last executing test programs: 9m4.173557635s ago: executing program 0 (id=1): epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x203, 0xffffffffffffffff, 0x0, 0x0, 0x2000203}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) eventfd2(0xa775, 0x80000) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000023000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000100)="0f013fb8f6078ee060ef660f38804609260f01c92e263e0f68e90f20950f32360f01c9", 0x23}], 0x1, 0x3, 0x0, 0x0) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0xffffffffffffffff]) setfsgid(r7) getsockname$l2tp(r5, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'cpu'}, {0x2b, 'net'}]}, 0xa) 8m48.640332637s ago: executing program 32 (id=1): epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x203, 0xffffffffffffffff, 0x0, 0x0, 0x2000203}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) eventfd2(0xa775, 0x80000) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000023000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000100)="0f013fb8f6078ee060ef660f38804609260f01c92e263e0f68e90f20950f32360f01c9", 0x23}], 0x1, 0x3, 0x0, 0x0) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0xffffffffffffffff]) setfsgid(r7) getsockname$l2tp(r5, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'cpu'}, {0x2b, 'net'}]}, 0xa) 2.707847948s ago: executing program 3 (id=3496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0xa5e}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_usb_connect(0x1, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020592020881060500c0560102030109021b0001070340f20904fc08010a"], &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2.049054748s ago: executing program 3 (id=3498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000040)={0x5b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x20b, 0x2a, [@gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf5, {0x0, 0xf, [{{0x0, 0x1}, @device_b, 0x8000, @value, 0x19}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x25}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x7}, {{0x0, 0x1}, @device_b, 0xc, @value=@device_b, 0x34}, {{}, @device_b, 0x2, @void, 0xc}, {{}, @device_b, 0x7f, @void, 0x40}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x4}, {{}, @broadcast, 0x2, @void, 0x19}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x2d}, {{}, @device_a, 0x1, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0xe, @value=@device_b, 0x2c}, {{}, @device_b, 0x60, @void, 0x13}, {{}, @device_a, 0x5, @void, 0xc}, {{}, @device_b, 0xd35, @void, 0x31}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x39}]}}, @mesh_chsw={0x76, 0x6, {0x7, 0x2f, 0x0, 0x4727}}, @dsss={0x3, 0x1, 0x34}, @random_vendor={0xdd, 0xeb, "4519172f6f84821054ba6a65b3def36aca4b136917abadab534200fe5193307c95cf32e31972be47ae41a49179b76fcd27788ed430062682a0c577528f0e328d81e828c372f9adef9b8aa17a776d903cdc61ea3a3a4243c43217d4bfa30e701d4520aa0babe2ffdf507cee6e289b63915813ac272ad5c420ddf291c411c03ebf154d7df35cd59482d52c794fd11e451d6e5fbb2be6824d0f24129695d9ac228ae783fc72f23d6a29291a5353f928da5e407ae2c1ccba76abb34c7c822149da1ebcce8e7fbe8028035892ebf32679987d559207f51973fdfd74fcf8ae1091cffecf74c8916752d1f7021e3e"}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_IE={0x148, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@random="a7924bfe56ef", @broadcast, @broadcast}}, @fast_bss_trans={0x37, 0xbd, {0x2, 0x7, "610e238f49307a0cf8c9e8b767b2c804", "eb046ce77c13e2e4c341c52c7f2526f4f5cd501c125cbb0973f6eaab25565b2b", "2d80acb97ed82640588cbb4456a75793f2e8e03df795f7149a7d9fe8d1bd9c16", [{0x4, 0x10, "fe3c9cdc9719d7df7befcad4cf8eda5b"}, {0x3, 0x5, "38196fc8a7"}, {0x4, 0x13, "9216cb1c9b348c2b283aced65ab3f1ffb05917"}, {0x4, 0xe, "eb65b286f2637586035987e1cae1"}, {0x4, 0x2, "81e3"}, {0x2, 0x16, "693f8c308f0780a6726aae07e0ebae3eb219e34c5f9c"}, {0x2, 0xf, "d565da23712fc089469b175291daa5"}]}}, @ibss={0x6, 0x2, 0x5}, @mic={0x8c, 0x10, {0x353, "1119a9307dd9", @short="0dcda8345108b50e"}}, @mic={0x8c, 0x10, {0x6f1, "f0e3eb7d3a4b", @short="4eb8d69c853391b0"}}, @ht={0x2d, 0x1a, {0x2000, 0x0, 0x4, 0x0, {0x12e47f36, 0x3, 0x0, 0x363, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x10000, 0x7f}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x18, {0x5a1, "c2edc8564b29", @long="e527f85fb65d35253b39e1543636d31d"}}, @dsss={0x3, 0x1, 0x2c}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x170, 0x2a, [@perr={0x84, 0xf4, {0x5, 0xe, [{{0x0, 0x1}, @device_a, 0x1, @value, 0x26}, {{0x0, 0x1}, @device_b, 0x1ff, @value, 0x2e}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x3d}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x42}, {{}, @device_a, 0x3, @void, 0x3d}, {{}, @broadcast, 0xffff, @void, 0xb}, {{}, @device_a, 0x9, @void, 0x3b}, {{0x0, 0x1}, @device_b, 0x86, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_b, 0xad32, @value, 0x9}, {{0x0, 0x1}, @device_b, 0x10000, @value, 0x2b}, {{0x0, 0x1}, @broadcast, 0x10000, @value=@device_b, 0x40}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x2}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x4}, {{}, @device_a, 0x703, @void, 0x34}]}}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x1, 0x0, {0x1, 0x7, 0x0, 0x2, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x5, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x6, @broadcast, 0x3, @value, 0x8, 0x40, @device_a, 0x8}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x49}}, @mesh_chsw={0x76, 0x6, {0x0, 0x4, 0x21, 0xc71}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xac, 0x40}}, @ht={0x2d, 0x1a, {0x8001, 0x2, 0x4, 0x0, {0xc, 0xc, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x9, 0x5}}]}, @NL80211_ATTR_IE={0xa7, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa1, 0x9}}, @random={0x81, 0x88, "64593578e9ca7ca13c0cb13abd62f378aa7ba4bec8b32a845a26b4a125ce0daf8dd4dff88b3dae21b3719b2c7a203d7e5f64707e691c47e5ab9b9d4be26a5ecad42bb6f1c8e9d82cb26206845547eff9dac3af43618af60a3c3db9f5d157c800cce99de09389ab3bbd97dd7ab35dc3024b48230c9ac1a819e9f7bafcf2b8f08ef7171c779e38775c"}, @link_id={0x65, 0x12, {@random="1c19aeba9b27", @device_b}}]}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x800) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa0, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7502cd1a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f8be1a5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x489598ba}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x16b9226c}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28d10b81}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0', [{0x20, '@\'@'}, {0x20, 'PPPPPP'}], 0xa, "e69fe4b38ae0ded41cc86f97dab938bef379767eb7fede322a12924a1f168f2aadc1dfbf5a1135332692857fdfd766dcc10ac1289ab3b6f83825d33cddacbdfcd35149e826b4530f3e25b6315af562f2abd96d5f6f75d1d0a4160a41ec5efc0e2b96e39ff071e11a28367518"}, 0x82) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000002180)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002140)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x194, 0x9, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3d}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xf8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x50, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x400}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xc2e}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xcdc6}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x205, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}]}, @NFT_MSG_DELSET={0x1418, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x12fc, 0x12, 0x0, 0x1, [{0x1234, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1224, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x1004, 0x3, "638cd93e526c1ca38b9741523fe987698c7387dfa69903aa2b219b4f532fe0d50f9e963425db95d55c0aee4f90a8d1b40e66d2a10f82bfc7cbce89796a6e14df1be2a28fe37f89893491c596b401de4d746ba0a0d90045d3f6fc55deaeeaefac10346d724384d9bd5334b508201a05be5143f58dc0b7029b2a418d5324f96e477d85af270751f0b34db54657d83ce71d4d45727d81e6e0b3e0c275c76cdde4f6401bde7130c10fee8ec8e93a1220cf0dffff23123012374e087dbc3bfc6b195d47c918a811a85b09fbd73b25b2cfe71c37f73ea5df1d5397b3c87eb61c8c569473334320b8eaac1e54429487a6ecc927d36d63059febc6f26f1e8cac9b065085d5940b7f3377268623fe80f9ae0f9f81ef76eb27144692a3113c69699fd581e212c72ead58950dd812c5858b83012a33a87854a595910b0477eb21f9b21481cada76b3dd75feb8f7b163aed3541afe4f6f720f5a5877ccfb135576b9bb2be37767f5a2c4d2b3874f64046326c275cff65fa569d727fdb7ae3689c61b4f9db41a97219a5c6f58ec29918f0a4bc60378364f2daca28b35bf428973e80e00e94066e2d9ccecf0fa3eae79c4a1633eae535a5eb966411bef48c0e2d3c8335a29ddd62725ff061d7f21d62c50b723c31bb6422f85821cc7158b333c87b431d9c2d6ebec87888beed0d957f9c8ebe6b5352ee0b10d3dd9820adc4ea9aa49ef4191c22c72fd6fcc4ff6cf1dae59c4d975b1b3bfef558d8d9cbc2924068d72d628cccd2f0a163cd554c90dd6f1ef84154c242a0db73281a0d3afb8adbf0da9099247dad3485b9f64c52d3161049ff917db7d751acdc1069a9cffe727546e376cc9ecc661dc49b062c6751b579255a8b5a2439470ebeed5495ed55db370ff53b756a34bdf94f6d98eb3bdd214b924d957c42152c38169c3aadf2e20b7f81b0875badbe39319f2bc8f2115bef4d44e099c10de36b4d2837aa5ec35cd35aacea3504e2e5b648fcc2ca9c5f4ac9bf598dce84d60e72f191cb3c0be201b4b17b9a4db1c316334c7dfac896db7c8d8e983df8d6ec0df23305f040972cf83ba196e8f57c49a2c6ffb8f7f6d9a91f96a1793e55b0f109ec12c96109fdf8644d89a6b95c1458f0ffa8907fd9e36f7c525fb41b325a510e9042648bc1bf3a860c19e6fa5a0a1a2b99e40fa53398a7fce0cef54944ff55b6fad41ab613f508c1fa17f904c951e2b024aaed8403911c2850a25d567e57b696db5d7c770c5a859182c93fcbf478a2426a637199c2ddf6cad7078f68bd7b981d7f457e89b6f20bec14affda1e8c6c45eb2c39344738a89726d11aa6ee5c8fb82b5205284c1507ee10d2494a07c5c7f3569ea975484d58748532390df565c51d24bb09f8a353a67da2e225bbb32b86027a7f50b4782218aa4aadda22056adf9568b262738138be2dfa524bd191df77ae27c2fdfc4bf404b07dfc7ebbd2ce0617f48b2862d19a5de352dc3de0c63f85ece7c5e72b9d2d1f005c7028518e58dcfbd13e7f0b24c4b4c12b02adb0738ce77bfbd58caed4abeccd0059898a565bd6cf836bab7dd3d54467ce77b73943d6e1b888e2aab178b03520a9cefa446ac146d1ebf29f3c66dcf53be78b9898ab90b2489877cc149dc58eb62f0a1b17110b6cb531ddd9b8b96fdd97196d7d22ff1d1f93541f4ff74d609d5120c6eaf9f2f909e15fb8ed3fcee43790be7a3f5213b848551a079cb68a138a2246a327f1ffaa095c64418c7ebea623b627f6328dc44b0910fdb9b1e386571179915b07ff13774cd8c5fce8145e5851396242c8e397bf45c22982a41f03a34d7d21cea0556ea2bdad63fa4578a1382ad1e527cb210b20fc617b8457540b968e0a7f477419c9149f6d1c00e19aec5b4e3a4c742acc2dab8a3f30991e2c95917c7d9915858c3ee24dc79f2b3590b8467a6f871ac819e21bf5023e7efb2aeb6e663ed1e60a9d9553e78079b478ba5057367af843398f05af5055cc74f99ddb9cd4bb61e3cd4bbd51a09c4dbfbf8930916eef77ce7ac1b8b2ae265371d72cf244efaba409c11272f5798e4096cab0369decbcf39f57368e11250c2b0e912e78e0a7bc9ae450a7388e21b60bf1cf0d7c336ca34fd99fe6398ace2f039b5b29ac9e12d126a0ecbd647dcce00554a24d53a615d2c39136258b7fbd3805fe31304c07f0770a7ce9b63f267770152eaaf1340a915d506b19a81b3696134c0c6f8ec6faacaf041f35c087d03e211c857cfba8b21431eda50328454f161aec6db45abd050699e726962f360d40f2f2920d9f6454be76cfe5e7176bb59175899d278085bcf7f86c06d59ae7e832e98e67e1ccc44951b81a0fc6d0dc1a40ce4561e015e8705893eb2095c7e7e2ab22934c801e618f5d00be0e9341d8a4cd9b71d96e94341c5e6e490158d01c8e823191ffefab0237abbd225b4205e853ad0170eb4742616cbe968bede3c1f7d4e211fecb4bf70b6e1c8e48327dfb37ebd7ba2dd7066dd20bea9cad6bf1b1f2a53fff0cdc54159989352c3ea3c2ecdb831021ff544cefadf0f83599ae8a291f94611cf1f33d00148397aff24acffc6e887c9177b1e53504bf2dd700775c18532492fa55d88b2e34e9b0d4a637acf90c90e13bdace690352b92ca68df5a417a09228db17d58112b20e3e68dcaf092eee7bd0697596b11043b2d1df45703b55b92963f46fcf15c9b9af8edd1f3827e0bae44aae6ee5bbec635353d0008f298fe57b885cce27fccc7137aaa40716ecc3737122dbbbb17815afdd0df715439bd123256c6cc7a66a27daaf8ce688111a3beb1191c1b08c2adb1a68757da42df8d758d0d327b6e8a6989a97e6b6dac47de971482aaf85f8682694df2a7e71167e3b4dd7872579ed6136fe40fa616a272ca964a0cb9371e40947598834d93500b634e1541251b8ca05828d9aadecd5f0e4193a44a08c2b8321b6e1bb40319342f1078b903e878346bf626971627db1a05e96a221539596b00237cd47bad77492f41177d971e78f7d1bbcaa678cef37c41a2f965dcb2dda4805cd19a28648e5c566495466ece5981f87e61bd40f214a5e19568b503daf01df5ddbc4665f93fc54f8afb1f9056734eae0639f7785417503b76fdffb9674c98382b9d277d092cb9e4523d0b464146dc851dd696d53dddcfc5b0686b49af50aef27f0e4d2a8f9ec5eac02231efb1f289159ef246b218f8c6afdd5f2989e198897fe8f08f22bd2d66f8c65cc1d6bbdfb0616c9b6f1e0e88c055756e01a73f8ffe78196535daf4362c3f84838e6d25d92618f0b7e0546563577059f878e56833cff0d67ee4b3038d9b9b2dced1d569e57767a2c25fd4a8864113e29f2634a6c5f89b3926d530d10e8a351503ce2216072eac69bc00274f87b367fd09488fa713bdb6cc9aca39d259dc2ed3ac4f77abc2018491a51b1517893b4c2d5d1d1f863977e558ca549ac1099a7776c7b1e4a92888c0e92c5753a05caa84e05409334e0359dee331dcb1e12361a1a570107d7ad4a4b9635c810e0ac41d5cc349fa11dd9ab1fd9948f3b4d994d18521430e9a80ac520b9e19f72afc731143f67e66dcd6905e37ebc42783c221eb6fae2517af56d4084646fc6b29732e8c333ffd7eef8266f741bc5a6c4e9f62b28d77a7c4c873b9f6a0f5c46e04438557dfee35ac9a782e9bc3ca974f482ea832e4f5e6f5bb50d6be297a7ffd5020afc57a3242417ccdb96bf9d0f0c4f7bbc9ee24c8b017a89c359c0c0b2d368b57837154db5f1087592447b321f24f4dca9f9316b6025a7d9b23b415efa645a8f731682db277f6584a63f42ce2ad691e2e5bb84bc4d6510587baa56e0bffd08c65db1f73e1a8eceb4e0438ac4dbda7f4caf98bfb9c5deb17ac35d515a989baabb56d75149b1b5cc34b1f65019b0d84e59c572a81e209a8b86b6f93305f5699f5d98f7666ede656d99aae922fb7d47ff06ac1c2ac3f160ecd50254e6471e34c8bab226d625d9dee7efbff1c23e36e7974562d02ee704b33c0266efc1518533faa1c6f2872e5d2e1641912ac75af32feed93096017f220255e9cf1343ab611596830f55810341f70d743ea46a71a09a2aa8d87a89bd6f418fd5c7e2ac895400ed3708c1f5392da5747389abdb56131082ac183c2f5e859cc36507f4d387b1246b4b1121ffd0f2ef7b2a15b248a84d469592692cc95ec944d503db1cba6ef428201a47f7f9aeafb1af7cb8055ee94e120a18ae0102487afcaf2e26cb092685dd4e78c7e5188f4e4ed922b69fca1b063b38cf5918c48b0ea92f8954c93f6a6a612ac7ec7a347df0f292ef1e354fbfab3e16b0f73f6ed3e9fcaf002137f7b5c1f38105d0546b30038494cd0a9f421965e952dbf0cc402e27e1b595390a87f70646c74486389d6286a5d116ae86c956e1c18094eede449c5f47d72007b1e3a8fa66dfb60b45d5686590d0bfeeb392ffeeda52b8a2c54f6454bbec7bb4c308da3853315c919cad89945d39b6453bfd723018eae363319870b5792caf13f3bb389cf454ba01953a13b84f44454fc4307dfca5a756cf3f705d3f4ea48996f84aefa723489f8fc0cfed83e111b19a9bbac97b43a4dcb92a4485af293a73d679c611bcb7c88350c44eb83a83714273a2fd294b7ab9f771f95078b4f6278c5ef8fec57f60cbabe6dbf4ec0a732dd5c996986a40fc441082713682e2014a0e9975160ebcb4047461ef7e8861b8b09044acfbd28f403f309e8f0e310eb5ff582a5cf9dbb40fa5a8b24216f2e3f415678c892338d055a08db72f57befd112c880fe18cbec0801f188b554c2301cce1810a2aad61f0fa6c8bd23609c6c95265d213d4fbb033b69404de79eb29433caaab6c77013ec1d098942dbf83b13dd060a0a6078d83a52ab9b0d6ea60f69eccbbbddada4eae678acd855103155d160e381459927092929228b6ab5143b2554dc2e32d0069ea8ad1cb211a187d3f2f13b6d89347240eca697aad9eaf63712a239cc41fb2cfda213e63e0bf7f22d355fde879364629ae4eb6c5cb1970c9436730203d3ea6a14b0b14f334d8b039be30e07709f284058c9361178b077c1fe634927d0313f85e6421c7ccb3756437f88510e7d75b4ed281b0ddb90716b61f5d7fe7d7b6f8f5780016eddffec176cd249b127d6a30ccf48e99fa1c8d07ebac47b08f004abd5fa037fcd6301658fa29361fb0cc02b902df6e5471ff3ce03e660d4b5d1f707256ed609a869185d11fa7130af8d2e4b6f46f078589141fcccb2209560ee60e266f5d6e4526bfa88e1b86bf3e76edc26fbe8348144641d9cb266c7bede6cd26c8ec925e6de44bcb7cfbb5986d41c877a636dba23dbb2e5cbdc8a1129c69c9fc1491b95427b44cddde361f18ea57d3afb7daea6cce76f96576fa93da229943383e67c42653f50d950b8ace09910cb9b7358896486e54b482f5a79ebc9f419111a5ad4e81cf383ed1b64b01ce0f6f06547cda091a1ce94a1c77c31c727cf7525a7959771efb6ad52a00672fd353a67336aef6baf761e299c5d9b662d898c9e84701c936358bde0a9eff3e6e8f49fb9d9ac0d36e5ceb014a9205d7838aefd04011aeb4d56faf94a29dccee6f74c24bb64acc6c31a270402f44c8e7118b07205f5e6ed92c3f5d2616cb4e23891f1b8297f6f0b22d1eef643f4afddb3e878b1ff8f7ec1c1f734281d2130fd4ed35cd52b8e1fac39dc61502e92a456725f8d518ed35eea7759c72d54f5c1c4179dfe2fd097003a2145f7fe06523c83e2dbee5a615ae8a068952f79bfb4a698b57a9e95bad9dcbaef957b87cabb9e64e3c235654efe7b89f72"}, @NFTA_TARGET_INFO={0x9f, 0x3, "73e7cdcf561a2459cabc19eb4ae5dd8019bd2cf2ac3325064cb42b5980ca099c9997716f647189a1a307c6d4c135ee9bcaab970474e4b2dc4f42c60c54167176137493b90fd3dacc0756ca97a269111a1e24a222c7feb1931e388f23b8b4c0f63dcf099bd6a79c5f8136854c689cb954eb4bee5c9a02ae40456c48904f3ef0bb960cad9e858a902a6268c63979b31db7fb6b39ae1ccd545590ea2a"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0xbe, 0x3, "4aec7b30f1a7fda3295eaffb2586f41c273e4ad0edc90c30df61115a853e88f33e4efd6b34d269846c0d4e9e993874c770d5064490b78175895d0c673c044827b59ce7aa651fcb961d9341b0dc499633973d85833699522fb5131ee3ce3828c413a032a883c65ceb00f1b882a152e641043074ba0bb39daff065c95bbbe25640786ad33da3be2b193a7398b01ac1d70b1914d014d54a2178881a892602d5731f5d1ced3411281b7a8c9c3954796dd52c8412af4b00ee3121f5d7"}, @NFTA_TARGET_INFO={0xa1, 0x3, "2183bf9f95d0d0b0a4fa3cce2a291518a71e6ea47786cc8c5a6198f3a44318b25b268ab4344cb78d28c4ecd62b3fb27f6fc9b1012e7969d066ce3b3a0888e08aa0c1eaa38549378f96698b95787ceb50a25c77825051056b7d569d0c213c52433fb05d665385bffce30d7f00bec58986ce7cd6898a2cc955a18b81911f6b4c849b5e0bd49748997c3927242169252f8d8fda94bcc25254b93d9230b386"}]}}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xcd, 0xd, 0x1, 0x0, "377421395dcfade0da0ee1acdec3222c0067d3dd1e9ef97c979ec15973d0655e5f71c8f1df797a0a0a8663bff67e17ed8d553a7b48cdf1bfe10a318e71e9b8e224f8dd4d26993f00ac93e9b71ee1f44028dde893640d24d4a06a15972edac76a51f887218e50d9765ff3485c29c376fa5e70fd81c327af0484183abd1f248e612702ac99acc6946bc2cca73c2f4e137fc369e4bb867ba23bd68fd24e2068378e59585649668a993a0abe813e93bd209997dc0afa4cb5a0fc2f8772d5c3e9b31cd62e050a2db24fbfb4"}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0xb4, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xb, 0xc, "874a7c44915d66"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x4b, 0xc, "f737e3e3bd67d3f515158936c0b30dbf6d75d147493517ff6b2fa837b2ae146802eb8cbb1eb6ae1e2a6d3221469d166756a6aee49ca3343838cc6c06594413f1ee0000eb350789"}]}, @NFT_MSG_DELTABLE={0x13c, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "23b974cbae788a12f5d6d2a0408b3c44b3dbbc083c64c06abc64a92fd2f89fc099bb3883335af51ce085fb30757d07ccfd6dfbecbd9670ce70d15835f976da5258855b632d893242b47d760b6cacb9e09c13cde0e5e608ad31e7deab102b5ea4de6fbe0eeb0bd88e5a592830e0089536b999f95af08c7f84eb98fd32695ba957690717212eac051c1a3681d5f0246be39e762feb6ddca52567d4117c03ce6991267f79c6615d54adfe30292935f496e13c1b2e54e4fce85fe57126f71ad69e94ca2ecbd313f9dd"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x17fc}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) (async) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/xfrm_stat\x00') r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002300)={'syztnl1\x00', &(0x7f0000002280)={'ip6tnl0\x00', 0x0, 0x2f, 0xd1, 0x0, 0x3, 0x40, @empty, @remote, 0x700, 0x20, 0x1, 0xd}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002400)={'ip_vti0\x00', &(0x7f0000002340)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xa00000, {{0x23, 0x4, 0x2, 0x10, 0x8c, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010100, @empty, {[@timestamp_prespec={0x44, 0x3c, 0xb5, 0x3, 0x0, [{@multicast1, 0x7}, {@private=0xa010100, 0x5}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x9}, {@broadcast, 0x2}]}, @lsrr={0x83, 0xb, 0x96, [@multicast1, @private=0xa010101]}, @timestamp_prespec={0x44, 0x1c, 0x9f, 0x3, 0x9, [{@loopback, 0x878e}, {@multicast1, 0x2800000}, {@empty, 0x8}]}, @noop, @rr={0x7, 0x13, 0x50, [@rand_addr=0x64010102, @private=0xa010101, @multicast1, @broadcast]}, @end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002480)={'syztnl2\x00', &(0x7f0000002440)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x3ff, 0xbdee, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x64, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @remote, {[@generic={0x86, 0x7, "af4d572087"}]}}}}}) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000024c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000002500)=0xc) getsockname$packet(r2, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002580)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000025c0)={'wg2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002680)={'ip6tnl0\x00', &(0x7f0000002600)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x2, 0x7, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x80, 0x80, 0x3d}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002780)={'tunl0\x00', &(0x7f00000026c0)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x1, 0x4, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x1f, 0x47, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0xb, 0x53, [@empty, @private=0xa010100]}, @rr={0x7, 0xf, 0x3c, [@empty, @empty, @remote]}, @noop, @noop, @generic={0x44, 0xb, "2a535417942072979d"}, @timestamp={0x44, 0xc, 0xcc, 0x0, 0x2, [0x5, 0x1]}, @generic={0x83, 0x6, "9685e8b2"}, @timestamp_prespec={0x44, 0x24, 0x4d, 0x3, 0x4, [{@local, 0x6}, {@remote, 0x8}, {@local, 0x95}, {@empty, 0x3}]}, @lsrr={0x83, 0x7, 0xd9, [@rand_addr=0x64010101]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000002b40)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002b00)={&(0x7f00000027c0)={0x31c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) (async) sendmsg$sock(r2, &(0x7f00000030c0)={&(0x7f0000002b80)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002c00)="88fd3802addf0f6e35030df635478894d13e3002cf533baa57af96b6baf133cfc28ee883114b4e08d4c89389e72ee11d5f4a8fdbaaad", 0x36}, {&(0x7f0000002c40)="cebc3425a0fa7b858623d2b3c7c52f690e00c8619ed90aa45c90bfb4056ee9d3163aa3cdc893d2790b1c3e8b7666aa4f45bc4c2eb2b35bb6eb386557cc73653e019def263841482d652ea3db9452dd1cd05fb7aeab39c38b92890dad59d89e6d93b237f2b9a183e325d80e7ca82787249d83fc93037f5078871055da4e5db0331aa57bc6ed5b7d3c93", 0x89}, {&(0x7f0000002d00)="f6ad120281ca3e32289bdb63ea437b7bdcd61e7a55d5467e44c103c83900db216422522ac5dc7c1e62b8837d86a1e31d666c7f6ba79d5fe66762285e5563fd67dac0", 0x42}, {&(0x7f0000002d80)="adc38729220fece136c8587d2572b4e8abb33c413b8ac1ee011cd3dfb343bd4af4aab8ae28ac178232eb5f1508fa1bb32d9da7986372af742a84e72bb72f872dc93d3eacdba194007a378df6e87a67e2df22e6ff93a9ff932e546ed890806e2cacdaf45afa5622f98690041f54c760f4be747acca37fbd5123e694e348e8629e419ea9c67bf99422e27c1331e6a47aa369c809fabccc68e19b7e5044f59445833e956981827d839803fc81ee66b5689a17d5644dec45d0a1390240345f448a5d6ef9925a0ecd15dabaddf1fc916a", 0xce}, {&(0x7f0000002e80)="70bc5e5d8f6315eac66d806a3f097d0806eef8db47ec7b2b91e2ae4398ce8bfbe0eb9f929f26c48043ee93ec32d2588ed67ad1ede8", 0x35}, {&(0x7f0000002ec0)="0ab3be5e8dc83f3f60f5d58cafa40a7900709b7087addbcb34e02cfb6b04b811ab1839d7cc973f1ada6c15cf25c3f4c326246c17d1fbc317b18a61028a9abceaa48cc4a84b73e01df74c7ee3649fcc0227169c641d7d74d915696f9364e73096fda7aa82e83004e366cc282abde40b7d98dc5227298ff47ea6a25be903c94c2cce930557d1b61ed3663fa442007fb8f49544d86050b37a6cca67e2056028f8a04f83be", 0xa3}, {&(0x7f0000002f80)="80270b5efc54fb88a0d78e73e898b5fb24e7468818a9a331090691ceb3999d45274c9432d3a23c32447e957244daae3aad8ae31cf621e822ed239820451ed7d2bbb4fbc08f7cbe6dc58aa7390935683552888ee36aef0a26361a5b914c43204d77d355c4d54e297c3889e50061d1610e927e728890b1ef99e786f5dd47baeadc83224a79a230c3a5049333103b8c029173bb393d25994cac64d7e18c91eb83789923fe19ed8961dffdb9", 0xaa}], 0x7}, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000003100)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r12, 0x0, 0x48c, &(0x7f0000003140)={0x2, 'batadv0\x00', 0x3}, 0x18) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000003180), &(0x7f00000031c0)=0x4) (async) sendmmsg$inet(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003200)="52c732939d53cafa8c05f4564d0f28133f9bf5565b1c66595377f50f30dbaec7b0f9aab99861122b9766f454", 0x2c}], 0x1, &(0x7f0000003280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x88}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}], 0x60}}, {{&(0x7f0000003300)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003400)=[{&(0x7f0000003340)="430dff5771c10b96a0be9d034d27eddccfb0c0ac60395b8ff190cd7ebb7065b0d2a3640336167be292cb1e3444033ad0e620140484aef3754786c368e589114354e91d3fd09576e154d35a8e8d53a6d8d0c4bf112ca7c57479c3bddb07709ecf06d6d4bc82086d10dddb9f7c5981987aad1f31dabfd606f715c3bcf4", 0x7c}, {&(0x7f00000033c0)="425210fe0e649565", 0x8}], 0x2, &(0x7f0000003440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}], 0x18}}, {{&(0x7f0000003480)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003680)=[{&(0x7f00000034c0)="864090685561985ed8a296a7be1c78a98ff67fe6a30321071ef14ad0", 0x1c}, {&(0x7f0000003500)="07c25e5f73358a53f4b9abfb6fa0d8bd27449016378273a80c2ed6f13fee285f3bbcfc2e61b3202283a0cce8531a0fed059b9eae4cef53aa056927a99ccfbe6fdc76e339ea826a0eee310ade84e4821cb01ad03e95a02fff34f32f56bac2ea93af068572e1cab2f1080f298ed6f5cb50a339520ed5a881cc88c0bc4106cbbe271f31f2cf4302281cce39931e597f1ce14aa0bf1357e2c978cf7f17bc09ad171b3611c8daebf62c88", 0xa8}, {&(0x7f00000035c0)="991134ae5c34741e30520c466709cee23fea32fbcb0a292b9cb81960b4b34db100a03f171bd6aa7316b502a198a5a02fb7b9f83a863c404a31c7fc0de4c9ad34492ee229f2870910a26f660fb317acb0dfb0c862c19a181dc6c5bc395fc7432d0a50f9642100acbcb4b25d82f4304fa7ec2e934f74d21d1ad2554e795056f17b19cefc804d9d418a95a65585351cced4aae8d47621011fe175b046dfd53731bceedc2f6c113ad703e92e41cf79360271a5d4db3f9e82096d", 0xb8}], 0x3, &(0x7f00000036c0)=[@ip_retopts={{0xc0, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xb, 0x3, 0x8, [{@empty, 0x140000}, {@private=0xa010102, 0xfff}, {@remote}]}, @timestamp_prespec={0x44, 0x2c, 0x9e, 0x3, 0xa, [{@multicast1, 0x7fff}, {@rand_addr=0x64010101, 0xd}, {@rand_addr=0x100000, 0x7f}, {@private=0xa010101}, {@private=0xa010102, 0xffff4559}]}, @cipso={0x86, 0x18, 0x0, [{0x0, 0xf, "5b094afb3b47374fa185923f56"}, {0x7, 0x3, 'c'}]}, @timestamp_addr={0x44, 0x14, 0x4a, 0x1, 0x2, [{@empty, 0x1f}, {@broadcast, 0x8001}]}, @timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x800}, {@empty, 0x81}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}, @ip_ttl={{0x14, 0x0, 0x2, 0xef6e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x108}}, {{&(0x7f0000003800)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003840)="2ecc435f99c8d9c83ec5f877aaea840b7e79a352393e379640b8797be31c484d5f14ec2bb555ab8106dca1cc325554678ec08d42c95a958dbd192df4856713c91d3dec721efe679790b67d385d6283f327e7f0006f", 0x55}, {&(0x7f00000038c0)="10dc8225d392873be0be32f1a459784ca734718256d5542566e4f068023a468d07dda729163d2c17d66973bd64af9887c69c2f25a602cfaa6fe9ffaf153c5643cd65d6a649b5f3a7e480415afbbc0690be9d1545cbc6e638cebe658452132e2a2233cc868f09d920904de9d4a1adc613d9ce2c7495216c84fde576f444f7a4ceb49ebce0987770d79337b05425bc750cc3ddf0d3b6fc4ce03fbeb0975996cba038a968764c6354f5cdd25f1fcd7c465e3ea998731b99098bc37600e92fa476d66c67c66cd2f68f60a96ae0d90c87a456426583d736a5c89953e982d695c8e98d2b17704c0e", 0xe5}, {&(0x7f00000039c0)="5a0b598eaf65537aa0b59298c5c0c5a076dca8b417f30dd6d64576d40d625a8ab4af6e3c2ff693078897f44fcbe79e8d5363f2bb1466a413e6a8a8a0b88c72456fa6852d30566441617c462d", 0x4c}, {&(0x7f0000003a40)="57ab66bef9557c2892fb51e275728761dbaf7a2cf353e99598b4be8a0cf911778186c9df33c97880fb170ef91e90c7012e701e5feb17916a0b300c33eeddfc6c2cde4b0f00c88844ab8a0639a807ff4723bcb0edce80d990c07678be7e4c354c4fa98722b84309ca34714046f51fd7ae448007d764ff3f8bf31dc5d4504ec037ed2c44f118b591af285c1fef450c827c1cab6840a7360dddfbc44f", 0x9b}, {&(0x7f0000003b00)="69fe316aa80a68324a75d75e41a55e22f7031199a462426a0444a31a71f7c1672c4f457d38095d9e0c32573d38908d1f4715f36dba3b417df0bb4c9ccebd21", 0x3f}, {&(0x7f0000003b40)="d9035801a77a678dd3c00112d86b1335fda23f8ea811c0e8abf08875dbf50df30006fde94e88c6e3225b8e70cc950508b89497d9ddf8bc13b94979893fd8f57a89c2a07a9c6f31cea67537e45d9e804d5740b9bb848c41c52830899150f4e5ec6712618762255d1e71e9d8354a", 0x6d}, {&(0x7f0000003bc0)="4395510973af60100b48b92be0aad6aab60dbb", 0x13}, {&(0x7f0000003c00)="d61d5d264c1f07343fdd30", 0xb}], 0x8, &(0x7f0000003cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x2, [{@empty, 0x7}]}, @ssrr={0x89, 0x23, 0x82, [@loopback, @multicast2, @multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0xcd, 0x1, 0x2, [{@multicast2, 0xfffffbff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xffff0001}, {@multicast1, 0x9}, {@local, 0x3}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x2}, {@local, 0x8}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x7fffffff}]}, @cipso={0x86, 0x5c, 0x2, [{0x2, 0x5, "ea3155"}, {0x7, 0x4, '+\\'}, {0x5, 0xc, "7fed30052789c761bfa9"}, {0x6, 0x6, "5d2a2f9d"}, {0x6, 0x10, "1eab96f645b197cba516d9bc3480"}, {0x3, 0x11, "144a15e11b09272f8f30319a84ae9c"}, {0x0, 0x11, "9b520b58fe7c4db3feea198bd34038"}, {0x7, 0x9, "3209b4574ba7ad"}]}, @rr={0x7, 0x1f, 0x53, [@local, @multicast1, @multicast2, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast]}]}}}], 0x1a8}}, {{&(0x7f0000003e80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004140)=[{&(0x7f0000003ec0)="58a5f71c10dea2fb408246462d49678028b49e6884ba223cafb196d78715bd2aa5e6337ebc687a467da24e1439d07fcae18b522fb8bce10b290e0c83883bd8571120d6f8594f43f2c47b3bb1df49db8790d2dc463445b51f57d0673159f8e6167e9cac", 0x63}, {&(0x7f0000003f40)="fc9b2d9180f6578330431a04923d85e6690793e29575faabd61de5bc46e509010ef7996503001db533aaec5b1e753b291b99fbc52446e122c4f600d9532373eea504327309e9101dbec5422c1570e9bb10db712f65a97e8bf2fbb47b8dc1", 0x5e}, {&(0x7f0000003fc0)="32bb2ae4ced5faa9488ad279ae4fff0cff394286b73dd7d1256a651151ac8d842d5ee424e463799cbb8a0e13035023768331341d46a09e2eb4b555568a0aa749ba293aa8e877bc7e710bafdeab6b253afe6b17c516906a0541b5cd31eaeb6b", 0x5f}, {&(0x7f0000004040)="d1ceaeb5dfed980e105735546813a16f4f7bb881dd3b65bea7b30592f34df9591b255067b9490777cfef103c3198c126710322d5f56e4b82dee59fa709c81670b01e7391e5919af2be2083e8369489f5d4101533a474014aadee91fdd37d0a3a1312cea5d75669201d13834f90b15434a706be3392851edb4207ee4e6473f800262233de70da7d80a059415379162ecb9432b33d5b7bae9d3538729a185978e8238996e32c3fdf9c234daa71f74378de7c8ede7ef3a53f3ecf831179f415e6bb6dc322190e7a8c07a400cbab84b6e5f4b2a3382e795ab8c5b23da33482befb31cdf74835907b8de450a762e20924976e2825c1744afcb761", 0xf8}], 0x4, &(0x7f0000004180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0x20}}], 0x5, 0x800) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000004440)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x100410}, 0xc, &(0x7f0000004400)={&(0x7f0000004340)={0x98, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8}, @val={0xc, 0x99, {0xf7a, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x24000005) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000044c0), r12) sendmsg$NL80211_CMD_ABORT_SCAN(r12, &(0x7f0000004580)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x85100000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x14, r13, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x810) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000045c0)=@usbdevfs_connect={0xa96}) mount(&(0x7f0000004600)=@sr0, &(0x7f0000004640)='./file2\x00', &(0x7f0000004680)='overlay\x00', 0x20, &(0x7f00000046c0)='{,\x00') (async) pidfd_getfd(r2, r0, 0x0) (async) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000004740), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000004840)={&(0x7f0000004700), 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x3c, r14, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '/'}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, '.%&![%$>!'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '}'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c092}, 0x4044081) 2.007708917s ago: executing program 3 (id=3499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000ffffffff0000000000000000000000000900020073797a3100000000050004000000000014000300686173683a69702c706f72742c6970000c000880080008400000009d05000500020000000500010006000000"], 0x58}}, 0x0) 1.91149383s ago: executing program 3 (id=3501): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x8906}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0xfffc, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) 1.747884515s ago: executing program 3 (id=3504): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x800) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) shutdown(r1, 0x1) 1.068232602s ago: executing program 1 (id=3517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) 1.052143816s ago: executing program 1 (id=3518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="002000000180c200000eeaaaaaaaaabb08004500003d000000000029"], 0x4f) 891.921421ms ago: executing program 1 (id=3521): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x1e) 866.607583ms ago: executing program 3 (id=3522): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="772898", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000013c0)="fd4fccdcedb9e6c4881ecbf656b7fd6762288124551e1b368dbc1d984b8e3649871c4d8bf1e541a86d46b536e9a6ef91f18f2e08055e75dceea8ec14e06bcab7b73fbffd8034f6a2a7a9257ccc72f58fb3c36f1852f28ae2f6882eb9b92bdb57ce763e0194baaa3867f317bfc055956540983e634c01415e5be97073f199686e99dd2fc0ebb46445831f2f2fe0f18a817d8ff69b52db0f3d43b63c2ca8a0a5bb4719a2e3bcc3acd38d6c0d1511e259215265a7c8a76468dca9cb0c2820d3f54b907fc4d003bb3c73107c04e6c74e62fd6dedf7d5458c5e", 0xd7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001140)="163654dcac7c1f49d309a21915efd070f07a242c388fc9788c891b2199b474e9e42340298262fb6f7705e935b7649c18d8925afe8aeac384fe855042b7415fc4bf905fd88848af75b84966da2761520882bb6bb7e20a9a9abaea52f5b29f74cf649b6f12edcd4d794e89f2476a0c5447fc22fda77bca37dac8486fcbc2ccf58cca1113af2f12cae7fd8fffc94aa46b1f49fabe7d1bcac4d3842f2ccca4223f791c3ee433638e9568c8a626b7ea7ca6c196b7c5742d67d23884bf9037423613b75ec9ab46d3397ddc92f5a5631a645e90a2f67e96", 0xd4}, {&(0x7f0000000640)="ac1be72df5f1fd1c905e8d276a1ca7104b17cc82d69e5072bc2336db0088d77d3a783edbc687a9f00a9456e5f653e99b2990b87b37684ef3e4655ca3b84a31d24c16a6abde5b6bee796d0251d2b1b5f42b03ae193d91e454f71aa6406b8daad7f450a5b1cfa1e565ec3cc950182ad34842c6aba8728935", 0x77}, {&(0x7f0000000740)="20cc62887693243140d778c5934944501a24730d8c6d8b38997e9949076e20bd7738cfa980e5a64f82a679baf92858aae4adad40af9a51bf607fb006a673640eba315917a63ba63c0c3db7ff9917c6957b95e8ebbd10d00f4f8d612c7e28a483a5d5", 0x62}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x118}}], 0x3, 0x0) 772.116015ms ago: executing program 1 (id=3524): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x18, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x48084) 725.618172ms ago: executing program 1 (id=3526): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in=@rand_addr=0x64010101, 0xa, 0x34, 0x14}]}, 0x38}}, 0x40400c0) 639.809507ms ago: executing program 1 (id=3528): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="cfe6", 0x2}, {&(0x7f0000001300)="0f68da", 0x3}], 0x2}}], 0x1, 0x40) 475.458727ms ago: executing program 4 (id=3532): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x4}}, 0x0, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c) 427.802869ms ago: executing program 2 (id=3533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) 418.553324ms ago: executing program 4 (id=3534): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000004b00)=ANY=[], 0x10) 315.649253ms ago: executing program 2 (id=3535): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 315.455516ms ago: executing program 4 (id=3536): unshare(0x28000600) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) 271.497444ms ago: executing program 4 (id=3537): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) 259.874324ms ago: executing program 2 (id=3538): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x709843, 0x0) unshare(0x2c020400) readv(r0, 0x0, 0x0) 156.08953ms ago: executing program 4 (id=3539): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0xfffffff5) 155.911735ms ago: executing program 2 (id=3540): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x4000000, {0x4, @local, 'bridge_slave_1\x00'}}) 132.726255ms ago: executing program 4 (id=3541): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 120.114997ms ago: executing program 2 (id=3542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100c9006a8dfb6300802b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 0s ago: executing program 2 (id=3543): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=ANY=[], 0x80}}], 0x2, 0x48000) kernel console output (not intermixed with test programs): 275100][T18817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.379450][T17916] udevd[17916]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 566.583123][ T5926] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 566.690888][T17916] udevd[17916]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 566.743134][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 566.750721][ T5926] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 566.767002][ T5926] usb 2-1: config 0 has no interface number 0 [ 566.787799][ T5926] usb 2-1: config 0 interface 184 has no altsetting 0 [ 566.806149][ T5926] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 566.815719][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.824519][ T5926] usb 2-1: Product: syz [ 566.828977][ T5926] usb 2-1: Manufacturer: syz [ 566.834579][ T5926] usb 2-1: SerialNumber: syz [ 566.845419][ T5926] usb 2-1: config 0 descriptor?? [ 566.858428][ T5926] smsc75xx v1.0.0 [ 566.982076][T18847] netlink: 'syz.3.3015': attribute type 4 has an invalid length. [ 566.990082][T18847] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3015'. [ 567.046775][T18847] comedi comedi3: comedi_config --init_data is deprecated [ 567.449382][T18863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.472075][T18863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.496064][T18863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.516091][T18863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.552166][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 567.552187][ T30] audit: type=1326 audit(7699554942.216:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.3.3019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab9418ebe9 code=0x0 [ 567.580755][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.612416][ T30] audit: type=1326 audit(7699554942.216:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.3.3019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab9418ebe9 code=0x0 [ 567.617996][T18871] loop2: detected capacity change from 0 to 7 [ 567.674014][T18871] loop2: [POWERTEC] p1 p2 p3 [ 567.695527][T18871] loop2: p2 start 4294967287 is beyond EOD, truncated [ 567.712597][T18871] loop2: p3 start 1932423285 is beyond EOD, truncated [ 567.807317][T17921] udevd[17921]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 567.889450][ T5926] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 567.977060][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.987217][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.110556][ T5926] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 568.122190][ T5926] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 568.132326][T15506] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 568.141925][ T5926] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 568.153415][ T5926] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 568.172666][ T5926] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 568.201616][ T5926] usb 2-1: USB disconnect, device number 122 [ 568.312349][T15506] usb 3-1: Using ep0 maxpacket: 32 [ 568.326862][T15506] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 568.336756][T15506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.349509][T15506] usb 3-1: Product: syz [ 568.354241][T15506] usb 3-1: Manufacturer: syz [ 568.359142][T15506] usb 3-1: SerialNumber: syz [ 568.381140][T15506] usb 3-1: config 0 descriptor?? [ 568.405089][T15506] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 568.799766][T15506] gspca_stk1135: reg_w 0x0 err -71 [ 568.815590][T15506] gspca_stk1135: serial bus timeout: status=0x00 [ 568.837000][T15506] gspca_stk1135: Sensor write failed [ 568.837041][T15506] gspca_stk1135: serial bus timeout: status=0x00 [ 568.837056][T15506] gspca_stk1135: Sensor write failed [ 568.837089][T15506] gspca_stk1135: serial bus timeout: status=0x00 [ 568.837101][T15506] gspca_stk1135: Sensor read failed [ 568.837130][T15506] gspca_stk1135: serial bus timeout: status=0x00 [ 568.837141][T15506] gspca_stk1135: Sensor read failed [ 568.837149][T15506] gspca_stk1135: Detected sensor type unknown (0x0) [ 568.837184][T15506] gspca_stk1135: serial bus timeout: status=0x00 [ 568.837195][T15506] gspca_stk1135: Sensor read failed [ 568.837227][T15506] gspca_stk1135: serial bus timeout: status=0x00 [ 568.837239][T15506] gspca_stk1135: Sensor read failed [ 568.837271][T15506] gspca_stk1135: serial bus timeout: status=0x00 [ 568.837284][T15506] gspca_stk1135: Sensor write failed [ 568.837317][T15506] gspca_stk1135: serial bus timeout: status=0x00 [ 568.837327][T15506] gspca_stk1135: Sensor write failed [ 568.837406][T15506] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 568.844739][T15506] usb 3-1: USB disconnect, device number 11 [ 568.861542][T17916] udevd[17916]: setting mode of /dev/bus/usb/003/011 to 020664 failed: No such file or directory [ 568.861691][T17916] udevd[17916]: setting owner of /dev/bus/usb/003/011 to uid=0, gid=0 failed: No such file or directory [ 569.371591][ T5933] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 569.388493][T18937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.503311][T18944] program syz.4.3027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.551435][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 569.558726][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 569.570169][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 569.579987][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 569.591551][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 569.605700][ T5933] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 569.616303][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.624437][ T5933] usb 2-1: Product: syz [ 569.628941][ T5933] usb 2-1: Manufacturer: syz [ 569.633971][ T5933] usb 2-1: SerialNumber: syz [ 569.649750][ T5933] usb 2-1: config 0 descriptor?? [ 569.661067][ T5871] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 569.664098][ T5933] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input42 [ 569.683072][ T5216] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 569.706134][ T5216] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 569.722128][ T5216] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 569.736721][ T5216] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 569.769233][T17921] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 569.780407][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 569.788901][ T5216] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 569.815683][ T5216] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 569.828928][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 569.839682][ T5216] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 569.854329][ T5871] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 569.864445][T18924] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 569.874950][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.883351][ T5871] usb 3-1: Product: syz [ 569.887604][ T5871] usb 3-1: Manufacturer: syz [ 569.892378][ T5871] usb 3-1: SerialNumber: syz [ 569.901205][T18924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.915218][T18953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.922985][T18924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.929369][T18953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.932918][ T5871] usb 3-1: config 0 descriptor?? [ 569.948327][T15506] usb 2-1: USB disconnect, device number 123 [ 570.040967][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 570.127762][T18972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.137320][T18972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.160342][T18975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.169721][T18937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.173792][T18975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.191416][T18975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.201799][T18979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.214993][T18937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.312273][ T5871] usb 3-1: USB disconnect, device number 12 [ 570.341381][T18996] loop2: detected capacity change from 0 to 7 [ 570.366631][T17918] loop2: [POWERTEC] p1 p2 p3 [ 570.388258][T17909] udevd[17909]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 570.400975][T17918] loop2: p2 start 4294967287 is beyond EOD, truncated [ 570.416007][T17918] loop2: p3 start 1932423285 is beyond EOD, truncated [ 570.439760][T18996] loop2: [POWERTEC] p1 p2 p3 [ 570.465279][T18996] loop2: p2 start 4294967287 is beyond EOD, truncated [ 570.475480][T18996] loop2: p3 start 1932423285 is beyond EOD, truncated [ 570.577535][T19010] udevd[19010]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 570.626739][T19010] udevd[19010]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 570.685810][T19021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.715670][T19021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.900280][T15506] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 571.009924][ T5933] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 571.063724][T15506] usb 3-1: Using ep0 maxpacket: 32 [ 571.066211][T15506] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 571.084209][T15506] usb 3-1: config 0 has no interface number 0 [ 571.092168][T15506] usb 3-1: config 0 interface 184 has no altsetting 0 [ 571.102756][T15506] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 571.112543][T15506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.121291][T15506] usb 3-1: Product: syz [ 571.125562][T15506] usb 3-1: Manufacturer: syz [ 571.130762][T15506] usb 3-1: SerialNumber: syz [ 571.141666][T15506] usb 3-1: config 0 descriptor?? [ 571.151517][T15506] smsc75xx v1.0.0 [ 571.163258][ T5933] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 571.174400][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.197471][ T5933] usb 2-1: config 0 descriptor?? [ 571.212415][ T5933] gspca_main: spca508-2.14.0 probing 8086:0110 [ 571.297385][T19065] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 571.335007][T19067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.346306][T19067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.418317][ T5933] gspca_spca508: reg_read err -32 [ 571.419382][T19033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.438461][T19033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.452994][T19033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.463836][T19033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.508306][T19084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.517826][T19084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.684470][ T5933] gspca_spca508: reg_read err -71 [ 571.692826][ T5933] gspca_spca508: reg_read err -71 [ 571.698322][ T5933] gspca_spca508: reg_read err -71 [ 571.705567][ T5933] gspca_spca508: reg write: error -71 [ 571.711373][ T5933] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 571.723193][ T5933] usb 2-1: USB disconnect, device number 124 [ 571.934324][T19099] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3043'. [ 572.027841][T19103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.044044][T19103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.166911][T15506] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 572.369682][T15506] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 572.397283][T15506] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 572.418583][T15506] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 572.435908][T15506] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 572.447657][T15506] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 572.481526][T15506] usb 3-1: USB disconnect, device number 13 [ 573.225802][T19169] input: syz0 as /devices/virtual/input/input43 [ 573.387757][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3054'. [ 573.508487][ T5871] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 573.678073][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 573.685599][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short [ 573.700699][ T5871] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 573.709228][ T5871] usb 2-1: config 0 has no interface number 0 [ 573.715507][ T5871] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 573.726749][ T5871] usb 2-1: config 0 interface 88 has no altsetting 0 [ 573.737110][ T5871] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.26 [ 573.746957][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 573.759686][ T5871] usb 2-1: Product: syz [ 573.764037][ T5871] usb 2-1: Manufacturer: syz [ 573.783582][ T5871] usb 2-1: SerialNumber: syz [ 573.807462][ T5871] usb 2-1: config 0 descriptor?? [ 573.827958][ T5919] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 573.997905][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 574.011522][ T5919] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 574.039495][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.067403][ T5919] usb 3-1: config 0 descriptor?? [ 574.300702][ T5919] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 574.314550][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 574.340001][ T5919] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 574.347809][T19226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.367252][T19226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.375703][ T5919] usb 3-1: media controller created [ 574.418747][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.503411][ T5919] az6027: usb out operation failed. (-71) [ 574.523225][ T5919] az6027: usb out operation failed. (-71) [ 574.529392][ T5919] stb0899_attach: Driver disabled by Kconfig [ 574.535690][ T5919] az6027: no front-end attached [ 574.535690][ T5919] [ 574.544633][ T5919] az6027: usb out operation failed. (-71) [ 574.551997][ T5919] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 574.564438][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 574.616273][ T5919] dvb-usb: schedule remote query interval to 400 msecs. [ 574.644328][ T5919] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 574.687402][ T5919] usb 3-1: USB disconnect, device number 14 [ 574.722570][T19245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.750837][T19245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.815383][ T5919] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 575.721550][ T5933] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 575.793029][T19304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.803685][T19304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.816798][T19304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.825897][T19304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.881603][ T5933] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 575.890944][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.902721][T19310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.911254][ T5933] usb 3-1: Product: syz [ 575.914979][T19310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.915896][ T5933] usb 3-1: Manufacturer: syz [ 575.928829][ T5933] usb 3-1: SerialNumber: syz [ 575.947853][ T5933] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 575.975846][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 576.243249][ T5871] usb 2-1: USB disconnect, device number 125 [ 576.468567][ T5933] usb 3-1: USB disconnect, device number 15 [ 576.847333][ T5950] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 577.016160][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 577.047184][ T5950] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 577.065694][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.073757][ T5950] usb 2-1: Product: syz [ 577.089969][ T5950] usb 2-1: Manufacturer: syz [ 577.110060][ T5950] usb 2-1: SerialNumber: syz [ 577.144693][ T5950] r8152-cfgselector 2-1: Unknown version 0x0000 [ 577.168337][ T5950] r8152-cfgselector 2-1: config 0 descriptor?? [ 577.251352][ T10] usb 3-1: Service connection timeout for: 256 [ 577.257696][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 577.268778][ T10] ath9k_htc: Failed to initialize the device [ 577.276956][ T5933] usb 3-1: ath9k_htc: USB layer deinitialized [ 577.372509][T19382] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 577.380935][T19382] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 577.398821][T19382] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 577.411045][T19382] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 577.557488][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 577.565991][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 577.606362][ T5933] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 577.633641][T19345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.664509][T19345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.732311][T19400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.748856][T19400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.787925][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 577.797228][ T5933] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 577.808151][ T5933] usb 3-1: config 0 has no interface number 0 [ 577.820953][ T5933] usb 3-1: config 0 interface 184 has no altsetting 0 [ 577.833090][ T5933] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 577.847903][T15506] r8152-cfgselector 2-1: USB disconnect, device number 126 [ 577.879126][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.897458][ T5933] usb 3-1: Product: syz [ 577.907333][ T5933] usb 3-1: Manufacturer: syz [ 577.922393][ T5933] usb 3-1: SerialNumber: syz [ 577.954520][ T5933] usb 3-1: config 0 descriptor?? [ 577.983568][ T5933] smsc75xx v1.0.0 [ 578.374805][ T5926] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 578.504807][ T5926] usb 2-1: device descriptor read/64, error -71 [ 578.605234][T19437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.617447][T19437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.754591][ T5926] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 578.884619][ T5926] usb 2-1: device descriptor read/64, error -71 [ 578.996065][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 578.997310][ T5926] usb usb2-port1: attempt power cycle [ 579.094592][T19447] fuse: Bad value for 'user_id' [ 579.099532][T19447] fuse: Bad value for 'user_id' [ 579.187646][T19447] Invalid source name [ 579.192070][T19447] UBIFS error (pid: 19447): cannot open "./file0", error -22 [ 579.198848][T19449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.217330][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 579.223231][T19449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.231218][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 579.254972][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 579.266833][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 579.279121][ T5933] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 579.293864][T19449] Failed to get privilege flags for destination (handle=0x2:0x3) [ 579.297065][ T5933] usb 3-1: USB disconnect, device number 16 [ 579.314956][T19449] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 579.344270][ T5926] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 579.369171][ T5926] usb 2-1: device descriptor read/8, error -71 [ 579.500472][T19459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.514143][T19459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.614166][ T5926] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 579.648132][ T5926] usb 2-1: device descriptor read/8, error -71 [ 579.764451][ T5926] usb usb2-port1: unable to enumerate USB device [ 580.300608][T19482] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3088'. [ 580.617413][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3089'. [ 580.621551][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3091'. [ 580.898026][T19502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.910305][T19502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.073095][ T5933] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 581.243113][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 581.257533][ T5933] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 581.268444][ T5933] usb 3-1: config 0 has no interface number 0 [ 581.275935][ T5933] usb 3-1: config 0 interface 184 has no altsetting 0 [ 581.286349][ T5933] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 581.297700][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.306350][ T5933] usb 3-1: Product: syz [ 581.310669][ T5933] usb 3-1: Manufacturer: syz [ 581.316066][ T5933] usb 3-1: SerialNumber: syz [ 581.328591][ T5933] usb 3-1: config 0 descriptor?? [ 581.361941][ T5933] smsc75xx v1.0.0 [ 581.541504][T19524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.557119][T19524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.565562][ T5926] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 581.727901][ T5926] usb 2-1: config 0 has an invalid descriptor of length 199, skipping remainder of the config [ 581.738332][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.760140][ T5926] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 581.769322][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 581.780742][ T5926] usb 2-1: Product: syz [ 581.786586][ T5926] usb 2-1: Manufacturer: syz [ 581.803564][ T5926] usb 2-1: config 0 descriptor?? [ 581.823996][ T5926] cdc_wdm 2-1:0.0: skipping garbage [ 581.830173][ T5926] cdc_wdm 2-1:0.0: probe with driver cdc_wdm failed with error -22 [ 582.185715][T19531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.206381][T19531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.376166][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 582.456421][T19538] netlink: 'syz.3.3098': attribute type 27 has an invalid length. [ 582.503803][T19538] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.511130][T19538] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.534622][T19538] bridge0: left promiscuous mode [ 582.539739][T19538] bridge0: left allmulticast mode [ 582.578758][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 582.593224][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 582.605138][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 582.616649][ T5933] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 582.637532][ T5933] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 582.657362][ T5933] usb 3-1: USB disconnect, device number 17 [ 582.681332][T19538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.700246][T19538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.765040][T19538] macvlan1: left allmulticast mode [ 582.831458][T19539] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.857730][T19549] C: renamed from team_slave_0 (while UP) [ 582.867464][T19549] netlink: 'syz.4.3099': attribute type 1 has an invalid length. [ 582.875856][T19549] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3099'. [ 582.885789][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.898883][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.907892][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.019399][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'. [ 583.257076][T19568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.275892][T19568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.283516][T19572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.295613][T19572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.909271][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.918908][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.108850][T19597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.119850][T19597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.138137][T19597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.151456][T19597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.237109][ T5919] usb 2-1: USB disconnect, device number 5 [ 584.243137][ T5933] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 584.319280][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3111'. [ 584.354396][T19621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.367737][T19621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.414167][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 584.421619][ T5933] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 584.430413][ T5933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.446463][ T5933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.466353][ T5933] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.476627][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.485228][ T5933] usb 3-1: Product: syz [ 584.489517][ T5933] usb 3-1: Manufacturer: syz [ 584.495401][ T5933] usb 3-1: SerialNumber: syz [ 584.580067][ T30] audit: type=1326 audit(7699554959.258:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.1.3113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f013078ebe9 code=0x0 [ 584.816070][ T30] audit: type=1326 audit(7699554959.498:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19587 comm="syz.2.3109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff22018ebe9 code=0x0 [ 584.925989][T19589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.974673][T19589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.001918][ T5933] usb 3-1: 0:2 : does not exist [ 585.044315][ T5933] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 585.146074][ T5933] usb 3-1: USB disconnect, device number 18 [ 585.210665][T19010] udevd[19010]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 585.244906][T19669] syzkaller1: entered promiscuous mode [ 585.255031][T19669] syzkaller1: entered allmulticast mode [ 585.551301][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3121'. [ 585.626033][T19712] loop2: detected capacity change from 0 to 7 [ 585.660908][T19712] loop2: [POWERTEC] p1 p2 p3 [ 585.683540][T19712] loop2: p2 start 4294967287 is beyond EOD, truncated [ 585.690823][T19712] loop2: p3 start 1932423285 is beyond EOD, truncated [ 585.822374][T19010] udevd[19010]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 585.907725][T19726] program syz.3.3124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.926117][T19726] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 585.955042][T19728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.972599][T19728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.039541][ T5871] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 586.142936][T19735] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3127'. [ 586.207546][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.227028][ T5871] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 586.253839][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.287216][ T5871] usb 2-1: config 0 descriptor?? [ 586.294912][T19740] option changes via remount are deprecated (pid=19739 comm=syz.2.3128) [ 586.502006][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.548595][T19760] loop2: detected capacity change from 0 to 7 [ 586.556677][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.573353][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 586.580306][T19760] loop2: [POWERTEC] p1 p2 p3 [ 586.581708][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 586.596514][T19753] ceph: No mds server is up or the cluster is laggy [ 586.603948][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 586.613122][T19760] loop2: p2 start 4294967287 is beyond EOD, truncated [ 586.615691][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 586.639366][T19760] loop2: p3 start 1932423285 is beyond EOD, truncated [ 586.686225][T19769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.710418][T19769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.745100][ T5871] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 586.777720][T19775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'. [ 586.802224][T19010] udevd[19010]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 586.812671][ T5871] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001F/input/input45 [ 586.990750][ T5871] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 587.278270][ T5871] usb 2-1: USB disconnect, device number 6 [ 587.433637][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3139'. [ 587.447325][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3139'. [ 587.465536][T19835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.476949][T19835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.498617][ T5933] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 587.517838][T19840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.531212][T19840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.648602][ T5933] usb 3-1: device descriptor read/64, error -71 [ 587.888476][ T5933] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 588.040107][ T5933] usb 3-1: device descriptor read/64, error -71 [ 588.082398][ T5950] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 588.122853][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3143'. [ 588.139985][T19854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.150482][ T5933] usb usb3-port1: attempt power cycle [ 588.155059][T19854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.258250][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 588.270709][ T5950] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 588.271340][T19862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.293080][ T5950] usb 2-1: config 0 has no interface number 0 [ 588.297240][T19862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.300572][ T5950] usb 2-1: config 0 interface 184 has no altsetting 0 [ 588.315075][T19862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3145'. [ 588.321965][ T5950] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 588.333495][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.341838][ T5950] usb 2-1: Product: syz [ 588.346023][ T5950] usb 2-1: Manufacturer: syz [ 588.354415][ T5950] usb 2-1: SerialNumber: syz [ 588.362463][ T5950] usb 2-1: config 0 descriptor?? [ 588.371517][ T5950] smsc75xx v1.0.0 [ 588.508275][ T5933] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 588.548603][ T5933] usb 3-1: device descriptor read/8, error -71 [ 588.713918][T19868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.723970][T19868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.787740][ T5933] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 588.788753][T19875] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 588.808961][ T5933] usb 3-1: device descriptor read/8, error -71 [ 588.824512][T19875] CIFS mount error: No usable UNC path provided in device string! [ 588.824512][T19875] [ 588.838811][T19875] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 588.853893][T19876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.869395][T19876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.932370][T19880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.942981][ T5933] usb usb3-port1: unable to enumerate USB device [ 588.944260][T19880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.982511][ T5950] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 588.993630][ T5950] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 589.409693][ T5950] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 589.429117][ T5950] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 589.439357][ T5950] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 589.450315][ T5950] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 589.466672][T19889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3149'. [ 589.468090][ T5950] usb 2-1: USB disconnect, device number 7 [ 589.604805][T19898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.614012][T19898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.643582][T19898] netlink: 'syz.3.3150': attribute type 11 has an invalid length. [ 589.673204][T19898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.682571][T19898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.772527][T19909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.782045][T19909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.276917][ T5871] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 590.438752][ T5871] usb 2-1: no configurations [ 590.443417][ T5871] usb 2-1: can't read configurations, error -22 [ 590.520518][T19943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3159'. [ 590.577252][ T5871] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 590.640399][T19952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.660550][T19952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.737658][ T5871] usb 2-1: no configurations [ 590.742318][ T5871] usb 2-1: can't read configurations, error -22 [ 590.750376][ T5871] usb usb2-port1: attempt power cycle [ 590.786967][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 590.894509][T19964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.903922][T19964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.936282][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 590.959485][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.981499][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.999734][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 16672, setting to 1024 [ 591.012798][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 591.032619][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.051239][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.061387][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.106288][ T5871] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 591.128156][ T5871] usb 2-1: no configurations [ 591.132852][ T5871] usb 2-1: can't read configurations, error -22 [ 591.266100][ T5871] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 591.289390][ T5871] usb 2-1: no configurations [ 591.294365][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 591.300249][ T5871] usb 2-1: can't read configurations, error -22 [ 591.304466][T19979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.306735][ T24] usbtmc 3-1:16.0: can't read capabilities [ 591.309211][ T5871] usb usb2-port1: unable to enumerate USB device [ 591.326577][T19979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.504290][T19946] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32 [ 592.142040][T19999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.158945][T19999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.173864][T19999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.188356][T19999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.541007][T20007] binder: 20006:20007 ioctl c018620c 200000000080 returned -1 [ 592.594459][T20009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3171'. [ 592.604171][T20009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3171'. [ 592.618388][T20009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3171'. [ 592.676990][T20011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.690257][T20011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.906235][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.913635][ C0] bridge0: topology change detected, propagating [ 592.920510][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.927803][ C0] bridge0: topology change detected, propagating [ 593.243013][T20040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.253032][T20040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.394812][ T5919] usb 3-1: USB disconnect, device number 23 [ 593.444819][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 593.521205][T20053] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3177'. [ 593.628061][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.638621][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 593.652324][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.667513][ T24] usb 2-1: config 0 descriptor?? [ 593.679039][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 593.684101][T20062] tmpfs: Bad value for 'mpol' [ 593.871866][T20071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.892600][T20071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.916475][ T5919] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 593.995591][T20083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.008770][T20083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.074259][ T5919] usb 3-1: device descriptor read/64, error -71 [ 594.089541][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 594.096990][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 594.103993][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 594.313106][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 594.320599][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 594.327204][ T5919] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 594.335833][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 594.343085][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 594.357045][T20035] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 594.363645][T20035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 594.371438][T20035] vhci_hcd vhci_hcd.0: Device attached [ 594.380303][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 594.387677][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 594.389964][T20035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.404606][T20035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.474124][ T5919] usb 3-1: device descriptor read/64, error -71 [ 594.520965][T20091] smc: net device bond0 applied user defined pnetid SYZ2 [ 594.529900][T20091] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3185'. [ 594.554347][ T5926] vhci_hcd: vhci_device speed not set [ 594.603170][ T5919] usb usb3-port1: attempt power cycle [ 594.615382][ T5926] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 594.631884][T20035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.647760][T20035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.682216][T20035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.704295][T20035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.714888][T20035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.732553][T20035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.742317][T20086] vhci_hcd: connection reset by peer [ 594.759389][ T738] vhci_hcd: stop threads [ 594.760648][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 594.768804][ T738] vhci_hcd: release socket [ 594.771301][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 594.779468][ T738] vhci_hcd: disconnect device [ 594.800562][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 594.808625][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 594.825750][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 594.844451][ T24] pwc: Registered as video103. [ 594.851687][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 594.906379][ T24] usb 2-1: USB disconnect, device number 12 [ 594.955932][ T5919] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 595.006198][ T5919] usb 3-1: device descriptor read/8, error -71 [ 595.008441][T20091] smc: removing net device bond0 with user defined pnetid SYZ2 [ 595.035175][T20091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.051206][T20091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.077565][T20091] bond0 (unregistering): Released all slaves [ 595.243526][ T5919] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 595.264205][ T5919] usb 3-1: device descriptor read/8, error -71 [ 595.378399][ T5919] usb usb3-port1: unable to enumerate USB device [ 595.551842][T20181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.561854][T20181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.774952][T20189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.784155][ T5919] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 595.792739][T20189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.955052][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 595.967289][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 595.991358][ T5919] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 596.000660][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.008719][ T5919] usb 2-1: Product: syz [ 596.013120][ T5919] usb 2-1: Manufacturer: syz [ 596.018183][ T5919] usb 2-1: SerialNumber: syz [ 596.026875][ T5919] usb 2-1: config 0 descriptor?? [ 596.234574][ T5919] powermate: unknown product id 0240 [ 596.247391][ T5919] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47 [ 596.270321][ C1] powermate: config urb returned -71 [ 596.277290][ C1] powermate: config urb returned -71 [ 596.284394][ C1] powermate: config urb returned -71 [ 596.290056][ C1] powermate: config urb returned -71 [ 596.295549][ T5919] usb 2-1: USB disconnect, device number 13 [ 596.301711][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 596.420229][T20217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.429988][T20217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.640625][T20225] vivid-000: ================= START STATUS ================= [ 596.651475][T20225] vivid-000: Enable Output Cropping: true [ 596.659240][T20225] vivid-000: Enable Output Composing: true [ 596.666490][T20225] vivid-000: Enable Output Scaler: true [ 596.672203][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 596.679021][T20225] vivid-000: Transmit Mode: HDMI [ 596.684173][T20225] vivid-000: Hotplug Present: 0x00000000 [ 596.689988][T20225] vivid-000: RxSense Present: 0x00000000 [ 596.696032][T20225] vivid-000: EDID Present: 0x00000000 [ 596.701600][T20225] vivid-000: ================== END STATUS ================== [ 596.709852][T20225] vivid-000: ================= START STATUS ================= [ 596.719466][T20225] vivid-000: Enable Output Cropping: true [ 596.725440][T20225] vivid-000: Enable Output Composing: true [ 596.731323][T20225] vivid-000: Enable Output Scaler: true [ 596.737026][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 596.747418][T20225] vivid-000: Transmit Mode: HDMI [ 596.752674][T20225] vivid-000: Hotplug Present: 0x00000000 [ 596.758356][T20225] vivid-000: RxSense Present: 0x00000000 [ 596.764239][T20225] vivid-000: EDID Present: 0x00000000 [ 596.769670][T20225] vivid-000: ================== END STATUS ================== [ 596.778137][T20225] vivid-000: ================= START STATUS ================= [ 596.785889][T20225] vivid-000: Enable Output Cropping: true [ 596.792142][T20225] vivid-000: Enable Output Composing: true [ 596.798762][T20225] vivid-000: Enable Output Scaler: true [ 596.804559][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 596.811022][T20225] vivid-000: Transmit Mode: HDMI [ 596.816585][T20225] vivid-000: Hotplug Present: 0x00000000 [ 596.824223][T20225] vivid-000: RxSense Present: 0x00000000 [ 596.830048][T20225] vivid-000: EDID Present: 0x00000000 [ 596.835609][T20225] vivid-000: ================== END STATUS ================== [ 596.843629][T20225] vivid-000: ================= START STATUS ================= [ 596.851803][T20225] vivid-000: Enable Output Cropping: true [ 596.857805][T20225] vivid-000: Enable Output Composing: true [ 596.865288][T20225] vivid-000: Enable Output Scaler: true [ 596.871046][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 596.880891][T20225] vivid-000: Transmit Mode: HDMI [ 596.889021][T20225] vivid-000: Hotplug Present: 0x00000000 [ 596.898710][T20225] vivid-000: RxSense Present: 0x00000000 [ 596.907956][T20225] vivid-000: EDID Present: 0x00000000 [ 596.916276][T20225] vivid-000: ================== END STATUS ================== [ 596.927490][T20225] vivid-000: ================= START STATUS ================= [ 596.939555][T20225] vivid-000: Enable Output Cropping: true [ 596.950513][T20225] vivid-000: Enable Output Composing: true [ 596.959243][T20225] vivid-000: Enable Output Scaler: true [ 596.967901][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 596.978342][T20225] vivid-000: Transmit Mode: HDMI [ 596.985595][T20225] vivid-000: Hotplug Present: 0x00000000 [ 596.991464][T20225] vivid-000: RxSense Present: 0x00000000 [ 597.001475][T20225] vivid-000: EDID Present: 0x00000000 [ 597.009002][T20225] vivid-000: ================== END STATUS ================== [ 597.019537][T20225] vivid-000: ================= START STATUS ================= [ 597.029931][T20225] vivid-000: Enable Output Cropping: true [ 597.040609][T20225] vivid-000: Enable Output Composing: true [ 597.049761][T20225] vivid-000: Enable Output Scaler: true [ 597.058982][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 597.069521][T20225] vivid-000: Transmit Mode: HDMI [ 597.078362][T20225] vivid-000: Hotplug Present: 0x00000000 [ 597.083552][T20237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.085973][T20225] vivid-000: RxSense Present: 0x00000000 [ 597.098290][T20225] vivid-000: EDID Present: 0x00000000 [ 597.107603][T20225] vivid-000: ================== END STATUS ================== [ 597.110512][T20237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.117136][T20225] vivid-000: ================= START STATUS ================= [ 597.135205][T20225] vivid-000: Enable Output Cropping: true [ 597.141003][T20225] vivid-000: Enable Output Composing: true [ 597.148899][T20225] vivid-000: Enable Output Scaler: true [ 597.157082][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 597.166047][T20225] vivid-000: Transmit Mode: HDMI [ 597.171314][T20225] vivid-000: Hotplug Present: 0x00000000 [ 597.177178][T20225] vivid-000: RxSense Present: 0x00000000 [ 597.183176][ T5919] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 597.193661][T20225] vivid-000: EDID Present: 0x00000000 [ 597.199217][T20225] vivid-000: ================== END STATUS ================== [ 597.207442][T20225] vivid-000: ================= START STATUS ================= [ 597.215475][T20225] vivid-000: Enable Output Cropping: true [ 597.221480][T20225] vivid-000: Enable Output Composing: true [ 597.227554][T20225] vivid-000: Enable Output Scaler: true [ 597.233419][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 597.239984][T20225] vivid-000: Transmit Mode: HDMI [ 597.245420][T20225] vivid-000: Hotplug Present: 0x00000000 [ 597.251207][T20225] vivid-000: RxSense Present: 0x00000000 [ 597.257629][T20225] vivid-000: EDID Present: 0x00000000 [ 597.263883][T20225] vivid-000: ================== END STATUS ================== [ 597.273994][T20225] vivid-000: ================= START STATUS ================= [ 597.282111][T20225] vivid-000: Enable Output Cropping: true [ 597.288612][T20225] vivid-000: Enable Output Composing: true [ 597.296903][T20225] vivid-000: Enable Output Scaler: true [ 597.307079][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 597.314102][T20225] vivid-000: Transmit Mode: HDMI [ 597.319331][T20225] vivid-000: Hotplug Present: 0x00000000 [ 597.325282][ T5919] usb 2-1: device descriptor read/64, error -71 [ 597.334173][T20225] vivid-000: RxSense Present: 0x00000000 [ 597.339972][T20225] vivid-000: EDID Present: 0x00000000 [ 597.346042][T20225] vivid-000: ================== END STATUS ================== [ 597.359233][T20225] vivid-000: ================= START STATUS ================= [ 597.367465][T20225] vivid-000: Enable Output Cropping: true [ 597.373846][T20225] vivid-000: Enable Output Composing: true [ 597.379887][T20225] vivid-000: Enable Output Scaler: true [ 597.386607][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 597.393535][T20225] vivid-000: Transmit Mode: HDMI [ 597.399847][T20225] vivid-000: Hotplug Present: 0x00000000 [ 597.410211][T20225] vivid-000: RxSense Present: 0x00000000 [ 597.419823][T20237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.434363][T20225] vivid-000: EDID Present: 0x00000000 [ 597.439828][T20225] vivid-000: ================== END STATUS ================== [ 597.451781][T20237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.462907][T20225] vivid-000: ================= START STATUS ================= [ 597.470048][T20237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.470910][T20225] vivid-000: Enable Output Cropping: true [ 597.489476][T20225] vivid-000: Enable Output Composing: true [ 597.497012][T20237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.498924][T20225] vivid-000: Enable Output Scaler: true [ 597.511231][T20225] vivid-000: Tx RGB Quantization Range: Automatic [ 597.519734][T20225] vivid-000: Transmit Mode: HDMI [ 597.526218][T20225] vivid-000: Hotplug Present: 0x00000000 [ 597.537470][T20225] vivid-000: RxSense Present: 0x00000000 [ 597.543737][T20225] vivid-000: EDID Present: 0x00000000 [ 597.549413][T20225] vivid-000: ================== END STATUS ================== [ 597.572134][ T5919] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 597.711863][ T5919] usb 2-1: device descriptor read/64, error -71 [ 597.832013][ T5919] usb usb2-port1: attempt power cycle [ 598.111854][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 598.181600][ T5919] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 598.212065][ T5919] usb 2-1: device descriptor read/8, error -71 [ 598.261432][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 598.268463][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 598.277280][ T10] usb 3-1: config 0 has no interface number 0 [ 598.286197][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 598.297418][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 598.307968][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.316347][ T10] usb 3-1: Product: syz [ 598.320687][ T10] usb 3-1: Manufacturer: syz [ 598.325780][ T10] usb 3-1: SerialNumber: syz [ 598.335307][ T10] usb 3-1: config 0 descriptor?? [ 598.345119][ T10] smsc75xx v1.0.0 [ 598.461631][ T5919] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 598.501266][ T5919] usb 2-1: device descriptor read/8, error -71 [ 598.612092][ T5919] usb usb2-port1: unable to enumerate USB device [ 598.696691][T20268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.706035][T20268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.188470][T20279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.197850][T20279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.267520][T20283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.277021][T20283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.356208][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 599.762552][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 599.770628][ T5926] vhci_hcd: vhci_device speed not set [ 599.787672][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 599.802117][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 599.817475][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 599.828064][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 599.843635][ T10] usb 3-1: USB disconnect, device number 28 [ 599.883239][T20288] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 600.069977][T20314] loop2: detected capacity change from 0 to 7 [ 600.084336][T19010] loop2: [POWERTEC] p1 p2 p3 [ 600.091969][T19010] loop2: p2 start 4294967287 is beyond EOD, truncated [ 600.099588][T19010] loop2: p3 start 1932423285 is beyond EOD, truncated [ 600.119353][T20314] loop2: [POWERTEC] p1 p2 p3 [ 600.130366][T20314] loop2: p2 start 4294967287 is beyond EOD, truncated [ 600.137305][T20314] loop2: p3 start 1932423285 is beyond EOD, truncated [ 600.214524][T19010] udevd[19010]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 600.264492][T19010] udevd[19010]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 600.268947][T20334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.299353][T20334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.350164][ T850] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 600.416169][T20344] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3218'. [ 600.501193][T20348] program syz.3.3219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.511010][ T850] usb 2-1: Using ep0 maxpacket: 32 [ 600.518605][ T850] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 600.549934][ T850] usb 2-1: config 0 has no interface number 0 [ 600.556135][ T850] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.588769][ T850] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.603385][ T850] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 600.613103][ T850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.638022][ T850] usb 2-1: config 0 descriptor?? [ 600.658701][T20360] block nbd3: Attempted send on invalid socket [ 600.672966][T20360] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 600.684360][T20360] block nbd3: Attempted send on invalid socket [ 600.690705][T20360] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 600.869834][T20121] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 601.019980][T20121] usb 3-1: device descriptor read/64, error -71 [ 601.041504][T20369] loop2: detected capacity change from 0 to 7 [ 601.052501][T20369] loop2: [POWERTEC] p1 p2 p3 [ 601.061529][T20369] loop2: p2 start 4294967287 is beyond EOD, truncated [ 601.069119][T20369] loop2: p3 start 1932423285 is beyond EOD, truncated [ 601.130917][T19010] udevd[19010]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 601.248937][ T850] uclogic 0003:28BD:0094.0020: pen parameters not found [ 601.256458][ T850] uclogic 0003:28BD:0094.0020: interface is invalid, ignoring [ 601.289613][T20121] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 601.324827][T20385] tmpfs: Bad value for 'mpol' [ 601.331429][T20385] CUSE: DEVNAME unspecified [ 601.338893][T20385] tmpfs: Unknown parameter '/dev/cuse' [ 601.430786][T20121] usb 3-1: device descriptor read/64, error -71 [ 601.453286][ T5926] usb 2-1: USB disconnect, device number 18 [ 601.528557][T20401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.537890][T20401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.549613][T20121] usb usb3-port1: attempt power cycle [ 601.899037][T20121] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 601.919644][T20121] usb 3-1: device descriptor read/8, error -71 [ 602.097353][T20410] kvm: kvm [20409]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000003a) = 0x0 [ 602.158803][T20121] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 602.180991][T20121] usb 3-1: device descriptor read/8, error -71 [ 602.238746][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 602.292669][T20422] loop2: detected capacity change from 0 to 7 [ 602.297170][T20121] usb usb3-port1: unable to enumerate USB device [ 602.307659][T20417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.314597][T19010] loop2: [POWERTEC] p1 p2 p3 [ 602.319999][T20418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.332276][T20417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.343460][T20418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.354697][T19010] loop2: p2 start 4294967287 is beyond EOD, truncated [ 602.361808][T19010] loop2: p3 start 1932423285 is beyond EOD, truncated [ 602.393659][T20422] loop2: [POWERTEC] p1 p2 p3 [ 602.406501][T20422] loop2: p2 start 4294967287 is beyond EOD, truncated [ 602.414233][T20422] loop2: p3 start 1932423285 is beyond EOD, truncated [ 602.432869][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 602.448599][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.456713][ T10] usb 2-1: Product: syz [ 602.468617][ T10] usb 2-1: Manufacturer: syz [ 602.476411][ T10] usb 2-1: SerialNumber: syz [ 602.486044][T19010] udevd[19010]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 602.511893][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 602.532187][ T5933] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 602.553114][T19010] udevd[19010]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 602.736610][T20447] netlink: 133 bytes leftover after parsing attributes in process `syz.4.3234'. [ 602.813134][T20449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.822234][T20449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.981236][ T5926] usb 2-1: USB disconnect, device number 19 [ 603.003137][T20453] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 603.369775][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.379160][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.392384][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.402872][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.412544][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.421899][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.432106][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.442051][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.451609][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.462686][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.471807][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.480684][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.584863][T20481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3239'. [ 603.630131][ T5933] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 603.683784][ T5933] ath9k_htc: Failed to initialize the device [ 603.708440][ T5926] usb 2-1: ath9k_htc: USB layer deinitialized [ 603.800350][T20498] loop2: detected capacity change from 0 to 7 [ 603.811939][T19010] loop2: [POWERTEC] p1 p2 p3 [ 603.829066][T19010] loop2: p2 start 4294967287 is beyond EOD, truncated [ 603.835904][T19010] loop2: p3 start 1932423285 is beyond EOD, truncated [ 603.873205][T20498] loop2: [POWERTEC] p1 p2 p3 [ 603.881510][T20498] loop2: p2 start 4294967287 is beyond EOD, truncated [ 603.889285][T20498] loop2: p3 start 1932423285 is beyond EOD, truncated [ 604.546092][T20491] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 604.554434][T20491] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 604.562321][T20491] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 604.570899][T20491] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 604.585130][T20491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 604.591353][T20491] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 604.608441][T20506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.641082][T20506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.666823][T20506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.678966][T20506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.722255][T20526] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.731768][T20526] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.741145][T20526] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.750339][T20526] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.759031][T20526] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.766610][T20526] Dead loop on virtual device ip6_vti0, fix it urgently! [ 604.881779][ T5933] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 605.010281][T20544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.021260][T20544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.031255][T20544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.043382][T20544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.060740][ T5933] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.072529][ T5933] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 605.081601][ T5933] usb 2-1: config 1 has no interface number 1 [ 605.087922][ T5933] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 605.101148][ T5933] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 605.114068][ T5933] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.123204][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.131357][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 605.139722][ T5933] usb 2-1: Product: syz [ 605.143915][ T5933] usb 2-1: Manufacturer: syz [ 605.148897][ T5933] usb 2-1: SerialNumber: syz [ 605.161972][T20510] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 605.311579][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.322773][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.332842][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.347128][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.357118][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.374685][ T10] usb 3-1: config 0 descriptor?? [ 605.391407][T20557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.417381][T20557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.432802][ T5933] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 605.441865][ T5933] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 605.488842][ T5933] usb 2-1: USB disconnect, device number 20 [ 605.552273][T18038] udevd[18038]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 605.651117][T20588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.666035][T20588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.667415][T20590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.683063][T20590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.840547][ T10] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 606.078032][T20616] binder: 20615:20616 ioctl c0306201 200000000080 returned -14 [ 606.104582][T20616] binder: 20615:20616 ioctl 80184132 200000000200 returned -22 [ 606.146289][T20619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.164339][T20619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.170045][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.197665][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.213368][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.222859][T20534] netlink: 'syz.2.3248': attribute type 8 has an invalid length. [ 606.239985][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.315755][T20619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.327209][T20619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.349002][T20619] syzkaller1: entered promiscuous mode [ 606.354619][T20619] syzkaller1: entered allmulticast mode [ 606.433097][T20643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.448954][T20643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.575942][ T5181] Bluetooth: hci5: command 0x0406 tx timeout [ 606.585990][ T5181] Bluetooth: hci3: command 0x0406 tx timeout [ 606.657158][ T5181] Bluetooth: hci1: command 0x0406 tx timeout [ 607.233297][T20670] program syz.4.3267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.253834][T20671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.264913][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3266'. [ 607.265518][T20671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.494635][T20684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.504182][T20684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.795714][T20121] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 607.915124][T20709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.931701][T20709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.942935][T20706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.953628][T20706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.961911][T20121] usb 2-1: Invalid ep0 maxpacket: 64 [ 608.096674][T20121] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 608.209129][T20716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.220407][T20716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.223000][ T5933] usb 3-1: reset high-speed USB device number 33 using dummy_hcd [ 608.254981][T20121] usb 2-1: Invalid ep0 maxpacket: 64 [ 608.261027][T20121] usb usb2-port1: attempt power cycle [ 608.387009][ T5933] usb 3-1: device descriptor read/64, error -71 [ 608.437787][T20726] overlayfs: failed to resolve './file0': -2 [ 608.453594][T20726] overlayfs: failed to resolve './file0': -2 [ 608.461851][T20726] overlayfs: failed to resolve './file0': -2 [ 608.469343][T20726] overlayfs: failed to resolve './file0': -2 [ 608.477779][T20726] overlayfs: failed to resolve './file0': -2 [ 608.488241][T20726] overlayfs: failed to resolve './file0': -2 [ 608.498094][T20726] overlayfs: failed to resolve './file0': -2 [ 608.505323][T20726] overlayfs: failed to resolve './file0': -2 [ 608.517626][T20726] overlayfs: failed to resolve './file0': -2 [ 608.525840][T20726] overlayfs: failed to resolve './file0': -2 [ 608.535489][T20726] overlayfs: failed to resolve './file0': -2 [ 608.546674][T20726] overlayfs: failed to resolve './file0': -2 [ 608.559211][T20726] overlayfs: failed to resolve './file0': -2 [ 608.568729][T20726] overlayfs: failed to resolve './file0': -2 [ 608.581801][T20726] overlayfs: failed to resolve './file0': -2 [ 608.594560][T20726] overlayfs: failed to resolve './file0': -2 [ 608.602417][T20726] overlayfs: failed to resolve './file0': -2 [ 608.611695][T20726] overlayfs: failed to resolve './file0': -2 [ 608.614667][T20121] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 608.631206][T20726] overlayfs: failed to resolve './file0': -2 [ 608.648928][T20726] overlayfs: failed to resolve './file0': -2 [ 608.654815][ T5181] Bluetooth: hci3: command 0x0406 tx timeout [ 608.661930][T20121] usb 2-1: Invalid ep0 maxpacket: 64 [ 608.662413][T20726] overlayfs: failed to resolve './file0': -2 [ 608.674128][ T5933] usb 3-1: reset high-speed USB device number 33 using dummy_hcd [ 608.688667][T20726] overlayfs: failed to resolve './file0': -2 [ 608.697842][T20726] overlayfs: failed to resolve './file0': -2 [ 608.709701][T20726] overlayfs: failed to resolve './file0': -2 [ 608.716839][T20726] overlayfs: failed to resolve './file0': -2 [ 608.724727][T20726] overlayfs: failed to resolve './file0': -2 [ 608.731667][T20726] overlayfs: failed to resolve './file0': -2 [ 608.738067][ T5181] Bluetooth: hci1: command 0x0406 tx timeout [ 608.747680][T20726] overlayfs: failed to resolve './file0': -2 [ 608.757963][T20726] overlayfs: failed to resolve './file0': -2 [ 608.765466][T20726] overlayfs: failed to resolve './file0': -2 [ 608.772467][T20726] overlayfs: failed to resolve './file0': -2 [ 608.780234][T20726] overlayfs: failed to resolve './file0': -2 [ 608.788148][T20726] overlayfs: failed to resolve './file0': -2 [ 608.806385][T20121] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 608.825178][T20121] usb 2-1: Invalid ep0 maxpacket: 64 [ 608.834560][ T5933] usb 3-1: device descriptor read/64, error -71 [ 608.835538][T20121] usb usb2-port1: unable to enumerate USB device [ 608.881504][T20735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.900189][T20735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.923228][T20739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.936235][T20740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.940514][T20739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.945991][T20735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.960189][T20740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.964901][T20735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.982593][T20740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.987753][T20735] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 608.994051][T20740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.999704][T20735] overlayfs: failed to set xattr on upper [ 609.012355][T20735] overlayfs: ...falling back to redirect_dir=nofollow. [ 609.017815][T20740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.021160][T20735] overlayfs: ...falling back to index=off. [ 609.036787][T20735] overlayfs: ...falling back to uuid=null. [ 609.039632][T20740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.043179][T20735] overlayfs: ...falling back to xino=off. [ 609.059952][T20740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.069748][T20740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.079927][T20740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.091817][T20740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.106419][ T5933] usb 3-1: reset high-speed USB device number 33 using dummy_hcd [ 609.135210][ T5933] usb 3-1: device descriptor read/8, error -71 [ 609.375461][ T5933] usb 3-1: reset high-speed USB device number 33 using dummy_hcd [ 609.394753][ T5933] usb 3-1: device descriptor read/8, error -71 [ 609.508262][ T5950] usb 3-1: USB disconnect, device number 33 [ 609.674200][ T5950] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 609.782711][T20771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.796842][T20778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.810867][T20778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.853471][ T5950] usb 3-1: device descriptor read/64, error -71 [ 609.887657][ T5181] Bluetooth: hci5: unexpected event for opcode 0x200c [ 610.104356][ T5950] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 610.243521][ T5950] usb 3-1: device descriptor read/64, error -71 [ 610.354004][ T5950] usb usb3-port1: attempt power cycle [ 610.567688][T20804] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3288'. [ 610.703430][ T5950] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 610.733855][ T5950] usb 3-1: device descriptor read/8, error -71 [ 610.759629][T20810] dlm: non-version read from control device 2 [ 610.979261][T20820] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3294'. [ 611.473474][T20829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.493045][T20829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.535466][T20826] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 611.546628][T20826] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 611.553551][T20829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.566325][T20829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.831412][T20845] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3299'. [ 611.959976][T20849] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 611.959976][T20849] The task syz.1.3300 (20849) triggered the difference, watch for misbehavior. [ 612.149157][T20851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.161791][T20851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.602073][ T5950] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 612.753061][T20866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.758272][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 612.780284][T20864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.789543][ T5950] usb 3-1: not running at top speed; connect to a high speed hub [ 612.797024][T20864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.799895][T20866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.823307][ T5950] usb 3-1: config 10 has an invalid interface number: 50 but max is 0 [ 612.831545][ T5950] usb 3-1: config 10 has no interface number 0 [ 612.840598][ T5950] usb 3-1: config 10 interface 50 has no altsetting 0 [ 612.850579][ T5950] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=43.2d [ 612.860515][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.868931][ T5950] usb 3-1: Product: syz [ 612.874812][ T5950] usb 3-1: Manufacturer: syz [ 612.879450][ T5950] usb 3-1: SerialNumber: syz [ 613.097638][ T5950] usbserial_generic 3-1:10.50: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 613.121884][ T5950] usbserial_generic 3-1:10.50: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 613.133961][ T5950] usbserial_generic 3-1:10.50: device has no bulk endpoints [ 613.153916][ T5950] usb 3-1: USB disconnect, device number 38 [ 613.481679][ T850] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 613.577105][T20897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.586757][T20897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.641585][ T850] usb 2-1: Using ep0 maxpacket: 32 [ 613.652930][ T850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 613.681855][ T850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 613.731268][ T850] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.759641][ T850] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 613.787992][ T850] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 613.801191][ T850] usb 2-1: Product: syz [ 613.805423][ T850] usb 2-1: Manufacturer: syz [ 613.810271][ T850] usb 2-1: SerialNumber: syz [ 613.836787][ T850] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input49 [ 613.980764][T20921] ./cgroup: Can't lookup blockdev [ 614.013769][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 614.190621][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 614.199047][ T24] usb 3-1: config 3 has an invalid interface number: 227 but max is 0 [ 614.210794][ T24] usb 3-1: config 3 has no interface number 0 [ 614.241117][ T24] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=8a.99 [ 614.258694][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.268741][ T24] usb 3-1: Product: syz [ 614.275967][ T24] usb 3-1: Manufacturer: syz [ 614.287141][ T24] usb 3-1: SerialNumber: syz [ 614.304610][ T24] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 614.319049][ T24] cxusb: set interface failed [ 614.324781][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 614.335806][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 614.354115][ T24] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 614.363784][ T24] usb 3-1: media controller created [ 614.388808][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.466194][ T24] DVB: Unable to find symbol lgdt330x_attach() [ 614.472621][ T24] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 614.490898][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 614.504594][ T24] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 614.536226][ T24] usb 3-1: USB disconnect, device number 39 [ 614.585026][ T24] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 614.699075][T20968] netlink: 1064 bytes leftover after parsing attributes in process `syz.4.3317'. [ 614.751242][T20970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.763306][T20970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.772705][T20970] tmpfs: Bad value for 'mpol' [ 614.854907][T20970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.862786][T20975] tmpfs: Bad value for 'mpol' [ 614.865146][T20970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.949536][T20979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.958846][T20979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.136054][T20989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.146770][T20989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.320274][ T5950] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 615.473558][ T5950] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 615.482027][ T5950] usb 3-1: config 0 has no interface number 0 [ 615.488295][ T5950] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 615.503057][ T5950] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 615.521719][ T5950] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 615.536810][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.544743][T20993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.545155][ T5950] usb 3-1: Product: syz [ 615.558448][ T5950] usb 3-1: Manufacturer: syz [ 615.563232][ T5950] usb 3-1: SerialNumber: syz [ 615.565050][T20993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.580470][ T5950] usb 3-1: config 0 descriptor?? [ 615.588791][T20984] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 615.600479][ T5950] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 615.620077][ T5950] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 615.945079][ T5950] usb 2-1: USB disconnect, device number 25 [ 616.001685][ T5950] appletouch 2-1:1.0: input: appletouch disconnected [ 616.022696][ T24] usb 3-1: USB disconnect, device number 40 [ 616.096099][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 616.139323][ T24] cyberjack 3-1:0.69: device disconnected [ 616.248306][T21039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.268551][T21039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.859291][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 616.989223][ T24] usb 3-1: device descriptor read/64, error -71 [ 617.096036][T21070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.115302][T21070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.128483][T21070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.139806][T21070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.229043][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 617.358999][ T24] usb 3-1: device descriptor read/64, error -71 [ 617.402598][T21078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.418159][T21078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.436436][T21078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.448731][T21078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.484434][ T24] usb usb3-port1: attempt power cycle [ 617.798847][ T850] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 617.838711][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 617.859482][ T24] usb 3-1: device descriptor read/8, error -71 [ 617.958828][ T850] usb 2-1: Using ep0 maxpacket: 8 [ 617.984837][ T850] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 617.998861][ T850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.006912][ T850] usb 2-1: Product: syz [ 618.028516][ T850] usb 2-1: Manufacturer: syz [ 618.038848][ T850] usb 2-1: SerialNumber: syz [ 618.054145][ T850] usb 2-1: config 0 descriptor?? [ 618.070079][ T850] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 618.108510][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 618.140185][ T24] usb 3-1: device descriptor read/8, error -71 [ 618.153069][T21106] netlink: 'syz.3.3341': attribute type 2 has an invalid length. [ 618.168155][T21106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.183448][T21106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.246043][T21111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3342'. [ 618.259303][ T24] usb usb3-port1: unable to enumerate USB device [ 618.270467][ T850] gspca_vc032x: reg_r err -71 [ 618.275668][ T850] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 618.291797][ T850] usb 2-1: USB disconnect, device number 26 [ 619.057183][T21137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.073916][T21137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.143319][T21148] netlink: 'syz.4.3351': attribute type 1 has an invalid length. [ 619.151516][T21148] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3351'. [ 619.357808][ T5950] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 619.509495][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.520688][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.530641][ T5950] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 619.539981][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.551888][ T5950] usb 2-1: config 0 descriptor?? [ 619.933979][T21186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.946264][T21186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.056744][T21195] 8021q: VLANs not supported on caif0 [ 620.069123][T21195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.081416][T21195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.137320][ T850] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 620.267332][ T850] usb 3-1: device descriptor read/64, error -71 [ 620.507091][ T850] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 620.637054][ T850] usb 3-1: device descriptor read/64, error -71 [ 620.666134][T21201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.680004][T21201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.694872][T21199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.705461][T21199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.747088][ T850] usb usb3-port1: attempt power cycle [ 620.867694][T21230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.886081][T21230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.906484][T21230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.915979][T21230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.096695][ T850] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 621.128987][ T850] usb 3-1: device descriptor read/8, error -71 [ 621.367280][ T850] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 621.391532][ T850] usb 3-1: device descriptor read/8, error -71 [ 621.506993][ T850] usb usb3-port1: unable to enumerate USB device [ 621.730779][T21252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.747958][T21252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.896761][T21267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.905899][T21267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.145361][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 622.158040][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 622.173672][ T5950] usb 2-1: USB disconnect, device number 27 [ 622.380418][T21285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.389397][T21285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.462863][T21289] loop7: detected capacity change from 0 to 7 [ 622.474586][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.483839][ C1] buffer_io_error: 40 callbacks suppressed [ 622.483861][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.499908][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.509149][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.517740][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.526951][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.536751][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.546109][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.554399][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.563678][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.571802][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.581105][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.589585][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.598805][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.606771][T21289] ldm_validate_partition_table(): Disk read failed. [ 622.613631][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.622943][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.632640][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.641853][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.652393][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.661680][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 622.670485][T21289] Dev loop7: unable to read RDB block 0 [ 622.677178][T21289] loop7: unable to read partition table [ 622.683155][T21289] loop7: partition table beyond EOD, truncated [ 622.689894][T21289] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 622.816870][T21295] overlay: ./file0 is not a directory [ 623.030921][T21320] netlink: 'syz.3.3377': attribute type 5 has an invalid length. [ 623.038919][T21320] netlink: 'syz.3.3377': attribute type 25 has an invalid length. [ 623.228997][T21334] netlink: 'syz.1.3380': attribute type 3 has an invalid length. [ 623.238707][T21334] netlink: 'syz.1.3380': attribute type 1 has an invalid length. [ 623.246688][T21334] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3380'. [ 623.295276][ T5926] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 623.318210][T21337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.337765][T21337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.447679][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 623.455861][ T5926] usb 3-1: can't read configurations, error -61 [ 623.584998][ T5926] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 623.608801][ T850] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 623.736995][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 623.745130][ T5926] usb 3-1: can't read configurations, error -61 [ 623.751766][ T5926] usb usb3-port1: attempt power cycle [ 623.768524][ T850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.778481][ T850] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 623.787657][ T850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.798514][ T850] usb 2-1: config 0 descriptor?? [ 624.094966][ T5926] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 624.129214][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 624.137021][ T5926] usb 3-1: can't read configurations, error -61 [ 624.216850][ T850] smartjoyplus 0003:6666:8804.0022: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.1-1/input0 [ 624.229131][ T850] smartjoyplus 0003:6666:8804.0022: no output reports found [ 624.284590][ T5926] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 624.322248][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 624.333316][ T5926] usb 3-1: can't read configurations, error -61 [ 624.343252][ T5926] usb usb3-port1: unable to enumerate USB device [ 624.409602][ T5926] usb 2-1: USB disconnect, device number 28 [ 624.668878][T21375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.683216][T21375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.060657][T21385] netlink: 'syz.1.3388': attribute type 3 has an invalid length. [ 625.069194][T21385] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 625.077425][T21385] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3388'. [ 625.087474][T21385] NCSI netlink: No device for ifindex 0 [ 625.102411][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'. [ 625.111562][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'. [ 625.122985][T21385] Bluetooth: MGMT ver 1.23 [ 625.366947][T21400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.376495][T21400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.363208][ T5926] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 626.547891][ T5926] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 626.568425][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.588369][ T5926] usb 3-1: Product: syz [ 626.599120][ T5926] usb 3-1: Manufacturer: syz [ 626.611480][ T5926] usb 3-1: SerialNumber: syz [ 626.636881][ T5926] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 626.669185][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 626.893423][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3401'. [ 627.018577][T21445] netlink: 57 bytes leftover after parsing attributes in process `syz.4.3402'. [ 627.063557][ T5950] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 627.203035][ T5181] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 627.212963][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 627.221064][ T5950] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 627.230617][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.249775][ T5950] usb 2-1: config 0 descriptor?? [ 627.254958][ T5181] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 627.457780][ T5950] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 627.484518][ T5950] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 627.493934][ T5950] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 627.666964][T21432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.679140][T21432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.725616][T21473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.761616][T21473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.773830][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 627.786943][ T24] ath9k_htc: Failed to initialize the device [ 627.836665][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 627.961400][T21482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.974371][T21482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.999469][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'. [ 628.077887][T15506] usb 3-1: USB disconnect, device number 53 [ 628.577811][T21512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.586816][T21512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.708104][T21529] tracefs: Unknown parameter '&^˾>ȃ Z$ω]hO2 ' [ 628.757974][T21531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.768500][T21531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.914407][ T850] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 629.071727][ T850] usb 3-1: Using ep0 maxpacket: 8 [ 629.081130][ T850] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 629.090954][ T850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.099329][ T850] usb 3-1: Product: syz [ 629.104745][ T850] usb 3-1: Manufacturer: syz [ 629.109398][ T850] usb 3-1: SerialNumber: syz [ 629.116727][ T850] usb 3-1: config 0 descriptor?? [ 629.127697][ T850] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 629.136502][ T850] dvb-usb: bulk message failed: -22 (2/0) [ 629.145162][ T850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 629.155297][ T850] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 629.164715][ T850] usb 3-1: media controller created [ 629.187338][ T850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.327955][ T850] dvb-usb: bulk message failed: -22 (1/0) [ 629.367339][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.367544][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.403361][ T850] DVB: Unable to find symbol mt352_attach() [ 629.409609][ T850] dvb-usb: bulk message failed: -22 (5/0) [ 629.419587][ T850] zl10353_read_register: readreg error (reg=127, ret==-121) [ 629.420185][T21543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.428264][ T850] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 629.445944][T21543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.511288][ T850] rc_core: IR keymap rc-dvico-mce not found [ 629.517259][ T850] Registered IR keymap rc-empty [ 629.533159][ T850] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 629.546366][ T850] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input50 [ 629.559674][ T850] dvb-usb: schedule remote query interval to 100 msecs. [ 629.566746][ T850] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 629.585247][ T850] usb 3-1: USB disconnect, device number 54 [ 629.661385][ T850] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 630.237749][T21582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.261441][T21582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.418640][ T36] tipc: Subscription rejected, illegal request [ 630.430383][T21596] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3423'. [ 630.441790][T21596] 0{X: renamed from macvtap0 (while UP) [ 630.450930][T21596] 0{X: entered allmulticast mode [ 630.456346][T21596] veth0_macvtap: entered allmulticast mode [ 630.462858][T21596] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 630.800792][T15506] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 630.823678][T21607] program syz.4.3425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.876012][T21609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.885917][T21609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.901729][T21609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.911783][T21609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.961198][T15506] usb 3-1: Using ep0 maxpacket: 32 [ 630.973602][T15506] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 630.987821][T15506] usb 3-1: config 0 has no interface number 0 [ 630.995910][T15506] usb 3-1: config 0 interface 184 has no altsetting 0 [ 631.011170][T15506] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 631.030804][T15506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.042585][T15506] usb 3-1: Product: syz [ 631.047162][T15506] usb 3-1: Manufacturer: syz [ 631.052892][T15506] usb 3-1: SerialNumber: syz [ 631.076278][T15506] usb 3-1: config 0 descriptor?? [ 631.129727][T15506] smsc75xx v1.0.0 [ 631.138492][T15506] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 631.153433][T15506] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 631.389638][T21638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.415422][T21638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.908527][T21668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.926024][T21668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.277915][T21680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.288869][T21680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.303913][T21680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.313231][T21680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.323379][T21680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.333088][T21680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.347063][T21680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.358470][T21680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.963259][T21740] tmpfs: Cannot change global quota limit on remount [ 632.975552][T21740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.990013][T21740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.045566][T21745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3446'. [ 633.336903][T21763] netlink: 'syz.4.3449': attribute type 10 has an invalid length. [ 633.353844][T21763] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 633.420011][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 633.478111][T21769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.487812][T21769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.507077][T21769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.532788][T21769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.607271][ T5926] usb 3-1: USB disconnect, device number 55 [ 633.764180][T21795] Attempt to restore checkpoint with obsolete wellknown handles [ 634.216209][T21806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.226147][T21806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.280174][T21813] mmap: syz.4.3458 (21813): VmData 37466112 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 634.297694][T21813] autofs: Bad value for 'fd' [ 634.346495][T21815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.357410][T21815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.638597][T21822] block nbd3: Device being setup by another task [ 634.879658][T15506] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 634.958812][T21833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.970516][T21833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.070738][T15506] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 635.079629][T15506] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.090569][T15506] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 635.100042][T15506] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.116082][T15506] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 635.126105][T15506] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 635.134370][T15506] usb 3-1: Product: syz [ 635.138736][T15506] usb 3-1: Manufacturer: syz [ 635.152478][T15506] cdc_wdm 3-1:1.0: skipping garbage [ 635.157880][T15506] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 635.345498][T21820] block nbd3: shutting down sockets [ 635.354022][ T5181] Bluetooth: hci1: Malformed LE Event: 0x0d [ 635.369120][T15506] usb 3-1: USB disconnect, device number 56 [ 635.436159][T21848] netlink: 'syz.3.3464': attribute type 10 has an invalid length. [ 635.444683][T21848] veth1_vlan: entered allmulticast mode [ 635.644567][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 635.654813][T21863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 635.799874][T21873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.816671][T21873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.018671][T21883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.034333][T21883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.139470][T21884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.195878][T21868] syz.4.3468: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 636.219726][T21868] CPU: 1 UID: 0 PID: 21868 Comm: syz.4.3468 Not tainted syzkaller #0 PREEMPT(full) [ 636.219756][T21868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.219771][T21868] Call Trace: [ 636.219780][T21868] [ 636.219790][T21868] dump_stack_lvl+0x189/0x250 [ 636.219816][T21868] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 636.219842][T21868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.219863][T21868] ? __pfx__printk+0x10/0x10 [ 636.219896][T21868] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 636.219929][T21868] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 636.219969][T21868] warn_alloc+0x214/0x310 [ 636.220010][T21868] ? __pfx_warn_alloc+0x10/0x10 [ 636.220046][T21868] ? __get_vm_area_node+0x28f/0x300 [ 636.220070][T21868] ? nf_tables_newset+0x1330/0x2540 [ 636.220100][T21868] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 636.220157][T21868] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 636.220182][T21868] ? nf_tables_newset+0x1330/0x2540 [ 636.220212][T21868] ? rcu_is_watching+0x15/0xb0 [ 636.220241][T21868] ? nf_tables_newset+0x1330/0x2540 [ 636.220267][T21868] __kvmalloc_node_noprof+0x674/0x910 [ 636.220294][T21868] ? nf_tables_newset+0x1330/0x2540 [ 636.220324][T21868] ? nft_set_lookup+0x128/0x150 [ 636.220352][T21868] ? nft_hash_privsize+0x8f/0xf0 [ 636.220377][T21868] nf_tables_newset+0x1330/0x2540 [ 636.220417][T21868] ? __pfx_nf_tables_newset+0x10/0x10 [ 636.220466][T21868] ? __nla_parse+0x40/0x60 [ 636.220503][T21868] nfnetlink_rcv+0x1132/0x2520 [ 636.220591][T21868] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 636.220640][T21868] ? ref_tracker_free+0x63a/0x7d0 [ 636.220699][T21868] ? __netlink_deliver_tap+0x807/0x850 [ 636.220720][T21868] ? netlink_deliver_tap+0x2e/0x1b0 [ 636.220759][T21868] netlink_unicast+0x82c/0x9e0 [ 636.220801][T21868] ? __pfx_netlink_unicast+0x10/0x10 [ 636.220834][T21868] ? netlink_sendmsg+0x642/0xb30 [ 636.220854][T21868] ? skb_put+0x11b/0x210 [ 636.220881][T21868] netlink_sendmsg+0x805/0xb30 [ 636.220914][T21868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.220939][T21868] ? aa_sock_msg_perm+0xf1/0x1d0 [ 636.220980][T21868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.221011][T21868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.221033][T21868] __sock_sendmsg+0x219/0x270 [ 636.221065][T21868] ____sys_sendmsg+0x505/0x830 [ 636.221095][T21868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.221127][T21868] ? import_iovec+0x74/0xa0 [ 636.221152][T21868] ___sys_sendmsg+0x21f/0x2a0 [ 636.221180][T21868] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.221242][T21868] ? __fget_files+0x2a/0x420 [ 636.221271][T21868] ? __fget_files+0x3a0/0x420 [ 636.221312][T21868] __x64_sys_sendmsg+0x19b/0x260 [ 636.221341][T21868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.221385][T21868] ? do_syscall_64+0xbe/0xfa0 [ 636.221409][T21868] do_syscall_64+0xfa/0xfa0 [ 636.221429][T21868] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.221450][T21868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.221473][T21868] ? clear_bhb_loop+0x60/0xb0 [ 636.221501][T21868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.221522][T21868] RIP: 0033:0x7fd02318ebe9 [ 636.221541][T21868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.221561][T21868] RSP: 002b:00007fd0213f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.221585][T21868] RAX: ffffffffffffffda RBX: 00007fd0233c5fa0 RCX: 00007fd02318ebe9 [ 636.221602][T21868] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 636.221616][T21868] RBP: 00007fd023211e19 R08: 0000000000000000 R09: 0000000000000000 [ 636.221630][T21868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.221643][T21868] R13: 00007fd0233c6038 R14: 00007fd0233c5fa0 R15: 00007ffe106a0b78 [ 636.221680][T21868] [ 636.221882][T21868] Mem-Info: [ 636.597460][T21868] active_anon:24333 inactive_anon:0 isolated_anon:0 [ 636.597460][T21868] active_file:17799 inactive_file:40125 isolated_file:0 [ 636.597460][T21868] unevictable:16153 dirty:43 writeback:0 [ 636.597460][T21868] slab_reclaimable:10635 slab_unreclaimable:97614 [ 636.597460][T21868] mapped:30949 shmem:16749 pagetables:1435 [ 636.597460][T21868] sec_pagetables:0 bounce:0 [ 636.597460][T21868] kernel_misc_reclaimable:0 [ 636.597460][T21868] free:1273525 free_pcp:16121 free_cma:0 [ 636.646204][T21868] Node 0 active_anon:97332kB inactive_anon:0kB active_file:71196kB inactive_file:160304kB unevictable:63076kB isolated(anon):0kB isolated(file):0kB mapped:123796kB dirty:172kB writeback:0kB shmem:65460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:12104kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 636.683622][T21868] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 636.716154][T21868] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.753891][T21868] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 636.760916][T21868] Node 0 DMA32 free:1190952kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97388kB inactive_anon:0kB active_file:71196kB inactive_file:159228kB unevictable:63076kB writepending:172kB zspages:0kB present:3129332kB managed:2555528kB mlocked:0kB bounce:0kB free_pcp:38208kB local_pcp:18944kB free_cma:0kB [ 636.800654][T21868] lowmem_reserve[]: 0 0 1 1 1 [ 636.805505][T21868] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1076kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 636.822848][T21884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.852656][T21868] lowmem_reserve[]: 0 0 0 0 0 [ 636.858389][T21868] Node 1 Normal free:3887848kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26944kB local_pcp:16288kB free_cma:0kB [ 636.899250][T21868] lowmem_reserve[]: 0 0 0 0 0 [ 636.904173][T21868] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 636.920956][T21868] Node 0 DMA32: 2974*4kB (UM) 1206*8kB (UME) 1408*16kB (UME) 2719*32kB (UME) 1171*64kB (UME) 428*128kB (UME) 146*256kB (UME) 84*512kB (UME) 24*1024kB (UME) 5*2048kB (UM) 199*4096kB (UM) = 1191112kB [ 636.930427][T21900] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 636.942292][T21868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 636.962572][T21868] Node 1 Normal: 202*4kB (UME) 58*8kB (UME) 45*16kB (UME) 159*32kB (UME) 43*64kB (UME) 13*128kB (UME) 4*256kB (ME) 1*512kB (M) 0*1024kB 2*2048kB (ME) 945*4096kB (UM) = 3887848kB [ 636.980772][T21868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.000168][T21900] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 637.001049][T21868] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.016604][T21900] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 637.025945][T21900] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 637.032275][T21868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.045088][T21900] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 637.053274][T21884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.065695][T21868] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.067987][T21900] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 637.075528][T21868] 90054 total pagecache pages [ 637.088113][T21900] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 637.088162][T21868] 0 pages in swap cache [ 637.097659][T21900] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 637.101154][T21868] Free swap = 124996kB [ 637.108728][T21900] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 637.120305][T21900] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 637.125981][T21868] Total swap = 124996kB [ 637.152201][T21868] 2097051 pages RAM [ 637.156136][T21868] 0 pages HighMem/MovableOnly [ 637.160995][T21868] 426271 pages reserved [ 637.165290][T21868] 0 pages cma reserved [ 637.189746][T21884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.290547][T21913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.306108][T21913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.359098][T21913] syzkaller0: entered promiscuous mode [ 637.365087][T21913] syzkaller0: entered allmulticast mode [ 637.395371][T21920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.410780][T21920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.455698][T21926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 637.524304][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.555150][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.591054][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.635113][ T1331] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.725022][T21912] syzkaller0: left allmulticast mode [ 637.736563][T21912] syzkaller0: left promiscuous mode [ 637.828009][T21957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3478'. [ 637.844932][ T5181] Bluetooth: hci3: unexpected event for opcode 0x202d [ 637.973773][T21964] f2fs: Unknown parameter 'ah' [ 638.121628][T21980] lo speed is unknown, defaulting to 1000 [ 638.131694][T21980] lo speed is unknown, defaulting to 1000 [ 638.138624][T21980] lo speed is unknown, defaulting to 1000 [ 638.155132][T21980] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 638.192467][T21982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.195703][T21980] lo speed is unknown, defaulting to 1000 [ 638.216338][T21982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.225392][T21980] lo speed is unknown, defaulting to 1000 [ 638.237805][T21980] lo speed is unknown, defaulting to 1000 [ 638.240094][T21982] netlink: 393 bytes leftover after parsing attributes in process `syz.3.3483'. [ 638.246377][T21980] lo speed is unknown, defaulting to 1000 [ 638.260908][T21980] lo speed is unknown, defaulting to 1000 [ 638.298203][T21982] netlink: 'syz.3.3483': attribute type 3 has an invalid length. [ 638.338300][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 638.984900][T22024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.999501][T22024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.175651][T15506] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 639.337132][T15506] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 639.347212][T15506] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 639.361502][T15506] usb 3-1: config 220 has no interface number 2 [ 639.368193][T15506] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 639.381599][T15506] usb 3-1: config 220 interface 0 has no altsetting 0 [ 639.388515][T15506] usb 3-1: config 220 interface 76 has no altsetting 0 [ 639.395650][T15506] usb 3-1: config 220 interface 1 has no altsetting 0 [ 639.404904][T15506] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 639.424850][T15506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.433194][T15506] usb 3-1: Product: syz [ 639.437698][T15506] usb 3-1: Manufacturer: syz [ 639.442364][T15506] usb 3-1: SerialNumber: syz [ 639.527724][T22039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.538935][T22039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.634016][T22045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.654025][T22045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.064594][T22019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.076522][T22019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.087660][T15506] usb 3-1: selecting invalid altsetting 0 [ 640.094046][T15506] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 640.119709][T15506] usb 3-1: No valid video chain found. [ 640.135642][T15506] usb 3-1: selecting invalid altsetting 0 [ 640.141589][T15506] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 640.157923][T15506] usb 3-1: USB disconnect, device number 57 [ 640.182984][T22058] 9p filesystem being mounted at /372/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 641.701518][T22159] netlink: 'syz.2.3529': attribute type 2 has an invalid length. [ 641.939823][T22172] netlink: 'syz.2.3535': attribute type 4 has an invalid length. [ 641.956778][T22172] netlink: 'syz.2.3535': attribute type 4 has an invalid length. [ 642.189454][T22187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3542'. [ 642.248148][T22188] ================================================================== [ 642.256288][T22188] BUG: KASAN: wild-memory-access in crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.265371][T22188] Read of size 15 at addr 0005088000000000 by task syz.4.3541/22188 [ 642.273397][T22188] [ 642.275749][T22188] CPU: 1 UID: 0 PID: 22188 Comm: syz.4.3541 Not tainted syzkaller #0 PREEMPT(full) [ 642.275777][T22188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.275793][T22188] Call Trace: [ 642.275804][T22188] [ 642.275815][T22188] dump_stack_lvl+0x189/0x250 [ 642.275843][T22188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.275866][T22188] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 642.275902][T22188] ? __virt_addr_valid+0x7c/0x5c0 [ 642.275941][T22188] ? crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.275966][T22188] kasan_report+0x118/0x150 [ 642.275995][T22188] ? crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.276023][T22188] ? crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.276049][T22188] kasan_check_range+0x2b0/0x2c0 [ 642.276076][T22188] ? crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.276101][T22188] __asan_memcpy+0x29/0x70 [ 642.276123][T22188] crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.276149][T22188] ? __pfx_nh_sse2+0x10/0x10 [ 642.276177][T22188] nhpoly1305_sse2_update+0x68/0xb0 [ 642.276206][T22188] shash_ahash_update+0x213/0x2f0 [ 642.276236][T22188] hash_sendmsg+0x96b/0x11d0 [ 642.276284][T22188] ? __pfx_hash_sendmsg+0x10/0x10 [ 642.276316][T22188] __sock_sendmsg+0x219/0x270 [ 642.276349][T22188] ____sys_sendmsg+0x52d/0x830 [ 642.276376][T22188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.276406][T22188] ? import_iovec+0x74/0xa0 [ 642.276429][T22188] ___sys_sendmsg+0x21f/0x2a0 [ 642.276455][T22188] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.276498][T22188] ? __fget_files+0x2a/0x420 [ 642.276527][T22188] ? __fget_files+0x3a0/0x420 [ 642.276560][T22188] __sys_sendmmsg+0x227/0x430 [ 642.276586][T22188] ? __pfx___sys_sendmmsg+0x10/0x10 [ 642.276615][T22188] ? __pfx_do_futex+0x10/0x10 [ 642.276660][T22188] ? __pfx___se_sys_futex+0x10/0x10 [ 642.276698][T22188] __x64_sys_sendmmsg+0xa0/0xc0 [ 642.276724][T22188] do_syscall_64+0xfa/0xfa0 [ 642.276746][T22188] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.276779][T22188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.276805][T22188] ? clear_bhb_loop+0x60/0xb0 [ 642.276837][T22188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.276860][T22188] RIP: 0033:0x7fd02318ebe9 [ 642.276881][T22188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.276903][T22188] RSP: 002b:00007fd0213d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 642.276928][T22188] RAX: ffffffffffffffda RBX: 00007fd0233c6090 RCX: 00007fd02318ebe9 [ 642.276947][T22188] RDX: 0000000000000001 RSI: 0000200000004140 RDI: 0000000000000006 [ 642.276962][T22188] RBP: 00007fd023211e19 R08: 0000000000000000 R09: 0000000000000000 [ 642.276978][T22188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.276992][T22188] R13: 00007fd0233c6128 R14: 00007fd0233c6090 R15: 00007ffe106a0b78 [ 642.277019][T22188] [ 642.277028][T22188] ================================================================== [ 642.565892][T22188] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 642.573115][T22188] CPU: 1 UID: 0 PID: 22188 Comm: syz.4.3541 Not tainted syzkaller #0 PREEMPT(full) [ 642.582599][T22188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.592680][T22188] Call Trace: [ 642.595991][T22188] [ 642.598934][T22188] dump_stack_lvl+0x99/0x250 [ 642.603541][T22188] ? __asan_memcpy+0x40/0x70 [ 642.608142][T22188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.613363][T22188] ? __pfx__printk+0x10/0x10 [ 642.617990][T22188] vpanic+0x237/0x6d0 [ 642.622002][T22188] ? __pfx_vpanic+0x10/0x10 [ 642.626547][T22188] panic+0xb9/0xc0 [ 642.630321][T22188] ? __pfx_panic+0x10/0x10 [ 642.634759][T22188] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 642.640738][T22188] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 642.646659][T22188] ? crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.653002][T22188] check_panic_on_warn+0x89/0xb0 [ 642.657993][T22188] ? crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.664349][T22188] end_report+0x78/0x160 [ 642.668619][T22188] kasan_report+0x129/0x150 [ 642.673142][T22188] ? crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.679492][T22188] ? crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.685856][T22188] kasan_check_range+0x2b0/0x2c0 [ 642.690846][T22188] ? crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.697211][T22188] __asan_memcpy+0x29/0x70 [ 642.701665][T22188] crypto_nhpoly1305_update_helper+0x156/0x390 [ 642.707840][T22188] ? __pfx_nh_sse2+0x10/0x10 [ 642.712448][T22188] nhpoly1305_sse2_update+0x68/0xb0 [ 642.717769][T22188] shash_ahash_update+0x213/0x2f0 [ 642.722827][T22188] hash_sendmsg+0x96b/0x11d0 [ 642.727454][T22188] ? __pfx_hash_sendmsg+0x10/0x10 [ 642.732536][T22188] __sock_sendmsg+0x219/0x270 [ 642.737264][T22188] ____sys_sendmsg+0x52d/0x830 [ 642.742056][T22188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.747367][T22188] ? import_iovec+0x74/0xa0 [ 642.751887][T22188] ___sys_sendmsg+0x21f/0x2a0 [ 642.756580][T22188] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.761821][T22188] ? __fget_files+0x2a/0x420 [ 642.766881][T22188] ? __fget_files+0x3a0/0x420 [ 642.771603][T22188] __sys_sendmmsg+0x227/0x430 [ 642.776433][T22188] ? __pfx___sys_sendmmsg+0x10/0x10 [ 642.781746][T22188] ? __pfx_do_futex+0x10/0x10 [ 642.786539][T22188] ? __pfx___se_sys_futex+0x10/0x10 [ 642.791761][T22188] __x64_sys_sendmmsg+0xa0/0xc0 [ 642.796714][T22188] do_syscall_64+0xfa/0xfa0 [ 642.801338][T22188] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.806652][T22188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.812754][T22188] ? clear_bhb_loop+0x60/0xb0 [ 642.817551][T22188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.823556][T22188] RIP: 0033:0x7fd02318ebe9 [ 642.828462][T22188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.848089][T22188] RSP: 002b:00007fd0213d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 642.856611][T22188] RAX: ffffffffffffffda RBX: 00007fd0233c6090 RCX: 00007fd02318ebe9 [ 642.864627][T22188] RDX: 0000000000000001 RSI: 0000200000004140 RDI: 0000000000000006 [ 642.872641][T22188] RBP: 00007fd023211e19 R08: 0000000000000000 R09: 0000000000000000 [ 642.880902][T22188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.888900][T22188] R13: 00007fd0233c6128 R14: 00007fd0233c6090 R15: 00007ffe106a0b78 [ 642.896901][T22188] [ 642.900275][T22188] Kernel Offset: disabled [ 642.904652][T22188] Rebooting in 86400 seconds..