114] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.870817][ T114] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.871462][ T114] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.924282][ T114] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.936749][ T114] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.957235][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.963059][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.963456][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.963487][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.964354][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 579.996008][ T5789] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 580.010452][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 580.015485][ T5789] usb 3-1: device descriptor read/8, error -71 [ 580.021446][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 580.021585][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 580.021718][ T3620] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 580.055816][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 580.064166][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 580.064241][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 580.066554][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 580.066689][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 580.122324][ T6059] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 580.254552][ T5789] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 580.275209][ T5789] usb 3-1: device descriptor read/8, error -71 [ 580.384865][ T5789] usb usb3-port1: unable to enumerate USB device [ 580.503411][T14096] input: syz1 as /devices/virtual/input/input53 [ 580.765713][T14102] loop9: detected capacity change from 0 to 7 [ 580.766307][ T114] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 580.766821][T14102] Dev loop9: unable to read RDB block 7 [ 580.766848][T14102] loop9: unable to read partition table [ 580.766978][T14102] loop9: partition table beyond EOD, truncated [ 580.767001][T14102] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.816150][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 581.308710][T14111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.309331][T14111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.313128][T14111] netlink: 'syz.4.2593': attribute type 29 has an invalid length. [ 581.313657][T14111] netlink: 'syz.4.2593': attribute type 29 has an invalid length. [ 581.474697][ T5700] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 581.626843][ T5700] usb 4-1: unable to get BOS descriptor or descriptor too short [ 581.627903][ T5700] usb 4-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 581.627987][ T5700] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.630179][ T5700] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 581.630206][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.630219][ T5700] usb 4-1: Product: syz [ 581.630227][ T5700] usb 4-1: Manufacturer: syz [ 581.630242][ T5700] usb 4-1: SerialNumber: syz [ 581.863308][T14115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.864882][T14115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.947180][T14118] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 582.362707][ T5700] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 582.363063][ T5700] usb 4-1: unit 14 not found! [ 582.419371][ T5615] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 582.422212][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.422767][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.472208][ T5700] usb 4-1: USB disconnect, device number 17 [ 582.514030][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.550479][T14138] loop9: detected capacity change from 0 to 7 [ 582.551606][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 582.551786][T14138] Dev loop9: unable to read RDB block 7 [ 582.551812][T14138] loop9: unable to read partition table [ 582.551924][T14138] loop9: partition table beyond EOD, truncated [ 582.551948][T14138] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 582.555716][ T5006] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 582.612315][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 582.726487][ T5006] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 582.726519][ T5006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 582.726539][ T5006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 64 [ 582.726555][ T5006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 582.726570][ T5006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 582.728723][ T5006] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 582.728751][ T5006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.728763][ T5006] usb 3-1: Product: syz [ 582.728772][ T5006] usb 3-1: Manufacturer: syz [ 582.728781][ T5006] usb 3-1: SerialNumber: syz [ 582.732312][ T5006] usb 3-1: config 0 descriptor?? [ 583.135949][ T5006] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 583.135998][ T5006] input input54: Device does not respond to id packet M [ 583.136414][ T5006] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 583.136460][ T5006] input input54: Device does not respond to id packet P [ 583.136870][ T5006] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 583.136914][ T5006] input input54: Device does not respond to id packet B [ 583.138950][ T5006] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 583.138996][ T5006] input input54: Device does not respond to id packet N [ 583.140862][ T5006] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 583.141297][ T5006] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 583.141740][ T5006] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 583.142619][ T5006] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 583.142672][ T5006] iforce 3-1:0.0: usb_submit_urb failed -90 [ 583.142842][ T5006] iforce 3-1:0.0: usb_submit_urb failed -90 [ 583.147300][ T5006] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 583.183293][ T5006] usb 3-1: USB disconnect, device number 121 [ 583.183381][ C1] iforce 3-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 583.240267][ T5615] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 583.464412][T14152] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 583.608655][ T37] audit: type=1326 audit(1779407600.338:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.3.2608" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 583.608831][ T37] audit: type=1326 audit(1779407600.338:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.3.2608" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 583.609091][ T37] audit: type=1326 audit(1779407600.338:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.3.2608" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 583.609218][ T37] audit: type=1326 audit(1779407600.338:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 583.609381][ T37] audit: type=1326 audit(1779407600.338:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 583.609527][ T37] audit: type=1326 audit(1779407600.338:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 583.609716][ T37] audit: type=1326 audit(1779407600.338:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 583.609862][ T37] audit: type=1326 audit(1779407600.338:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 583.610021][ T37] audit: type=1326 audit(1779407600.338:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 583.610198][ T37] audit: type=1326 audit(1779407600.338:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead833cdd9 code=0x7ffc0000 [ 584.000380][T14175] loop9: detected capacity change from 0 to 7 [ 584.000978][ T114] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 584.001593][T14175] Dev loop9: unable to read RDB block 7 [ 584.001620][T14175] loop9: unable to read partition table [ 584.001728][T14175] loop9: partition table beyond EOD, truncated [ 584.001750][T14175] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 584.071708][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 584.115747][T14179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.116309][T14179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.118494][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.119034][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.415141][ T5782] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 584.575217][ T5782] usb 4-1: Using ep0 maxpacket: 8 [ 584.576871][ T5782] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 584.576898][ T5782] usb 4-1: config 0 has no interface number 0 [ 584.576930][ T5782] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 584.576945][ T5782] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 584.576960][ T5782] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 584.576975][ T5782] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 584.577000][ T5782] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 584.577014][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.579750][ T5782] usb 4-1: config 0 descriptor?? [ 584.606787][ T5782] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 584.717038][T14188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.720119][T14188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.784981][ T5789] usb 4-1: USB disconnect, device number 18 [ 584.785141][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 584.832380][ T5789] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 585.312286][T14195] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 585.527421][T14200] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 585.527575][T14200] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 585.527712][T14200] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 585.527846][T14200] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 585.574931][T14200] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 585.701851][T14219] loop9: detected capacity change from 0 to 7 [ 585.703400][ T3620] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 585.703602][T14219] Dev loop9: unable to read RDB block 7 [ 585.703642][T14219] loop9: unable to read partition table [ 585.703839][T14219] loop9: partition table beyond EOD, truncated [ 585.705930][T14219] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 585.725502][T14218] CUSE: info not properly terminated [ 585.736271][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2623'. [ 585.746972][T14214] overlayfs: upper fs does not support tmpfile. [ 585.751797][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 586.195341][ T5789] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 586.262601][T14232] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 586.345741][ T5789] usb 4-1: Using ep0 maxpacket: 32 [ 586.347337][ T5789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 586.349427][ T5789] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 586.349456][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 586.349468][ T5789] usb 4-1: Product: syz [ 586.349477][ T5789] usb 4-1: Manufacturer: syz [ 586.349486][ T5789] usb 4-1: SerialNumber: syz [ 586.352224][ T5789] usb 4-1: config 0 descriptor?? [ 586.352927][T14224] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 586.356537][ T5789] hub 4-1:0.0: bad descriptor, ignoring hub [ 586.362541][ T5789] hub 4-1:0.0: probe with driver hub failed with error -5 [ 586.468309][T14237] i2c i2c-0: dtv_property_process_set: SET cmd 0x549e2218 undefined [ 586.572129][T14239] 9p: Could not find request transport: 0xffffffffffffffff [ 586.672516][T14245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2632'. [ 586.886001][ T5789] usb 4-1: USB disconnect, device number 19 [ 587.276464][ T5615] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 587.276751][ T5615] Bluetooth: hci2: Injecting HCI hardware error event [ 587.298582][ T5608] Bluetooth: hci2: hardware error 0x00 [ 587.494472][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 587.560127][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 587.569618][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 587.599893][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 587.601750][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 587.990409][T14259] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2635'. [ 587.991894][T14259] 9p: Bad value for 'rfdno' [ 588.037656][T14259] Invalid ELF header magic: != ELF [ 589.022343][T14273] netlink: 'syz.4.2637': attribute type 21 has an invalid length. [ 589.116582][ T114] bridge_slave_1: left allmulticast mode [ 589.116614][ T114] bridge_slave_1: left promiscuous mode [ 589.117271][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.198221][ T114] bridge_slave_0: left allmulticast mode [ 589.198252][ T114] bridge_slave_0: left promiscuous mode [ 589.198504][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.297767][T14286] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 589.360876][ T5608] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 589.685872][ T5608] Bluetooth: hci3: command tx timeout [ 589.774347][T14295] loop9: detected capacity change from 0 to 7 [ 589.777478][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 589.779706][T14295] Dev loop9: unable to read RDB block 7 [ 589.779748][T14295] loop9: unable to read partition table [ 589.779940][T14295] loop9: partition table beyond EOD, truncated [ 589.781964][T14295] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 589.803176][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 590.088440][ T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.167159][ T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.207507][ T114] bond0 (unregistering): Released all slaves [ 590.355385][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 590.422822][ T114] tipc: Left network mode [ 591.076041][ T5700] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 591.206069][ T5700] usb 3-1: device descriptor read/64, error -71 [ 591.293837][T14335] loop9: detected capacity change from 0 to 7 [ 591.294532][ T12] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 591.294776][T14335] Dev loop9: unable to read RDB block 7 [ 591.294810][T14335] loop9: unable to read partition table [ 591.294957][T14335] loop9: partition table beyond EOD, truncated [ 591.294976][T14335] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 591.376097][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 591.390435][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 591.486263][ T5700] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 591.621272][ T5700] usb 3-1: device descriptor read/64, error -71 [ 591.736518][ T5700] usb usb3-port1: attempt power cycle [ 591.762034][ T5608] Bluetooth: hci3: command tx timeout [ 591.846300][ T114] hsr_slave_0: left promiscuous mode [ 591.882491][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2649'. [ 591.886251][ T114] hsr_slave_1: left promiscuous mode [ 591.887257][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.887281][ T114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.955612][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.955636][ T114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.978115][T14342] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 592.069851][ T114] veth1_vlan: left promiscuous mode [ 592.072422][ T114] veth0_vlan: left promiscuous mode [ 592.081422][ T5700] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 592.096749][ T5700] usb 3-1: device descriptor read/8, error -71 [ 592.366226][ T5700] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 592.387972][ T5700] usb 3-1: device descriptor read/8, error -71 [ 592.505363][ T5700] usb usb3-port1: unable to enumerate USB device [ 592.606842][ T114] team0 (unregistering): Port device team_slave_1 removed [ 592.646928][ T114] team0 (unregistering): Port device team_slave_0 removed [ 592.837500][T14248] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.838875][T14248] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.839045][T14248] bridge_slave_0: entered allmulticast mode [ 592.840962][T14248] bridge_slave_0: entered promiscuous mode [ 592.875480][T14248] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.875788][T14248] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.876030][T14248] bridge_slave_1: entered allmulticast mode [ 592.893085][T14248] bridge_slave_1: entered promiscuous mode [ 592.998825][T14248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.021765][T14248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.092287][T14248] team0: Port device team_slave_0 added [ 593.097598][T14248] team0: Port device team_slave_1 added [ 593.163173][T14248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.163186][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.163209][T14248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.169583][T14248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.169596][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.169619][T14248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.334462][T14248] hsr_slave_0: entered promiscuous mode [ 593.336748][T14248] hsr_slave_1: entered promiscuous mode [ 593.338733][T14248] debugfs: 'hsr0' already exists in 'hsr' [ 593.338756][T14248] Cannot create hsr debugfs directory [ 593.838576][ T5608] Bluetooth: hci3: command tx timeout [ 593.939712][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 594.098829][T14372] netlink: 'syz.4.2654': attribute type 21 has an invalid length. [ 594.150613][T14373] ucma_write: process 1499 (syz.4.2654) changed security contexts after opening file descriptor, this is not allowed. [ 594.199804][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 594.350311][T14379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.350906][T14379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.825719][T14394] loop9: detected capacity change from 0 to 7 [ 594.826830][ T12] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 594.827104][T14394] Dev loop9: unable to read RDB block 7 [ 594.827144][T14394] loop9: unable to read partition table [ 594.827340][T14394] loop9: partition table beyond EOD, truncated [ 594.827358][T14394] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 594.827965][T14393] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 595.414461][T14410] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 596.113785][ T5608] Bluetooth: hci3: command tx timeout [ 596.628223][ T5700] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 596.784098][ T5700] usb 3-1: config 127 has an invalid interface number: 84 but max is 0 [ 596.784128][ T5700] usb 3-1: config 127 has no interface number 0 [ 596.789485][ T5700] usb 3-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 596.789513][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.789535][ T5700] usb 3-1: Product: syz [ 596.789549][ T5700] usb 3-1: Manufacturer: syz [ 596.789564][ T5700] usb 3-1: SerialNumber: syz [ 597.083138][ T5700] gspca_main: spca501-2.14.0 probing 040a:0002 [ 597.243143][T14421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.271143][T14421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.450165][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.466240][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.480424][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.483049][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.545511][ T5700] gspca_spca501: reg write: error -71 [ 597.545526][ T5700] spca501 3-1:127.84: Reg write failed for 0x00,0x02,0x01 [ 597.545628][ T5700] spca501 3-1:127.84: probe with driver spca501 failed with error -22 [ 597.561520][ T5700] usb 3-1: USB disconnect, device number 126 [ 597.725058][T14248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 597.763067][T14248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.774223][T14248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 597.801696][T14248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.803432][T14248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 597.887126][T14248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.888290][T14248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 597.959626][T14248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 598.184542][T14477] loop9: detected capacity change from 0 to 7 [ 598.189399][T14475] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2664'. [ 598.204551][ T114] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 598.204837][T14477] Dev loop9: unable to read RDB block 7 [ 598.204878][T14477] loop9: unable to read partition table [ 598.205073][T14477] loop9: partition table beyond EOD, truncated [ 598.205091][T14477] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 598.247918][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 598.447940][T14248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.487434][T14248] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.513193][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.513373][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.556880][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.568460][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.681654][T14487] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 599.181986][T14498] XFS (nbd2): SB validate failed with error -5. [ 599.653946][T14531] sg_write: process 1532 (syz.4.2671) changed security contexts after opening file descriptor, this is not allowed. [ 599.686180][T14502] XFS (nbd2): SB validate failed with error -5. [ 599.985014][T14548] loop9: detected capacity change from 0 to 7 [ 599.993758][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 599.994023][T14548] Dev loop9: unable to read RDB block 7 [ 599.994064][T14548] loop9: unable to read partition table [ 599.994282][T14548] loop9: partition table beyond EOD, truncated [ 599.994323][T14548] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 600.049540][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 600.160187][T14248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.347673][T14558] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 600.568421][T14248] veth0_vlan: entered promiscuous mode [ 600.638440][T14248] veth1_vlan: entered promiscuous mode [ 600.911352][T14248] veth0_macvtap: entered promiscuous mode [ 600.935697][T14248] veth1_macvtap: entered promiscuous mode [ 600.954530][T14564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.955113][T14564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.030258][T14248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.138899][T14248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.177339][ T1185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.342997][ T1185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.367559][ T1185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.473946][ T1185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.538803][T14589] sg_write: data in/out 205056/616 bytes for SCSI command 0x9-- guessing data in; [ 602.538803][T14589] program syz.2.2684 not setting count and/or reply_len properly [ 603.090668][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.090690][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.268365][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.268385][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.387697][ T5686] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 603.503522][T14597] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 603.525265][T14601] netlink: 'syz.4.2685': attribute type 5 has an invalid length. [ 603.539436][ T5686] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 603.539462][ T5686] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 603.539486][ T5686] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 603.543010][ T5686] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 603.543040][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.543061][ T5686] usb 3-1: Product: syz [ 603.543076][ T5686] usb 3-1: Manufacturer: syz [ 603.543092][ T5686] usb 3-1: SerialNumber: syz [ 603.625312][ T5686] usb 3-1: config 0 descriptor?? [ 603.633935][T14592] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 603.634115][T14592] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 603.654639][ T5686] usb 3-1: ucan: probing device on interface #0 [ 603.712149][T14605] loop9: detected capacity change from 0 to 7 [ 603.743236][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 603.765705][T14605] Dev loop9: unable to read RDB block 7 [ 603.765734][T14605] loop9: unable to read partition table [ 603.765885][T14605] loop9: partition table beyond EOD, truncated [ 603.765910][T14605] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 603.813375][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2689'. [ 603.817507][ T5790] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 604.177831][ T5700] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 604.257600][T14592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.258826][T14592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.267212][T14592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.269729][T14592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.298800][ T5686] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 604.319748][ T5686] usb 3-1: USB disconnect, device number 127 [ 604.336029][ T5700] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 604.336058][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.374495][ T5700] pwc: Logitech/Cisco VT Camera webcam detected. [ 604.591066][ T5700] pwc: send_video_command error -71 [ 604.591083][ T5700] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 604.591212][ T5700] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 604.622065][ T5700] usb 4-1: USB disconnect, device number 20 [ 604.653654][T14618] loop9: detected capacity change from 0 to 7 [ 604.673551][ T114] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 604.674058][T14618] Dev loop9: unable to read RDB block 7 [ 604.674085][T14618] loop9: unable to read partition table [ 604.674203][T14618] loop9: partition table beyond EOD, truncated [ 604.674225][T14618] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 604.809123][ T5790] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 605.147963][ T5700] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 605.850900][T14628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.851471][T14628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.048209][ T5783] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 606.178098][ T5783] usb 3-1: device descriptor read/64, error -71 [ 606.428346][ T5783] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 606.568662][ T5783] usb 3-1: device descriptor read/64, error -71 [ 606.676689][T14640] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 606.678644][ T5783] usb usb3-port1: attempt power cycle [ 606.961944][T14651] netlink: 'syz.3.2702': attribute type 58 has an invalid length. [ 606.961945][T14652] netlink: 'syz.3.2702': attribute type 58 has an invalid length. [ 607.018254][ T5783] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 607.041465][ T5783] usb 3-1: device descriptor read/8, error -71 [ 607.278225][ T5783] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 607.299306][ T5783] usb 3-1: device descriptor read/8, error -71 [ 607.408720][ T5783] usb usb3-port1: unable to enumerate USB device [ 607.858370][ T5700] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 608.009888][ T5700] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 608.009920][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 608.009936][ T5700] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 608.011979][ T5700] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 608.012008][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.012021][ T5700] usb 4-1: Product: syz [ 608.012029][ T5700] usb 4-1: Manufacturer: syz [ 608.012038][ T5700] usb 4-1: SerialNumber: syz [ 608.015420][ T5700] usb 4-1: config 0 descriptor?? [ 608.017416][T14657] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 608.017498][T14657] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 608.059414][ T5700] usb 4-1: ucan: probing device on interface #0 [ 608.088468][T14660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.088989][T14660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.094339][T14660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.094925][T14660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.640895][T14657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.651626][T14657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.680859][T14657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.691640][T14657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.703657][T14663] loop9: detected capacity change from 0 to 7 [ 608.712203][ T1185] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 608.714223][T14663] Dev loop9: unable to read RDB block 7 [ 608.714265][T14663] loop9: unable to read partition table [ 608.714465][T14663] loop9: partition table beyond EOD, truncated [ 608.714493][T14663] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 608.725075][ T6060] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 608.762640][ T5700] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 608.780971][ T5700] usb 4-1: USB disconnect, device number 22 [ 608.987077][T14669] "syz.2.2709" (14669) uses obsolete ecb(arc4) skcipher [ 609.257513][T14673] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 609.536405][T14685] sg_write: data in/out 455132/240 bytes for SCSI command 0x0-- guessing data in; [ 609.536405][T14685] program syz.3.2714 not setting count and/or reply_len properly [ 609.563257][T14685] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2714'. [ 609.606996][T14692] veth1_to_bond: entered allmulticast mode [ 609.607283][T14692] veth1_to_bond: left allmulticast mode [ 609.780386][T14702] loop9: detected capacity change from 0 to 7 [ 609.781076][ T1185] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 609.781863][T14702] Dev loop9: unable to read RDB block 7 [ 609.781906][T14702] loop9: unable to read partition table [ 609.782098][T14702] loop9: partition table beyond EOD, truncated [ 609.782117][T14702] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 609.836611][ T5790] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 610.121300][T14714] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 610.188356][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.189065][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.258826][ T5006] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 610.292454][T14721] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2724'. [ 610.433796][ T5006] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 610.433827][ T5006] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 610.433854][ T5006] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 610.447027][ T5006] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 610.447055][ T5006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.447076][ T5006] usb 3-1: Product: syz [ 610.447091][ T5006] usb 3-1: Manufacturer: syz [ 610.447106][ T5006] usb 3-1: SerialNumber: syz [ 610.449001][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2727'. [ 610.457865][ T5006] usb 3-1: config 0 descriptor?? [ 610.479149][T14712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 610.479267][T14712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 610.481370][ T5006] usb 3-1: ucan: probing device on interface #0 [ 610.789281][T14743] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 610.870064][T14746] binder: 14745:14746 ioctl c0306201 2000000003c0 returned -14 [ 611.000186][T14750] loop9: detected capacity change from 0 to 7 [ 611.002628][ T12] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 611.002868][T14750] Dev loop9: unable to read RDB block 7 [ 611.002905][T14750] loop9: unable to read partition table [ 611.003164][T14750] loop9: partition table beyond EOD, truncated [ 611.003181][T14750] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 611.008050][T14749] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 611.161869][T14712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.164644][T14712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.232960][ T5006] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 611.268107][ T5006] usb 3-1: USB disconnect, device number 6 [ 611.374679][T14756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.375237][T14756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.378564][T14756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.391287][T14756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.798878][ T5715] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 611.888232][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 611.928879][ T5715] usb 4-1: device descriptor read/64, error -71 [ 611.971349][T14768] overlayfs: missing 'workdir' [ 612.147395][T14775] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 612.169532][ T5715] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 612.290874][T14780] overlayfs: conflicting options: userxattr,metacopy=on [ 612.298943][ T5715] usb 4-1: device descriptor read/64, error -71 [ 612.331452][T14780] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2744'. [ 612.409940][ T5715] usb usb4-port1: attempt power cycle [ 612.429861][T14784] loop9: detected capacity change from 0 to 7 [ 612.431455][ T184] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 612.431708][T14784] Dev loop9: unable to read RDB block 7 [ 612.431747][T14784] loop9: unable to read partition table [ 612.431938][T14784] loop9: partition table beyond EOD, truncated [ 612.431969][T14784] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 612.446945][ T5790] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 612.759035][ T5715] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 612.779463][ T5715] usb 4-1: device descriptor read/8, error -71 [ 613.018776][T14790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.027887][ T5715] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 613.037392][T14790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.045711][T14790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.046247][T14790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.059982][ T5715] usb 4-1: device descriptor read/8, error -71 [ 613.169969][ T5715] usb usb4-port1: unable to enumerate USB device [ 613.498508][T14797] comedi comedi2: c6xdigio: I/O base address not correctly aligned [ 613.555058][T14802] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 613.912023][T14821] loop9: detected capacity change from 0 to 7 [ 613.912707][T14813] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 613.912952][T14821] Dev loop9: unable to read RDB block 7 [ 613.912993][T14821] loop9: unable to read partition table [ 613.913210][T14821] loop9: partition table beyond EOD, truncated [ 613.913228][T14821] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 613.913865][T14818] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 614.115467][T14828] netlink: 'syz.4.2760': attribute type 29 has an invalid length. [ 614.115823][T14830] netlink: 'syz.4.2760': attribute type 29 has an invalid length. [ 614.217371][T14835] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 614.281674][T14837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.283165][T14837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.286271][T14837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.286856][T14837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.330562][ T5686] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 614.444660][T14839] overlayfs: failed to resolve './file2': -2 [ 614.483352][T14839] program syz.0.2764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.489383][ T5686] usb 3-1: Using ep0 maxpacket: 8 [ 614.509261][ T5686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.509291][ T5686] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 614.509307][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 614.509322][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 614.509335][ T5686] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 614.511393][ T5686] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 614.511422][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 614.511435][ T5686] usb 3-1: Product: syz [ 614.511443][ T5686] usb 3-1: Manufacturer: syz [ 614.511452][ T5686] usb 3-1: SerialNumber: syz [ 614.516908][ T5686] usb 3-1: config 0 descriptor?? [ 614.740748][T14849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.741293][T14849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.762066][ T5686] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 614.762347][ T5686] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 614.774934][ T5686] usb 3-1: USB disconnect, device number 7 [ 615.007526][T14857] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 615.049278][ T5782] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 615.209265][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 615.212163][ T5782] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 615.215089][ T5782] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 615.215118][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.215140][ T5782] usb 4-1: Product: syz [ 615.215155][ T5782] usb 4-1: Manufacturer: syz [ 615.215170][ T5782] usb 4-1: SerialNumber: syz [ 615.275825][ T5782] usb 4-1: config 0 descriptor?? [ 615.278552][T14847] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 615.304092][ T5782] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 615.327053][T14861] loop9: detected capacity change from 0 to 7 [ 615.335495][ T4334] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 615.335766][T14861] Dev loop9: unable to read RDB block 7 [ 615.335805][T14861] loop9: unable to read partition table [ 615.336004][T14861] loop9: partition table beyond EOD, truncated [ 615.336031][T14861] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 615.461627][ T5790] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 615.485874][ T5686] usb 4-1: USB disconnect, device number 27 [ 615.486394][T14812] usb 4-1: Failed to submit usb control message: -71 [ 615.486427][T14812] usb 4-1: unable to send the bmi data to the device: -71 [ 615.486446][T14812] usb 4-1: unable to get target info from device [ 615.486471][T14812] usb 4-1: could not get target info (-71) [ 615.486764][T14812] usb 4-1: could not probe fw (-71) [ 615.689505][ T5782] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 615.839416][ T5782] usb 3-1: Using ep0 maxpacket: 16 [ 615.841097][ T5782] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 615.841124][ T5782] usb 3-1: config 251 has no interface number 0 [ 615.841159][ T5782] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 615.841173][ T5782] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 615.841187][ T5782] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 615.841200][ T5782] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 615.841215][ T5782] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 615.841230][ T5782] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 615.841245][ T5782] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 42874, setting to 1024 [ 615.841261][ T5782] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.841276][ T5782] usb 3-1: config 251 interface 202 has no altsetting 0 [ 615.842805][ T5782] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 615.842826][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 615.842838][ T5782] usb 3-1: Product: syz [ 615.842848][ T5782] usb 3-1: SerialNumber: syz [ 615.848137][T14866] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 615.985424][T14869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.985968][T14869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.997142][T14868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.997679][T14868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.050791][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.051218][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.068516][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.070840][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.086185][T14871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.087779][T14871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.135720][ T5782] cxacru 3-1:251.202: cxacru_bind: interface has incorrect endpoints [ 616.135854][ T5782] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 616.159724][ T5782] usb 3-1: USB disconnect, device number 8 [ 616.435018][T14880] IPv6: syztnl1: Disabled Multicast RS [ 616.539515][ T5782] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 616.576335][T14886] xt_l2tp: missing protocol rule (udp|l2tpip) [ 616.692451][ T5782] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 616.692482][ T5782] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 616.692508][ T5782] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 616.694612][ T5782] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 616.694641][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.694662][ T5782] usb 3-1: Product: syz [ 616.694676][ T5782] usb 3-1: Manufacturer: syz [ 616.694685][ T5782] usb 3-1: SerialNumber: syz [ 616.708731][ T5782] usb 3-1: config 0 descriptor?? [ 616.709909][T14875] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 616.710026][T14875] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 616.731329][ T5715] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 616.788844][ T5782] usb 3-1: ucan: probing device on interface #0 [ 616.814264][T14890] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2783'. [ 616.860428][ T5715] usb 4-1: device descriptor read/64, error -71 [ 616.990126][T14895] loop9: detected capacity change from 0 to 7 [ 616.992133][ T3575] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 616.998611][T14895] Dev loop9: unable to read RDB block 7 [ 617.004521][T14895] loop9: unable to read partition table [ 617.018157][T14895] loop9: partition table beyond EOD, truncated [ 617.018194][T14895] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 617.036449][ T5790] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 617.109541][ T5715] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 617.239569][ T5715] usb 4-1: device descriptor read/64, error -71 [ 617.317073][T14875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.317841][T14875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.350308][ T5715] usb usb4-port1: attempt power cycle [ 617.360516][ T5782] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 617.379254][ T5782] usb 3-1: USB disconnect, device number 9 [ 617.572707][T14897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.573278][T14897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.699634][ T5715] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 617.729195][ T5715] usb 4-1: device descriptor read/8, error -71 [ 617.964972][ T5715] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 617.980663][ T5715] usb 4-1: device descriptor read/8, error -71 [ 618.090219][ T5715] usb usb4-port1: unable to enumerate USB device [ 618.185167][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.187097][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.363811][T14921] loop9: detected capacity change from 0 to 7 [ 618.364417][ T3575] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 618.364638][T14921] Dev loop9: unable to read RDB block 7 [ 618.364678][T14921] loop9: unable to read partition table [ 618.364874][T14921] loop9: partition table beyond EOD, truncated [ 618.364894][T14921] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 618.378529][ T6059] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 618.904429][T14925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.905190][T14925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.936600][T14925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.937180][T14925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.966231][T14927] /dev/nullb0: Can't open blockdev [ 619.399946][ T5782] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 619.532391][ T5782] usb 3-1: device descriptor read/64, error -71 [ 619.561479][T14940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.562051][T14940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.686327][ T5615] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 619.686345][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 619.686379][ T5615] Tainted: [L]=SOFTLOCKUP [ 619.686384][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.686393][ T5615] Workqueue: hci3 hci_rx_work [ 619.686414][ T5615] Call Trace: [ 619.686419][ T5615] [ 619.686426][ T5615] dump_stack_lvl+0xe8/0x150 [ 619.686444][ T5615] sysfs_create_dir_ns+0x271/0x2a0 [ 619.686461][ T5615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 619.686478][ T5615] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 619.686495][ T5615] ? rt_spin_unlock+0x160/0x200 [ 619.686512][ T5615] kobject_add_internal+0x631/0xd10 [ 619.686532][ T5615] kobject_add+0x163/0x240 [ 619.686549][ T5615] ? __pfx_kobject_add+0x10/0x10 [ 619.686567][ T5615] ? get_device_parent+0x370/0x3a0 [ 619.686586][ T5615] device_add+0x408/0xb90 [ 619.686607][ [ 619.686607][ T5615] hci_conn_add_sysfs+0xd5/0x210 [ 619.686627][ T5615] le_conn_complete_evt+0x10e6/0x16b0 [ 619.686647][ T5615] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 619.686662][ T5615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 619.686680][ T5615] ? lockdep_hardirqs_on+0x7a/0x110 [ 619.686699][ T5615] ? skb_pull_data+0xfb/0x200 [ 619.686714][ T5615] hci_le_conn_complete_evt+0x187/0x470 [ 619.686732][ T5615] hci_event_packet+0x659/0xef0 [ 619.686753][ T5615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 619.686768][ T5615] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 619.686781][ T5615] ? __pfx_hci_event_packet+0x10/0x10 [ 619.686799][ T5615] ? rt_spin_unlock+0x14f/0x200 [ 619.686818][ T5615] ? hci_send_to_monitor+0xe2/0x590 [ 619.686836][ T5615] hci_rx_work+0x3ee/0x1040 [ 619.686858][ T5615] ? process_one_work+0x8be/0x1630 [ 619.686874][ T5615] process_one_work+0x98b/0x1630 [ 619.686900][ T5615] ? __pfx_process_one_work+0x10/0x10 [ 619.686915][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 619.686940][ T5615] worker_thread+0xb49/0x1140 [ 619.686970][ T5615] kthread+0x388/0x470 [ 619.686982][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 619.686998][ T5615] ? __pfx_kthread+0x10/0x10 [ 619.687011][ T5615] ret_from_fork+0x514/0xb70 [ 619.687027][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 619.687041][ T5615] ? __switch_to+0xc79/0x1410 [ 619.687060][ T5615] ? __pfx_kthread+0x10/0x10 [ 619.687073][ T5615] ret_from_fork_asm+0x1a/0x30 [ 619.687097][ T5615] [ 619.687115][ T5615] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 619.687139][ T5615] Bluetooth: hci3: failed to register connection device [ 619.792550][ T5782] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 619.898898][ T5615] ================================================================== [ 619.898913][ T5615] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560 [ 619.898949][ T5615] Read of size 8 at addr ffff88803cc27500 by task kworker/u9:3/5615 [ 619.898970][ T5615] [ 619.898985][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 619.899018][ T5615] Tainted: [L]=SOFTLOCKUP [ 619.899028][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.899043][ T5615] Workqueue: hci3 hci_rx_work [ 619.899076][ T5615] Call Trace: [ 619.899086][ T5615] [ 619.899096][ T5615] dump_stack_lvl+0xe8/0x150 [ 619.899125][ T5615] print_address_description+0x55/0x1e0 [ 619.899155][ T5615] ? l2cap_connect_cfm+0x902/0x1560 [ 619.899183][ T5615] print_report+0x58/0x70 [ 619.899210][ T5615] kasan_report+0x117/0x150 [ 619.899242][ T5615] ? l2cap_connect_cfm+0x902/0x1560 [ 619.899273][ T5615] l2cap_connect_cfm+0x902/0x1560 [ 619.899306][ T5615] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 619.899340][ T5615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 619.899373][ T5615] ? lockdep_hardirqs_on+0x7a/0x110 [ 619.899407][ T5615] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 619.899440][ T5615] ? mutex_lock_nested+0x152/0x1d0 [ 619.899465][ T5615] ? hci_connect_cfm+0x2c/0x140 [ 619.899489][ T5615] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 619.899517][ T5615] hci_connect_cfm+0x95/0x140 [ 619.899543][ T5615] le_conn_complete_evt+0x1134/0x16b0 [ 619.899573][ T5615] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 619.899599][ T5615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 619.899632][ T5615] ? lockdep_hardirqs_on+0x7a/0x110 [ 619.899665][ T5615] ? skb_pull_data+0xfb/0x200 [ 619.899689][ T5615] hci_le_conn_complete_evt+0x187/0x470 [ 619.899717][ T5615] hci_event_packet+0x659/0xef0 [ 619.899752][ T5615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 619.899779][ T5615] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 619.899808][ T5615] ? __pfx_hci_event_packet+0x10/0x10 [ 619.899838][ T5615] ? rt_spin_unlock+0x14f/0x200 [ 619.899868][ T5615] ? hci_send_to_monitor+0xe2/0x590 [ 619.899897][ T5615] hci_rx_work+0x3ee/0x1040 [ 619.899933][ T5615] ? process_one_work+0x8be/0x1630 [ 619.899960][ T5615] process_one_work+0x98b/0x1630 [ 619.899996][ T5615] ? __pfx_process_one_work+0x10/0x10 [ 619.900023][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 619.900059][ T5615] worker_thread+0xb49/0x1140 [ 619.900100][ T5615] kthread+0x388/0x470 [ 619.900121][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 619.900150][ T5615] ? __pfx_kthread+0x10/0x10 [ 619.900172][ T5615] ret_from_fork+0x514/0xb70 [ 619.900198][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 619.900222][ T5615] ? __switch_to+0xc79/0x1410 [ 619.900257][ T5615] ? __pfx_kthread+0x10/0x10 [ 619.900279][ T5615] ret_from_fork_asm+0x1a/0x30 [ 619.900314][ T5615] [ 619.900323][ T5615] [ 619.900336][ T5615] Allocated by task 5615: [ 619.900348][ T5615] kasan_save_track+0x3e/0x80 [ 619.900374][ T5615] __kasan_kmalloc+0x93/0xb0 [ 619.900401][ T5615] __kmalloc_cache_noprof+0x3a6/0x690 [ 619.900429][ T5615] l2cap_chan_create+0x51/0x7a0 [ 619.900458][ T5615] l2cap_sock_new_connection_cb+0x191/0x2f0 [ 619.900489][ T5615] l2cap_connect_cfm+0x368/0x1560 [ 619.900514][ T5615] hci_connect_cfm+0x95/0x140 [ 619.900535][ T5615] le_conn_complete_evt+0x1134/0x16b0 [ 619.900559][ T5615] hci_le_conn_complete_evt+0x187/0x470 [ 619.900581][ T5615] hci_event_packet+0x659/0xef0 [ 619.900610][ T5615] hci_rx_work+0x3ee/0x1040 [ 619.900639][ T5615] process_one_work+0x98b/0x1630 [ 619.900664][ T5615] worker_thread+0xb49/0x1140 [ 619.900690][ T5615] kthread+0x388/0x470 [ 619.900709][ T5615] ret_from_fork+0x514/0xb70 [ 619.900731][ T5615] ret_from_fork_asm+0x1a/0x30 [ 619.900756][ T5615] [ 619.900762][ T5615] Freed by task 14951: [ 619.900772][ T5615] kasan_save_track+0x3e/0x80 [ 619.900796][ T5615] kasan_save_free_info+0x46/0x50 [ 619.900817][ T5615] __kasan_slab_free+0x5c/0x80 [ 619.900843][ T5615] kfree+0x1c5/0x6c0 [ 619.900867][ T5615] l2cap_sock_cleanup_listen+0xf0/0x440 [ 619.900895][ T5615] l2cap_sock_release+0x6e/0x270 [ 619.900921][ T5615] __sock_release+0xb9/0x250 [ 619.900941][ T5615] sock_close+0x1c/0x30 [ 619.900960][ T5615] __fput+0x461/0xa70 [ 619.900982][ T5615] task_work_run+0x1d9/0x270 [ 619.901003][ T5615] exit_to_user_mode_loop+0xf3/0x4d0 [ 619.901034][ T5615] do_syscall_64+0x33e/0xf80 [ 619.901053][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.901074][ T5615] [ 619.901080][ T5615] The buggy address belongs to the object at ffff88803cc27000 [ 619.901080][ T5615] which belongs to the cache kmalloc-2k of size 2048 [ 619.901099][ T5615] The buggy address is located 1280 bytes inside of [ 619.901099][ T5615] freed 2048-byte region [ffff88803cc27000, ffff88803cc27800) [ 619.901123][ T5615] [ 619.901129][ T5615] The buggy address belongs to the physical page: [ 619.901147][ T5615] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803cc24000 pfn:0x3cc20 [ 619.901169][ T5615] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 619.901187][ T5615] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 619.901207][ T5615] page_type: f5(slab) [ 619.901229][ T5615] raw: 0080000000000240 ffff88813fea2000 ffffea0000f15410 ffff88813fea0c88 [ 619.901250][ T5615] raw: ffff88803cc24000 0000000800080007 00000000f5000000 0000000000000000 [ 619.901272][ T5615] head: 0080000000000240 ffff88813fea2000 ffffea0000f15410 ffff88813fea0c88 [ 619.901293][ T5615] head: ffff88803cc24000 0000000800080007 00000000f5000000 0000000000000000 [ 619.901314][ T5615] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 619.901348][ T5615] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 619.901362][ T5615] page dumped because: kasan: bad access detected [ 619.901373][ T5615] page_owner tracks the page as allocated [ 619.901381][ T5615] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9134, tgid 9134 (syz-executor), ts 325772650143, free_ts 325575944207 [ 619.901420][ T5615] post_alloc_hook+0x1f9/0x250 [ 619.901448][ T5615] get_page_from_freelist+0x27d6/0x2850 [ 619.901480][ T5615] __alloc_frozen_pages_noprof+0x18d/0x380 [ 619.901510][ T5615] allocate_slab+0x74/0x5e0 [ 619.901532][ T5615] refill_objects+0x33c/0x3d0 [ 619.901552][ T5615] __pcs_replace_empty_main+0x373/0x720 [ 619.901574][ T5615] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 619.901604][ T5615] pskb_expand_head+0x230/0x1390 [ 619.901635][ T5615] netlink_trim+0x1b3/0x2c0 [ 619.901659][ T5615] netlink_broadcast_filtered+0x80/0xea0 [ 619.901684][ T5615] nlmsg_notify+0xf0/0x1a0 [ 619.901709][ T5615] __dev_notify_flags+0xf2/0x310 [ 619.901736][ T5615] netif_change_flags+0xe8/0x1a0 [ 619.901762][ T5615] do_setlink+0xfa5/0x45a0 [ 619.901790][ T5615] rtnl_newlink+0x15ad/0x1bb0 [ 619.901814][ T5615] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 619.901845][ T5615] page last free pid 6059 tgid 6059 stack trace: [ 619.901859][ T5615] __free_frozen_pages+0x1075/0x11b0 [ 619.901886][ T5615] __slab_free+0x252/0x2a0 [ 619.901914][ T5615] qlist_free_all+0x99/0x100 [ 619.901937][ T5615] kasan_quarantine_reduce+0x148/0x160 [ 619.901963][ T5615] __kasan_slab_alloc+0x22/0x80 [ 619.901990][ T5615] kmem_cache_alloc_noprof+0x33b/0x680 [ 619.902016][ T5615] do_getname+0x2e/0x250 [ 619.902036][ T5615] do_sys_openat2+0xca/0x200 [ 619.902058][ T5615] __x64_sys_openat+0x138/0x170 [ 619.902081][ T5615] do_syscall_64+0x15f/0xf80 [ 619.902100][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.902121][ T5615] [ 619.902127][ T5615] Memory state around the buggy address: [ 619.902139][ T5615] ffff88803cc27400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 619.902155][ T5615] ffff88803cc27480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 619.902171][ T5615] >ffff88803cc27500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 619.902183][ T5615] ^ [ 619.902195][ T5615] ffff88803cc27580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 619.902210][ T5615] ffff88803cc27600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 619.902221][ T5615] ================================================================== [ 619.904880][ T5615] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 619.904903][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 619.904934][ T5615] Tainted: [L]=SOFTLOCKUP [ 619.904942][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.904956][ T5615] Workqueue: hci3 hci_rx_work [ 619.904988][ T5615] Call Trace: [ 619.904997][ T5615] [ 619.905006][ T5615] vpanic+0x56c/0xa60 [ 619.905041][ T5615] ? __pfx_vpanic+0x10/0x10 [ 619.905075][ T5615] panic+0xc5/0xd0 [ 619.905105][ T5615] ? __pfx_panic+0x10/0x10 [ 619.905135][ T5615] ? preempt_schedule_thunk+0x16/0x40 [ 619.905169][ T5615] ? l2cap_connect_cfm+0x902/0x1560 [ 619.905197][ T5615] ? preempt_schedule_thunk+0x16/0x40 [ 619.905230][ T5615] ? l2cap_connect_cfm+0x902/0x1560 [ 619.905258][ T5615] check_panic_on_warn+0x89/0xb0 [ 619.905282][ T5615] ? l2cap_connect_cfm+0x902/0x1560 [ 619.905309][ T5615] end_report+0x73/0x170 [ 619.905352][ T5615] ? l2cap_connect_cfm+0x902/0x1560 [ 619.905383][ T5615] kasan_report+0x128/0x150 [ 619.905414][ T5615] ? l2cap_connect_cfm+0x902/0x1560 [ 619.905445][ T5615] l2cap_connect_cfm+0x902/0x1560 [ 619.905478][ T5615] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 619.905506][ T5615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 619.905538][ T5615] ? lockdep_hardirqs_on+0x7a/0x110 [ 619.905569][ T5615] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 619.905602][ T5615] ? mutex_lock_nested+0x152/0x1d0 [ 619.905628][ T5615] ? hci_connect_cfm+0x2c/0x140 [ 619.905652][ T5615] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 619.905680][ T5615] hci_connect_cfm+0x95/0x140 [ 619.905705][ T5615] le_conn_complete_evt+0x1134/0x16b0 [ 619.905736][ T5615] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 619.905763][ T5615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 619.905795][ T5615] ? lockdep_hardirqs_on+0x7a/0x110 [ 619.905828][ T5615] ? skb_pull_data+0xfb/0x200 [ 619.905852][ T5615] hci_le_conn_complete_evt+0x187/0x470 [ 619.905879][ T5615] hci_event_packet+0x659/0xef0 [ 619.905914][ T5615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 619.905941][ T5615] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 619.905963][ T5615] ? __pfx_hci_event_packet+0x10/0x10 [ 619.905995][ T5615] ? rt_spin_unlock+0x14f/0x200 [ 619.906025][ T5615] ? hci_send_to_monitor+0xe2/0x590 [ 619.906054][ T5615] hci_rx_work+0x3ee/0x1040 [ 619.906089][ T5615] ? process_one_work+0x8be/0x1630 [ 619.906116][ T5615] process_one_work+0x98b/0x1630 [ 619.906152][ T5615] ? __pfx_process_one_work+0x10/0x10 [ 619.906178][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 619.906214][ T5615] worker_thread+0xb49/0x1140 [ 619.906254][ T5615] kthread+0x388/0x470 [ 619.906373][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 619.906441][ T5615] ? __pfx_kthread+0x10/0x10 [ 619.906504][ T5615] ret_from_fork+0x514/0xb70 [ 619.906570][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 619.906630][ T5615] ? __switch_to+0xc79/0x1410 [ 619.906717][ T5615] ? __pfx_kthread+0x10/0x10 [ 619.906776][ T5615] ret_from_fork_asm+0x1a/0x30 [ 619.906863][ T5615] [ 619.907195][ T5615] Kernel Offset: disabled