last executing test programs: 6m43.878362s ago: executing program 1 (id=380): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a", @ANYRES16], 0x125) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)="00bb", 0x2, 0x40008895, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4800) 6m40.911978224s ago: executing program 1 (id=389): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000001f000000850000007a000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m40.67078891s ago: executing program 1 (id=390): r0 = epoll_create(0x7ff40000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xb0000005}) epoll_pwait2(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 6m40.485540262s ago: executing program 1 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 6m39.149187568s ago: executing program 1 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000480)=""/123, 0x7b}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000580)=""/106, 0x6a}], 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m37.598654212s ago: executing program 1 (id=400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000001f000000850000007a000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m37.377073838s ago: executing program 32 (id=400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000001f000000850000007a000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m36.934607896s ago: executing program 3 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x8, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x12d, &(0x7f0000000540)={0x0, 0xf20f, 0x8041, 0xffffffff, 0x1b, 0x0, r0}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000500)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x7, 0x8, 0x7fffffff, 0x8, 0x32, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x7, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="360000000f00fef400000030", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 5m35.310856229s ago: executing program 3 (id=594): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m24.07484175s ago: executing program 3 (id=632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffdffffff1d000000080003", @ANYRES32=r2], 0x54}}, 0x0) 5m23.921781456s ago: executing program 3 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 5m23.541849514s ago: executing program 3 (id=637): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_create_resource$binfmt(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffff, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) 5m22.507055615s ago: executing program 3 (id=642): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m22.229330201s ago: executing program 33 (id=642): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m4.438076601s ago: executing program 0 (id=930): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m4.382325112s ago: executing program 0 (id=931): socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0xb, 0x17, 0x2, 0x8, 0xa9, 0x2, 0x2}) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r7, 0x0, r6, 0x0, 0xd9d7, 0x5) ioctl$int_in(r8, 0x5452, &(0x7f00000004c0)=0x1ff) write$FUSE_INIT(r8, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0x8282e38, 0x5ff, 0x0, 0x1000, 0xa7d, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) 4m1.237718944s ago: executing program 0 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f00000002c0)={0xf000000, 0x3e4, 0x84, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa00001, 0x4, '\x00', @string=0x0}}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3m50.709706333s ago: executing program 0 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 3m50.561749734s ago: executing program 0 (id=971): r0 = syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m49.86765282s ago: executing program 0 (id=974): r0 = syz_io_uring_setup(0x1c9b, &(0x7f0000000000)={0x0, 0x22da, 0x40, 0x80001, 0xd}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_flags_required={0x3, 0x1c}], 0x1) 3m48.985393457s ago: executing program 34 (id=974): r0 = syz_io_uring_setup(0x1c9b, &(0x7f0000000000)={0x0, 0x22da, 0x40, 0x80001, 0xd}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_flags_required={0x3, 0x1c}], 0x1) 2m37.328799478s ago: executing program 6 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x850) 2m36.929226323s ago: executing program 6 (id=1340): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 2m36.771701237s ago: executing program 6 (id=1341): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) move_mount(r3, 0x0, r3, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) 2m36.513444634s ago: executing program 6 (id=1345): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x408642, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ftruncate(0xffffffffffffffff, 0x1) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0x4112, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000300)=[@in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e22, 0x8000000, @remote, 0x3}]}, &(0x7f0000000280)=0x10) close(r2) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000680)={0x9, [0x4, 0x9, 0x1d, 0x82, 0x120, 0x4f3b, 0x9, 0x1, 0x8, 0x4000, 0x1a98, 0x401, 0x3, 0xd, 0x2, 0x8, 0xffff, 0x20, 0x200, 0x4, 0xf49f, 0x8001, 0x1, 0xa, 0x2, 0x2f3, 0x52, 0x8, 0x2, 0x401, 0x9, 0xff, 0x6, 0xb, 0x724d, 0x3, 0xfff9, 0x0, 0x8, 0x41, 0x5, 0xfffd, 0x4f7, 0x82f8, 0x5, 0xfff6, 0xfff, 0x8], 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f000047e000/0x3000)=nil, &(0x7f0000a03000/0x3000)=nil, &(0x7f00000fd000/0x1000)=nil, &(0x7f0000690000/0x1000)=nil, &(0x7f000066d000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000330000/0x2000)=nil, &(0x7f0000604000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000868000/0x1000)=nil, 0x0, 0x0, r4}, 0x68) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10280400030000001400030069703667726574617030000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x3, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m35.865263593s ago: executing program 6 (id=1347): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) syz_emit_ethernet(0x1201, &(0x7f0000001bc0)=ANY=[], 0x0) 2m35.729551084s ago: executing program 6 (id=1348): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) socket$inet6(0xa, 0x2, 0xfffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4000009b}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x9000}) syz_open_dev$char_usb(0xc, 0xb4, 0xff) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r6, 0x0, 0x1000460b, 0x3) r7 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r7) 2m19.632712194s ago: executing program 35 (id=1348): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) socket$inet6(0xa, 0x2, 0xfffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4000009b}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x9000}) syz_open_dev$char_usb(0xc, 0xb4, 0xff) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r6, 0x0, 0x1000460b, 0x3) r7 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r7) 10.150350035s ago: executing program 2 (id=1992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000) 9.057197477s ago: executing program 8 (id=1996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) 7.399925004s ago: executing program 8 (id=2002): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101ed0000003c"], 0xfc}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e22, 0x7, @remote, 0x10000}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x48814) 7.379071484s ago: executing program 5 (id=2003): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) dup(r3) syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000040601020000e9ffffffe7000a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 7.367314188s ago: executing program 4 (id=2004): syz_open_dev$hidraw(0x0, 0x82, 0x2) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) move_mount(r4, 0x0, r4, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0) 7.233355228s ago: executing program 8 (id=2005): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.950167749s ago: executing program 5 (id=2007): syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(xtea)\x00'}, 0x58) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109026e000301d8100c080b"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 5.726369134s ago: executing program 4 (id=2008): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="400000000000000029000000370000001504000000000000c910ff020000000000000000000000000001c910200100000000000000000000000000000000000058010000000000002900000037000000672700000000000004010000010008dc204cb380893c7ee0b5fa19fd0a342c3b2351efc7057dad59bfdfe96185cf82617b49901d0a40fa6a3c79bfd02776fd6a0af08c56f3788b39df331315f9d64387c63ba3c1cb3f1a94ca7f5a100d424529df9a707cb8e6b202571d59777f6892c0bd5284f6e67a47259c1fbb766e9ea6ee3b954553fc30958a82f26c43bddcc9ae656cc163aba8e2e93e1530a92db158b9b0a8ce8c3832fe6fd16cbb3b04796d9143aa2a9e3327a300f6e2c40d34499cce36419110104ccee9c4b10f80d439c71f79177ad04106581c32e5ee0a4219b515a89be223fa42fd99e1efff8001010005030001c9102001"], 0x238}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) 5.54257688s ago: executing program 4 (id=2009): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000001140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @loopback, 0x5}, 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='6\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf25100000000e0001006e657464657673696d0000000f0002006e65746465"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x2901, 0x7ffffffb, 0x7, 0x802, 0xc3ef514}, 0x41, 0x1000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b80)=ANY=[@ANYBLOB="12011001000000401c1b3e1b0000000000010902240001000080010904000082030002000921fd6f000122eb00090581"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 4.857952752s ago: executing program 5 (id=2011): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) syz_emit_ethernet(0x1201, &(0x7f0000001bc0)=ANY=[], 0x0) 4.757472043s ago: executing program 5 (id=2013): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) 3.931573581s ago: executing program 2 (id=2014): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b}, 0x94) 3.262044574s ago: executing program 5 (id=2015): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa0009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 3.165295334s ago: executing program 8 (id=2016): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @string={0x4, 0x3, "e654"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x4, 0x3, "9dcc"}}, 0x0, 0x0}, 0x0) 2.922166167s ago: executing program 2 (id=2017): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1003}}, 0xff1a) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x5}}, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102cab4c508720c14008a570102030109022400010b00e0090904f405021df45208090503030000050881090502"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x200, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 2.248960042s ago: executing program 4 (id=2019): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="400000000000000029000000370000001504000000000000c910ff020000000000000000000000000001c910200100000000000000000000000000000000000058010000000000002900000037000000672700000000000004010000010008dc204cb380893c7ee0b5fa19fd0a342c3b2351efc7057dad59bfdfe96185cf82617b49901d0a40fa6a3c79bfd02776fd6a0af08c56f3788b39df331315f9d64387c63ba3c1cb3f1a94ca7f5a100d424529df9a707cb8e6b202571d59777f6892c0bd5284f6e67a47259c1fbb766e9ea6ee3b954553fc30958a82f26c43bddcc9ae656cc163aba8e2e93e1530a92db158b9b0a8ce8c3832fe6fd16cbb3b04796d9143aa2a9e3327a300f6e2c40d34499cce36419110104ccee9c4b10f80d439c71f79177ad04106581c32e5ee0a4219b515a89be223fa42fd99e1efff8001010005030001c9102001"], 0x238}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) 2.08686341s ago: executing program 4 (id=2020): sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) syz_usb_connect(0x3, 0x62, 0x0, 0x0) 1.478328735s ago: executing program 4 (id=2021): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.430907494s ago: executing program 7 (id=2022): syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(xtea)\x00'}, 0x58) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109026e000301d8100c080b"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 1.371944218s ago: executing program 2 (id=2023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) syz_emit_ethernet(0x1201, &(0x7f0000001bc0)=ANY=[], 0x0) 1.307769425s ago: executing program 2 (id=2024): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101ed0000003c"], 0xfc}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e22, 0x7, @remote, 0x10000}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x48814) 1.101100444s ago: executing program 2 (id=2025): socket$inet6(0xa, 0x80002, 0x0) socket(0x1e, 0x5, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) syz_emit_ethernet(0x7a, &(0x7f0000008480)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "15fe08", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xfffc}}}}}}}}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0xfffffffffffffffc, 0x3, 0x6}], 0x1, 0xbff, 0x0, 0x0, 0x48, 0x40}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000d060104000000000000000002000001050005e20100000005000500000000000500050001af000005000100070000000d000300686173683a6e657400000000050001000700000005000500030000000c000300686173683a69700004830fc7de0a2670110116bc3847c560a9a977742d8f72b2679049a23197276289167d7bee5f400e110abc086a8a75e6036f7f4a0fd9430df5f10dc1cfe8c5f2c00800ac9b6c79f5ded7264525c714"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) 507.859083ms ago: executing program 8 (id=2026): syz_emit_ethernet(0x24d, &(0x7f00000008c0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x1000, 0x0, 0x1}, {0xffffd}, {0xa9f1}, {}, {0xb, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3}, {0x7, 0x0, 0x1}], @ipv6=@gre_packet={0x1, 0x6, "883938", 0x1f3, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x44, 0x2, [], "872bfea17e08ca3838513b673c8261927363656a454ecd4dce1699f16021e0502fffeb64b098a1f46f683fe832ec0225b4056fdcb64002cf8d3311b55f7aff6bef319931"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xffff, 0x3], "19901483a68b4b12c9d2f2c60fcfa74f1bf2ec1a7133e2aaeec16ae60892da85f40634d56e693ae66a86503be7aa34eafcbbeafc1df0daf1ddf8e0e22a3817703a95e56b7ab1cf4bc0d5e8a8b6195afcec45d4a8f47880a87ee932756ec9295040ffd35dec5e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0x6], "98b269663fd3ff9e32a35c97f66a35ce2f941d9a3e98b5bdbd4fd6a697166b7d5e4300d4d9d0233c9dca58e89b381ac98598a316a10917b732f61452d7741a2561173e532ea9198966e489"}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0x4, 0x2, 0x1, 0x2, 0x1, 0x8}, 0x1, {0x80}}}, {0x8, 0x22eb, 0x1, {{0xc, 0x2, 0x5, 0x0, 0x1, 0x3, 0x6, 0xa}, 0x2, {0x55, 0x401, 0x2, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "9e3a21ba56a4474e3957b6ad862d975bfa42b72b304845f17de72af76027b7750fd33bc193830a866209cd041ca6f7785a870fd52df32c7c9ff022ba57702b52ce1c03875a5556f9b893244f13131978a858954fd77314d49901d09fe0c6cf58e574e5d8299d386d2ee2c6a93b2a26d674d7152ebe342add1077b12fb0075244299be2bbf5cf24ca2b1db1beaff57ffb26c4110a15dc0ae02bc9d03ee4550ae3f13c9d7c1121c1690ecdeacfaaf5ad7b0e2e"}}}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) clock_gettime(0x0, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 389.198899ms ago: executing program 7 (id=2027): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b}, 0x94) 230.030654ms ago: executing program 7 (id=2028): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0xf, [0x0, 0x2]}, @lsrr={0x83, 0x7, 0x61, [@private=0xa010101]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x7}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff, 0x0, 0x3d}}}}}}, 0x0) 198.657796ms ago: executing program 8 (id=2029): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="7ba9"], 0x0) syz_usb_connect$midi(0x6, 0x52, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0xf, 0x80, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x9f58a325fb73cd71, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x7, 0x7}], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0x81, 0x51, 0xf8, {0x4}}}, {{0x9, 0x5, 0x0, 0x10, 0x30, 0x5, 0x8, 0xf0, {0x4}}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x54, 0x8, 0x9, {0x4}}}]}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x200, 0x7, 0xb, 0x8e, 0xff, 0x7}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 154.201189ms ago: executing program 7 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x238}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) 84.367428ms ago: executing program 7 (id=2031): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x7}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000a00)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/232, 0xe8}], 0x5}, 0x0) 52.096561ms ago: executing program 7 (id=2032): syz_open_dev$hidraw(0x0, 0x82, 0x2) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) move_mount(r4, 0x0, r4, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0) 0s ago: executing program 5 (id=2033): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 401.497357][ T5613] Bluetooth: hci4: failed to register connection device [ 401.727510][ T5724] usb 6-1: USB disconnect, device number 14 [ 401.875692][ T5709] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 401.900724][ T5709] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 401.932967][ T5709] asix 3-1:0.34: probe with driver asix failed with error -71 [ 401.959968][ T5709] usb 3-1: USB disconnect, device number 9 [ 401.972524][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 402.143736][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.154169][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 402.162398][ T24] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 402.172141][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.180169][ T24] usb 8-1: Product: syz [ 402.184362][ T24] usb 8-1: Manufacturer: syz [ 402.188962][ T24] usb 8-1: SerialNumber: syz [ 402.195023][ T24] usb 8-1: config 0 descriptor?? [ 402.201848][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 402.215164][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.225336][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 402.234459][ T24] usb 8-1: media controller created [ 402.246695][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.292603][ T5724] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 402.344461][ T24] DVB: Unable to find symbol tda10046_attach() [ 402.350685][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 402.363041][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 402.455417][ T5724] usb 7-1: Using ep0 maxpacket: 16 [ 402.479298][ T5724] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 402.490506][ T5724] usb 7-1: config 1 has no interface number 0 [ 402.498498][ T5724] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 402.509363][ T5724] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 402.519583][ T5724] usb 7-1: config 1 interface 105 has no altsetting 0 [ 402.531563][ T5724] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 402.540830][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 402.549109][ T5724] usb 7-1: Product: syz [ 402.553497][ T5724] usb 7-1: Manufacturer: syz [ 402.558133][ T5724] usb 7-1: SerialNumber: syz [ 402.565519][T10408] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 402.573477][T10408] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 402.672720][ T5709] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 403.096269][ T5724] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 403.237075][ T5724] usb 7-1: USB disconnect, device number 8 [ 403.739769][ T24] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 403.756985][ T5709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.767132][ T5709] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 403.805848][ T5709] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 403.816655][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.826378][ T5709] usb 6-1: Product: syz [ 403.972580][ T5709] usb 6-1: Manufacturer: syz [ 403.977971][ T5709] usb 6-1: SerialNumber: syz [ 403.988775][ T5709] usb 6-1: config 0 descriptor?? [ 404.012143][ T24] usb 8-1: USB disconnect, device number 7 [ 404.268126][T10442] trusted_key: syz.4.1310 sent an empty control message without MSG_MORE. [ 404.403856][T10448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.470625][ T9] usb 6-1: USB disconnect, device number 15 [ 404.542739][ T5709] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 404.702727][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 404.718705][ T5709] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 404.728335][ T5709] usb 5-1: can't read configurations, error -61 [ 405.936980][ T5709] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 406.114127][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 406.135969][ T5709] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 406.162022][ T5709] usb 5-1: can't read configurations, error -61 [ 406.279755][ T5709] usb usb5-port1: attempt power cycle [ 406.632543][ T5709] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 406.684461][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 406.702322][ T5709] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 406.720535][ T5709] usb 5-1: can't read configurations, error -61 [ 406.872563][ T5709] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 406.913245][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 406.931382][ T5709] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 406.956250][ T5709] usb 5-1: can't read configurations, error -61 [ 406.983725][ T5709] usb usb5-port1: unable to enumerate USB device [ 407.844864][T10479] exFAT-fs (nbd7): unable to read boot sector [ 407.850944][T10479] exFAT-fs (nbd7): failed to read boot sector [ 407.857382][T10479] exFAT-fs (nbd7): failed to recognize exfat type [ 408.423111][T10496] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 408.548981][T10496] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 408.559152][T10496] overlayfs: failed to look up (tracing) for ino (-66) [ 411.142597][T10516] exFAT-fs (nbd6): unable to read boot sector [ 411.148680][T10516] exFAT-fs (nbd6): failed to read boot sector [ 411.154755][T10516] exFAT-fs (nbd6): failed to recognize exfat type [ 411.391772][T10514] lo speed is unknown, defaulting to 1000 [ 411.672672][ T5724] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 411.852721][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 411.902012][ T5724] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 411.934455][T10532] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 411.987392][ T5724] usb 3-1: config 0 has no interface number 0 [ 412.042554][ T5724] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 412.149892][ T5724] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 412.201779][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.243893][ T5724] usb 3-1: Product: syz [ 412.273607][ T5724] usb 3-1: Manufacturer: syz [ 412.309338][ T5724] usb 3-1: SerialNumber: syz [ 412.358717][ T5724] usb 3-1: config 0 descriptor?? [ 412.395675][T10520] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 412.502556][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 412.662721][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 412.687980][T10520] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 412.699065][ T10] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 412.719216][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.742724][ T10] usb 5-1: Product: syz [ 412.748430][T10545] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1345'. [ 412.758080][ T10] usb 5-1: Manufacturer: syz [ 412.765335][ T10] usb 5-1: SerialNumber: syz [ 412.796502][ T10] usb 5-1: config 0 descriptor?? [ 412.804671][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 412.984247][ T5724] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 413.021874][ T5724] asix 3-1:0.188: probe with driver asix failed with error -61 [ 413.229523][ T5717] usb 3-1: USB disconnect, device number 10 [ 413.422662][ T5724] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 413.593875][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.613222][ T5724] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 413.642546][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 413.662493][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 413.682683][ T5724] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.716052][ T5724] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 413.732477][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.752496][ T5724] usb 7-1: Product: syz [ 413.758543][ T5724] usb 7-1: Manufacturer: syz [ 413.774254][ T5724] usb 7-1: SerialNumber: syz [ 413.791005][ T5724] usb 7-1: config 0 descriptor?? [ 413.809053][T10553] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 413.904100][ T5724] rc_core: IR keymap rc-xbox-dvd not found [ 413.934213][ T5724] Registered IR keymap rc-empty [ 413.953727][ T5724] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 413.985462][ T5724] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 414.021252][ T10] gspca_topro: reg_w err -71 [ 414.079737][ T10] gspca_topro: Sensor soi763a [ 414.152424][ T10] usb 5-1: USB disconnect, device number 16 [ 414.194957][ T29] audit: type=1400 audit(1779155400.984:678): avc: denied { open } for pid=10565 comm="syz.2.1352" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 414.795405][T10581] netlink: 'syz.4.1356': attribute type 3 has an invalid length. [ 416.062470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 416.102479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 416.202529][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 416.352983][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 416.383141][ T10] usb 5-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 416.420935][ T10] usb 5-1: config 123 interface 0 has no altsetting 0 [ 416.434385][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 416.462112][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.480513][ T10] usb 5-1: Product: syz [ 416.486682][T10597] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 416.514052][ T10] usb 5-1: Manufacturer: syz [ 416.544065][ T10] usb 5-1: SerialNumber: syz [ 416.789100][ T10] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 416.844477][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 416.863771][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 416.874204][T10613] netlink: 'syz.5.1369': attribute type 3 has an invalid length. [ 416.958977][ T10] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 416.975137][ T10] usb 5-1: media controller created [ 417.000337][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.050744][ T29] audit: type=1400 audit(1779155403.844:679): avc: denied { create } for pid=10606 comm="syz.7.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 417.078157][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 417.087039][ T10] set interface failed [ 417.087349][ T10] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 417.109120][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 417.128343][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 417.140023][ T10] error writing reg: 0xff, val: 0x00 [ 417.186310][ T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 417.232348][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.252427][ T9] usb 3-1: Product: syz [ 417.260556][ T10] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 417.273691][ T9] usb 3-1: Manufacturer: syz [ 417.278475][ T9] usb 3-1: SerialNumber: syz [ 417.285168][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1372'. [ 417.298950][ T10] usb 5-1: USB disconnect, device number 17 [ 417.582471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 417.666314][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 418.412485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 418.442470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 418.502476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 418.645997][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 419.080517][T10634] syzkaller0: entered promiscuous mode [ 419.100695][T10634] syzkaller0: entered allmulticast mode [ 419.178840][ T9] usb 3-1: USB disconnect, device number 11 [ 420.192597][T10654] fuse: Bad value for 'user_id' [ 420.199192][T10654] fuse: Bad value for 'user_id' [ 420.856840][T10678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.114470][T10685] pimreg: entered allmulticast mode [ 421.123234][T10683] pimreg: left allmulticast mode [ 421.314482][T10692] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 421.521815][T10692] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 421.532133][T10692] overlayfs: failed to look up (tracing) for ino (-66) [ 422.042564][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 422.229519][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.323178][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 422.562580][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.571819][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.593628][T10693] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.616161][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.863516][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 422.893170][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.935189][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.072745][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 423.133544][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 423.161086][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.175775][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.207118][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.227630][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.261169][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.299993][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.385602][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.413203][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.680427][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 423.696211][ T9] usbtmc 5-1:16.0: can't read capabilities [ 423.896501][ T24] usb 5-1: USB disconnect, device number 18 [ 424.052627][T10747] 9pnet_virtio: no channels available for device syz [ 424.380103][T10752] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 424.506844][T10752] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 424.517073][T10752] overlayfs: failed to look up (tracing) for ino (-66) [ 425.673262][ T10] usb 3-1: USB disconnect, device number 12 [ 427.274505][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1420'. [ 427.286464][T10760] siw: device registration error -23 [ 427.677220][ T5613] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 427.710180][ T5613] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 429.122647][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 429.290936][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 429.320860][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.346831][ T9] usb 5-1: Product: syz [ 429.361139][ T9] usb 5-1: Manufacturer: syz [ 429.433611][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1433'. [ 429.459998][T10793] siw: device registration error -23 [ 430.622080][ T9] usb 5-1: SerialNumber: syz [ 430.640794][ T9] usb 5-1: config 0 descriptor?? [ 430.654978][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 019 [ 430.771262][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.804110][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.814070][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.822096][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.831312][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.928207][ T5613] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 431.035863][ T990] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 431.091048][ T9] (null): failure reading functionality [ 431.121649][ T9] i2c i2c-3: failure reading functionality [ 431.158346][ T9] i2c i2c-3: connected i2c-tiny-usb device [ 431.190459][ T9] usb 5-1: USB disconnect, device number 19 [ 431.199585][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 431.220898][ T5613] Bluetooth: hci2: Malformed LE Event: 0x0d [ 433.422167][ T5613] Bluetooth: hci5: command tx timeout [ 433.933209][T10800] lo speed is unknown, defaulting to 1000 [ 434.262713][ T990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 434.370465][ T990] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 434.499408][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.508274][ T990] usb 3-1: can't read configurations, error -71 [ 434.518296][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.891272][T10850] 9pnet_virtio: no channels available for device syz [ 435.455066][ T5613] Bluetooth: hci5: command tx timeout [ 437.618207][ T5623] Bluetooth: hci5: command tx timeout [ 438.391910][T10800] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.428783][T10800] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.521133][T10800] bridge_slave_0: entered allmulticast mode [ 438.568751][T10800] bridge_slave_0: entered promiscuous mode [ 438.666582][T10800] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.674875][T10800] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.694123][T10800] bridge_slave_1: entered allmulticast mode [ 438.727268][T10800] bridge_slave_1: entered promiscuous mode [ 438.802517][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 438.860637][T10800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.877865][T10800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.002522][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 439.027209][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.040737][T10800] team0: Port device team_slave_0 added [ 439.047058][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.060464][T10800] team0: Port device team_slave_1 added [ 439.068698][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 439.098032][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 439.127013][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.148122][T10800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.155227][ T9] usb 5-1: Product: syz [ 439.244806][ T9] usb 5-1: Manufacturer: syz [ 439.259246][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.298558][ T9] usb 5-1: SerialNumber: syz [ 439.309131][ T9] usb 5-1: config 0 descriptor?? [ 439.379923][T10800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.435259][T10800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.490400][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.586003][T10800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.709069][ T5623] Bluetooth: hci5: command tx timeout [ 439.761459][ T9] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 441.001435][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 441.034327][ T9] usb 5-1: USB disconnect, device number 20 [ 441.086890][T10800] hsr_slave_0: entered promiscuous mode [ 441.126322][T10800] hsr_slave_1: entered promiscuous mode [ 441.157788][T10800] debugfs: 'hsr0' already exists in 'hsr' [ 441.178777][T10800] Cannot create hsr debugfs directory [ 441.514621][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 441.530915][T10800] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 441.545362][T10800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.574180][T10800] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 441.616708][T10800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.675651][T10800] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 441.692839][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 441.708199][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.721668][T10800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.732598][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.740101][T10800] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 441.756215][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 441.770207][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 441.778897][T10800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.791334][ T24] usb 8-1: SerialNumber: syz [ 441.927708][T10800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.942747][ T5717] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 441.976687][T10800] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.003246][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.010420][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.063618][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1469'. [ 442.091255][ T5725] usb 8-1: USB disconnect, device number 8 [ 442.112526][ T5717] usb 5-1: Using ep0 maxpacket: 16 [ 442.117718][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.124863][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.167879][ T5717] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 442.200628][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.213222][ T5717] usb 5-1: Product: syz [ 442.217530][ T5717] usb 5-1: Manufacturer: syz [ 442.222318][ T5717] usb 5-1: SerialNumber: syz [ 442.568901][ T5717] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 442.585035][ T5717] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 442.595813][ T5717] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 442.605759][ T5717] usb 5-1: media controller created [ 442.625212][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.140084][ T5717] zl10353_read_register: readreg error (reg=127, ret==-71) [ 444.659839][T10950] 9pnet_virtio: no channels available for device syz [ 444.722022][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 444.780596][ T5717] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 444.798397][T10953] net_ratelimit: 10 callbacks suppressed [ 444.798414][T10953] openvswitch: netlink: Flow actions attr not present in new flow. [ 444.860732][ T5717] usb 5-1: USB disconnect, device number 21 [ 445.442811][ T5717] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 445.453969][T10800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.622754][ T5717] usb 5-1: Using ep0 maxpacket: 32 [ 445.642004][ T5717] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 445.674383][ T5709] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 445.675625][ T5717] usb 5-1: config 0 has no interface number 0 [ 445.693108][ T5717] usb 5-1: config 0 interface 12 has no altsetting 0 [ 445.709960][ T5717] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 445.719650][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.728132][ T5717] usb 5-1: Product: syz [ 445.732661][ T5717] usb 5-1: Manufacturer: syz [ 445.737651][ T5717] usb 5-1: SerialNumber: syz [ 445.788465][ T5717] usb 5-1: config 0 descriptor?? [ 445.856176][ T5709] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 445.868128][ T5709] usb 3-1: config 0 has no interface number 0 [ 445.874541][ T5709] usb 3-1: config 0 interface 18 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.887303][ T5709] usb 3-1: config 0 interface 18 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.899498][ T5709] usb 3-1: config 0 interface 18 has no altsetting 0 [ 445.910325][ T5709] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 445.919787][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.935682][ T5709] usb 3-1: config 0 descriptor?? [ 445.975862][T10800] veth0_vlan: entered promiscuous mode [ 446.015519][T10800] veth1_vlan: entered promiscuous mode [ 446.088973][T10800] veth0_macvtap: entered promiscuous mode [ 446.111543][T10800] veth1_macvtap: entered promiscuous mode [ 446.162907][T10800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.179202][T10800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.196450][ T155] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.217541][ T155] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.248338][ T155] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.275699][ T155] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.379704][ T5709] chicony 0003:04F2:1236.0004: unexpected long global item [ 446.394518][ T5709] chicony 0003:04F2:1236.0004: Chicony hid parse failed: -22 [ 446.408841][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.420684][ T5709] chicony 0003:04F2:1236.0004: probe with driver chicony failed with error -22 [ 446.434404][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.486272][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.498100][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.577343][ T5709] usb 3-1: USB disconnect, device number 15 [ 447.039539][ T5717] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 447.058338][ T5717] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 447.068040][ T5717] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 447.079087][ T5717] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 447.101298][ T5717] usb 5-1: USB disconnect, device number 22 [ 447.174431][ T5725] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 447.285837][T11009] 9pnet_virtio: no channels available for device syz [ 447.354464][ T5725] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 447.389342][ T5725] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 447.404072][ T5725] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 447.424555][ T5725] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.446589][T10997] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 447.472177][ T5725] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.521241][T11015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1501'. [ 447.552588][ T5724] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 447.725817][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.738759][ T5724] usb 9-1: Using ep0 maxpacket: 32 [ 447.766755][ T5724] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 447.781181][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.792685][ T5724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.810199][ T5724] usb 9-1: Product: syz [ 447.836065][ T5724] usb 9-1: Manufacturer: syz [ 447.854721][ T5724] usb 9-1: SerialNumber: syz [ 447.888147][ T5724] usb 9-1: config 0 descriptor?? [ 447.911770][ T5724] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 447.981174][T11023] netlink: 'syz.4.1505': attribute type 1 has an invalid length. [ 448.065411][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.118196][ T5724] gspca_topro: reg_w err -71 [ 448.131812][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.163153][ T5724] gspca_topro: Sensor soi763a [ 448.254520][ T5724] usb 9-1: USB disconnect, device number 2 [ 449.590871][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1512'. [ 449.792946][ T990] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 449.962545][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 450.000077][ T990] usb 5-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 450.046576][ T5716] usb 8-1: USB disconnect, device number 9 [ 450.062539][ T990] usb 5-1: config 123 interface 0 has no altsetting 0 [ 450.097658][ T990] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 450.127861][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.167202][ T990] usb 5-1: Product: syz [ 450.258909][ T990] usb 5-1: Manufacturer: syz [ 450.283514][ T990] usb 5-1: SerialNumber: syz [ 451.024091][T11068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.072251][ T990] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 451.091253][T11068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.141991][ T990] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 451.197293][ T990] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 451.236837][ T990] usb 5-1: media controller created [ 451.271712][T11078] 9pnet_virtio: no channels available for device syz [ 451.308695][ T990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.334978][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1527'. [ 451.466726][ T990] set interface failed [ 451.466756][ T990] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 451.569360][ T990] error writing reg: 0xff, val: 0x00 [ 451.840135][ T990] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 451.928871][ T990] usb 5-1: USB disconnect, device number 23 [ 453.922810][ T5716] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 453.964674][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 454.132613][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 454.279963][ T24] usb 9-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 454.387369][ T24] usb 9-1: config 123 interface 0 has no altsetting 0 [ 454.525841][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 454.781961][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.811780][ T24] usb 9-1: Product: syz [ 454.828672][ T24] usb 9-1: Manufacturer: syz [ 454.845939][ T24] usb 9-1: SerialNumber: syz [ 454.992497][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 455.005414][ T5613] Bluetooth: hci2: Malformed LE Event: 0x0d [ 455.185776][ T24] usb 9-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 455.236541][ T24] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 455.273818][ T24] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 455.293016][ T24] usb 9-1: media controller created [ 455.457181][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.515711][ T24] set interface failed [ 455.515739][ T24] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 455.544024][ T24] error writing reg: 0xff, val: 0x00 [ 455.609193][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 455.652356][T11144] 9pnet_virtio: no channels available for device syz [ 455.678514][ T5716] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 455.709856][ T5716] usb 3-1: can't read configurations, error -71 [ 455.720272][ T24] dvb_usb_mxl111sf 9-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 455.801707][ T24] usb 9-1: USB disconnect, device number 3 [ 457.592230][T11175] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 458.636385][ T5725] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 458.945645][ T5725] usb 8-1: config 226 has 0 interfaces, different from the descriptor's value: 5 [ 459.020999][ T5725] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 459.101473][ T5725] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.631821][ T5725] usb 8-1: string descriptor 0 read error: -71 [ 459.654576][ T5725] usb 8-1: USB disconnect, device number 10 [ 460.188894][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 460.392972][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 460.396396][T11201] batman_adv: batadv0: Adding interface: dummy0 [ 460.405403][T11201] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.419427][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 460.439398][T11201] batman_adv: batadv0: Interface activated: dummy0 [ 460.457013][T11204] batadv0: mtu less than device minimum [ 460.463729][T11204] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 460.475088][T11204] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 460.486415][T11204] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 460.497757][T11204] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 460.509131][T11204] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 460.520490][T11204] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 460.531807][T11204] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 460.543165][T11204] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 460.664005][T11207] netlink: 'syz.8.1580': attribute type 1 has an invalid length. [ 460.701632][T11207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.426536][ T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 461.445434][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 461.529869][ T24] usb 6-1: Product: syz [ 461.604051][ T24] usb 6-1: Manufacturer: syz [ 461.675943][ T24] usb 6-1: SerialNumber: syz [ 461.717423][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1582'. [ 461.749922][ T24] usb 6-1: config 0 descriptor?? [ 461.784684][T11188] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 462.665675][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 462.822624][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 462.830788][ T9] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 462.839792][ T9] usb 9-1: config 0 has no interface number 0 [ 462.846986][ T9] usb 9-1: config 0 interface 12 has no altsetting 0 [ 462.858422][ T9] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 462.869216][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.879122][ T9] usb 9-1: Product: syz [ 462.885898][ T9] usb 9-1: Manufacturer: syz [ 462.890764][ T9] usb 9-1: SerialNumber: syz [ 462.993798][ T9] usb 9-1: config 0 descriptor?? [ 463.186997][ T5716] usb 6-1: USB disconnect, device number 16 [ 464.600570][ T9] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 464.637944][ T9] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 464.656406][ T9] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 464.670129][ T9] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 464.805803][ T9] usb 9-1: USB disconnect, device number 4 [ 467.892864][ T5724] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 468.142509][ T5724] usb 6-1: Using ep0 maxpacket: 32 [ 468.150204][ T5724] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 468.159007][ T5724] usb 6-1: config 0 has no interface number 0 [ 468.166434][ T5724] usb 6-1: config 0 interface 12 has no altsetting 0 [ 468.178021][ T5724] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 468.187813][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.196339][ T5724] usb 6-1: Product: syz [ 468.200844][ T5724] usb 6-1: Manufacturer: syz [ 468.206287][ T5724] usb 6-1: SerialNumber: syz [ 468.216741][ T5724] usb 6-1: config 0 descriptor?? [ 469.283901][ T5724] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 469.325456][ T5724] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 469.362789][ T5724] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 469.388415][ T5724] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 469.414589][ T29] audit: type=1400 audit(1779155456.204:680): avc: denied { ioctl } for pid=11333 comm="syz.4.1627" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 469.424839][ T5724] usb 6-1: USB disconnect, device number 17 [ 470.256579][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 470.475181][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.486616][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 470.497553][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.508517][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.544301][T11349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.565975][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.686893][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1638'. [ 470.700463][T11364] siw: device registration error -23 [ 470.778244][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.810363][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.832855][ T5716] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 471.013814][ T5716] usb 6-1: Using ep0 maxpacket: 8 [ 471.022396][ T5716] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 471.031648][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.041955][ T5716] usb 6-1: Product: syz [ 471.043323][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.054534][ T5716] usb 6-1: Manufacturer: syz [ 471.054555][ T5716] usb 6-1: SerialNumber: syz [ 471.056586][ T5716] usb 6-1: config 0 descriptor?? [ 471.069404][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.162541][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 471.312655][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 471.325709][ T5716] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 471.337325][ T9] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 471.351660][ T9] usb 8-1: config 0 has no interface number 0 [ 471.358248][ T9] usb 8-1: config 0 interface 12 has no altsetting 0 [ 471.379228][ T9] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 471.398665][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.411904][ T9] usb 8-1: Product: syz [ 471.416501][ T9] usb 8-1: Manufacturer: syz [ 471.421293][ T9] usb 8-1: SerialNumber: syz [ 471.433699][ T9] usb 8-1: config 0 descriptor?? [ 471.594479][ T29] audit: type=1400 audit(1779155458.384:681): avc: denied { link } for pid=11376 comm="syz.8.1643" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 472.467928][ T9] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 472.487939][ T9] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 472.505174][ T9] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 472.521155][ T9] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 472.539418][ T9] usb 8-1: USB disconnect, device number 11 [ 472.709245][ T29] audit: type=1326 audit(1779155459.504:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.8.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b9ce59 code=0x7ffc0000 [ 472.822549][ T29] audit: type=1326 audit(1779155459.504:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.8.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b9ce59 code=0x7ffc0000 [ 472.897173][ T29] audit: type=1326 audit(1779155459.574:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.8.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9ef5b9ce59 code=0x7ffc0000 [ 472.962140][ T29] audit: type=1326 audit(1779155459.574:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.8.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b9ce59 code=0x7ffc0000 [ 473.068289][ T9] usb 3-1: USB disconnect, device number 18 [ 473.092519][ T29] audit: type=1326 audit(1779155459.574:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.8.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b9ce59 code=0x7ffc0000 [ 473.143172][ T5716] usb write operation failed. (-71) [ 473.178663][ T29] audit: type=1326 audit(1779155459.574:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.8.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9ef5b9ce59 code=0x7ffc0000 [ 473.231998][ T5716] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 473.270024][ T5716] dvbdev: DVB: registering new adapter (Terratec H7) [ 473.281374][ T29] audit: type=1326 audit(1779155459.574:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.8.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b9ce59 code=0x7ffc0000 [ 473.308555][ T5716] usb 6-1: media controller created [ 473.308847][ T5716] usb read operation failed. (-71) [ 473.324903][ T5716] usb write operation failed. (-71) [ 473.341437][ T5716] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 473.364743][T11398] syzkaller0: entered promiscuous mode [ 473.380579][T11398] syzkaller0: entered allmulticast mode [ 473.394725][ T29] audit: type=1326 audit(1779155459.574:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.8.1647" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b9ce59 code=0x7ffc0000 [ 473.408261][ T5716] usb 6-1: USB disconnect, device number 18 [ 473.856286][ T5613] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 474.472761][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 474.763203][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 474.905569][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 474.995983][ T24] usb 5-1: config 0 has no interface number 0 [ 475.091883][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 475.299050][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 475.340142][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.399631][ T24] usb 5-1: Product: syz [ 475.448162][ T24] usb 5-1: Manufacturer: syz [ 475.485938][ T24] usb 5-1: SerialNumber: syz [ 475.510268][ T24] usb 5-1: config 0 descriptor?? [ 475.581760][ T5623] Bluetooth: hci3: hardware error 0x04 [ 475.625060][T11427] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 475.819212][T11448] syzkaller0: entered promiscuous mode [ 475.826572][T11448] syzkaller0: entered allmulticast mode [ 476.568523][ T24] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 476.603820][ T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 477.660319][ T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 477.690949][ T24] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 477.713011][ T5623] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 477.847618][ T24] usb 5-1: USB disconnect, device number 24 [ 477.943211][T11466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 477.959829][T11464] syzkaller0: entered promiscuous mode [ 477.972308][T11464] syzkaller0: entered allmulticast mode [ 478.444675][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 478.633655][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 478.798540][T11491] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 482.290632][T11488] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 482.299461][T11488] net_ratelimit: 12 callbacks suppressed [ 482.299473][T11488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 482.389424][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 482.410191][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 482.442352][ T9] usb 8-1: can't read configurations, error -71 [ 482.507218][T11489] syzkaller0: entered promiscuous mode [ 482.526809][T11489] syzkaller0: entered allmulticast mode [ 482.860372][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 482.890418][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 483.911780][ T9] usb 8-1: device descriptor read/64, error -71 [ 483.912704][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 484.044391][ T9] usb usb8-port1: attempt power cycle [ 484.058648][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.103261][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.121141][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 484.161713][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.293554][ T24] usb 6-1: config 0 descriptor?? [ 484.331853][ T24] hub 6-1:0.0: USB hub found [ 484.376248][ T10] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 484.427939][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 484.450198][ T9] usb 8-1: device descriptor read/8, error -71 [ 484.536374][ T24] hub 6-1:0.0: 1 port detected [ 484.549722][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 484.573238][ T10] usb 3-1: config 0 has no interface number 0 [ 484.581142][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 484.602495][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 484.628835][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 484.661422][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.681299][ T10] usb 3-1: config 0 descriptor?? [ 484.689355][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 484.699676][T11521] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 484.719900][ T9] usb 8-1: device descriptor read/8, error -71 [ 484.757076][ T24] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 484.784027][ T24] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 484.784393][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 484.855324][ T9] usb usb8-port1: unable to enumerate USB device [ 484.880938][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 484.917376][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 484.996128][ T24] usb 6-1: USB disconnect, device number 19 [ 485.034330][ T10] usb 3-1: USB disconnect, device number 19 [ 485.341744][T11523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 487.255402][T11557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1695'. [ 487.762661][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 487.947448][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 487.966874][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.006807][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.051089][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 488.101161][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.142819][ T9] usb 6-1: config 0 descriptor?? [ 488.163313][ T9] hub 6-1:0.0: USB hub found [ 488.374756][ T9] hub 6-1:0.0: 1 port detected [ 488.580569][ T9] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 488.599278][ T9] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 488.646774][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 488.675303][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 488.682807][T11572] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 488.728436][ T9] usb 6-1: USB disconnect, device number 20 [ 489.195787][ T5709] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 489.212816][ T24] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 489.352267][ T5709] usb 8-1: device descriptor read/64, error -71 [ 489.400216][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 489.408457][ T24] usb 3-1: config 0 has no interface number 0 [ 489.414641][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 489.427649][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 489.441058][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 489.453350][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.473718][ T24] usb 3-1: config 0 descriptor?? [ 489.490352][T11579] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 489.514967][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 489.596883][ T5709] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 489.726846][ T5709] usb 8-1: device descriptor read/64, error -71 [ 489.734627][ T10] usb 3-1: USB disconnect, device number 20 [ 489.842893][ T5709] usb usb8-port1: attempt power cycle [ 490.049555][T11583] batman_adv: batadv0: Interface deactivated: dummy0 [ 490.056342][T11583] batman_adv: batadv0: Removing interface: dummy0 [ 490.208378][ T5709] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 490.250636][ T5709] usb 8-1: device descriptor read/8, error -71 [ 490.496406][ T5709] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 490.538851][ T5709] usb 8-1: device descriptor read/8, error -71 [ 490.656621][ T5709] usb usb8-port1: unable to enumerate USB device [ 490.856798][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 491.007635][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.020641][ T10] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 491.031956][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.047860][ T10] usb 9-1: config 0 descriptor?? [ 491.320128][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 491.333227][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 491.349710][ T10] usb 9-1: USB disconnect, device number 5 [ 491.360180][ T5709] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 491.484038][T11616] syzkaller0: entered promiscuous mode [ 491.491238][T11616] syzkaller0: entered allmulticast mode [ 491.525957][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 491.527158][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 491.556592][ T5709] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 491.576992][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.598074][ T5709] usb 6-1: Product: syz [ 491.602350][ T5709] usb 6-1: Manufacturer: syz [ 491.608770][ T5709] usb 6-1: SerialNumber: syz [ 491.615627][ T5709] usb 6-1: config 0 descriptor?? [ 491.685928][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 491.693414][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 491.703575][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 491.728608][ T24] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 491.737838][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.745935][ T24] usb 5-1: Product: syz [ 491.750228][ T24] usb 5-1: Manufacturer: syz [ 491.754888][ T24] usb 5-1: SerialNumber: syz [ 491.825939][ T5709] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 491.834741][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 491.987020][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 492.000278][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.012633][ T10] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 492.022456][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.035428][ T10] usb 9-1: config 0 descriptor?? [ 492.055612][ T5716] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 492.079123][ T10] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 492.108064][ T10] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 492.142835][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 492.142852][ T29] audit: type=1400 audit(1779155734.946:822): avc: denied { create } for pid=11609 comm="syz.4.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 492.189752][ T29] audit: type=1400 audit(1779155734.946:823): avc: denied { ioctl } for pid=11609 comm="syz.4.1714" path="socket:[35312]" dev="sockfs" ino=35312 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 492.215566][ T5716] usb 3-1: device descriptor read/64, error -71 [ 492.482916][ T5724] usb 9-1: USB disconnect, device number 6 [ 492.514328][ T5724] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 492.625341][ T5716] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 492.765712][ T5716] usb 3-1: device descriptor read/64, error -71 [ 492.877329][ T5716] usb usb3-port1: attempt power cycle [ 493.235071][ T5716] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 493.265594][ T5716] usb 3-1: device descriptor read/8, error -71 [ 493.317830][ T5709] usb write operation failed. (-71) [ 493.344392][ T5709] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 493.358023][ T5709] dvbdev: DVB: registering new adapter (Terratec H7) [ 493.369660][ T5709] usb 6-1: media controller created [ 493.389044][ T5709] usb read operation failed. (-71) [ 493.400998][ T5709] usb write operation failed. (-71) [ 493.430579][ T5709] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 493.462572][ T5709] usb 6-1: USB disconnect, device number 21 [ 493.516266][ T5716] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 493.556867][ T5716] usb 3-1: device descriptor read/8, error -71 [ 493.665056][ T5716] usb usb3-port1: unable to enumerate USB device [ 494.111105][T11650] syzkaller0: entered promiscuous mode [ 494.117413][T11650] syzkaller0: entered allmulticast mode [ 494.824406][ T5709] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 494.996290][ T5709] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.037293][ T5709] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.065214][ T5709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.147742][ T5709] usb 9-1: config 0 descriptor?? [ 495.180959][ T24] usb 5-1: USB disconnect, device number 25 [ 495.314201][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 495.369933][ T5709] usbhid 9-1:0.0: can't add hid device: -71 [ 495.386480][ T5709] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 495.413276][ T5709] usb 9-1: USB disconnect, device number 7 [ 495.533892][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 495.567461][ T5623] Bluetooth: hci2: Malformed LE Event: 0x0d [ 495.670816][T11666] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 495.733883][T11666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.754915][T11652] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 495.795909][T11652] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 495.807141][T11652] overlayfs: failed to look up (tracing) for ino (-66) [ 495.884046][ T5709] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 495.926264][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.932822][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.067122][ T5709] usb 9-1: Using ep0 maxpacket: 32 [ 496.089224][ T5709] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.128321][ T5709] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 496.137698][ T5709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.154135][ T5709] usb 9-1: config 0 descriptor?? [ 496.169568][ T5709] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 496.183793][ T5709] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 496.575373][ T5709] usb 9-1: USB disconnect, device number 8 [ 496.611622][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 496.631000][ T5709] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 496.655869][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 496.686173][ T10] usb 3-1: can't read configurations, error -71 [ 497.405571][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 497.592812][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 497.605154][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.640233][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.687967][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 497.702072][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.710583][ T10] usb 3-1: Product: syz [ 497.720584][ T10] usb 3-1: Manufacturer: syz [ 497.730629][ T10] usb 3-1: SerialNumber: syz [ 497.753844][ T10] usb 3-1: config 0 descriptor?? [ 498.163729][ T5716] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 498.176849][ T29] audit: type=1400 audit(1779155740.989:824): avc: denied { getopt } for pid=11711 comm="syz.4.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 498.234059][ T29] audit: type=1400 audit(1779155740.999:825): avc: denied { mounton } for pid=11711 comm="syz.4.1752" path="/347/file0" dev="tmpfs" ino=1824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 498.343935][ T5716] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.362141][ T5716] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 498.397235][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.426249][ T5716] usb 6-1: config 0 descriptor?? [ 498.455284][ T5716] pwc: Askey VC010 type 2 USB webcam detected. [ 499.860678][ T5716] pwc: recv_control_msg error -32 req 02 val 2b00 [ 499.916870][ T5716] pwc: recv_control_msg error -32 req 02 val 2700 [ 499.935083][ T5716] pwc: recv_control_msg error -32 req 02 val 2c00 [ 499.946958][ T5709] usb 3-1: USB disconnect, device number 26 [ 500.231986][ T5717] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 500.402359][ T5717] usb 9-1: Using ep0 maxpacket: 32 [ 500.430636][ T5717] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.449177][ T5717] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.462681][ T5717] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 500.474288][ T5717] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.549496][ T5717] usb 9-1: config 0 descriptor?? [ 500.693215][ T5717] hub 9-1:0.0: USB hub found [ 500.804185][ T5717] hub 9-1:0.0: 1 port detected [ 500.913724][ T5716] pwc: recv_control_msg error -32 req 04 val 1000 [ 500.940740][ T5716] pwc: recv_control_msg error -32 req 04 val 1300 [ 500.947933][ T5716] pwc: recv_control_msg error -32 req 04 val 1400 [ 500.955177][ T5716] pwc: recv_control_msg error -32 req 02 val 2000 [ 500.963650][ T5716] pwc: recv_control_msg error -32 req 02 val 2100 [ 501.021828][ T5717] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 501.061347][ T5717] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 501.087677][ T5717] usbhid 9-1:0.0: can't add hid device: -71 [ 501.097678][ T5717] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 501.157418][ T5717] usb 9-1: USB disconnect, device number 9 [ 501.167348][ T5716] pwc: recv_control_msg error -32 req 04 val 1500 [ 501.381114][ T5716] pwc: recv_control_msg error -71 req 02 val 2400 [ 501.401301][ T5716] pwc: recv_control_msg error -71 req 02 val 2600 [ 501.415370][ T5716] pwc: recv_control_msg error -71 req 02 val 2900 [ 501.561566][ T5709] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 501.572436][ T5716] pwc: recv_control_msg error -71 req 02 val 2800 [ 501.583520][ T5716] pwc: recv_control_msg error -71 req 04 val 1100 [ 501.590393][ T5716] pwc: recv_control_msg error -71 req 04 val 1200 [ 501.601387][ T5716] pwc: Registered as video103. [ 501.608117][ T5716] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 501.624451][ T5716] usb 6-1: USB disconnect, device number 22 [ 501.830734][ T5709] usb 3-1: Using ep0 maxpacket: 16 [ 501.870259][ T5709] usb 3-1: unable to get BOS descriptor or descriptor too short [ 501.922498][ T5709] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 223, changing to 7 [ 501.967299][ T5709] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 50, changing to 7 [ 502.027746][ T5709] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 502.075918][ T5709] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 502.117492][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.152466][ T5709] usb 3-1: Product: syz [ 502.176090][ T5709] usb 3-1: Manufacturer: syz [ 502.196037][ T5709] usb 3-1: SerialNumber: syz [ 502.447113][ T5709] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 502.620330][ T5716] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 502.648078][ T5709] usb 3-1: USB disconnect, device number 27 [ 502.760001][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.821280][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 502.831736][ T5716] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 502.857532][ T5716] usb 6-1: config 0 has no interface number 0 [ 502.875343][ T5716] usb 6-1: config 0 interface 12 has no altsetting 0 [ 502.898611][ T5716] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 502.918760][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.937500][ T5716] usb 6-1: Product: syz [ 502.950149][ T5716] usb 6-1: Manufacturer: syz [ 502.956445][ T5716] usb 6-1: SerialNumber: syz [ 502.971390][ T5716] usb 6-1: config 0 descriptor?? [ 503.693645][T11777] batman_adv: batadv0: Adding interface: dummy0 [ 503.701204][T11777] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.727584][T11777] batman_adv: batadv0: Interface activated: dummy0 [ 504.398243][ T5716] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 504.411660][T11778] batadv0: mtu less than device minimum [ 504.451560][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 504.462960][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 504.474277][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 504.485591][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 504.496924][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 504.508260][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 504.519583][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 504.530905][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 504.542225][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 504.642016][ T5716] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 504.684411][ T5716] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 504.735792][ T5716] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 504.792784][ T5716] usb 6-1: USB disconnect, device number 23 [ 505.988600][ T46] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 506.148721][ T46] usb 8-1: Using ep0 maxpacket: 16 [ 506.155547][ T46] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 506.167166][ T46] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.177725][ T46] usb 8-1: config 1 has no interface number 0 [ 506.931597][ T5724] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 506.939777][ T46] usb 8-1: config 1 interface 105 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 506.951440][ T46] usb 8-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.970346][ T46] usb 8-1: config 1 interface 105 has no altsetting 0 [ 506.980507][ T46] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 507.976135][ T46] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 507.997870][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 508.355248][ T46] usb 8-1: Product: syz [ 508.369473][ T46] usb 8-1: Manufacturer: syz [ 508.375202][ T46] usb 8-1: SerialNumber: syz [ 508.385985][ T46] usb 8-1: can't set config #1, error -71 [ 508.400798][ T5724] usb 3-1: device descriptor read/all, error -71 [ 508.409425][ T46] usb 8-1: USB disconnect, device number 20 [ 508.597305][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 508.757767][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 508.791961][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 508.817598][ T10] usb 6-1: config 0 has no interface number 0 [ 508.839362][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 508.913514][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 508.941830][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.977257][ T10] usb 6-1: Product: syz [ 508.995672][ T10] usb 6-1: Manufacturer: syz [ 509.045842][ T10] usb 6-1: SerialNumber: syz [ 509.095746][ T10] usb 6-1: config 0 descriptor?? [ 509.210063][T11837] dummy0: left allmulticast mode [ 509.222138][T11837] bridge0: port 3(dummy0) entered disabled state [ 509.544767][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 509.730129][T11849] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1802'. [ 509.751856][ T10] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 509.792788][ T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 509.823148][ T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 509.847030][ T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 509.908725][ T10] usb 6-1: USB disconnect, device number 24 [ 512.333627][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1811'. [ 512.552958][T11887] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1814'. [ 512.858487][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 513.935726][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 513.942748][ T10] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 514.151300][ T10] usb 8-1: config 0 has no interface number 0 [ 514.158549][ T10] usb 8-1: config 0 interface 12 has no altsetting 0 [ 514.174012][ T10] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 514.193500][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.201685][ T10] usb 8-1: Product: syz [ 514.206106][ T10] usb 8-1: Manufacturer: syz [ 514.210709][ T10] usb 8-1: SerialNumber: syz [ 514.217645][ T10] usb 8-1: config 0 descriptor?? [ 514.301028][ T5709] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 514.476745][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 514.483765][ T5709] usb 6-1: too many configurations: 128, using maximum allowed: 8 [ 514.521088][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.553144][ T5709] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 514.564564][ T5709] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 514.614642][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.624879][ T5709] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 514.646594][ T5709] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 514.703056][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.713272][ T5709] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 514.724395][ T5709] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 514.782440][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.802321][ T5709] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 514.813183][ T5709] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 514.854358][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.864603][ T5709] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 514.891343][ T5709] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 514.915862][ T10] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 514.924410][ T10] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 514.932050][ T10] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 514.943985][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.954833][ T10] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 514.963108][ T5709] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 514.979071][ T10] usb 8-1: USB disconnect, device number 21 [ 514.988837][ T5709] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 515.098103][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.109870][ T5709] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 515.156121][ T5709] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 515.170572][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.201131][ T5709] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 515.240277][ T5709] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 515.292607][ T5709] usb 6-1: New USB device found, idVendor=0525, idProduct=0000, bcdDevice= 0.00 [ 515.345745][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.386427][ T5709] usb 6-1: No union descriptors [ 515.451686][ T5623] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 515.462285][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 515.462312][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.462325][ T5623] Workqueue: hci2 hci_rx_work [ 515.462348][ T5623] Call Trace: [ 515.462352][ T5623] [ 515.462357][ T5623] dump_stack_lvl+0x100/0x190 [ 515.462374][ T5623] sysfs_warn_dup.cold+0x1c/0x28 [ 515.462391][ T5623] sysfs_create_dir_ns+0x24b/0x2b0 [ 515.462406][ T5623] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 515.462422][ T5623] ? find_held_lock+0x2b/0x80 [ 515.462433][ T5623] ? kobject_add_internal+0x25f/0x930 [ 515.462445][ T5623] ? kobject_add_internal+0x25f/0x930 [ 515.462457][ T5623] ? do_raw_spin_unlock+0x145/0x1e0 [ 515.462475][ T5623] kobject_add_internal+0x2c8/0x930 [ 515.462488][ T5623] kobject_add+0x16a/0x1e0 [ 515.462499][ T5623] ? __pfx_kobject_add+0x10/0x10 [ 515.462510][ T5623] ? class_to_subsys+0x10f/0x150 [ 515.462526][ T5623] ? kobject_put+0xb9/0x640 [ 515.462535][ T5623] ? _raw_spin_unlock+0x28/0x50 [ 515.462553][ T5623] device_add+0x294/0x1950 [ 515.462566][ T5623] ? __pfx_dev_set_name+0x10/0x10 [ 515.462582][ T5623] ? __pfx_device_add+0x10/0x10 [ 515.462595][ T5623] ? mgmt_send_event_skb+0x2fb/0x460 [ 515.462615][ T5623] hci_conn_add_sysfs+0x1a3/0x260 [ 515.462633][ T5623] le_conn_complete_evt+0x11eb/0x1f60 [ 515.462651][ T5623] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 515.462670][ T5623] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 515.462686][ T5623] ? skb_pull_data+0x15f/0x1e0 [ 515.462703][ T5623] hci_le_meta_evt+0x34a/0x5f0 [ 515.462718][ T5623] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 515.462736][ T5623] hci_event_packet+0x51c/0xcd0 [ 515.462750][ T5623] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 515.462766][ T5623] ? __pfx_hci_event_packet+0x10/0x10 [ 515.462782][ T5623] ? kcov_remote_start+0x374/0x660 [ 515.462796][ T5623] ? lockdep_hardirqs_on+0x78/0x100 [ 515.462815][ T5623] hci_rx_work+0x451/0xfc0 [ 515.462837][ T5623] process_one_work+0xa0e/0x1980 [ 515.462864][ T5623] ? __pfx_process_one_work+0x10/0x10 [ 515.462883][ T5623] ? __pfx_hci_rx_work+0x10/0x10 [ 515.462899][ T5623] worker_thread+0x5ef/0xe50 [ 515.462925][ T5623] ? kthread+0x13a/0x450 [ 515.462938][ T5623] ? __pfx_worker_thread+0x10/0x10 [ 515.462951][ T5623] kthread+0x370/0x450 [ 515.462963][ T5623] ? __pfx_kthread+0x10/0x10 [ 515.462977][ T5623] ret_from_fork+0x72b/0xd50 [ 515.462994][ T5623] ? __pfx_ret_from_fork+0x10/0x10 [ 515.463010][ T5623] ? __switch_to+0x800/0x1100 [ 515.463029][ T5623] ? __pfx_kthread+0x10/0x10 [ 515.463042][ T5623] ret_from_fork_asm+0x1a/0x30 [ 515.463065][ T5623] [ 515.463124][ T5623] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 515.733831][ T5623] Bluetooth: hci2: failed to register connection device [ 515.798830][ T5709] usb 6-1: USB disconnect, device number 25 [ 518.247935][ T10] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 519.593373][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.632659][T11972] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1839'. [ 519.657455][ T10] usb 6-1: config 0 has no interface number 0 [ 519.685080][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 519.726235][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 519.755165][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'. [ 519.768595][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 519.813131][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.884152][ T10] usb 6-1: config 0 descriptor?? [ 519.916705][T11941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 519.994465][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 520.202927][ T5716] usb 6-1: USB disconnect, device number 26 [ 520.321490][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 520.437844][T11987] fuse: blksize only supported for fuseblk [ 520.491454][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 520.508441][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.534546][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.560590][ T10] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 520.584924][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.609657][ T10] usb 9-1: Product: syz [ 520.626199][ T10] usb 9-1: Manufacturer: syz [ 520.636674][ T10] usb 9-1: SerialNumber: syz [ 520.662325][ T10] usb 9-1: config 0 descriptor?? [ 523.063085][ T5724] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 523.144478][ T46] usb 9-1: USB disconnect, device number 10 [ 523.270379][ T5717] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 523.278140][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 523.285646][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.296962][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.307658][ T5724] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 523.319024][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.343763][ T5724] usb 3-1: config 0 descriptor?? [ 523.355157][ T5724] hub 3-1:0.0: USB hub found [ 523.460023][ T5717] usb 6-1: Using ep0 maxpacket: 32 [ 523.471646][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.498386][ T5717] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.513836][ T5717] usb 6-1: config 0 interface 0 has no altsetting 0 [ 523.523892][ T5717] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 523.533850][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.543040][ T5717] usb 6-1: Product: syz [ 523.549508][ T5717] usb 6-1: Manufacturer: syz [ 523.555628][ T5717] usb 6-1: SerialNumber: syz [ 523.566149][ T5724] hub 3-1:0.0: 1 port detected [ 523.577428][ T5717] usb 6-1: config 0 descriptor?? [ 523.585322][ T5717] gs_usb 6-1:0.0: Required endpoints not found [ 524.178046][ T5717] hub 3-1:0.0: activate --> -90 [ 524.333429][ T5724] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 524.499522][ T5724] usb 8-1: Using ep0 maxpacket: 32 [ 524.518438][ T5724] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 524.528129][ T5724] usb 8-1: config 0 has no interface number 0 [ 524.534746][ T5724] usb 8-1: config 0 interface 12 has no altsetting 0 [ 524.550437][ T5724] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 524.560952][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.572925][ T5724] usb 8-1: Product: syz [ 524.577276][ T5724] usb 8-1: Manufacturer: syz [ 524.586318][ T5724] usb 8-1: SerialNumber: syz [ 524.597156][ T5724] usb 8-1: config 0 descriptor?? [ 524.792145][ T46] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 524.793378][ T9] usb 3-1: USB disconnect, device number 30 [ 524.810939][ T46] usb 3-1-port1: connect-debounce failed [ 525.247570][ T5724] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 525.411424][ T5724] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 525.419523][ T5724] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 525.427638][ T5724] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 525.444276][ T5724] usb 8-1: USB disconnect, device number 22 [ 525.608982][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 525.758755][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 525.766127][ T9] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 525.776719][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 525.786084][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.794431][ T9] usb 3-1: Product: syz [ 525.799039][ T9] usb 3-1: Manufacturer: syz [ 525.803684][ T9] usb 3-1: SerialNumber: syz [ 525.811639][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 525.818036][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 526.014913][ T5709] usb 6-1: USB disconnect, device number 27 [ 526.108995][T12053] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1867'. [ 526.175610][ T10] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 526.241133][ T5716] r8152-cfgselector 3-1: USB disconnect, device number 31 [ 526.340941][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 526.352130][ T10] usb 8-1: config 0 has no interface number 0 [ 526.358278][ T10] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 526.374588][ T10] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 526.403972][ T10] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 526.421179][ T5613] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 526.429765][ T10] usb 8-1: config 0 interface 2 has no altsetting 0 [ 526.442443][ T10] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 526.454045][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.462202][ T9] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 526.470711][ T10] usb 8-1: Product: syz [ 526.479452][ T10] usb 8-1: Manufacturer: syz [ 526.484149][ T10] usb 8-1: SerialNumber: syz [ 526.507278][ T10] usb 8-1: config 0 descriptor?? [ 526.522209][T12048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 526.540310][T12048] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 526.564760][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.633674][ T9] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 526.660666][ T9] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 526.688310][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 526.700509][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 526.712052][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 526.738424][ T9] usb 9-1: Product: syz [ 526.743063][ T9] usb 9-1: Manufacturer: syz [ 526.750986][ T9] usb 9-1: SerialNumber: syz [ 526.778429][ T9] usb 9-1: config 0 descriptor?? [ 526.785666][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.797064][T12055] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 526.808522][ T5716] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 526.818074][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.834404][ T9] usb 9-1: selecting invalid altsetting 0 [ 526.992237][ T5716] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 527.030635][ T5716] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 527.058510][ T5716] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 527.094124][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.106128][ T9] usb 9-1: USB disconnect, device number 11 [ 527.145757][T12066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 527.304942][ T5716] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.474739][T12066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.520881][T12066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.800779][T12066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.850709][T12066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.820822][ T5716] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 529.994980][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 530.003057][ T5716] usb 9-1: Using ep0 maxpacket: 32 [ 530.012019][ T5716] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.035374][ T5716] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.048580][ T5716] usb 9-1: config 0 interface 0 has no altsetting 0 [ 530.081267][ T5716] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 530.091323][ T5716] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.111384][ T5716] usb 9-1: Product: syz [ 530.116655][ T5716] usb 9-1: Manufacturer: syz [ 530.131138][ T5716] usb 9-1: SerialNumber: syz [ 530.183020][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 530.190884][ T5623] Bluetooth: hci2: Malformed LE Event: 0x0d [ 530.192380][ T5716] usb 9-1: config 0 descriptor?? [ 530.244032][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 530.255616][ T5716] gs_usb 9-1:0.0: Required endpoints not found [ 530.278254][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 530.305254][ T9] usb 3-1: can't read configurations, error -71 [ 530.432801][ T5612] usb 8-1: USB disconnect, device number 23 [ 530.634150][ T10] usb 5-1: USB disconnect, device number 26 [ 531.212194][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1883'. [ 531.317688][T12100] siw: device registration error -23 [ 532.537750][ T46] usb 9-1: USB disconnect, device number 12 [ 532.663637][T12119] fuse: Bad value for 'fd' [ 532.965126][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 533.115077][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 533.122756][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 533.131798][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 223, changing to 7 [ 533.143131][ T10] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 50, changing to 7 [ 533.154326][ T10] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 533.155073][ T46] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 533.185520][ T10] usb 9-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 533.200359][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.209287][ T10] usb 9-1: Product: syz [ 533.213510][ T10] usb 9-1: Manufacturer: syz [ 533.218213][ T10] usb 9-1: SerialNumber: syz [ 533.363999][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 533.386044][ T5623] Bluetooth: hci2: Malformed LE Event: 0x0d [ 533.467006][ T10] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 533.500847][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 533.541256][ T46] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 533.565775][ T46] usb 3-1: can't read configurations, error -71 [ 533.631349][ T10] usb 9-1: USB disconnect, device number 13 [ 534.084884][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 534.245908][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.256529][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 534.269301][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.293065][ T9] usb 6-1: config 0 descriptor?? [ 534.313324][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 534.434655][ T46] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 534.604434][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 534.620077][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.660230][ T46] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.684130][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 534.702201][ T46] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 534.712682][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.723200][ T46] usb 3-1: Product: syz [ 534.723330][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 534.727974][ T46] usb 3-1: Manufacturer: syz [ 534.766164][ T46] usb 3-1: SerialNumber: syz [ 534.771447][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 534.791836][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 534.803680][ T46] usb 3-1: config 0 descriptor?? [ 534.823071][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 534.826273][ T46] gs_usb 3-1:0.0: Required endpoints not found [ 534.843733][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 534.879421][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 534.912941][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 534.947742][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 534.978702][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 535.197912][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 535.232878][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 535.367803][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 535.403906][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 535.441839][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 535.458824][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 535.491050][ T9] pwc: Registered as video103. [ 535.519278][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 535.626974][ T9] usb 6-1: USB disconnect, device number 28 [ 536.264426][ T9] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 536.316935][T12185] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1911'. [ 536.445466][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 536.462413][ T9] usb 5-1: config 0 has no interface number 0 [ 536.484699][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 536.518174][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 536.554166][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 536.576797][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.598171][ T9] usb 5-1: config 0 descriptor?? [ 536.622296][T12178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 536.684708][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 536.870491][ T9] usb 5-1: USB disconnect, device number 27 [ 537.023243][ T46] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 537.096707][ T9] usb 3-1: USB disconnect, device number 35 [ 537.213230][ T46] usb 8-1: Using ep0 maxpacket: 32 [ 537.235199][ T46] usb 8-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 537.285368][ T46] usb 8-1: config 123 interface 0 has no altsetting 0 [ 537.316919][ T46] usb 8-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 537.341617][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.370461][ T46] usb 8-1: Product: syz [ 537.398143][ T46] usb 8-1: Manufacturer: syz [ 537.437343][ T46] usb 8-1: SerialNumber: syz [ 537.453908][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 537.614388][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 537.632264][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 537.649076][ T9] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 537.660432][ T9] usb 3-1: config 11 has no interface number 0 [ 537.672187][ T9] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 537.684742][ T9] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 537.699875][ T9] usb 3-1: config 11 interface 244 has no altsetting 0 [ 537.715187][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 537.735665][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.749056][ T9] usb 3-1: Product: syz [ 537.750944][ T46] usb 8-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 537.775690][ T9] usb 3-1: Manufacturer: syz [ 537.780987][ T9] usb 3-1: SerialNumber: syz [ 537.824828][ T46] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 537.857526][ T46] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 537.884347][ T46] usb 8-1: media controller created [ 537.931454][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.145857][ T46] set interface failed [ 538.145883][ T46] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 538.854924][ T46] error writing reg: 0xff, val: 0x00 [ 538.919081][ T46] dvb_usb_mxl111sf 8-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 538.966016][ T46] usb 8-1: USB disconnect, device number 24 [ 540.044143][ T9] peak_usb 3-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 540.087300][ T9] peak_usb 3-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 540.320718][ T9] peak_usb 3-1:11.244: probe with driver peak_usb failed with error -71 [ 540.378560][ T9] usb 3-1: USB disconnect, device number 36 [ 540.420529][ T29] audit: type=1400 audit(1779155783.250:826): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 540.555590][ T29] audit: type=1400 audit(1779155783.380:827): avc: denied { read } for pid=12230 comm="syz.5.1929" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 540.673279][ T29] audit: type=1400 audit(1779155783.420:828): avc: denied { map } for pid=12230 comm="syz.5.1929" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 540.698677][ T29] audit: type=1400 audit(1779155783.420:829): avc: denied { execute } for pid=12230 comm="syz.5.1929" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 541.905669][T12245] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1932'. [ 541.928261][T12245] siw: device registration error -23 [ 544.905227][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 544.910059][ T46] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 545.063749][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 545.081605][ T9] usb 3-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 545.109504][ T9] usb 3-1: config 123 interface 0 has no altsetting 0 [ 545.119300][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 545.155091][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 545.184327][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.214880][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.253247][ T9] usb 3-1: Product: syz [ 545.259046][ T46] usb 5-1: config 0 has no interfaces? [ 545.274885][ T9] usb 3-1: Manufacturer: syz [ 545.287398][ T9] usb 3-1: SerialNumber: syz [ 545.305941][ T46] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 545.362863][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.410034][ T46] usb 5-1: Product: syz [ 545.434595][ T46] usb 5-1: Manufacturer: syz [ 545.458323][ T46] usb 5-1: SerialNumber: syz [ 545.528931][ T46] usb 5-1: config 0 descriptor?? [ 545.560725][ T9] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 545.609542][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1943'. [ 545.636477][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 545.680140][ T9] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 545.742195][ T9] usb 3-1: media controller created [ 545.790479][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.860153][ T9] set interface failed [ 545.860179][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 545.902481][ T9] error writing reg: 0xff, val: 0x00 [ 545.994041][ T9] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 546.084053][ T9] usb 3-1: USB disconnect, device number 37 [ 546.103697][T12281] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1946'. [ 546.136200][T12281] siw: device registration error -23 [ 548.197164][ T46] usb 5-1: USB disconnect, device number 28 [ 549.683550][ T5623] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 549.693382][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 549.693400][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 549.693409][ T5623] Workqueue: hci5 hci_rx_work [ 549.693428][ T5623] Call Trace: [ 549.693432][ T5623] [ 549.693437][ T5623] dump_stack_lvl+0x100/0x190 [ 549.693453][ T5623] sysfs_warn_dup.cold+0x1c/0x28 [ 549.693469][ T5623] sysfs_create_dir_ns+0x24b/0x2b0 [ 549.693487][ T5623] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 549.693501][ T5623] ? find_held_lock+0x2b/0x80 [ 549.693513][ T5623] ? kobject_add_internal+0x25f/0x930 [ 549.693525][ T5623] ? kobject_add_internal+0x25f/0x930 [ 549.693537][ T5623] ? do_raw_spin_unlock+0x145/0x1e0 [ 549.693554][ T5623] kobject_add_internal+0x2c8/0x930 [ 549.693568][ T5623] kobject_add+0x16a/0x1e0 [ 549.693578][ T5623] ? __pfx_kobject_add+0x10/0x10 [ 549.693589][ T5623] ? class_to_subsys+0x10f/0x150 [ 549.693605][ T5623] ? kobject_put+0xb9/0x640 [ 549.693614][ T5623] ? _raw_spin_unlock+0x28/0x50 [ 549.693631][ T5623] device_add+0x294/0x1950 [ 549.693644][ T5623] ? __pfx_dev_set_name+0x10/0x10 [ 549.693660][ T5623] ? __pfx_device_add+0x10/0x10 [ 549.693673][ T5623] ? mgmt_send_event_skb+0x2fb/0x460 [ 549.693691][ T5623] hci_conn_add_sysfs+0x1a3/0x260 [ 549.693709][ T5623] le_conn_complete_evt+0x11eb/0x1f60 [ 549.693728][ T5623] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 549.693748][ T5623] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 549.693765][ T5623] ? skb_pull_data+0x15f/0x1e0 [ 549.693780][ T5623] hci_le_meta_evt+0x34a/0x5f0 [ 549.693796][ T5623] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 549.693813][ T5623] hci_event_packet+0x51c/0xcd0 [ 549.693827][ T5623] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 549.693843][ T5623] ? __pfx_hci_event_packet+0x10/0x10 [ 549.693861][ T5623] ? kcov_remote_start+0x374/0x660 [ 549.693875][ T5623] ? lockdep_hardirqs_on+0x78/0x100 [ 549.693894][ T5623] hci_rx_work+0x451/0xfc0 [ 549.693910][ T5623] process_one_work+0xa0e/0x1980 [ 549.693932][ T5623] ? __pfx_process_one_work+0x10/0x10 [ 549.693951][ T5623] ? __pfx_hci_rx_work+0x10/0x10 [ 549.693966][ T5623] worker_thread+0x5ef/0xe50 [ 549.693991][ T5623] ? kthread+0x13a/0x450 [ 549.694010][ T5623] ? __pfx_worker_thread+0x10/0x10 [ 549.694029][ T5623] kthread+0x370/0x450 [ 549.694047][ T5623] ? __pfx_kthread+0x10/0x10 [ 549.694061][ T5623] ret_from_fork+0x72b/0xd50 [ 549.694076][ T5623] ? __pfx_ret_from_fork+0x10/0x10 [ 549.694091][ T5623] ? __switch_to+0x800/0x1100 [ 549.694107][ T5623] ? __pfx_kthread+0x10/0x10 [ 549.694121][ T5623] ret_from_fork_asm+0x1a/0x30 [ 549.694144][ T5623] [ 549.694196][ T5623] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 549.969138][ T5623] Bluetooth: hci5: failed to register connection device [ 550.164375][T12315] netlink: 'syz.5.1957': attribute type 10 has an invalid length. [ 550.215895][T12313] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 550.506776][ T46] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 551.296429][ T46] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 551.323204][ T46] usb 9-1: config 0 has no interface number 0 [ 551.354516][ T46] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 551.374922][ T46] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 551.389728][ T46] usb 9-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 551.420124][ T46] usb 9-1: config 0 interface 2 has no altsetting 0 [ 551.450514][ T46] usb 9-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 551.466450][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.474860][ T46] usb 9-1: Product: syz [ 551.479556][ T46] usb 9-1: Manufacturer: syz [ 551.491471][ T46] usb 9-1: SerialNumber: syz [ 551.508674][ T46] usb 9-1: config 0 descriptor?? [ 551.517069][T12323] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 551.524470][T12323] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 551.540168][ T46] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 551.676240][ T5717] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 551.725728][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 551.742954][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.745745][ T5612] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 551.766415][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.835666][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 551.842255][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.853292][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.863125][ T5717] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 551.872330][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.882702][ T5717] usb 3-1: config 0 descriptor?? [ 551.885833][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 551.887910][ T5612] usb 8-1: device descriptor read/64, error -71 [ 551.902540][ T9] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 551.908433][ T5717] hub 3-1:0.0: USB hub found [ 551.918542][ T9] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 551.930404][ T9] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.941545][ T9] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 551.957617][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 551.967021][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.975068][ T9] usb 6-1: Product: syz [ 551.989797][ T9] usb 6-1: Manufacturer: syz [ 552.001065][ T9] usb 6-1: SerialNumber: syz [ 552.030314][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 552.084194][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input12 [ 552.115640][ T5717] hub 3-1:0.0: 1 port detected [ 552.165785][ T5612] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 552.245480][ T9] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 552.255279][ T9] (id 0x00) [ 552.305448][ T9] rc_core: IR keymap rc-imon-pad not found [ 552.305537][ T5612] usb 8-1: device descriptor read/64, error -71 [ 552.327538][ T9] Registered IR keymap rc-empty [ 552.338328][ T9] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 552.360556][ T9] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 552.440992][ T5612] usb usb8-port1: attempt power cycle [ 552.458874][ T9] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc1 [ 552.498632][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc1/input13 [ 552.566211][ T9] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:29> initialized [ 552.739442][ T5725] hub 3-1:0.0: activate --> -90 [ 552.806571][ T5612] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 552.865743][ T5612] usb 8-1: device descriptor read/8, error -71 [ 552.940545][ T5725] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 552.947768][ T5717] usb 3-1: USB disconnect, device number 38 [ 553.221165][ T5612] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 553.245778][ T5612] usb 8-1: device descriptor read/8, error -71 [ 553.369999][ T5612] usb usb8-port1: unable to enumerate USB device [ 554.283789][ T5709] usb 9-1: USB disconnect, device number 14 [ 554.297424][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 554.686216][T12335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.741471][T12335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.755428][T12359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1968'. [ 554.994100][ T5709] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 554.994138][ T5612] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 555.105626][T12369] syzkaller0: entered promiscuous mode [ 555.112926][T12369] syzkaller0: entered allmulticast mode [ 555.179909][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.198437][ T5709] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 555.208534][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.224942][ T5709] usb 5-1: config 0 descriptor?? [ 555.233452][ T5709] pwc: Askey VC010 type 2 USB webcam detected. [ 555.354120][ T5612] usb 8-1: Using ep0 maxpacket: 8 [ 555.375251][ T5612] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.221211][T12346] imon:send_packet: task interrupted [ 556.263828][T12346] imon:send_packet: packet tx failed (-512) [ 556.271082][T12346] imon:vfd_write: send packet #3 failed [ 556.295242][ T10] usb 6-1: USB disconnect, device number 29 [ 556.517863][ T5709] pwc: recv_control_msg error -32 req 02 val 2b00 [ 556.531021][ T5709] pwc: recv_control_msg error -32 req 02 val 2700 [ 556.556879][ T5612] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 556.564510][ T5709] pwc: recv_control_msg error -32 req 02 val 2c00 [ 556.588179][ T5709] pwc: recv_control_msg error -32 req 04 val 1000 [ 556.612393][T12376] 9pnet_virtio: no channels available for device syz [ 556.633611][ T5709] pwc: recv_control_msg error -32 req 04 val 1300 [ 556.636635][ T5612] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 556.652557][ T5709] pwc: recv_control_msg error -32 req 04 val 1400 [ 556.704098][ T5709] pwc: recv_control_msg error -32 req 02 val 2000 [ 556.717001][ T5612] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 556.749151][ T5612] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 556.773316][ T5709] pwc: recv_control_msg error -32 req 02 val 2100 [ 556.798177][ T5709] pwc: recv_control_msg error -32 req 04 val 1500 [ 556.814815][ T5612] usb 8-1: Product: syz [ 556.837058][ T5612] usb 8-1: Manufacturer: syz [ 556.844396][ T5612] usb 8-1: SerialNumber: syz [ 556.871209][ T5612] usb 8-1: config 0 descriptor?? [ 556.983309][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 557.029347][ T5709] pwc: recv_control_msg error -71 req 02 val 2400 [ 557.041484][ T5709] pwc: recv_control_msg error -71 req 02 val 2600 [ 557.043871][ T5612] rc_core: IR keymap rc-imon-rsc not found [ 557.048574][ T5709] pwc: recv_control_msg error -71 req 02 val 2900 [ 557.064707][ T5612] Registered IR keymap rc-empty [ 557.067168][ T5709] pwc: recv_control_msg error -71 req 02 val 2800 [ 557.076017][ T5612] rc rc1: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1 [ 557.079117][ T5709] pwc: recv_control_msg error -71 req 04 val 1100 [ 557.089696][ T5612] input: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1/input14 [ 557.097112][ T5709] pwc: recv_control_msg error -71 req 04 val 1200 [ 557.139899][ T5709] pwc: Registered as video103. [ 557.151205][ T5709] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 557.160969][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 557.167958][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 557.183828][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 557.191939][ T5709] usb 5-1: USB disconnect, device number 29 [ 557.211371][ T9] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 557.221536][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.229687][ T9] usb 9-1: Product: syz [ 557.261065][ T5612] usb 8-1: USB disconnect, device number 29 [ 557.262965][ T9] usb 9-1: Manufacturer: syz [ 557.300536][ T9] usb 9-1: SerialNumber: syz [ 557.335246][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 557.344994][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.351304][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.364514][ T9] usb 9-1: config 0 descriptor?? [ 557.386264][ T9] gs_usb 9-1:0.0: Required endpoints not found [ 557.533117][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 557.553970][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.570246][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.583326][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 557.596233][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.640378][ T10] usb 6-1: config 0 descriptor?? [ 557.666885][ T10] hub 6-1:0.0: USB hub found [ 557.866308][ T10] hub 6-1:0.0: 1 port detected [ 558.479233][ T10] hub 6-1:0.0: activate --> -90 [ 558.687690][ T5709] usb 6-1: USB disconnect, device number 30 [ 558.694491][ T10] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 558.874369][ T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 558.923650][T12434] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 558.963786][T12434] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 558.974520][T12434] overlayfs: failed to look up (tracing) for ino (-66) [ 559.032079][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 559.039280][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.050296][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 559.062917][ T9] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 559.073042][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.081155][ T9] usb 8-1: Product: syz [ 559.086126][ T9] usb 8-1: Manufacturer: syz [ 559.090912][ T9] usb 8-1: SerialNumber: syz [ 559.105211][ T9] usb 8-1: config 0 descriptor?? [ 559.521083][T12444] 9pnet_virtio: no channels available for device syz [ 559.717299][ T5709] usb 9-1: USB disconnect, device number 15 [ 560.213904][T12461] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 560.415429][T12461] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 560.425675][T12461] overlayfs: failed to look up (tracing) for ino (-66) [ 561.510913][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2002'. [ 561.661351][ T10] usb 8-1: USB disconnect, device number 30 [ 561.782445][T12479] exFAT-fs (nbd5): unable to read boot sector [ 561.788629][T12479] exFAT-fs (nbd5): failed to read boot sector [ 561.794927][T12479] exFAT-fs (nbd5): failed to recognize exfat type [ 562.900157][ T990] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 563.052150][ T990] usb 9-1: Using ep0 maxpacket: 32 [ 563.092287][ T990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.130283][ T990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.141987][ T990] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 563.151599][T11071] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 563.160906][ T990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.183779][ T990] usb 9-1: config 0 descriptor?? [ 563.200978][ T990] hub 9-1:0.0: USB hub found [ 563.320015][T11071] usb 6-1: Using ep0 maxpacket: 16 [ 563.332714][ T5613] Bluetooth: hci1: Malformed LE Event: 0x0d [ 563.381505][T11071] usb 6-1: unable to get BOS descriptor or descriptor too short [ 563.404705][T11071] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 563.419191][ T990] hub 9-1:0.0: 1 port detected [ 563.425752][T11071] usb 6-1: can't read configurations, error -71 [ 563.579840][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 563.743071][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 563.761352][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.783572][ T9] usb 5-1: Product: syz [ 563.795268][ T9] usb 5-1: Manufacturer: syz [ 563.805026][ T9] usb 5-1: SerialNumber: syz [ 563.884262][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2010'. [ 563.897761][T12497] netlink: 11 bytes leftover after parsing attributes in process `syz.7.2010'. [ 564.118374][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.145332][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.232112][ T10] usb 9-1: USB disconnect, device number 16 [ 564.427514][T12509] vxcan0: tx address claim with dest, not broadcast [ 564.442335][T12509] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 564.564951][T12509] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 564.575148][T12509] overlayfs: failed to look up (tracing) for ino (-66) [ 565.951955][ T9] net_ratelimit: 10 callbacks suppressed [ 565.951977][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 566.001790][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 566.058586][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 566.058630][ T5612] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 566.096735][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 566.149120][ T46] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 566.157893][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 566.206380][ T9] usb 5-1: USB disconnect, device number 30 [ 566.249019][ T5612] usb 6-1: Using ep0 maxpacket: 16 [ 566.260387][ T5612] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 566.269386][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 566.270847][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.286869][ T5612] usb 6-1: config 1 has no interface number 0 [ 566.296527][ T5612] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 566.309984][ T5612] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 566.328620][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.332332][ T5612] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 566.348734][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 566.358916][ T5612] usb 6-1: config 1 interface 105 has no altsetting 0 [ 566.367539][ T10] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 566.372196][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 566.385252][ T5612] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 566.396381][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 566.405278][ T5612] usb 6-1: Product: syz [ 566.408130][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.410177][ T5612] usb 6-1: Manufacturer: syz [ 566.422441][ T46] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 566.434690][ T46] usb 3-1: config 11 has no interface number 0 [ 566.446771][ T46] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 566.458971][ T5612] usb 6-1: SerialNumber: syz [ 566.463519][ T10] usb 9-1: config 0 descriptor?? [ 566.465846][ T46] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 566.479169][ T46] usb 3-1: config 11 interface 244 has no altsetting 0 [ 566.487890][T12515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 566.501321][ T46] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 566.510606][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.519953][ T46] usb 3-1: Product: syz [ 566.524260][ T46] usb 3-1: Manufacturer: syz [ 566.530445][ T46] usb 3-1: SerialNumber: syz [ 566.718381][ T5612] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 566.874273][ T46] peak_usb 3-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 566.884629][ T46] peak_usb 3-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 566.934085][ T46] peak_usb 3-1:11.244: probe with driver peak_usb failed with error -71 [ 566.964968][ T46] usb 3-1: USB disconnect, device number 39 [ 567.111043][ T10] usb 9-1: language id specifier not provided by device, defaulting to English [ 567.310612][ T10] letsketch 0003:6161:4D15.0005: Device info: 哦 [ 567.512831][ T10] letsketch 0003:6161:4D15.0005: Device info: 첝 [ 567.530501][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2024'. [ 567.540146][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 567.628336][ T990] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 567.698522][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 567.710568][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 567.728179][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 567.740724][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 567.742403][T12540] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 567.750371][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.785193][ T9] usb 5-1: Product: syz [ 567.791946][ T10] usb 9-1: Max retries (5) exceeded reading string descriptor 202 [ 567.799895][ T990] usb 8-1: Using ep0 maxpacket: 16 [ 567.806297][ T10] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -71 [ 567.825951][ T9] usb 5-1: Manufacturer: syz [ 567.845978][ T9] usb 5-1: SerialNumber: syz [ 567.867683][ T990] usb 8-1: unable to get BOS descriptor or descriptor too short [ 567.878756][ T10] usb 9-1: USB disconnect, device number 17 [ 567.885907][ T9] usb 5-1: config 0 descriptor?? [ 567.898187][ T990] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 567.910084][ T9] gs_usb 5-1:0.0: Required endpoints not found [ 567.919921][ T990] usb 8-1: can't read configurations, error -71 [ 568.057543][ T46] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 568.229277][ T46] usb 3-1: config 226 has 0 interfaces, different from the descriptor's value: 5 [ 568.238750][ T46] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 568.247956][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.324980][T12543] netlink: 'syz.8.2026': attribute type 10 has an invalid length. [ 568.495886][ T46] usb 3-1: string descriptor 0 read error: -71 [ 568.520392][ T46] usb 3-1: USB disconnect, device number 40 [ 568.796265][ T46] usb 6-1: USB disconnect, device number 33 [ 568.847447][ T30] INFO: task syz.6.1348:10552 blocked for more than 143 seconds. [ 568.856157][ T30] Not tainted syzkaller #0 [ 568.861634][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 568.871317][ T30] task:syz.6.1348 state:D stack:27128 pid:10552 tgid:10552 ppid:8088 task_flags:0x400040 flags:0x00080003 [ 568.887434][ T30] Call Trace: [ 568.890806][ T30] [ 568.895707][ T30] __schedule+0x1295/0x67a0 [ 568.901486][ T30] ? __pfx___schedule+0x10/0x10 [ 568.906464][ T30] ? find_held_lock+0x2b/0x80 [ 568.911209][ T30] ? schedule+0x2bf/0x390 [ 568.915659][ T30] schedule+0xdd/0x390 [ 568.919876][ T30] request_wait_answer+0x55e/0x860 [ 568.925048][ T30] ? __pfx_request_wait_answer+0x10/0x10 [ 568.927117][T11071] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 568.931251][ T30] ? fuse_dev_queue_req+0x22e/0x320 [ 568.943876][ T30] ? fuse_dev_queue_req+0x22e/0x320 [ 568.950084][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 568.956258][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 568.961541][ T30] ? _raw_spin_unlock+0x28/0x50 [ 568.966479][ T30] ? fuse_dev_queue_req+0x233/0x320 [ 568.972030][ T30] __fuse_simple_request+0x45b/0xf00 [ 568.977680][ T30] fuse_flush+0x4e4/0x6b0 [ 568.982065][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 568.987908][ T30] ? find_held_lock+0x2b/0x80 [ 568.992780][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 568.998095][ T30] filp_flush+0xe7/0x190 [ 569.002396][ T30] filp_close+0x1c/0x30 [ 569.006582][ T30] __range_close+0x137/0x7a0 [ 569.012003][ T30] __x64_sys_close_range+0x3ce/0x5d0 [ 569.017446][ T30] ? __pfx___x64_sys_close_range+0x10/0x10 [ 569.023335][ T30] ? rcu_is_watching+0x12/0xc0 [ 569.028205][ T30] do_syscall_64+0x10b/0xf80 [ 569.032862][ T30] ? clear_bhb_loop+0x40/0x90 [ 569.038162][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.044290][ T30] RIP: 0033:0x7fd76bb9ce59 [ 569.049755][ T30] RSP: 002b:00007ffd811960d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 569.058774][ T30] RAX: ffffffffffffffda RBX: 00007ffd811961c0 RCX: 00007fd76bb9ce59 [ 569.067295][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 569.075363][ T30] RBP: 0000000000064daf R08: 0000000000000001 R09: 0000000000000000 [ 569.083488][ T30] R10: 0000001b2d220000 R11: 0000000000000246 R12: 00007ffd81196200 [ 569.089229][T11071] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 569.092430][ T30] R13: 00007fd76be15fac R14: 0000000000065238 R15: 00007fd76be15fa0 [ 569.111354][T11071] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 569.111401][ T30] [ 569.125614][ T30] [ 569.125614][ T30] Showing all locks held in the system: [ 569.126043][T11071] usb 9-1: config 0 interface 0 has no altsetting 0 [ 569.133528][ T30] 1 lock held by khungtaskd/30: [ 569.146007][ T30] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 569.156255][ T30] 6 locks held by kworker/1:1/46: [ 569.161952][ T30] #0: ffff8880232c6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 569.162221][T11071] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 569.174160][ T30] #1: [ 569.182679][ T46] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 569.194309][T11071] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 569.203936][T11071] usb 9-1: Product: syz [ 569.208414][T11071] usb 9-1: Manufacturer: syz [ 569.213321][T11071] usb 9-1: SerialNumber: syz [ 569.223521][ T30] ffffc90000b67d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 569.235086][ T30] #2: ffff88802c26f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 569.236512][T11071] usb 9-1: config 0 descriptor?? [ 569.244441][ T30] #3: ffff88802c26c568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 569.254031][T12553] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 569.260733][ T30] #4: ffff8880217f3d60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 569.271444][T11071] usb 9-1: selecting invalid altsetting 0 [ 569.278937][ T30] #5: ffffffff8fbc6788 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1c60 [ 569.295603][ T30] 2 locks held by getty/5370: [ 569.300887][ T30] #0: ffff888035bfe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 569.311690][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 569.322443][ T30] 4 locks held by udevd/5602: [ 569.327908][ T30] #0: ffff8880342acbd8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 569.339488][ T30] #1: ffff8880797a8480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 569.349379][ T30] #2: ffff88804e51a0f8 (kn->active#23){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 569.360676][ T30] #3: ffff8880226951d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 569.370636][ T46] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 569.379969][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.394418][ T46] usb 6-1: config 0 descriptor?? [ 569.404546][ T30] 5 locks held by kworker/0:6/11071: [ 569.438336][ T30] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 569.462170][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 569.472645][ T30] #2: ffffffff8eaa2af8 (kernfs_notify_lock){....}-{3:3}, at: kernfs_notify_workfn+0x7f/0x5f0 [ 569.483273][ T30] #3: ffff88801c6a7980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_notify_workfn+0xff/0x5f0 [ 569.496627][ T30] #4: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x23/0x2a0 [ 569.509962][ T30] [ 569.512573][ T30] ============================================= [ 569.512573][ T30] [ 569.521439][ T30] NMI backtrace for cpu 1 [ 569.521454][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 569.521471][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 569.521481][ T30] Call Trace: [ 569.521487][ T30] [ 569.521496][ T30] dump_stack_lvl+0x100/0x190 [ 569.521522][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 569.521545][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 569.521565][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 569.521587][ T30] sys_info+0x141/0x190 [ 569.521602][ T30] watchdog+0xcb1/0x1030 [ 569.521624][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 569.521647][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.521667][ T30] ? __kthread_parkme+0x18c/0x230 [ 569.521687][ T30] ? kthread+0x13a/0x450 [ 569.521703][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.521720][ T30] kthread+0x370/0x450 [ 569.521738][ T30] ? __pfx_kthread+0x10/0x10 [ 569.521758][ T30] ret_from_fork+0x72b/0xd50 [ 569.521781][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 569.521803][ T30] ? __switch_to+0x800/0x1100 [ 569.521828][ T30] ? __pfx_kthread+0x10/0x10 [ 569.521849][ T30] ret_from_fork_asm+0x1a/0x30 [ 569.521883][ T30] [ 569.521938][ T30] Sending NMI from CPU 1 to CPUs 0: [ 569.525169][T12553] usb 9-1: BOGUS urb xfer, pipe 0 != type 1 [ 569.526367][ C0] NMI backtrace for cpu 0 [ 569.526378][ C0] CPU: 0 UID: 0 PID: 12553 Comm: syz.8.2029 Not tainted syzkaller #0 PREEMPT(full) [ 569.526394][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 569.526402][ C0] RIP: 0010:__bfs+0x1c7/0x2a0 [ 569.526421][ C0] Code: 81 e3 ff 0f 00 00 39 1d 67 c3 2d 14 48 89 04 f5 00 fc cc 96 73 11 89 1d 57 c3 2d 14 eb 09 0f 1f 44 00 00 4c 89 78 30 48 8b 00 <4c> 39 c0 75 f4 e9 22 ff ff ff b8 01 00 00 00 48 83 c4 30 5b 5d 41 [ 569.526434][ C0] RSP: 0018:ffffc9000691ecf8 EFLAGS: 00000002 [ 569.526445][ C0] RAX: ffffffff979f79d8 RBX: 00000000000000a5 RCX: 00000000000000c4 [ 569.526453][ C0] RDX: ffffffff96126ca8 RSI: 00000000000000c4 RDI: ffffffff97a00aa8 [ 569.526462][ C0] RBP: 0000000000000030 R08: ffffffff96126cd8 R09: 0000000000000020 [ 569.526470][ C0] R10: ffffc9000691ee88 R11: 0000000000000000 R12: ffffffff81e41b20 [ 569.526479][ C0] R13: ffffc9000691eda0 R14: ffffffff81e42930 R15: ffffffff97a00aa8 [ 569.526489][ C0] FS: 00007f9ef6acd6c0(0000) GS:ffff88812436d000(0000) knlGS:0000000000000000 [ 569.526505][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.526515][ C0] CR2: 0000200000002200 CR3: 000000005a4aa000 CR4: 00000000003526f0 [ 569.526525][ C0] Call Trace: [ 569.526529][ C0] [ 569.526535][ C0] ? __asan_memcpy+0x3c/0x60 [ 569.526555][ C0] check_irq_usage+0xe5/0x810 [ 569.526571][ C0] ? __bfs+0x150/0x2a0 [ 569.526585][ C0] ? check_noncircular+0x97/0x160 [ 569.526602][ C0] ? __lock_acquire+0x14cf/0x2630 [ 569.526617][ C0] __lock_acquire+0x14cf/0x2630 [ 569.526635][ C0] lock_acquire+0x1b1/0x370 [ 569.526653][ C0] ? serial8250_console_write+0x17e/0x1900 [ 569.526672][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 569.526690][ C0] ? serial8250_console_write+0x17e/0x1900 [ 569.526703][ C0] serial8250_console_write+0x17e/0x1900 [ 569.526718][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 569.526731][ C0] ? lock_acquire+0x1b1/0x370 [ 569.526749][ C0] console_flush_one_record+0x790/0xe50 [ 569.526781][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 569.526803][ C0] ? add_lock_to_list+0x99/0x110 [ 569.526821][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 569.526839][ C0] console_unlock+0x103/0x260 [ 569.526861][ C0] ? __pfx_console_unlock+0x10/0x10 [ 569.526883][ C0] ? lock_acquire+0x140/0x370 [ 569.526908][ C0] ? vprintk_emit+0x516/0x6b0 [ 569.526923][ C0] ? vprintk_emit+0x516/0x6b0 [ 569.526938][ C0] vprintk_emit+0x407/0x6b0 [ 569.526952][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 569.526969][ C0] dev_vprintk_emit+0x394/0x3e0 [ 569.526991][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 569.527012][ C0] ? find_held_lock+0x2b/0x80 [ 569.527027][ C0] ? prepare_playback_urb+0xe38/0x1e90 [ 569.527044][ C0] ? prepare_playback_urb+0xe38/0x1e90 [ 569.527060][ C0] ? find_held_lock+0x2b/0x80 [ 569.527076][ C0] dev_printk_emit+0xd2/0x10d [ 569.527095][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 569.527114][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 569.527136][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 569.527156][ C0] ? prepare_playback_urb+0xc61/0x1e90 [ 569.527175][ C0] __dev_printk+0xcb/0x100 [ 569.527193][ C0] _dev_warn+0xef/0x127 [ 569.527212][ C0] ? __pfx__dev_warn+0x10/0x10 [ 569.527232][ C0] ? lock_acquire+0x1b1/0x370 [ 569.527251][ C0] ? __pfx_prepare_playback_urb+0x10/0x10 [ 569.527267][ C0] ? prepare_outbound_urb+0x167/0xdb0 [ 569.527288][ C0] usb_submit_urb+0xe69/0x1910 [ 569.527309][ C0] ? find_held_lock+0x2b/0x80 [ 569.527325][ C0] snd_usb_endpoint_start+0x4c9/0xf40 [ 569.527344][ C0] ? __pfx_snd_usb_endpoint_start+0x10/0x10 [ 569.527364][ C0] ? do_transfer+0x17a/0x210 [ 569.527382][ C0] start_endpoints+0xfb/0x1d0 [ 569.527396][ C0] snd_usb_substream_playback_trigger+0x6cb/0x890 [ 569.527413][ C0] snd_pcm_do_start+0xd4/0x1f0 [ 569.527432][ C0] snd_pcm_action_single+0x80/0x150 [ 569.527448][ C0] snd_pcm_action+0x70/0x90 [ 569.527467][ C0] __snd_pcm_lib_xfer+0x177b/0x20a0 [ 569.527490][ C0] ? __pfx_default_write_copy+0x10/0x10 [ 569.527512][ C0] ? __pfx_interleaved_copy+0x10/0x10 [ 569.527527][ C0] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 569.527544][ C0] ? find_held_lock+0x2b/0x80 [ 569.527556][ C0] ? mark_held_locks+0x40/0x70 [ 569.527571][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 569.527590][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 569.527607][ C0] snd_pcm_oss_write3+0x8f/0x180 [ 569.527627][ C0] io_playback_transfer+0x26e/0x2f0 [ 569.527648][ C0] snd_pcm_plug_write_transfer+0x2c7/0x400 [ 569.527668][ C0] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 569.527688][ C0] ? snd_pcm_format_physical_width+0x76/0xa0 [ 569.527706][ C0] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 569.527728][ C0] snd_pcm_oss_write2+0x24a/0x400 [ 569.527745][ C0] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 569.527762][ C0] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 569.527774][ C0] ? snd_pcm_oss_prepare+0x11e/0x240 [ 569.527791][ C0] snd_pcm_oss_write+0x729/0xa30 [ 569.527809][ C0] ? security_file_permission+0x76/0x210 [ 569.527830][ C0] vfs_write+0x2aa/0x1070 [ 569.527845][ C0] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 569.527863][ C0] ? __pfx_vfs_write+0x10/0x10 [ 569.527876][ C0] ? find_held_lock+0x2b/0x80 [ 569.527888][ C0] ? __fget_files+0x215/0x3d0 [ 569.527908][ C0] ? __fget_files+0x215/0x3d0 [ 569.527925][ C0] ? __fget_files+0x21f/0x3d0 [ 569.527942][ C0] ksys_write+0x12a/0x250 [ 569.527956][ C0] ? __pfx_ksys_write+0x10/0x10 [ 569.527973][ C0] ? rcu_is_watching+0x12/0xc0 [ 569.527997][ C0] do_syscall_64+0x10b/0xf80 [ 569.528017][ C0] ? clear_bhb_loop+0x40/0x90 [ 569.528035][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.528050][ C0] RIP: 0033:0x7f9ef5b9ce59 [ 569.528063][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.528076][ C0] RSP: 002b:00007f9ef6acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.528090][ C0] RAX: ffffffffffffffda RBX: 00007f9ef5e15fa0 RCX: 00007f9ef5b9ce59 [ 569.528099][ C0] RDX: 00000000fffffcd9 RSI: 0000200000002200 RDI: 0000000000000007 [ 569.528108][ C0] RBP: 00007f9ef5c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 569.528116][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.528124][ C0] R13: 00007f9ef5e16038 R14: 00007f9ef5e15fa0 R15: 00007ffdcf77b528 [ 569.528139][ C0] [ 569.533362][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 569.533377][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 569.533395][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 569.533409][ T30] Call Trace: [ 569.533414][ T30] [ 569.533421][ T30] dump_stack_lvl+0x100/0x190 [ 569.533444][ T30] vpanic+0x552/0x970 [ 569.533460][ T30] ? __pfx_vpanic+0x10/0x10 [ 569.533475][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 569.533494][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 569.533515][ T30] panic+0xd1/0xe0 [ 569.533529][ T30] ? __pfx_panic+0x10/0x10 [ 569.533546][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 569.533564][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 569.533582][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 569.533599][ T30] ? watchdog.cold+0x1ec/0x234 [ 569.533616][ T30] ? watchdog+0xcc1/0x1030 [ 569.533636][ T30] watchdog.cold+0x1fd/0x234 [ 569.533657][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 569.533678][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.533697][ T30] ? __kthread_parkme+0x18c/0x230 [ 569.533716][ T30] ? kthread+0x13a/0x450 [ 569.533732][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.533749][ T30] kthread+0x370/0x450 [ 569.533766][ T30] ? __pfx_kthread+0x10/0x10 [ 569.533785][ T30] ret_from_fork+0x72b/0xd50 [ 569.533806][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 569.533827][ T30] ? __switch_to+0x800/0x1100 [ 569.533850][ T30] ? __pfx_kthread+0x10/0x10 [ 569.533869][ T30] ret_from_fork_asm+0x1a/0x30 [ 569.533901][ T30] [ 570.436442][ T30] Kernel Offset: disabled [ 570.440740][ T30] Rebooting in 86400 seconds..