last executing test programs: 3m48.974866835s ago: executing program 3 (id=488): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xa31e2000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc84) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 3m48.004181748s ago: executing program 3 (id=499): r0 = socket(0x8, 0x1, 0x0) (async) io_setup(0x5, &(0x7f0000000440)=0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) (async, rerun: 32) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r3 = syz_open_dev$radio(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000280)={0x0, 0x1, 0x400}) (async) syz_usb_connect(0x0, 0x54, &(0x7f0000001b00)=ANY=[@ANYBLOB="12015002b186260843195722d9ad010203010902420001c003804009047cd4020ab22501062406000184052400d8be0d240f01050000000300d90d0406241a03000009050900080003065109050f020800070303"], &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x3, 0x0, r2, 0x0}]) (async, rerun: 64) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000180)) fadvise64(0xffffffffffffffff, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) (async) madvise(&(0x7f00004e4000/0x3000)=nil, 0x3000, 0x3) 3m47.726057289s ago: executing program 3 (id=501): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x22c200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000001fc0)) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101300) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x5, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 3m47.591390822s ago: executing program 3 (id=503): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 3m47.51854431s ago: executing program 3 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1e0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x10048, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0xe845, 0x0, 0x0, 0x3, 0x1, 0xc}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex:\x88\xfe\xf7\x01') chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12050, r1, 0xfdfff000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) recvmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f0000000340)=@generic, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)=""/104, 0x68}], 0x1, &(0x7f00000004c0)=""/237, 0xed}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada68531ae03f1bb0b359b18b6d79166b19d986d6a6a09da8e03277") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 3m47.419124212s ago: executing program 3 (id=506): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='netdevsim0\x00', 0xd) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @multicast1}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0xe0000000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0x22) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x40000000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c02800000000000000300"], 0x51) close(0xffffffffffffffff) r1 = getpid() syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x8000, 0xf829, 0x7, 0xbc40, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x65, 0x0, 0x1f, 0x29, 0x0, @remote, @local, {[@timestamp={0x44, 0x14, 0x3d, 0x0, 0x7, [0x7ff, 0x6be, 0x3, 0x2]}, @timestamp={0x44, 0x14, 0x67, 0x0, 0x1, [0x4, 0x3, 0x2, 0x4]}, @noop, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x6, 0x10, "d3a9913b94320d28c27ae834ca70"}, {0x5, 0xe, "4a7bc407ae6c16f0c0dca8b7"}, {0x1, 0x3, "8c"}, {0x0, 0xf, "47fcc258cfb7131dd501d106ff"}, {0x1, 0x7, "0da697f835"}]}, @lsrr={0x83, 0x7, 0x95, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x8e, [@local, @dev={0xac, 0x14, 0x14, 0x27}, @empty, @private=0xa010101]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0xc4, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10000800}, 0x4000001) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) close(0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 3m31.93564844s ago: executing program 32 (id=506): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='netdevsim0\x00', 0xd) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @multicast1}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0xe0000000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0x22) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x40000000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c02800000000000000300"], 0x51) close(0xffffffffffffffff) r1 = getpid() syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x8000, 0xf829, 0x7, 0xbc40, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x65, 0x0, 0x1f, 0x29, 0x0, @remote, @local, {[@timestamp={0x44, 0x14, 0x3d, 0x0, 0x7, [0x7ff, 0x6be, 0x3, 0x2]}, @timestamp={0x44, 0x14, 0x67, 0x0, 0x1, [0x4, 0x3, 0x2, 0x4]}, @noop, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x6, 0x10, "d3a9913b94320d28c27ae834ca70"}, {0x5, 0xe, "4a7bc407ae6c16f0c0dca8b7"}, {0x1, 0x3, "8c"}, {0x0, 0xf, "47fcc258cfb7131dd501d106ff"}, {0x1, 0x7, "0da697f835"}]}, @lsrr={0x83, 0x7, 0x95, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x8e, [@local, @dev={0xac, 0x14, 0x14, 0x27}, @empty, @private=0xa010101]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0xc4, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10000800}, 0x4000001) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) close(0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 2m57.018601287s ago: executing program 2 (id=778): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x10a}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r3, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r3, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{0x3, 0x4}, {0xff, 0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x4, @tick=0x9, {}, {}, @addr={0x0, 0x3}}], 0x54) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r3, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r3, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick=0x8, {}, {}, @quote={{0x0, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x4}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick=0x9, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x1, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0xdd, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r3, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0xb}, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3]}}, {0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r3, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x4, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r3, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r3, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r3, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xfea}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/49}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x202a80, 0x0) 2m56.912220309s ago: executing program 2 (id=779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) read$FUSE(r4, 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r5, 0xc3a51000) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0xbc6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x2c) creat(&(0x7f0000000080)='./file0\x00', 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r9], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r13, 0xaea2, 0xff) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r14, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESDEC=r6, @ANYBLOB="0100fcffffff000000001d00000008000300", @ANYRES32=r11, @ANYBLOB="38002f800c0002000203aaaaaaaaaaaa0800010000000000060003"], 0x54}}, 0x44040) r15 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r15, 0x80000000) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090222000100000000090400000129fddd6333ef"], 0x0) 2m55.895544812s ago: executing program 2 (id=785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba350000003a0000000700ff02000000000000000000000000000189"], 0xfdef) 2m55.554989037s ago: executing program 2 (id=789): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r6, 0xf648d000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x2, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x100000, 0xa, 0x8, 0x80, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x3000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x120, 0x8, 0x8000, 0x2000, [0x400, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 2m55.29588622s ago: executing program 2 (id=792): r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r3, 0xf648b000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m55.177954119s ago: executing program 2 (id=794): openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) (async) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)={0x24900, 0x152}, 0x18) 2m39.947999924s ago: executing program 33 (id=794): openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) (async) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)={0x24900, 0x152}, 0x18) 9.214171701s ago: executing program 5 (id=1610): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.311558613s ago: executing program 4 (id=1623): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000d80)={0x6, @remote, 0x4e23, 0x1, 'none\x00', 0x12, 0x10, 0x45}, 0x2c) userfaultfd(0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2, 0x0, 0x4}}, 0x2e) 6.266843853s ago: executing program 4 (id=1624): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d040ec200000000000109022d00010000100009040006040300000009212f00020122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x7, "ff002021d39aa79ef7f4000000000900"}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.168568261s ago: executing program 5 (id=1625): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x1) socket$inet(0x2, 0x80000, 0xaaec) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 6.027211123s ago: executing program 5 (id=1627): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) syz_usb_connect(0xf4175eb3f2bfb60d, 0x2d, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@overlay={0x80000001, 0x2, 0x4, 0x4, 0x8000, {0x77359400}, {0x5, 0x8, 0x2, 0x1, 0x3, 0x8, "a67fa65c"}, 0x4, 0x3, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) landlock_create_ruleset(&(0x7f00000002c0)={0x4055}, 0xfffffeb6, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e23, @empty}}, 0xfffffffe, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69ad, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r7, 0x600000}, &(0x7f00000000c0)=0xc) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r10, 0x114, 0xa, &(0x7f0000000340)={0x2, "8c5e"}, 0x3) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {r8, r9/1000+10000}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5, 0x1, {}, 0x1040000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x8010, r0, 0x2000) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_GET_PIT(r12, 0xc048ae65, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 5.368183538s ago: executing program 1 (id=1629): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') pread64(r0, &(0x7f0000000040)=""/211, 0xd3, 0x76) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 5.255298369s ago: executing program 1 (id=1630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) (async) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r4, 0x10009}, 0x8) (async) mlockall(0x2) (async, rerun: 64) brk(0x689d80000000) (async, rerun: 64) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) (async) r6 = syz_clone(0x26044600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0x1a, r6, 0xba, &(0x7f0000000040)) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000100)={r8, 0xe5e6}, &(0x7f0000000140)=0x8) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r10, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251800000008000300", @ANYRES32=r2, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async, rerun: 32) listxattr(&(0x7f0000001b00)='./cgroup\x00', &(0x7f0000001cc0)=""/47, 0x2f) (async, rerun: 32) ioprio_set$pid(0x1, 0x0, 0x0) (async) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r11, r5, 0x0, 0x7ffff000) 5.198825944s ago: executing program 1 (id=1631): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x93774000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x16) socket$packet(0x11, 0x0, 0x300) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f00000001c0)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="f3a50f09cbd0640f01c4660f38817ac5baf80c66b814370f8766efbafc0cb000ef0f01c40f07568000048e3665660ff5649ff082622463baf80c66b8b8ba8a8966efbafc0cec8ed8", 0x48}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0xf, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) gettid() 4.885479225s ago: executing program 1 (id=1632): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_DELSETELEM={0xe0, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc0, 0x3, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x38}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x138}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) 4.7313642s ago: executing program 1 (id=1633): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.206290504s ago: executing program 4 (id=1634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000092e1300833280102d52a000000010902"], 0x0) sendto$inet6(r0, &(0x7f0000000080)="fb08", 0x2, 0x4000001, 0x0, 0x0) 2.952553929s ago: executing program 4 (id=1635): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd0004110004"], 0x10da) (async, rerun: 64) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 2.571022828s ago: executing program 5 (id=1637): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = dup2(r0, r0) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) (fail_nth: 3) 2.570744407s ago: executing program 0 (id=1638): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x8e629000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1c3042, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) (async) getdents64(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.297068822s ago: executing program 5 (id=1639): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c000280060006"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14142323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) fadvise64(r0, 0x7, 0x1ff, 0x1) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 2.19182219s ago: executing program 0 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1}, 0xd}], 0x1, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 2.042812447s ago: executing program 0 (id=1641): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000000000002600000018000180140002006c6f00"], 0x2c}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r4, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000240)={"2ebf21c25a00950f0c08533b4df9a715", 0x0, 0x0, {0xfff, 0x2}, {0x7, 0x5}, 0x6eb, [0x10000, 0x2, 0x0, 0x43, 0xffff, 0x8c, 0xc4, 0x3, 0x4, 0x5, 0x10, 0x1, 0x0, 0x2, 0x71dc, 0x8]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000001480)={{r0}, r6, 0x0, @inherit={0x90, &(0x7f0000000340)={0x1, 0x9, 0x8e, 0xffffffff, {0x4, 0x6, 0x0, 0xfffffffffffffffe, 0x10}, [0x8, 0x1, 0x7, 0x864, 0xffffffffffffffff, 0xc1de, 0x118, 0x100, 0x3ff]}}, @name="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"}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x400, 0x40, &(0x7f0000000100)) 1.790308693s ago: executing program 1 (id=1642): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x82, 0x2, "8325"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="208402"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x0, 0x1, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0xddf4a1e266857d54, 0x3, 0x2, {0x2, 0x23}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000600)={0x20, 0x22, 0x100, {0x100, 0xb, "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"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x0, 0xf, "8185d80a", "1f2b5302"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc7, 0x1, 0x4, 0x7, 0x1e, 0xa, 0x4}}}, &(0x7f0000000d00)={0x84, &(0x7f00000007c0)={0x40, 0x3, 0x2d, "3eb0d4666962c6e8e95aef049e10810671133f1959d0f183725c20b788615248bd68d586a6a79b914b9928dbac"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0x770f]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000980)={0x40, 0xb, 0x2, "c8e8"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000ac0)={0x40, 0x17, 0x6}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "8b92"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x9}}) 1.343525603s ago: executing program 5 (id=1643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000092e1300833280102d52a000000010902"], 0x0) sendto$inet6(r0, &(0x7f0000000080)="fb08", 0x2, 0x4000001, 0x0, 0x0) 1.343237281s ago: executing program 4 (id=1644): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.107143094s ago: executing program 0 (id=1645): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_int(r1, 0x0, 0x15, 0x0, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) 964.091271ms ago: executing program 0 (id=1646): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000614010029bd7000ffdbdf250800", @ANYRES32=r0], 0x40}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x1, 0x460100) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000002004e20e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000133c55d00"/272], 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc17a) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000003640)}, 0x81}], 0x1, 0x2100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r4, 0x2000, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f048}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0xe91) 863.574961ms ago: executing program 0 (id=1647): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 4 (id=1648): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="08001efbb07d5a6e", 0x8}], 0x1}, 0x48d0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r3, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r3, 0x0, &(0x7f0000000000)="b7", 0x0, 0xffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000000480)='}', 0x1, 0x7ff}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f0000000340)="fe", 0x1, 0xd372}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000180)={0x17, r3, 0xc2, 0xffffffff}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000440)={0xf, {"a2e3ad21e08eeb661b5d350987f70e06d038e7ff7fc6e5539b0d750e8b089b3f363b68090890e0878f0e1ac6e7049b3b48959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07610936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc007000c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63da1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e6409000000000000002fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec1109110900d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e1505f6bf39ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97912507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000010000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227eabc1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987bc0c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b649f07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edeae4d24ad0465f3927f889b813076a882e8020f06c47f8156832369c33076da865d258734dd73583df292892448839ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a54218cf30000000006516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd452ad9a9333816db71e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059ec01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c27155005e797b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc008e595f437491d87abed02c67141a360c3ace48aee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c409000c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7fdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e44e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333b25bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475fb7807fb33b72685ec37a2d3f7664fe2f0459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b65208000000d56fed0000bb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5dd40b0000000000005f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128060000008261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb00600000000000000dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69cce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): max is 0 [ 294.514462][ T5926] usb 2-1: config 179 has no interface number 0 [ 294.521384][ T5926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 294.532931][ T5926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 294.544376][ T5926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.556190][ T5926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 294.567744][ T5926] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 294.581595][ T5926] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 294.590928][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.602528][T10260] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 294.608699][ T5906] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 294.774266][ T5906] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 294.784264][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.792491][ T5906] usb 1-1: Product: syz [ 294.796868][ T5906] usb 1-1: Manufacturer: syz [ 294.801669][ T5906] usb 1-1: SerialNumber: syz [ 294.819330][ T5906] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 294.858397][ T5926] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 294.875501][ T5896] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input13 [ 295.042955][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 295.051321][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 295.061199][ T5896] usb 2-1: USB disconnect, device number 77 [ 295.113312][ T43] usb 1-1: USB disconnect, device number 65 [ 295.245906][T10275] binder: BINDER_SET_CONTEXT_MGR already set [ 295.255227][T10275] binder: 10273:10275 ioctl 4018620d 200000000100 returned -16 [ 295.266433][T10274] binder: BINDER_SET_CONTEXT_MGR already set [ 295.272605][T10274] binder: 10273:10274 ioctl 4018620d 2000000002c0 returned -16 [ 295.280908][T10274] binder_alloc: 10273: binder_alloc_buf, no vma [ 295.287767][T10275] binder_alloc: 10273: binder_alloc_buf, no vma [ 295.287786][T10274] binder_alloc: 10273: binder_alloc_buf, no vma [ 295.302953][T10274] binder: 10273:10274 ioctl c0306201 200000000680 returned -14 [ 295.693394][T10285] NILFS (rnullb0): couldn't find nilfs on the device [ 295.838948][ T5906] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 295.930023][ T5926] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 295.942924][ T5926] ath9k_htc: Failed to initialize the device [ 295.955904][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 296.002514][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 296.010470][ T5906] usb 2-1: config 2 has an invalid interface number: 240 but max is 0 [ 296.022723][ T5906] usb 2-1: config 2 has no interface number 0 [ 296.030405][ T5906] usb 2-1: config 2 interface 240 altsetting 162 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 296.045479][ T5906] usb 2-1: config 2 interface 240 has no altsetting 0 [ 296.055899][ T5906] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.2e [ 296.065607][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=14 [ 296.074178][ T5906] usb 2-1: Product: syz [ 296.079097][ T5906] usb 2-1: Manufacturer: syz [ 296.083835][ T5906] usb 2-1: SerialNumber: syz [ 296.332760][ T5906] usb 2-1: USB disconnect, device number 78 [ 296.453168][T10297] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1127'. [ 296.599904][T10300] XFS (rnullb0): Invalid superblock magic number [ 296.661753][ T5896] psmouse serio7: Failed to reset mouse on : -5 [ 296.728168][T10307] netlink: 'syz.5.1129': attribute type 4 has an invalid length. [ 296.751082][T10307] netlink: 'syz.5.1129': attribute type 4 has an invalid length. [ 296.989051][T10320] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 297.108669][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 297.141294][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.154317][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.238687][ T24] usb 1-1: device descriptor read/64, error -71 [ 297.488716][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 297.558732][ T5906] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 297.628635][ T24] usb 1-1: device descriptor read/64, error -71 [ 297.698665][ T5906] usb 2-1: device descriptor read/64, error -71 [ 297.740897][ T24] usb usb1-port1: attempt power cycle [ 297.938631][ T5906] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 298.068643][ T5906] usb 2-1: device descriptor read/64, error -71 [ 298.079098][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 298.109775][ T24] usb 1-1: device descriptor read/8, error -71 [ 298.178885][ T5906] usb usb2-port1: attempt power cycle [ 298.348711][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 298.369241][ T24] usb 1-1: device descriptor read/8, error -71 [ 298.478929][ T24] usb usb1-port1: unable to enumerate USB device [ 298.528747][ T5906] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 298.551822][ T5906] usb 2-1: device descriptor read/8, error -71 [ 298.788620][ T5906] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 298.811086][ T5906] usb 2-1: device descriptor read/8, error -71 [ 298.922169][ T5906] usb usb2-port1: unable to enumerate USB device [ 300.228920][ T5896] misc userio: Buffer overflowed, userio client isn't keeping up [ 301.134084][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 301.491667][ T5896] input: PS/2 Generic Mouse as /devices/serio7/input/input14 [ 301.678717][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 301.738622][ T5896] psmouse serio7: Failed to enable mouse on [ 301.848625][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 301.870223][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.889767][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.908516][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 301.916677][ T24] usb 1-1: SerialNumber: syz [ 301.950327][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 301.956339][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 302.138657][ T5896] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 302.153037][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.161951][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.289197][ T24] usb 1-1: USB disconnect, device number 70 [ 302.296592][ T5896] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 302.304932][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.315260][ T5896] usb 2-1: config 0 has no interface number 0 [ 302.321441][ T5896] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 302.333420][ T5896] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 302.343557][ T5906] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 302.351319][ T5896] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.365339][ T5896] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 302.374972][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.385434][ T5896] usb 2-1: config 0 descriptor?? [ 302.394479][ T5896] gspca_main: spca561-2.14.0 probing abcd:cdee [ 302.529736][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 302.536857][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.547234][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.560330][ T5906] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 302.569482][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.581652][ T5906] usb 5-1: config 0 descriptor?? [ 302.598595][ T5906] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 302.608590][ T5896] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 302.617562][ T5896] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.627153][ T5896] usb 2-1: MIDIStreaming interface descriptor not found [ 302.702614][ T5896] usb 2-1: USB disconnect, device number 83 [ 303.088349][T10401] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 1, id = 0 [ 303.558592][ T5896] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 303.688591][ T5896] usb 1-1: device descriptor read/64, error -71 [ 303.928656][ T5896] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 304.060720][ T5896] usb 1-1: device descriptor read/64, error -71 [ 304.134588][T10419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.188994][ T5896] usb usb1-port1: attempt power cycle [ 304.528717][ T5896] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 304.549219][ T5896] usb 1-1: device descriptor read/8, error -71 [ 304.788581][ T5896] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 304.809380][ T5896] usb 1-1: device descriptor read/8, error -71 [ 304.920053][ T5896] usb usb1-port1: unable to enumerate USB device [ 305.082434][ T5896] usb 5-1: USB disconnect, device number 24 [ 305.406029][ T30] audit: type=1326 audit(1754322266.127:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.1166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f78f898eb69 code=0x0 [ 305.737940][T10442] netlink: 'syz.1.1168': attribute type 10 has an invalid length. [ 306.069172][ T5896] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 306.248547][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 306.269735][ T5896] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 306.278070][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.298559][ T5896] usb 5-1: config 0 has no interface number 0 [ 306.304733][ T5896] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 306.329312][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.342146][ T5896] usb 5-1: config 0 descriptor?? [ 306.352511][ T5896] usb 5-1: selecting invalid altsetting 1 [ 306.358319][ T5896] usb 5-1: Can not set alternate setting to 1, error: -22 [ 306.383081][ T5896] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -22 [ 306.567391][ T5896] usb 5-1: USB disconnect, device number 25 [ 306.718608][ T10] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 306.869581][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 306.876642][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 306.885495][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.895786][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.904855][ T5926] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 306.915440][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.924710][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.933004][ T10] usb 1-1: Product: syz [ 306.937204][ T10] usb 1-1: Manufacturer: syz [ 306.941932][ T10] usb 1-1: SerialNumber: syz [ 307.058925][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 307.066049][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.075116][ T5926] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 307.083504][ T5926] usb 2-1: config 11 has no interface number 0 [ 307.090040][ T5926] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.100392][ T5926] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.110913][ T5926] usb 2-1: config 11 interface 244 has no altsetting 0 [ 307.121296][ T5926] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 307.130529][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.139176][ T5926] usb 2-1: Product: syz [ 307.143448][ T5926] usb 2-1: Manufacturer: syz [ 307.148105][ T5926] usb 2-1: SerialNumber: syz [ 307.372817][ T10] usb 1-1: 0:2 : does not exist [ 307.425257][ T5926] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 307.444663][ T5926] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 307.539712][ T5926] peak_usb 2-1:11.244: probe with driver peak_usb failed with error -71 [ 307.568144][ T5926] usb 2-1: USB disconnect, device number 84 [ 307.788679][ T10] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 307.834575][ T10] usb 1-1: USB disconnect, device number 75 [ 307.926860][T10482] syz.5.1181: attempt to access beyond end of device [ 307.926860][T10482] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 307.964148][T10482] vxfs: unable to read disk superblock at 1 [ 307.978836][T10482] syz.5.1181: attempt to access beyond end of device [ 307.978836][T10482] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 308.003387][T10482] vxfs: unable to read disk superblock at 8 [ 308.026643][T10482] vxfs: can't find superblock. [ 308.598585][ T43] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 308.768682][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 308.783115][ T43] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 308.798515][ T43] usb 2-1: config 0 has no interface number 0 [ 308.808675][ T43] usb 2-1: config 0 interface 184 has no altsetting 0 [ 308.828225][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 308.843475][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.854078][ T43] usb 2-1: Product: syz [ 308.858289][ T43] usb 2-1: Manufacturer: syz [ 308.865678][ T43] usb 2-1: SerialNumber: syz [ 308.876488][ T43] usb 2-1: config 0 descriptor?? [ 308.889482][ T43] smsc75xx v1.0.0 [ 309.130727][T10508] /dev/rnullb0: Can't open blockdev [ 309.501668][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 309.513867][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 309.558615][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 309.718749][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 309.735777][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 309.748547][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.811485][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.824199][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.833534][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.842693][ T10] usb 1-1: Product: syz [ 309.846898][ T10] usb 1-1: Manufacturer: syz [ 309.851988][ T10] usb 1-1: SerialNumber: syz [ 310.299145][ T10] usb 1-1: 0:2 : does not exist [ 310.751809][ T10] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 310.760701][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 310.788745][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 310.805572][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 310.827458][ T43] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 310.839745][ T10] usb 1-1: USB disconnect, device number 76 [ 310.858163][ T43] usb 2-1: USB disconnect, device number 85 [ 311.887255][T10544] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1200'. [ 311.900709][T10544] erofs (device rnullb0): cannot find valid erofs superblock [ 311.997391][T10548] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 312.011155][T10548] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 312.082558][T10550] vxfs: WRONG superblock magic 00000000 at 1 [ 312.109518][T10550] vxfs: WRONG superblock magic 00000000 at 8 [ 312.115590][T10550] vxfs: can't find superblock. [ 312.648846][ T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 312.848886][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 312.874392][ T10] usb 1-1: config 1 has an invalid interface number: 255 but max is 1 [ 312.883455][ T10] usb 1-1: config 1 has no interface number 1 [ 312.896455][ T10] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 312.925859][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 312.933863][ T10] usb 1-1: config 1 interface 255 has no altsetting 0 [ 312.946401][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 312.956961][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.967981][ T10] usb 1-1: Product: syz [ 312.974567][ T10] usb 1-1: Manufacturer: syz [ 312.984076][ T10] usb 1-1: SerialNumber: syz [ 313.245973][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 313.264976][ T10] smsusb:smsusb_probe: board id=8, interface number 255 [ 313.281252][ T10] usb 1-1: USB disconnect, device number 77 [ 313.812139][T10522] Set syz1 is full, maxelem 65536 reached [ 314.054565][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 314.166242][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1214'. [ 314.319217][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 314.474816][T10584] /dev/rnullb0: Can't open blockdev [ 314.493197][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 314.506445][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.523282][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 314.542975][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.572231][ T10] usb 5-1: config 0 descriptor?? [ 314.604888][T10587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1217'. [ 314.616396][T10586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1217'. [ 314.791898][ T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 315.570574][T10603] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10603 comm: syz.5.1221) [ 315.628038][ T30] audit: type=1800 audit(1754322276.347:14): pid=10603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1221" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=30738 res=0 errno=0 [ 316.185709][T10606] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1222'. [ 316.419717][ T5906] usb 5-1: USB disconnect, device number 26 [ 316.728868][ T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 316.878656][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 316.900943][ T24] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 316.918546][ T24] usb 1-1: config 0 has no interface number 0 [ 316.935064][ T24] usb 1-1: config 0 interface 96 has no altsetting 0 [ 316.966281][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8 [ 316.997257][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.016432][ T24] usb 1-1: Product: syz [ 317.020931][ T24] usb 1-1: Manufacturer: syz [ 317.025880][ T24] usb 1-1: SerialNumber: syz [ 317.048284][ T24] usb 1-1: config 0 descriptor?? [ 317.075717][ T24] port100 1-1:0.96: NFC: Could not find bulk-in or bulk-out endpoint [ 317.233796][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.240256][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.417760][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1227'. [ 317.471038][T10631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.588365][T10636] overlay: ./file0 is not a directory [ 317.787606][ T5896] usb 1-1: USB disconnect, device number 78 [ 317.873811][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1232'. [ 318.673478][T10660] Mount JFS Failure: -22 [ 319.101908][T10670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.117480][T10670] /dev/rnullb0: Can't open blockdev [ 319.239333][T10678] /dev/rnullb0: Can't open blockdev [ 319.244293][T10677] /dev/rnullb0: Can't open blockdev [ 319.344703][T10681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1243'. [ 319.700249][ T43] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 319.880536][ T43] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 319.889923][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.920436][ T43] usb 1-1: config 0 descriptor?? [ 320.358637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 320.388696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 320.648781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 321.608471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 321.898676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 322.753876][T10714] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 322.754493][T10706] syz.5.1250 (10706): attempted to duplicate a private mapping with mremap. This is not supported. [ 322.816544][ T43] usb 1-1: Cannot set autoneg [ 322.943467][ T43] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 322.976115][ T43] usb 1-1: USB disconnect, device number 79 [ 323.448755][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 323.608763][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 323.623543][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.633608][ T43] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 323.650737][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.670112][ T43] usb 5-1: Product: syz [ 323.679133][ T43] usb 5-1: Manufacturer: syz [ 323.683781][ T43] usb 5-1: SerialNumber: syz [ 323.699921][ T43] usb 5-1: config 0 descriptor?? [ 323.788554][ T5947] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 323.958704][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 323.966621][ T5947] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 323.975884][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.989032][ T5947] usb 1-1: config 0 descriptor?? [ 324.002542][ T5947] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 324.114138][ T43] gs_usb 5-1:0.0: Configuring for 3 interfaces [ 324.415684][ T5947] gspca_vc032x: reg_w err -71 [ 324.425623][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.435783][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.441941][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.447589][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.457381][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.465116][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.475594][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.481791][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.487343][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.497282][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.503380][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.513272][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.520359][ T43] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 324.536774][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.548494][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.564045][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.574170][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.582949][ T43] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 324.591948][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.597275][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.614738][ T5947] gspca_vc032x: Unknown sensor... [ 324.621268][ T5947] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 324.636436][ T5947] usb 1-1: USB disconnect, device number 80 [ 324.661156][ T43] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 324.689015][ T43] usb 5-1: USB disconnect, device number 27 [ 325.232224][ T5896] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 325.497831][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.526029][ T5896] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 325.956384][ T5896] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.027223][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 326.036063][ T5896] usb 2-1: SerialNumber: syz [ 326.112534][ T5896] cdc_ether 2-1:1.0: skipping garbage [ 326.121384][ T5896] usb 2-1: bad CDC descriptors [ 326.271276][ T5947] usb 2-1: USB disconnect, device number 86 [ 326.458751][ T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 326.648577][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 326.660330][ T43] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 326.668854][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.681602][ T43] usb 5-1: config 0 has no interface number 0 [ 326.711786][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 326.721083][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.734972][ T43] usb 5-1: Product: syz [ 326.758546][ T43] usb 5-1: Manufacturer: syz [ 326.770622][ T43] usb 5-1: SerialNumber: syz [ 326.780743][ T43] usb 5-1: config 0 descriptor?? [ 326.795380][ T43] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 326.801889][ T43] usb 5-1: No valid video chain found. [ 326.961689][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1269'. [ 327.059777][ T5896] usb 5-1: USB disconnect, device number 28 [ 327.201675][T10745] syz.0.1264 (10745): drop_caches: 2 [ 327.398643][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 327.558900][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 327.702337][ T10] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 327.749182][ T10] usb 2-1: config 0 has no interface number 0 [ 327.841543][ T10] usb 2-1: config 0 interface 230 has no altsetting 0 [ 327.858359][ T10] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 327.876892][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.885205][ T10] usb 2-1: Product: syz [ 328.148592][ T10] usb 2-1: Manufacturer: syz [ 328.148617][ T10] usb 2-1: SerialNumber: syz [ 328.153704][ T10] usb 2-1: config 0 descriptor?? [ 328.177710][ T10] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 328.284220][ T10] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 328.438569][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 329.038638][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 329.045708][ T24] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 329.045732][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.045747][ T24] usb 5-1: Product: syz [ 329.045758][ T24] usb 5-1: Manufacturer: syz [ 329.045769][ T24] usb 5-1: SerialNumber: syz [ 329.047817][ T24] usb 5-1: config 0 descriptor?? [ 329.056052][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 329.056074][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 329.057392][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 329.518757][ T43] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 329.558830][ T24] gspca_vc032x: reg_w err -110 [ 329.558849][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558858][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558865][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558872][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558879][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558886][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558893][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558900][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558908][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558915][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558922][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558929][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558937][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558944][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558951][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558958][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558965][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558972][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558979][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.558986][ T24] gspca_vc032x: Unknown sensor... [ 329.559041][ T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 329.673702][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.673741][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.673782][ T43] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 329.673806][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.683230][ T43] usb 1-1: config 0 descriptor?? [ 330.115811][ T43] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7 [ 330.116869][ T43] cp2112 0003:10C4:EA90.000A: parse failed [ 330.117048][ T43] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -22 [ 330.304478][ T24] usb 1-1: USB disconnect, device number 81 [ 330.462818][ T10] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 330.468957][ T10] usb 2-1: USB disconnect, device number 87 [ 330.487402][ T6035] udevd[6035]: setting owner of /dev/bus/usb/002/087 to uid=0, gid=0 failed: No such file or directory [ 330.913248][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 331.068533][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 331.078380][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.106932][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 331.124451][ T10] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 331.136413][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.147403][ T10] usb 2-1: config 0 descriptor?? [ 331.168900][ T43] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 331.209135][ T24] usb 5-1: USB disconnect, device number 29 [ 331.338563][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 331.346365][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 331.355575][ T43] usb 1-1: config 20 has an invalid interface number: 185 but max is 0 [ 331.364050][ T43] usb 1-1: config 20 has no interface number 0 [ 331.370476][ T43] usb 1-1: config 20 interface 185 has no altsetting 0 [ 331.381404][ T43] usb 1-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=f7.96 [ 331.390571][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.399090][ T43] usb 1-1: Product: syz [ 331.403288][ T43] usb 1-1: Manufacturer: syz [ 331.407918][ T43] usb 1-1: SerialNumber: syz [ 331.508710][ T5896] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 331.562280][T10796] usb usb8: usbfs: process 10796 (syz.1.1280) did not claim interface 0 before use [ 331.577608][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 331.587125][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 331.598561][ T10] usb 2-1: USB disconnect, device number 88 [ 331.630427][ T43] usb 1-1: Can not set alternate setting to 1, error: -71 [ 331.637660][ T43] synaptics_usb 1-1:20.185: probe with driver synaptics_usb failed with error -71 [ 331.654451][ T43] usb 1-1: USB disconnect, device number 82 [ 331.669006][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 331.683352][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.695126][ T5896] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 331.704653][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.715543][ T5896] usb 5-1: config 0 descriptor?? [ 332.127257][T10804] openvswitch: netlink: Duplicate or invalid key (type 0). [ 332.132219][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.139650][T10804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.145631][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.176906][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.189432][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.196213][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.206581][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.220470][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.227755][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.234576][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.241536][ T5896] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 332.255453][ T5896] kye 0003:0458:0087.000B: hidraw0: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 332.335874][ T5906] usb 5-1: USB disconnect, device number 30 [ 332.388645][ T43] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 332.468951][ T24] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 332.587100][ T43] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 332.608670][ T43] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 332.624677][ T43] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 332.636277][ T43] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 332.649743][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 332.656951][ T43] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 332.668543][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.676897][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 332.710319][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 332.752800][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 332.773091][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.794595][ T24] usb 1-1: Product: syz [ 332.809066][ T24] usb 1-1: Manufacturer: syz [ 332.813866][ T24] usb 1-1: SerialNumber: syz [ 332.849462][ T24] usb 1-1: config 0 descriptor?? [ 332.881002][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 332.908896][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 332.927877][ T43] ath6kl: Failed to submit usb control message: -71 [ 332.955356][ T43] ath6kl: unable to send the bmi data to the device: -71 [ 332.966762][ T43] ath6kl: Unable to send get target info: -71 [ 332.989267][ T43] ath6kl: Failed to init ath6kl core: -71 [ 332.996742][ T43] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 333.043490][ T43] usb 2-1: USB disconnect, device number 89 [ 333.483402][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 333.496232][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 333.788616][ T5947] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 333.941955][ T5947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.952613][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.965849][ T5947] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 333.975013][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.985788][ T5947] usb 2-1: config 0 descriptor?? [ 334.411321][ T5947] usb 2-1: string descriptor 0 read error: -71 [ 334.430399][ T5947] usb 2-1: USB disconnect, device number 90 [ 334.498767][ T5919] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 334.522366][ T24] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 334.531043][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 334.537721][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 334.545340][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 334.552179][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 334.559928][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 334.573905][ T24] usb 1-1: USB disconnect, device number 83 [ 334.648682][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 334.657870][ T5919] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 334.667043][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.675313][ T5919] usb 5-1: Product: syz [ 334.679826][ T5919] usb 5-1: Manufacturer: syz [ 334.684551][ T5919] usb 5-1: SerialNumber: syz [ 334.691665][ T5919] usb 5-1: config 0 descriptor?? [ 334.699993][ T5919] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 334.901931][T10827] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 334.911144][ T5919] gp8psk: usb in 128 operation failed. [ 334.919580][ T5919] gp8psk: usb in 137 operation failed. [ 334.925103][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.942811][ T5919] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 334.960287][ T5919] usb 5-1: media controller created [ 334.996335][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.021543][ T5919] gp8psk_fe: Frontend revision 1 attached [ 335.027862][ T5919] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 335.036913][ T5919] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 335.268778][ T5919] gp8psk: usb in 138 operation failed. [ 335.268824][ T5919] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 335.268840][ T5919] gp8psk: found Genpix USB device pID = 201 (hex) [ 335.414994][ T5919] usb 5-1: USB disconnect, device number 31 [ 335.512741][ T5919] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 336.318566][ T5919] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 336.470629][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.470669][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.470711][ T5919] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 336.470744][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.474192][ T5919] usb 5-1: config 0 descriptor?? [ 336.828540][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 336.922926][ T5919] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000C/input/input17 [ 336.949400][ T5919] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 336.980593][ T10] usb 2-1: config 241 has an invalid interface number: 0 but max is -1 [ 336.980626][ T10] usb 2-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 336.980677][ T10] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 336.980702][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.993774][ T10] usbhid 2-1:241.0: couldn't find an input interrupt endpoint [ 337.206978][ T10] usb 2-1: USB disconnect, device number 91 [ 337.274483][ T5906] usb 5-1: USB disconnect, device number 32 [ 337.942314][T10867] netlink: set zone limit has 4 unknown bytes [ 337.951190][T10867] netlink: del zone limit has 4 unknown bytes [ 338.094080][ T5919] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 338.128848][ T5926] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 338.270683][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 338.317629][ T5926] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 338.388552][ T5926] usb 2-1: config 0 has no interface number 0 [ 338.388622][ T5926] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 338.388651][ T5926] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 338.388680][ T5926] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 338.388712][ T5926] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 338.388738][ T5926] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 338.388765][ T5926] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 338.388812][ T5926] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 338.388837][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.410144][ T5926] usb 2-1: config 0 descriptor?? [ 338.411914][T10865] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 338.412056][T10865] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 338.417064][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.417127][ T5919] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 338.417150][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.429022][ T5926] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 338.436816][ T5919] usb 5-1: config 0 descriptor?? [ 338.636375][ T5926] usb 2-1: USB disconnect, device number 92 [ 338.650488][ T5926] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 339.016183][ T5919] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 339.419819][ T5926] usb 5-1: USB disconnect, device number 33 [ 339.508590][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 339.668536][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 339.681600][ T10] usb 2-1: config 0 has no interfaces? [ 339.699209][ T10] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 339.708355][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.089215][ T10] usb 2-1: config 0 descriptor?? [ 340.337812][ T10] usb 2-1: USB disconnect, device number 93 [ 340.428748][ T5919] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 340.588531][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 340.596510][ T5919] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 340.604922][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.615165][ T5919] usb 1-1: config 0 has no interface number 0 [ 340.625489][ T5919] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 340.634759][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.638565][ T5926] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 340.642921][ T5919] usb 1-1: Product: syz [ 340.655105][ T5919] usb 1-1: Manufacturer: syz [ 340.660134][ T5919] usb 1-1: SerialNumber: syz [ 340.676615][ T5919] usb 1-1: config 0 descriptor?? [ 340.686733][ T5919] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 340.693354][ T5919] usb 1-1: No valid video chain found. [ 340.831282][ T5926] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 340.840685][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.852249][ T5926] usb 5-1: config 0 descriptor?? [ 340.889109][ T5919] usb 1-1: USB disconnect, device number 84 [ 341.179139][ T10] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 341.200008][ T5926] usbhid 5-1:0.0: can't add hid device: -71 [ 341.211529][ T5926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 341.234413][ T5926] usb 5-1: USB disconnect, device number 34 [ 341.358365][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 341.370202][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 341.377897][ T10] usb 2-1: can't read configurations, error -71 [ 341.680666][ T5947] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 341.848602][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 341.855540][ T5947] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 341.880224][ T5947] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.898514][ T5947] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.908310][ T5947] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.920619][ T5947] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.935704][ T5947] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.945513][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.136692][T10923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.168979][ T5947] usb 1-1: GET_CAPABILITIES returned 0 [ 342.177236][ T5947] usbtmc 1-1:16.0: can't read capabilities [ 342.486039][T10909] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 342.487431][ T10] usb 1-1: USB disconnect, device number 85 [ 344.278726][ T5919] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 344.468566][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 344.547226][ T5919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 344.604143][ T5919] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 344.622826][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 344.648797][ T5906] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 344.668763][ T5919] usb 5-1: Product: syz [ 344.678220][ T5919] usb 5-1: Manufacturer: syz [ 344.698599][ T5919] usb 5-1: SerialNumber: syz [ 344.711412][ T5919] usb 5-1: config 0 descriptor?? [ 344.719538][T10957] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 344.874663][ T5906] usb 2-1: config 0 has no interfaces? [ 344.947561][ T5906] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 344.966003][T10957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.992140][T10957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.997260][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.019698][ T5906] usb 2-1: Product: syz [ 345.024004][ T5906] usb 2-1: Manufacturer: syz [ 345.040938][ T5906] usb 2-1: SerialNumber: syz [ 345.088739][ T5906] usb 2-1: config 0 descriptor?? [ 345.168667][ T5926] usb 5-1: USB disconnect, device number 35 [ 345.278704][ T5906] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 345.424324][T10982] program syz.1.1349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.506459][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.506509][ T5906] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 345.506527][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.510865][ T5906] usb 1-1: config 0 descriptor?? [ 345.532145][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 345.923671][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 345.931482][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 346.143977][ T5906] pwc: recv_control_msg error -71 req 04 val 1000 [ 346.154044][ T5906] pwc: recv_control_msg error -71 req 04 val 1300 [ 346.163151][ T5906] pwc: recv_control_msg error -71 req 04 val 1400 [ 346.172803][ T5906] pwc: recv_control_msg error -71 req 02 val 2000 [ 346.189687][ T5906] pwc: recv_control_msg error -71 req 02 val 2100 [ 346.264453][ T5906] pwc: recv_control_msg error -71 req 04 val 1500 [ 346.283151][ T5906] pwc: recv_control_msg error -71 req 02 val 2500 [ 346.297756][ T5906] pwc: recv_control_msg error -71 req 02 val 2400 [ 346.327727][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 346.346296][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 346.362937][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 346.428876][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 346.465925][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 346.512848][ T5906] pwc: Registered as video103. [ 346.539803][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 346.597111][ T5906] usb 1-1: USB disconnect, device number 86 [ 346.619376][ T5947] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 346.783301][ T5947] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 346.842000][ T30] audit: type=1326 audit(1754322307.537:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.5.1355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f836c38eb69 code=0x0 [ 346.903127][ T5947] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.047379][ T5947] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.202450][ T5947] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 347.252935][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.287921][ T5947] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.354962][ T5947] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 347.394503][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.587689][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.612849][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.626170][T11005] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.829199][ T5947] usb 5-1: USB disconnect, device number 36 [ 348.205096][ T10] usb 2-1: USB disconnect, device number 96 [ 350.308612][ T5947] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 350.416299][T11054] fuse: Bad value for 'fd' [ 350.458528][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 350.470364][ T5947] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 350.493237][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.511284][ T5947] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.525033][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.533723][ T5947] usb 5-1: Product: syz [ 350.538147][ T5947] usb 5-1: Manufacturer: syz [ 350.544268][ T5947] usb 5-1: SerialNumber: syz [ 350.758771][ T5947] usb 5-1: 0:2 : does not exist [ 350.778726][ T5947] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 350.821754][ T5947] usb 5-1: USB disconnect, device number 37 [ 350.866243][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.998726][ T10] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 351.161076][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 351.169606][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 351.179413][ T10] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 351.189819][ T10] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 351.200899][ T10] usb 1-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0 [ 351.210216][ T10] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.225586][ T10] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 351.234767][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.244029][ T10] usb 1-1: Product: syz [ 351.248360][ T10] usb 1-1: Manufacturer: syz [ 351.253114][ T10] usb 1-1: SerialNumber: syz [ 351.475752][ T10] usb 1-1: USB disconnect, device number 87 [ 352.270021][ T5947] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 352.289277][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 352.428662][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 352.435506][ T5947] usb 1-1: config 0 has no interfaces? [ 352.438816][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 352.441926][ T5947] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 352.455818][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.457247][ T10] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 352.470878][ T5947] usb 1-1: config 0 descriptor?? [ 352.478723][ T10] usb 5-1: config 0 has no interface number 0 [ 352.485306][ T10] usb 5-1: config 0 interface 230 has no altsetting 0 [ 352.498107][ T10] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 352.507709][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.516016][ T10] usb 5-1: Product: syz [ 352.520410][ T10] usb 5-1: Manufacturer: syz [ 352.525130][ T10] usb 5-1: SerialNumber: syz [ 352.532584][ T10] usb 5-1: config 0 descriptor?? [ 352.541132][ T10] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 352.553024][ T10] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 352.706315][ T5947] usb 1-1: USB disconnect, device number 88 [ 353.549574][T11086] loop2: detected capacity change from 0 to 7 [ 353.571605][T11086] Dev loop2: unable to read RDB block 7 [ 353.579009][T11086] loop2: unable to read partition table [ 353.585023][T11086] loop2: partition table beyond EOD, truncated [ 353.592655][T11086] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 354.987534][ T10] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 355.141100][ T5947] usb 5-1: USB disconnect, device number 38 [ 355.423208][T11113] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 355.429767][T11113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 355.437524][T11113] vhci_hcd vhci_hcd.0: Device attached [ 355.450118][T11114] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 355.460155][ T1164] vhci_hcd: stop threads [ 355.464457][ T1164] vhci_hcd: release socket [ 355.468996][ T1164] vhci_hcd: disconnect device [ 355.588603][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 355.739236][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 355.749446][ T10] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 355.758844][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.766876][ T10] usb 1-1: Product: syz [ 355.773340][ T10] usb 1-1: Manufacturer: syz [ 355.777983][ T10] usb 1-1: SerialNumber: syz [ 355.785794][ T10] usb 1-1: config 0 descriptor?? [ 355.799843][ T10] as10x_usb: device has been detected [ 355.805901][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 355.832238][ T10] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 355.917224][ T10] as10x_usb: error during firmware upload part1 [ 355.924156][ T10] Registered device Sky IT Digital Key (green led) [ 355.948747][ T5896] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 356.052194][T11109] random: crng reseeded on system resumption [ 356.092039][ T5947] usb 1-1: USB disconnect, device number 89 [ 356.131522][ T5947] Unregistered device Sky IT Digital Key (green led) [ 356.139614][ T5947] as10x_usb: device has been disconnected [ 356.147407][ T5896] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 356.170234][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.187199][ T5896] usb 5-1: Product: syz [ 356.193581][ T5896] usb 5-1: Manufacturer: syz [ 356.198403][ T5896] usb 5-1: SerialNumber: syz [ 356.214428][ T5896] r8152-cfgselector 5-1: Unknown version 0x0000 [ 356.223388][ T5896] r8152-cfgselector 5-1: config 0 descriptor?? [ 356.459890][ T5919] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 356.619269][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 356.646152][ T24] r8152-cfgselector 5-1: USB disconnect, device number 39 [ 356.653582][ T5919] usb 2-1: config 162 has an invalid interface number: 166 but max is 0 [ 356.679691][ T5919] usb 2-1: config 162 has no interface number 0 [ 356.696009][ T5919] usb 2-1: config 162 interface 166 has no altsetting 0 [ 356.707410][ T5919] usb 2-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 356.722135][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.734495][ T5919] usb 2-1: Product: syz [ 356.743585][ T5919] usb 2-1: Manufacturer: syz [ 356.749358][ T5919] usb 2-1: SerialNumber: syz [ 356.976059][ T5919] appledisplay 2-1:162.166: Could not find int-in endpoint [ 357.020129][ T5919] usbhid 2-1:162.166: couldn't find an input interrupt endpoint [ 357.040159][ T5919] usb 2-1: USB disconnect, device number 97 [ 358.790592][ T10] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 358.922522][T11173] tipc: Started in network mode [ 358.927549][T11173] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 358.935598][T11173] tipc: Enabled bearer , priority 10 [ 358.945947][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 358.954995][ T10] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 358.955026][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.955046][ T10] usb 1-1: config 0 has no interface number 0 [ 358.955095][ T10] usb 1-1: config 0 interface 224 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 359.000641][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 359.010817][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.023363][ T10] usb 1-1: Product: syz [ 359.027588][ T10] usb 1-1: Manufacturer: syz [ 359.033780][ T10] usb 1-1: SerialNumber: syz [ 359.049213][ T10] usb 1-1: config 0 descriptor?? [ 359.058211][ T10] ldusb 1-1:0.224: Interrupt in endpoint not found [ 359.148709][ T5896] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 359.171362][T11180] binder: 11179:11180 ioctl c0306201 0 returned -14 [ 359.308563][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 359.315974][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 359.327302][ T5896] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 359.336506][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.344920][ T5896] usb 5-1: Product: syz [ 359.349340][ T5896] usb 5-1: Manufacturer: syz [ 359.353968][ T5896] usb 5-1: SerialNumber: syz [ 359.361498][ T5896] usb 5-1: config 0 descriptor?? [ 359.538806][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 359.688792][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 359.696365][ T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 359.705755][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.718693][ T10] usb 2-1: config 0 descriptor?? [ 359.773575][ T5896] gs_usb 5-1:0.0: Configuring for 3 interfaces [ 359.976157][ T5896] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 359.985492][ T5896] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 360.050165][ T5947] tipc: Node number set to 10463914 [ 360.179911][ T5896] usb 5-1: USB disconnect, device number 40 [ 361.013073][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 361.097469][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 361.108314][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 361.133849][ T10] usb 2-1: USB disconnect, device number 98 [ 361.218532][ T5947] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 361.310900][ T5906] usb 1-1: USB disconnect, device number 90 [ 361.438865][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 361.453410][ T5947] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 361.463427][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.501877][ T5947] usb 5-1: Product: syz [ 361.506208][ T5947] usb 5-1: Manufacturer: syz [ 361.511010][ T5947] usb 5-1: SerialNumber: syz [ 361.613029][ T5947] usb 5-1: config 0 descriptor?? [ 361.882403][ T5947] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 363.148607][ T5906] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 363.298572][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 363.305902][ T5906] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 363.314297][ T5906] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.324201][ T5906] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.334222][ T5906] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.344242][ T5906] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.357725][ T5906] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.366904][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.527834][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880568b4c00: rx timeout, send abort [ 363.536494][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880568b4c00: 0x20100: (3) A timeout occurred and this is the connection abort to close the session. [ 363.586865][ T5906] usb 1-1: GET_CAPABILITIES returned 0 [ 363.592757][ T5906] usbtmc 1-1:16.0: can't read capabilities [ 363.706342][ T5947] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.717552][ T5947] dvbdev: DVB: registering new adapter (Terratec H7) [ 363.730435][ T5947] usb 5-1: media controller created [ 363.890771][ T5947] usb read operation failed. (-71) [ 363.903827][ T24] usb 1-1: USB disconnect, device number 91 [ 363.904769][T11217] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 363.915902][ T5947] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 363.917600][T11229] usb 1-1: usbtmc_ioctl_clear_in_halt returned -19 [ 363.940613][ T5947] usb 5-1: USB disconnect, device number 41 [ 364.018887][ T5906] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 364.168757][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 364.176287][ T5906] usb 2-1: config 0 has no interfaces? [ 364.181882][ T5906] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 364.191254][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.203072][ T5906] usb 2-1: config 0 descriptor?? [ 364.416014][ T5947] usb 2-1: USB disconnect, device number 99 [ 364.716434][ T5906] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 364.868688][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 364.875789][ T5906] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 364.884309][ T5906] usb 5-1: config 0 has no interface number 0 [ 364.893227][ T5906] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 364.902615][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.910730][ T5906] usb 5-1: Product: syz [ 364.914946][ T5906] usb 5-1: Manufacturer: syz [ 364.919656][ T5906] usb 5-1: SerialNumber: syz [ 364.927673][ T5906] usb 5-1: config 0 descriptor?? [ 364.949338][ T5947] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 364.949394][ T5906] smsc95xx v2.0.0 [ 365.100995][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.111803][ T5947] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 365.121665][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.134499][ T5947] usb 1-1: config 0 descriptor?? [ 365.318784][ T5896] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 365.345878][ T5906] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 365.354095][ T5947] usb 1-1: string descriptor 0 read error: -32 [ 365.357085][ T5906] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 365.369714][ T5947] pwc: Askey VC010 type 2 USB webcam detected. [ 365.470689][ T5896] usb 2-1: config 0 has an invalid interface number: 187 but max is 1 [ 365.479182][ T5896] usb 2-1: config 0 has an invalid interface number: 116 but max is 1 [ 365.487474][ T5896] usb 2-1: config 0 has no interface number 0 [ 365.493829][ T5896] usb 2-1: config 0 has no interface number 1 [ 365.502491][ T5896] usb 2-1: config 0 interface 116 altsetting 64 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 365.513669][ T5896] usb 2-1: config 0 interface 187 has no altsetting 0 [ 365.520872][ T5896] usb 2-1: config 0 interface 116 has no altsetting 0 [ 365.533960][ T5896] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 4.61 [ 365.543184][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.551283][ T5896] usb 2-1: Product: syz [ 365.555585][ T5896] usb 2-1: Manufacturer: syz [ 365.560482][ T5896] usb 2-1: SerialNumber: syz [ 365.569322][ T5896] usb 2-1: config 0 descriptor?? [ 365.584529][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 365.594737][ T5947] pwc: recv_control_msg error -32 req 02 val 2700 [ 365.603814][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 365.616012][ T5947] pwc: recv_control_msg error -32 req 04 val 1000 [ 365.623296][ T5947] pwc: recv_control_msg error -32 req 04 val 1300 [ 365.630970][ T5947] pwc: recv_control_msg error -32 req 04 val 1400 [ 365.638190][ T5947] pwc: recv_control_msg error -32 req 02 val 2000 [ 365.790933][ T5896] snd-usb-6fire 2-1:0.187: unable to receive device firmware state. [ 365.799142][ T5896] snd-usb-6fire 2-1:0.187: probe with driver snd-usb-6fire failed with error -71 [ 365.820524][ T5896] usb 2-1: USB disconnect, device number 100 [ 365.846205][ T5947] pwc: recv_control_msg error -71 req 04 val 1500 [ 365.858321][ T5947] pwc: recv_control_msg error -71 req 02 val 2500 [ 365.865835][ T5947] pwc: recv_control_msg error -71 req 02 val 2400 [ 365.876264][ T5947] pwc: recv_control_msg error -71 req 02 val 2600 [ 365.884536][ T5947] pwc: recv_control_msg error -71 req 02 val 2900 [ 365.894539][ T5947] pwc: recv_control_msg error -71 req 02 val 2800 [ 365.901819][ T5947] pwc: recv_control_msg error -71 req 04 val 1100 [ 365.908820][ T5947] pwc: recv_control_msg error -71 req 04 val 1200 [ 365.917580][ T5947] pwc: Registered as video103. [ 365.930094][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 365.975129][ T5947] usb 1-1: USB disconnect, device number 92 [ 366.320233][T11251] erofs (device rnullb0): cannot find valid erofs superblock [ 367.971718][T11271] smc: net device bond0 applied user defined pnetid SYZ0 [ 368.052333][T11274] NILFS (rnullb0): couldn't find nilfs on the device [ 368.282171][ T5906] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 368.282563][ T5906] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 368.288242][ T5906] usb 5-1: USB disconnect, device number 42 [ 369.740279][ T5947] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 369.811321][T11307] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 369.833955][T11307] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 369.863723][T11307] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 369.910486][ T5947] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.919900][ T5947] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 369.931490][ T5947] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.943682][ T5947] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 369.954925][ T5947] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 369.968108][ T5947] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.977930][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.986486][ T5947] usb 1-1: Product: syz [ 369.991051][ T5947] usb 1-1: Manufacturer: syz [ 370.001945][ T5947] cdc_wdm 1-1:1.0: skipping garbage [ 370.008685][ T5947] cdc_wdm 1-1:1.0: skipping garbage [ 370.017611][ T5947] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 370.205294][ T9] usb 1-1: USB disconnect, device number 93 [ 370.282838][T11293] orangefs_mount: mount request failed with -4 [ 370.534093][T11324] Bluetooth: MGMT ver 1.23 [ 371.998553][ T5919] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 372.152815][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.153337][ T5919] usb 5-1: not running at top speed; connect to a high speed hub [ 372.154337][ T5919] usb 5-1: config 5 has an invalid interface number: 85 but max is 0 [ 372.154367][ T5919] usb 5-1: config 5 has an invalid descriptor of length 146, skipping remainder of the config [ 372.154390][ T5919] usb 5-1: config 5 has no interface number 0 [ 372.154431][ T5919] usb 5-1: config 5 interface 85 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.156427][ T5919] usb 5-1: New USB device found, idVendor=0499, idProduct=1017, bcdDevice=aa.12 [ 372.156460][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.156482][ T5919] usb 5-1: Product: syz [ 372.156498][ T5919] usb 5-1: Manufacturer: syz [ 372.156515][ T5919] usb 5-1: SerialNumber: syz [ 372.320021][ T5906] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 372.390914][ T5919] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 372.430630][ T5919] snd-usb-audio 5-1:5.85: probe with driver snd-usb-audio failed with error -2 [ 372.448301][ T5919] usb 5-1: USB disconnect, device number 43 [ 372.475368][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.85/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.494657][ T5906] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.505621][ T5906] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 372.516377][ T5906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.526085][ T5906] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 372.537469][ T5906] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 372.552327][ T5906] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.561538][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.569691][ T5906] usb 1-1: Product: syz [ 372.573862][ T5906] usb 1-1: Manufacturer: syz [ 372.589036][ T5906] cdc_wdm 1-1:1.0: skipping garbage [ 372.594352][ T5906] cdc_wdm 1-1:1.0: skipping garbage [ 372.599702][ T5906] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 372.678711][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 372.788234][ T5919] usb 1-1: USB disconnect, device number 94 [ 372.828581][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 372.835349][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 372.845990][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.856876][ T9] usb 2-1: config 0 descriptor?? [ 373.031674][T11361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1498'. [ 373.975305][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 373.994604][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 374.018772][ T9] usb 2-1: USB disconnect, device number 101 [ 374.311710][T11378] sp0: Synchronizing with TNC [ 374.331986][T11378] tipc: Started in network mode [ 374.336948][T11378] tipc: Node identity 9, cluster identity 4711 [ 374.343846][T11378] tipc: Node number set to 9 [ 374.353829][T11378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.540154][T11380] netlink: 'syz.1.1505': attribute type 2 has an invalid length. [ 374.609008][ T43] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 374.652712][T11383] exFAT-fs (rnullb0): invalid boot record signature [ 374.662658][T11383] exFAT-fs (rnullb0): failed to read boot sector [ 374.670676][T11383] exFAT-fs (rnullb0): failed to recognize exfat type [ 374.725208][T11386] /dev/sg0: Can't lookup blockdev [ 374.738667][ T43] usb 5-1: device descriptor read/64, error -71 [ 374.981558][ T43] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 375.049204][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 375.128813][ T43] usb 5-1: device descriptor read/64, error -71 [ 375.188588][ T9] usb 2-1: device descriptor read/64, error -71 [ 375.239599][ T43] usb usb5-port1: attempt power cycle [ 375.398567][ T5947] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 375.428684][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 375.548698][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 375.555386][ T5947] usb 1-1: config 0 has no interfaces? [ 375.563091][ T5947] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 375.568594][ T9] usb 2-1: device descriptor read/64, error -71 [ 375.572257][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.586758][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 375.596831][ T5947] usb 1-1: config 0 descriptor?? [ 375.619308][ T43] usb 5-1: device descriptor read/8, error -71 [ 375.689620][ T9] usb usb2-port1: attempt power cycle [ 375.806551][ T5947] usb 1-1: USB disconnect, device number 95 [ 375.827191][T11407] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 375.834812][T11407] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 375.868758][ T43] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 375.890716][ T43] usb 5-1: device descriptor read/8, error -71 [ 376.009008][ T43] usb usb5-port1: unable to enumerate USB device [ 376.030656][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 376.059378][ T9] usb 2-1: device descriptor read/8, error -71 [ 376.311941][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 376.350875][ T9] usb 2-1: device descriptor read/8, error -71 [ 376.458913][ T9] usb usb2-port1: unable to enumerate USB device [ 377.697671][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 377.818516][ T43] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 378.005282][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 378.017044][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 378.028970][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 378.039388][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 378.052527][ T43] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 378.062097][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.070326][ T43] usb 1-1: Product: syz [ 378.074652][ T43] usb 1-1: Manufacturer: syz [ 378.083011][ T43] usb 1-1: SerialNumber: syz [ 378.099831][ T43] usb 1-1: config 0 descriptor?? [ 378.107777][ T43] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 378.199554][ T9] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 378.369570][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 378.396127][ T9] usb 2-1: config 0 has no interfaces? [ 378.401196][ T43] scsi host1: usb-storage 1-1:0.0 [ 378.406119][ T9] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 378.428822][ T43] usb 1-1: USB disconnect, device number 96 [ 378.433392][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.473986][ T9] usb 2-1: config 0 descriptor?? [ 378.654002][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.664099][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.690996][ T9] usb 2-1: USB disconnect, device number 106 [ 379.259561][T11476] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 379.282295][T11476] /dev/rnullb0: Can't open blockdev [ 379.608300][T11487] FAULT_INJECTION: forcing a failure. [ 379.608300][T11487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.645064][T11487] CPU: 1 UID: 0 PID: 11487 Comm: syz.5.1544 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 379.645095][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.645109][T11487] Call Trace: [ 379.645127][T11487] [ 379.645136][T11487] dump_stack_lvl+0x189/0x250 [ 379.645173][T11487] ? __pfx____ratelimit+0x10/0x10 [ 379.645203][T11487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.645232][T11487] ? __pfx__printk+0x10/0x10 [ 379.645266][T11487] ? __might_fault+0xb0/0x130 [ 379.645297][T11487] should_fail_ex+0x414/0x560 [ 379.645330][T11487] _copy_from_user+0x2d/0xb0 [ 379.645353][T11487] snd_seq_ioctl+0x1d8/0x420 [ 379.645386][T11487] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 379.645430][T11487] ? __fget_files+0x3a0/0x420 [ 379.645455][T11487] ? __fget_files+0x2a/0x420 [ 379.645483][T11487] ? bpf_lsm_file_ioctl+0x9/0x20 [ 379.645513][T11487] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 379.645540][T11487] __se_sys_ioctl+0xf9/0x170 [ 379.645564][T11487] do_syscall_64+0xfa/0x3b0 [ 379.645593][T11487] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.645620][T11487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.645641][T11487] ? clear_bhb_loop+0x60/0xb0 [ 379.645666][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.645686][T11487] RIP: 0033:0x7f836c38eb69 [ 379.645704][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.645722][T11487] RSP: 002b:00007f836d167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.645744][T11487] RAX: ffffffffffffffda RBX: 00007f836c5b5fa0 RCX: 00007f836c38eb69 [ 379.645760][T11487] RDX: 0000200000000040 RSI: 0000000040505330 RDI: 0000000000000003 [ 379.645773][T11487] RBP: 00007f836d167090 R08: 0000000000000000 R09: 0000000000000000 [ 379.645786][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.645798][T11487] R13: 0000000000000000 R14: 00007f836c5b5fa0 R15: 00007ffe92859de8 [ 379.645830][T11487] [ 380.198574][ T5947] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 380.348810][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 380.367248][ T5947] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 380.380865][ T5947] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.408738][ T5947] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.420211][ T5947] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.440555][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.458973][ T5947] usb 1-1: Product: syz [ 380.463281][ T5947] usb 1-1: Manufacturer: syz [ 380.467886][ T5947] usb 1-1: SerialNumber: syz [ 380.901610][ T5947] usb 1-1: 0:2 : does not exist [ 381.258770][ T5919] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 381.418762][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 381.420881][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.420935][ T5919] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.420987][ T5919] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.421019][ T5919] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.421046][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.421082][ T5919] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 381.421142][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.425544][ T5919] usb 2-1: config 0 descriptor?? [ 381.438526][ T9] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 381.528295][ T5947] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 381.571215][ T5947] usb 1-1: USB disconnect, device number 97 [ 381.590566][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 381.593035][ T9] usb 5-1: config 2 has an invalid interface number: 33 but max is 0 [ 381.593062][ T9] usb 5-1: config 2 has no interface number 0 [ 381.593092][ T9] usb 5-1: too many endpoints for config 2 interface 33 altsetting 247: 150, using maximum allowed: 30 [ 381.593131][ T9] usb 5-1: config 2 interface 33 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 150 [ 381.593159][ T9] usb 5-1: config 2 interface 33 has no altsetting 0 [ 381.596113][ T9] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 381.596145][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.596167][ T9] usb 5-1: Product: syz [ 381.596183][ T9] usb 5-1: Manufacturer: syz [ 381.596200][ T9] usb 5-1: SerialNumber: syz [ 381.639288][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.837410][T11515] netlink: 'syz.4.1553': attribute type 5 has an invalid length. [ 381.842172][T11515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.861316][ T5919] hid_parser_main: 152 callbacks suppressed [ 381.861346][ T5919] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 381.863598][T11515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.874237][ T5919] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 381.896556][T11515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.921530][ T5919] corsair-cpro 0003:1B1C:0C10.000E: item fetching failed at offset 2/5 [ 381.953450][T11515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.060146][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.069413][ T5919] corsair-cpro 0003:1B1C:0C10.000E: probe with driver corsair-cpro failed with error -22 [ 382.155340][ T9] go7007 5-1:2.33: probe with driver go7007 failed with error -12 [ 382.157858][ T9] usb 5-1: USB disconnect, device number 48 [ 382.381395][T11521] FAULT_INJECTION: forcing a failure. [ 382.381395][T11521] name failslab, interval 1, probability 0, space 0, times 0 [ 382.381480][T11521] CPU: 0 UID: 0 PID: 11521 Comm: syz.0.1555 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 382.381521][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.381541][T11521] Call Trace: [ 382.381553][T11521] [ 382.381568][T11521] dump_stack_lvl+0x189/0x250 [ 382.381621][T11521] ? __pfx____ratelimit+0x10/0x10 [ 382.381673][T11521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.381703][T11521] ? __pfx__printk+0x10/0x10 [ 382.381739][T11521] ? __pfx___might_resched+0x10/0x10 [ 382.381770][T11521] should_fail_ex+0x414/0x560 [ 382.381801][T11521] should_failslab+0xa8/0x100 [ 382.381824][T11521] __kmalloc_cache_noprof+0x70/0x3d0 [ 382.381844][T11521] ? snd_seq_port_connect+0x6b/0x460 [ 382.381873][T11521] snd_seq_port_connect+0x6b/0x460 [ 382.381896][T11521] ? do_raw_read_unlock+0x3d/0x80 [ 382.381927][T11521] ? _raw_read_unlock+0x28/0x50 [ 382.381958][T11521] snd_seq_ioctl_subscribe_port+0x339/0x710 [ 382.381993][T11521] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 382.382035][T11521] snd_seq_ioctl+0x254/0x420 [ 382.382068][T11521] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 382.382115][T11521] ? __fget_files+0x3a0/0x420 [ 382.382141][T11521] ? __fget_files+0x2a/0x420 [ 382.382172][T11521] ? bpf_lsm_file_ioctl+0x9/0x20 [ 382.382203][T11521] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 382.382230][T11521] __se_sys_ioctl+0xf9/0x170 [ 382.382254][T11521] do_syscall_64+0xfa/0x3b0 [ 382.382291][T11521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.382310][T11521] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.382330][T11521] ? clear_bhb_loop+0x60/0xb0 [ 382.382354][T11521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.382373][T11521] RIP: 0033:0x7fb1be38eb69 [ 382.382390][T11521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.382408][T11521] RSP: 002b:00007fb1bf2be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.382430][T11521] RAX: ffffffffffffffda RBX: 00007fb1be5b5fa0 RCX: 00007fb1be38eb69 [ 382.382444][T11521] RDX: 0000200000000040 RSI: 0000000040505330 RDI: 0000000000000003 [ 382.382457][T11521] RBP: 00007fb1bf2be090 R08: 0000000000000000 R09: 0000000000000000 [ 382.382470][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.382482][T11521] R13: 0000000000000000 R14: 00007fb1be5b5fa0 R15: 00007ffeb8022a78 [ 382.382514][T11521] [ 382.699787][ T5906] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 382.836669][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.876957][ T5906] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 382.924699][ T9] usb 2-1: USB disconnect, device number 107 [ 382.949802][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.963916][ T5906] usb 1-1: Product: syz [ 382.968180][ T5906] usb 1-1: Manufacturer: syz [ 382.981593][ T5906] usb 1-1: SerialNumber: syz [ 383.016350][ T5906] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 383.047910][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 383.318561][ T5947] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 383.459278][ T5947] usb 5-1: device descriptor read/64, error -71 [ 383.571036][ T9] usb 1-1: USB disconnect, device number 98 [ 383.728592][ T5947] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 383.799224][ T24] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 383.868617][ T5947] usb 5-1: device descriptor read/64, error -71 [ 383.948549][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 383.957985][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 383.967434][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.976000][ T24] usb 2-1: Product: syz [ 383.983176][ T5947] usb usb5-port1: attempt power cycle [ 383.989291][ T24] usb 2-1: Manufacturer: syz [ 383.994805][ T24] usb 2-1: SerialNumber: syz [ 384.002745][ T24] usb 2-1: config 0 descriptor?? [ 384.088609][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 384.098779][ T10] ath9k_htc: Failed to initialize the device [ 384.105653][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 384.214789][ T24] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 384.234940][T11534] orangefs_mount: mount request failed with -4 [ 384.348550][ T5947] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 384.369320][ T5947] usb 5-1: device descriptor read/8, error -71 [ 384.409027][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 384.573608][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 384.583045][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.591423][ T9] usb 1-1: Product: Ѕ [ 384.595574][ T9] usb 1-1: Manufacturer: Е [ 384.600213][ T9] usb 1-1: SerialNumber: ︺杹瞈実羘얱㥜꧱㤢嵫ࠞ⣝趯佘弣ౠ瞙↑諷갯斗ᡄ盹瞿㊈톬妬첒Ƌ䏇㷫誀槊金³萟柸氀죭ﴬ⎎ᔶ疪⾥Შ萐䯉挼襴쪇ᒔᢦ⫰疛꾫鷕둠ꓙ䵫ꝓ룯絮୵୨柄作쇔鈰⫺⠣̢ā歴勂固䰫ꎀ픷ꔫ蝛U䶹뗱⩲ᛱ心⸩ற [ 384.630711][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.638787][ T5947] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 384.653319][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 384.673306][ T5947] usb 5-1: device descriptor read/8, error -71 [ 384.799747][ T5947] usb usb5-port1: unable to enumerate USB device [ 384.858093][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.867245][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.877563][ T5896] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 384.878144][ T5947] usb 1-1: USB disconnect, device number 99 [ 384.905977][ T5947] usb 1-1: ath9k_htc: USB layer deinitialized [ 386.029908][ T24] usb write operation failed. (-71) [ 386.035369][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 386.036855][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 386.036921][ T24] usb 2-1: media controller created [ 386.037878][ T24] usb read operation failed. (-71) [ 386.038299][ T24] usb write operation failed. (-71) [ 386.046985][ T24] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 386.058082][ T24] usb 2-1: USB disconnect, device number 108 [ 386.180441][T11546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.628828][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 386.708588][ T43] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 386.778580][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 386.785525][ T10] usb 5-1: config 0 has no interfaces? [ 386.793031][ T10] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 386.802249][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.814223][ T10] usb 5-1: config 0 descriptor?? [ 386.858660][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 386.865724][ T43] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 386.875599][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.878697][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 386.887131][ T43] usb 2-1: config 0 descriptor?? [ 387.026401][ T10] usb 5-1: USB disconnect, device number 53 [ 387.032599][ T9] usb 1-1: device descriptor read/64, error -71 [ 387.288926][ T9] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 387.429136][ T9] usb 1-1: device descriptor read/64, error -71 [ 387.539342][ T9] usb usb1-port1: attempt power cycle [ 387.898990][ T9] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 387.908771][ T5896] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 387.919062][ T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 387.939906][ T43] asix 2-1:0.0: probe with driver asix failed with error -71 [ 387.942579][ T9] usb 1-1: device descriptor read/8, error -71 [ 387.955859][ T43] usb 2-1: USB disconnect, device number 109 [ 388.115246][ T5896] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 388.124953][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.156455][ T5896] usb 5-1: config 0 descriptor?? [ 388.219305][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 388.249869][ T9] usb 1-1: device descriptor read/8, error -71 [ 388.380399][ T9] usb usb1-port1: unable to enumerate USB device [ 388.394223][ T5896] usb 5-1: Cannot read MAC address [ 388.400094][ T5896] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 388.414810][ T5896] usb 5-1: USB disconnect, device number 54 [ 388.798765][ T43] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 388.958663][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 388.971921][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 388.983834][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.993305][ T43] usb 2-1: Product: syz [ 388.997684][ T43] usb 2-1: Manufacturer: syz [ 389.002688][ T43] usb 2-1: SerialNumber: syz [ 389.010342][ T43] usb 2-1: config 0 descriptor?? [ 389.208711][ T5896] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 389.224674][ T43] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 389.372293][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 389.382483][ T5896] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 389.391338][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.401536][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.414916][ T5896] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.424114][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.432411][ T5896] usb 5-1: Product: syz [ 389.436638][ T5896] usb 5-1: Manufacturer: syz [ 389.441539][ T5896] usb 5-1: SerialNumber: syz [ 389.856168][ T5896] usb 5-1: 0:2 : does not exist [ 390.058564][ T24] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 390.215530][ T24] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 390.224800][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.233039][ T24] usb 1-1: Product: syz [ 390.237233][ T24] usb 1-1: Manufacturer: syz [ 390.242048][ T24] usb 1-1: SerialNumber: syz [ 390.257671][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 390.264064][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 390.475885][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 390.487497][ T24] r8152-cfgselector 1-1: bad CDC descriptors [ 390.491428][ T5896] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 390.502485][ T24] r8152-cfgselector 1-1: USB disconnect, device number 104 [ 390.540037][ T5896] usb 5-1: USB disconnect, device number 55 [ 391.061896][ T43] usb write operation failed. (-71) [ 391.071514][ T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 391.087556][ T43] dvbdev: DVB: registering new adapter (Terratec H7) [ 391.094480][ T43] usb 2-1: media controller created [ 391.103526][ T43] usb read operation failed. (-71) [ 391.109590][ T43] usb write operation failed. (-71) [ 391.122871][ T43] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 391.135436][ T43] usb 2-1: USB disconnect, device number 110 [ 391.281657][ T24] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 391.499539][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 391.512414][ T24] usb 1-1: config 0 has no interfaces? [ 391.521205][ T24] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 391.531351][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.542871][ T24] usb 1-1: config 0 descriptor?? [ 391.748635][ T43] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 391.765087][ T24] usb 1-1: USB disconnect, device number 105 [ 391.888668][ T43] usb 2-1: device descriptor read/64, error -71 [ 392.058554][ T5947] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 392.128704][ T43] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 392.218682][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 392.225640][ T5947] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 392.234508][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.244850][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.256661][ T5947] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.265982][ T43] usb 2-1: device descriptor read/64, error -71 [ 392.272364][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.280807][ T5947] usb 5-1: Product: syz [ 392.285018][ T5947] usb 5-1: Manufacturer: syz [ 392.290074][ T5947] usb 5-1: SerialNumber: syz [ 392.389020][ T43] usb usb2-port1: attempt power cycle [ 392.710272][ T5947] usb 5-1: 0:2 : does not exist [ 392.730486][ T43] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 392.761436][ T43] usb 2-1: device descriptor read/8, error -71 [ 392.998640][ T43] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 393.019207][ T43] usb 2-1: device descriptor read/8, error -71 [ 393.128942][ T43] usb usb2-port1: unable to enumerate USB device [ 393.329085][ T5947] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 393.360051][ T5947] usb 5-1: USB disconnect, device number 56 [ 393.394189][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.700567][ T43] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 393.858665][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 393.873784][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 393.884033][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.894031][ T43] usb 1-1: Product: syz [ 393.898237][ T43] usb 1-1: Manufacturer: syz [ 393.902989][ T43] usb 1-1: SerialNumber: syz [ 393.910522][ T43] usb 1-1: config 0 descriptor?? [ 394.121239][ T43] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 394.128658][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 394.278509][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 394.290475][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.309199][ T10] usb 5-1: config 7 has an invalid interface number: 6 but max is 0 [ 394.317270][ T10] usb 5-1: config 7 has no interface number 0 [ 394.335943][ T10] usb 5-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254 [ 394.358474][ T10] usb 5-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.379324][ T10] usb 5-1: config 7 interface 6 has no altsetting 0 [ 394.404493][ T10] usb 5-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e [ 394.413732][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.422203][ T10] usb 5-1: Product: syz [ 394.426502][ T10] usb 5-1: Manufacturer: syz [ 394.431717][ T10] usb 5-1: SerialNumber: syz [ 394.568267][ T30] audit: type=1326 audit(1754322355.287:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11636 comm="syz.1.1596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a54d8eb69 code=0xffff0000 [ 394.752126][T11630] 9pnet: Could not find request transport: frfdno=0x0000000000000004 [ 394.783132][T11639] tipc: Enabled bearer , priority 10 [ 394.956175][T11629] tipc: Disabling bearer [ 395.485847][ T10] option 5-1:7.6: GSM modem (1-port) converter detected [ 395.509717][ T10] usb 5-1: USB disconnect, device number 57 [ 395.520768][ T10] option 5-1:7.6: device disconnected [ 395.949697][ T43] usb write operation failed. (-71) [ 395.955026][ T43] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 395.955570][ T43] dvbdev: DVB: registering new adapter (Terratec H7) [ 395.955620][ T43] usb 1-1: media controller created [ 395.956833][ T43] usb read operation failed. (-71) [ 395.957277][ T43] usb write operation failed. (-71) [ 395.967570][ T43] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 395.977355][ T43] usb 1-1: USB disconnect, device number 106 [ 396.438682][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 396.568784][ T9] usb 2-1: device descriptor read/64, error -71 [ 396.808752][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 396.893450][T11665] Mount JFS Failure: -22 [ 396.950319][ T9] usb 2-1: device descriptor read/64, error -71 [ 397.029294][T11672] NILFS (rnullb0): couldn't find nilfs on the device [ 397.058590][ T5896] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 397.068914][ T9] usb usb2-port1: attempt power cycle [ 397.114202][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.126206][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.188620][ T5896] usb 1-1: device descriptor read/64, error -71 [ 397.348512][ T43] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 397.408729][ T9] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 397.428652][ T5896] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 397.439342][ T9] usb 2-1: device descriptor read/8, error -71 [ 397.540030][ T43] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 397.550609][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.559101][ T43] usb 5-1: Product: syz [ 397.563411][ T43] usb 5-1: Manufacturer: syz [ 397.568317][ T43] usb 5-1: SerialNumber: syz [ 397.578697][ T5896] usb 1-1: device descriptor read/64, error -71 [ 397.580875][ T43] usb 5-1: config 0 descriptor?? [ 397.597376][ T43] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 397.678787][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 397.695526][ T5896] usb usb1-port1: attempt power cycle [ 397.724204][ T9] usb 2-1: device descriptor read/8, error -71 [ 397.797635][ T43] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 397.805481][ T43] sq905c 5-1:0.0: Get version command failed [ 397.811787][ T43] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 397.826254][ T43] usb 5-1: USB disconnect, device number 58 [ 397.838980][ T9] usb usb2-port1: unable to enumerate USB device [ 398.038952][ T5896] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 398.059260][ T5896] usb 1-1: device descriptor read/8, error -71 [ 398.298634][ T5896] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 398.329454][ T5896] usb 1-1: device descriptor read/8, error -71 [ 398.389931][T11687] XFS (rnullb0): Invalid superblock magic number [ 398.444833][ T5896] usb usb1-port1: unable to enumerate USB device [ 399.598574][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 399.748635][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 399.755894][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.764355][ T9] usb 2-1: config 0 has no interface number 0 [ 399.774448][ T9] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 399.785267][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888028af6c00: rx timeout, send abort [ 399.793973][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888028af6c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 399.811152][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 399.823934][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 399.853405][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.865009][ T9] usb 2-1: Product: syz [ 399.875450][ T9] usb 2-1: Manufacturer: syz [ 399.914980][ T9] usb 2-1: SerialNumber: syz [ 399.930554][ T9] usb 2-1: config 0 descriptor?? [ 400.036101][T11713] FAULT_INJECTION: forcing a failure. [ 400.036101][T11713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.051338][T11713] CPU: 1 UID: 0 PID: 11713 Comm: syz.4.1619 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 400.051368][T11713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.051382][T11713] Call Trace: [ 400.051389][T11713] [ 400.051398][T11713] dump_stack_lvl+0x189/0x250 [ 400.051431][T11713] ? __pfx____ratelimit+0x10/0x10 [ 400.051453][T11713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.051474][T11713] ? __pfx__printk+0x10/0x10 [ 400.051505][T11713] ? __might_fault+0xb0/0x130 [ 400.051537][T11713] should_fail_ex+0x414/0x560 [ 400.051567][T11713] _copy_from_user+0x2d/0xb0 [ 400.051588][T11713] ___sys_sendmsg+0x158/0x2a0 [ 400.051607][T11713] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.051659][T11713] ? __fget_files+0x2a/0x420 [ 400.051686][T11713] ? __fget_files+0x3a0/0x420 [ 400.051725][T11713] __sys_sendmmsg+0x227/0x430 [ 400.051748][T11713] ? __pfx___sys_sendmmsg+0x10/0x10 [ 400.051762][T11713] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 400.051815][T11713] ? ksys_write+0x22a/0x250 [ 400.051847][T11713] ? __pfx_ksys_write+0x10/0x10 [ 400.051874][T11713] __x64_sys_sendmmsg+0xa0/0xc0 [ 400.051896][T11713] do_syscall_64+0xfa/0x3b0 [ 400.051916][T11713] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.051937][T11713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.051957][T11713] ? clear_bhb_loop+0x60/0xb0 [ 400.051983][T11713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.052002][T11713] RIP: 0033:0x7f78f898eb69 [ 400.052020][T11713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.052039][T11713] RSP: 002b:00007f78f973c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 400.052054][T11713] RAX: ffffffffffffffda RBX: 00007f78f8bb5fa0 RCX: 00007f78f898eb69 [ 400.052067][T11713] RDX: 0400000000000174 RSI: 0000200000008380 RDI: 0000000000000003 [ 400.052077][T11713] RBP: 00007f78f973c090 R08: 0000000000000000 R09: 0000000000000000 [ 400.052087][T11713] R10: 0000000004008890 R11: 0000000000000246 R12: 0000000000000001 [ 400.052099][T11713] R13: 0000000000000000 R14: 00007f78f8bb5fa0 R15: 00007ffe3954bf58 [ 400.052132][T11713] [ 400.147015][ T9] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 400.314370][ T9] cx231xx 2-1:0.1: Failed to read PCB config [ 400.323338][ T9] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 400.342022][ T9] usb 2-1: USB disconnect, device number 119 [ 400.358919][ T10] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 400.518541][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 400.525450][ T10] usb 1-1: config 0 has no interfaces? [ 400.531798][ T10] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 400.549705][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.572192][ T10] usb 1-1: config 0 descriptor?? [ 400.783575][ T10] usb 1-1: USB disconnect, device number 111 [ 400.894894][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 401.088156][T11727] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 401.240175][ T9] usb 2-1: device descriptor read/64, error -71 [ 401.262602][T11731] /dev/rnullb0: Can't open blockdev [ 401.399358][ T5947] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 401.535254][T11742] FAULT_INJECTION: forcing a failure. [ 401.535254][T11742] name failslab, interval 1, probability 0, space 0, times 0 [ 401.548281][T11742] CPU: 1 UID: 0 PID: 11742 Comm: syz.1.1628 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 401.548310][T11742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.548322][T11742] Call Trace: [ 401.548331][T11742] [ 401.548340][T11742] dump_stack_lvl+0x189/0x250 [ 401.548375][T11742] ? __pfx____ratelimit+0x10/0x10 [ 401.548408][T11742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.548437][T11742] ? __pfx__printk+0x10/0x10 [ 401.548467][T11742] ? __pfx___might_resched+0x10/0x10 [ 401.548490][T11742] ? fs_reclaim_acquire+0x7d/0x100 [ 401.548519][T11742] should_fail_ex+0x414/0x560 [ 401.548551][T11742] should_failslab+0xa8/0x100 [ 401.548574][T11742] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 401.548596][T11742] ? __alloc_skb+0x112/0x2d0 [ 401.548630][T11742] __alloc_skb+0x112/0x2d0 [ 401.548653][T11742] alloc_skb_with_frags+0xca/0x890 [ 401.548675][T11742] ? register_lock_class+0x51/0x320 [ 401.548710][T11742] sock_alloc_send_pskb+0x857/0x990 [ 401.548755][T11742] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 401.548784][T11742] ? packet_cached_dev_get+0x1c/0x2b0 [ 401.548812][T11742] ? packet_cached_dev_get+0x1c/0x2b0 [ 401.548847][T11742] packet_sendmsg+0x33a0/0x5080 [ 401.548882][T11742] ? match_mnt_path_str+0x470/0xb40 [ 401.548926][T11742] ? __pfx___might_resched+0x10/0x10 [ 401.548952][T11742] ? count_memcg_event_mm+0x21/0x260 [ 401.548990][T11742] ? count_memcg_event_mm+0x21/0x260 [ 401.549023][T11742] ? __pfx_packet_sendmsg+0x10/0x10 [ 401.549045][T11742] ? aa_sk_perm+0x81e/0x950 [ 401.549076][T11742] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 401.549112][T11742] ? aa_sock_msg_perm+0xf1/0x1d0 [ 401.549141][T11742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.549169][T11742] ? __pfx_packet_sendmsg+0x10/0x10 [ 401.549194][T11742] __sock_sendmsg+0x21c/0x270 [ 401.549224][T11742] ____sys_sendmsg+0x52d/0x830 [ 401.549252][T11742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.549283][T11742] ? import_iovec+0x74/0xa0 [ 401.549310][T11742] ___sys_sendmsg+0x21f/0x2a0 [ 401.549334][T11742] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.549394][T11742] ? __fget_files+0x2a/0x420 [ 401.549419][T11742] ? __fget_files+0x3a0/0x420 [ 401.549457][T11742] __sys_sendmmsg+0x227/0x430 [ 401.549485][T11742] ? __pfx___sys_sendmmsg+0x10/0x10 [ 401.549505][T11742] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 401.549562][T11742] ? ksys_write+0x22a/0x250 [ 401.549588][T11742] ? __pfx_ksys_write+0x10/0x10 [ 401.549615][T11742] ? rcu_is_watching+0x15/0xb0 [ 401.549648][T11742] __x64_sys_sendmmsg+0xa0/0xc0 [ 401.549672][T11742] do_syscall_64+0xfa/0x3b0 [ 401.549701][T11742] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.549729][T11742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.549748][T11742] ? clear_bhb_loop+0x60/0xb0 [ 401.549771][T11742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.549791][T11742] RIP: 0033:0x7f7a54d8eb69 [ 401.549809][T11742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.549827][T11742] RSP: 002b:00007f7a55c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 401.549849][T11742] RAX: ffffffffffffffda RBX: 00007f7a54fb5fa0 RCX: 00007f7a54d8eb69 [ 401.549864][T11742] RDX: 0400000000000174 RSI: 0000200000008380 RDI: 0000000000000003 [ 401.549877][T11742] RBP: 00007f7a55c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 401.549890][T11742] R10: 0000000004008890 R11: 0000000000000246 R12: 0000000000000001 [ 401.549902][T11742] R13: 0000000000000000 R14: 00007f7a54fb5fa0 R15: 00007ffd6cc66248 [ 401.549933][T11742] [ 401.944481][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.954934][ T5947] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.965915][ T5947] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.975759][ T5947] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 401.988665][ T5947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 401.995334][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 402.004537][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.016419][ T5947] usb 5-1: config 0 descriptor?? [ 402.068888][ T24] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 402.210353][ T24] usb 1-1: device descriptor read/64, error -71 [ 402.448780][ T5947] logitech 0003:046D:C20E.000F: rdesc size test failed for formula gp [ 402.458055][ T5947] logitech 0003:046D:C20E.000F: unknown main item tag 0x0 [ 402.465437][ T24] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 402.489463][ T5947] logitech 0003:046D:C20E.000F: unknown main item tag 0x0 [ 402.497462][ T5947] logitech 0003:046D:C20E.000F: unknown main item tag 0x0 [ 402.518537][ T5947] logitech 0003:046D:C20E.000F: unknown main item tag 0x0 [ 402.525757][ T5947] logitech 0003:046D:C20E.000F: unknown main item tag 0x0 [ 402.538496][ T5947] logitech 0003:046D:C20E.000F: unknown main item tag 0x0 [ 402.543595][T11758] /dev/rnullb0: Can't open blockdev [ 402.545698][ T5947] logitech 0003:046D:C20E.000F: unknown main item tag 0x0 [ 402.582272][ T5947] logitech 0003:046D:C20E.000F: hidraw0: USB HID v0.2f Device [HID 046d:c20e] on usb-dummy_hcd.4-1/input0 [ 402.628547][ T24] usb 1-1: device descriptor read/64, error -71 [ 402.660914][ T9] usb 5-1: USB disconnect, device number 59 [ 402.724212][T11759] fido_id[11759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 402.742829][ T24] usb usb1-port1: attempt power cycle [ 402.918673][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 403.068639][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 403.082397][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 403.093378][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.101571][ T10] usb 2-1: Product: syz [ 403.105766][ T10] usb 2-1: Manufacturer: syz [ 403.110539][ T10] usb 2-1: SerialNumber: syz [ 403.117495][ T10] usb 2-1: config 0 descriptor?? [ 403.118570][ T24] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 403.176897][ T24] usb 1-1: device descriptor read/8, error -71 [ 403.331850][ T10] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 403.418708][ T24] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 403.439234][ T24] usb 1-1: device descriptor read/8, error -71 [ 403.468856][ T5906] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 403.550947][ T24] usb usb1-port1: unable to enumerate USB device [ 403.640428][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 403.647221][ T5906] usb 5-1: config 0 has no interfaces? [ 403.653501][ T5906] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 403.663152][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.674789][ T5906] usb 5-1: config 0 descriptor?? [ 403.886033][ T24] usb 5-1: USB disconnect, device number 60 [ 404.531948][T11769] FAULT_INJECTION: forcing a failure. [ 404.531948][T11769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.546060][T11769] CPU: 1 UID: 0 PID: 11769 Comm: syz.0.1636 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 404.546089][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.546102][T11769] Call Trace: [ 404.546110][T11769] [ 404.546119][T11769] dump_stack_lvl+0x189/0x250 [ 404.546154][T11769] ? __pfx____ratelimit+0x10/0x10 [ 404.546183][T11769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.546212][T11769] ? __pfx__printk+0x10/0x10 [ 404.546242][T11769] ? __might_fault+0xb0/0x130 [ 404.546273][T11769] should_fail_ex+0x414/0x560 [ 404.546305][T11769] _copy_from_user+0x2d/0xb0 [ 404.546329][T11769] ___sys_sendmsg+0x158/0x2a0 [ 404.546355][T11769] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.546416][T11769] ? __fget_files+0x2a/0x420 [ 404.546442][T11769] ? __fget_files+0x3a0/0x420 [ 404.546480][T11769] __x64_sys_sendmsg+0x19b/0x260 [ 404.546506][T11769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.546539][T11769] ? __pfx_ksys_write+0x10/0x10 [ 404.546559][T11769] ? rcu_is_watching+0x15/0xb0 [ 404.546591][T11769] ? do_syscall_64+0xbe/0x3b0 [ 404.546625][T11769] do_syscall_64+0xfa/0x3b0 [ 404.546659][T11769] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.546687][T11769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.546708][T11769] ? clear_bhb_loop+0x60/0xb0 [ 404.546732][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.546752][T11769] RIP: 0033:0x7fb1be38eb69 [ 404.546770][T11769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.546787][T11769] RSP: 002b:00007fb1bf2be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.546809][T11769] RAX: ffffffffffffffda RBX: 00007fb1be5b5fa0 RCX: 00007fb1be38eb69 [ 404.546825][T11769] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000006 [ 404.546838][T11769] RBP: 00007fb1bf2be090 R08: 0000000000000000 R09: 0000000000000000 [ 404.546850][T11769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.546862][T11769] R13: 0000000000000000 R14: 00007fb1be5b5fa0 R15: 00007ffeb8022a78 [ 404.546893][T11769] [ 404.800238][T11774] FAULT_INJECTION: forcing a failure. [ 404.800238][T11774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.813706][T11774] CPU: 0 UID: 0 PID: 11774 Comm: syz.5.1637 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 404.813736][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.813749][T11774] Call Trace: [ 404.813758][T11774] [ 404.813767][T11774] dump_stack_lvl+0x189/0x250 [ 404.813802][T11774] ? __pfx____ratelimit+0x10/0x10 [ 404.813831][T11774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.813861][T11774] ? __pfx__printk+0x10/0x10 [ 404.813890][T11774] ? __might_fault+0xb0/0x130 [ 404.813923][T11774] should_fail_ex+0x414/0x560 [ 404.813955][T11774] _copy_from_user+0x2d/0xb0 [ 404.813979][T11774] kstrtouint_from_user+0xc4/0x170 [ 404.814013][T11774] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 404.814063][T11774] proc_fail_nth_write+0x88/0x200 [ 404.814095][T11774] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 404.814133][T11774] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 404.814166][T11774] vfs_write+0x27e/0xb30 [ 404.814200][T11774] ? __pfx_vfs_write+0x10/0x10 [ 404.814225][T11774] ? __fget_files+0x2a/0x420 [ 404.814257][T11774] ? __fget_files+0x3a0/0x420 [ 404.814282][T11774] ? __fget_files+0x2a/0x420 [ 404.814319][T11774] ksys_write+0x145/0x250 [ 404.814345][T11774] ? __pfx_ksys_write+0x10/0x10 [ 404.814365][T11774] ? rcu_is_watching+0x15/0xb0 [ 404.814404][T11774] ? do_syscall_64+0xbe/0x3b0 [ 404.814439][T11774] do_syscall_64+0xfa/0x3b0 [ 404.814467][T11774] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.814495][T11774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.814515][T11774] ? clear_bhb_loop+0x60/0xb0 [ 404.814540][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.814559][T11774] RIP: 0033:0x7f836c38d61f [ 404.814578][T11774] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 404.814596][T11774] RSP: 002b:00007f836d167030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 404.814617][T11774] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f836c38d61f [ 404.814631][T11774] RDX: 0000000000000001 RSI: 00007f836d1670a0 RDI: 0000000000000005 [ 404.814644][T11774] RBP: 00007f836d167090 R08: 0000000000000000 R09: 0000000000000000 [ 404.814657][T11774] R10: 0000000004008890 R11: 0000000000000293 R12: 0000000000000001 [ 404.814669][T11774] R13: 0000000000000000 R14: 00007f836c5b5fa0 R15: 00007ffe92859de8 [ 404.814703][T11774] [ 405.050109][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.122093][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 405.139098][T11780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.200898][ T10] usb write operation failed. (-71) [ 405.213922][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 405.224953][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 405.235860][ T10] usb 2-1: media controller created [ 405.241625][ T10] usb read operation failed. (-71) [ 405.247333][ T10] usb write operation failed. (-71) [ 405.257914][ T10] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 405.270065][ T10] usb 2-1: USB disconnect, device number 122 [ 405.288853][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 405.298226][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'. [ 405.307982][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.333236][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.366784][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.384336][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 405.396974][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.419956][ T24] usb 5-1: config 0 descriptor?? [ 405.556023][T11784] /dev/rnullb0: Can't open blockdev [ 405.835076][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 405.851454][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 405.910518][ T24] usb 5-1: USB disconnect, device number 61 [ 405.929077][ T5947] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 406.089489][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 406.100761][ T5947] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 406.114659][ T5947] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.126505][ T5947] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.141839][ T5947] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.153077][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.162924][ T5947] usb 2-1: Product: syz [ 406.167350][ T5947] usb 2-1: Manufacturer: syz [ 406.174599][ T5947] usb 2-1: SerialNumber: syz [ 406.378647][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 406.554007][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 406.562836][ T24] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 406.573380][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 406.582597][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.598332][ T5947] usb 2-1: 0:2 : does not exist [ 406.603555][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 406.612980][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 406.621991][ T24] usb 5-1: Product: syz [ 406.626220][ T24] usb 5-1: Manufacturer: syz [ 406.637698][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 406.768491][ T43] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 406.842493][ T10] usb 5-1: USB disconnect, device number 62 [ 406.918671][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 406.927572][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 406.936856][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.944971][ T43] usb 1-1: Product: syz [ 406.949305][ T43] usb 1-1: Manufacturer: syz [ 406.953966][ T43] usb 1-1: SerialNumber: syz [ 406.962364][ T43] usb 1-1: config 0 descriptor?? [ 407.176775][ T43] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 407.416567][T11801] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 407.426355][ T5947] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 407.434594][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 407.440698][ C0] CPU: 0 UID: 0 PID: 11801 Comm: syz.4.1648 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 407.451901][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.461955][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 [ 407.468402][ C0] Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 1b 16 cd f8 48 bb 00 00 00 [ 407.488126][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010046 [ 407.494199][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 407.502173][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.510164][ C0] RBP: ffff88805f1aaa00 R08: dffffc0000000000 R09: 0000000000000000 [ 407.518141][ C0] R10: dffffc0000000000 R11: ffffed100538f801 R12: ffff88805f1aaa80 [ 407.526132][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88805f1aaa2c [ 407.534120][ C0] FS: 00007f78f973c6c0(0000) GS:ffff8881257de000(0000) knlGS:0000000000000000 [ 407.543057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.549651][ C0] CR2: 0000001b3261fffc CR3: 0000000029f48000 CR4: 00000000003526f0 [ 407.557629][ C0] Call Trace: [ 407.560915][ C0] [ 407.563767][ C0] comedi_buf_write_samples+0x373/0x5a0 [ 407.569423][ C0] parport_interrupt+0xf3/0x150 [ 407.574279][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 407.579740][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 407.585989][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 407.592592][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 407.598062][ C0] __handle_irq_event_percpu+0x28c/0x980 [ 407.603741][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 407.609907][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 407.615119][ C0] handle_irq_event+0x8b/0x1e0 [ 407.619888][ C0] ? handle_edge_irq+0x229/0xa10 [ 407.624836][ C0] handle_edge_irq+0x23b/0xa10 [ 407.629617][ C0] __common_interrupt+0x141/0x1f0 [ 407.634652][ C0] common_interrupt+0xb6/0xe0 [ 407.639769][ C0] [ 407.642699][ C0] [ 407.645628][ C0] asm_common_interrupt+0x26/0x40 [ 407.650663][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 407.657170][ C0] Code: 74 05 e8 eb 40 43 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 e0 0b f6 65 8b 05 5c b4 5f 07 85 c0 74 40 48 c7 04 24 0e 36 [ 407.676778][ C0] RSP: 0018:ffffc900030179a0 EFLAGS: 00000206 [ 407.682933][ C0] RAX: 133469e50f591800 RBX: 0000000000000a02 RCX: 133469e50f591800 [ 407.690904][ C0] RDX: 0000000000000006 RSI: ffffffff8dc916eb RDI: 0000000000000001 [ 407.698876][ C0] RBP: ffffc90003017a30 R08: ffffffff8fe4b237 R09: 1ffffffff1fc9646 [ 407.706849][ C0] R10: dffffc0000000000 R11: fffffbfff1fc9647 R12: dffffc0000000000 [ 407.714824][ C0] R13: dffffc0000000000 R14: ffffffff9a22d140 R15: 1ffff92000602f34 [ 407.722898][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 407.729245][ C0] serial8250_config_port+0x1451/0x5370 [ 407.734808][ C0] ? __release_region+0x2d6/0x360 [ 407.739834][ C0] ? kfree+0x18e/0x440 [ 407.743926][ C0] ? __pfx_serial8250_config_port+0x10/0x10 [ 407.749822][ C0] ? __release_region+0x2d6/0x360 [ 407.754851][ C0] ? __pfx___release_region+0x10/0x10 [ 407.760312][ C0] univ8250_config_port+0x3d4/0x9a0 [ 407.765528][ C0] ? serial8250_release_std_resource+0x135/0x2e0 [ 407.771871][ C0] uart_ioctl+0x1354/0x19f0 [ 407.776420][ C0] ? __lock_acquire+0xab9/0xd20 [ 407.781294][ C0] ? __pfx_uart_ioctl+0x10/0x10 [ 407.786167][ C0] ? __fget_files+0x2a/0x420 [ 407.790772][ C0] ? __fget_files+0x3a0/0x420 [ 407.795454][ C0] ? __fget_files+0x2a/0x420 [ 407.800052][ C0] tty_ioctl+0x929/0xde0 [ 407.804314][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 407.809177][ C0] __se_sys_ioctl+0xf9/0x170 [ 407.813769][ C0] do_syscall_64+0xfa/0x3b0 [ 407.818302][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.823511][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.829583][ C0] ? clear_bhb_loop+0x60/0xb0 [ 407.834267][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.840163][ C0] RIP: 0033:0x7f78f898eb69 [ 407.844582][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.864277][ C0] RSP: 002b:00007f78f973c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.872692][ C0] RAX: ffffffffffffffda RBX: 00007f78f8bb5fa0 RCX: 00007f78f898eb69 [ 407.880688][ C0] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 407.888667][ C0] RBP: 00007f78f8a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 407.896695][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.904688][ C0] R13: 0000000000000000 R14: 00007f78f8bb5fa0 R15: 00007ffe3954bf58 [ 407.912694][ C0] [ 407.915727][ C0] Modules linked in: [ 407.919660][ C0] ---[ end trace 0000000000000000 ]--- [ 407.925117][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 [ 407.931492][ C0] Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 1b 16 cd f8 48 bb 00 00 00 [ 407.951115][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010046 [ 407.957189][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 407.965172][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.973148][ C0] RBP: ffff88805f1aaa00 R08: dffffc0000000000 R09: 0000000000000000 [ 407.981128][ C0] R10: dffffc0000000000 R11: ffffed100538f801 R12: ffff88805f1aaa80 [ 407.989107][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88805f1aaa2c [ 407.997083][ C0] FS: 00007f78f973c6c0(0000) GS:ffff8881257de000(0000) knlGS:0000000000000000 [ 408.006069][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.012739][ C0] CR2: 0000001b3261fffc CR3: 0000000029f48000 CR4: 00000000003526f0 [ 408.020742][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 408.028251][ C0] Kernel Offset: disabled [ 408.032600][ C0] Rebooting in 86400 seconds..