last executing test programs: 7m32.841541634s ago: executing program 0 (id=1042): r0 = socket(0x1d, 0x3, 0xffffffff) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000101, 0x0, 0x8000000000000000}]}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x83) syz_usb_connect(0x0, 0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502", @ANYRES32], 0x0) getsockopt$inet_mreqn(r4, 0x29, 0x20, 0x0, &(0x7f0000000240)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, 0x1, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5ee22b88}, @CTA_PROTOINFO={0x14, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x10, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_PRIORITY(r5, 0x40045644, 0x2) 7m31.871613696s ago: executing program 0 (id=1046): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a4, &(0x7f0000000000)={{@any, 0xd}, @hyper, 0x1, 0x0, 0x4000000f3, 0x0, 0x4, 0x3ffffff, 0xed5}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r4, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0xfff00000}, {0x3, 0xfd}, {0xa}, @queue={0xf0, {0x3, 0x5}}}, {0x0, 0x0, 0x0, 0x8, @time={0x4000000, 0x4}, {}, {0x5}, @quote={{0x6, 0x73}, 0x401}}, {0x4, 0x0, 0xfe, 0x0, @time={0x3, 0x1}, {}, {}, @connect={{0x5, 0x5f}, {0x2, 0x9}}}, {0x1, 0x0, 0x1, 0x0, @time={0x6, 0x5}, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x3}}], 0x70) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000003080101000040000000000000000000340004800800094000000000080001400000000008000240000000000800044000000000081603400000000008000b400000000006000240000000000500030006"], 0x58}}, 0x0) 7m31.580282348s ago: executing program 0 (id=1047): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000500)={[0xe000, 0x58000, 0x0, 0x9000], 0xfd, 0x4, 0xa}) r1 = fanotify_init(0x40, 0x80000) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) getdents64(r2, &(0x7f0000000940)=""/229, 0xe5) getdents64(r2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@sco={0x1f, @none}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="002d7fc120758ab96a4fa6a01d6cbb43e1663cca00f22f4005d3c239fe38c1ffc2767b613b034fab2efaec1a6f9fcb2dc978f474d77d762c9ca48284289422a967f6007205a5c9c9a3eb04d39fe66fc17b89d772987e93258b5a3482a4d9281248a8568e24462e2dca12875f7f4a0df27e5db4e16d0a74eb9515ff6413be6ecabb6af3b45be64039d3378b8ca193fba50979164ebdbfaa7683718b5c1d84be17", 0xa0}, {&(0x7f0000000240)="6e7b5c7a3ab9627dc78c9e83b0b4502fffdb9cbe9713c129dc466b646cea2a3c5de08564ecf82d20de1875c868832110a0e4f4198a3e99654aad4d708abf5bd9287b57e35ad3e97e8eb25329b6afac2006477a63cc6e360c2af4c0ce7a170d6a58e7877f3b65e203a1cf43bee778f8abdb6ccf2202ad9ae8dd1564925a8e58215489b03022639a", 0x87}, {&(0x7f0000000300)="65d428b419af484b56387408377560bc4be48a4185f966e1bb09c6f82939a0915d1c635f96a42067194ca80eeae008ee6eeb5196cc6d12ad53e233dec941117a9935", 0x42}], 0x3, &(0x7f0000000400)=[{0x58, 0x10a, 0x80000001, "d09b0cff380405545131a7ddecc4702b114412195a7cc4923daabd31a07e600e0db6939ce7994da092d7bbdf4ef9cfa86e3b6fac1f5fbd042cf9ba107864a4c73d3c00b1d6cfe9"}, {0x20, 0x114, 0x2, "b0ee63999be7198525"}, {0x30, 0x11c, 0xb, "49329080b16026665841c931b332e050b6ed78dd7ac5d2b1b9bd23a9cab6"}], 0xa8}, 0x1) epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xcc}, 0x1, 0x0, 0x0, 0xc800}, 0x4000800) 7m30.587057579s ago: executing program 0 (id=1050): syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) syz_usb_connect(0x1, 0x24, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="70b2103e4d971d587f50f77cfa2c045f3180edc86c16606174ceae17899810d0d40d82323b27d75e89eb80f06e9d4e72bce0e4508b4a76896f5044fd5d00", @ANYRES32=r0], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000040)=ANY=[], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f00000001c0)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000180)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='vlan1\x00') syz_pidfd_open(r2, 0x0) 7m29.080937827s ago: executing program 0 (id=1054): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r0, @ANYRESOCT=r1, @ANYBLOB, @ANYRESHEX=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030c0000000007000000000000020009001000000001520000000000000200010000f2ffffff000200fffffffd03da05d2a3bb671481ca28adb47d16570006000000000002004e210a0101000000000000000000030005003200000002"], 0x60}, 0x1, 0x7}, 0x0) 7m27.775573264s ago: executing program 0 (id=1059): sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="400001801400020070696d3672"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4084050}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) map_shadow_stack(&(0x7f0000be0000/0x2000)=nil, 0x2000, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000000040)={0x33, 0x6, 0xffff}) (async) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x1}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000000)={0xeeee0000, 0x7000, 0x8000, 0x1, 0xfffffff8}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_usb_connect$uac2(0x2, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000081e04003040000102030109027e0003010e4004080b000201062003090400000001012000092401ff03091e00000c2403030304c7020307007f0924050201"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 7m27.084934155s ago: executing program 32 (id=1059): sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="400001801400020070696d3672"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4084050}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) map_shadow_stack(&(0x7f0000be0000/0x2000)=nil, 0x2000, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000000040)={0x33, 0x6, 0xffff}) (async) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x1}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000000)={0xeeee0000, 0x7000, 0x8000, 0x1, 0xfffffff8}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_usb_connect$uac2(0x2, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000081e04003040000102030109027e0003010e4004080b000201062003090400000001012000092401ff03091e00000c2403030304c7020307007f0924050201"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 6m9.079105024s ago: executing program 4 (id=1525): iopl(0x3) (async) syz_clone3(&(0x7f00000007c0)={0xa0000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x0], 0x1}, 0x58) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000100)=""/181, &(0x7f0000000280)=0xb5) (async) r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) r1 = epoll_create(0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x100005}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async, rerun: 64) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async, rerun: 64) close(0x3) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x8000}) (async, rerun: 64) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) fgetxattr(r5, &(0x7f0000000080)=@known='com.apple.system.Security\x00', 0x0, 0x0) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, 0x0}) (rerun: 64) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000600)) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x8}}}, 0x30) 6m8.728539953s ago: executing program 4 (id=1531): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x9, 0x4, 0x180, 0x4, 0xcbc, 0xf1, 0x3ff, 0x80, 0x8002, 0x6, 0x800000009, 0x1, 0x9, 0x9, 0x9], 0x51001, 0x3c4210}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001200)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061"]}, @subvolid=0x8}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006000000000008000500000000000800010000000000080002"], 0xc0}}, 0x40004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfefc) r4 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0xc389, 0x7, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x65, 0x0, 0x8, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x610003d5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x5, 0x2, 0x1}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x9, 0x4, 0x180, 0x4, 0xcbc, 0xf1, 0x3ff, 0x80, 0x8002, 0x6, 0x800000009, 0x1, 0x9, 0x9, 0x9], 0x51001, 0x3c4210}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001200)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061"]}, @subvolid=0x8}) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006000000000008000500000000000800010000000000080002"], 0xc0}}, 0x40004) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000180), 0xfefc) (async) socket(0x1e, 0x4, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0xc389, 0x7, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x65, 0x0, 0x8, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r3, 0x0) (async) inotify_add_watch(0xffffffffffffffff, 0x0, 0x610003d5) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) (async) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x5, 0x2, 0x1}) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) (async) 6m7.304287336s ago: executing program 4 (id=1540): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r2}) 6m7.227279756s ago: executing program 4 (id=1541): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="8f9498ba783ab4b1f005eb7fbc6092aa03", @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf251c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x20000000) (async, rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r1) (async, rerun: 32) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(r8, 0x8080aea1, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001840)={0x24, r4, 0x1, 0x170bd2e, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x2000044) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES16=r9, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001500010000000000000000000f00"], 0x14}}, 0x0) (async) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0x5}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 6m7.042986175s ago: executing program 4 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) socket(0x2b, 0x1, 0x0) (async) r1 = socket(0x2b, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) (async) bind$inet(r1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') (async) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) 6m6.512870767s ago: executing program 4 (id=1545): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) set_mempolicy_home_node(&(0x7f0000064000/0x400000)=nil, 0x400000, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000000), 0x12) 5m51.434534245s ago: executing program 33 (id=1545): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) set_mempolicy_home_node(&(0x7f0000064000/0x400000)=nil, 0x400000, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000000), 0x12) 5m22.786963269s ago: executing program 5 (id=1639): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x810000000000, 0x4100) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x2, 0x7, 0x9, 0x0, 0x1, 0x4, 0x0, 0x7ff, 0x0, 0x9, 0x55, 0x33, 0x2, 0xd3, 0xea, 0x8], 0x200000, 0x40}) 5m6.930718978s ago: executing program 34 (id=1639): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x810000000000, 0x4100) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x2, 0x7, 0x9, 0x0, 0x1, 0x4, 0x0, 0x7ff, 0x0, 0x9, 0x55, 0x33, 0x2, 0xd3, 0xea, 0x8], 0x200000, 0x40}) 20.761719887s ago: executing program 2 (id=2987): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc2302010203010902120001000000000904"], 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/protocols\x00') ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000580)={0x3b0, 0x4}) personality(0x8) uname(&(0x7f0000000640)=""/4096) read$FUSE(r1, &(0x7f0000002740)={0x2020}, 0x2020) syz_usb_connect$cdc_ecm(0x7, 0x5a, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0xc, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "41bad355"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x40, 0x9, 0xf9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xfb, 0x78, 0x90}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0xe, 0xfe}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xe, 0xa0, 0x3, 0x8, 0x3}, 0x23, &(0x7f0000000440)=ANY=[@ANYBLOB="050f230003fc10040050978e2ddb925c8c1e3e71139a4c31140710020e38020003100b"], 0x5, [{0xf7, &(0x7f0000000480)=@string={0xf7, 0x3, "592c8878fef9882a6a227479d19c1d05e0a23754c2f08c179bd11d8a0d6a0fc277513b9f82dde5cdbfce92a5c93feb66e6d1f14093e65989e8959cb978a8cc0e62fa5a5fe2986f8f195464de2fbe51c2916b3147ef1f6af33bda2a22839209bc921ad58424df9ffc6fac8038443c0183d6e60c93f63ed3f620f00040b511d81d7c7c05e173ecfce811b7873637c96bea80e258a65f639382d21612dd5b0158c9bcb8c946e96bf7da990be0ba64b4835ab5f3aa35bc5cb4f7d80f8c8b2ed4505e9c0c4b9f25a07d6f4a72253d715b519cbcac548ee3b6b0586d3685eb7f6155d1f62a7179463d980116c855af938e9fde53ec2e4eee"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x816}}, {0x22, &(0x7f00000005c0)=@string={0x22, 0x3, "5b1a6f24b2f518e33d6dbc297531abdea855e90bbd50b34f36c42be1a2a36cab"}}, {0x1c, &(0x7f0000000600)=@string={0x1c, 0x3, "ef7b3f70688020225e4daa0b02a85772e56a431df385b9f6cb62"}}, {0x81, &(0x7f0000000780)=@string={0x81, 0x3, "e61396d7cd091fa95582c18f719adcc3be4f3346296b1aff2be47bd508feaad8fa07a3d8ce331f111ee9cd5f6ffc3e50747f1497fe599ed7660929b44d17a1dfe83166df0b4a724bfa23c33b3e6b831ec7982fd1119a2849afc6b7abb8b1c06f2e1b12acf5b76d8625d7a07e6a6c926e1dbdf415e07c46548a056b168cc67d"}}]}) (async, rerun: 64) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x80, 0x2, 0x9}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x100, 0x29, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x7800, 0x0, 0x0, 0x4008}}) (async, rerun: 32) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x7, 0xf, {0xf, 0x21, "2004dbc2cee55ef340616cc17f"}}, &(0x7f0000000080)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "be957f87de0649f2ae227e4af78e8e0c35ea490259caba4986e441fd4fe92f8d09406926401d9129bed04bd9260b02d051231ef2e78349d9ff16624292c783135c3bfa88355e62f471"}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x0, 0x17, 0xdd, "12044dc189888ef55d13a0af98396fdc7f8969d67f3b55bffdd834a42c62151107e1388dc1b73e2c1ec040f2f434d3493bc827e68f7a5509c831e21f54d9826c4d0145b3974bb5744c34f49eae01d5422ac58e2b875635572d6c391802c8a7802e3fc06c663be5e26d0e9a05040cf505bc9ba8384fb11e024323a1b7980bbb769ac987854223b29ec4baead3dd5676de9da575fba969b8353d7e4eb5b68d61e301eb79e6eca7ab2fc9c6a4499815ed27ff27ed7c7b249ab03d04024473137e8538c428f158c36f399d97df230d5bc34fd04bf235d8fce704bd6eb393fc"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0), &(0x7f0000000300)={0x40, 0x5, 0x5, "8ab258cdaf"}}) 20.564233906s ago: executing program 2 (id=2989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000000400)=[{{&(0x7f0000000300)=@in6={0xa, 0x4e23, 0xb, @mcast1, 0x3c7f}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}], 0x1, 0x4008000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401a8000500027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000001c0)={0x200000, 0x200082, 0x6, 0x0, 0x5, 0x4}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r5, 0x1, 0xfffffffc, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c880}, 0x40004810) 20.463999951s ago: executing program 2 (id=2990): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000300)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000340)="f5c815cd16", 0x5}], 0x1, &(0x7f0000000680)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x5c0}}, @sndinfo={0x20, 0x84, 0x2, {0xa, 0x1, 0x2, 0x5}}, @init={0x18, 0x84, 0x0, {0x479, 0x6, 0x4, 0x3}}], 0x50, 0x44800}, 0x48040) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0xffffffffffffffff}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000780)={[0xd45, 0x1000009, 0xfffffffffffffffb, 0x10000000, 0xfffe, 0x3, 0x4003004c2, 0xe, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x4, 0xd, 0x8d], 0x100000, 0x4880}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x695, 0xa, 0x6, 0xb01, 0x40, 0x7, 0x7, 0xa, 0x4, 0x9, 0x8, 0x100000001, 0xf, 0x7, 0x4], 0x80a0000, 0x340014}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) 20.392088039s ago: executing program 2 (id=2991): open(0x0, 0x20000, 0x6a) (async) open(0x0, 0x20000, 0x6a) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002222000000662313060180a3020600002acab1b39dbd964616c8817381a6310f5e797e79d739"], 0x0}, 0x0) 18.61791896s ago: executing program 2 (id=3003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x802, 0x0) (async) socket$inet6(0xa, 0x802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$packet_buf(r5, 0x107, 0x2, &(0x7f0000000440)="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", 0xfa) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14) 15.369883808s ago: executing program 2 (id=3016): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000429000/0x1000)=nil) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = gettid() fcntl$setown(r0, 0x8, r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3c07a40deaa7b7c5, r0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) getpgrp(r2) iopl(0x3) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setresuid(0x0, 0x0, r4) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x4010110) 9.175001628s ago: executing program 6 (id=3041): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0x61, 0x0, 0x1}, {}, {0x6, 0x8, 0x0, 0xffffffff}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0x61, 0x0, 0x1}, {}, {0x6, 0x8, 0x0, 0xffffffff}]}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async) 8.205872602s ago: executing program 3 (id=3044): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket(0xa, 0xa, 0x3a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x204100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x15) setsockopt$inet6_int(r2, 0x29, 0xcb, 0x0, 0x0) listen(r1, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.476089792s ago: executing program 3 (id=3046): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015"], 0x5c}}, 0x20084884) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00') ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='f`=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x21d0022, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x8}}, {@uid={'uid', 0x3d, r3}}, {@uid={'uid', 0x3d, r3}}, {@gid={'gid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x8}}, {@gid={'gid', 0x3d, r4}}]}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008880) recvmmsg(r5, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x22, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(r9, 0x40f, &(0x7f0000000140)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 6.039324621s ago: executing program 6 (id=3047): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002dbbe8308d112888b59f3010203410902"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x1, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x1, 0x8a, 0xd1e87336fe664089, 0x5c, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x7, [@midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x1, 0x3, [{0x6, 0x7}, {0xee, 0x7}, {0x1, 0x4}], 0x4}], [{{0x9, 0x5, 0x4, 0x0, 0xce915d88f45a355b, 0xf8, 0x7f, 0x1, {0xf, 0x25, 0x1, 0xb, "48a24cad9ae31b489754d6"}}}]}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x7, 0x5, 0x8}, 0x31, &(0x7f0000000100)={0x5, 0xf, 0x31, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x0, 0x0, 0x7f, [0xf, 0xc0c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0xff, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1a190ba8f303807, 0x4, 0x2, 0x3, 0x5}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc08}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x7a}}, {0x43, &(0x7f0000000200)=@string={0x43, 0x3, "1c6e3f48e6ab8da575d5fb79c2371d6fbda788989a9919757eefdb1ba209edb19189ee159232f9b3ce1162052e2dadfe010750013b0322cec13d0bb96ab13b359a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1809}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "7b2988a743bd3b2718df1ef703c858a51786cf6cc0297cab410c37fc7244ffd5af64517ac261313035214815c6e549950fd19d5d66ae564ed9a6005e84ab6c3d7ed73bc844b9b0b11d3a3674f72826ec34a79d4b0ab17df1a0f55628d208a7e94cfc6337201142ec3fcb1e4db31bead50aca92c7501682"}}, {0xb6, &(0x7f00000003c0)=@string={0xb6, 0x3, "b0f8b2a71600963b4e62f3a692f209f686083b9679a23f46f3954c1d0e0c560b4e38920ca343a262dfdd5f8890d2140cbb72bfdd853c5ec5def31c20d8d15bc3ee81df58222b39acd8cd8fbae38e4f0fb469de9e1a4b877725a59adc517b725e165b6f9458a34b71b02d5cbdce683dea8b3ce95890fe78f19911be93040434d7c1e7cf5558fdeac196a49db3a075acaf64a25c63de84b1eba1f4ad67f0a0a52f0dd16f5ea61ef7c4e08cc054882f2b50391f26e8"}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "8023038694a9615a455e13cbb72e59fc47b7da1a0fe4ad97992044a25c55860ab2b90ecb26b573fd1f4f9fe76ab8d1749b1cc678e5445db016108d32ef4911d1042d8b8494a275ec6188fe7e83cb578794c4d66816a9ece819eedb57e09266f45c535e4dfb80fd396d0cb002c4ff71f94d8aa7cad2851e5db2c9e4fce4e8cf3d06b6c0"}}]}) 4.448324084s ago: executing program 3 (id=3049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_pts(0xffffffffffffffff, 0x2100) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0xb5a6ea3737cd767b, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x4048000) syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0x111482) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_pts(0xffffffffffffffff, 0x2100) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0xb5a6ea3737cd767b, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x4048000) (async) syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0x111482) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) (async) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff) (async) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) 4.219240508s ago: executing program 3 (id=3050): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r2, 0x400454d1, 0x110c230004) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8a, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="0286887f299f398f52583234ee5155e1ae7bcc3fbdb064e2b5a54287fecaedfe068fc6d447603a5ea4406685adc9194f0c84cb29ff5413db17f7c7573b717360d80ebda85493109e2c14a3cef705a942c3c1112f2cb290d7936da4c3fae61aaf1bfb5881642a0617da780e10466f5c265049c4e4beeac3eb401e7fdf81d9adba4841418843c31c09b0ca28e0567c2e613357e6ba03216c6a429aa7250ba48db5decc98f004aaaca161dcd524f13b4c8ee6818ede5423dabaf409fb2b8269b349f66e49da47a8aac3"}) 3.868415953s ago: executing program 1 (id=3052): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000001c0)) (async) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x108383) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002f000900020000000000040000000c00170004000000000098e4"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) 3.85371227s ago: executing program 1 (id=3053): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000500)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f0000000100)='(++%^{\x00']}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000500)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f0000000100)='(++%^{\x00']}) (async) 3.816425199s ago: executing program 1 (id=3054): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000040)={'some', 0x20, 0xffff, 0x20, 0x8001}, 0x2f) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xffffffffffff50a9, 0x309000) r3 = accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x100800) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000200)={0x46c5, 0x768, 0x80fc}, 0xc) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000240)=""/46) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000280)={0x37, r1}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) (async) close(r1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) read$FUSE(r4, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002440)={r6, r9, r12}, 0xc) (async) r14 = syz_open_dev$video(&(0x7f0000002480), 0x0, 0x400000) ioctl$VIDIOC_G_PARM(r14, 0xc0cc5615, &(0x7f00000024c0)={0x9, @capture={0x0, 0x0, {0x6, 0x2}, 0x8f50, 0x6}}) (async) r15 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f00000025c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x6, 0x2}, {0x9, 0x5, 0xa, 0x2, 0x40, 0xe, 0x80, 0x6b}, {0x9, 0x5, 0x7, 0x3, 0x40, 0x51, 0x6, 0x3}}}}}}]}}, 0x0) syz_usb_control_io(r15, &(0x7f0000002800)={0x2c, &(0x7f0000002600)={0x0, 0x11, 0xf2, {0xf2, 0x31, "3711eba68f143ec6ae2963055bd6d603f51b00a5f0fbfcbd0b0c8593535961eb1dcafe0324ee768837fd45cda4e4a3dd99a111768111f65e6694a2ae296e493ece6c21d1c403633c303e2d4b12166cba21cce849c7901416b5a9daf7105b53bd77a99c98dc3e64c33a201b8778e8aa94e6baf2d56b1bfbbca725158a60c90d148d250344eb925a2103a0843878efb1c5ac3e0814c12f7c04006256779c66ed554dbeee35648330a434f39376ad396fe23d51e4f3cb8c8755b28aab2ea1e75b731d457900489c590a5d4b93434fdc371dca78dc0991e114c37b76b63f387a2c0c19e60ced3fc31c2b3de885b26f4df07c"}}, &(0x7f0000002700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000002740)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000002780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x9, 0xe, "aff4ac1c", "768d7318"}}, &(0x7f00000027c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0xe8, 0x1, 0x3, 0x40, 0x7f, 0xffff}}}, &(0x7f0000002c40)={0x84, &(0x7f0000002840)={0x0, 0x15}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0xf3}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000002900)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000002940)={0x20, 0x0, 0x8, {0x80, 0x8, [0xfff]}}, &(0x7f0000002980)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000029c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002a00)={0x40, 0xb, 0x2, "4801"}, &(0x7f0000002a40)={0x40, 0xf, 0x2, 0xb90}, &(0x7f0000002a80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002ac0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002b00)={0x40, 0x19, 0x2, "b4b8"}, &(0x7f0000002b40)={0x40, 0x1a, 0x2, 0x771}, &(0x7f0000002b80)={0x40, 0x1c, 0x1, 0x8f}, &(0x7f0000002bc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000002c00)={0x40, 0x21, 0x1, 0xf}}) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000002d00)) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000002dc0)=[@textreal={0x8, &(0x7f0000002d40)="0f30260f01c4ba2000edbaf80c66b89402b78e66efbafc0c66b80400000066ef0f236d0f0766b8b90000000f23d00f21f86635100000010f23f8f0f79fec07dae966b92200004066b81b00000066ba000000000f30", 0x55}], 0x1, 0x29, &(0x7f0000002e00)=[@cr0={0x0, 0xe0cf614640f52df2}], 0x1) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000002e40)={0x0, @local, 0x4e20, 0x3, 'lc\x00', 0x19, 0x2, 0xf}, 0x2c) ioctl$F2FS_IOC_DEFRAGMENT(r14, 0xc010f508, &(0x7f0000002e80)={0x7fff, 0x200}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000002ec0)={0x2f, @multicast1, 0x4e20, 0x1, 'sh\x00', 0x1b, 0x7295a093, 0x31}, 0x2c) (async) r16 = geteuid() (async) r17 = getgid() (async) lstat(&(0x7f0000005900)='./file1\x00', &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000002f00)="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", 0x2000, &(0x7f0000005b00)={&(0x7f0000004f00)={0x50, 0x0, 0x101, {0x7, 0x2d, 0x7, 0x100, 0x785a, 0x1ff, 0x3, 0x1, 0x0, 0x0, 0x4, 0x2}}, &(0x7f0000004f80)={0x18, 0xffffffffffffffda, 0x6, {0x2}}, &(0x7f0000004fc0)={0x18, 0x0, 0x7, {0xe}}, &(0x7f0000005000)={0x18, 0x0, 0x17, {0x5}}, &(0x7f0000005040)={0x18, 0xfffffffffffffffe, 0x4, {0xffffc8c6}}, &(0x7f0000005080)={0x28, 0x770a503fccb9d832, 0x6, {{0x3, 0x3, 0x0, r13}}}, &(0x7f00000050c0)={0x60, 0x0, 0x4, {{0x80000000, 0x7, 0x8, 0x1, 0x10000, 0xab85, 0xe9a, 0x96}}}, &(0x7f0000005140)={0x18, 0xfffffffffffffffe, 0x81, {0x381}}, &(0x7f0000005180)={0x14, 0x0, 0x80, {'some'}}, &(0x7f00000051c0)={0x20, 0x0, 0x60000000, {0x0, 0xa}}, &(0x7f0000005200)={0x78, 0xb, 0x5, {0xa, 0x6, 0x0, {0x5, 0x8e8b, 0x51f8, 0x2d4, 0x4, 0x57ab, 0x7f, 0x1, 0x9, 0x0, 0x3, r11, r8, 0x401, 0xffff0001}}}, &(0x7f0000005280)={0x90, 0x0, 0x81, {0x2, 0x0, 0x8, 0xfffffffffffffffd, 0x7f, 0xe, {0x6, 0x3, 0x5, 0x6, 0x6de4ecf1, 0xefa, 0x800, 0x1, 0x2a, 0xc000, 0x1, r9, r10, 0x5, 0x7ff}}}, &(0x7f0000005340)={0x158, 0x0, 0x8, [{0x1, 0x4, 0x3, 0x22c, 'lc\x00'}, {0x5, 0x80, 0x1, 0xcf48, '\x00'}, {0x6, 0x7, 0xc, 0x800, '/dev/video#\x00'}, {0x6, 0x8, 0x3, 0x0, '\\&['}, {0x0, 0x200, 0x1, 0x0, ':'}, {0x1, 0x40, 0x4, 0xee2, '*\',+'}, {0x5, 0xffffffff, 0x3, 0x10001, '%{!'}, {0x0, 0x7ffc, 0x0, 0xfffffffc}, {0x4, 0x800, 0x10, 0x8, 'memory.pressure\x00'}, {0x5, 0xfffffffffffffffd, 0x4, 0x7, '\xea&\'('}]}, &(0x7f00000054c0)={0x330, 0x0, 0x5e0, [{{0x4, 0x1, 0x50, 0xff, 0x0, 0xa, {0x6, 0xffffffffffffffff, 0x8000000000000001, 0xffffffffffffffff, 0x7f, 0xa, 0x5, 0x1, 0x0, 0x0, 0x1, r7, r12, 0x5}}, {0x1, 0x101, 0x10, 0x300, 'memory.pressure\x00'}}, {{0x1, 0x1, 0x100000001, 0x1, 0x81, 0x40, {0x3, 0x9395, 0x4, 0x5, 0x400, 0x7, 0xf, 0x80000001, 0x4, 0x1000, 0x31f9c334, r7, r8, 0x0, 0x173df4bf}}, {0x5, 0x3, 0x0, 0x3}}, {{0x3, 0x2, 0x3, 0x1, 0x5, 0x1, {0x6, 0x1, 0x5, 0x8, 0x6, 0x0, 0x3d9, 0x0, 0xec, 0x2000, 0x6, r16, r10, 0x654a04d0, 0x3}}, {0x0, 0xa0b, 0x2, 0x8, '($'}}, {{0x2, 0x2, 0xa, 0x4, 0xe14b, 0x1, {0x6, 0xffffffffffffffff, 0x0, 0x400, 0x0, 0x1ff, 0x7, 0x3, 0x200, 0x7000, 0x1, r11, r10, 0xfffffffe, 0x3}}, {0x0, 0x3ff, 0x3, 0x7ff, 'sh\x00'}}, {{0x3, 0x2, 0x8, 0x0, 0x3, 0x80000000, {0x0, 0x0, 0xfff, 0x44, 0x5, 0x6, 0x0, 0xfffff7d2, 0x9, 0x4107bef768989801, 0xc, r9, r8, 0x3, 0x59}}, {0x6, 0x6, 0x3, 0x0, 'lc\x00'}}]}, &(0x7f0000005800)={0xa0, 0x0, 0x400, {{0x3, 0x1, 0x980, 0x3, 0x8, 0x0, {0x0, 0xfffffffffffffbff, 0x2, 0x3, 0x6, 0x9, 0xf, 0x1, 0x10000, 0x8000, 0x1ff, 0xffffffffffffffff, r17, 0x2fcb, 0x6}}, {0x0, 0xe}}}, &(0x7f00000058c0)={0x20, 0x0, 0xa0, {0x5, 0x4, 0x6, 0x5}}, &(0x7f00000059c0)={0x130, 0x0, 0x200, {0x10000, 0x6, 0x0, '\x00', {0x400, 0x0, 0x7, 0xffffffff, r18, r10, 0x6000, '\x00', 0x795f38d4, 0x9, 0x9, 0x8, {0x9, 0xfffffc00}, {0x2, 0x4}, {0xa570, 0x1}, {0x8, 0xe}, 0x0, 0x6, 0x49e, 0x8}}}}) 3.732338455s ago: executing program 3 (id=3055): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000005cc0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="00000000007800f4f0d603cebb0dd2507402dc9f04026698d5e978365b07d921456d60e0c003aa6eb5fd7f0ab0d026bf0ac9d313e9d57df879633c38b534e8326b6e298d05de3f8eec5b97c0ca3a6d4d97885c62a4bb74454b3770aa63c153c886bf469cf7e141003ca41eb7c3e82fdd1cb060905a1e0a7ec34c1b6770629e709f975ffa32d0ece9616dd07f46d144c2cf454768b2fd67d1772357eda548b68e1273588bd265000000000000", 0x5}], 0x1, &(0x7f0000000540)=[@prinfo={0xfffffffffffffe8a, 0x84, 0x5, {0x20, 0xfff}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x0, 0x20a, 0x7, 0x4, 0xe9b, 0x0, 0x1}}], 0x48, 0x4008004}], 0x1, 0x24000840) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x505135bd]}, 0x0, 0x8) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) 3.256340786s ago: executing program 1 (id=3056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="90000000000801020000000000000000000000065400048008000140000000030800054080000001080007400000fcf00800014000000003080007400000000008000640000000090800034000000005080001400000000108000540fffffffb0800064000000e360600024088f800000900010073797a3100000000050003000600"], 0x90}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 3.167097475s ago: executing program 1 (id=3057): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000019c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x40014, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000, 0x2000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) 3.108171539s ago: executing program 3 (id=3058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdfdf250114000008000610", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x5, 0x6}}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f00000001c0)=@ethtool_test={0x1a, 0x401, 0x3, 0x7, [0x6ad, 0x4, 0x400000000000, 0x0, 0x0, 0xfffffffffffffff1, 0xffffffff00000001]}}) 2.288674919s ago: executing program 6 (id=3059): prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.012029219s ago: executing program 6 (id=3060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r2, 0x0, &(0x7f00000032c0)) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e770602210300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1a5e00}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a31000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000ab641d15555fe6444970a653d5231a3e258deec619c5878d69c44fd7404829d4d79669dd70626978e27186819b63f63e46bfad11a1db5bbd762c4be855656c5e6de50e7c7347c7f09d656956b347c669ebd332f5d3ee43361e287e301d8539b6d175ee5ae69f3c3bc93dac529dca2247b27033e41bda414e5d76a6ba82ce20452032b8dd9b87cec4c97b98d"], 0xa4}}, 0x4) 1.812065821s ago: executing program 1 (id=3061): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)={'trans=unix,', {[{@msize}]}}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x40, 0x6, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xb, @none, 0x4, 0x1}, 0x3) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000040)=0x3, 0x4) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000400000000bbf) read$char_usb(r2, 0x0, 0x0) 587.529647ms ago: executing program 6 (id=3062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = syz_socket_connect_nvme_tcp() r4 = socket(0x1d, 0x2, 0x6) r5 = syz_open_dev$evdev(&(0x7f0000002b00), 0x2, 0x40000) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000002b40)=""/172) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000000)={0xa, 0x1010000, 0x0, {0x42, 0x1ff, 0x0, 0x2006}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x1, {0x2, 0x0, 0x4}, 0xfd}, 0x18) recvfrom$inet_nvme(r3, &(0x7f0000000300)=""/20, 0x14, 0x12041, &(0x7f0000000380)=@xdp={0x2c, 0x4, r8, 0x8}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040054}, 0x810) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="781100001100010000000000020000001d0000006411e3800800228004002b80080035"], 0x1178}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r11, 0x80104592, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r10, @ANYBLOB="01060000b5100000000009000000240004801300010062726f6164636173742d6c696e6b00400c0007800800050002"], 0x38}}, 0xc000) 0s ago: executing program 6 (id=3063): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0xdd48, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, {0xa, 0x4e23, 0x6462, @empty, 0x5e}, 0x0, {[0x3, 0x9, 0x3a, 0x2, 0x0, 0x8000c, 0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x6}, 0x10) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) kernel console output (not intermixed with test programs): 71] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 620.658392][ T32] usb 3-1: USB disconnect, device number 71 [ 621.126520][ T5730] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 621.289638][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 621.292443][ T5730] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 621.297145][ T5730] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 621.297173][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.297192][ T5730] usb 4-1: Product: syz [ 621.297205][ T5730] usb 4-1: Manufacturer: syz [ 621.297219][ T5730] usb 4-1: SerialNumber: syz [ 621.308339][ T5730] usb 4-1: config 0 descriptor?? [ 621.319242][ T5730] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 621.942027][ T5730] gspca_zc3xx: reg_w_i err -71 [ 622.031755][ T32] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 622.096468][T12671] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 622.176477][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 622.184960][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 622.195269][ T32] usb 2-1: config 117 has an invalid interface number: 163 but max is 0 [ 622.195312][ T32] usb 2-1: config 117 has no interface number 0 [ 622.195348][ T32] usb 2-1: config 117 interface 163 has no altsetting 0 [ 622.228854][ T32] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 622.228888][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.228910][ T32] usb 2-1: Product: syz [ 622.228926][ T32] usb 2-1: Manufacturer: syz [ 622.228941][ T32] usb 2-1: SerialNumber: syz [ 622.246589][T12671] usb 3-1: Using ep0 maxpacket: 8 [ 622.277614][T12671] usb 3-1: unable to get BOS descriptor or descriptor too short [ 622.280657][T12671] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 218, changing to 11 [ 622.280693][T12671] usb 3-1: config 1 interface 0 has no altsetting 0 [ 622.308224][T12671] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 622.308254][T12671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.308273][T12671] usb 3-1: Product: syz [ 622.308286][T12671] usb 3-1: Manufacturer: syz [ 622.308299][T12671] usb 3-1: SerialNumber: syz [ 622.536417][ T5730] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 622.536612][ T5730] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 622.569849][ T5730] usb 4-1: USB disconnect, device number 97 [ 622.608679][ T32] f81534a_ctrl 2-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 622.665911][T15070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.682943][T15070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.686196][ T32] usb 2-1: USB disconnect, device number 54 [ 622.822781][T12671] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input32 [ 622.916577][ T4970] bcm5974 3-1:1.0: could not read from device [ 622.981035][ T4970] bcm5974 3-1:1.0: could not read from device [ 622.998766][T12671] usb 3-1: USB disconnect, device number 72 [ 623.136467][ T5730] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 623.286712][ T5730] usb 4-1: device descriptor read/64, error -71 [ 623.536498][ T5730] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 623.666495][ T5730] usb 4-1: device descriptor read/64, error -71 [ 623.783757][ T5730] usb usb4-port1: attempt power cycle [ 624.046394][T12671] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 624.136546][ T5730] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 624.157077][ T5730] usb 4-1: device descriptor read/8, error -71 [ 624.176339][T12671] usb 3-1: device descriptor read/64, error -71 [ 624.308386][ T32] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 624.396407][ T5730] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 624.416309][T12671] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 624.417229][ T5730] usb 4-1: device descriptor read/8, error -71 [ 624.472492][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 624.479006][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 624.487986][ T32] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 624.488017][ T32] usb 2-1: config 0 has no interface number 0 [ 624.488066][ T32] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 624.488095][ T32] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 624.488120][ T32] usb 2-1: config 0 interface 88 has no altsetting 0 [ 624.527090][ T5730] usb usb4-port1: unable to enumerate USB device [ 624.539171][ T32] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 624.539202][ T32] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 624.539214][ T32] usb 2-1: Product: syz [ 624.539222][ T32] usb 2-1: Manufacturer: syz [ 624.539231][ T32] usb 2-1: SerialNumber: syz [ 624.544880][ T32] usb 2-1: config 0 descriptor?? [ 624.550608][T12671] usb 3-1: device descriptor read/64, error -71 [ 624.560594][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.658152][T12671] usb usb3-port1: attempt power cycle [ 624.996287][T12671] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 625.017305][T12671] usb 3-1: device descriptor read/8, error -71 [ 625.256309][T12671] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 625.277299][T12671] usb 3-1: device descriptor read/8, error -71 [ 625.389023][T12671] usb usb3-port1: unable to enumerate USB device [ 626.286264][T15119] netlink: 'syz.6.2623': attribute type 12 has an invalid length. [ 627.570053][ T32] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input33 [ 627.624857][ T37] audit: type=1800 audit(2000000024.421:648): pid=15126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2626" name="file0" dev="tmpfs" ino=2576 res=0 errno=0 [ 627.773924][ T32] usb 2-1: USB disconnect, device number 55 [ 628.277717][T15146] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2632'. [ 628.426235][ T32] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 628.576104][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 628.583635][ T32] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 628.583667][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.583688][ T32] usb 2-1: config 0 has no interface number 0 [ 628.583738][ T32] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.626238][ T32] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 628.626291][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.626322][ T32] usb 2-1: Product: syz [ 628.626337][ T32] usb 2-1: Manufacturer: syz [ 628.626353][ T32] usb 2-1: SerialNumber: syz [ 628.669937][ T32] usb 2-1: config 0 descriptor?? [ 628.689983][ T32] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 628.690087][ T32] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 628.786255][ T51] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 628.884758][ T32] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 628.896110][ T32] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 628.957541][ T51] usb 4-1: device descriptor read/64, error -71 [ 628.957670][ T32] usb 2-1: USB disconnect, device number 56 [ 629.101270][T15161] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2638'. [ 629.210522][ T51] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 629.377354][ T51] usb 4-1: device descriptor read/64, error -71 [ 629.521208][ T51] usb usb4-port1: attempt power cycle [ 629.877977][ T51] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 629.897815][ T51] usb 4-1: device descriptor read/8, error -71 [ 630.046020][ T5716] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 630.146184][ T51] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 630.166560][ T51] usb 4-1: device descriptor read/8, error -71 [ 630.196123][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 630.203977][ T5716] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 237, changing to 7 [ 630.219795][ T5716] usb 3-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice= 0.40 [ 630.219826][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.219838][ T5716] usb 3-1: Product: syz [ 630.219847][ T5716] usb 3-1: Manufacturer: syz [ 630.219856][ T5716] usb 3-1: SerialNumber: syz [ 630.265139][ T5716] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.265487][ T5716] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 630.276578][ T51] usb usb4-port1: unable to enumerate USB device [ 630.294138][ T5716] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.294491][ T5716] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 630.317886][ T5716] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.346099][ T5715] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 630.397699][ T5716] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 630.441658][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.450268][ T5716] usb 3-1: USB disconnect, device number 77 [ 630.506003][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 630.508459][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.508487][ T5715] usb 2-1: config 0 has no interfaces? [ 630.511615][ T5715] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 630.511646][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.511728][ T5715] usb 2-1: Product: syz [ 630.511744][ T5715] usb 2-1: Manufacturer: syz [ 630.511759][ T5715] usb 2-1: SerialNumber: syz [ 630.519866][ T5715] usb 2-1: config 0 descriptor?? [ 630.766418][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 630.817383][T15189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.817781][T15189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.843884][ T5729] usb 2-1: USB disconnect, device number 57 [ 631.430563][T15202] kAFS: unparsable volume name [ 631.531941][T15206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.598730][ T4934] Bluetooth: hci0: command 0x0406 tx timeout [ 631.727699][ T4934] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 632.045883][ T5729] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 632.206163][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 632.209001][ T5729] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 632.210128][ T5729] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.210154][ T5729] usb 2-1: config 0 has no interface number 0 [ 632.211314][ T5729] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.211337][ T5729] usb 2-1: config 0 has no interface number 0 [ 632.212440][ T5729] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.212463][ T5729] usb 2-1: config 0 has no interface number 0 [ 632.213623][ T5729] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.213645][ T5729] usb 2-1: config 0 has no interface number 0 [ 632.215236][ T5729] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.215259][ T5729] usb 2-1: config 0 has no interface number 0 [ 632.218265][ T5729] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.218289][ T5729] usb 2-1: config 0 has no interface number 0 [ 632.286785][ T5729] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.286812][ T5729] usb 2-1: config 0 has no interface number 0 [ 632.288551][ T5729] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.288573][ T5729] usb 2-1: config 0 has no interface number 0 [ 632.291848][ T5729] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 632.291873][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.291892][ T5729] usb 2-1: Product: syz [ 632.291905][ T5729] usb 2-1: Manufacturer: syz [ 632.291919][ T5729] usb 2-1: SerialNumber: syz [ 632.303038][ T5729] usb 2-1: config 0 descriptor?? [ 632.408592][ T5729] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 632.586097][ T5729] etas_es58x 2-1:0.2: could not retrieve the product info string [ 632.771411][T15226] syz.3.2656: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 632.771837][T15226] CPU: 0 UID: 0 PID: 15226 Comm: syz.3.2656 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 632.771866][T15226] Tainted: [L]=SOFTLOCKUP [ 632.771874][T15226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 632.771885][T15226] Call Trace: [ 632.771895][T15226] [ 632.771904][T15226] dump_stack_lvl+0xe8/0x150 [ 632.771936][T15226] warn_alloc+0x24c/0x270 [ 632.771961][T15226] ? stack_trace_save+0xa9/0x100 [ 632.771987][T15226] ? __pfx_warn_alloc+0x10/0x10 [ 632.772023][T15226] ? kasan_save_track+0x4f/0x80 [ 632.772042][T15226] ? kasan_save_track+0x3e/0x80 [ 632.772061][T15226] ? __kasan_kmalloc+0x93/0xb0 [ 632.772082][T15226] ? xskq_create+0x56/0x170 [ 632.772105][T15226] ? xsk_init_queue+0x8a/0xe0 [ 632.772127][T15226] ? xsk_setsockopt+0x54c/0x990 [ 632.772148][T15226] ? do_sock_setsockopt+0x17c/0x1b0 [ 632.772178][T15226] __vmalloc_node_range_noprof+0x132/0x1750 [ 632.772236][T15226] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.772268][T15226] ? __kasan_kmalloc+0x93/0xb0 [ 632.772306][T15226] vmalloc_user_noprof+0xad/0xe0 [ 632.772330][T15226] ? xskq_create+0xbf/0x170 [ 632.772356][T15226] xskq_create+0xbf/0x170 [ 632.772385][T15226] xsk_init_queue+0x8a/0xe0 [ 632.772411][T15226] xsk_setsockopt+0x54c/0x990 [ 632.772439][T15226] ? __pfx_xsk_setsockopt+0x10/0x10 [ 632.772464][T15226] ? __pfx_aa_sk_perm+0x10/0x10 [ 632.772507][T15226] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 632.772533][T15226] ? __pfx_xsk_setsockopt+0x10/0x10 [ 632.772559][T15226] do_sock_setsockopt+0x17c/0x1b0 [ 632.772590][T15226] __x64_sys_setsockopt+0x143/0x1b0 [ 632.772622][T15226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.772645][T15226] do_syscall_64+0x15f/0x560 [ 632.772672][T15226] ? trace_irq_disable+0x3b/0x140 [ 632.772697][T15226] ? clear_bhb_loop+0x40/0x90 [ 632.772723][T15226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.772744][T15226] RIP: 0033:0x7f90ccc9ce59 [ 632.772766][T15226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.772784][T15226] RSP: 002b:00007f90caeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 632.772806][T15226] RAX: ffffffffffffffda RBX: 00007f90ccf15fa0 RCX: 00007f90ccc9ce59 [ 632.772822][T15226] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 632.772836][T15226] RBP: 00007f90ccd32d6f R08: 0000000000000004 R09: 0000000000000000 [ 632.772849][T15226] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.772863][T15226] R13: 00007f90ccf16038 R14: 00007f90ccf15fa0 R15: 00007ffd6c5f8748 [ 632.772898][T15226] [ 632.774562][T15226] Mem-Info: [ 632.774573][T15226] active_anon:25667 inactive_anon:0 isolated_anon:0 [ 632.774573][T15226] active_file:16 inactive_file:56845 isolated_file:0 [ 632.774573][T15226] unevictable:768 dirty:59 writeback:0 [ 632.774573][T15226] slab_reclaimable:11795 slab_unreclaimable:103652 [ 632.774573][T15226] mapped:32391 shmem:19421 pagetables:1793 [ 632.774573][T15226] sec_pagetables:0 bounce:0 [ 632.774573][T15226] kernel_misc_reclaimable:0 [ 632.774573][T15226] free:1281345 free_pcp:3503 free_cma:0 [ 632.774621][T15226] Node 0 active_anon:102668kB inactive_anon:0kB active_file:64kB inactive_file:227120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129504kB dirty:200kB writeback:0kB shmem:76148kB kernel_stack:14068kB pagetables:7044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 632.774667][T15226] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:36kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 632.774711][T15226] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.774765][T15226] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 632.774796][T15226] Node 0 DMA32 free:1180548kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102668kB inactive_anon:0kB active_file:64kB inactive_file:227120kB unevictable:1536kB writepending:200kB zspages:0kB present:3129332kB managed:2552244kB mlocked:0kB bounce:0kB free_pcp:14004kB local_pcp:4488kB free_cma:0kB [ 632.774853][T15226] lowmem_reserve[]: 0 0 0 0 0 [ 632.774884][T15226] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:868kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 632.774937][T15226] lowmem_reserve[]: 0 0 0 0 0 [ 632.774964][T15226] Node 1 Normal free:3929472kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB writepending:36kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.775015][T15226] lowmem_reserve[]: 0 0 0 0 0 [ 632.775042][T15226] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 632.775139][T15226] Node 0 DMA32: 49*4kB (UM) 70*8kB (UME) 65*16kB (UM) 290*32kB (UME) 92*64kB (UME) 94*128kB (UME) 72*256kB (ME) 23*512kB (M) 17*1024kB (UM) 13*2048kB (UM) 263*4096kB (UM) = 1180484kB [ 632.775267][T15226] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 632.775358][T15226] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 8*16kB (UM) 9*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3929472kB [ 632.775481][T15226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.775497][T15226] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.775511][T15226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.775525][T15226] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.775539][T15226] 76278 total pagecache pages [ 632.775548][T15226] 0 pages in swap cache [ 632.775554][T15226] Free swap = 124996kB [ 632.775561][T15226] Total swap = 124996kB [ 632.775568][T15226] 2097051 pages RAM [ 632.775575][T15226] 0 pages HighMem/MovableOnly [ 632.775581][T15226] 427159 pages reserved [ 632.775587][T15226] 0 pages cma reserved [ 632.912941][T15229] tmpfs: Unknown parameter 'pcr' [ 633.005156][T15231] QAT: Device 4 not found [ 633.423625][ T51] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 633.586668][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 633.597337][ T51] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.614749][ T51] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 633.614784][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.614806][ T51] usb 4-1: Product: 밝᎖빏懇췘욦䌲ꜱ鈀㠤쾗鄺룜ꘗ걨⎈롤继屝ᷓ晴⦵輾營ᖞ㓖佋⊢磽䣉设耥᲎违홥뾳ᬅ壔롮뇹淫㨗鱽瀡翋螜撢风遠氒茟唎爻⣤瀄恋瀺ꊅ慐蚟ꐚ碲ᤂ䳂蜙䴧ĩﮃ〷姝Ꟃ貥០ꎗƅ퐌ꀢ鏈묺֫衚ㄴꛕ [ 633.614836][ T51] usb 4-1: Manufacturer: 甬縟ꁫ磒㘿搶媀ꪎ閔ꉅ཈寊㶿꬟咄᫹쮄ᄕ뿳젢тॏ频˖ᘷ뙺傄㮥뱅ᛀ녺溋灹屼元᫔䛏㡡艩턂︀ꜽ쾺ᜊ㨝㪍禣輺⻆ᴩ趰⻰㒅偑흼욛졾摹Ҏ⭽렶化撇脗逈土ᾲ쳀𢡊䗤荱쯒侇ᜩﯙ⇁뤞噻篣㬫趆⿥ꙋꞵ [ 633.614865][ T51] usb 4-1: SerialNumber: 標鱆偓ญ돵䠵蘒擖鎇裡ච똡ࣔ討롓㩅趺⟿솦媄揞돂螡僵횂₭艠歮柮⾌♕頳䃨淪쎱݊Ⴗᬘĵ㵳鳸ꎃ瓉촮걋ꍿꭎꗌ絠痷च굗╚ᣝ죓﯊જ騷姐界逄۞Ḥ㕡䍀渆튪䘞ߖ৴捙꜒ꄤ閏 [ 634.090136][ T51] usbhid 4-1:1.0: can't add hid device: -71 [ 634.090266][ T51] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 634.120434][ T51] usb 4-1: USB disconnect, device number 106 [ 634.347236][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 634.347483][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 634.347530][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 634.347886][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 634.347933][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 634.347950][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 634.348201][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 634.348241][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 634.348258][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 634.348502][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 634.348553][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 634.348569][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 634.348815][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 634.348857][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 634.348873][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 634.349116][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 634.349158][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 634.349175][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 634.349417][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 634.349459][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 634.349476][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 634.349744][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 634.349779][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 634.349795][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 634.560026][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 634.602384][ T51] usb 2-1: USB disconnect, device number 58 [ 634.614084][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 634.614179][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 634.614261][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 634.620130][ T51] etas_es58x 2-1:0.2: Disconnecting syz syz [ 634.666628][ T5280] etas_es58x 2-1:0.2 can0: es58x_submit_urb: USB send urb failure: -ENODEV [ 634.666708][ T5280] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -ENODEV [ 634.803172][T15251] netlink: 'syz.3.2661': attribute type 4 has an invalid length. [ 634.804985][T15252] netlink: 'syz.3.2661': attribute type 4 has an invalid length. [ 635.043660][T15259] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 635.586067][ T5716] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 635.654511][T15279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2668'. [ 635.747936][ T5716] usb 2-1: Invalid ep0 maxpacket: 64 [ 635.895712][ T5716] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 636.045663][ T5716] usb 2-1: Invalid ep0 maxpacket: 64 [ 636.046399][ T5716] usb usb2-port1: attempt power cycle [ 636.161337][T12671] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 636.308043][T12671] usb 4-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 636.308106][T12671] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 42402, setting to 1023 [ 636.308135][T12671] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 636.311297][T12671] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 636.311327][T12671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 636.311348][T12671] usb 4-1: Product: syz [ 636.311362][T12671] usb 4-1: Manufacturer: syz [ 636.311377][T12671] usb 4-1: SerialNumber: syz [ 636.389262][T12671] usb 4-1: config 0 descriptor?? [ 636.405734][ T5716] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 636.411692][T12671] usb 4-1: no audio or video endpoints found [ 636.433159][ T5716] usb 2-1: Invalid ep0 maxpacket: 64 [ 636.555652][ T5716] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 636.576447][ T5716] usb 2-1: Invalid ep0 maxpacket: 64 [ 636.576842][ T5716] usb usb2-port1: unable to enumerate USB device [ 636.604121][ T5716] usb 4-1: USB disconnect, device number 107 [ 637.032232][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'. [ 637.895542][ T8413] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 638.047460][ T8413] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.047563][ T8413] usb 3-1: config 0 has no interface number 0 [ 638.047612][ T8413] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.047638][ T8413] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.047670][ T8413] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 638.047684][ T8413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.050853][ T8413] usb 3-1: config 0 descriptor?? [ 638.476958][T15317] netlink: 'syz.1.2679': attribute type 10 has an invalid length. [ 638.495804][ T8413] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0 [ 638.495846][ T8413] prodikeys 0003:041E:2801.0024: item fetching failed at offset 6/7 [ 638.499906][ T8413] prodikeys 0003:041E:2801.0024: hid parse failed [ 638.500020][ T8413] prodikeys 0003:041E:2801.0024: probe with driver prodikeys failed with error -22 [ 638.537367][ T5716] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 638.665957][ T8413] usb 3-1: USB disconnect, device number 78 [ 638.697673][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 638.712172][ T5716] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 638.712201][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.712220][ T5716] usb 4-1: config 0 has no interface number 0 [ 638.764631][ T5716] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 638.764665][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.764685][ T5716] usb 4-1: Product: syz [ 638.764700][ T5716] usb 4-1: Manufacturer: syz [ 638.764713][ T5716] usb 4-1: SerialNumber: syz [ 638.801839][ T5716] usb 4-1: config 0 descriptor?? [ 638.812147][ T5716] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 638.812170][ T5716] uvcvideo 4-1:0.105: No valid video chain found. [ 639.020724][ T8413] usb 4-1: USB disconnect, device number 108 [ 639.315552][ T51] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 639.465489][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 639.467353][ T51] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 639.467380][ T51] usb 2-1: config 0 has no interface number 0 [ 639.467404][ T51] usb 2-1: config 0 interface 119 has no altsetting 0 [ 639.469893][ T51] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=26.36 [ 639.469921][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.469933][ T51] usb 2-1: Product: syz [ 639.469942][ T51] usb 2-1: Manufacturer: syz [ 639.469951][ T51] usb 2-1: SerialNumber: syz [ 639.473965][ T51] usb 2-1: config 0 descriptor?? [ 639.585474][ T5716] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 639.682609][T15328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.683352][T15328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.708971][T15328] netlink: 'syz.1.2683': attribute type 16 has an invalid length. [ 639.708994][T15328] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2683'. [ 639.730611][ T51] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 639.731103][ T51] gspca_sn9c2028: read1 error -71 [ 639.731490][ T51] gspca_sn9c2028: read1 error -71 [ 639.731874][ T51] gspca_sn9c2028: read1 error -71 [ 639.731957][ T51] sn9c2028 2-1:0.119: probe with driver sn9c2028 failed with error -71 [ 639.737484][ T5716] usb 3-1: device descriptor read/64, error -71 [ 639.742603][ T51] usb 2-1: USB disconnect, device number 63 [ 639.911274][ T5715] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 639.975481][ T5716] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 640.057267][ T5715] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 640.057305][ T5715] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 640.057324][ T5715] usb 4-1: config 0 interface 0 has no altsetting 0 [ 640.057352][ T5715] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 640.057366][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.060432][ T5715] usb 4-1: config 0 descriptor?? [ 640.120596][ T5716] usb 3-1: device descriptor read/64, error -71 [ 640.225924][ T5716] usb usb3-port1: attempt power cycle [ 640.327030][ T5715] usbhid 4-1:0.0: can't add hid device: -71 [ 640.327185][ T5715] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 640.338275][ T5715] usb 4-1: USB disconnect, device number 109 [ 640.535421][ T32] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 640.565443][ T5716] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 640.585963][ T5716] usb 3-1: device descriptor read/8, error -71 [ 640.687801][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 640.693680][ T32] usb 2-1: config 8 has an invalid interface number: 59 but max is 3 [ 640.693711][ T32] usb 2-1: config 8 has an invalid interface number: 123 but max is 3 [ 640.693733][ T32] usb 2-1: config 8 has an invalid interface number: 114 but max is 3 [ 640.693754][ T32] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 640.693774][ T32] usb 2-1: config 8 has an invalid interface number: 66 but max is 3 [ 640.693792][ T32] usb 2-1: config 8 has no interface number 0 [ 640.693802][ T32] usb 2-1: config 8 has no interface number 1 [ 640.693811][ T32] usb 2-1: config 8 has no interface number 2 [ 640.693820][ T32] usb 2-1: config 8 has no interface number 3 [ 640.693868][ T32] usb 2-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 640.693883][ T32] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid maxpacket 64, setting to 0 [ 640.693898][ T32] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 640.693912][ T32] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x88 has invalid maxpacket 1024, setting to 8 [ 640.693927][ T32] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 8 [ 640.693941][ T32] usb 2-1: config 8 interface 59 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 640.693953][ T32] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 640.693967][ T32] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 640.693981][ T32] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x1 has invalid maxpacket 32, setting to 8 [ 640.693995][ T32] usb 2-1: config 8 interface 59 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 640.694007][ T32] usb 2-1: config 8 interface 59 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 640.694027][ T32] usb 2-1: config 8 interface 123 altsetting 36 has a duplicate endpoint with address 0x7, skipping [ 640.694040][ T32] usb 2-1: config 8 interface 123 altsetting 36 has a duplicate endpoint with address 0x3, skipping [ 640.694052][ T32] usb 2-1: config 8 interface 123 altsetting 36 endpoint 0x6 has invalid maxpacket 16, setting to 8 [ 640.694066][ T32] usb 2-1: config 8 interface 123 altsetting 36 has a duplicate endpoint with address 0x6, skipping [ 640.694079][ T32] usb 2-1: config 8 interface 123 altsetting 36 endpoint 0xD has invalid maxpacket 6468, setting to 8 [ 640.694094][ T32] usb 2-1: config 8 interface 123 altsetting 36 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 640.694108][ T32] usb 2-1: config 8 interface 123 altsetting 36 has a duplicate endpoint with address 0xA, skipping [ 640.694120][ T32] usb 2-1: config 8 interface 123 altsetting 36 has a duplicate endpoint with address 0xA, skipping [ 640.694132][ T32] usb 2-1: config 8 interface 123 altsetting 36 has an invalid descriptor for endpoint zero, skipping [ 640.694144][ T32] usb 2-1: config 8 interface 123 altsetting 36 has a duplicate endpoint with address 0x6, skipping [ 640.694156][ T32] usb 2-1: config 8 interface 123 altsetting 36 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 640.694170][ T32] usb 2-1: config 8 interface 123 altsetting 36 endpoint 0xB has invalid maxpacket 1023, setting to 0 [ 640.694192][ T32] usb 2-1: config 8 interface 114 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 640.694209][ T32] usb 2-1: config 8 interface 114 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 640.694221][ T32] usb 2-1: config 8 interface 114 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 640.694234][ T32] usb 2-1: config 8 interface 114 altsetting 127 endpoint 0xF has invalid maxpacket 32, setting to 8 [ 640.694247][ T32] usb 2-1: config 8 interface 114 altsetting 127 has a duplicate endpoint with address 0x8, skipping [ 640.694260][ T32] usb 2-1: config 8 interface 114 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 640.694281][ T32] usb 2-1: config 8 interface 66 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 640.694293][ T32] usb 2-1: config 8 interface 59 has no altsetting 0 [ 640.694306][ T32] usb 2-1: config 8 interface 123 has no altsetting 0 [ 640.694316][ T32] usb 2-1: config 8 interface 114 has no altsetting 0 [ 640.694326][ T32] usb 2-1: config 8 interface 66 has no altsetting 0 [ 640.961064][ T32] usb 2-1: string descriptor 0 read error: -22 [ 640.961229][ T32] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 640.961251][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.028496][T15339] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 641.040853][ T32] ttusbir 2-1:8.59: cannot find expected altsetting [ 641.122599][ T32] ttusbir 2-1:8.123: cannot find expected altsetting [ 641.130924][ T5716] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 641.191162][ T5716] usb 3-1: device descriptor read/8, error -71 [ 641.203574][ T32] ttusbir 2-1:8.114: cannot find expected altsetting [ 641.213015][ T32] ttusbir 2-1:8.66: cannot find expected altsetting [ 641.241050][ T32] usb 2-1: USB disconnect, device number 64 [ 641.295704][ T5716] usb usb3-port1: unable to enumerate USB device [ 641.529812][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2691'. [ 641.823858][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 641.824955][T15363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2696'. [ 642.081371][ T37] audit: type=1800 audit(2000000038.862:649): pid=15364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2695" name="/" dev="fuse" ino=4 res=0 errno=0 [ 642.521233][T15375] No control pipe specified [ 642.695349][ T32] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 642.847347][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.847378][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.847391][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 642.847418][ T32] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 642.847432][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.852025][ T32] usb 3-1: config 0 descriptor?? [ 642.907352][ T51] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 642.971432][T15382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 642.971454][T15382] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 642.971493][T15382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 643.055379][ T51] usb 4-1: device descriptor read/64, error -71 [ 643.066784][ T32] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 643.068775][ T5716] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 643.109571][T12367] Bluetooth: hci0: command 0x0406 tx timeout [ 643.224495][ T32] plantronics 0003:047F:FFFF.0025: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 643.248409][ T32] usb 3-1: USB disconnect, device number 83 [ 643.248885][ T5716] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 643.248914][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.248935][ T5716] usb 2-1: Product: syz [ 643.248950][ T5716] usb 2-1: Manufacturer: syz [ 643.248965][ T5716] usb 2-1: SerialNumber: syz [ 643.317096][ T5716] usb 2-1: config 0 descriptor?? [ 643.349391][ T51] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 643.371597][ T5716] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 643.420647][T15387] fido_id[15387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 643.475430][ T51] usb 4-1: device descriptor read/64, error -71 [ 643.535905][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.536654][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.587804][ T51] usb usb4-port1: attempt power cycle [ 643.925190][ T51] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 643.947378][ T51] usb 4-1: device descriptor read/8, error -71 [ 644.185482][ T51] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 644.208328][ T51] usb 4-1: device descriptor read/8, error -71 [ 644.318990][ T51] usb usb4-port1: unable to enumerate USB device [ 644.353226][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.353879][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.763817][ T5716] gspca_stk1135: reg_w 0xf err -71 [ 644.770286][ T5716] gspca_stk1135: serial bus timeout: status=0x00 [ 644.770305][ T5716] gspca_stk1135: Sensor write failed [ 644.770335][ T5716] gspca_stk1135: serial bus timeout: status=0x00 [ 644.770346][ T5716] gspca_stk1135: Sensor write failed [ 644.770379][ T5716] gspca_stk1135: serial bus timeout: status=0x00 [ 644.770389][ T5716] gspca_stk1135: Sensor read failed [ 644.770414][ T5716] gspca_stk1135: serial bus timeout: status=0x00 [ 644.770425][ T5716] gspca_stk1135: Sensor read failed [ 644.770432][ T5716] gspca_stk1135: Detected sensor type unknown (0x0) [ 644.770464][ T5716] gspca_stk1135: serial bus timeout: status=0x00 [ 644.770474][ T5716] gspca_stk1135: Sensor read failed [ 644.770507][ T5716] gspca_stk1135: serial bus timeout: status=0x00 [ 644.770516][ T5716] gspca_stk1135: Sensor read failed [ 644.770555][ T5716] gspca_stk1135: serial bus timeout: status=0x00 [ 644.770566][ T5716] gspca_stk1135: Sensor write failed [ 644.770597][ T5716] gspca_stk1135: serial bus timeout: status=0x00 [ 644.770607][ T5716] gspca_stk1135: Sensor write failed [ 644.770730][ T5716] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 644.895958][ T5716] usb 2-1: USB disconnect, device number 65 [ 645.473844][T15411] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 645.755714][ T32] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 645.885233][ T51] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 645.923115][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.923144][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 645.923199][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.933968][ T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.933999][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.934018][ T32] usb 2-1: Product: syz [ 645.934032][ T32] usb 2-1: Manufacturer: syz [ 645.934045][ T32] usb 2-1: SerialNumber: syz [ 646.007072][ T32] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 646.007130][ T32] cdc_ncm 2-1:1.0: bind() failure [ 646.070465][ T51] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 646.070497][ T51] usb 3-1: config 0 has no interface number 0 [ 646.070551][ T51] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.070577][ T51] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 646.070605][ T51] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 646.070632][ T51] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 646.070659][ T51] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 646.070685][ T51] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.070728][ T51] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 646.070752][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.090823][ T51] usb 3-1: config 0 descriptor?? [ 646.129128][T15416] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 646.129280][T15416] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 646.191894][ T51] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 646.302373][ T5716] usb 2-1: USB disconnect, device number 66 [ 646.388198][ T5729] usb 3-1: USB disconnect, device number 84 [ 646.421118][ T5729] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 646.565213][ T51] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 646.726583][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 646.755975][ T51] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 646.755999][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.756011][ T51] usb 4-1: Product: syz [ 646.756020][ T51] usb 4-1: Manufacturer: syz [ 646.756028][ T51] usb 4-1: SerialNumber: syz [ 646.772837][ T51] usb 4-1: config 0 descriptor?? [ 646.810465][ T51] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 647.074496][ T5716] usb 4-1: USB disconnect, device number 114 [ 647.798361][T15490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 647.862188][T15490] binder: BINDER_SET_CONTEXT_MGR already set [ 647.862204][T15490] binder: 15488:15490 ioctl 4018620d 200000004a80 returned -16 [ 647.915274][T15487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.939986][T15487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.201453][T15492] input: syz0 as /devices/virtual/input/input39 [ 648.572986][T15489] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 649.107165][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'. [ 649.108351][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'. [ 649.195156][ T5715] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 649.201957][T15511] tipc: Started in network mode [ 649.201990][T15511] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 649.216790][T15511] tipc: Enabled bearer , priority 6 [ 649.253818][T15515] IPVS: nq: FWM 3 0x00000003 - no destination available [ 649.359312][ T5715] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 649.359344][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.359366][ T5715] usb 4-1: Product: syz [ 649.359381][ T5715] usb 4-1: Manufacturer: syz [ 649.359396][ T5715] usb 4-1: SerialNumber: syz [ 649.409468][ T5715] usb 4-1: config 0 descriptor?? [ 649.422317][ T5715] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 649.834925][ T5716] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 649.944856][ T5729] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 649.989162][ T5716] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 649.989184][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 649.989196][ T5716] usb 2-1: Product: syz [ 649.989272][ T5716] usb 2-1: SerialNumber: syz [ 649.995663][ T5716] usb 2-1: config 0 descriptor?? [ 650.107320][ T5729] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 650.107354][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.113990][ T5729] usb 3-1: config 0 descriptor?? [ 650.155121][ T5729] cp210x 3-1:0.0: cp210x converter detected [ 650.263889][ T5716] usb 2-1: USB disconnect, device number 67 [ 650.325018][ T51] tipc: Node number set to 9480874 [ 650.540150][ T5729] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 650.603096][ T5729] usb 3-1: cp210x converter now attached to ttyUSB0 [ 650.744163][ T5716] usb 3-1: USB disconnect, device number 85 [ 650.819729][ T5716] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 650.949874][ T5715] gspca_stk1135: reg_w 0xf err -71 [ 650.950923][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 650.950939][ T5715] gspca_stk1135: Sensor write failed [ 650.950970][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 650.950981][ T5715] gspca_stk1135: Sensor write failed [ 650.951014][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 650.951024][ T5715] gspca_stk1135: Sensor read failed [ 650.951057][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 650.952355][ T5715] gspca_stk1135: Sensor read failed [ 650.952367][ T5715] gspca_stk1135: Detected sensor type unknown (0x0) [ 650.952405][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 650.952416][ T5715] gspca_stk1135: Sensor read failed [ 650.952506][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 650.952518][ T5715] gspca_stk1135: Sensor read failed [ 650.952543][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 650.952553][ T5715] gspca_stk1135: Sensor write failed [ 650.952581][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 650.952590][ T5715] gspca_stk1135: Sensor write failed [ 650.952777][ T5715] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 650.976102][ T5715] usb 4-1: USB disconnect, device number 115 [ 651.056516][ T5716] cp210x 3-1:0.0: device disconnected [ 651.134107][ T4934] Bluetooth: hci0: unexpected event for opcode 0x007f [ 651.402442][T15542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.574822][ T5716] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 651.654778][ T5729] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 651.731441][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 651.731992][ T5716] usb 3-1: not running at top speed; connect to a high speed hub [ 651.733358][ T5716] usb 3-1: config 249 has an invalid interface number: 222 but max is 0 [ 651.733384][ T5716] usb 3-1: config 249 has no interface number 0 [ 651.733432][ T5716] usb 3-1: config 249 interface 222 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 651.733451][ T5716] usb 3-1: config 249 interface 222 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 651.733464][ T5716] usb 3-1: config 249 interface 222 has no altsetting 0 [ 651.753170][ T5716] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=44.ce [ 651.753197][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.753216][ T5716] usb 3-1: Product: syz [ 651.753230][ T5716] usb 3-1: Manufacturer: syz [ 651.753243][ T5716] usb 3-1: SerialNumber: syz [ 651.776560][T15540] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 651.825057][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 651.840233][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 651.841483][ T5729] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 651.841508][ T5729] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.841559][ T5729] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.844154][ T5729] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.844183][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.844205][ T5729] usb 4-1: Product: syz [ 651.844220][ T5729] usb 4-1: Manufacturer: syz [ 651.844236][ T5729] usb 4-1: SerialNumber: syz [ 651.974941][ T32] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 652.124846][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 652.130938][ T32] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 652.131002][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 652.131089][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 652.131117][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 652.131139][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.131184][ T32] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 652.131269][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.146821][ T5716] kvaser_usb 3-1:249.222: error -ENODEV: Cannot get usb endpoint(s) [ 652.225192][ T5729] cdc_ncm 4-1:1.0: skipping garbage [ 652.225215][ T5729] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 652.225262][ T5729] cdc_ncm 4-1:1.0: bind() failure [ 652.254957][ T32] usb 2-1: config 0 descriptor?? [ 652.272040][ T5716] usb 3-1: USB disconnect, device number 86 [ 652.272467][ T5729] usb 4-1: USB disconnect, device number 116 [ 652.302483][ T32] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input40 [ 652.356311][ T4970] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 652.425202][ T4970] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 652.466015][ T5639] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 652.468555][ T5715] usb 2-1: USB disconnect, device number 68 [ 653.284770][ T5715] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 653.438549][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 653.438590][ T5715] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 653.438605][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.443374][ T5715] usb 2-1: config 0 descriptor?? [ 653.449690][T15563] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 653.669794][ T5715] ath6kl: Failed to submit usb control message: -71 [ 653.669854][ T5715] ath6kl: unable to send the bmi data to the device: -71 [ 653.669870][ T5715] ath6kl: Unable to send get target info: -71 [ 653.672295][ T5715] ath6kl: Failed to init ath6kl core: -71 [ 653.727932][ T5715] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 653.750528][ T5715] usb 2-1: USB disconnect, device number 69 [ 654.453455][T15571] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2750'. [ 654.458448][T15571] qnx4: unable to read the superblock [ 654.574636][ T823] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 654.726627][ T823] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 654.726659][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.726679][ T823] usb 2-1: config 0 has no interface number 0 [ 654.726728][ T823] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 654.726755][ T823] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 654.726778][ T823] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.729031][ T823] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 654.729059][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.729080][ T823] usb 2-1: Product: syz [ 654.729096][ T823] usb 2-1: Manufacturer: syz [ 654.729111][ T823] usb 2-1: SerialNumber: syz [ 654.733442][ T823] usb 2-1: config 0 descriptor?? [ 655.356744][ T5729] usb 2-1: USB disconnect, device number 70 [ 655.751570][T15549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.095852][T15577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.288275][ T5716] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 656.438115][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.438152][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.439587][ T5716] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 656.439617][ T5716] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 656.439638][ T5716] usb 3-1: Manufacturer: syz [ 656.461693][ T5716] usb 3-1: config 0 descriptor?? [ 656.804641][ T5729] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 656.955622][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 656.967522][ T5729] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 656.967615][ T5729] usb 2-1: config 0 has no interface number 0 [ 656.973571][ T5729] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 656.973603][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.973626][ T5729] usb 2-1: Product: syz [ 656.973642][ T5729] usb 2-1: Manufacturer: syz [ 656.973657][ T5729] usb 2-1: SerialNumber: syz [ 657.043938][ T5729] usb 2-1: config 0 descriptor?? [ 657.467230][ T5729] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 657.467266][ T5729] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 657.497148][ T5729] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 657.497571][ T5729] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 657.522432][T15575] netlink: 'syz.2.2752': attribute type 10 has an invalid length. [ 657.874579][ T5729] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 658.024629][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 658.033609][ T5729] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 658.033642][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.033664][ T5729] usb 4-1: Product: syz [ 658.033679][ T5729] usb 4-1: Manufacturer: syz [ 658.033694][ T5729] usb 4-1: SerialNumber: syz [ 658.078042][ T5729] usb 4-1: config 0 descriptor?? [ 658.092331][ T5729] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 658.957161][ T5716] uclogic 0003:256C:006D.0026: v1 frame probing failed: -71 [ 658.957270][ T5716] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 658.957362][ T5716] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71 [ 658.967544][ T5716] usb 3-1: USB disconnect, device number 87 [ 659.085839][T15629] virtiofs: Bad value for 'dax' [ 659.580478][ T51] usb 2-1: USB disconnect, device number 71 [ 659.664630][ T32] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 659.834445][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 659.836706][ T32] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 659.836734][ T32] usb 3-1: config 0 has no interface number 0 [ 659.836810][ T32] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 659.836824][ T32] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 659.836840][ T32] usb 3-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 659.836854][ T32] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.839337][ T32] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 659.839355][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.839367][ T32] usb 3-1: Product: syz [ 659.839375][ T32] usb 3-1: Manufacturer: syz [ 659.839384][ T32] usb 3-1: SerialNumber: syz [ 659.915049][ T32] usb 3-1: config 0 descriptor?? [ 659.918324][T15641] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 659.959148][ T32] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input42 [ 660.205176][ T823] usb 3-1: USB disconnect, device number 88 [ 660.273951][ T4934] Bluetooth: hci4: ACL packet for unknown connection handle 3584 [ 660.320015][ T5729] gspca_ov534_9: reg_r err -71 [ 660.347683][T11893] udevd[11893]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 660.604536][ T5729] gspca_ov534_9: Unknown sensor 0000 [ 660.604652][ T5729] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 660.608981][ T5729] usb 4-1: USB disconnect, device number 117 [ 660.804431][ T32] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 660.956595][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 660.956617][ T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 660.956630][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.958664][ T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 660.958683][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.958695][ T32] usb 2-1: Product: syz [ 660.958704][ T32] usb 2-1: Manufacturer: syz [ 660.958712][ T32] usb 2-1: SerialNumber: syz [ 661.003634][ T32] hub 2-1:1.0: bad descriptor, ignoring hub [ 661.003672][ T32] hub 2-1:1.0: probe with driver hub failed with error -5 [ 661.044240][ T5729] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 661.066699][T15662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.220215][ T5729] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 661.220297][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.220311][ T5729] usb 3-1: Product: syz [ 661.220320][ T5729] usb 3-1: Manufacturer: syz [ 661.220329][ T5729] usb 3-1: SerialNumber: syz [ 661.298195][ T5729] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 661.371530][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'. [ 661.380219][ T32] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 661.405440][ T51] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 661.578596][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'. [ 661.892883][T15670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2779'. [ 662.182055][T15671] netlink: 'syz.2.2775': attribute type 10 has an invalid length. [ 662.275056][T15671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 662.297160][T15671] team0: Port device netdevsim1 added [ 662.474241][ T823] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 662.625507][ T823] usb 4-1: Using ep0 maxpacket: 16 [ 662.634712][ T51] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 662.643913][ T823] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 662.643945][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.643967][ T823] usb 4-1: Product: syz [ 662.658155][ T823] usb 4-1: Manufacturer: syz [ 662.658183][ T823] usb 4-1: SerialNumber: syz [ 662.684419][ T823] r8152-cfgselector 4-1: Unknown version 0x0000 [ 662.684450][ T823] r8152-cfgselector 4-1: config 0 descriptor?? [ 662.695926][ T51] ath9k_htc: Failed to initialize the device [ 662.803516][ T51] usb 3-1: ath9k_htc: USB layer deinitialized [ 662.934725][ T823] r8152-cfgselector 4-1: Unknown version 0x0000 [ 662.935234][ T823] r8152-cfgselector 4-1: No union descriptors [ 663.174218][ T51] usb 3-1: USB disconnect, device number 89 [ 663.312500][ T5729] r8152-cfgselector 4-1: USB disconnect, device number 118 [ 663.739062][ T51] usb 2-1: USB disconnect, device number 72 [ 663.791701][ T51] usblp1: removed [ 663.871187][T15691] netlink: 4416 bytes leftover after parsing attributes in process `syz.1.2783'. [ 664.051165][T15697] kvm: emulating exchange as write [ 664.076810][T15688] netlink: 4416 bytes leftover after parsing attributes in process `syz.1.2783'. [ 664.260515][ T37] audit: type=1326 audit(2000000061.053:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.6.2787" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d69d0ce59 code=0x0 [ 664.344377][ T5729] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 664.389987][T15711] binder: 15710:15711 ioctl c0306201 200000000080 returned -14 [ 664.390338][T15711] binder: 15710:15711 ioctl c0306201 2000000003c0 returned -14 [ 664.427044][T15708] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 2 out of range (1000000..45000000) [ 664.504044][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 664.504894][ T5729] usb 3-1: too many configurations: 216, using maximum allowed: 8 [ 664.506812][ T5729] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 664.506851][ T5729] usb 3-1: can't read configurations, error -61 [ 664.646107][ T5729] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 664.804100][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 664.804977][ T5729] usb 3-1: too many configurations: 216, using maximum allowed: 8 [ 664.806663][ T5729] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 664.806700][ T5729] usb 3-1: can't read configurations, error -61 [ 664.807071][ T5729] usb usb3-port1: attempt power cycle [ 665.154073][ T5729] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 665.188777][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 665.190302][ T5729] usb 3-1: too many configurations: 216, using maximum allowed: 8 [ 665.215773][ T5729] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 665.215815][ T5729] usb 3-1: can't read configurations, error -61 [ 665.304471][ T32] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 665.344115][ T5729] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 665.364769][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 665.365631][ T5729] usb 3-1: too many configurations: 216, using maximum allowed: 8 [ 665.368042][ T5729] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 665.368081][ T5729] usb 3-1: can't read configurations, error -61 [ 665.368407][ T5729] usb usb3-port1: unable to enumerate USB device [ 665.469706][ T32] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 665.469739][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.479528][ T32] usb 2-1: config 0 descriptor?? [ 665.485939][ T32] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 665.571036][T12671] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 665.727031][T12671] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 665.727061][T12671] usb 4-1: config 0 has no interface number 0 [ 665.727097][T12671] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 665.727114][T12671] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 665.727152][T12671] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 665.727178][T12671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.760779][T12671] usb 4-1: config 0 descriptor?? [ 665.763401][T15719] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 665.808356][T12671] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 665.978712][T15719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.982385][T15719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.008970][T12671] usb 4-1: USB disconnect, device number 119 [ 666.092250][ T32] gp8psk: usb out operation failed. [ 666.092271][ T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 666.092317][ T32] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 666.101235][ T32] usb 2-1: USB disconnect, device number 73 [ 666.813980][ T32] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 666.973928][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 666.976492][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 666.976544][ T32] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 666.976569][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.999986][ T32] usb 4-1: config 0 descriptor?? [ 667.247904][ T32] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 667.433893][T15425] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 667.583852][T15425] usb 2-1: Using ep0 maxpacket: 8 [ 667.585952][T15425] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.586012][T15425] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 667.586027][T15425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.589264][T15425] usb 2-1: config 0 descriptor?? [ 667.594127][ T5716] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 667.599698][T15425] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 667.759919][ T5716] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 667.759955][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 667.759977][ T5716] usb 3-1: Product: syz [ 667.759992][ T5716] usb 3-1: SerialNumber: syz [ 667.797317][ T5716] usb 3-1: config 0 descriptor?? [ 668.020034][ T5716] hso 3-1:0.0: Failed to find BULK eps [ 668.215245][T15736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2797'. [ 668.217456][T15736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.218863][T15736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.223597][T15736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.231358][T15736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.289899][ T5716] usb 3-1: USB disconnect, device number 94 [ 668.618212][T15425] gspca_vc032x: reg_r err -32 [ 668.618278][T15425] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 669.318739][T15748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2800'. [ 669.319692][T15749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2800'. [ 669.452140][T15752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.452634][T15752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.530985][T15752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.539264][T15752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.545571][T15753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.546171][T15753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.628936][T15425] usb 4-1: USB disconnect, device number 120 [ 669.924025][T15765] bridge0: port 3(veth0_to_bridge) entered blocking state [ 669.924475][T15765] bridge0: port 3(veth0_to_bridge) entered disabled state [ 669.924808][T15765] veth0_to_bridge: entered allmulticast mode [ 669.954113][T15765] veth0_to_bridge: entered promiscuous mode [ 670.293036][T15425] usb 2-1: USB disconnect, device number 74 [ 670.744063][T15425] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 671.853764][T15425] usb 2-1: Using ep0 maxpacket: 8 [ 672.804013][T15425] usb 2-1: config 1 interface 0 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.804052][T15425] usb 2-1: config 1 interface 0 has no altsetting 0 [ 672.833107][T15425] usb 2-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.40 [ 672.833142][T15425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.833163][T15425] usb 2-1: Product: ц [ 672.833177][T15425] usb 2-1: Manufacturer: 䆃櫥㠗햕ᴷ뱟妒醲࣢ᖥ짨⍈튽染呗㷱慢쓦ठ臇ᐣᚮⷀ቉卭켰舀궳뭎錿陀੟튞Ꞻ굊騠狪夛⯉璱ῧ藻ຊ豺趠诙⊹⮜ಋ鬨䱰蹟퀸箱̐⚸쪨辂ፔꗾ剶탮ꊕ໹咲镚뎊䌹愺Ӛ玎ᗎ垦녖妆匰햽캗㯜⼀핈ꝩ㑭몈毘慖✷孭뷟〧첾올⌥酚⏣↸ [ 672.833210][T15425] usb 2-1: SerialNumber: syz [ 672.945265][T15782] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2811'. [ 673.429984][T15425] usbhid 2-1:1.0: can't add hid device: -71 [ 673.430120][T15425] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 673.478902][T15425] usb 2-1: USB disconnect, device number 75 [ 673.694278][ T32] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 673.843524][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 673.846020][ T32] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.846054][ T32] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.846078][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 673.846116][ T32] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 673.846141][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.857962][ T32] usb 4-1: config 0 descriptor?? [ 674.284432][ T32] nzxt-smart2 0003:1E71:2009.0027: unknown main item tag 0x0 [ 674.284457][ T32] nzxt-smart2 0003:1E71:2009.0027: unknown main item tag 0x0 [ 674.284473][ T32] nzxt-smart2 0003:1E71:2009.0027: unknown main item tag 0x0 [ 674.284487][ T32] nzxt-smart2 0003:1E71:2009.0027: unknown main item tag 0x0 [ 674.284502][ T32] nzxt-smart2 0003:1E71:2009.0027: unknown main item tag 0x0 [ 674.288991][ T32] nzxt-smart2 0003:1E71:2009.0027: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 674.397358][T15425] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 674.414889][ T5729] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 674.533557][ T32] usb 4-1: USB disconnect, device number 121 [ 674.578665][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 674.581589][T15425] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 674.581705][T15425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.581962][ T5729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 674.585495][ T5729] usb 3-1: config 3 has an invalid interface number: 183 but max is 0 [ 674.585519][ T5729] usb 3-1: config 3 has no interface number 0 [ 674.602895][T15425] usb 2-1: config 0 descriptor?? [ 674.639756][ T5729] usb 3-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 674.639788][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.639810][ T5729] usb 3-1: Product: syz [ 674.639825][ T5729] usb 3-1: Manufacturer: syz [ 674.639840][ T5729] usb 3-1: SerialNumber: syz [ 674.645389][T15425] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 675.259875][T15425] usb 2-1: USB disconnect, device number 76 [ 677.236552][ T5729] usb 3-1: USB disconnect, device number 95 [ 677.753290][ T823] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 677.903720][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 677.906634][ T823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.906669][ T823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 677.906691][ T823] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 677.906716][ T823] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 677.906742][ T823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 677.906766][ T823] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 677.906791][ T823] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 677.915714][ T823] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 677.915742][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 677.915761][ T823] usb 2-1: SerialNumber: syz [ 677.974990][ T823] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 678.191851][ T32] usb 2-1: USB disconnect, device number 77 [ 678.309008][ T5729] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 678.473164][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 678.481752][ T5729] usb 4-1: config 7 has an invalid interface number: 201 but max is 1 [ 678.481783][ T5729] usb 4-1: config 7 has an invalid interface number: 99 but max is 1 [ 678.481804][ T5729] usb 4-1: config 7 has no interface number 0 [ 678.481820][ T5729] usb 4-1: config 7 has no interface number 1 [ 678.481868][ T5729] usb 4-1: config 7 interface 99 altsetting 10 has an endpoint descriptor with address 0x97, changing to 0x87 [ 678.481884][ T5729] usb 4-1: config 7 interface 201 has no altsetting 0 [ 678.481896][ T5729] usb 4-1: config 7 interface 99 has no altsetting 0 [ 678.496752][ T5729] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice= d.ec [ 678.496782][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.496802][ T5729] usb 4-1: Product: syz [ 678.496815][ T5729] usb 4-1: Manufacturer: syz [ 678.496829][ T5729] usb 4-1: SerialNumber: syz [ 678.755623][T15825] syz.3.2824(15825): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 678.955249][T15832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.957350][T15832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.035690][ T32] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 679.276751][ T32] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 679.276844][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.287031][ T32] usb 3-1: config 0 descriptor?? [ 679.368640][ T32] cp210x 3-1:0.0: cp210x converter detected [ 679.518919][ T32] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 679.518953][ T32] cp210x 3-1:0.0: querying part number failed [ 679.588132][ T32] usb 3-1: cp210x converter now attached to ttyUSB0 [ 679.638708][ T32] usb 3-1: USB disconnect, device number 96 [ 679.803009][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 679.815970][ T32] cp210x 3-1:0.0: device disconnected [ 680.281557][ T5729] usbtest 4-1:7.201: couldn't get endpoints, -22 [ 680.281674][ T5729] usbtest 4-1:7.201: probe with driver usbtest failed with error -22 [ 680.327252][ T5729] usbtest 4-1:7.99: couldn't get endpoints, -71 [ 680.327362][ T5729] usbtest 4-1:7.99: probe with driver usbtest failed with error -71 [ 680.382794][ T5729] usb 4-1: USB disconnect, device number 122 [ 680.643172][ T5716] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 680.660920][ T823] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 680.783256][ T823] usb 3-1: device descriptor read/64, error -71 [ 680.793505][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 680.805757][ T5716] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 680.808101][ T5716] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 680.808124][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 680.808136][ T5716] usb 2-1: Product: syz [ 680.808145][ T5716] usb 2-1: Manufacturer: syz [ 680.808154][ T5716] usb 2-1: SerialNumber: syz [ 680.812305][ T5716] usb 2-1: config 0 descriptor?? [ 680.815306][T15851] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 680.817587][ T5716] hub 2-1:0.0: bad descriptor, ignoring hub [ 680.817622][ T5716] hub 2-1:0.0: probe with driver hub failed with error -5 [ 680.824418][ T5716] chaoskey 2-1:0.0: Unable to register with hwrng [ 681.024916][ T823] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 681.153700][ T823] usb 3-1: device descriptor read/64, error -71 [ 681.267127][ T823] usb usb3-port1: attempt power cycle [ 681.603232][ T823] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 681.624561][ T823] usb 3-1: device descriptor read/8, error -71 [ 681.863223][ T823] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 681.884574][ T823] usb 3-1: device descriptor read/8, error -71 [ 681.993940][ T823] usb usb3-port1: unable to enumerate USB device [ 683.369744][ T37] audit: type=1804 audit(2000000079.454:651): pid=15882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2839" name="bus" dev="ramfs" ino=58309 res=1 errno=0 [ 683.796563][T15890] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 683.800475][T15889] netlink: 'syz.6.2840': attribute type 1 has an invalid length. [ 683.970335][T15892] XFS (nbd3): SB validate failed with error -5. [ 684.173405][ T5715] usb 2-1: USB disconnect, device number 78 [ 685.375815][T15919] netlink: 'syz.2.2848': attribute type 33 has an invalid length. [ 685.375841][T15919] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2848'. [ 685.375876][T15919] `: renamed from team0 (while UP) [ 685.446855][ T4934] Bluetooth: hci3: unexpected event for opcode 0x007f [ 685.595860][ T5715] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 685.991940][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.623252][ T5729] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 686.722826][T15425] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 686.783153][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 686.785997][ T5729] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 686.786025][ T5729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.786044][ T5729] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.788508][ T5729] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.788593][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.788615][ T5729] usb 2-1: Product: syz [ 686.788630][ T5729] usb 2-1: Manufacturer: syz [ 686.788645][ T5729] usb 2-1: SerialNumber: syz [ 686.839953][ T5729] usb 2-1: 0:2 : does not exist [ 686.892833][ T5715] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 686.893157][T15425] usb 3-1: Using ep0 maxpacket: 16 [ 686.901066][T15425] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 686.901087][T15425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.901100][T15425] usb 3-1: Product: syz [ 686.901109][T15425] usb 3-1: Manufacturer: syz [ 686.901118][T15425] usb 3-1: SerialNumber: syz [ 686.913286][T15425] usb 3-1: config 0 descriptor?? [ 686.962292][T15425] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 687.047187][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1707, setting to 1024 [ 687.047244][ T5715] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice=10.40 [ 687.047280][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.071838][ T5729] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 687.116591][ T5715] usb 4-1: config 0 descriptor?? [ 687.123611][T15938] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 687.351303][ T5715] usbhid 4-1:0.0: can't add hid device: -71 [ 687.351425][ T5715] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 687.370632][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2857'. [ 687.371835][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2857'. [ 687.434403][ T5715] usb 4-1: USB disconnect, device number 124 [ 687.446435][T15948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.447412][T15948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.464763][T15425] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 687.464932][T15425] visor 3-1:0.0: probe with driver visor failed with error -71 [ 687.531451][T15425] usb 3-1: USB disconnect, device number 101 [ 687.573166][ T5729] usb 2-1: USB disconnect, device number 79 [ 687.618745][T15959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.625741][T15959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.862847][ T5715] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 688.034560][ T5729] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 688.102253][T15967] Invalid/unusable pipe [ 688.223282][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 688.232498][ T5729] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 688.232528][ T5729] usb 2-1: config 0 has no interface number 0 [ 688.257008][ T5729] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 688.257041][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.257063][ T5729] usb 2-1: Product: syz [ 688.257079][ T5729] usb 2-1: Manufacturer: syz [ 688.257093][ T5729] usb 2-1: SerialNumber: syz [ 688.295409][ T5729] usb 2-1: config 0 descriptor?? [ 688.352784][T15425] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 688.504966][T15425] usb 3-1: device descriptor read/64, error -71 [ 688.509816][ T5729] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 688.509847][ T5729] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 688.712458][ T5729] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 688.723017][ T5729] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 688.753903][T15425] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 688.810060][T15973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.813747][T15973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.903476][T15425] usb 3-1: device descriptor read/64, error -71 [ 688.991640][ T5729] usb 2-1: USB disconnect, device number 80 [ 689.013648][T15425] usb usb3-port1: attempt power cycle [ 689.230657][T15980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.231815][T15980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.248017][T15980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.249012][T15980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.283501][T15983] proc: Unknown parameter 'norecovery' [ 689.352735][T15425] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 689.373737][T15425] usb 3-1: device descriptor read/8, error -71 [ 689.622698][T15425] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 689.646792][T15425] usb 3-1: device descriptor read/8, error -71 [ 689.762824][T15425] usb usb3-port1: unable to enumerate USB device [ 689.946503][T16000] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 690.013346][T16000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.017303][T16000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.211502][T16005] netlink: 'syz.1.2870': attribute type 1 has an invalid length. [ 690.226697][T16006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2870'. [ 690.732671][ T5729] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 690.887950][ T5729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.888012][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 690.888041][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 690.888069][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 690.888092][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 690.899508][ T5729] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 690.899540][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 690.899562][ T5729] usb 2-1: Product: syz [ 690.899577][ T5729] usb 2-1: Manufacturer: syz [ 690.899592][ T5729] usb 2-1: SerialNumber: syz [ 690.990748][ T5729] usb 2-1: config 0 descriptor?? [ 691.199929][ T5729] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 691.199959][ T5729] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 691.400255][ T5729] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 691.400284][ T5729] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 691.400307][ T5729] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 691.914915][ T5729] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 691.915080][ T5729] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 691.926184][ T5729] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 691.926715][ T5729] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 692.137517][ T5716] usb 2-1: USB disconnect, device number 81 [ 692.593457][ T5716] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 692.805760][ T5716] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 692.805860][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.805884][ T5716] usb 2-1: Product: syz [ 692.805900][ T5716] usb 2-1: Manufacturer: syz [ 692.805915][ T5716] usb 2-1: SerialNumber: syz [ 692.958523][T16044] input: syz1 as /devices/virtual/input/input43 [ 693.039316][ T5716] usb 2-1: config 0 descriptor?? [ 693.087990][ T5715] usb 4-1: device descriptor read/64, error -110 [ 693.305163][ T5716] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 693.325764][ T5715] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 693.452542][ T5715] usb 4-1: device descriptor read/64, error -32 [ 693.562934][ T5715] usb usb4-port1: attempt power cycle [ 693.731225][T16065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.741793][T16065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.762204][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'. [ 693.902546][ T5715] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 693.923858][ T5715] usb 4-1: device descriptor read/8, error -32 [ 694.162409][ T5715] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 694.182704][ T5715] usb 4-1: device descriptor read/8, error -32 [ 694.262437][ T5787] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 694.305646][ T5715] raw-gadget.0 gadget.3: failed to queue suspend event [ 694.306221][ T5715] usb usb4-port1: unable to enumerate USB device [ 694.359359][T16079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.371130][T16079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.412725][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 694.415263][ T5787] usb 3-1: config 53 has an invalid interface number: 101 but max is 0 [ 694.415285][ T5787] usb 3-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 694.415296][ T5787] usb 3-1: config 53 has no interface number 0 [ 694.415323][ T5787] usb 3-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 694.415540][ T5787] usb 3-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 694.415557][ T5787] usb 3-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 694.415572][ T5787] usb 3-1: config 53 interface 101 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 694.415585][ T5787] usb 3-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 694.418303][ T5787] usb 3-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 694.418330][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.418387][ T5787] usb 3-1: Product: syz [ 694.418396][ T5787] usb 3-1: Manufacturer: syz [ 694.418404][ T5787] usb 3-1: SerialNumber: syz [ 694.452752][T16077] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 694.703109][ T5787] kvaser_usb 3-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 694.703138][ T5787] kvaser_usb 3-1:53.101: error -EMSGSIZE: Failed to initialize card [ 694.703468][ T5787] kvaser_usb 3-1:53.101: probe with driver kvaser_usb failed with error -90 [ 694.722715][ T5787] usb 3-1: USB disconnect, device number 106 [ 695.077321][T16081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.097782][ T5716] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 695.105571][ T5716] usb 2-1: USB disconnect, device number 82 [ 695.146620][T16080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.256313][T16084] netlink: 'syz.2.2899': attribute type 39 has an invalid length. [ 695.342601][T16084] hsr_slave_0 (unregistering): left promiscuous mode [ 696.102283][ T5729] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 696.262254][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 696.292712][ T5729] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.292741][ T5729] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.296212][ T5729] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 696.296241][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.296257][ T5729] usb 3-1: Product: syz [ 696.296267][ T5729] usb 3-1: Manufacturer: syz [ 696.296275][ T5729] usb 3-1: SerialNumber: syz [ 696.416164][ T8413] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 696.563052][ T5729] usb 3-1: invalid UAC_HEADER (v1) [ 696.565212][ T8413] usb 2-1: Using ep0 maxpacket: 32 [ 696.566114][ T8413] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 696.570070][ T8413] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.570095][ T8413] usb 2-1: config 0 has no interface number 0 [ 696.574894][ T8413] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.574920][ T8413] usb 2-1: config 0 has no interface number 0 [ 696.594077][ T8413] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.594106][ T8413] usb 2-1: config 0 has no interface number 0 [ 696.595359][ T8413] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.595381][ T8413] usb 2-1: config 0 has no interface number 0 [ 696.597385][ T8413] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.597407][ T8413] usb 2-1: config 0 has no interface number 0 [ 696.598617][ T8413] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.598638][ T8413] usb 2-1: config 0 has no interface number 0 [ 696.600184][ T8413] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.600204][ T8413] usb 2-1: config 0 has no interface number 0 [ 696.609092][ T8413] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.609117][ T8413] usb 2-1: config 0 has no interface number 0 [ 696.615222][ T8413] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 696.615250][ T8413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.615269][ T8413] usb 2-1: Product: syz [ 696.615282][ T8413] usb 2-1: Manufacturer: syz [ 696.615294][ T8413] usb 2-1: SerialNumber: syz [ 696.643894][ T8413] usb 2-1: config 0 descriptor?? [ 696.672552][ T8413] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 697.289867][T16140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.291983][T16140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.625370][ T5729] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 697.660242][ T5729] usb 3-1: USB disconnect, device number 107 [ 697.697479][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.372523][ T5716] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 698.522181][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 698.525394][ T5716] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 698.525425][ T5716] usb 3-1: config 0 has no interface number 0 [ 698.525478][ T5716] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 698.528435][ T5716] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 698.528466][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.528487][ T5716] usb 3-1: Product: syz [ 698.528503][ T5716] usb 3-1: Manufacturer: syz [ 698.528527][ T5716] usb 3-1: SerialNumber: syz [ 698.535792][ T5716] usb 3-1: config 0 descriptor?? [ 698.552876][T16161] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 698.760317][T16161] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 698.963250][ T5716] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 698.963639][ T5716] asix 3-1:0.188: probe with driver asix failed with error -71 [ 698.976516][ T5716] usb 3-1: USB disconnect, device number 108 [ 699.198348][ T8413] etas_es58x 2-1:0.2: could not retrieve the product info string [ 699.227746][T16171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.238826][T16171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.251707][T16171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.258252][T16171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.311176][ T8413] usb 2-1: USB disconnect, device number 83 [ 699.320042][ T8413] etas_es58x 2-1:0.2: Disconnecting syz syz [ 699.876235][T16188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.880111][T16188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.468787][T15425] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 700.676223][T15425] usb 3-1: Using ep0 maxpacket: 8 [ 700.680720][T15425] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 700.680752][T15425] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 700.680806][T15425] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.730676][T15425] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 700.730711][T15425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.730733][T15425] usb 3-1: Product: syz [ 700.730749][T15425] usb 3-1: Manufacturer: syz [ 700.730764][T15425] usb 3-1: SerialNumber: syz [ 700.752630][T15425] usb 3-1: config 0 descriptor?? [ 700.821283][T16231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.830334][T16231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.961145][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.971804][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.079732][T15425] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 701.106919][T15425] usb 3-1: USB disconnect, device number 109 [ 702.101937][ T8413] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 702.252050][ T8413] usb 2-1: Using ep0 maxpacket: 32 [ 702.256528][ T8413] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 702.256554][ T8413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.256566][ T8413] usb 2-1: Product: syz [ 702.256575][ T8413] usb 2-1: Manufacturer: syz [ 702.256583][ T8413] usb 2-1: SerialNumber: syz [ 702.260852][ T8413] usb 2-1: config 0 descriptor?? [ 702.309153][ T8413] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 702.309708][ T8413] dvb-usb: bulk message failed: -22 (2/0) [ 702.338376][ T8413] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 702.338939][ T8413] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 702.338976][ T8413] usb 2-1: media controller created [ 702.357080][ T8413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 702.380872][ T8413] usb 2-1: selecting invalid altsetting 7 [ 702.380897][ T8413] cxusb: set interface failed [ 702.380910][ T8413] dvb-usb: bulk message failed: -22 (1/0) [ 702.419734][ T8413] DVB: Unable to find symbol lgdt330x_attach() [ 702.419747][ T8413] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 702.483723][ T8413] rc_core: IR keymap rc-dvico-portable not found [ 702.483741][ T8413] Registered IR keymap rc-empty [ 702.485067][ T8413] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 702.490282][ T8413] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input44 [ 702.496137][ T8413] dvb-usb: schedule remote query interval to 100 msecs. [ 702.496160][ T8413] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 702.554911][ T5787] usb 2-1: USB disconnect, device number 84 [ 702.675894][ T5787] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 702.858466][T16216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.058699][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2959'. [ 703.534998][ T8413] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 703.661956][ T8413] usb 2-1: device descriptor read/64, error -71 [ 703.911831][ T8413] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 704.031929][ T8413] usb 2-1: device descriptor read/64, error -71 [ 704.062054][ T5729] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 704.142310][ T8413] usb usb2-port1: attempt power cycle [ 704.191999][ T5729] usb 3-1: device descriptor read/64, error -71 [ 704.433689][ T5729] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 704.491817][ T8413] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 704.512666][ T8413] usb 2-1: device descriptor read/8, error -71 [ 704.571931][ T5729] usb 3-1: device descriptor read/64, error -71 [ 704.682478][ T5729] usb usb3-port1: attempt power cycle [ 704.763363][ T8413] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 704.794600][ T8413] usb 2-1: device descriptor read/8, error -71 [ 704.902481][ T8413] usb usb2-port1: unable to enumerate USB device [ 704.908702][T16323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.909408][T16323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.021806][ T5729] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 705.042314][ T5729] usb 3-1: device descriptor read/8, error -71 [ 705.281756][ T5729] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 705.303882][ T5729] usb 3-1: device descriptor read/8, error -71 [ 705.412257][ T5729] usb usb3-port1: unable to enumerate USB device [ 705.479443][T16325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2974'. [ 705.847277][ T4934] block nbd0: Receive control failed (result -32) [ 706.306933][T16337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.307728][T16337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.394502][T16342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.395240][T16342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.398304][T16342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2979'. [ 707.078585][T16358] netlink: 'syz.2.2984': attribute type 13 has an invalid length. [ 707.089961][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 707.469293][T16373] bridge0: port 3(veth0_to_bridge) entered blocking state [ 707.469641][T16373] bridge0: port 3(veth0_to_bridge) entered disabled state [ 707.469962][T16373] veth0_to_bridge: entered allmulticast mode [ 707.479871][T16373] veth0_to_bridge: entered promiscuous mode [ 707.480072][T16373] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.480848][T16373] bridge0: port 3(veth0_to_bridge) entered blocking state [ 707.493412][T16373] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 707.811902][T16376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.812606][T16376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.818706][T16376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.826786][T16376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.885969][T16386] tunl0: entered promiscuous mode [ 707.900181][T16386] netlink: 'syz.1.2993': attribute type 4 has an invalid length. [ 707.900207][T16386] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2993'. [ 707.984905][ T5729] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 708.161799][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 708.163806][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.163836][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.163850][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 708.163876][ T5729] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 708.163890][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.168379][ T5729] usb 3-1: config 0 descriptor?? [ 708.589546][ T5729] microsoft 0003:045E:07DA.0028: ignoring exceeding usage max [ 708.593620][ T5729] microsoft 0003:045E:07DA.0028: unknown main item tag 0x7 [ 708.593652][ T5729] microsoft 0003:045E:07DA.0028: unbalanced collection at end of report description [ 708.596355][ T5729] microsoft 0003:045E:07DA.0028: parse failed [ 708.596458][ T5729] microsoft 0003:045E:07DA.0028: probe with driver microsoft failed with error -22 [ 708.780426][ T32] usb 3-1: USB disconnect, device number 114 [ 709.120187][T16413] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 709.343726][T16417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.344077][T16417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.603305][ T5729] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 709.751752][ T5729] usb 3-1: device descriptor read/64, error -71 [ 709.831998][T16421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3004'. [ 709.910368][T16423] 9p: Bad value for 'wfdno' [ 709.925127][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'. [ 709.937362][T16421] kvm: vcpu 0: requested 13312 ns lapic timer period limited to 200000 ns [ 709.937387][T16421] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 709.959099][T16421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.960903][T16421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.996136][ T5729] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 710.121578][ T5729] usb 3-1: device descriptor read/64, error -71 [ 710.232198][ T5729] usb usb3-port1: attempt power cycle [ 710.571552][ T5729] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 710.592200][ T5729] usb 3-1: device descriptor read/8, error -71 [ 710.872037][ T5729] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 710.892152][ T5729] usb 3-1: device descriptor read/8, error -71 [ 710.942298][ T4934] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 710.951935][T12367] Bluetooth: hci0: command 0x0406 tx timeout [ 711.012063][ T5729] usb usb3-port1: unable to enumerate USB device [ 711.344792][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.345466][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.406925][ T5787] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 711.553864][ T5787] usb 2-1: not running at top speed; connect to a high speed hub [ 711.555021][ T5787] usb 2-1: config 64 has an invalid interface number: 68 but max is 0 [ 711.555050][ T5787] usb 2-1: config 64 has no interface number 0 [ 711.555100][ T5787] usb 2-1: config 64 interface 68 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 711.555123][ T5787] usb 2-1: config 64 interface 68 has no altsetting 0 [ 711.557373][ T5787] usb 2-1: New USB device found, idVendor=0c45, idProduct=6138, bcdDevice= 1.32 [ 711.557399][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.557419][ T5787] usb 2-1: Product: 틶뼘탉┹ᆿແ䀸経豻钳뱂⩷ﺷ됄ᣮ见᧞ࣽ㧡喨࿄ﯔ⭫녫⧏ꁫ騃嚤ꑴ꯸鳹ඐ⾚옊套鍷鋟蟏淋ꪽ [ 711.557440][ T5787] usb 2-1: Manufacturer: Л [ 711.557449][ T5787] usb 2-1: SerialNumber: syz [ 712.086371][ T5787] gspca_main: sonixj-2.14.0 probing 0c45:6138 [ 712.088404][ T5787] gspca_sonixj: reg_w1 err -71 [ 712.088500][ T5787] sonixj 2-1:64.68: probe with driver sonixj failed with error -71 [ 712.119912][ T5787] usb 2-1: USB disconnect, device number 89 [ 712.155278][T16466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.156897][T16466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.203126][T16466] befs: (nbd3): No write support. Marking filesystem read-only [ 712.220360][T16466] befs: (nbd3): unable to read superblock [ 712.971903][T16475] binder: 16474:16475 ioctl 40085618 200000000000 returned -22 [ 713.077300][T12367] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 713.141901][T12367] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 713.150731][T12367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 713.168588][T12367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 713.170552][T12367] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 713.395064][T16485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.395684][T16485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.775764][ T69] smc: removing ib device syz1 [ 713.831325][ T5716] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 713.911524][ T5787] syz1: Port: 1 Link DOWN [ 714.002929][ T5716] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 714.002966][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.002988][ T5716] usb 2-1: Product: syz [ 714.003004][ T5716] usb 2-1: Manufacturer: syz [ 714.003019][ T5716] usb 2-1: SerialNumber: syz [ 714.442270][ T5716] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 714.442350][ T5716] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 714.449760][ T5716] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 714.449835][ T5716] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 714.450749][ T5716] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 714.539189][T16504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.544900][T16504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.645128][ T5716] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 714.849648][ T69] smbdirect: ib_dev[syz1] removed [ 715.176655][ T5716] usb 2-1: USB disconnect, device number 90 [ 715.264335][ T4934] Bluetooth: hci5: command tx timeout [ 715.487309][T16513] binder: BINDER_SET_CONTEXT_MGR already set [ 715.487337][T16513] binder: 16512:16513 ioctl 4018620d 2000000000c0 returned -16 [ 715.499254][T16514] binder: BINDER_SET_CONTEXT_MGR already set [ 715.499269][T16514] binder: 16512:16514 ioctl 4018620d 2000000000c0 returned -16 [ 715.502252][T16514] binder: BINDER_SET_CONTEXT_MGR already set [ 715.502265][T16514] binder: 16512:16514 ioctl 4018620d 200000000040 returned -16 [ 715.506309][T16513] binder: BINDER_SET_CONTEXT_MGR already set [ 715.506320][T16513] binder: 16512:16513 ioctl 4018620d 200000000040 returned -16 [ 715.961581][T16523] tmpfs: Bad value for 'mpol' [ 715.962630][T16523] random: crng reseeded on system resumption [ 716.315252][T16529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.318715][T16529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.348203][T16529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.361205][T16529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.394166][T16529] netlink: 'syz.3.3031': attribute type 21 has an invalid length. [ 716.394192][T16529] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3031'. [ 716.434240][T16529] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3031'. [ 716.505090][ T5716] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 716.653237][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 716.658038][ T5716] usb 2-1: config 5 has an invalid interface number: 240 but max is 0 [ 716.658067][ T5716] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 716.658089][ T5716] usb 2-1: config 5 has no interface number 0 [ 716.658136][ T5716] usb 2-1: config 5 interface 240 altsetting 6 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 716.658163][ T5716] usb 2-1: config 5 interface 240 altsetting 6 endpoint 0x8A has invalid maxpacket 202, setting to 64 [ 716.658190][ T5716] usb 2-1: config 5 interface 240 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 716.658211][ T5716] usb 2-1: config 5 interface 240 altsetting 6 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 716.658226][ T5716] usb 2-1: config 5 interface 240 altsetting 6 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 716.658241][ T5716] usb 2-1: config 5 interface 240 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 716.658259][ T5716] usb 2-1: config 5 interface 240 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 716.658273][ T5716] usb 2-1: config 5 interface 240 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 716.658286][ T5716] usb 2-1: config 5 interface 240 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 716.658299][ T5716] usb 2-1: config 5 interface 240 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 716.658312][ T5716] usb 2-1: config 5 interface 240 altsetting 6 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 716.658327][ T5716] usb 2-1: config 5 interface 240 has no altsetting 0 [ 716.768620][ T5716] usb 2-1: New USB device found, idVendor=0df6, idProduct=004d, bcdDevice=21.b0 [ 716.768654][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.768676][ T5716] usb 2-1: Product: 摐粻㭄ﱃﳡ퍀糅⪤⃂䑘䫭褅珷粿ꀖ㢣캆现뒷坏ⴽᕼ鿄ﲾ洞氄ύ᳧颚脛ꑾ濅∆릔扭堷헦렌眦뙻㭃閶ꖾ܏찤끞晐䲘脺諨飯⽀顦⬑䵩幪齩丸텮这爀왊脈鍫映ﰏ騹깘넁㯒ꀽ퉒 [ 716.808586][ T5716] usb 2-1: Manufacturer: 㶨㾻ਹ [ 716.808610][ T5716] usb 2-1: SerialNumber: — [ 716.877428][T16476] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.877809][T16476] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.878094][T16476] bridge_slave_0: entered allmulticast mode [ 716.887522][T16476] bridge_slave_0: entered promiscuous mode [ 716.926083][T16476] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.926572][T16476] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.926770][T16476] bridge_slave_1: entered allmulticast mode [ 716.960334][T16476] bridge_slave_1: entered promiscuous mode [ 717.143929][T16534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.144518][T16534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.244153][T16535] nfs4: Unknown parameter ''' [ 717.320854][T16476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.342068][ T4934] Bluetooth: hci5: command tx timeout [ 717.346070][T16476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.531254][ T5716] usb 2-1: USB disconnect, device number 91 [ 717.554388][T16476] team0: Port device team_slave_0 added [ 717.578145][T16476] team0: Port device team_slave_1 added [ 718.136961][T16476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.136981][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.141536][T16476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.433606][T16476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.433627][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.433657][T16476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.818419][ T37] audit: type=1326 audit(2000000115.616:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16562 comm="syz.6.3041" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d69d0ce59 code=0xffff0000 [ 718.831674][ T5716] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 718.932960][T16476] hsr_slave_0: entered promiscuous mode [ 718.937099][T16476] hsr_slave_1: entered promiscuous mode [ 718.949789][T16476] debugfs: 'hsr0' already exists in 'hsr' [ 718.949817][T16476] Cannot create hsr debugfs directory [ 719.000958][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 719.005453][ T5716] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 719.005483][ T5716] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.005502][ T5716] usb 2-1: config 0 has no interface number 0 [ 719.005561][ T5716] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 719.005590][ T5716] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 719.005615][ T5716] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.005643][ T5716] usb 2-1: config 0 interface 52 has no altsetting 0 [ 719.008656][ T5716] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 719.008685][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 719.008707][ T5716] usb 2-1: Product: syz [ 719.008723][ T5716] usb 2-1: SerialNumber: syz [ 719.146952][ T5716] usb 2-1: config 0 descriptor?? [ 719.426456][ T4934] Bluetooth: hci5: command tx timeout [ 719.452887][T16557] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 719.452937][T16557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 719.453041][T16557] vhci_hcd vhci_hcd.0: Device attached [ 719.460294][T16569] vhci_hcd: cannot find the pending unlink 7 [ 719.537481][ T5716] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 719.537773][ T5716] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 719.676573][T16569] vhci_hcd: connection closed [ 719.684319][ T1429] vhci_hcd vhci_hcd.1: stop threads [ 719.684347][ T1429] vhci_hcd vhci_hcd.1: release socket [ 719.684433][ T1429] vhci_hcd vhci_hcd.1: disconnect device [ 719.710413][ T5716] usb 2-1: USB disconnect, device number 92 [ 719.710949][ T32] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 719.711018][ T32] usb 35-1: enqueue for inactive port 0 [ 719.791121][ T32] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 720.647596][T16582] fuse: Unknown parameter 'f`' [ 720.740894][ T5787] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 720.898721][ T5787] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 720.898760][ T5787] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.898781][ T5787] usb 2-1: config 2 interface 0 has no altsetting 0 [ 720.898802][ T5787] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 720.898817][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.510930][ T4934] Bluetooth: hci5: command tx timeout [ 721.921988][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.478941][T16580] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 722.489888][T16580] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 722.636243][T16580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 722.636426][T16580] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 722.724111][T16580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 722.724483][T16580] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 722.863242][T16580] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 722.864809][T16580] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 722.916773][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.014862][T16580] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 723.225828][T16580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 723.258863][ T5787] usbhid 2-1:2.0: can't add hid device: -71 [ 723.258995][ T5787] usbhid 2-1:2.0: probe with driver usbhid failed with error -71 [ 723.269678][ T5787] usb 2-1: USB disconnect, device number 93 [ 723.452170][ T13] `: Port device netdevsim1 removed [ 723.454204][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.932819][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.190103][T16619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.201021][T16619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.540628][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 724.700825][ T4934] Bluetooth: hci1: command 0x0406 tx timeout [ 724.723246][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3056'. [ 724.796764][ T4934] Bluetooth: hci0: command 0x0406 tx timeout [ 724.942014][ T4934] Bluetooth: hci5: command 0x0c1a tx timeout [ 724.960456][T16638] tmpfs: Unknown parameter 'usrquotaut/event#' [ 725.093568][ T5716] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 725.240615][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 725.243491][ T5716] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 725.243524][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.298656][ T5716] usb 2-1: config 0 descriptor?? [ 725.323983][ T5716] gspca_main: sunplus-2.14.0 probing 041e:400b [ 725.513602][ T5716] gspca_sunplus: reg_w_riv err -71 [ 725.513714][ T5716] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 725.551610][ T5716] usb 2-1: USB disconnect, device number 94 [ 725.970991][T16656] netlink: 'syz.6.3060': attribute type 10 has an invalid length. [ 726.241584][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.341598][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.382137][ T8413] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 726.390186][ T13] bond0 (unregistering): Released all slaves [ 726.558419][ T8413] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.558455][ T8413] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 726.558475][ T8413] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.558529][ T8413] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 726.558558][ T8413] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 726.582928][ T8413] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.582959][ T8413] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 726.582978][ T8413] usb 2-1: Product: syz [ 726.582992][ T8413] usb 2-1: Manufacturer: syz [ 726.627005][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 726.675729][ T8413] cdc_wdm 2-1:1.0: skipping garbage [ 726.675745][ T8413] cdc_wdm 2-1:1.0: skipping garbage [ 726.682877][ T8413] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 726.682900][ T8413] cdc_wdm 2-1:1.0: Unknown control protocol [ 726.801469][ T4934] Bluetooth: hci1: command 0x0406 tx timeout [ 726.870767][ T4934] Bluetooth: hci0: command 0x0406 tx timeout [ 727.021713][ T4934] Bluetooth: hci5: command 0x0c1a tx timeout [ 727.162066][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 727.200572][T16656] macvlan1: entered promiscuous mode [ 727.200605][T16656] macvlan1: entered allmulticast mode [ 727.208456][T16656] veth1_vlan: entered allmulticast mode [ 727.312416][T16656] team0: Port device macvlan1 added [ 727.312687][ T13] tipc: Disabling bearer [ 727.390781][ T13] tipc: Left network mode [ 727.464368][T16684] netlink: 4432 bytes leftover after parsing attributes in process `syz.6.3062'. [ 728.194828][T16700] [ 728.194843][T16700] ====================================================== [ 728.194855][T16700] WARNING: possible circular locking dependency detected [ 728.194870][T16700] syzkaller #0 Tainted: G L [ 728.194883][T16700] ------------------------------------------------------ [ 728.194893][T16700] syz.6.3063/16700 is trying to acquire lock: [ 728.194908][T16700] ffff8880268c04c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 728.194973][T16700] [ 728.194973][T16700] but task is already holding lock: [ 728.194981][T16700] ffffffff8e0756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 728.195039][T16700] [ 728.195039][T16700] which lock already depends on the new lock. [ 728.195039][T16700] [ 728.195048][T16700] [ 728.195048][T16700] the existing dependency chain (in reverse order) is: [ 728.195057][T16700] [ 728.195057][T16700] -> #5 (system_transition_mutex){+.+.}-{4:4}: [ 728.195087][T16700] mutex_lock_nested+0x5a/0x1d0 [ 728.195108][T16700] lock_system_sleep+0x49/0x70 [ 728.195129][T16700] disk_store+0xa7/0x500 [ 728.195146][T16700] kernfs_fop_write_iter+0x3b0/0x540 [ 728.195174][T16700] vfs_write+0x629/0xba0 [ 728.195195][T16700] ksys_write+0x156/0x270 [ 728.195217][T16700] do_syscall_64+0x15f/0x560 [ 728.195241][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.195258][T16700] [ 728.195258][T16700] -> #4 (&of->mutex){+.+.}-{4:4}: [ 728.195285][T16700] mutex_lock_nested+0x5a/0x1d0 [ 728.195305][T16700] kernfs_seq_start+0x5c/0x420 [ 728.195329][T16700] seq_read_iter+0x3f8/0xe20 [ 728.195352][T16700] vfs_read+0x58b/0xa80 [ 728.195369][T16700] ksys_read+0x156/0x270 [ 728.195387][T16700] do_syscall_64+0x15f/0x560 [ 728.195410][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.195427][T16700] [ 728.195427][T16700] -> #3 (&p->lock){+.+.}-{4:4}: [ 728.195453][T16700] mutex_lock_nested+0x5a/0x1d0 [ 728.195471][T16700] seq_read_iter+0xb8/0xe20 [ 728.195506][T16700] lo_rw_aio+0xc80/0xf00 [ 728.195531][T16700] loop_process_work+0x92a/0x11b0 [ 728.195554][T16700] process_one_work+0x98b/0x1630 [ 728.195580][T16700] worker_thread+0xb49/0x1140 [ 728.195608][T16700] kthread+0x388/0x470 [ 728.195626][T16700] ret_from_fork+0x514/0xb70 [ 728.195647][T16700] ret_from_fork_asm+0x1a/0x30 [ 728.195672][T16700] [ 728.195672][T16700] -> #2 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 728.195702][T16700] process_one_work+0x8d7/0x1630 [ 728.195729][T16700] worker_thread+0xb49/0x1140 [ 728.195756][T16700] kthread+0x388/0x470 [ 728.195775][T16700] ret_from_fork+0x514/0xb70 [ 728.195796][T16700] ret_from_fork_asm+0x1a/0x30 [ 728.195820][T16700] [ 728.195820][T16700] -> #1 ((wq_completion)loop4){+.+.}-{0:0}: [ 728.195848][T16700] touch_wq_lockdep_map+0xcb/0x180 [ 728.195868][T16700] __flush_workqueue+0x14b/0x14f0 [ 728.195886][T16700] drain_workqueue+0xd3/0x390 [ 728.195905][T16700] lo_release+0x287/0x8f0 [ 728.195928][T16700] bdev_release+0x541/0x660 [ 728.195955][T16700] blkdev_release+0x15/0x20 [ 728.195983][T16700] __fput+0x461/0xa70 [ 728.195999][T16700] task_work_run+0x1d9/0x270 [ 728.196021][T16700] exit_to_user_mode_loop+0xf3/0x4d0 [ 728.196043][T16700] do_syscall_64+0x33e/0x560 [ 728.196068][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.196086][T16700] [ 728.196086][T16700] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 728.196113][T16700] __lock_acquire+0x15a5/0x2d10 [ 728.196134][T16700] lock_acquire+0x106/0x350 [ 728.196155][T16700] mutex_lock_nested+0x5a/0x1d0 [ 728.196174][T16700] bdev_open+0xe0/0xcc0 [ 728.196197][T16700] bdev_file_open_by_dev+0x1be/0x240 [ 728.196224][T16700] swsusp_check+0x56/0x490 [ 728.196245][T16700] software_resume+0x51/0x4c0 [ 728.196272][T16700] resume_store+0x333/0x4f0 [ 728.196289][T16700] kernfs_fop_write_iter+0x3b0/0x540 [ 728.196315][T16700] vfs_write+0x629/0xba0 [ 728.196337][T16700] ksys_write+0x156/0x270 [ 728.196357][T16700] do_syscall_64+0x15f/0x560 [ 728.196384][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.196404][T16700] [ 728.196404][T16700] other info that might help us debug this: [ 728.196404][T16700] [ 728.196412][T16700] Chain exists of: [ 728.196412][T16700] &disk->open_mutex --> &of->mutex --> system_transition_mutex [ 728.196412][T16700] [ 728.196447][T16700] Possible unsafe locking scenario: [ 728.196447][T16700] [ 728.196454][T16700] CPU0 CPU1 [ 728.196461][T16700] ---- ---- [ 728.196468][T16700] lock(system_transition_mutex); [ 728.196484][T16700] lock(&of->mutex); [ 728.196509][T16700] lock(system_transition_mutex); [ 728.196526][T16700] lock(&disk->open_mutex); [ 728.196540][T16700] [ 728.196540][T16700] *** DEADLOCK *** [ 728.196540][T16700] [ 728.196547][T16700] 5 locks held by syz.6.3063/16700: [ 728.196560][T16700] #0: ffff88802784b128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 728.196612][T16700] #1: ffff888035ec4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 728.196667][T16700] #2: ffff88803d9d7878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 728.196722][T16700] #3: ffff88801e298968 (kn->active#70){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 728.196783][T16700] #4: ffffffff8e0756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 728.196836][T16700] [ 728.196836][T16700] stack backtrace: [ 728.196852][T16700] CPU: 0 UID: 0 PID: 16700 Comm: syz.6.3063 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 728.196883][T16700] Tainted: [L]=SOFTLOCKUP [ 728.196890][T16700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 728.196902][T16700] Call Trace: [ 728.196910][T16700] [ 728.196921][T16700] dump_stack_lvl+0xe8/0x150 [ 728.196947][T16700] print_circular_bug+0x2e1/0x300 [ 728.196977][T16700] check_noncircular+0x12e/0x150 [ 728.197006][T16700] __lock_acquire+0x15a5/0x2d10 [ 728.197036][T16700] ? bd_prepare_to_claim+0x417/0x4a0 [ 728.197063][T16700] ? bdev_open+0xe0/0xcc0 [ 728.197088][T16700] lock_acquire+0x106/0x350 [ 728.197112][T16700] ? bdev_open+0xe0/0xcc0 [ 728.197140][T16700] ? bdev_open+0xe0/0xcc0 [ 728.197169][T16700] ? bdev_open+0xe0/0xcc0 [ 728.197195][T16700] mutex_lock_nested+0x5a/0x1d0 [ 728.197216][T16700] ? bdev_open+0xe0/0xcc0 [ 728.197244][T16700] bdev_open+0xe0/0xcc0 [ 728.197272][T16700] bdev_file_open_by_dev+0x1be/0x240 [ 728.197301][T16700] swsusp_check+0x56/0x490 [ 728.197320][T16700] software_resume+0x51/0x4c0 [ 728.197345][T16700] resume_store+0x333/0x4f0 [ 728.197360][T16700] ? sysfs_file_kobj+0x1a/0x230 [ 728.197385][T16700] ? __pfx_resume_store+0x10/0x10 [ 728.197402][T16700] ? sysfs_file_kobj+0x1a/0x230 [ 728.197426][T16700] ? sysfs_file_kobj+0x1e4/0x230 [ 728.197450][T16700] ? sysfs_kf_write+0x166/0x260 [ 728.197467][T16700] ? __pfx_sysfs_kf_write+0x10/0x10 [ 728.197483][T16700] kernfs_fop_write_iter+0x3b0/0x540 [ 728.197517][T16700] vfs_write+0x629/0xba0 [ 728.197538][T16700] ? __pfx_vfs_write+0x10/0x10 [ 728.197560][T16700] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 728.197586][T16700] ? lockdep_hardirqs_on+0x7a/0x110 [ 728.197613][T16700] ? mutex_lock_nested+0x152/0x1d0 [ 728.197633][T16700] ? fdget_pos+0x252/0x320 [ 728.197655][T16700] ksys_write+0x156/0x270 [ 728.197677][T16700] ? __pfx_ksys_write+0x10/0x10 [ 728.197703][T16700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.197724][T16700] do_syscall_64+0x15f/0x560 [ 728.197751][T16700] ? trace_irq_disable+0x3b/0x140 [ 728.197774][T16700] ? clear_bhb_loop+0x40/0x90 [ 728.197797][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.197816][T16700] RIP: 0033:0x7f1d69d0ce59 [ 728.197835][T16700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.197852][T16700] RSP: 002b:00007f1d67f66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 728.197874][T16700] RAX: ffffffffffffffda RBX: 00007f1d69f85fa0 RCX: 00007f1d69d0ce59 [ 728.197890][T16700] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 728.197905][T16700] RBP: 00007f1d69da2d6f R08: 0000000000000000 R09: 0000000000000000 [ 728.197919][T16700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.197933][T16700] R13: 00007f1d69f86038 R14: 00007f1d69f85fa0 R15: 00007ffea3d90ea8 [ 728.197957][T16700] [ 728.198230][T16700] PM: Image not found (code -22) [ 728.940519][ T4934] Bluetooth: hci0: command 0x0406 tx timeout [ 729.100437][ T4934] Bluetooth: hci5: command 0x0c1a tx timeout [ 729.166037][ T8413] usb 2-1: USB disconnect, device number 95 [ 729.400504][ T13] hsr_slave_1: left promiscuous mode [ 729.401220][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.401243][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.442348][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.442372][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.500762][ T13] veth1_macvtap: left promiscuous mode [ 729.500802][ T13] veth0_macvtap: left promiscuous mode [ 729.500867][ T13] veth1_vlan: left promiscuous mode [ 729.500925][ T13] veth0_vlan: left promiscuous mode [ 729.980861][ T13] ` (unregistering): Port device macvlan1 removed [ 730.100736][ T13] ` (unregistering): Port device team_slave_1 removed [ 730.140910][ T13] ` (unregistering): Port device team_slave_0 removed [ 730.272869][T16476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 730.302802][T16476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.303512][T16476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 730.343947][T16476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.344931][T16476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 730.384388][T16476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.385113][T16476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 730.422951][T16476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 730.537435][T16476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.553582][T16476] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.558686][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.558773][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.619360][T16476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 730.619385][T16476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 730.643361][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.643418][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.041894][T16476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.128922][T16476] veth0_vlan: entered promiscuous mode [ 731.146186][T16476] veth1_vlan: entered promiscuous mode [ 731.226753][T16476] veth0_macvtap: entered promiscuous mode [ 731.234442][T16476] veth1_macvtap: entered promiscuous mode [ 731.254708][T16476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.262055][T16476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.285117][ T1429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.285906][ T1429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.285945][ T1429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.285979][ T1429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.502450][T16476] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 731.526613][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.526636][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.528672][T16476] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 731.566223][ T1429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.566262][ T1429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50