last executing test programs: 20m21.362877324s ago: executing program 32 (id=361): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 11m39.136572467s ago: executing program 2 (id=2775): lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x14001, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 11m38.945418723s ago: executing program 2 (id=2777): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x5, &(0x7f0000000140)="26a1", 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000002e80), 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@mcast1, 0x4, 0x3c}, 0x2, @in6=@dev}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x20, @in=@rand_addr=0x64010101, 0x0, 0x4}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x84) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 11m38.712252197s ago: executing program 33 (id=2777): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x5, &(0x7f0000000140)="26a1", 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000002e80), 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@mcast1, 0x4, 0x3c}, 0x2, @in6=@dev}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x20, @in=@rand_addr=0x64010101, 0x0, 0x4}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x84) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 4m49.818021109s ago: executing program 34 (id=4549): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000140), 0x0, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m11.806660851s ago: executing program 35 (id=5083): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) socket(0x2, 0x805, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x15, 0x200, &(0x7f0000000880)="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"}) 2m8.984933786s ago: executing program 1 (id=5096): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000040)=""/125, 0x7d}], 0x1, 0x1, 0x4) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r2 = socket(0x2, 0x2, 0x0) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r3, 0x5, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 2m8.395545332s ago: executing program 36 (id=5096): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000040)=""/125, 0x7d}], 0x1, 0x1, 0x4) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r2 = socket(0x2, 0x2, 0x0) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r3, 0x5, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 1m5.593929841s ago: executing program 7 (id=5286): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c094}, 0xc000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c0d0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) accept4$alg(r1, 0x0, 0x0, 0x80000) 1m4.193429983s ago: executing program 7 (id=5295): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r0, r0, 0x3, 0xfffffffffffffffa, 0x3fff}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000000240)='M', 0x1, 0x56149216}) 1m3.932191035s ago: executing program 7 (id=5297): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x13, 0x5, "138fcb3ee6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x10}}) 1m1.366537715s ago: executing program 7 (id=5300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m1.293736239s ago: executing program 7 (id=5301): open(0x0, 0x800c0, 0x8) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x5, 0x8}, {0x7fff, 0xe743, 0xe000, 0x5}}}}, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1m1.091703385s ago: executing program 8 (id=5302): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c094}, 0xc000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c0d0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) accept4$alg(r1, 0x0, 0x0, 0x80000) 1m0.911062916s ago: executing program 7 (id=5304): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 1m0.434333992s ago: executing program 37 (id=5304): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 59.623065077s ago: executing program 8 (id=5307): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='cpuacct'}, {@subsystem='cpuset'}, {@subsystem='memory'}, {@xattr}]}) 59.397165675s ago: executing program 8 (id=5308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x13, 0x5, "138fcb3ee6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x10}}) 56.848798949s ago: executing program 8 (id=5310): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 56.656682336s ago: executing program 8 (id=5311): open(0x0, 0x800c0, 0x8) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x5, 0x8}, {0x7fff, 0xe743, 0xe000, 0x5}}}}, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 56.156997011s ago: executing program 8 (id=5312): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000100)={0x0, 0x22, 0x3, {[@global=@item_012={0x1, 0x1, 0x2, 'X'}, @local=@item_012={0x0, 0x2, 0x1}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x6ed}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x60, 0xd, 0xb9, "f4bd1b23b5b04c7633421a6fa1874f36f05f9038062631532bf6f6e1ab32f09f6c5d3dd4af6f8f4032817d1f04a3b7b95e7c880473053dc48f95e0930beca1cb450a501fdd00c964466ab80135744adc32fced58342f9195b234fd37d1ded1ea2c43c53a2050cb4857a4f1169062893db13b85c48a7213f4c9db229d397763078e55b0a74430f8ab8947cccbc871a6687cadb2a5c87a17316cd0deca32e329607d8f7887b175d152f2f5c7261538ccd3e6b393127b81fb02ea"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x93}, &(0x7f0000000500)={0x20, 0x1, 0xec, "1d78881b418870836253778108eb2289c043dd6b104b2a806d36bc8242adc39843180c922f81595fdc54a99333ef165b3d1dab5c6a03843359a2b6f2d723736af02fe7ea0c6f19e3a83843aec728d364f907828801815044d3241f47f73005f7619cafb9d45880d4a0df2708d410a54a1947bc6aaec05a5da595467d029aaff4a70ed6424e33ff18847e61bac55ccdb31d23a7c6004e6fcbbe20c2d57d8e8afec1302dc9aa804d942e2bc0f0722cf3f89dbb9372d4e3a197603008147730fb65c2e220a8bebc1c251d7139f7a63ffa7f858396975ef9875bce6ad1c459351ac10d7b22d8eed7885e226eccf8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0xc1}}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x20000) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) 55.790715229s ago: executing program 38 (id=5312): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000100)={0x0, 0x22, 0x3, {[@global=@item_012={0x1, 0x1, 0x2, 'X'}, @local=@item_012={0x0, 0x2, 0x1}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x6ed}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x60, 0xd, 0xb9, "f4bd1b23b5b04c7633421a6fa1874f36f05f9038062631532bf6f6e1ab32f09f6c5d3dd4af6f8f4032817d1f04a3b7b95e7c880473053dc48f95e0930beca1cb450a501fdd00c964466ab80135744adc32fced58342f9195b234fd37d1ded1ea2c43c53a2050cb4857a4f1169062893db13b85c48a7213f4c9db229d397763078e55b0a74430f8ab8947cccbc871a6687cadb2a5c87a17316cd0deca32e329607d8f7887b175d152f2f5c7261538ccd3e6b393127b81fb02ea"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x93}, &(0x7f0000000500)={0x20, 0x1, 0xec, "1d78881b418870836253778108eb2289c043dd6b104b2a806d36bc8242adc39843180c922f81595fdc54a99333ef165b3d1dab5c6a03843359a2b6f2d723736af02fe7ea0c6f19e3a83843aec728d364f907828801815044d3241f47f73005f7619cafb9d45880d4a0df2708d410a54a1947bc6aaec05a5da595467d029aaff4a70ed6424e33ff18847e61bac55ccdb31d23a7c6004e6fcbbe20c2d57d8e8afec1302dc9aa804d942e2bc0f0722cf3f89dbb9372d4e3a197603008147730fb65c2e220a8bebc1c251d7139f7a63ffa7f858396975ef9875bce6ad1c459351ac10d7b22d8eed7885e226eccf8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0xc1}}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x20000) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) 53.8663719s ago: executing program 0 (id=5316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) listen(r0, 0x400000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140)="8c71baa306b388e96b4e4029d1fa9e6b143657d285f73e0c593e0ad47b29a4a224cebec2d9560913210e174fb97d579fe9e62819ff9c74ba992c07d8f3709963b0bc5ef2dfebb18bb0", 0x49, 0x4001, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @local}, 0x80) recvfrom(r1, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 52.973320272s ago: executing program 0 (id=5317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x13, 0x5, "138fcb3ee6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.355719879s ago: executing program 0 (id=5318): open(0x0, 0x800c0, 0x8) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x5, 0x8}, {0x7fff, 0xe743, 0xe000, 0x5}}}}, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 50.252292702s ago: executing program 6 (id=5319): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe2(&(0x7f0000000040), 0x80000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 50.213853931s ago: executing program 0 (id=5320): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 50.068231313s ago: executing program 0 (id=5321): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='\\\x00', 0x741200, &(0x7f0000000080)={@align, {0xa, 0x3ff, 0x9, 0x6}}, 0x4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000100)=0x5}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x454}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x7e8d, 0x6, 0x2, {0x5, @sliced={0x0, [0xf, 0x9, 0x39, 0x8001, 0x7ff, 0xfff8, 0xa, 0x4, 0x0, 0x2, 0x7, 0x6, 0x40, 0x3, 0x2, 0x4, 0x6, 0x1, 0x2, 0x6, 0x2, 0x0, 0x1, 0xff, 0x9, 0x8120, 0x2, 0x0, 0x4, 0x2, 0x5, 0xffff, 0x2, 0x0, 0x9, 0x6, 0x8001, 0x0, 0x7c98, 0x8, 0x3, 0x8, 0xf5c2, 0xb, 0x4, 0xd, 0x1, 0x500], 0x5}}, 0x2}) splice(r0, &(0x7f00000000c0)=0x3, r0, &(0x7f00000001c0)=0x100000000, 0x5, 0xa) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 49.635777437s ago: executing program 0 (id=5322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) listen(r0, 0x400000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140)="8c71baa306b388e96b4e4029d1fa9e6b143657d285f73e0c593e0ad47b29a4a224cebec2d9560913210e174fb97d579fe9e62819ff9c74ba992c07d8f3709963b0bc5ef2dfebb18bb0", 0x49, 0x4001, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @local}, 0x80) recvfrom(r1, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 49.299993759s ago: executing program 39 (id=5322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) listen(r0, 0x400000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140)="8c71baa306b388e96b4e4029d1fa9e6b143657d285f73e0c593e0ad47b29a4a224cebec2d9560913210e174fb97d579fe9e62819ff9c74ba992c07d8f3709963b0bc5ef2dfebb18bb0", 0x49, 0x4001, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @local}, 0x80) recvfrom(r1, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 46.648639837s ago: executing program 6 (id=5324): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 45.769673463s ago: executing program 6 (id=5325): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 44.379512831s ago: executing program 6 (id=5327): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 44.256073398s ago: executing program 6 (id=5328): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=@polexpire={0xd4, 0x1b, 0x1, 0x70bd2c, 0x25dfdbff, {{{@in=@private=0xa010100, @in6=@local, 0x4e22, 0x8000, 0x4e21, 0x5, 0x2, 0x20, 0x84be0cf7f0636606, 0x3c}, {0xb, 0x8, 0x0, 0x100000000, 0x0, 0x6, 0x1670, 0xa}, {0x7, 0x6, 0xfff, 0xc2e}, 0x3ff, 0x6e6bbb, 0x2, 0x1, 0x1, 0x1}, 0x2}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xd4}}, 0x40000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="050427bd7000fcdbdf250100010008000100", @ANYRES32=r4, @ANYBLOB="b400028038000100240001"], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, 0x0, &(0x7f0000002140)) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_j1939(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000012) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @multicast1}, &(0x7f0000000240)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x7800, 0x40, 0x4, 0xf5, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x22}, {[@cipso={0x86, 0xe, 0x2, [{0x1, 0x8, "61601b0ce644"}]}, @timestamp_addr={0x44, 0xc, 0x8, 0x1, 0xd, [{@remote, 0x92c}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xaf, 0x1, 0x4, [{@loopback, 0xa5}, {@loopback, 0x7}, {@empty, 0x2}]}, @ssrr={0x89, 0x17, 0xcb, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback]}, @rr={0x7, 0x7, 0x69, [@remote]}, @ssrr={0x89, 0xf, 0x61, [@loopback, @broadcast, @broadcast]}, @rr={0x7, 0x23, 0x2d, [@remote, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast, @loopback, @multicast1, @broadcast, @multicast1]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2f8, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8, 0x7, 0xfffff5cd}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x8000}, 0x2) 43.770225294s ago: executing program 6 (id=5330): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 43.221920856s ago: executing program 40 (id=5330): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 43.211123242s ago: executing program 9 (id=5332): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 42.223970369s ago: executing program 9 (id=5333): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 40.775182004s ago: executing program 9 (id=5334): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4844) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000480)={0x28, 0x7f8984227f9fdad, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000004c0)}) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x39, 0xa7, 0xae, 0x20, 0x1199, 0x9011, 0x2a64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0xf6, 0x6, 0x20, 0x1, "", [{{0x9, 0x4, 0xc9, 0x2, 0x0, 0xa7, 0x48, 0xda, 0x1}}, {{0x9, 0x4, 0xc7, 0xff, 0x0, 0xff, 0xff, 0xff, 0x9}}, {{0x9, 0x4, 0xa6, 0xf, 0x0, 0xff, 0x6, 0x7c, 0x2}}]}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) 38.972344396s ago: executing program 9 (id=5335): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 38.91097726s ago: executing program 9 (id=5336): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x8, @mcast2, 0x4}}, 0x0, 0x0, 0x1f, 0x0, "966e49d5b8a5f9bcbb98226a8aa02da2fa3bc307e45f0ac0835e9df4172024ab39323390f33b09244f06fade849a1328407c710ad5f3d8132174a1ad1a6bd5a5b361d6681b400175cd366a76294b5610"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 38.519118179s ago: executing program 9 (id=5337): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000200)="9017d3edd5986d2c0962e8fb1f2893827652017755301d28076500b2d6e2a18eaef6e2b4ff11e35aab5112e83a8d34773fbfb066b8f0859211567855ed82cc0dcb066f9dfb9746630a4691eaaa1ae3045d4adfaa96ff7998e06dbcf58a34d12efec5bac82de65eb55e018cc6725482b3fc22acf91546265809dfcdb83bc78e10f1175713cddf68e89abdd5430aca5df26d751174a8f2adcb2375e56b094643c2aa6aef2f472b06283bb50b7f4c49d0ffb29daf768e34ec40", 0xb8, 0x8000, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x33}, 0x57a54033}, 0x1c) fcntl$setpipe(r0, 0x407, 0x7000000) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x202) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000003c0)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) close_range(r1, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) ptrace(0x11, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) r7 = geteuid() setresuid(r6, 0xffffffffffffffff, r7) 38.26669113s ago: executing program 41 (id=5337): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000200)="9017d3edd5986d2c0962e8fb1f2893827652017755301d28076500b2d6e2a18eaef6e2b4ff11e35aab5112e83a8d34773fbfb066b8f0859211567855ed82cc0dcb066f9dfb9746630a4691eaaa1ae3045d4adfaa96ff7998e06dbcf58a34d12efec5bac82de65eb55e018cc6725482b3fc22acf91546265809dfcdb83bc78e10f1175713cddf68e89abdd5430aca5df26d751174a8f2adcb2375e56b094643c2aa6aef2f472b06283bb50b7f4c49d0ffb29daf768e34ec40", 0xb8, 0x8000, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x33}, 0x57a54033}, 0x1c) fcntl$setpipe(r0, 0x407, 0x7000000) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x202) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000003c0)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) close_range(r1, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) ptrace(0x11, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) r7 = geteuid() setresuid(r6, 0xffffffffffffffff, r7) 30.577724397s ago: executing program 2 (id=5323): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 29.644120437s ago: executing program 2 (id=5343): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 28.390911948s ago: executing program 2 (id=5345): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 27.940286606s ago: executing program 2 (id=5347): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 5) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) 27.389693146s ago: executing program 42 (id=5347): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 5) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) 15.031031827s ago: executing program 1 (id=5348): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4001af84, &(0x7f00000008c0)={0x2, 0x0, [{0x81b0004, 0x85, &(0x7f0000000180)=""/133}, {0x8080000, 0xf0, &(0x7f0000000580)=""/240}]}) 14.898143819s ago: executing program 1 (id=5371): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x897f, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x499, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x81, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x4, 0x5, "fe0e", "e28030"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x1, 0x5, 0x5}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x8, 0xec, "61bd23", "c5ba"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0xd, 0x81, "27cdbf8b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x3, 0x2, {0x7, 0x25, 0x1, 0xc, 0xff, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0xf5, 0x5, {0x7, 0x25, 0x1, 0x8, 0x3f, 0xa4}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 14.319787976s ago: executing program 4 (id=5373): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 13.090288335s ago: executing program 4 (id=5374): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe2(&(0x7f0000000040), 0x80000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 12.59245153s ago: executing program 1 (id=5376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 12.473416167s ago: executing program 1 (id=5377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.045479416s ago: executing program 1 (id=5378): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x0, 0xb4, {0xb4, 0xf, "8a4786c5a1002d608d0c04e0171a7f03f073f5f8f4118230c36a76a75351f55e167b114755dc8f150b539bca3a4d3d44ff36c51211f6f2a2bfd2af39d78a2d0647a2bf1f9f29837e1fe6f4f831276f07f5e8b6e73fa624e74da810fbecd0d1e5ce484260efd06b5d15d2b62a0a78e53a1f224d42a82e4696d84eaa45ae4228fa45bdbd5e7e3701bec223b39e87a94ed099a162aefe9634da0050e562c524af799a9b2a55913f487381aa43e0a993a5b8361c"}}, &(0x7f0000000140)={0x0, 0x3, 0x58, @string={0x58, 0x3, "70a8ced6ee795f302e6a8dea5a1e6b10d2fc3fdace9a05e6ba714e8ee9acb702f79fddb51f8d41b3b72cb9b7cc051130f11b293ea104d69a50491dbf203d0f6e7cde7b3d14c2c9674b882df5d9557f9e0fcb9c35096e"}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000200)={0x0, 0xe, 0x32, "f2a3a3b94c62658d9eaabd4ef3805597d15f14742f5488ccbd640dd21731e9a47bba8016eafe4475285b83df131ca1d15ab3"}, &(0x7f0000000540)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000240)=ANY=[@ANYBLOB="21ff0100000059a9bd"]}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f00000002c0), 0x9, 0xc00) 11.486760177s ago: executing program 43 (id=5378): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x0, 0xb4, {0xb4, 0xf, "8a4786c5a1002d608d0c04e0171a7f03f073f5f8f4118230c36a76a75351f55e167b114755dc8f150b539bca3a4d3d44ff36c51211f6f2a2bfd2af39d78a2d0647a2bf1f9f29837e1fe6f4f831276f07f5e8b6e73fa624e74da810fbecd0d1e5ce484260efd06b5d15d2b62a0a78e53a1f224d42a82e4696d84eaa45ae4228fa45bdbd5e7e3701bec223b39e87a94ed099a162aefe9634da0050e562c524af799a9b2a55913f487381aa43e0a993a5b8361c"}}, &(0x7f0000000140)={0x0, 0x3, 0x58, @string={0x58, 0x3, "70a8ced6ee795f302e6a8dea5a1e6b10d2fc3fdace9a05e6ba714e8ee9acb702f79fddb51f8d41b3b72cb9b7cc051130f11b293ea104d69a50491dbf203d0f6e7cde7b3d14c2c9674b882df5d9557f9e0fcb9c35096e"}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000200)={0x0, 0xe, 0x32, "f2a3a3b94c62658d9eaabd4ef3805597d15f14742f5488ccbd640dd21731e9a47bba8016eafe4475285b83df131ca1d15ab3"}, &(0x7f0000000540)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000240)=ANY=[@ANYBLOB="21ff0100000059a9bd"]}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f00000002c0), 0x9, 0xc00) 6.747030809s ago: executing program 4 (id=5385): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 6.508461268s ago: executing program 4 (id=5386): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6.436458273s ago: executing program 4 (id=5387): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x29, 0x10, 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8) r2 = fsopen(&(0x7f0000000140)='configfs\x00', 0x1) write(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000001380)=""/92, 0x5c}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/249, 0xf9}, {&(0x7f0000000280)=""/209, 0xd1}], 0x7}, 0x20122) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xa, @private2}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x4e20, 0x4159, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x58) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000020000000000000000000000007000000440d09ff"], 0x40}, 0x20002880) 6.190432632s ago: executing program 3 (id=5388): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x18, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 5.992675775s ago: executing program 3 (id=5389): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000000240)='M', 0x1, 0x56149216}) 5.933737294s ago: executing program 3 (id=5390): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 5.147278565s ago: executing program 3 (id=5391): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x12, 0x0, 0x6}]}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b5"], 0xc8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000a98000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000200)={{0x2000, 0xd000, 0xe, 0x0, 0x7, 0xee, 0x11, 0xfe, 0x0, 0x0, 0x8, 0xeb}, {0x4000, 0xeeef0000, 0xa, 0x7, 0x5, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x3}, {0x5000, 0x2000, 0xd, 0xc, 0x26, 0x8, 0x81, 0x3, 0x80, 0x4, 0x1, 0x70}, {0xdddd0000, 0x10000, 0xc, 0xfe, 0x6, 0x5, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0xe}, {0xb000, 0x80a0000, 0x10, 0xff, 0xc, 0x9, 0x6, 0x7, 0x5, 0x6, 0x28, 0xfc}, {0x4, 0x10000, 0x9, 0xb9, 0x3, 0x5, 0x42, 0x7, 0xb0, 0x1, 0xff, 0x10}, {0x8080000, 0x0, 0xe, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x14, 0x5}, {0x1, 0x200000, 0x0, 0x21, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x1000, 0x5}, {0x4000, 0xe}, 0x40000000, 0x0, 0xeeef0002, 0x200, 0x2, 0x901, 0xeeee0c00, [0x1, 0x1004, 0x5, 0x9]}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000003c0)={"d71ae363672ea0ba9386d7ce4dd9933807fef640e7adfc2f04ec97ddddbc85da3781f26af11251c77cf95249f8ba7b822219d36c428ef01bdb18264c55239436a39ab068acc2b355398a8c9fc52aca597d1ee0e259d307605cb13f73cff92861300a01cdd0f8b0ddc311bb6eeb88a571ac3b1d4ae0bfdfd753eb1eedaa4906cea65e8c36e788af1b50e539fd77fd00a195a0778b8391e4a0df5eb576b7db12ffadae25cad38685c2305331e03785ae2f40eeb99688e42e09b0ef865b8be5480cee94381ac868927f9856347de19b1890e9fb634af10e533a6ef0264aa221deda481d4400811e7e49cf45fb8797f480b52a53f98943305a5e5794ad7fbf9aa1db3c84eaefc6ac94f80e428e63310f4ec47c0edcc827cc9b1cd40ae46591946feb99059a6052e11c9a5807cc61b58f8ec5e61c0310832d126a112d77e485753b50d6ad5c2759e53626173ba603800705536198937f7c484d33b97bb64d62e7a7ed1f372710cfa9cf691ed644e39f1c5f230b77467c2e2e456b3de20789f08a40f7f9bba1058085c47a064e68301d9c3ccf8ea18e5b83afc3507e7b9035894aadc0b54bffe913dce5f42ef6bd6faa8e9889a85b5d1be2b0dbe96c3a0b2233954210bc937e598a5448bfcb066378f4ffa5978a4ef803456e4417b294882ef5220e374f212f80472eaddd2cbbbd36763387c3b979aa8551121a2279c0ea262cd4ae2983a12afb2aca312b6ea838b4c24a09902b7e36bf17eb8d31df59e3a659fdee3319761545836d3a65a80d42586cff378bf62bc2f587aa958f24d8b5b064c5ad9ca7b3e12aec3ff613289d076c2f083fa82e00ccde85a4c9998e46db619607dfd4a03a2bcc877a3e8e1b6777e5514f7e84cadcbd0148519c3a5a31280c60996fa81cc5f3c99e4802b1adcbd2236508b08c4d1c4fd7a81a352c26c802bd69a828db94b96ce7d9a290a6a95282f1923a8a208fae7461191ddeb2c526a79a33bb4907753101cec71ece25ca2b19e3751fb42fbb06994cffe8e17ea654b57fc8da45a30e884e9999e6e5d09a4479280d54d784ef2b332e2df55377b1b2407f67ca6468fb3f27dac63fccb0ab5deef3d71c5a0ab569ea36eabf024cf4d63ab84d197f8671c697c7a8124fd722edad1e14492439d63b55f08ea1b23ae7c78b8b28b1fbbf23ebab7720dba41ed355331408f9732d5b425592fd87520199c7fa007a71da3d4f905a938092c15ae1f736a1eb446535aa17658d149ee1fd83113e591be03a596a82e76554acbe8744921d8e10532e9201439f4ba4290ae6cae2c836e002a62ecbd9bddf404d67cdcb82c56ffb89742838e82f27d54a215fa0e5d83a28a958b6bf430ae987fd890a0a46b792df557ebbae2ffd0c890b07d1b50a6db616aeeb5c0b19d2c462e7cd0f85d31b04a9c7449de3d14900"}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f00000002c0)={0x49, 0xb49d, 0x4, 0x6, 0xffffffff}) 5.00440312s ago: executing program 5 (id=5392): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe2(&(0x7f0000000040), 0x80000) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 4.35598962s ago: executing program 4 (id=5393): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 3.612134902s ago: executing program 44 (id=5393): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 3.078196812s ago: executing program 3 (id=5395): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe0040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd55000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2caa, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x40000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x578, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000080)={0x0, 0x1, 0xc00, 0x8}) r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0xbd, {0xbd, 0x23, "83209617426ea46826b45c8b38c8f63fbed49b020e6c9deacb8b3e090993439074a9b0c0e007b09d499764c88afc2ee3a91c3324ce64572a1a2bf9d49642269e2d820cccd1e97aaec398d5d40ca8d7e742447079645e33243f5321feefa5fb04ef54006e213a37261939069ea987c014baf525e008a2689d053292f4998b426926a05b5ac73f7f6b57482e5afaa84b078b15779c081c2a2eb244a4e8e57604aca9723ab25df0e138a83502af52fd6904bacf2e610ddaf5340dfe9f"}}, &(0x7f0000000380)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "bdef513c81a47902cacf61d1088116ca2ee06625b1f8afdd7de370d24d1b1abadbbd55b548f1bc75d4c78aa586be0b9b8040104e10741fcfd075e8c85df291f9fef5c4a0d8a8ee17ee94470bf9f31342ffbdd3f3b3f88bcfba46b1200b540e8a658baa562f4776733f57a4addf7fb3cc7784e437f775748dfe60c8221ceb8d550b86aa9a998ad3218a64cc7d5fc6a836e9eb0e04651a3e095a7deb09eab05eed37ef7910f6f941"}}, &(0x7f0000000440)={0x0, 0xf, 0x112, {0x5, 0xf, 0x112, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x80, 0x79e, 0xc, [0xf0, 0xc0, 0xff003f, 0x3f3f, 0xff0000, 0xff0f]}, @generic={0xda, 0x10, 0x3, "80e2704fd0179293cbbdb2c3f1f9ce585c00282589485c5ff145f6c5d6fbd5915589d8531bd94d952de07860df2afda83c47bef911460853c9b8265240d3429bc69932aa7cd03eba0c3fedc4cca9d7eaf8379e8ae561fbcd7f157df29c2f46b5f18515082b27c94d42952e5429bca354535bf14a2f2b56800251730a8364bdb70824d2e1ef1dc2d2f1877c93e40cef701edaab163cc0cc6dc641275987d7d0a1c0c9935dc52b88098120620266ab9faaadad4cad9f92190bdc5e9513127ed326809c6afd566f3fe1450e07f281b56ee79d915908940d8f"}, @ssp_cap={0xc, 0x10, 0xa, 0xfa, 0x0, 0x7, 0x0, 0xd20}, @ptm_cap={0x3}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x40, 0x6, "fc992fd0", "912a4417"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0xfc, 0x8, 0x7, 0x9, 0x910e}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x0, 0x5, 0x99, "2565a10c1b90899cc26ca42f7d4f77a702291d8ded1a3e1c6b1851ea5f4d4f058d2ee82a73b649feda3daa6fd71379e16b55a86d2920cef3072363941dfe595ee3b444b0a4beb69be6863799c3ddb520b2d0b133a41bab3523f1106c280c74f5e3887e28104279d31d6dfbbe306a4cc9ea8d5eb9f13b084856b3cb3fff6f3da52b5113f0f17583304f17bc793008612b1daf4e0fa5a64281f8"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x2, 0x8, [0xff0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0xb, 0x2, "1bca"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "eb5a"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x33}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xc}}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x109301) r3 = socket$inet6(0xa, 0x3, 0x4) bind(r3, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220c0000002bc8530116070f4bbe8c0000c1a25cd8ca34ed0b13d3e4779267d85494e9ed503f9c7bbae5544794cb7384af6a40953122545af197eb5c0f24aaa63624b4042d2c56ba1f5a92a0204171395e7d602d1fbb6948637c3a05304c478f85589ef7ceee35f15ee3d424d6a71bab6a48308ca78f0978f0bb959c729e01b5fcd7b80e68fd7a003c58839576829fcb3cc1dfb135a8b462"], 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) syz_usb_control_io(r0, 0x0, 0x0) 1.834512014s ago: executing program 5 (id=5396): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439f"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x400000000000000) 1.454946643s ago: executing program 5 (id=5397): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000000240)='M', 0x1, 0x56149216}) 1.361826076s ago: executing program 5 (id=5398): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 645.26336ms ago: executing program 5 (id=5399): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439f"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={r3, 0x2, 0xff, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 597.911732ms ago: executing program 3 (id=5400): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000004d090400001207010300090501020000000000090582"], 0x0) syz_usb_disconnect(r0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687"], 0x0) 0s ago: executing program 5 (id=5401): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x12, 0x0, 0x6}]}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b5"], 0xc8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000a98000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x334}) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000200)={{0x2000, 0xd000, 0xe, 0x0, 0x7, 0xee, 0x11, 0xfe, 0x0, 0x0, 0x8, 0xeb}, {0x4000, 0xeeef0000, 0xa, 0x7, 0x5, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x3}, {0x5000, 0x2000, 0xd, 0xc, 0x26, 0x8, 0x81, 0x3, 0x80, 0x4, 0x1, 0x70}, {0xdddd0000, 0x10000, 0xc, 0xfe, 0x6, 0x5, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0xe}, {0xb000, 0x80a0000, 0x10, 0xff, 0xc, 0x9, 0x6, 0x7, 0x5, 0x6, 0x28, 0xfc}, {0x4, 0x10000, 0x9, 0xb9, 0x3, 0x5, 0x42, 0x7, 0xb0, 0x1, 0xff, 0x10}, {0x8080000, 0x0, 0xe, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x14, 0x5}, {0x1, 0x200000, 0x0, 0x21, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x1000, 0x5}, {0x4000, 0xe}, 0x40000000, 0x0, 0xeeef0002, 0x200, 0x2, 0x901, 0xeeee0c00, [0x1, 0x1004, 0x5, 0x9]}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000003c0)={"d71ae363672ea0ba9386d7ce4dd9933807fef640e7adfc2f04ec97ddddbc85da3781f26af11251c77cf95249f8ba7b822219d36c428ef01bdb18264c55239436a39ab068acc2b355398a8c9fc52aca597d1ee0e259d307605cb13f73cff92861300a01cdd0f8b0ddc311bb6eeb88a571ac3b1d4ae0bfdfd753eb1eedaa4906cea65e8c36e788af1b50e539fd77fd00a195a0778b8391e4a0df5eb576b7db12ffadae25cad38685c2305331e03785ae2f40eeb99688e42e09b0ef865b8be5480cee94381ac868927f9856347de19b1890e9fb634af10e533a6ef0264aa221deda481d4400811e7e49cf45fb8797f480b52a53f98943305a5e5794ad7fbf9aa1db3c84eaefc6ac94f80e428e63310f4ec47c0edcc827cc9b1cd40ae46591946feb99059a6052e11c9a5807cc61b58f8ec5e61c0310832d126a112d77e485753b50d6ad5c2759e53626173ba603800705536198937f7c484d33b97bb64d62e7a7ed1f372710cfa9cf691ed644e39f1c5f230b77467c2e2e456b3de20789f08a40f7f9bba1058085c47a064e68301d9c3ccf8ea18e5b83afc3507e7b9035894aadc0b54bffe913dce5f42ef6bd6faa8e9889a85b5d1be2b0dbe96c3a0b2233954210bc937e598a5448bfcb066378f4ffa5978a4ef803456e4417b294882ef5220e374f212f80472eaddd2cbbbd36763387c3b979aa8551121a2279c0ea262cd4ae2983a12afb2aca312b6ea838b4c24a09902b7e36bf17eb8d31df59e3a659fdee3319761545836d3a65a80d42586cff378bf62bc2f587aa958f24d8b5b064c5ad9ca7b3e12aec3ff613289d076c2f083fa82e00ccde85a4c9998e46db619607dfd4a03a2bcc877a3e8e1b6777e5514f7e84cadcbd0148519c3a5a31280c60996fa81cc5f3c99e4802b1adcbd2236508b08c4d1c4fd7a81a352c26c802bd69a828db94b96ce7d9a290a6a95282f1923a8a208fae7461191ddeb2c526a79a33bb4907753101cec71ece25ca2b19e3751fb42fbb06994cffe8e17ea654b57fc8da45a30e884e9999e6e5d09a4479280d54d784ef2b332e2df55377b1b2407f67ca6468fb3f27dac63fccb0ab5deef3d71c5a0ab569ea36eabf024cf4d63ab84d197f8671c697c7a8124fd722edad1e14492439d63b55f08ea1b23ae7c78b8b28b1fbbf23ebab7720dba41ed355331408f9732d5b425592fd87520199c7fa007a71da3d4f905a938092c15ae1f736a1eb446535aa17658d149ee1fd83113e591be03a596a82e76554acbe8744921d8e10532e9201439f4ba4290ae6cae2c836e002a62ecbd9bddf404d67cdcb82c56ffb89742838e82f27d54a215fa0e5d83a28a958b6bf430ae987fd890a0a46b792df557ebbae2ffd0c890b07d1b50a6db616aeeb5c0b19d2c462e7cd0f85d31b04a9c7449de3d14900"}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f00000002c0)={0x49, 0xb49d, 0x4, 0x6, 0xffffffff}) kernel console output (not intermixed with test programs): type (-22) [ 1279.785809][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.808340][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.821008][ T5904] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1279.847460][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.877523][ T5904] usb 8-1: config 0 descriptor?? [ 1279.972424][ T24] appleir 0003:05AC:8243.00C0: unknown main item tag 0x0 [ 1279.995571][T23161] netlink: 'syz.6.5206': attribute type 12 has an invalid length. [ 1280.015629][ T24] appleir 0003:05AC:8243.00C0: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1280.329064][ T5904] cp2112 0003:10C4:EA90.00C1: unknown main item tag 0x0 [ 1280.355859][ T5904] cp2112 0003:10C4:EA90.00C1: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1280.393715][T22207] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1280.521553][ T5904] cp2112 0003:10C4:EA90.00C1: Part Number: 0x82 Device Version: 0xFE [ 1280.535570][T22207] usb 7-1: device descriptor read/64, error -71 [ 1280.795691][T22207] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1280.896012][ T5935] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1280.933738][T22207] usb 7-1: device descriptor read/64, error -71 [ 1281.054165][T22207] usb usb7-port1: attempt power cycle [ 1281.071345][ T5935] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1281.096104][ T5935] usb 1-1: not running at top speed; connect to a high speed hub [ 1281.115275][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.126816][ T5935] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1281.148156][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1281.166151][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.183007][ T5935] usb 1-1: Product: syz [ 1281.188750][ T5935] usb 1-1: Manufacturer: syz [ 1281.193434][ T5935] usb 1-1: SerialNumber: syz [ 1281.352256][ T5948] usb 8-1: USB disconnect, device number 13 [ 1281.403891][T22207] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1281.446198][T22207] usb 7-1: device descriptor read/8, error -71 [ 1281.456733][ T5935] usb 1-1: USB disconnect, device number 115 [ 1281.705616][T22207] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1281.740281][T22207] usb 7-1: device descriptor read/8, error -71 [ 1281.854267][T22207] usb usb7-port1: unable to enumerate USB device [ 1281.952161][T23225] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5211'. [ 1282.085701][ T805] usb 9-1: USB disconnect, device number 13 [ 1282.268145][T23239] netlink: 'syz.8.5215': attribute type 12 has an invalid length. [ 1283.696276][ T5841] Bluetooth: Wrong link type (-22) [ 1283.983711][ T5948] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1284.136191][T22207] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1284.156260][ T5948] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.171745][ T5948] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.182594][ T5948] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1284.212397][ T5948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.234421][ T5948] usb 9-1: config 0 descriptor?? [ 1284.296843][T22207] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1284.306515][T23271] netlink: 'syz.6.5225': attribute type 12 has an invalid length. [ 1284.315858][T22207] usb 8-1: not running at top speed; connect to a high speed hub [ 1284.333375][T22207] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.358134][T22207] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1284.385357][T22207] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1284.406250][T22207] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.423829][T22207] usb 8-1: Product: syz [ 1284.428286][T22207] usb 8-1: Manufacturer: syz [ 1284.438467][T22207] usb 8-1: SerialNumber: syz [ 1284.667329][ T5948] hid_parser_main: 6 callbacks suppressed [ 1284.667377][ T5948] cp2112 0003:10C4:EA90.00C2: unknown main item tag 0x0 [ 1284.694354][T22658] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1284.702547][ T5948] cp2112 0003:10C4:EA90.00C2: unknown main item tag 0x0 [ 1284.702595][ T5948] cp2112 0003:10C4:EA90.00C2: unknown main item tag 0x0 [ 1284.702626][ T5948] cp2112 0003:10C4:EA90.00C2: unknown main item tag 0x0 [ 1284.702654][ T5948] cp2112 0003:10C4:EA90.00C2: unknown main item tag 0x0 [ 1284.702683][ T5948] cp2112 0003:10C4:EA90.00C2: unknown main item tag 0x0 [ 1284.702712][ T5948] cp2112 0003:10C4:EA90.00C2: unknown main item tag 0x0 [ 1284.722238][T22207] usb 8-1: USB disconnect, device number 14 [ 1284.771568][ T5948] cp2112 0003:10C4:EA90.00C2: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1284.862937][ T5948] cp2112 0003:10C4:EA90.00C2: Part Number: 0x82 Device Version: 0xFE [ 1284.925723][T22658] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1284.957170][T22658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.979140][T22658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.997189][T22658] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1285.014650][T22658] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1285.037314][T22658] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1285.047213][T22658] usb 1-1: Manufacturer: syz [ 1285.067786][T22658] usb 1-1: config 0 descriptor?? [ 1287.118434][T22658] appleir 0003:05AC:8243.00C3: unknown main item tag 0x0 [ 1287.148774][T22658] appleir 0003:05AC:8243.00C3: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1287.227937][ T5948] cp2112 0003:10C4:EA90.00C2: error reading lock byte: -71 [ 1287.299180][ T5948] usb 9-1: USB disconnect, device number 14 [ 1287.565466][ T5841] Bluetooth: Wrong link type (-22) [ 1288.430361][ T1220] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1288.528260][ T5948] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1288.598542][ T1220] usb 8-1: device descriptor read/64, error -71 [ 1288.777258][ T5948] usb 9-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1288.787277][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.796348][ T5948] usb 9-1: Product: syz [ 1288.800831][ T5948] usb 9-1: Manufacturer: syz [ 1288.806223][ T5948] usb 9-1: SerialNumber: syz [ 1288.841749][ T5948] usb 9-1: config 0 descriptor?? [ 1288.849526][ T1220] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1288.879582][ T5948] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1289.007340][ T1220] usb 8-1: device descriptor read/64, error -71 [ 1289.124577][ T1220] usb usb8-port1: attempt power cycle [ 1289.320652][ T5904] usb 1-1: USB disconnect, device number 116 [ 1289.487210][ T1220] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1289.565081][ T1220] usb 8-1: device descriptor read/8, error -71 [ 1289.700113][ T5948] usb 9-1: USB disconnect, device number 15 [ 1289.836617][ T1220] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1289.901614][ T1220] usb 8-1: device descriptor read/8, error -71 [ 1290.014496][ T1220] usb usb8-port1: unable to enumerate USB device [ 1292.549296][T23327] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1292.555953][T23327] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1292.565802][T23327] vhci_hcd vhci_hcd.0: Device attached [ 1292.580509][ T5904] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1292.755531][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.767031][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.777559][ T5904] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1292.787101][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.808300][ T5904] usb 8-1: config 0 descriptor?? [ 1292.896497][T22658] usb 50-1: SetAddress Request (2) to port 0 [ 1292.905424][T22658] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1293.247166][ T5904] cp2112 0003:10C4:EA90.00C4: unknown main item tag 0x0 [ 1293.254632][ T5904] cp2112 0003:10C4:EA90.00C4: unknown main item tag 0x0 [ 1293.262004][ T5904] cp2112 0003:10C4:EA90.00C4: unknown main item tag 0x0 [ 1293.269785][ T5904] cp2112 0003:10C4:EA90.00C4: unknown main item tag 0x0 [ 1293.276983][ T5904] cp2112 0003:10C4:EA90.00C4: unknown main item tag 0x0 [ 1293.284425][ T5904] cp2112 0003:10C4:EA90.00C4: unknown main item tag 0x0 [ 1293.291607][ T5904] cp2112 0003:10C4:EA90.00C4: unknown main item tag 0x0 [ 1293.301590][ T5904] cp2112 0003:10C4:EA90.00C4: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1293.380749][T23328] vhci_hcd: connection reset by peer [ 1293.387590][ T1167] vhci_hcd vhci_hcd.8: stop threads [ 1293.393229][ T1167] vhci_hcd vhci_hcd.8: release socket [ 1293.398907][ T1167] vhci_hcd vhci_hcd.8: disconnect device [ 1293.442768][ T5904] cp2112 0003:10C4:EA90.00C4: Part Number: 0x82 Device Version: 0xFE [ 1294.076413][ T5841] Bluetooth: Wrong link type (-22) [ 1294.081923][ T5841] Bluetooth: hci3: link tx timeout [ 1294.094001][ T5841] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1294.309707][ T5904] usb 8-1: USB disconnect, device number 19 [ 1294.596066][T22206] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1294.757069][T22206] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1294.807861][T22206] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.822227][T22206] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.852218][T22206] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1294.869567][T22206] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1294.879283][T22206] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1294.918318][T22206] usb 9-1: Manufacturer: syz [ 1294.928441][T22206] usb 9-1: config 0 descriptor?? [ 1295.399531][T22206] appleir 0003:05AC:8243.00C5: unknown main item tag 0x0 [ 1295.445013][T22206] appleir 0003:05AC:8243.00C5: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1296.143982][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 1297.121440][T23311] netlink: 'syz.0.5234': attribute type 12 has an invalid length. [ 1298.425375][T22658] usb 50-1: device descriptor read/8, error -110 [ 1298.596790][T22657] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1298.694461][T23351] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1298.701146][T23351] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1298.710313][T23351] vhci_hcd vhci_hcd.0: Device attached [ 1298.769673][T22657] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1298.779410][T22657] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.788435][T22657] usb 8-1: Product: syz [ 1298.793274][T22657] usb 8-1: Manufacturer: syz [ 1298.798480][T22657] usb 8-1: SerialNumber: syz [ 1298.808620][T22657] usb 8-1: config 0 descriptor?? [ 1298.822586][T22657] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1298.867537][T22658] usb usb50-port1: attempt power cycle [ 1298.933858][ T805] usb 9-1: reset high-speed USB device number 16 using dummy_hcd [ 1298.942949][ T805] usb 9-1: device reset changed ep0 maxpacket size! [ 1298.951904][ T5904] usb 9-1: USB disconnect, device number 16 [ 1298.994187][ T24] usb 34-1: SetAddress Request (2) to port 0 [ 1299.001914][ T5839] Bluetooth: Wrong link type (-22) [ 1299.010714][ T24] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1299.143777][ T5904] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1299.249992][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.256661][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.305001][ T5904] usb 9-1: Using ep0 maxpacket: 32 [ 1299.312591][ T5904] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1299.322842][ T5904] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1299.331858][ T5904] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.342335][ T5904] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1299.351572][ T5904] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1299.361264][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.374295][ T5904] usb 9-1: config 0 descriptor?? [ 1299.455959][T22658] usb usb50-port1: unable to enumerate USB device [ 1299.517154][T23352] vhci_hcd: connection reset by peer [ 1299.526570][T14241] vhci_hcd vhci_hcd.0: stop threads [ 1299.536722][T14241] vhci_hcd vhci_hcd.0: release socket [ 1299.546992][T14241] vhci_hcd vhci_hcd.0: disconnect device [ 1299.585139][T22657] usb 9-1: USB disconnect, device number 17 [ 1299.637084][T22658] usb 8-1: USB disconnect, device number 20 [ 1300.023726][ T1220] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1300.102853][T23371] netlink: 'syz.6.5253': attribute type 12 has an invalid length. [ 1300.196777][ T1220] usb 9-1: Using ep0 maxpacket: 32 [ 1300.215239][ T1220] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1300.226808][ T1220] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1301.342093][ T1220] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.365294][ T1220] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1301.374680][ T1220] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1301.388721][ T1220] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.399811][ T1220] usb 9-1: config 0 descriptor?? [ 1301.490044][ T1220] usb 9-1: USB disconnect, device number 18 [ 1301.574492][ T5839] Bluetooth: Wrong link type (-22) [ 1301.673912][T23393] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1301.680477][T23393] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1301.692661][T23393] vhci_hcd vhci_hcd.0: Device attached [ 1301.913883][T22657] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1302.063763][ T1220] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1302.095261][T22657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.106625][T22657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.116762][T22657] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1302.126447][T22657] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.138021][T22657] usb 7-1: config 0 descriptor?? [ 1302.217778][ T1220] usb 9-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1302.229291][ T1220] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.238002][ T5948] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1302.245777][ T1220] usb 9-1: Product: syz [ 1302.250169][ T1220] usb 9-1: Manufacturer: syz [ 1302.255072][ T1220] usb 9-1: SerialNumber: syz [ 1302.262736][ T1220] usb 9-1: config 0 descriptor?? [ 1302.271473][ T1220] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1302.405590][ T5948] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1302.416646][ T5948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.427781][ T5948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.438142][ T5948] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1302.462650][ T5948] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1302.475775][ T5948] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1302.485642][ T5948] usb 8-1: Manufacturer: syz [ 1302.493971][ T5948] usb 8-1: config 0 descriptor?? [ 1302.499013][T23394] vhci_hcd: connection closed [ 1302.499420][ T1158] vhci_hcd vhci_hcd.0: stop threads [ 1302.509671][ T1158] vhci_hcd vhci_hcd.0: release socket [ 1302.515376][ T1158] vhci_hcd vhci_hcd.0: disconnect device [ 1302.554176][T22657] cp2112 0003:10C4:EA90.00C6: unknown main item tag 0x0 [ 1302.561358][T22657] cp2112 0003:10C4:EA90.00C6: unknown main item tag 0x0 [ 1302.569477][T22657] cp2112 0003:10C4:EA90.00C6: unknown main item tag 0x0 [ 1302.576628][T22657] cp2112 0003:10C4:EA90.00C6: unknown main item tag 0x0 [ 1302.583803][T22657] cp2112 0003:10C4:EA90.00C6: unknown main item tag 0x0 [ 1302.590913][T22657] cp2112 0003:10C4:EA90.00C6: unknown main item tag 0x0 [ 1302.598053][T22657] cp2112 0003:10C4:EA90.00C6: unknown main item tag 0x0 [ 1302.608110][T22657] cp2112 0003:10C4:EA90.00C6: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1302.753519][T22657] cp2112 0003:10C4:EA90.00C6: Part Number: 0x82 Device Version: 0xFE [ 1302.930800][ T5948] appleir 0003:05AC:8243.00C7: item fetching failed at offset 0/1 [ 1302.939624][ T5948] appleir 0003:05AC:8243.00C7: parse failed [ 1302.946346][ T5948] appleir 0003:05AC:8243.00C7: probe with driver appleir failed with error -22 [ 1304.458803][ T24] usb 34-1: device descriptor read/8, error -110 [ 1304.511717][ T1220] usb 9-1: USB disconnect, device number 19 [ 1304.539150][ T5904] usb 8-1: USB disconnect, device number 21 [ 1304.823873][T22658] usb 7-1: reset high-speed USB device number 79 using dummy_hcd [ 1304.889777][ T24] usb usb34-port1: attempt power cycle [ 1305.313782][T22657] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1305.478670][ T24] usb usb34-port1: unable to enumerate USB device [ 1305.485568][T22657] usb 9-1: Using ep0 maxpacket: 32 [ 1305.499929][T22657] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1305.509149][T22657] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1305.518762][T23431] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1305.519358][T22657] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.525300][T23431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1305.527020][T23431] vhci_hcd vhci_hcd.0: Device attached [ 1305.535692][T22657] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1305.558569][T22657] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1305.567817][T22657] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.578400][T22657] usb 9-1: config 0 descriptor?? [ 1305.645122][ T5904] usb 7-1: USB disconnect, device number 79 [ 1305.793117][T22658] usb 9-1: USB disconnect, device number 20 [ 1305.793792][ T1220] usb 46-1: SetAddress Request (2) to port 0 [ 1305.810202][ T1220] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1307.143937][T23432] vhci_hcd: connection reset by peer [ 1307.165565][T23381] vhci_hcd vhci_hcd.6: stop threads [ 1307.170928][T23381] vhci_hcd vhci_hcd.6: release socket [ 1307.189210][T23381] vhci_hcd vhci_hcd.6: disconnect device [ 1307.283652][ T5904] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1307.433677][ T5904] usb 9-1: Using ep0 maxpacket: 32 [ 1307.441165][ T5904] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1307.451519][ T5904] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1307.462876][ T5904] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.473708][ T5904] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1307.482948][ T5904] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1307.493167][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.506327][ T5904] usb 9-1: config 0 descriptor?? [ 1307.573698][ T5935] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1307.736797][ T5935] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1307.751366][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.762536][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.773694][ T5935] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1307.790513][ T5935] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1307.800115][ T5935] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1307.808304][ T5935] usb 8-1: Manufacturer: syz [ 1307.816151][ T5935] usb 8-1: config 0 descriptor?? [ 1307.833864][ T5904] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1307.997750][ T5904] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1308.006923][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.015257][ T5904] usb 1-1: Product: syz [ 1308.019480][ T5904] usb 1-1: Manufacturer: syz [ 1308.024458][ T5904] usb 1-1: SerialNumber: syz [ 1308.031602][ T5904] usb 1-1: config 0 descriptor?? [ 1308.040425][ T5904] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1308.103773][T22206] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1308.231017][ T5935] appleir 0003:05AC:8243.00C8: item fetching failed at offset 0/1 [ 1308.240144][ T5935] appleir 0003:05AC:8243.00C8: parse failed [ 1308.246434][ T5935] appleir 0003:05AC:8243.00C8: probe with driver appleir failed with error -22 [ 1308.257834][T22206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.271989][T22206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.282669][T22206] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1308.293014][T22206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.306693][T22206] usb 7-1: config 0 descriptor?? [ 1308.436066][ T24] usb 8-1: USB disconnect, device number 22 [ 1308.737565][T22206] cp2112 0003:10C4:EA90.00C9: unknown main item tag 0x0 [ 1308.748706][T22206] cp2112 0003:10C4:EA90.00C9: unknown main item tag 0x0 [ 1308.756501][T22206] cp2112 0003:10C4:EA90.00C9: unknown main item tag 0x0 [ 1308.763679][T22206] cp2112 0003:10C4:EA90.00C9: unknown main item tag 0x0 [ 1308.771054][T22206] cp2112 0003:10C4:EA90.00C9: unknown main item tag 0x0 [ 1308.778161][T22206] cp2112 0003:10C4:EA90.00C9: unknown main item tag 0x0 [ 1308.785739][T22206] cp2112 0003:10C4:EA90.00C9: unknown main item tag 0x0 [ 1308.796001][T22206] cp2112 0003:10C4:EA90.00C9: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1308.850764][ T5904] usb 1-1: USB disconnect, device number 117 [ 1308.930777][T22206] cp2112 0003:10C4:EA90.00C9: Part Number: 0x82 Device Version: 0xFE [ 1309.313217][ T5904] usb 9-1: USB disconnect, device number 21 [ 1309.740372][T22657] usb 7-1: USB disconnect, device number 80 [ 1310.328509][T23476] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1310.335061][T23476] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1310.344168][T23477] fuse: Bad value for 'fd' [ 1310.349299][T23476] vhci_hcd vhci_hcd.0: Device attached [ 1310.613883][ T5935] usb 48-1: SetAddress Request (2) to port 0 [ 1310.620146][ T5935] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1310.750959][ T1158] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.845000][ T1220] usb 46-1: device descriptor read/8, error -110 [ 1310.894630][ T1158] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.986534][ T1158] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.077961][ T1158] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.143697][T23479] vhci_hcd: connection reset by peer [ 1311.160991][T14241] vhci_hcd vhci_hcd.7: stop threads [ 1311.176209][T14241] vhci_hcd vhci_hcd.7: release socket [ 1311.181876][T14241] vhci_hcd vhci_hcd.7: disconnect device [ 1311.249877][ T1220] usb usb46-port1: attempt power cycle [ 1311.356063][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1311.380899][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1311.390481][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1311.402724][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1311.415870][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1311.543942][T22657] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1311.703688][T22657] usb 9-1: Using ep0 maxpacket: 32 [ 1311.711292][T22657] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1311.725438][T22657] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1311.734574][T22657] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.745389][T22657] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1311.768628][ T1158] bridge_slave_1: left allmulticast mode [ 1311.776819][T22657] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1311.784129][ T1158] bridge_slave_1: left promiscuous mode [ 1311.799411][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.803617][T22657] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.833061][ T1158] bridge_slave_0: left allmulticast mode [ 1311.842919][T22657] usb 9-1: config 0 descriptor?? [ 1311.847861][ T1220] usb usb46-port1: unable to enumerate USB device [ 1311.858562][ T1158] bridge_slave_0: left promiscuous mode [ 1311.879711][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.082572][ T24] usb 9-1: USB disconnect, device number 22 [ 1312.208142][T22657] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1312.251307][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.263068][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.286412][ T1158] bond0 (unregistering): Released all slaves [ 1312.369171][T22657] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.418313][T22657] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.430852][T22657] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1312.464803][T22657] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.500513][T22657] usb 8-1: config 0 descriptor?? [ 1312.564721][ T24] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1312.639463][T23492] chnl_net:caif_netlink_parms(): no params data found [ 1312.734498][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1312.744750][ T24] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1312.753423][ T24] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1312.764876][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.802168][ T24] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1312.811919][ T24] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1312.811964][ T1158] hsr_slave_0: left promiscuous mode [ 1312.821463][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.835644][ T1158] hsr_slave_1: left promiscuous mode [ 1312.843216][ T24] usb 9-1: config 0 descriptor?? [ 1312.845605][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.855945][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.865155][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.873027][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.892008][ T1158] veth1_macvtap: left promiscuous mode [ 1312.897721][ T1158] veth0_macvtap: left promiscuous mode [ 1312.903528][ T1158] veth1_vlan: left promiscuous mode [ 1312.926233][ T1158] veth0_vlan: left promiscuous mode [ 1312.937269][T22657] cp2112 0003:10C4:EA90.00CA: unknown main item tag 0x0 [ 1312.945591][T22657] cp2112 0003:10C4:EA90.00CA: unknown main item tag 0x0 [ 1312.952815][T22657] cp2112 0003:10C4:EA90.00CA: unknown main item tag 0x0 [ 1312.964617][T22657] cp2112 0003:10C4:EA90.00CA: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1313.137144][T22657] cp2112 0003:10C4:EA90.00CA: Part Number: 0x82 Device Version: 0xFE [ 1313.233719][ T24] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1313.252810][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 1313.275315][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 1313.400616][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1313.419373][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.431241][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.447893][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1313.463100][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1313.472651][ T24] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1313.481171][ T24] usb 1-1: Manufacturer: syz [ 1313.487184][ T5841] Bluetooth: hci0: command tx timeout [ 1313.504511][ T24] usb 1-1: config 0 descriptor?? [ 1313.536496][T23492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.554220][T23492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.589465][T23492] bridge_slave_0: entered allmulticast mode [ 1313.618278][T23492] bridge_slave_0: entered promiscuous mode [ 1313.628960][T23492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.637283][T23492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.648737][T23492] bridge_slave_1: entered allmulticast mode [ 1313.659736][T23492] bridge_slave_1: entered promiscuous mode [ 1313.796289][T23492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.825628][T23492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.904394][T23492] team0: Port device team_slave_0 added [ 1313.920689][T23492] team0: Port device team_slave_1 added [ 1313.944015][ T24] appleir 0003:05AC:8243.00CB: item fetching failed at offset 0/1 [ 1313.972707][T22658] usb 8-1: USB disconnect, device number 23 [ 1313.995563][ T24] appleir 0003:05AC:8243.00CB: parse failed [ 1314.011515][ T24] appleir 0003:05AC:8243.00CB: probe with driver appleir failed with error -22 [ 1314.091107][T23492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.113694][T23492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.150216][ T24] usb 1-1: USB disconnect, device number 118 [ 1314.166147][T23492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.190896][T23492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.198421][T23492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.228830][T23492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.316298][T23492] hsr_slave_0: entered promiscuous mode [ 1314.326839][T23492] hsr_slave_1: entered promiscuous mode [ 1314.337645][T23492] debugfs: 'hsr0' already exists in 'hsr' [ 1314.343512][T23492] Cannot create hsr debugfs directory [ 1314.553387][T23554] fuse: Bad value for 'fd' [ 1314.712549][ T24] usb 9-1: USB disconnect, device number 23 [ 1314.880962][T23560] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1314.887542][T23560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1314.915671][T23560] vhci_hcd vhci_hcd.0: Device attached [ 1315.233905][ T24] usb 50-1: SetAddress Request (6) to port 0 [ 1315.246610][ T24] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1315.521941][T14241] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.573944][ T5841] Bluetooth: hci0: command tx timeout [ 1315.663827][T23563] vhci_hcd: connection reset by peer [ 1315.669947][T23381] vhci_hcd vhci_hcd.8: stop threads [ 1315.676479][T23381] vhci_hcd vhci_hcd.8: release socket [ 1315.682099][T23381] vhci_hcd vhci_hcd.8: disconnect device [ 1315.706978][T23496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1315.722509][T23496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1315.738839][ T5935] usb 48-1: device descriptor read/8, error -110 [ 1315.746983][T23496] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1315.765256][T23496] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1315.776899][T23496] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1315.909941][T14241] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.104791][T14241] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.174867][ T5935] usb usb48-port1: attempt power cycle [ 1316.370202][T14241] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.380938][T23597] cgroup: Unknown subsys name 'cpuset' [ 1316.706981][T22657] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1316.737694][ T5935] usb usb48-port1: unable to enumerate USB device [ 1316.803753][T22207] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1316.866571][T22657] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.884431][T22657] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.895093][T22657] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1316.918700][T22657] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.941338][T22657] usb 9-1: config 0 descriptor?? [ 1316.974777][T23492] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1316.981570][T22207] usb 1-1: Using ep0 maxpacket: 32 [ 1316.990897][T22207] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1317.007663][T23492] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1317.033810][T22207] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1317.042972][T22207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.055108][T22207] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1317.076540][T22207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1317.088063][T22207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1317.101581][T22207] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1317.111754][T22207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.134686][T22207] usb 1-1: config 0 descriptor?? [ 1317.171550][T23492] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1317.221781][T23581] chnl_net:caif_netlink_parms(): no params data found [ 1317.241598][T23492] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1317.281138][T14241] bridge_slave_1: left allmulticast mode [ 1317.287728][T14241] bridge_slave_1: left promiscuous mode [ 1317.296255][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.310865][T14241] bridge_slave_0: left allmulticast mode [ 1317.317421][T14241] bridge_slave_0: left promiscuous mode [ 1317.326118][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.373098][T22207] usb 1-1: USB disconnect, device number 119 [ 1317.411137][T22657] hid_parser_main: 4 callbacks suppressed [ 1317.411161][T22657] cp2112 0003:10C4:EA90.00CC: unknown main item tag 0x0 [ 1317.438132][T22657] cp2112 0003:10C4:EA90.00CC: unknown main item tag 0x0 [ 1317.446096][T22657] cp2112 0003:10C4:EA90.00CC: unknown main item tag 0x0 [ 1317.453248][T22657] cp2112 0003:10C4:EA90.00CC: unknown main item tag 0x0 [ 1317.479270][T22657] cp2112 0003:10C4:EA90.00CC: unknown main item tag 0x0 [ 1317.508092][T22657] cp2112 0003:10C4:EA90.00CC: unknown main item tag 0x0 [ 1317.519328][T22657] cp2112 0003:10C4:EA90.00CC: unknown main item tag 0x0 [ 1317.540765][T22657] cp2112 0003:10C4:EA90.00CC: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1317.616797][T22657] cp2112 0003:10C4:EA90.00CC: Part Number: 0x82 Device Version: 0xFE [ 1317.644510][ T5841] Bluetooth: hci0: command tx timeout [ 1317.782429][T14241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.797829][T14241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.813502][T14241] bond0 (unregistering): Released all slaves [ 1317.865414][ T5904] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1317.884721][ T5841] Bluetooth: hci2: command tx timeout [ 1318.074000][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 1318.085829][ T5904] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1318.098579][ T5904] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1318.107858][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.119559][ T5904] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1318.130366][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1318.140199][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1318.153474][ T5904] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1318.162851][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.181931][ T5904] usb 1-1: config 0 descriptor?? [ 1318.228310][T23581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.237949][T23581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.250257][T23581] bridge_slave_0: entered allmulticast mode [ 1318.259784][T23581] bridge_slave_0: entered promiscuous mode [ 1318.300721][T14241] hsr_slave_0: left promiscuous mode [ 1318.306770][T14241] hsr_slave_1: left promiscuous mode [ 1318.312705][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.321927][T14241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.330103][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.337979][T14241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.349554][T14241] veth1_macvtap: left promiscuous mode [ 1318.355437][T14241] veth0_macvtap: left promiscuous mode [ 1318.361001][T14241] veth1_vlan: left promiscuous mode [ 1318.366644][T14241] veth0_vlan: left promiscuous mode [ 1318.444091][T22657] usb 9-1: USB disconnect, device number 24 [ 1318.610411][T14241] team0 (unregistering): Port device team_slave_1 removed [ 1318.644548][T14241] team0 (unregistering): Port device team_slave_0 removed [ 1318.743868][T23581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.752318][T23581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.759783][T23581] bridge_slave_1: entered allmulticast mode [ 1318.770094][T23581] bridge_slave_1: entered promiscuous mode [ 1318.832713][T23581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.885732][T23581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.970039][T23581] team0: Port device team_slave_0 added [ 1318.983202][T23581] team0: Port device team_slave_1 added [ 1319.141704][T23647] fuse: Bad value for 'fd' [ 1319.269738][T23581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.277415][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.310136][T23581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.341323][T23581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.348641][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.385282][T23581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.558707][T23581] hsr_slave_0: entered promiscuous mode [ 1319.571920][T23581] hsr_slave_1: entered promiscuous mode [ 1319.579855][T23581] debugfs: 'hsr0' already exists in 'hsr' [ 1319.586503][T23581] Cannot create hsr debugfs directory [ 1319.602028][T23492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.726011][ T5841] Bluetooth: hci0: command tx timeout [ 1319.772163][T23492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.813380][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.820615][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.903429][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.910883][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.967198][ T5841] Bluetooth: hci2: command tx timeout [ 1320.001308][T22657] usb 1-1: USB disconnect, device number 120 [ 1320.070961][T22615] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.316680][T23496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1320.337508][T23496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1320.351470][T23496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1320.365371][ T24] usb 50-1: device descriptor read/8, error -110 [ 1320.384865][T23496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1320.395568][T23666] sctp: [Deprecated]: syz.0.5315 (pid 23666) Use of int in max_burst socket option. [ 1320.395568][T23666] Use struct sctp_assoc_value instead [ 1320.417914][T23496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1320.425566][T22615] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.565427][T22615] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.739735][T22615] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.774340][ T5904] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1320.786399][ T24] usb usb50-port1: attempt power cycle [ 1320.985788][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 1321.014210][ T5904] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1321.033625][ T5904] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.063148][ T5904] usb 1-1: config 2 has no interface number 0 [ 1321.075262][ T5904] usb 1-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1321.107514][ T5904] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1321.122138][ T5904] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1321.131556][T23492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.131829][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.146809][ T5904] usb 1-1: Product: syz [ 1321.151019][ T5904] usb 1-1: Manufacturer: syz [ 1321.156403][ T5904] usb 1-1: SerialNumber: syz [ 1321.203845][ T5904] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1321.311605][T23581] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1321.327526][T23581] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1321.340014][T23581] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1321.366451][T23581] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1321.375849][ T24] usb usb50-port1: unable to enumerate USB device [ 1321.412317][ T24] usb 1-1: USB disconnect, device number 121 [ 1321.561181][T22615] bridge_slave_1: left allmulticast mode [ 1321.568364][T22615] bridge_slave_1: left promiscuous mode [ 1321.574762][T22615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.588704][T22615] bridge_slave_0: left allmulticast mode [ 1321.596472][T22615] bridge_slave_0: left promiscuous mode [ 1321.602296][T22615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.815612][T22615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.826588][T22615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.836846][T22615] bond0 (unregistering): Released all slaves [ 1322.030537][T23663] chnl_net:caif_netlink_parms(): no params data found [ 1322.044110][ T5841] Bluetooth: hci2: command tx timeout [ 1322.301531][T23663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.319699][T23663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.328642][T23663] bridge_slave_0: entered allmulticast mode [ 1322.338029][T23663] bridge_slave_0: entered promiscuous mode [ 1322.367831][T22615] hsr_slave_0: left promiscuous mode [ 1322.376225][T22615] hsr_slave_1: left promiscuous mode [ 1322.382717][T22615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.390691][T22615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.402836][T22615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.410682][T22615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.431366][T22615] veth1_macvtap: left promiscuous mode [ 1322.437339][T22615] veth0_macvtap: left promiscuous mode [ 1322.443093][T22615] veth1_vlan: left promiscuous mode [ 1322.449739][T22615] veth0_vlan: left promiscuous mode [ 1322.524468][ T5841] Bluetooth: hci3: command tx timeout [ 1322.807455][T22615] team0 (unregistering): Port device team_slave_1 removed [ 1322.830770][T22615] team0 (unregistering): Port device team_slave_0 removed [ 1322.972808][T23663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.980393][T23663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.987921][T23663] bridge_slave_1: entered allmulticast mode [ 1322.999627][T23663] bridge_slave_1: entered promiscuous mode [ 1323.048848][T23492] veth0_vlan: entered promiscuous mode [ 1323.079242][T23663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.134066][T23663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.199240][ T5935] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1323.255536][T23663] team0: Port device team_slave_0 added [ 1323.268891][T23492] veth1_vlan: entered promiscuous mode [ 1323.280039][T23663] team0: Port device team_slave_1 added [ 1323.290627][T23581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.387076][T23581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.398689][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.411137][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.422537][ T5935] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1323.423240][T23663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.432275][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.447165][T23663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.470015][ T5935] usb 1-1: config 0 descriptor?? [ 1323.475572][T23663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.504997][T23663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.512292][T23663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.541235][T23663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.581519][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.588799][T14241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.639403][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.646650][T14241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.725194][T23663] hsr_slave_0: entered promiscuous mode [ 1323.732675][T23663] hsr_slave_1: entered promiscuous mode [ 1323.742945][T23663] debugfs: 'hsr0' already exists in 'hsr' [ 1323.749419][T23663] Cannot create hsr debugfs directory [ 1323.868436][T23492] veth0_macvtap: entered promiscuous mode [ 1323.906061][ T5935] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 1323.927215][ T5935] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 1323.947597][ T5935] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 1323.964023][ T5935] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 1323.972626][ T5935] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 1323.992337][ T5935] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 1324.006329][T23492] veth1_macvtap: entered promiscuous mode [ 1324.006861][ T5935] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 1324.035696][ T5935] cp2112 0003:10C4:EA90.00CD: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1324.116368][ T5935] cp2112 0003:10C4:EA90.00CD: Part Number: 0x82 Device Version: 0xFE [ 1324.126735][ T5841] Bluetooth: hci2: command tx timeout [ 1324.364037][T23492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.392199][T23492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.459043][ T1108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.476042][ T1108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.575182][ T1108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.590922][ T1108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.604494][ T5841] Bluetooth: hci3: command tx timeout [ 1324.792923][T23581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.964152][T22657] usb 1-1: USB disconnect, device number 122 [ 1325.055575][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.089456][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.210227][T23381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.241247][T23381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.593407][ T5841] Bluetooth: Wrong link type (-22) [ 1325.711939][T23581] veth0_vlan: entered promiscuous mode [ 1325.744680][T23663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1325.779141][T23581] veth1_vlan: entered promiscuous mode [ 1325.787342][T23663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1325.822114][T23663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1325.847803][T23663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1325.943943][T22206] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1326.033425][T23581] veth0_macvtap: entered promiscuous mode [ 1326.062467][T23581] veth1_macvtap: entered promiscuous mode [ 1326.094384][T22206] usb 7-1: Using ep0 maxpacket: 32 [ 1326.102081][T22206] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1326.116927][T22206] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1326.130951][T23581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.138377][T22206] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.156100][T23581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.163849][T22206] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1326.185797][T22206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1326.215239][T22206] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1326.235824][T14241] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.245844][T22206] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1326.271006][T22206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.271408][T14241] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.294475][T22206] usb 7-1: config 0 descriptor?? [ 1326.305861][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.380202][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.510488][ T3507] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.541025][T22206] usb 7-1: USB disconnect, device number 81 [ 1326.687717][ T5841] Bluetooth: hci3: command tx timeout [ 1326.782926][T23663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.939982][T23496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1326.959369][T23496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1326.971984][T23496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1326.975313][ T3507] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.995852][T22657] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1327.011434][T23496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1327.023447][T23496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1327.184580][ T3507] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.195511][T22657] usb 7-1: Using ep0 maxpacket: 32 [ 1327.207876][T22657] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1327.217102][T22657] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1327.226781][T22657] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.241909][T22657] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1327.252349][T22657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1327.262585][T22657] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1327.285986][T23663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.305196][T22657] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1327.308602][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.339479][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.341752][T22657] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.363262][T22657] usb 7-1: config 0 descriptor?? [ 1327.400266][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.407502][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.479570][ T3507] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.533480][T14241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.542830][T14241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.546904][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.557360][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.165598][ T5884] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1328.200570][T23790] chnl_net:caif_netlink_parms(): no params data found [ 1328.345705][ T5884] usb 10-1: Using ep0 maxpacket: 8 [ 1328.363041][ T5884] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 1328.383139][ T5884] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 1328.395434][ T5884] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1328.405590][ T5884] usb 10-1: config 250 has no interface number 0 [ 1328.412122][ T5884] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1328.425455][ T5884] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1328.436848][ T5884] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1328.449653][ T5884] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1328.461698][ T3507] bridge_slave_1: left allmulticast mode [ 1328.467577][ T3507] bridge_slave_1: left promiscuous mode [ 1328.473421][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.481327][ T5884] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1328.495637][ T5884] usb 10-1: config 250 interface 228 has no altsetting 0 [ 1328.505440][ T3507] bridge_slave_0: left allmulticast mode [ 1328.511590][ T3507] bridge_slave_0: left promiscuous mode [ 1328.518415][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.528222][ T5884] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1328.538030][ T5884] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1328.547385][ T5884] usb 10-1: Product: syz [ 1328.551721][ T5884] usb 10-1: SerialNumber: syz [ 1328.568396][ T5884] hub 10-1:250.228: bad descriptor, ignoring hub [ 1328.575223][ T5884] hub 10-1:250.228: probe with driver hub failed with error -5 [ 1328.787218][ T5841] Bluetooth: hci3: command tx timeout [ 1328.800862][ T5884] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1328.846221][ T3507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.860172][ T3507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.873252][ T3507] bond0 (unregistering): Released all slaves [ 1329.053987][T23790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.099309][T23790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.112576][T23790] bridge_slave_0: entered allmulticast mode [ 1329.115623][ T5948] usb 10-1: USB disconnect, device number 2 [ 1329.121859][T23790] bridge_slave_0: entered promiscuous mode [ 1329.132785][ T5948] usblp0: removed [ 1329.185479][ T5841] Bluetooth: hci1: command tx timeout [ 1329.207424][T22207] usb 7-1: USB disconnect, device number 82 [ 1330.131114][T23790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.153978][T23790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.161663][T23790] bridge_slave_1: entered allmulticast mode [ 1330.174150][T23790] bridge_slave_1: entered promiscuous mode [ 1330.286399][T23790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.328776][T23790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.517934][T23790] team0: Port device team_slave_0 added [ 1330.554914][T23790] team0: Port device team_slave_1 added [ 1330.601100][ T3507] hsr_slave_0: left promiscuous mode [ 1330.619620][ T3507] hsr_slave_1: left promiscuous mode [ 1330.635113][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.657281][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.685354][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.713355][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.748677][ T3507] veth1_macvtap: left promiscuous mode [ 1330.768123][ T3507] veth0_macvtap: left promiscuous mode [ 1330.784327][ T3507] veth1_vlan: left promiscuous mode [ 1330.791384][ T3507] veth0_vlan: left promiscuous mode [ 1331.254733][ T5841] Bluetooth: hci1: command tx timeout [ 1331.288653][ T3507] team0 (unregistering): Port device team_slave_1 removed [ 1331.303111][ T3507] team0 (unregistering): Port device team_slave_0 removed [ 1331.519159][T23790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.547451][T23790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.576765][T23790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.618887][T23790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.627231][T23790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.655319][T23790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.732189][T23663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.051217][T23790] hsr_slave_0: entered promiscuous mode [ 1332.073247][T23790] hsr_slave_1: entered promiscuous mode [ 1332.084815][T23790] debugfs: 'hsr0' already exists in 'hsr' [ 1332.109679][T23790] Cannot create hsr debugfs directory [ 1332.236364][T23859] syzkaller1: entered promiscuous mode [ 1332.265448][T23859] syzkaller1: entered allmulticast mode [ 1333.603657][ T5841] Bluetooth: hci1: command tx timeout [ 1333.827846][T23496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1333.864216][T23496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1333.876931][T23496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1333.886894][T23496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1333.901662][T23496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1334.119690][ T3507] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.261303][T23663] veth0_vlan: entered promiscuous mode [ 1334.363501][T23663] veth1_vlan: entered promiscuous mode [ 1334.548161][ T3507] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.031035][ T3507] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.253124][T23909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1335.337358][ T3507] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.512630][ T5935] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1335.643780][T23496] Bluetooth: hci1: command tx timeout [ 1335.708803][ T5935] usb 10-1: Using ep0 maxpacket: 32 [ 1335.741991][ T5935] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1335.770889][ T5935] usb 10-1: config 246 has an invalid interface number: 201 but max is 2 [ 1335.790418][ T5935] usb 10-1: config 246 has an invalid interface number: 199 but max is 2 [ 1335.815999][T23663] veth0_macvtap: entered promiscuous mode [ 1335.821961][ T5935] usb 10-1: config 246 has an invalid interface number: 166 but max is 2 [ 1335.841556][ T5935] usb 10-1: config 246 has no interface number 0 [ 1335.848741][ T5935] usb 10-1: config 246 has no interface number 1 [ 1335.855891][ T5935] usb 10-1: config 246 has no interface number 2 [ 1335.862577][ T5935] usb 10-1: config 246 interface 201 has no altsetting 0 [ 1335.888393][T23663] veth1_macvtap: entered promiscuous mode [ 1335.894666][ T5935] usb 10-1: config 246 interface 199 has no altsetting 0 [ 1335.902781][ T5935] usb 10-1: config 246 interface 166 has no altsetting 0 [ 1335.928603][ T5935] usb 10-1: New USB device found, idVendor=1199, idProduct=9011, bcdDevice=2a.64 [ 1335.947608][T23663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.956096][ T5935] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.966764][ T5935] usb 10-1: Product: syz [ 1335.971494][T23496] Bluetooth: hci0: command tx timeout [ 1335.981992][ T5935] usb 10-1: Manufacturer: syz [ 1336.000434][T23663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.009436][ T5935] usb 10-1: SerialNumber: syz [ 1336.208645][T23877] chnl_net:caif_netlink_parms(): no params data found [ 1336.309102][ T5935] usb 10-1: selecting invalid altsetting 0 [ 1336.319847][ T5935] usb 10-1: Could not set interface, error -22 [ 1336.359557][ T5935] usb 10-1: selecting invalid altsetting 0 [ 1336.386021][ T5935] usb 10-1: Could not set interface, error -22 [ 1336.416253][ T5935] usb 10-1: USB disconnect, device number 3 [ 1336.600607][T22615] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.680968][T22615] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.748810][T22615] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.759983][T22615] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.786486][T23877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.794277][T23877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.801670][T23877] bridge_slave_0: entered allmulticast mode [ 1336.811178][T23877] bridge_slave_0: entered promiscuous mode [ 1336.874691][T23877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.898100][T23877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.917024][T23877] bridge_slave_1: entered allmulticast mode [ 1336.939059][T23877] bridge_slave_1: entered promiscuous mode [ 1337.127187][T23877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.163533][ T3507] bridge_slave_1: left allmulticast mode [ 1337.171112][ T3507] bridge_slave_1: left promiscuous mode [ 1337.177159][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.186270][ T3507] bridge_slave_0: left allmulticast mode [ 1337.192025][ T3507] bridge_slave_0: left promiscuous mode [ 1337.198310][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.422391][ T3507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.434259][ T3507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.447663][ T3507] bond0 (unregistering): Released all slaves [ 1337.482718][T23877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.494124][T23790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1337.701259][T23790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1337.817556][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1337.839171][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1337.850957][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1337.872789][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1337.883907][T23790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1337.891038][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1337.915756][T23790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1337.965193][T23877] team0: Port device team_slave_0 added [ 1338.020428][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.032544][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.044106][T23496] Bluetooth: hci0: command tx timeout [ 1338.070449][T23877] team0: Port device team_slave_1 added [ 1338.230274][T23877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.240266][T23877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.270447][T23877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.291262][T23877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.298418][T23877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.325986][T23877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.368531][ T3507] hsr_slave_0: left promiscuous mode [ 1338.388908][ T3507] hsr_slave_1: left promiscuous mode [ 1338.395728][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.403188][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.412344][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1338.420458][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.442683][ T3507] veth1_macvtap: left promiscuous mode [ 1338.449111][ T3507] veth0_macvtap: left promiscuous mode [ 1338.455268][ T3507] veth1_vlan: left promiscuous mode [ 1338.460609][ T3507] veth0_vlan: left promiscuous mode [ 1338.811452][ T3507] team0 (unregistering): Port device team_slave_1 removed [ 1338.842025][ T3507] team0 (unregistering): Port device team_slave_0 removed [ 1339.101377][T22615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.111275][T22615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.201466][T23877] hsr_slave_0: entered promiscuous mode [ 1339.210900][T23877] hsr_slave_1: entered promiscuous mode [ 1339.218904][T23877] debugfs: 'hsr0' already exists in 'hsr' [ 1339.225303][T23877] Cannot create hsr debugfs directory [ 1339.544681][T24002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1339.551267][T24002] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1339.559855][T24002] vhci_hcd vhci_hcd.0: Device attached [ 1339.828618][ T5948] usb 40-1: SetAddress Request (2) to port 0 [ 1339.841023][ T5948] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1339.928124][ T3507] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.966977][T23496] Bluetooth: hci2: command tx timeout [ 1340.123837][T23496] Bluetooth: hci0: command tx timeout [ 1340.236874][ T3507] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.272919][T24003] vhci_hcd: connection reset by peer [ 1340.286810][T23381] vhci_hcd vhci_hcd.3: stop threads [ 1340.299330][T23381] vhci_hcd vhci_hcd.3: release socket [ 1340.327069][T23381] vhci_hcd vhci_hcd.3: disconnect device [ 1340.463236][ T3507] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.491869][T23958] chnl_net:caif_netlink_parms(): no params data found [ 1340.647196][ T3507] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.869337][T23790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.076444][T24048] netlink: 'syz.3.5339': attribute type 12 has an invalid length. [ 1341.130221][T23958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.184042][T23958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.200836][T23958] bridge_slave_0: entered allmulticast mode [ 1341.216337][T23958] bridge_slave_0: entered promiscuous mode [ 1341.241026][T23958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.263065][T23958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.271575][T23958] bridge_slave_1: entered allmulticast mode [ 1341.282200][T23958] bridge_slave_1: entered promiscuous mode [ 1341.324314][T23958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.341793][T23958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.359109][T23790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.447955][T23958] team0: Port device team_slave_0 added [ 1341.453919][T22207] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1341.467347][T23958] team0: Port device team_slave_1 added [ 1341.530835][T22615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.538014][T22615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.589453][ T3507] bridge_slave_1: left allmulticast mode [ 1341.595937][ T3507] bridge_slave_1: left promiscuous mode [ 1341.602003][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.611966][ T3507] bridge_slave_0: left allmulticast mode [ 1341.618461][ T3507] bridge_slave_0: left promiscuous mode [ 1341.624586][T22207] usb 4-1: Using ep0 maxpacket: 32 [ 1341.624660][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.632898][T22207] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1341.648482][T22207] usb 4-1: config 246 has an invalid interface number: 138 but max is 0 [ 1341.657857][T22207] usb 4-1: config 246 has an invalid interface descriptor of length 2, skipping [ 1341.668958][T22207] usb 4-1: config 246 has no interface number 0 [ 1341.675871][T22207] usb 4-1: config 246 interface 138 has no altsetting 0 [ 1341.685200][T22207] usb 4-1: New USB device found, idVendor=1199, idProduct=9011, bcdDevice=2a.64 [ 1341.694638][T22207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.702827][T22207] usb 4-1: Product: syz [ 1341.707776][T22207] usb 4-1: Manufacturer: syz [ 1341.712436][T22207] usb 4-1: SerialNumber: syz [ 1341.920123][ T3507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.934776][ T3507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.938796][T22207] usb 4-1: USB disconnect, device number 15 [ 1341.952405][ T3507] bond0 (unregistering): Released all slaves [ 1341.981828][T23958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.990774][T23958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.018900][T23958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1342.056346][T23496] Bluetooth: hci2: command tx timeout [ 1342.064318][T23958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1342.071682][T23958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.099302][T23958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.202395][T23958] hsr_slave_0: entered promiscuous mode [ 1342.208504][T23496] Bluetooth: hci0: command tx timeout [ 1342.216321][T23958] hsr_slave_1: entered promiscuous mode [ 1342.223349][T23958] debugfs: 'hsr0' already exists in 'hsr' [ 1342.229646][T23958] Cannot create hsr debugfs directory [ 1342.237536][T23381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.244814][T23381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.314618][T23877] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1342.355074][T23877] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1342.367133][T23877] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1342.397895][T23877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1342.478692][ T3507] hsr_slave_0: left promiscuous mode [ 1342.485567][ T3507] hsr_slave_1: left promiscuous mode [ 1342.491925][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.501174][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.509519][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.529727][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.551226][ T3507] veth1_macvtap: left promiscuous mode [ 1342.559445][ T3507] veth0_macvtap: left promiscuous mode [ 1342.565736][ T3507] veth1_vlan: left promiscuous mode [ 1342.571205][ T3507] veth0_vlan: left promiscuous mode [ 1342.855171][ T3507] team0 (unregistering): Port device team_slave_1 removed [ 1342.872408][ T3507] team0 (unregistering): Port device team_slave_0 removed [ 1343.019177][T23790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1343.573916][T21398] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1343.732056][T23877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.739233][T21398] usb 4-1: Using ep0 maxpacket: 32 [ 1343.746419][T21398] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1343.760620][T21398] usb 4-1: config 0 has no interface number 0 [ 1343.770273][T21398] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1343.783224][T21398] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1343.792923][T21398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.802950][T21398] usb 4-1: Product: syz [ 1343.807787][T21398] usb 4-1: Manufacturer: syz [ 1343.813208][T21398] usb 4-1: SerialNumber: syz [ 1343.830103][T21398] usb 4-1: config 0 descriptor?? [ 1343.837693][T24072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1343.850421][T23790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.908706][T23877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.984050][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.991384][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1344.027811][T23381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.035356][T23381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.078336][T24072] netlink: 'syz.3.5342': attribute type 1 has an invalid length. [ 1344.107808][T24072] netlink: 'syz.3.5342': attribute type 1 has an invalid length. [ 1344.134170][T23496] Bluetooth: hci2: command tx timeout [ 1344.151003][T24072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1344.186842][T23790] veth0_vlan: entered promiscuous mode [ 1344.261589][T23790] veth1_vlan: entered promiscuous mode [ 1344.387045][T21398] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1344.407843][T21398] asix 4-1:0.188: probe with driver asix failed with error -61 [ 1344.450671][T23958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1344.482144][T23790] veth0_macvtap: entered promiscuous mode [ 1344.495444][T23958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1344.509458][T23958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1344.521841][T23958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1344.568349][T23790] veth1_macvtap: entered promiscuous mode [ 1344.638495][T23790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.655402][T23790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.699580][T23877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.718380][T23381] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.740003][T23381] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.751310][T23381] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.770891][T23381] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.930185][ T5948] usb 40-1: device descriptor read/8, error -110 [ 1344.945981][T23958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.058429][T23958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.070329][T23381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.089559][T23381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.116555][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.123965][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.161066][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.168346][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.183106][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.204579][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.327982][ T5948] usb usb40-port1: attempt power cycle [ 1346.193295][T23877] veth0_vlan: entered promiscuous mode [ 1346.205148][T23496] Bluetooth: hci2: command tx timeout [ 1346.257203][T23877] veth1_vlan: entered promiscuous mode [ 1346.348821][ T5884] usb 4-1: USB disconnect, device number 16 [ 1346.489270][T24101] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1346.490373][T23877] veth0_macvtap: entered promiscuous mode [ 1346.495952][T24101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1346.496758][T24101] vhci_hcd vhci_hcd.0: Device attached [ 1346.567641][T23877] veth1_macvtap: entered promiscuous mode [ 1346.651359][T23877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.679291][T23877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.704078][ T5948] usb 40-1: SetAddress Request (5) to port 0 [ 1346.712574][ T5948] usb 40-1: new SuperSpeed USB device number 5 using vhci_hcd [ 1346.746515][T23958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.754818][T22615] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.765689][T22615] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.783340][T22615] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.793086][T22615] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.058818][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.086834][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.155149][T14241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.180571][T14241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.300041][T24102] vhci_hcd: connection reset by peer [ 1347.335462][T14241] vhci_hcd vhci_hcd.3: stop threads [ 1347.358674][T14241] vhci_hcd vhci_hcd.3: release socket [ 1347.378039][T14241] vhci_hcd vhci_hcd.3: disconnect device [ 1347.544609][T23958] veth0_vlan: entered promiscuous mode [ 1347.561055][T23958] veth1_vlan: entered promiscuous mode [ 1347.677880][T23958] veth0_macvtap: entered promiscuous mode [ 1347.692627][T23958] veth1_macvtap: entered promiscuous mode [ 1347.700332][T22206] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1347.742568][T23958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.770925][T23958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1347.797027][T22615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.820150][T22615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.859839][T22615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.878066][T22206] usb 6-1: Using ep0 maxpacket: 32 [ 1347.898038][T22206] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1347.910105][T22615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.919994][T22206] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1347.938218][T22206] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.950040][T22206] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1347.960362][T22206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1347.971717][T22206] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1347.989843][T22206] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1348.001590][T22206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.024188][T22206] usb 6-1: config 0 descriptor?? [ 1348.270628][T21398] usb 6-1: USB disconnect, device number 54 [ 1348.353744][T22206] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1348.484115][T14241] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.519050][T22206] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1348.561472][T22206] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 1348.587895][T22206] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1348.607311][T22206] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1348.628304][T22206] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1348.652420][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1348.665297][T22206] usb 4-1: Product: syz [ 1348.669536][T22206] usb 4-1: Manufacturer: syz [ 1348.681080][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1348.691016][T22206] usb 4-1: SerialNumber: syz [ 1348.698353][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1348.706432][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1348.717876][T22206] usb 4-1: config 0 descriptor?? [ 1348.723316][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1348.741662][T22206] usb 4-1: selecting invalid altsetting 0 [ 1348.753715][T21398] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1348.879474][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.906588][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.920768][T21398] usb 6-1: Using ep0 maxpacket: 32 [ 1348.955445][T21398] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1348.990340][T21398] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1349.028207][T21398] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.077568][T21398] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1349.099172][T21398] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1349.140802][T21398] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1349.154392][T21398] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1349.166926][T21398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.191872][T14241] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.193510][ T5838] usb 4-1: USB disconnect, device number 17 [ 1349.205735][T21398] usb 6-1: config 0 descriptor?? [ 1349.422735][T14241] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.441628][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.450262][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.551874][T14241] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.712170][T22658] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1350.766540][T24130] chnl_net:caif_netlink_parms(): no params data found [ 1350.788391][ T5904] usb 6-1: USB disconnect, device number 55 [ 1350.856562][T23496] Bluetooth: hci1: command tx timeout [ 1350.910870][T24164] FAULT_INJECTION: forcing a failure. [ 1350.910870][T24164] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.938524][T24164] CPU: 1 UID: 0 PID: 24164 Comm: syz.5.5351 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.938554][T24164] Tainted: [L]=SOFTLOCKUP [ 1350.938562][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1350.938573][T24164] Call Trace: [ 1350.938581][T24164] [ 1350.938589][T24164] dump_stack_lvl+0xe8/0x150 [ 1350.938621][T24164] should_fail_ex+0x412/0x560 [ 1350.938652][T24164] should_failslab+0xa8/0x100 [ 1350.938673][T24164] __kvmalloc_node_noprof+0x178/0x8a0 [ 1350.938693][T24164] ? vhost_dev_ioctl+0xc9b/0x1170 [ 1350.938722][T24164] vhost_dev_ioctl+0xc9b/0x1170 [ 1350.938741][T24164] ? vhost_vsock_dev_ioctl+0x220/0xed0 [ 1350.938767][T24164] ? __pfx___mutex_lock+0x10/0x10 [ 1350.938803][T24164] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 1350.938835][T24164] vhost_vsock_dev_ioctl+0x22e/0xed0 [ 1350.938863][T24164] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1350.938885][T24164] ? __fget_files+0x2a/0x420 [ 1350.938906][T24164] ? __fget_files+0x3a0/0x420 [ 1350.938926][T24164] ? __fget_files+0x2a/0x420 [ 1350.938950][T24164] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1350.938968][T24164] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1350.938991][T24164] __se_sys_ioctl+0xfc/0x170 [ 1350.939009][T24164] do_syscall_64+0x14d/0xf80 [ 1350.939031][T24164] ? trace_irq_disable+0x3b/0x150 [ 1350.939051][T24164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.939069][T24164] ? clear_bhb_loop+0x40/0x90 [ 1350.939090][T24164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.939107][T24164] RIP: 0033:0x7f4a2699c799 [ 1350.939125][T24164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.939139][T24164] RSP: 002b:00007f4a27777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.939160][T24164] RAX: ffffffffffffffda RBX: 00007f4a26c15fa0 RCX: 00007f4a2699c799 [ 1350.939173][T24164] RDX: 00002000000008c0 RSI: 000000004008af03 RDI: 0000000000000003 [ 1350.939185][T24164] RBP: 00007f4a27777090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.939196][T24164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.939207][T24164] R13: 00007f4a26c16038 R14: 00007f4a26c15fa0 R15: 00007fff5107c598 [ 1350.939237][T24164] [ 1351.214255][T14241] bridge_slave_1: left allmulticast mode [ 1351.220341][T14241] bridge_slave_1: left promiscuous mode [ 1351.226362][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.250160][T14241] bridge_slave_0: left allmulticast mode [ 1351.256783][T14241] bridge_slave_0: left promiscuous mode [ 1351.262757][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.326729][T22658] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1351.336061][T22658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.344120][T22658] usb 5-1: Product: syz [ 1351.348304][T22658] usb 5-1: Manufacturer: syz [ 1351.352967][T22658] usb 5-1: SerialNumber: syz [ 1351.658968][T24175] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1351.665727][T24175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1351.680109][T24175] vhci_hcd vhci_hcd.0: Device attached [ 1351.758158][T14241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.778199][T14241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.797787][T14241] bond0 (unregistering): Released all slaves [ 1351.813034][T22658] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1351.824496][ T5948] usb 40-1: device descriptor read/8, error -110 [ 1351.845352][T22658] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1351.910935][T22658] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1351.955088][T15337] usb 44-1: SetAddress Request (2) to port 0 [ 1351.974766][ T5948] usb usb40-port1: unable to enumerate USB device [ 1351.977032][T22658] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1351.981335][T15337] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1352.096159][T22658] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1352.118589][T22658] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1352.169554][T22658] usb 5-1: USB disconnect, device number 13 [ 1352.351581][T24130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.374527][T24130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.382133][T24130] bridge_slave_0: entered allmulticast mode [ 1352.391713][T24130] bridge_slave_0: entered promiscuous mode [ 1352.428773][T24130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.436382][T24130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.446504][T24130] bridge_slave_1: entered allmulticast mode [ 1352.454811][T24176] vhci_hcd: connection reset by peer [ 1352.456157][T24130] bridge_slave_1: entered promiscuous mode [ 1352.470364][ T3507] vhci_hcd vhci_hcd.5: stop threads [ 1352.476184][ T5948] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1352.493098][ T3507] vhci_hcd vhci_hcd.5: release socket [ 1352.517465][ T3507] vhci_hcd vhci_hcd.5: disconnect device [ 1352.547557][T24130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.592594][T24130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.614906][T14241] hsr_slave_0: left promiscuous mode [ 1352.621772][T14241] hsr_slave_1: left promiscuous mode [ 1352.629769][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.634597][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 1352.637391][T14241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.651295][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.653276][ T5948] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1352.658953][T14241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.680181][ T5948] usb 4-1: config 0 has no interface number 0 [ 1352.686814][ T5948] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1352.699099][ T5948] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1352.703183][T14241] veth1_macvtap: left promiscuous mode [ 1352.717760][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.721432][T14241] veth0_macvtap: left promiscuous mode [ 1352.739596][ T5948] usb 4-1: config 0 descriptor?? [ 1352.745871][T14241] veth1_vlan: left promiscuous mode [ 1352.751319][T14241] veth0_vlan: left promiscuous mode [ 1352.782615][ T5948] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1352.928207][T23496] Bluetooth: hci1: command tx timeout [ 1352.952802][T24185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.961989][T24185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.973071][T22658] usb 4-1: USB disconnect, device number 18 [ 1353.271986][T14241] team0 (unregistering): Port device team_slave_1 removed [ 1353.306899][T14241] team0 (unregistering): Port device team_slave_0 removed [ 1353.336045][ T5948] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1353.495478][ T5948] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1353.508582][ T5948] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.520400][T24193] netlink: 'syz.4.5354': attribute type 12 has an invalid length. [ 1353.548849][ T5948] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1353.579288][ T5948] usb 6-1: config 1 has no interface number 1 [ 1353.598352][ T5948] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1353.619104][ T5948] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1353.666940][ T5948] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1353.691861][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.715047][ T5948] usb 6-1: Product: syz [ 1353.719314][ T5948] usb 6-1: Manufacturer: syz [ 1353.733649][ T5948] usb 6-1: SerialNumber: syz [ 1353.763090][T24130] team0: Port device team_slave_0 added [ 1353.812590][T24130] team0: Port device team_slave_1 added [ 1354.706514][T24204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5355'. [ 1354.766369][T24204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5355'. [ 1354.811611][T24130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.828730][T24130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.858129][ T5838] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1354.877451][ T5948] usb 6-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1354.891659][ T5948] usb 6-1: MIDIStreaming interface descriptor not found [ 1354.924884][T24130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.976410][T24130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.996728][T24130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.034144][T23496] Bluetooth: hci1: command tx timeout [ 1355.071096][T24130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.110280][ T5838] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1355.143045][ T5838] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 1355.153081][ T5948] usb 6-1: USB disconnect, device number 56 [ 1355.155140][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1355.157262][ T5838] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1355.212719][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1355.249051][ T5838] usb 4-1: Product: syz [ 1355.264563][ T5838] usb 4-1: Manufacturer: syz [ 1355.271283][ T5838] usb 4-1: SerialNumber: syz [ 1355.318131][ T5838] usb 4-1: config 0 descriptor?? [ 1355.353786][ T5838] usb 4-1: selecting invalid altsetting 0 [ 1355.389374][T24130] hsr_slave_0: entered promiscuous mode [ 1355.412825][T24130] hsr_slave_1: entered promiscuous mode [ 1355.438010][T24130] debugfs: 'hsr0' already exists in 'hsr' [ 1355.460229][T24130] Cannot create hsr debugfs directory [ 1355.669969][ T5838] usb 4-1: USB disconnect, device number 19 [ 1355.794929][T22658] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1355.985690][T22658] usb 6-1: Using ep0 maxpacket: 8 [ 1355.994487][T22658] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 1356.007416][T22658] usb 6-1: config 0 has no interface number 1 [ 1356.019375][T22658] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1356.031858][T22658] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1356.045133][T22658] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1356.055102][T22658] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.063208][T22658] usb 6-1: Product: syz [ 1356.074869][T22658] usb 6-1: Manufacturer: syz [ 1356.079659][T22658] usb 6-1: SerialNumber: syz [ 1356.088622][T22658] usb 6-1: config 0 descriptor?? [ 1356.108394][T22658] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1356.318337][ T2357] pvrusb2: Invalid read control endpoint [ 1356.334232][ T2357] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1356.336010][T22658] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1356.354231][ T2357] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1356.405845][T22658] usb 6-1: USB disconnect, device number 57 [ 1356.455342][ T5838] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1356.623697][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 1356.632634][ T5838] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1356.650077][ T5838] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1356.671890][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.693142][ T5838] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1356.712553][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1356.735317][ T5838] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1356.758647][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1356.791318][ T5838] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1356.803276][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.821849][ T5838] usb 5-1: config 0 descriptor?? [ 1356.987195][T24263] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1356.993967][T24263] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1357.011404][T24263] vhci_hcd vhci_hcd.0: Device attached [ 1357.042934][T24264] vhci_hcd: connection closed [ 1357.043206][ T3507] vhci_hcd vhci_hcd.5: stop threads [ 1357.056309][T21398] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1357.062285][ T5838] usb 5-1: USB disconnect, device number 14 [ 1357.076782][ T3507] vhci_hcd vhci_hcd.5: release socket [ 1357.083737][T23496] Bluetooth: hci1: command tx timeout [ 1357.088572][T15337] usb 44-1: device descriptor read/8, error -110 [ 1357.094084][ T3507] vhci_hcd vhci_hcd.5: disconnect device [ 1357.199505][T21398] usb 4-1: device descriptor read/64, error -71 [ 1357.318007][T24130] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1357.334210][T24130] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1357.349149][T24130] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1357.371764][T24130] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1357.444276][T21398] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1357.495467][T15337] usb usb44-port1: attempt power cycle [ 1357.521381][T24130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.575781][T21398] usb 4-1: device descriptor read/64, error -71 [ 1357.577817][T24130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.588917][ T5838] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1357.623205][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.630480][T14241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.682607][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.689872][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.711445][T21398] usb usb4-port1: attempt power cycle [ 1357.758935][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 1357.785330][ T5838] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1357.818653][ T5838] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1357.850741][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.888936][ T5838] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1357.919648][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1357.940341][ T5838] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1357.963461][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1357.978750][ T5838] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1357.988993][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.019560][ T5838] usb 5-1: config 0 descriptor?? [ 1358.063885][T21398] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1358.072692][T15337] usb usb44-port1: unable to enumerate USB device [ 1358.117798][T21398] usb 4-1: device descriptor read/8, error -71 [ 1358.126632][T24308] netlink: 'syz.5.5364': attribute type 12 has an invalid length. [ 1359.363683][T21398] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1359.382667][T22657] usb 5-1: USB disconnect, device number 15 [ 1359.396305][T21398] usb 4-1: device descriptor read/8, error -71 [ 1359.483918][T24130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.514117][T21398] usb usb4-port1: unable to enumerate USB device [ 1359.677778][T24130] veth0_vlan: entered promiscuous mode [ 1359.709495][T24130] veth1_vlan: entered promiscuous mode [ 1359.827964][T24130] veth0_macvtap: entered promiscuous mode [ 1359.857751][T24130] veth1_macvtap: entered promiscuous mode [ 1359.869228][T22657] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1359.971521][T24130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1360.011157][T24130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1360.066344][T22657] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1360.096220][T22615] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.108067][T22657] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 1360.119932][T22615] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.129316][T22657] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1360.138644][T22657] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1360.157324][T22657] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1360.175980][T22615] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.185483][T22657] usb 5-1: Product: syz [ 1360.191394][T22615] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.209232][T22657] usb 5-1: Manufacturer: syz [ 1360.247055][T22657] usb 5-1: SerialNumber: syz [ 1360.319438][T22657] usb 5-1: config 0 descriptor?? [ 1360.391201][T22657] usb 5-1: selecting invalid altsetting 0 [ 1360.505804][T14241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.532660][T14241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.691619][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.702236][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.730464][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.744779][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.830776][ T5935] usb 5-1: USB disconnect, device number 16 [ 1361.263702][T22657] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1361.413637][T22657] usb 2-1: Using ep0 maxpacket: 16 [ 1361.441914][T22657] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1361.458020][T22657] usb 2-1: New USB device found, idVendor=0499, idProduct=0101, bcdDevice= 0.40 [ 1361.482472][T22657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.494321][T22657] usb 2-1: Product: syz [ 1361.500850][T22657] usb 2-1: Manufacturer: syz [ 1361.502770][T24374] netlink: 'syz.4.5372': attribute type 12 has an invalid length. [ 1361.515009][T22657] usb 2-1: SerialNumber: syz [ 1362.693487][T22657] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1362.768255][T22657] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1362.972981][T22657] usb 2-1: USB disconnect, device number 2 [ 1363.060271][T22291] udevd[22291]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1363.184333][ T1220] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1363.355241][ T1220] usb 4-1: Using ep0 maxpacket: 8 [ 1363.377514][ T1220] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 1363.404300][ T1220] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.424835][ T1220] usb 4-1: config 0 has no interface number 0 [ 1363.440259][ T1220] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1363.464451][ T1220] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1363.495666][ T1220] usb 4-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 1363.525776][ T1220] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1363.545271][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.567393][ T1220] usb 4-1: Product: syz [ 1363.582235][ T1220] usb 4-1: Manufacturer: syz [ 1363.593011][ T1220] usb 4-1: SerialNumber: syz [ 1363.612216][ T1220] usb 4-1: config 0 descriptor?? [ 1363.664233][T24385] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1363.892195][ T1220] usb 4-1: NFC: intf ffff88804c39f000 id ffffffff8f5fd0c0 [ 1363.958472][ T1220] usb 4-1: USB disconnect, device number 24 [ 1364.330100][ T3507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.444257][ T5884] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1364.635301][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 1364.654852][ T5884] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1364.675868][ T5884] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1364.709083][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.740740][ T5884] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1364.754258][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1364.784062][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1364.788434][ T3507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.812441][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1364.819649][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1364.833363][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1364.847891][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1364.864620][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1364.883693][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1364.919481][ T5884] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1364.959683][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.988131][T24415] netlink: 'syz.3.5381': attribute type 12 has an invalid length. [ 1365.023367][ T5884] usb 5-1: config 0 descriptor?? [ 1366.327133][ T5838] usb 5-1: USB disconnect, device number 17 [ 1366.569896][ T3507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.823169][ T3507] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.864383][ T5838] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1366.925633][T23496] Bluetooth: hci1: command tx timeout [ 1367.035917][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 1367.069327][ T5838] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1367.089261][ T5838] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1367.119940][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.144386][ T5838] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1367.160893][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1367.171873][ T5838] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1367.182133][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1367.195859][ T5838] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1367.213658][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.239113][ T5838] usb 5-1: config 0 descriptor?? [ 1367.598406][T24420] chnl_net:caif_netlink_parms(): no params data found [ 1367.753714][ T5838] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1367.917766][ T5838] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1367.943254][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.972374][ T3507] bridge_slave_1: left allmulticast mode [ 1367.979493][ T5838] usb 4-1: Product: syz [ 1367.986277][ T3507] bridge_slave_1: left promiscuous mode [ 1367.994873][ T5838] usb 4-1: Manufacturer: syz [ 1367.999810][ T5838] usb 4-1: SerialNumber: syz [ 1368.005110][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.029507][ T3507] bridge_slave_0: left allmulticast mode [ 1368.045691][ T3507] bridge_slave_0: left promiscuous mode [ 1368.051927][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.433484][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1368.454349][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1368.533438][ T3507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.548152][ T3507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.560069][ T3507] bond0 (unregistering): Released all slaves [ 1368.607809][T24420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.649673][T24420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.662782][T24420] bridge_slave_0: entered allmulticast mode [ 1368.677344][T24420] bridge_slave_0: entered promiscuous mode [ 1368.706929][T24420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.715365][T24420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.728557][T24420] bridge_slave_1: entered allmulticast mode [ 1368.750980][T24420] bridge_slave_1: entered promiscuous mode [ 1368.888575][T24455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.904380][T24455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.913537][T24420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.005886][T23496] Bluetooth: hci1: command tx timeout [ 1369.023932][T24420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.104629][T22657] usb 5-1: USB disconnect, device number 18 [ 1369.135274][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1369.180043][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1369.189873][ T3507] hsr_slave_0: left promiscuous mode [ 1369.202026][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1369.214519][ T3507] hsr_slave_1: left promiscuous mode [ 1369.238828][ T5838] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1369.244791][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1369.272076][ T5838] usb 4-1: USB disconnect, device number 25 [ 1369.286683][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.323355][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1369.350347][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.390497][ T3507] veth1_macvtap: left promiscuous mode [ 1369.406009][ T3507] veth0_macvtap: left promiscuous mode [ 1369.423850][ T3507] veth1_vlan: left promiscuous mode [ 1369.430489][ T3507] veth0_vlan: left promiscuous mode [ 1370.921488][ T3507] team0 (unregistering): Port device team_slave_1 removed [ 1370.987185][ T3507] team0 (unregistering): Port device team_slave_0 removed [ 1371.083749][T23496] Bluetooth: hci1: command tx timeout [ 1371.138241][ T5948] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1371.264951][T24420] team0: Port device team_slave_0 added [ 1371.302924][T24420] team0: Port device team_slave_1 added [ 1371.328097][ T5948] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1371.393635][ T5948] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 1371.406887][ T5948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1371.425994][ T5948] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1371.445478][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1371.472297][ T5948] usb 4-1: Product: syz [ 1371.494831][ T5948] usb 4-1: Manufacturer: syz [ 1371.512476][ T5948] usb 4-1: SerialNumber: syz [ 1371.546635][ T5948] usb 4-1: config 0 descriptor?? [ 1371.625106][ T5948] usb 4-1: selecting invalid altsetting 0 [ 1371.648599][T24420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.689206][T24420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.789804][T24420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.857887][T24420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.892859][T24420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.987886][T24420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.084296][ T805] usb 4-1: USB disconnect, device number 26 [ 1372.399465][T24420] hsr_slave_0: entered promiscuous mode [ 1372.416449][T24420] hsr_slave_1: entered promiscuous mode [ 1372.445544][T24420] debugfs: 'hsr0' already exists in 'hsr' [ 1372.451428][T24420] Cannot create hsr debugfs directory [ 1372.645882][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1372.666402][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1372.680188][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1372.703834][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1372.714113][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1373.053877][ T1220] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1373.157811][ T3507] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.169549][T23496] Bluetooth: hci1: command tx timeout [ 1373.224651][ T1220] usb 4-1: Using ep0 maxpacket: 16 [ 1373.237197][ T1220] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1373.264699][ T1220] usb 4-1: config 0 has no interface number 0 [ 1373.281459][ T1220] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.328985][ T1220] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.360346][ T1220] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1373.389985][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.419946][ T1220] usb 4-1: config 0 descriptor?? [ 1373.529426][ T3507] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.794481][ T3507] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.871614][T24546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.915784][T24546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.993086][ T3507] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.150721][T24546] netlink: 'syz.3.5395': attribute type 16 has an invalid length. [ 1374.179140][T24546] netlink: 138 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1374.203627][ T1220] uclogic 0003:28BD:0071.00CE: pen parameters not found [ 1374.219229][ T1220] uclogic 0003:28BD:0071.00CE: interface is invalid, ignoring [ 1374.262320][ T1220] usb 4-1: USB disconnect, device number 27 [ 1374.852517][T23496] Bluetooth: hci2: command tx timeout [ 1375.634838][ T1220] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1375.806579][ T1220] usb 4-1: Using ep0 maxpacket: 32 [ 1375.822431][ T1220] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1375.839062][ T1220] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1375.848263][ T1220] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1375.857449][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1375.868571][ T1220] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1375.878359][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1375.889895][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1375.903435][ T1220] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1375.912924][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.924005][ T1220] usb 4-1: config 0 descriptor?? [ 1376.008729][ T3507] bridge_slave_1: left allmulticast mode [ 1376.024366][ T3507] bridge_slave_1: left promiscuous mode [ 1376.037529][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.083753][ T3507] bridge_slave_0: left allmulticast mode [ 1376.089646][ T3507] bridge_slave_0: left promiscuous mode [ 1376.101250][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.150535][T22657] usb 4-1: USB disconnect, device number 28 [ 1376.410954][ T3507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.422578][ T3507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.433109][ T3507] bond0 (unregistering): Released all slaves [ 1376.449360][T24540] chnl_net:caif_netlink_parms(): no params data found [ 1376.606286][T22657] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1376.803738][T22657] usb 4-1: Using ep0 maxpacket: 16 [ 1376.813498][T22657] usb 4-1: no configurations [ 1376.855114][T22657] usb 4-1: can't read configurations, error -22 [ 1376.924746][T23496] Bluetooth: hci2: command tx timeout [ 1377.003807][T22657] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1377.118002][ T3507] hsr_slave_0: left promiscuous mode [ 1377.128590][ T3507] hsr_slave_1: left promiscuous mode [ 1377.136792][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1377.153495][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.175497][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1377.183311][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.193882][T22657] usb 4-1: Using ep0 maxpacket: 16 [ 1377.206447][T22657] usb 4-1: no configurations [ 1377.216701][T22657] usb 4-1: can't read configurations, error -22 [ 1377.239013][T22657] usb usb4-port1: attempt power cycle [ 1377.276921][ T3507] veth1_macvtap: left promiscuous mode [ 1377.287889][ T3507] veth0_macvtap: left promiscuous mode [ 1377.294028][ T3507] veth1_vlan: left promiscuous mode [ 1377.300408][ T3507] veth0_vlan: left promiscuous mode [ 1377.593795][T22657] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1377.624507][T22657] usb 4-1: Using ep0 maxpacket: 16 [ 1377.632240][T22657] usb 4-1: no configurations [ 1377.647676][ T3507] team0 (unregistering): Port device team_slave_1 removed [ 1377.655703][T22657] usb 4-1: can't read configurations, error -22 [ 1377.679016][ T3507] team0 (unregistering): Port device team_slave_0 removed [ 1377.793879][T22657] usb 4-1: new high-speed USB device number 32 using dummy_hcd Connection to 10.128.0.77 closed by remote host. [ 1378.113810][T22657] usb 4-1: device not accepting address 32, error -71 [ 1378.148491][T22657] usb usb4-port1: unable to enumerate USB device [ 1379.004472][T23496] Bluetooth: hci2: command tx timeout [ 1379.841783][ T3507] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.962915][ T3507] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.177996][ T3507] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.242291][ T2357] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 1380.247493][T24651] smc: removing smcd device lo [ 1380.251449][ T2357] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 1380.267501][ T2357] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 1380.306958][ T2357] pvrusb2: Failure uploading firmware1 [ 1380.313525][ T2357] pvrusb2: Device initialization was not successful. [ 1380.321595][ T2357] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 1380.331770][ T2357] pvrusb2: Failed to submit write-control URB status=-19 [ 1380.364039][T22658] pvrusb2: Device being rendered inoperable [ 1380.376707][ T2357] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1380.392768][ T2357] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1380.400198][ T3507] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.401946][ T2357] ------------[ cut here ]------------ [ 1380.417362][ T2357] ret [ 1380.417383][ T2357] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#1: pvrusb2-context/2357 [ 1380.433607][ T2357] Modules linked in: [ 1380.438014][ T2357] CPU: 1 UID: 0 PID: 2357 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.450533][ T2357] Tainted: [L]=SOFTLOCKUP [ 1380.455241][ T2357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1380.465935][ T2357] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 1380.472550][ T2357] Code: b4 fb e9 5d fc ff ff e8 08 ca b4 fb c6 05 33 09 2c 0a 01 48 c7 c7 80 a9 75 8c e8 65 99 15 fb e9 85 fc ff ff e8 eb c9 b4 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 aa 75 8c 4c 89 e2 e8 e5 83 1a fb e9 [ 1380.492425][ T2357] RSP: 0018:ffffc90006d5f670 EFLAGS: 00010293 [ 1380.498595][ T2357] RAX: ffffffff86122c25 RBX: dffffc0000000000 RCX: ffff88802d285b80 [ 1380.506735][ T2357] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 1380.514780][ T2357] RBP: 0000000000000001 R08: ffffffff90544af7 R09: 1ffffffff20a895e [ 1380.523151][ T2357] R10: dffffc0000000000 R11: fffffbfff20a895f R12: ffffffff8cd02cc0 [ 1380.532037][ T2357] R13: 0000000000001770 R14: ffff88804e3470b0 R15: 00000000fffffff5 [ 1380.540225][ T2357] FS: 0000000000000000(0000) GS:ffff888124eea000(0000) knlGS:0000000000000000 [ 1380.549335][ T2357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1380.555973][ T2357] CR2: 00007f41442342a9 CR3: 0000000034b3c000 CR4: 00000000003526f0 [ 1380.564118][ T2357] Call Trace: [ 1380.567399][ T2357] [ 1380.570354][ T2357] ? kfree+0x1c5/0x640 [ 1380.575335][ T2357] ? _request_firmware+0xf11/0x1780 [ 1380.580855][ T2357] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1380.586735][ T2357] _request_firmware+0x1052/0x1780 [ 1380.592006][ T2357] ? __pfx__request_firmware+0x10/0x10 [ 1380.597553][ T2357] request_firmware+0x36/0x50 [ 1380.602264][ T2357] pvr2_locate_firmware+0xb3/0x500 [ 1380.607711][ T2357] pvr2_upload_firmware1+0x1ba/0x910 [ 1380.613135][ T2357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1380.619294][ T2357] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 1380.625157][ T2357] ? __lock_acquire+0x6b5/0x2cf0 [ 1380.630208][ T2357] pvr2_hdw_initialize+0x428/0x3c50 [ 1380.635558][ T2357] ? lockdep_hardirqs_on+0x7a/0x110 [ 1380.640876][ T2357] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1380.647133][ T2357] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 1380.653100][ T2357] ? rcu_is_watching+0x15/0xb0 [ 1380.657935][ T2357] ? trace_contention_end+0x3d/0x150 [ 1380.663989][ T2357] ? pvr2_context_thread_func+0x26a/0xb40 [ 1380.669740][ T2357] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1380.675562][ T2357] ? __pfx___mutex_lock+0x10/0x10 [ 1380.680675][ T2357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1380.686917][ T2357] ? schedule+0x90/0x360 [ 1380.691206][ T2357] ? schedule+0x16e/0x360 [ 1380.695743][ T2357] pvr2_context_thread_func+0x490/0xb40 [ 1380.701523][ T2357] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1380.707720][ T2357] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1380.713854][ T2357] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1380.719767][ T2357] ? __kthread_parkme+0x7a/0x1f0 [ 1380.724751][ T2357] kthread+0x388/0x470 [ 1380.728882][ T2357] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1380.734972][ T2357] ? __pfx_kthread+0x10/0x10 [ 1380.739579][ T2357] ret_from_fork+0x51e/0xb90 [ 1380.744223][ T2357] ? __pfx_ret_from_fork+0x10/0x10 [ 1380.749365][ T2357] ? __switch_to+0xc7d/0x1450 [ 1380.754211][ T2357] ? __pfx_kthread+0x10/0x10 [ 1380.758824][ T2357] ret_from_fork_asm+0x1a/0x30 [ 1380.763697][ T2357] [ 1380.766798][ T2357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1380.774070][ T2357] CPU: 1 UID: 0 PID: 2357 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.785364][ T2357] Tainted: [L]=SOFTLOCKUP [ 1380.789677][ T2357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1380.799748][ T2357] Call Trace: [ 1380.803039][ T2357] [ 1380.806091][ T2357] vpanic+0x56c/0xa60 [ 1380.810237][ T2357] ? __pfx__printk+0x10/0x10 [ 1380.814934][ T2357] ? __pfx_vpanic+0x10/0x10 [ 1380.820070][ T2357] ? is_bpf_text_address+0x292/0x2b0 [ 1380.825465][ T2357] ? is_bpf_text_address+0x26/0x2b0 [ 1380.830736][ T2357] panic+0xc5/0xd0 [ 1380.834652][ T2357] ? __pfx_panic+0x10/0x10 [ 1380.839089][ T2357] ? ret_from_fork_asm+0x1a/0x30 [ 1380.844370][ T2357] __warn+0x315/0x4f0 [ 1380.848539][ T2357] ? firmware_fallback_sysfs+0x746/0xa30 [ 1380.854255][ T2357] ? firmware_fallback_sysfs+0x746/0xa30 [ 1380.859971][ T2357] __report_bug+0x29a/0x540 [ 1380.864691][ T2357] ? firmware_fallback_sysfs+0x746/0xa30 [ 1380.870338][ T2357] ? __pfx___report_bug+0x10/0x10 [ 1380.875365][ T2357] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1380.881174][ T2357] ? firmware_fallback_sysfs+0x746/0xa30 [ 1380.887101][ T2357] report_bug+0x16a/0x220 [ 1380.891537][ T2357] ? firmware_fallback_sysfs+0x746/0xa30 [ 1380.897266][ T2357] ? firmware_fallback_sysfs+0x748/0xa30 [ 1380.902979][ T2357] handle_bug+0x9c/0x200 [ 1380.907245][ T2357] exc_invalid_op+0x1a/0x50 [ 1380.911865][ T2357] asm_exc_invalid_op+0x1a/0x20 [ 1380.916757][ T2357] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 1380.923018][ T2357] Code: b4 fb e9 5d fc ff ff e8 08 ca b4 fb c6 05 33 09 2c 0a 01 48 c7 c7 80 a9 75 8c e8 65 99 15 fb e9 85 fc ff ff e8 eb c9 b4 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 aa 75 8c 4c 89 e2 e8 e5 83 1a fb e9 [ 1380.942707][ T2357] RSP: 0018:ffffc90006d5f670 EFLAGS: 00010293 [ 1380.948792][ T2357] RAX: ffffffff86122c25 RBX: dffffc0000000000 RCX: ffff88802d285b80 [ 1380.956845][ T2357] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 1380.964898][ T2357] RBP: 0000000000000001 R08: ffffffff90544af7 R09: 1ffffffff20a895e [ 1380.972869][ T2357] R10: dffffc0000000000 R11: fffffbfff20a895f R12: ffffffff8cd02cc0 [ 1380.980869][ T2357] R13: 0000000000001770 R14: ffff88804e3470b0 R15: 00000000fffffff5 [ 1380.988869][ T2357] ? firmware_fallback_sysfs+0x745/0xa30 [ 1380.994601][ T2357] ? kfree+0x1c5/0x640 [ 1380.998669][ T2357] ? _request_firmware+0xf11/0x1780 [ 1381.003869][ T2357] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1381.009446][ T2357] _request_firmware+0x1052/0x1780 [ 1381.014591][ T2357] ? __pfx__request_firmware+0x10/0x10 [ 1381.020056][ T2357] request_firmware+0x36/0x50 [ 1381.024752][ T2357] pvr2_locate_firmware+0xb3/0x500 [ 1381.029899][ T2357] pvr2_upload_firmware1+0x1ba/0x910 [ 1381.035191][ T2357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1381.041345][ T2357] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 1381.047152][ T2357] ? __lock_acquire+0x6b5/0x2cf0 [ 1381.052115][ T2357] pvr2_hdw_initialize+0x428/0x3c50 [ 1381.057306][ T2357] ? lockdep_hardirqs_on+0x7a/0x110 [ 1381.062546][ T2357] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1381.068642][ T2357] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 1381.074284][ T2357] ? rcu_is_watching+0x15/0xb0 [ 1381.079040][ T2357] ? trace_contention_end+0x3d/0x150 [ 1381.084422][ T2357] ? pvr2_context_thread_func+0x26a/0xb40 [ 1381.090175][ T2357] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1381.095840][ T2357] ? __pfx___mutex_lock+0x10/0x10 [ 1381.100924][ T2357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1381.106939][ T2357] ? schedule+0x90/0x360 [ 1381.111282][ T2357] ? schedule+0x16e/0x360 [ 1381.115631][ T2357] pvr2_context_thread_func+0x490/0xb40 [ 1381.121186][ T2357] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1381.127271][ T2357] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1381.133446][ T2357] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1381.139255][ T2357] ? __kthread_parkme+0x7a/0x1f0 [ 1381.144268][ T2357] kthread+0x388/0x470 [ 1381.148353][ T2357] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1381.154440][ T2357] ? __pfx_kthread+0x10/0x10 [ 1381.159023][ T2357] ret_from_fork+0x51e/0xb90 [ 1381.163614][ T2357] ? __pfx_ret_from_fork+0x10/0x10 [ 1381.168756][ T2357] ? __switch_to+0xc7d/0x1450 [ 1381.173424][ T2357] ? __pfx_kthread+0x10/0x10 [ 1381.178016][ T2357] ret_from_fork_asm+0x1a/0x30 [ 1381.182793][ T2357] [ 1381.186438][ T2357] Kernel Offset: disabled [ 1381.190884][ T2357] Rebooting in 86400 seconds..