last executing test programs: 43.099181222s ago: executing program 4 (id=4407): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x3}, {0x20, 0x4}]}, 0x10) fcntl$dupfd(r2, 0x0, r3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x2, @in={0x2, 0x0, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340), 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f000000fc00)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 41.68349514s ago: executing program 4 (id=4409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000400)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) 41.071250601s ago: executing program 4 (id=4412): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) socket$inet6_sctp(0xa, 0x801, 0x84) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r6}, 0x50) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 38.675701643s ago: executing program 4 (id=4416): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x6400000c) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x42) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x101080, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a06580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100002200000ffffffff", 0x58}], 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 36.70004626s ago: executing program 2 (id=4419): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) 36.629189791s ago: executing program 4 (id=4421): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r6}, 0x50) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 33.37915007s ago: executing program 2 (id=4426): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8001}, 0x48) pipe2$watch_queue(&(0x7f00000001c0), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0xc, 0x17, &(0x7f00000025c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYRES16=r5], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x15}, &(0x7f0000000200)) fcntl$setlease(r6, 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r7, {0x3}}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x90) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x20002, 'sed\x00'}, 0x2c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000021000f0800000000000000000a00140000000000000000000000000000011400020000000000000000000000ffffe000000100"/68], 0x44}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="38000000200001000000000000000000020000000000000000000000140003006c6f000000000000000000000008000008000b0000000000e8dd803db16259fe3143fc5251ad53f854a29ecf11bf1730433c534ca4df5fa2270463c92699b006574b1ae6ef9a4a1e45ce1a7773f088614f17f66756a0426b57d371762d90ee41dfdb7f12855c0b86340c8d7e0e363c587ae35250bdf4d1d2eb781e274075cae45d448748f39ffb084e03edd37f37b434c21fe35479e748b849fe"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r10 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r10, 0x40045730, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r2], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 32.84855077s ago: executing program 4 (id=4428): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[]) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x10, &(0x7f0000000600)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x4000) io_setup(0x202, &(0x7f0000000200)) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r5, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r7 = socket(0x22, 0x2, 0x3) setsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000140), 0x4) 30.109053593s ago: executing program 2 (id=4432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x9}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080), 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x0, 0xffa0468, 0x6}, 0x10) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000"], 0x68}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000006380)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000e497f36c3b91ceb4a45653d1000018010040"]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) 22.598656395s ago: executing program 2 (id=4439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x9}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080), 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x0, 0xffa0468, 0x6}, 0x10) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x68}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000006380)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000e497f36c3b91ceb4a45653d1000018010040"]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) 20.786889685s ago: executing program 2 (id=4446): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x8008662c, &(0x7f0000000180)={@desc={0x1, 0x0, @desc4}}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) connect$netrom(r0, &(0x7f0000000300)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x0, 0x0, 0x100}}) socket$l2tp6(0xa, 0x2, 0x73) pipe2$9p(0x0, 0x0) set_mempolicy(0xc002, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 17.623865915s ago: executing program 3 (id=4448): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[]) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x10, &(0x7f0000000600)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x4000) io_setup(0x202, &(0x7f0000000200)) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r5, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r7 = socket(0x22, 0x2, 0x3) setsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000140), 0x4) 16.242380203s ago: executing program 0 (id=4452): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0xed49a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 15.977443873s ago: executing program 3 (id=4453): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = gettid() mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c8309500910001000706"], 0x9a) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047457, &(0x7f0000000300)) 15.302583235s ago: executing program 0 (id=4454): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getparam(r2, &(0x7f0000000040)) r3 = userfaultfd(0x80001) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000003c0)={0x6, 0x4, {}, {}, 0x8, 0x1}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r4, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @local, 0x6}, 0x1c) 14.179404879s ago: executing program 2 (id=4456): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000003740)) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x11, &(0x7f00000004c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0x0, 0x5, 0x3, 0x30, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x1, 0x6, 0x7, 0x9, 0x4}, @tail_call], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000b0008004500002000000000a9e030f5ec581c0abd973f27a78ec827003390780000000054601f2e6c6b450689bda672057a6729afaf615b99c0df7f17ba567a"], 0x0) r1 = openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) setreuid(0xffffffffffffffff, 0x0) setuid(0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}], 0xc}) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x0, 'syz1\x00', &(0x7f0000000140)=['/dev/loop'], 0x9}) process_vm_readv(0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 13.528552338s ago: executing program 3 (id=4457): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8001}, 0x48) pipe2$watch_queue(&(0x7f00000001c0), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0xc, 0x17, &(0x7f00000025c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b702ea030000ff078500000017000000181100007915a6cb5514ad7a9002f645e4f54015a0be2b37746d656cc50d4604d0b45bba8255bf81086858de4a18debe1b50fb2f366c9954a722e6721157122dc9d363da05e5a8cc89c24ca35134167ce7db1b3fb38b1c36a9866dc5174e303b5bbe0c90817175128698667d17530d2dac4657096b189792eb79b5afa6aa971a37b43db40931b6249cf4023bc87caf836aaa4c191e5c5f21b9c6df568e9e2bcffa2ee4d2d0fa34a7045e571a41764fa713ded13bb30f51f435390160b1f0b3d590a740d224931e59492f4b992428ca3937e7d46f618294e84dcd572fb8a19fbb8a8a210ccaf5aac51f014fef0b07fb7f453010210b1a6bcf5596d0e4ecad6d5ff03ed7649b65939eca534f473d2c9670f401799128641ae513c5c54ae20d79b07a175d895d36a30332bd9ea767308b82058d7f6585151bcb1ab598a1fa5fa0502e412c6bb1f53881a409045e39cc9a70f5bf824ec6ba0f692f364480ba2934553c8a7398d717fe029eff34a374fb17d7809962c2507c63ec813c67a3609c557339278799253395c3a95d26d32d9dd28fb6", @ANYRES32=r5, @ANYRES16=r5], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x15}, &(0x7f0000000200)) fcntl$setlease(r6, 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r7, {0x3}}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x90) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x20002, 'sed\x00'}, 0x2c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000021000f0800000000000000000a00140000000000000000000000000000011400020000000000000000000000ffffe000000100"/68], 0x44}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="38000000200001000000000000000000020000000000000000000000140003006c6f000000000000000000000008000008000b0000000000e8dd803db16259fe3143fc5251ad53f854a29ecf11bf1730433c534ca4df5fa2270463c92699b006574b1ae6ef9a4a1e45ce1a7773f088614f17f66756a0426b57d371762d90ee41dfdb7f12855c0b86340c8d7e0e363c587ae35250bdf4d1d2eb781e274075cae45d448748f39ffb084e03edd37f37b434c21fe35479e748b849fe"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r10 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r10, 0x40045730, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r2], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.387478873s ago: executing program 0 (id=4458): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB]) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r3, 0x10, &(0x7f0000000600)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) io_setup(0x202, &(0x7f0000000200)) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r5, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r7 = socket(0x22, 0x2, 0x3) setsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000140), 0x4) 13.357201757s ago: executing program 1 (id=4459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000400)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) 6.157149248s ago: executing program 3 (id=4460): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 6.107052065s ago: executing program 0 (id=4461): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8001}, 0x48) pipe2$watch_queue(&(0x7f00000001c0), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0xc, 0x17, &(0x7f00000025c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b702ea030000ff078500000017000000181100007915a6cb5514ad7a9002f645e4f54015a0be2b37746d656cc50d4604d0b45bba8255bf81086858de4a18debe1b50fb2f366c9954a722e6721157122dc9d363da05e5a8cc89c24ca35134167ce7db1b3fb38b1c36a9866dc5174e303b5bbe0c90817175128698667d17530d2dac4657096b189792eb79b5afa6aa971a37b43db40931b6249cf4023bc87caf836aaa4c191e5c5f21b9c6df568e9e2bcffa2ee4d2d0fa34a7045e571a41764fa713ded13bb30f51f435390160b1f0b3d590a740d224931e59492f4b992428ca3937e7d46f618294e84dcd572fb8a19fbb8a8a210ccaf5aac51f014fef0b07fb7f453010210b1a6bcf5596d0e4ecad6d5ff03ed7649b65939eca534f473d2c9670f401799128641ae513c5c54ae20d79b07a175d895d36a30332bd9ea767308b82058d7f6585151bcb1ab598a1fa5fa0502e412c6bb1f53881a409045e39cc9a70f5bf824ec6ba0f692f364480ba2934553c8a7398d717fe029eff34a374fb17d7809962c2507c63ec813c67a3609c557339278799253395c3a95d26d32d9dd28fb6", @ANYRES32=r5, @ANYRES16=r5], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x15}, &(0x7f0000000200)) fcntl$setlease(r6, 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r7, {0x3}}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x90) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x20002, 'sed\x00'}, 0x2c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000021000f0800000000000000000a00140000000000000000000000000000011400020000000000000000000000ffffe000000100"/68], 0x44}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="38000000200001000000000000000000020000000000000000000000140003006c6f000000000000000000000008000008000b0000000000e8dd803db16259fe3143fc5251ad53f854a29ecf11bf1730433c534ca4df5fa2270463c92699b006574b1ae6ef9a4a1e45ce1a7773f088614f17f66756a0426b57d371762d90ee41dfdb7f12855c0b86340c8d7e0e363c587ae35250bdf4d1d2eb781e274075cae45d448748f39ffb084e03edd37f37b434c21fe35479e748b849fe"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r10 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r10, 0x40045730, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r2], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.037802216s ago: executing program 1 (id=4462): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000032680)=""/102397, 0x18ffd}, {&(0x7f00000003c0)=""/164, 0xa4}, {0x0}, {&(0x7f0000000280)}], 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) eventfd(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00"}, 0x60) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000140)=""/192, 0x20000057) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000150001030000000000000000"], 0x14}}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="28dd8b29e0a69aff"], 0x8) unshare(0x1a040900) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) 5.035477105s ago: executing program 1 (id=4463): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) 4.736137301s ago: executing program 1 (id=4464): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000aaa9a72c1678c9c0f9944ab21139e352e9e1cb83a5a08c58c78b04ba3e104bb666f8e627efa9cba4c0549cca029140742adff08027cd3252d68e1b7a14604b1bc2d37c2c561ffd1737a8e00d58b1a8f6c8b395799c710aa1465829c50a79da78cfc8151975b0fe9cc7aac97d02f9b9", @ANYRES16, @ANYBLOB="20002bbd7000ffdbdf250200000014000100ff01000000000000000000000000000114000100fe8000000000000000000000000000bb050006000500000014000100fe80000000000000000000000000000b"], 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8051) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r4, &(0x7f0000000040)={0x11, 0xf7}, 0x14) socket$packet(0x11, 0x3, 0x300) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/40, @ANYRES32], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) 2.566607535s ago: executing program 1 (id=4466): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) socket$inet6_sctp(0xa, 0x801, 0x84) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r6}, 0x50) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 2.495495264s ago: executing program 0 (id=4467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x38, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x106000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x20000011) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.379027808s ago: executing program 3 (id=4468): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getparam(r2, &(0x7f0000000040)) r3 = userfaultfd(0x80001) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000003c0)={0x6, 0x4, {}, {}, 0x8, 0x1}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r4, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @local, 0x6}, 0x1c) 1.194499925s ago: executing program 1 (id=4469): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8001}, 0x48) pipe2$watch_queue(&(0x7f00000001c0), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0xc, 0x17, &(0x7f00000025c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYRES16=r5], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x15}, &(0x7f0000000200)) fcntl$setlease(r6, 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r7, {0x3}}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x90) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x20002, 'sed\x00'}, 0x2c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000021000f0800000000000000000a00140000000000000000000000000000011400020000000000000000000000ffffe000000100"/68], 0x44}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="38000000200001000000000000000000020000000000000000000000140003006c6f000000000000000000000008000008000b0000000000e8dd803db16259fe3143fc5251ad53f854a29ecf11bf1730433c534ca4df5fa2270463c92699b006574b1ae6ef9a4a1e45ce1a7773f088614f17f66756a0426b57d371762d90ee41dfdb7f12855c0b86340c8d7e0e363c587ae35250bdf4d1d2eb781e274075cae45d448748f39ffb084e03edd37f37b434c21fe35479e748b849fe"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r10 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r10, 0x40045730, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r2], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.044573518s ago: executing program 0 (id=4470): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001018b75000905"], 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000008000616963646566674de96e6b6c6d6e6f78"], 0x18, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000002c0)={"942600", 0x0, 0x5, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a11", "70d214b7", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r3 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f00000000c0)=0x31) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x0, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978145c38df4d", "79f56ca74227234da829edb7"]}) listen(0xffffffffffffffff, 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000240)={0x28, 0x0, 0x0, 0x0, &(0x7f0000cd2000/0x2000)=nil, 0x2000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 0s ago: executing program 3 (id=4471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000400)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) kernel console output (not intermixed with test programs): ] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1168.071967][T17854] wg2: entered allmulticast mode [ 1168.113710][ T5278] usb 1-1: USB disconnect, device number 93 [ 1168.907680][T17866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3959'. [ 1169.319357][T17872] wg2: left promiscuous mode [ 1169.341325][T17872] wg2: left allmulticast mode [ 1169.429673][T14284] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1169.555666][T17872] wg2: entered promiscuous mode [ 1169.564588][T17872] wg2: entered allmulticast mode [ 1169.637220][T14284] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1169.717146][T14284] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1169.769318][T14284] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1169.835476][T14284] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1169.855419][T14284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.890593][T17866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1170.012444][T14284] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1170.460829][ T5278] usb 3-1: USB disconnect, device number 82 [ 1171.710740][T17903] wg2: left promiscuous mode [ 1171.723622][T17903] wg2: left allmulticast mode [ 1171.799690][ T5278] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1171.834028][T17903] wg2: entered promiscuous mode [ 1171.838954][T17903] wg2: entered allmulticast mode [ 1171.976108][ T5278] usb 2-1: device descriptor read/64, error -71 [ 1172.019779][ T941] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1172.235383][T17914] binder: 17912:17914 unknown command 536871296 [ 1172.259946][T17914] binder: 17912:17914 ioctl c0306201 20000480 returned -22 [ 1172.291754][ T5278] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1172.351005][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1172.380085][ T941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1172.404499][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1172.425414][ T941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1172.446842][ T941] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1172.475017][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.507098][ T941] usb 5-1: config 0 descriptor?? [ 1172.509679][ T5278] usb 2-1: device descriptor read/64, error -71 [ 1172.559750][ T1849] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1172.720607][ T5278] usb usb2-port1: attempt power cycle [ 1172.779643][ T1849] usb 1-1: Using ep0 maxpacket: 16 [ 1172.806162][ T1849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.821278][ T941] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 1172.851632][ T1849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.851681][ T941] hdpvr 5-1:0.0: device init failed [ 1172.894095][ T1849] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1172.896417][ T941] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1172.938689][ T941] usb 5-1: USB disconnect, device number 74 [ 1172.959415][ T1849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.004203][ T1849] usb 1-1: config 0 descriptor?? [ 1173.219644][ T5278] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1173.243540][T17916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.270212][T17916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.280936][ T5278] usb 2-1: device descriptor read/8, error -71 [ 1173.492820][ T1849] uclogic 0003:5543:0004.0044: unknown main item tag 0x0 [ 1173.509661][ T1849] uclogic 0003:5543:0004.0044: unknown main item tag 0x0 [ 1173.528365][ T1849] uclogic 0003:5543:0004.0044: No inputs registered, leaving [ 1173.549660][ T1849] uclogic 0003:5543:0004.0044: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 1173.589682][ T5278] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1173.634513][ T5278] usb 2-1: device descriptor read/8, error -71 [ 1173.706744][ T941] usb 1-1: USB disconnect, device number 94 [ 1173.780042][ T5278] usb usb2-port1: unable to enumerate USB device [ 1174.077099][T17936] netlink: 'syz.2.3979': attribute type 4 has an invalid length. [ 1174.153279][T17937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3980'. [ 1174.529862][ T5278] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1174.751952][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1174.830370][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1174.863135][ T5278] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1174.900728][ T5278] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1174.939293][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.964704][T14284] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1175.007634][T17937] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1175.044881][ T5278] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1175.207963][T17945] 9pnet_virtio: no channels available for device syz [ 1175.209589][T14284] usb 2-1: Using ep0 maxpacket: 16 [ 1175.265724][T14284] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1175.292450][T14284] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1175.322941][T14284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.351873][T14284] usb 2-1: Product: syz [ 1175.374915][T14284] usb 2-1: Manufacturer: syz [ 1175.405529][T14284] usb 2-1: SerialNumber: syz [ 1175.430698][T14284] usb 2-1: config 0 descriptor?? [ 1175.574191][ T5280] usb 4-1: USB disconnect, device number 5 [ 1175.974889][ T5280] usb 2-1: USB disconnect, device number 109 [ 1177.869742][T14284] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1177.972622][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.978941][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.082501][T14284] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 1178.092115][T14284] usb 4-1: config 0 has no interface number 0 [ 1178.114062][T14284] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.143208][T14284] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.188417][T14284] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1178.249837][T14284] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1178.278166][T14284] usb 4-1: Manufacturer: syz [ 1178.298205][T14284] usb 4-1: config 0 descriptor?? [ 1178.670032][ T5278] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1178.756114][ T5278] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1180.561785][T14284] usbhid 4-1:0.18: can't add hid device: -71 [ 1180.567971][T14284] usbhid 4-1:0.18: probe with driver usbhid failed with error -71 [ 1180.613913][T14284] usb 4-1: USB disconnect, device number 6 [ 1180.959772][ T8] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1181.079842][T14284] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1181.162752][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1181.180118][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1181.192273][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1181.209637][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1181.219658][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1181.229684][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.249084][ T8] usb 2-1: config 0 descriptor?? [ 1181.279967][T14284] usb 4-1: Using ep0 maxpacket: 16 [ 1181.307609][T14284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.345945][T14284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.366717][T14284] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1181.419628][T14284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.450862][T14284] usb 4-1: config 0 descriptor?? [ 1181.749817][T17974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.758682][T17974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.026323][T14284] uclogic 0003:5543:0004.0046: unknown main item tag 0x0 [ 1182.056429][T14284] uclogic 0003:5543:0004.0046: unknown main item tag 0x0 [ 1182.083543][T14284] uclogic 0003:5543:0004.0046: No inputs registered, leaving [ 1182.108960][T14284] uclogic 0003:5543:0004.0046: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 1182.234958][ T5280] usb 4-1: USB disconnect, device number 7 [ 1183.920655][T17951] tipc: Invalid UDP bearer configuration [ 1183.920708][T17951] tipc: Enabling of bearer rejected, failed to enable media [ 1184.100665][ T8] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 1184.129724][ T8] hdpvr 2-1:0.0: device init failed [ 1184.135099][ T8] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1184.177205][ T8] usb 2-1: USB disconnect, device number 110 [ 1184.324162][T17985] netlink: 'syz.0.3994': attribute type 4 has an invalid length. [ 1184.599706][ T5280] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1184.659646][ T8] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1184.869660][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 1184.889812][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1184.911003][ T5280] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1184.940140][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1184.955729][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.018251][ T8] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1185.037623][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.047430][ T5280] usb 4-1: config 0 descriptor?? [ 1185.076345][ T8] usb 2-1: Product: syz [ 1185.087220][ T5280] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1185.099607][ T8] usb 2-1: Manufacturer: syz [ 1185.106726][ T8] usb 2-1: SerialNumber: syz [ 1185.166536][ T8] usb 2-1: config 0 descriptor?? [ 1185.542543][ T8] usb 2-1: USB disconnect, device number 111 [ 1185.572419][ T5240] Bluetooth: hci0: unexpected event for opcode 0x040e [ 1185.880634][ T5280] gspca_sq930x: ucbus_write failed -110 [ 1185.895388][ T5280] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 1185.971878][T17987] bond0: (slave macvlan2): Releasing backup interface [ 1186.419674][ T5280] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1186.456303][T14284] usb 4-1: USB disconnect, device number 8 [ 1186.599684][ T5277] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1186.653217][ T5280] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1186.671699][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.713781][ T5280] usb 1-1: config 0 descriptor?? [ 1186.737048][ T5280] usb 1-1: selecting invalid altsetting 1 [ 1186.778055][ T5280] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1186.807448][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 1186.835775][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.855170][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.870709][ T5277] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1186.880564][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.905007][ T5277] usb 2-1: config 0 descriptor?? [ 1187.136647][T18007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.204480][T18007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.646849][ T5277] uclogic 0003:5543:0004.0047: unknown main item tag 0x0 [ 1187.671841][ T5277] uclogic 0003:5543:0004.0047: unknown main item tag 0x0 [ 1187.686419][ T5277] uclogic 0003:5543:0004.0047: No inputs registered, leaving [ 1187.737959][ T5277] uclogic 0003:5543:0004.0047: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.1-1/input0 [ 1187.829027][ T5277] usb 2-1: USB disconnect, device number 112 [ 1187.849728][ T5280] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1188.099095][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1188.128483][ T5280] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1188.189743][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1188.243968][ T5280] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1188.293372][ T5280] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1188.347397][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.404342][ T5280] usb 4-1: config 0 descriptor?? [ 1188.668840][T18019] binder: 18017:18019 unknown command 536871296 [ 1188.781814][T18019] binder: 18017:18019 ioctl c0306201 20000480 returned -22 [ 1189.579027][ T941] usb 1-1: USB disconnect, device number 95 [ 1191.599677][ T1849] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1191.810115][ T1849] usb 1-1: Using ep0 maxpacket: 16 [ 1191.818001][ T1849] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1191.833716][ T1849] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1191.848615][ T1849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.877786][ T1849] usb 1-1: Product: syz [ 1191.882636][ T1849] usb 1-1: Manufacturer: syz [ 1191.887276][ T1849] usb 1-1: SerialNumber: syz [ 1191.901011][ T1849] usb 1-1: config 0 descriptor?? [ 1192.328421][ T941] usb 1-1: USB disconnect, device number 96 [ 1194.955787][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4016'. [ 1196.717304][ T5280] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 1196.769759][ T5280] hdpvr 4-1:0.0: device init failed [ 1196.775143][ T5280] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1196.818185][ T5280] usb 4-1: USB disconnect, device number 9 [ 1196.823372][T18027] wg2: left promiscuous mode [ 1196.858628][T18027] wg2: left allmulticast mode [ 1196.889121][T18063] 9pnet_virtio: no channels available for device syz [ 1196.925848][T18030] wg2: entered promiscuous mode [ 1196.956111][T18030] wg2: entered allmulticast mode [ 1197.063307][T18055] wg2: left promiscuous mode [ 1197.073163][T18055] wg2: left allmulticast mode [ 1197.118244][T18056] wg2: entered promiscuous mode [ 1197.141610][T18056] wg2: entered allmulticast mode [ 1197.810295][ T1849] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1198.035361][ T1849] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 1198.050087][ T5277] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1198.054436][ T1849] usb 5-1: config 0 has no interface number 0 [ 1198.073504][ T1849] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.086323][ T1849] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.105098][ T1849] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1198.116650][ T1849] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1198.162725][ T1849] usb 5-1: Manufacturer: syz [ 1198.266106][ T1849] usb 5-1: config 0 descriptor?? [ 1198.358754][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 1198.444417][ T5277] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1198.626957][ T5277] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1198.723691][ T5278] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 1198.747220][ T5278] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1198.749544][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.873413][ T5277] usb 2-1: Product: syz [ 1198.877633][ T5277] usb 2-1: Manufacturer: syz [ 1198.902458][ T5277] usb 2-1: SerialNumber: syz [ 1198.924795][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4027'. [ 1198.926328][ T5277] usb 2-1: config 0 descriptor?? [ 1198.947498][T18074] QAT: Device 0 not found [ 1199.499171][T14284] usb 2-1: USB disconnect, device number 113 [ 1201.026933][ T1849] usbhid 5-1:0.18: can't add hid device: -71 [ 1201.044681][ T1849] usbhid 5-1:0.18: probe with driver usbhid failed with error -71 [ 1201.120472][ T1849] usb 5-1: USB disconnect, device number 75 [ 1201.239859][ T5277] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1201.347740][T18109] wg2: left promiscuous mode [ 1201.366773][T18109] wg2: left allmulticast mode [ 1201.451859][ T5277] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1201.471983][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.495273][ T5277] usb 1-1: config 0 descriptor?? [ 1201.518840][ T5277] usb 1-1: selecting invalid altsetting 1 [ 1201.580036][T18112] wg2: entered promiscuous mode [ 1201.601222][ T5277] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1201.623568][T18112] wg2: entered allmulticast mode [ 1202.715693][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4038'. [ 1203.401797][ T5278] usb 1-1: USB disconnect, device number 97 [ 1203.692231][T18124] netlink: 'syz.4.4037': attribute type 4 has an invalid length. [ 1204.100576][ T5278] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1204.179604][ T1849] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1204.351416][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 1204.356666][ T1849] usb 3-1: device descriptor read/64, error -71 [ 1204.382097][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1204.413125][ T5278] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1204.429649][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.437928][ T5278] usb 1-1: Product: syz [ 1204.454744][ T5278] usb 1-1: Manufacturer: syz [ 1204.460074][ T5278] usb 1-1: SerialNumber: syz [ 1204.466651][ T5278] usb 1-1: config 0 descriptor?? [ 1204.504854][T18146] wg2: left promiscuous mode [ 1204.510565][T18146] wg2: left allmulticast mode [ 1204.548945][T18148] wg2: entered promiscuous mode [ 1204.566157][T18148] wg2: entered allmulticast mode [ 1204.669841][ T1849] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1204.840145][ T1849] usb 3-1: device descriptor read/64, error -71 [ 1204.925432][ T5278] usb 1-1: USB disconnect, device number 98 [ 1204.979872][ T5277] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1204.981154][ T1849] usb usb3-port1: attempt power cycle [ 1205.225438][ T5277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1205.234866][ T5277] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1205.248120][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.304076][ T5277] usb 2-1: config 0 descriptor?? [ 1205.444710][ T1849] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1205.501452][ T1849] usb 3-1: device descriptor read/8, error -71 [ 1205.757155][T18161] 9pnet_virtio: no channels available for device syz [ 1205.799739][ T1849] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1205.936011][ T1849] usb 3-1: device descriptor read/8, error -71 [ 1206.063727][ T1849] usb usb3-port1: unable to enumerate USB device [ 1206.164028][ T5277] video4linux radio32: keene_cmd_main failed (-71) [ 1206.193402][ T5277] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 1206.279861][ T5277] usb 2-1: USB disconnect, device number 114 [ 1207.310155][T18174] wg2: left promiscuous mode [ 1207.334242][T18174] wg2: left allmulticast mode [ 1207.531444][T18174] wg2: entered promiscuous mode [ 1207.539426][T18174] wg2: entered allmulticast mode [ 1209.253786][T18195] binder: 18189:18195 unknown command 536871296 [ 1209.320243][T18195] binder: 18189:18195 ioctl c0306201 20000480 returned -22 [ 1209.746580][ T5278] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1209.970746][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 1210.078306][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1210.137706][ T5278] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1210.175845][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.204163][ T5278] usb 1-1: Product: syz [ 1210.228598][ T5278] usb 1-1: Manufacturer: syz [ 1210.248787][ T5278] usb 1-1: SerialNumber: syz [ 1210.273417][ T5278] usb 1-1: config 0 descriptor?? [ 1210.759769][ T5278] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1210.876137][ T1849] usb 1-1: USB disconnect, device number 99 [ 1211.009748][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 1211.018063][ T5278] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1211.239926][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.269123][ T5278] usb 5-1: config 0 descriptor?? [ 1211.511067][ T5277] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1211.612953][ T5278] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1211.730593][ T5277] usb 2-1: no configurations [ 1211.737187][ T5277] usb 2-1: can't read configurations, error -22 [ 1211.829715][ T1849] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1211.950729][ T5277] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1212.043492][ T1849] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 1212.068407][ T1849] usb 4-1: config 0 has no interface number 0 [ 1212.078752][ T1849] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.115056][ T1849] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.175863][ T1849] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1212.188806][ T1849] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1212.198545][ T5277] usb 2-1: no configurations [ 1212.199441][ T1849] usb 4-1: Manufacturer: syz [ 1212.225131][ T5277] usb 2-1: can't read configurations, error -22 [ 1212.248889][ T5277] usb usb2-port1: attempt power cycle [ 1212.268879][ T1849] usb 4-1: config 0 descriptor?? [ 1212.671001][ T5277] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1212.711413][ T5277] usb 2-1: no configurations [ 1212.717219][T14284] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1212.738180][ T5277] usb 2-1: can't read configurations, error -22 [ 1212.766371][T14284] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1212.794725][T18222] QAT: Device 0 not found [ 1212.930236][ T5277] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1213.003247][ T5277] usb 2-1: no configurations [ 1213.030514][ T5277] usb 2-1: can't read configurations, error -22 [ 1213.083078][ T5277] usb usb2-port1: unable to enumerate USB device [ 1213.539184][ T5278] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1213.574258][ T5278] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1213.590007][ T5278] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1213.618188][ T5278] usb 5-1: USB disconnect, device number 76 [ 1213.900450][T18239] wg2: left promiscuous mode [ 1213.906378][T18239] wg2: left allmulticast mode [ 1214.356551][T18239] wg2: entered promiscuous mode [ 1214.562080][T18239] wg2: entered allmulticast mode [ 1214.631329][ T1849] usbhid 4-1:0.18: can't add hid device: -71 [ 1214.679731][ T1849] usbhid 4-1:0.18: probe with driver usbhid failed with error -71 [ 1214.733734][ T1849] usb 4-1: USB disconnect, device number 10 [ 1214.892056][T18247] wg2: left promiscuous mode [ 1214.908988][T18247] wg2: left allmulticast mode [ 1214.955968][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1214.955988][ T29] audit: type=1326 audit(1722101671.886:1108): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18240 comm="syz.0.4068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc030d77299 code=0x0 [ 1215.061281][T18255] /dev/sg0: Can't lookup blockdev [ 1215.106938][T18247] wg2: entered promiscuous mode [ 1215.123737][T18247] wg2: entered allmulticast mode [ 1215.281142][T18251] wg2: left promiscuous mode [ 1215.338234][T18251] wg2: left allmulticast mode [ 1216.019956][ T5278] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1216.188313][T18268] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4073'. [ 1216.239607][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 1216.273690][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.319899][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.380240][ T5278] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1216.421363][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.492905][ T5278] usb 4-1: config 0 descriptor?? [ 1216.785574][T18266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.812552][T18266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.909672][ T5277] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1217.088929][ T5278] uclogic 0003:5543:0004.004A: unknown main item tag 0x0 [ 1217.109714][ T5278] uclogic 0003:5543:0004.004A: unknown main item tag 0x0 [ 1217.119886][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 1217.137250][ T5277] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1217.160759][ T5278] uclogic 0003:5543:0004.004A: No inputs registered, leaving [ 1217.176208][ T5278] uclogic 0003:5543:0004.004A: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 1217.195529][ T5277] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1217.205425][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.217875][ T5277] usb 1-1: Product: syz [ 1217.225930][ T5277] usb 1-1: Manufacturer: syz [ 1217.241828][ T5277] usb 1-1: SerialNumber: syz [ 1217.257324][ T5277] usb 1-1: config 0 descriptor?? [ 1217.349841][ T5278] usb 4-1: USB disconnect, device number 11 [ 1217.725283][ T5277] usb 1-1: USB disconnect, device number 100 [ 1218.570686][T18286] wg2: left promiscuous mode [ 1218.691379][T18286] wg2: left allmulticast mode [ 1218.838444][T18289] wg2: left promiscuous mode [ 1218.857794][T18289] wg2: left allmulticast mode [ 1218.889601][ T5278] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1219.091834][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 1219.146753][ T5278] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1219.158093][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.161469][T18304] /dev/sg0: Can't lookup blockdev [ 1219.222050][ T5278] usb 4-1: config 0 descriptor?? [ 1219.402522][ T29] audit: type=1326 audit(1722101676.336:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.0.4081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc030d77299 code=0x0 [ 1219.527970][ T5278] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1220.384157][T18311] wg2: entered promiscuous mode [ 1220.420167][T18311] wg2: entered allmulticast mode [ 1220.934368][ T5278] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1220.965473][ T5278] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1221.050476][ T5278] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1221.141518][ T5278] usb 4-1: USB disconnect, device number 12 [ 1222.389701][ T5277] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1222.581828][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1222.610882][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1222.670865][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1222.700119][ T5277] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1222.723800][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.764888][ T5277] usb 3-1: config 0 descriptor?? [ 1222.784229][T18326] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1223.171208][ T5280] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1223.256561][ T5277] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1223.304085][ T5277] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1223.324272][ T5277] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1223.347305][ T5277] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1223.378251][ T5277] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1223.385842][ T5280] usb 4-1: Using ep0 maxpacket: 16 [ 1223.409700][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.429293][ T5277] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving [ 1223.445013][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.520119][ T5280] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1223.529356][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.541808][T18340] /dev/sg0: Can't lookup blockdev [ 1223.547394][ T5277] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1223.573493][ T5280] usb 4-1: config 0 descriptor?? [ 1223.589642][ T5277] usb 3-1: USB disconnect, device number 87 [ 1223.885740][T18331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.915323][T18331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.258781][ T5280] uclogic 0003:5543:0004.004C: unknown main item tag 0x0 [ 1224.321080][ T5280] uclogic 0003:5543:0004.004C: unknown main item tag 0x0 [ 1224.340661][ T5280] uclogic 0003:5543:0004.004C: No inputs registered, leaving [ 1224.367589][ T5280] uclogic 0003:5543:0004.004C: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 1224.712022][ T5280] usb 4-1: USB disconnect, device number 13 [ 1225.177495][T18354] 9pnet_virtio: no channels available for device syz [ 1225.607847][T18361] wg2: left promiscuous mode [ 1225.614798][T18361] wg2: left allmulticast mode [ 1225.841344][T18361] wg2: entered promiscuous mode [ 1225.860367][T18361] wg2: entered allmulticast mode [ 1227.134375][T18383] wg2: entered promiscuous mode [ 1227.192646][T18383] wg2: entered allmulticast mode [ 1227.291999][T18386] wg2: left promiscuous mode [ 1227.307463][T18386] wg2: left allmulticast mode [ 1227.469705][ T25] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1227.769030][ T25] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1227.802459][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.865619][ T25] usb 5-1: config 0 descriptor?? [ 1228.290580][T18401] /dev/sg0: Can't lookup blockdev [ 1228.437712][T18402] wg2: entered promiscuous mode [ 1228.449674][T18402] wg2: entered allmulticast mode [ 1229.044007][ T5240] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1229.158206][T18410] fuse: Bad value for 'fd' [ 1229.303138][ T25] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1229.351345][ T25] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1229.394934][T18409] wg2: left promiscuous mode [ 1229.404131][T18409] wg2: left allmulticast mode [ 1229.426449][ T25] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1229.507047][ T25] usb 5-1: USB disconnect, device number 77 [ 1229.529926][T18410] wg2: entered promiscuous mode [ 1229.542217][T18410] wg2: entered allmulticast mode [ 1230.459510][T18420] 9pnet_virtio: no channels available for device syz [ 1231.304666][ T25] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1231.979926][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1232.011422][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1232.034423][ T25] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1232.047809][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.063631][ T25] usb 5-1: Product: syz [ 1232.071436][ T25] usb 5-1: Manufacturer: syz [ 1232.078230][ T25] usb 5-1: SerialNumber: syz [ 1232.093662][ T25] usb 5-1: config 0 descriptor?? [ 1232.141293][T18442] fuse: Bad value for 'fd' [ 1232.172723][ T25] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1232.423699][T18438] wg2: left promiscuous mode [ 1232.438257][T18438] wg2: left allmulticast mode [ 1232.528838][T18437] wg2: left promiscuous mode [ 1232.533788][T18437] wg2: left allmulticast mode [ 1233.272354][ T2954] usb 5-1: Failed to submit usb control message: -110 [ 1233.758775][ T2954] usb 5-1: unable to send the bmi data to the device: -110 [ 1233.939600][ T2954] usb 5-1: unable to get target info from device [ 1233.990280][ T25] usb 5-1: USB disconnect, device number 78 [ 1234.038448][ T2954] usb 5-1: could not get target info (-110) [ 1234.047672][ T2954] usb 5-1: could not probe fw (-110) [ 1234.051734][ T5277] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1234.315563][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 1234.341359][ T5277] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1234.365523][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.401506][ T5277] usb 4-1: config 0 descriptor?? [ 1235.129584][T18457] /dev/sg0: Can't lookup blockdev [ 1235.639723][ T25] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1235.989101][ T25] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 1236.038678][ T25] usb 2-1: config 0 has no interface number 0 [ 1236.079614][ T25] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.136765][ T25] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.175322][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1236.208890][ T25] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1236.240116][ T5277] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1236.268511][ T25] usb 2-1: Manufacturer: syz [ 1236.294959][ T25] usb 2-1: config 0 descriptor?? [ 1236.314200][ T5277] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1236.355056][ T5277] usb 4-1: USB disconnect, device number 14 [ 1236.695561][ T1849] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 1236.747094][T18471] QAT: Device 0 not found [ 1236.762059][ T1849] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1238.367790][ T25] usbhid 2-1:0.18: can't add hid device: -71 [ 1238.377650][ T25] usbhid 2-1:0.18: probe with driver usbhid failed with error -71 [ 1238.430273][ T25] usb 2-1: USB disconnect, device number 119 [ 1238.550033][T18491] wg2: left promiscuous mode [ 1238.569097][T18491] wg2: left allmulticast mode [ 1238.790473][T18503] netlink: 'syz.2.4137': attribute type 8 has an invalid length. [ 1238.929950][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1239.000973][T18500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1239.426219][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.432678][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.954607][T18521] 9pnet_virtio: no channels available for device syz [ 1240.054540][T18518] wg2: entered promiscuous mode [ 1240.078707][T18518] wg2: entered allmulticast mode [ 1241.080490][T18540] wg2: entered promiscuous mode [ 1241.098062][T18540] wg2: entered allmulticast mode [ 1242.130260][ T5277] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1242.349589][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 1242.361830][ T5277] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1242.379203][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.443781][ T5277] usb 1-1: config 0 descriptor?? [ 1242.525169][T18560] wg2: left promiscuous mode [ 1242.552727][T18560] wg2: left allmulticast mode [ 1242.748578][ T5277] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1243.896878][T18579] 9pnet_virtio: no channels available for device syz [ 1244.107476][ T5277] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1244.150021][ T5277] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1244.167630][ T5277] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1244.204168][ T5277] usb 1-1: USB disconnect, device number 101 [ 1244.579717][T18595] wg2: entered promiscuous mode [ 1244.589624][T18595] wg2: entered allmulticast mode [ 1245.489931][ T5280] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1245.887519][ T5280] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1245.897960][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.918737][ T5280] usb 1-1: config 0 descriptor?? [ 1245.927367][ T5280] usb 1-1: selecting invalid altsetting 1 [ 1246.921639][ C0] eth0: bad gso: type: 1, size: 1408 [ 1246.929395][ T5280] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1247.321209][ T25] usb 1-1: USB disconnect, device number 102 [ 1247.368177][ T5280] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1247.592202][ T5280] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice= e.c7 [ 1247.619626][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.662152][ T5280] usb 4-1: config 0 descriptor?? [ 1247.686662][ T5280] mct_u232 4-1:0.0: MCT U232 converter detected [ 1247.712319][ T5280] mct_u232 ttyUSB0: expected endpoint missing [ 1248.056969][T18614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.097068][T18614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.189872][T18621] binder: 18620:18621 ioctl c018620b 0 returned -14 [ 1248.414374][ T5280] usb 4-1: USB disconnect, device number 15 [ 1248.451055][ T5280] mct_u232 4-1:0.0: device disconnected [ 1248.953559][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1249.324644][T18634] CIFS: Unable to determine destination address [ 1249.609739][ T25] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1249.709602][ T1849] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1249.839588][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1249.846930][ T25] usb 5-1: config 5 has an invalid interface number: 19 but max is 0 [ 1249.879518][ T25] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.948071][ T25] usb 5-1: config 5 has no interface number 0 [ 1249.954689][ T1849] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice= e.c7 [ 1249.967620][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.987552][ T25] usb 5-1: config 5 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1250.031138][ T1849] usb 4-1: config 0 descriptor?? [ 1250.049421][ T25] usb 5-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38 [ 1250.071562][ T1849] mct_u232 4-1:0.0: MCT U232 converter detected [ 1250.097778][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.107197][ T1849] mct_u232 ttyUSB0: expected endpoint missing [ 1250.129519][ T25] usb 5-1: Product: syz [ 1250.159517][ T25] usb 5-1: Manufacturer: syz [ 1250.172136][ T25] usb 5-1: SerialNumber: syz [ 1250.230542][ T25] hub 5-1:5.19: bad descriptor, ignoring hub [ 1250.283743][ T25] hub 5-1:5.19: probe with driver hub failed with error -5 [ 1250.303676][ T25] sierra 5-1:5.19: Sierra USB modem converter detected [ 1250.432399][ T25] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 1250.508533][ T25] usb 5-1: USB disconnect, device number 79 [ 1250.551072][ T25] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1250.637970][ T25] sierra 5-1:5.19: device disconnected [ 1250.644874][T18639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.714497][T18639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.344822][ T5280] usb 4-1: USB disconnect, device number 16 [ 1251.381112][ T5280] mct_u232 4-1:0.0: device disconnected [ 1251.523154][T18659] binder: 18657:18659 ioctl c018620b 0 returned -14 [ 1251.691640][ T29] audit: type=1326 audit(1722101708.632:1110): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.0.4182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc030d77299 code=0x0 [ 1252.449758][ T5280] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1252.638628][T18676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4190'. [ 1252.666687][ T5280] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice= e.c7 [ 1252.689204][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.789673][ T5280] usb 4-1: config 0 descriptor?? [ 1252.818815][ T5280] mct_u232 4-1:0.0: MCT U232 converter detected [ 1252.848531][ T5280] mct_u232 ttyUSB0: expected endpoint missing [ 1253.323334][T18669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.379874][T18669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.834130][ T25] usb 4-1: USB disconnect, device number 17 [ 1253.894719][ T25] mct_u232 4-1:0.0: device disconnected [ 1254.481991][T18688] CIFS: Unable to determine destination address [ 1254.772115][ T25] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1254.793469][T18693] binder: 18692:18693 ioctl c018620b 0 returned -14 [ 1254.973423][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 1255.002592][ T25] usb 1-1: config 5 has an invalid interface number: 19 but max is 0 [ 1255.039027][ T25] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.065884][ T25] usb 1-1: config 5 has no interface number 0 [ 1255.083303][ T25] usb 1-1: config 5 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1255.128927][ T25] usb 1-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38 [ 1255.163675][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.197391][ T25] usb 1-1: Product: syz [ 1255.217552][ T25] usb 1-1: Manufacturer: syz [ 1255.229088][ T25] usb 1-1: SerialNumber: syz [ 1255.266086][ T25] hub 1-1:5.19: bad descriptor, ignoring hub [ 1255.279842][ T25] hub 1-1:5.19: probe with driver hub failed with error -5 [ 1255.310060][ T25] sierra 1-1:5.19: Sierra USB modem converter detected [ 1255.490151][ T25] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1255.678629][ T25] usb 1-1: USB disconnect, device number 103 [ 1255.754819][ T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1255.829269][ T25] sierra 1-1:5.19: device disconnected [ 1257.045867][T14120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1257.062615][T14120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1257.072194][T14120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1257.093909][T14120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1257.106230][T14120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1257.114178][T14120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1257.182238][T18713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1257.420975][T18714] lo speed is unknown, defaulting to 1000 [ 1257.680086][ T25] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1257.835154][T18721] netlink: 'syz.4.4204': attribute type 4 has an invalid length. [ 1257.920521][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1257.953884][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1257.995259][T18722] wg2: entered promiscuous mode [ 1258.000789][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1258.017036][T18722] wg2: entered allmulticast mode [ 1258.042036][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1258.059669][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.101558][T18717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1258.144976][ T5280] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1258.175363][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1258.366105][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1258.441359][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1258.549598][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1258.602969][ T5280] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1258.651167][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.727390][ T5280] usb 4-1: config 0 descriptor?? [ 1258.750075][T18725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1258.754047][ T25] usb 1-1: USB disconnect, device number 104 [ 1259.064350][T18714] chnl_net:caif_netlink_parms(): no params data found [ 1259.169640][T14120] Bluetooth: hci5: command tx timeout [ 1259.266896][ T5280] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1259.280709][ T5280] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1259.320281][ T5280] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1259.329874][ T5280] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1259.369977][ T5280] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1259.430978][ T5280] plantronics 0003:047F:FFFF.004E: No inputs registered, leaving [ 1259.639403][ T5280] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1259.673465][T18742] binder: 18741:18742 ioctl c018620b 0 returned -14 [ 1259.758467][ T5280] usb 4-1: USB disconnect, device number 18 [ 1259.770549][T18714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.800972][T18714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.820111][T18714] bridge_slave_0: entered allmulticast mode [ 1259.847355][T18714] bridge_slave_0: entered promiscuous mode [ 1259.873407][T18714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.907704][T18714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.935540][T18714] bridge_slave_1: entered allmulticast mode [ 1259.969025][T18714] bridge_slave_1: entered promiscuous mode [ 1260.256384][T18750] CIFS: Unable to determine destination address [ 1260.319614][T18749] binder: 18746:18749 unknown command 536871296 [ 1260.335241][T18749] binder: 18746:18749 ioctl c0306201 20000480 returned -22 [ 1260.386388][T18714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.418650][T18714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.539614][ T1849] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1260.771365][ T1849] usb 5-1: Using ep0 maxpacket: 32 [ 1260.817103][ T1849] usb 5-1: config 5 has an invalid interface number: 19 but max is 0 [ 1260.831825][T18714] team0: Port device team_slave_0 added [ 1260.845491][ T1849] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.874343][T18714] team0: Port device team_slave_1 added [ 1261.079687][ T1849] usb 5-1: config 5 has no interface number 0 [ 1261.130909][ T1849] usb 5-1: config 5 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1261.211477][ T1849] usb 5-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38 [ 1261.249601][T14120] Bluetooth: hci5: command tx timeout [ 1261.259048][ T1849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.329373][ T1849] usb 5-1: Product: syz [ 1261.429799][ T1849] usb 5-1: Manufacturer: syz [ 1261.439691][ T1849] usb 5-1: SerialNumber: syz [ 1261.502206][ T1849] hub 5-1:5.19: bad descriptor, ignoring hub [ 1261.586087][ T1849] hub 5-1:5.19: probe with driver hub failed with error -5 [ 1261.601774][T18714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.619848][T18757] binder: 18755:18757 unknown command 536871296 [ 1261.626148][T18757] binder: 18755:18757 ioctl c0306201 20000480 returned -22 [ 1261.661023][T18714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.666952][ T1849] sierra 5-1:5.19: Sierra USB modem converter detected [ 1261.842163][T18714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.862990][ T1849] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1261.970257][T18714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.019566][T18714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.045710][ T1849] usb 5-1: USB disconnect, device number 80 [ 1262.070272][ T1849] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1262.130271][ T1849] sierra 5-1:5.19: device disconnected [ 1262.207468][T18714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.791459][T18714] hsr_slave_0: entered promiscuous mode [ 1262.870249][T18714] hsr_slave_1: entered promiscuous mode [ 1262.960082][T18714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1263.000850][T18714] Cannot create hsr debugfs directory [ 1263.169927][ T1849] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1263.339573][T14120] Bluetooth: hci5: command tx timeout [ 1263.494910][ T1849] usb 5-1: Using ep0 maxpacket: 16 [ 1263.561429][ T1849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.624109][ T1849] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1263.657583][ T1849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.718102][ T1849] usb 5-1: Product: syz [ 1263.750650][ T1849] usb 5-1: Manufacturer: syz [ 1263.780703][ T1849] usb 5-1: SerialNumber: syz [ 1263.830616][ T1849] usb 5-1: config 0 descriptor?? [ 1264.236920][T18714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.597010][T18776] 9pnet_virtio: no channels available for device syz [ 1264.803497][T18714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.082531][T18785] binder: 18784:18785 ioctl c018620b 0 returned -14 [ 1265.168255][T18714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.355212][ T1849] usb 5-1: USB disconnect, device number 81 [ 1265.419809][T14120] Bluetooth: hci5: command tx timeout [ 1265.544074][T18714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.803911][T18791] binder: 18788:18791 unknown command 536871296 [ 1265.902876][T18791] binder: 18788:18791 ioctl c0306201 20000480 returned -22 [ 1265.947450][T18714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1265.969391][T18714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1266.101112][T18714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1266.192260][T18714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1266.289738][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1266.593152][ T25] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1266.660016][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.681638][ T25] usb 4-1: config 0 descriptor?? [ 1266.828897][T18799] CIFS: Unable to determine destination address [ 1266.981494][T18714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.127438][T18714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.179392][ T5280] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1267.218677][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.225886][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.287420][T14284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.294814][T14284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.509676][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 1267.518752][T14120] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1267.608627][ T5280] usb 5-1: config 5 has an invalid interface number: 19 but max is 0 [ 1267.662059][ T5280] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.684850][ T25] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1267.733502][ T25] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1267.739627][ T5280] usb 5-1: config 5 has no interface number 0 [ 1267.797118][ T25] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1267.816795][ T5280] usb 5-1: config 5 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1267.846530][ T25] usb 4-1: USB disconnect, device number 19 [ 1267.911394][ T5280] usb 5-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38 [ 1267.942352][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.999516][ T5280] usb 5-1: Product: syz [ 1268.003731][ T5280] usb 5-1: Manufacturer: syz [ 1268.039536][ T5280] usb 5-1: SerialNumber: syz [ 1268.090730][ T5280] hub 5-1:5.19: bad descriptor, ignoring hub [ 1268.096745][ T5280] hub 5-1:5.19: probe with driver hub failed with error -5 [ 1268.180700][ T5280] sierra 5-1:5.19: Sierra USB modem converter detected [ 1268.309768][T18714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.323072][ T5280] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1268.404321][ T5280] usb 5-1: USB disconnect, device number 82 [ 1268.454292][ T5280] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1269.360076][ T5280] sierra 5-1:5.19: device disconnected [ 1269.579870][T18714] veth0_vlan: entered promiscuous mode [ 1269.623932][T18714] veth1_vlan: entered promiscuous mode [ 1269.633473][T18823] binder: 18821:18823 ioctl c018620b 0 returned -14 [ 1269.760949][ T5277] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1269.818047][T18714] veth0_macvtap: entered promiscuous mode [ 1269.874871][T18714] veth1_macvtap: entered promiscuous mode [ 1270.028784][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.058847][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 1270.081905][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1270.099587][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.118433][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.176486][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.205966][ T5277] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1270.232383][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.252909][ T5277] usb 1-1: Product: syz [ 1270.276380][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.299553][ T5277] usb 1-1: Manufacturer: syz [ 1270.311946][ T5277] usb 1-1: SerialNumber: syz [ 1270.385338][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.397826][ T5277] usb 1-1: config 0 descriptor?? [ 1270.411177][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.449318][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.539551][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.566972][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.608620][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.631393][ T5277] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1270.722757][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.965309][T18714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.093040][T18828] wg2: left promiscuous mode [ 1271.099299][T18828] wg2: left allmulticast mode [ 1271.475873][T18831] wg2: entered promiscuous mode [ 1271.525988][T18831] wg2: entered allmulticast mode [ 1271.719772][ T2954] usb 1-1: Failed to submit usb control message: -71 [ 1271.743581][ T5277] usb 1-1: USB disconnect, device number 105 [ 1271.792138][ T2954] usb 1-1: unable to send the bmi data to the device: -71 [ 1271.799307][ T2954] usb 1-1: unable to get target info from device [ 1271.840569][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.888519][ T2954] usb 1-1: could not get target info (-71) [ 1271.898645][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.918520][ T2954] usb 1-1: could not probe fw (-71) [ 1271.927897][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.975733][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.023652][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.084807][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.147739][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.193698][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.236681][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.283000][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.325178][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.336582][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.368213][T18714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.557096][T18845] wg2: left promiscuous mode [ 1272.579588][T18845] wg2: left allmulticast mode [ 1272.707524][T18848] wg2: entered promiscuous mode [ 1272.733654][T18848] wg2: entered allmulticast mode [ 1272.772169][T18714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.793214][T18714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.816449][T18714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.848196][T18714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.931052][ T5277] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1273.161739][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 1273.187111][ T5277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.207063][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.259794][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.267876][ T5277] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1273.278205][T18854] binder: 18852:18854 unknown command 536871296 [ 1273.294972][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.338960][ T5277] usb 1-1: Product: syz [ 1273.352059][ T5277] usb 1-1: Manufacturer: syz [ 1273.356670][ T5277] usb 1-1: SerialNumber: syz [ 1273.391835][T18854] binder: 18852:18854 ioctl c0306201 20000480 returned -22 [ 1273.421061][ T5277] usb 1-1: config 0 descriptor?? [ 1273.486450][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.548980][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.213157][T18855] usb 1-1: USB disconnect, device number 106 [ 1275.560776][ T5277] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1275.769651][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 1275.777010][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1275.810490][ T5277] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1275.831458][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.852039][T18875] wg2: left promiscuous mode [ 1275.856650][T18875] wg2: left allmulticast mode [ 1275.871120][ T5277] usb 4-1: Product: syz [ 1275.875289][ T5277] usb 4-1: Manufacturer: syz [ 1275.889408][ T5277] usb 4-1: SerialNumber: syz [ 1275.912371][ T5277] usb 4-1: config 0 descriptor?? [ 1275.941217][T18879] 9pnet_virtio: no channels available for device syz [ 1275.954241][ T5277] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1276.011565][T18875] wg2: entered promiscuous mode [ 1276.061003][T18875] wg2: entered allmulticast mode [ 1277.114445][ T52] usb 4-1: Failed to submit usb control message: -110 [ 1277.253449][T18855] usb 4-1: USB disconnect, device number 20 [ 1277.296300][ T52] usb 4-1: unable to send the bmi data to the device: -110 [ 1277.333952][ T52] usb 4-1: unable to get target info from device [ 1277.360862][ T52] usb 4-1: could not get target info (-110) [ 1277.392847][ T52] usb 4-1: could not probe fw (-110) [ 1277.551717][T18895] netlink: 'syz.3.4248': attribute type 1 has an invalid length. [ 1277.890920][T18891] netlink: 'syz.0.4247': attribute type 4 has an invalid length. [ 1278.510520][T18912] /dev/sg0: Can't lookup blockdev [ 1279.199587][ T1849] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1279.444212][ T1849] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 1279.483054][ T1849] usb 5-1: config 0 has no interface number 0 [ 1279.514455][ T1849] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.564430][ T1849] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.620620][ T1849] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1279.679599][T14284] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1279.690323][ T1849] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1279.738307][ T1849] usb 5-1: Manufacturer: syz [ 1279.792603][ T1849] usb 5-1: config 0 descriptor?? [ 1279.929666][T14284] usb 4-1: Using ep0 maxpacket: 16 [ 1279.949436][T14284] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.989398][T14284] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1279.998992][T14284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.022994][T14284] usb 4-1: Product: syz [ 1280.036947][T14284] usb 4-1: Manufacturer: syz [ 1280.059658][T14284] usb 4-1: SerialNumber: syz [ 1280.092129][T14284] usb 4-1: config 0 descriptor?? [ 1280.477208][T18918] QAT: Device 0 not found [ 1280.759024][ T25] usb 4-1: USB disconnect, device number 21 [ 1280.802355][T18929] netlink: 'syz.1.4256': attribute type 4 has an invalid length. [ 1281.795393][ T1849] usbhid 5-1:0.18: can't add hid device: -71 [ 1281.829602][ T1849] usbhid 5-1:0.18: probe with driver usbhid failed with error -71 [ 1281.861404][ T1849] usb 5-1: USB disconnect, device number 83 [ 1281.968094][T18940] 9pnet_virtio: no channels available for device syz [ 1282.052246][T18855] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1282.815446][T18941] 9pnet_virtio: no channels available for device syz [ 1282.981503][T18855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1283.039238][T18855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1283.102686][T18855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1283.152679][T18855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1283.189546][T18855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.216252][T18855] usb 4-1: config 0 descriptor?? [ 1283.227011][T18934] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1283.711650][T18855] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1283.779693][T18855] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1283.856192][T18855] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1283.889708][T18855] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1283.928988][T18855] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1284.002330][T18855] plantronics 0003:047F:FFFF.004F: No inputs registered, leaving [ 1284.090116][T18855] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1284.151957][T18855] usb 4-1: USB disconnect, device number 22 [ 1284.483552][T18956] /dev/sg0: Can't lookup blockdev [ 1284.865053][T18855] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1285.231519][T18855] usb 5-1: Using ep0 maxpacket: 16 [ 1285.239329][T18966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4266'. [ 1285.258445][T18855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.331036][T18855] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1285.362113][T18855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.398154][T18855] usb 5-1: Product: syz [ 1285.431651][T18855] usb 5-1: Manufacturer: syz [ 1285.460166][T18855] usb 5-1: SerialNumber: syz [ 1285.489286][T18855] usb 5-1: config 0 descriptor?? [ 1285.616060][T14284] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1285.799660][ T1849] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1285.831700][T14284] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1285.892834][ T5278] usb 5-1: USB disconnect, device number 84 [ 1285.899625][T14284] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1285.932046][T14284] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1285.962989][T14284] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1286.002497][T14284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.037184][ T1849] usb 3-1: Using ep0 maxpacket: 16 [ 1286.078248][ T1849] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1286.097570][T18966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1286.123886][T14284] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.157530][ T1849] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1286.170342][ T1849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.208370][ T1849] usb 3-1: Product: syz [ 1286.215170][ T1849] usb 3-1: Manufacturer: syz [ 1286.232492][ T1849] usb 3-1: SerialNumber: syz [ 1286.266100][ T1849] usb 3-1: config 0 descriptor?? [ 1286.647800][ T1849] usb 4-1: USB disconnect, device number 23 [ 1286.838563][ T5278] usb 3-1: USB disconnect, device number 88 [ 1286.849794][T14284] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1287.070743][T14284] usb 1-1: Using ep0 maxpacket: 32 [ 1287.094369][T14284] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1287.124488][T14284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.174419][T14284] usb 1-1: config 0 descriptor?? [ 1287.203154][T14284] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1287.277265][ T29] audit: type=1326 audit(1722101744.206:1111): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18971 comm="syz.1.4269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f037e577299 code=0x0 [ 1287.759343][T14120] Bluetooth: hci3: unexpected event for opcode 0x040e [ 1288.145714][T14284] gspca_sq930x: ucbus_write failed -110 [ 1288.469339][T14284] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 1288.880452][T18990] 9pnet_virtio: no channels available for device syz [ 1288.906659][T14284] usb 1-1: USB disconnect, device number 107 [ 1290.076456][T19004] wg2: entered promiscuous mode [ 1290.113024][T19004] wg2: entered allmulticast mode [ 1291.199260][T19018] /dev/sg0: Can't lookup blockdev [ 1292.029686][ T1849] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1292.232151][ T1849] usb 4-1: Using ep0 maxpacket: 16 [ 1292.281207][ T1849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.353848][ T1849] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1293.286963][ T1849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.341484][ T1849] usb 4-1: Product: syz [ 1293.345708][ T1849] usb 4-1: Manufacturer: syz [ 1293.415295][ T1849] usb 4-1: SerialNumber: syz [ 1293.455366][ T1849] usb 4-1: config 0 descriptor?? [ 1293.799873][ T5307] usb 4-1: USB disconnect, device number 24 [ 1294.049788][T18855] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1294.250143][T18855] usb 1-1: Using ep0 maxpacket: 32 [ 1294.264231][T18855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1294.323142][T18855] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1294.391966][T18855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.428640][T18855] usb 1-1: Product: syz [ 1294.454950][T18855] usb 1-1: Manufacturer: syz [ 1294.471097][T18855] usb 1-1: SerialNumber: syz [ 1294.505297][T18855] usb 1-1: config 0 descriptor?? [ 1294.537243][T19046] /dev/sg0: Can't lookup blockdev [ 1294.603455][T18855] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1294.869712][ T5307] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1295.299612][ T5307] usb 4-1: Using ep0 maxpacket: 32 [ 1295.447192][ T5307] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1295.609181][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.701765][ T1124] usb 1-1: Failed to submit usb control message: -110 [ 1295.728115][ T1124] usb 1-1: unable to send the bmi data to the device: -110 [ 1295.748535][ T5307] usb 4-1: config 0 descriptor?? [ 1295.817795][ T1124] usb 1-1: unable to get target info from device [ 1295.825871][ T5307] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1295.887119][ T1124] usb 1-1: could not get target info (-110) [ 1296.094844][ T1124] usb 1-1: could not probe fw (-110) [ 1296.479728][T14120] Bluetooth: hci0: unexpected event for opcode 0x040e [ 1296.795467][ T5307] gspca_sq930x: ucbus_write failed -110 [ 1296.805437][ T5307] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 1296.839981][ T5307] usb 4-1: USB disconnect, device number 25 [ 1296.919562][T18855] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1297.444944][T18855] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1297.505532][T18855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.661337][T18855] usb 5-1: config 0 descriptor?? [ 1298.259105][T14284] usb 1-1: USB disconnect, device number 108 [ 1298.745993][T14120] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1299.465747][T18855] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1299.505627][T18855] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1299.555941][T18855] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1300.442551][T18855] usb 5-1: USB disconnect, device number 85 [ 1300.689720][ T5307] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1300.854019][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.860673][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.916781][ T5307] usb 1-1: Using ep0 maxpacket: 32 [ 1300.939664][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1300.992181][ T5307] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1301.018425][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.029411][ T5307] usb 1-1: Product: syz [ 1301.035346][ T5307] usb 1-1: Manufacturer: syz [ 1301.044216][ T5307] usb 1-1: SerialNumber: syz [ 1301.062329][ T5307] usb 1-1: config 0 descriptor?? [ 1301.120816][ T5307] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1301.344255][ T5277] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1301.549596][ T5277] usb 4-1: Using ep0 maxpacket: 16 [ 1301.563675][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.583707][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1301.631624][ T5277] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1301.651692][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.676224][ T5277] usb 4-1: Product: syz [ 1301.695524][ T5277] usb 4-1: Manufacturer: syz [ 1301.723343][ T5277] usb 4-1: SerialNumber: syz [ 1301.747126][ T5277] usb 4-1: config 0 descriptor?? [ 1302.145858][ T1849] usb 4-1: USB disconnect, device number 26 [ 1302.158467][ T2940] usb 1-1: Failed to submit usb control message: -110 [ 1302.196666][ T2940] usb 1-1: unable to send the bmi data to the device: -110 [ 1302.245630][ T2940] usb 1-1: unable to get target info from device [ 1302.296332][ T2940] usb 1-1: could not get target info (-110) [ 1302.330167][ T2940] usb 1-1: could not probe fw (-110) [ 1302.395789][T14284] usb 1-1: USB disconnect, device number 109 [ 1303.189977][T14284] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1303.420068][T14284] usb 4-1: Using ep0 maxpacket: 16 [ 1303.431692][T14284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.451626][ T5277] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1303.579490][T14284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.680533][T14284] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1303.721936][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 1303.768882][ T5277] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1303.795646][ T5277] usb 3-1: config 179 has no interface number 0 [ 1303.821837][T14284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.845859][ T5277] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1303.870828][ T5277] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1303.913381][T14284] usb 4-1: config 0 descriptor?? [ 1303.938678][ T5277] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1304.002498][ T5277] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1304.050822][ T5277] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1304.135801][ T5277] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1304.181173][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.212740][T19103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.260288][T19106] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1304.300066][T19103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.620889][T14284] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 1304.668885][T14284] uclogic 0003:5543:0004.0050: unknown main item tag 0x0 [ 1304.742524][T14284] uclogic 0003:5543:0004.0050: No inputs registered, leaving [ 1304.845586][T14284] uclogic 0003:5543:0004.0050: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 1305.020280][T14284] usb 4-1: USB disconnect, device number 27 [ 1305.230159][ T5307] usb 3-1: USB disconnect, device number 89 [ 1305.236098][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1305.236131][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1305.648329][T19115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4307'. [ 1307.679781][T14284] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1307.709705][ T5278] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1307.799817][ T1849] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1308.330916][T19135] netlink: 'syz.2.4309': attribute type 4 has an invalid length. [ 1308.379834][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 1308.412825][ T5278] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.443262][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1308.473102][ T1849] usb 4-1: Using ep0 maxpacket: 32 [ 1308.484962][T14284] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1308.508214][ T1849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1308.531382][ T5278] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1308.542809][T14284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.564935][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.581828][ T1849] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1308.606259][T14284] usb 1-1: config 0 descriptor?? [ 1308.611583][ T5278] usb 5-1: Product: syz [ 1308.625179][ T1849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.636318][T14284] usb 1-1: selecting invalid altsetting 1 [ 1308.649840][ T5278] usb 5-1: Manufacturer: syz [ 1308.658855][ T5278] usb 5-1: SerialNumber: syz [ 1308.670278][ T1849] usb 4-1: Product: syz [ 1308.674471][ T1849] usb 4-1: Manufacturer: syz [ 1308.693945][ T5278] usb 5-1: config 0 descriptor?? [ 1308.713250][ T1849] usb 4-1: SerialNumber: syz [ 1308.751048][ T1849] usb 4-1: config 0 descriptor?? [ 1308.761506][T14284] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1308.830692][ T1849] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1309.221586][ T1849] usb 5-1: USB disconnect, device number 86 [ 1309.890398][ T2940] usb 4-1: Failed to submit usb control message: -110 [ 1309.900640][ T2940] usb 4-1: unable to send the bmi data to the device: -110 [ 1309.908990][ T2940] usb 4-1: unable to get target info from device [ 1309.915484][ T2940] usb 4-1: could not get target info (-110) [ 1309.926408][ T2940] usb 4-1: could not probe fw (-110) [ 1310.381671][ T1849] usb 4-1: USB disconnect, device number 28 [ 1310.436234][ T5307] usb 1-1: USB disconnect, device number 110 [ 1310.792102][T19150] fuse: Bad value for 'fd' [ 1310.902664][T19148] wg2: left promiscuous mode [ 1310.925603][T19148] wg2: left allmulticast mode [ 1311.119764][ T1849] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1311.362038][ T1849] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1311.413308][ T1849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1311.475231][ T1849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1311.513746][ T1849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1311.579643][ T1849] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1311.599911][T19148] wg2: entered promiscuous mode [ 1311.622636][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.631692][T19148] wg2: entered allmulticast mode [ 1311.662722][ T1849] usb 4-1: config 0 descriptor?? [ 1312.052676][T19158] netlink: 'syz.1.4318': attribute type 4 has an invalid length. [ 1312.143429][ T1849] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1312.177125][ T1849] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1312.209529][ T1849] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1312.248488][ T1849] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 1312.288346][ T1849] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1312.736220][ T1849] usb 4-1: USB disconnect, device number 29 [ 1315.289578][ T1849] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1315.529575][ T1849] usb 5-1: Using ep0 maxpacket: 16 [ 1315.563467][ T1849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.668138][ T1849] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1315.743878][ T1849] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1315.795568][ T1849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.871629][ T1849] usb 5-1: Product: syz [ 1315.884026][ T1849] usb 5-1: Manufacturer: syz [ 1315.904598][ T1849] usb 5-1: SerialNumber: syz [ 1315.921322][ T1849] usb 5-1: config 0 descriptor?? [ 1316.214473][ T1849] usb 5-1: USB disconnect, device number 87 [ 1316.952862][T19200] rdma_rxe: rxe_newlink: failed to add lo [ 1317.439664][ T5278] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1317.649553][ T5278] usb 1-1: Using ep0 maxpacket: 32 [ 1317.920772][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1317.955673][ T5278] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1317.969152][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.092080][ T5278] usb 1-1: Product: syz [ 1318.096310][ T5278] usb 1-1: Manufacturer: syz [ 1318.141672][ T5278] usb 1-1: SerialNumber: syz [ 1318.169654][ T5278] usb 1-1: config 0 descriptor?? [ 1318.237383][ T5278] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1318.951545][T19208] /dev/sg0: Can't lookup blockdev [ 1319.284953][ T1124] usb 1-1: Failed to submit usb control message: -110 [ 1319.615443][ T1124] usb 1-1: unable to send the bmi data to the device: -110 [ 1319.685728][ T1124] usb 1-1: unable to get target info from device [ 1319.710023][ T1124] usb 1-1: could not get target info (-110) [ 1319.740983][ T1124] usb 1-1: could not probe fw (-110) [ 1320.130312][ T5307] usb 1-1: USB disconnect, device number 111 [ 1320.622338][ T29] audit: type=1326 audit(1722101777.559:1112): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19223 comm="syz.1.4334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f037e577299 code=0x0 [ 1320.656342][ T5277] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1320.670791][T19222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4332'. [ 1320.881659][ T5277] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1320.928482][ T5277] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1320.968898][ T5277] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1321.017536][ T5277] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1321.058723][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.119786][T19230] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1321.178755][ T5277] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1321.360384][ T5277] usb 5-1: USB disconnect, device number 88 [ 1322.189579][ T5277] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1322.484010][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1322.539623][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1322.599545][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1322.659546][ T5277] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1322.684077][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.718869][ T5277] usb 3-1: config 0 descriptor?? [ 1322.742056][T19246] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1322.769674][ T1849] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1323.005273][ T1849] usb 1-1: Using ep0 maxpacket: 16 [ 1323.022397][ T1849] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1323.095959][ T1849] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1323.148246][ T1849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.188872][ T1849] usb 1-1: Product: syz [ 1323.199008][ T1849] usb 1-1: Manufacturer: syz [ 1323.218191][ T1849] usb 1-1: SerialNumber: syz [ 1323.232003][ T5277] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1323.232585][ T1849] usb 1-1: config 0 descriptor?? [ 1323.267913][ T5277] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1323.296194][ T5277] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1323.319568][ T5277] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1323.337351][ T5277] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1323.374463][ T5277] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 1323.426539][ T5277] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1323.485057][ T5277] usb 3-1: USB disconnect, device number 90 [ 1323.561314][T18855] usb 1-1: USB disconnect, device number 112 [ 1323.930486][T19263] wg2: left promiscuous mode [ 1323.935174][T19263] wg2: left allmulticast mode [ 1324.170531][T19263] wg2: entered promiscuous mode [ 1324.175457][T19263] wg2: entered allmulticast mode [ 1325.098969][ T29] audit: type=1326 audit(1722101782.029:1113): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.0.4346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc030d77299 code=0x0 [ 1327.076233][ T29] audit: type=1326 audit(1722101784.009:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19269 comm="syz.2.4347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe505377299 code=0x0 [ 1327.249527][ T1849] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1327.271253][T19287] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4349'. [ 1327.479564][ T1849] usb 2-1: Using ep0 maxpacket: 32 [ 1327.507339][ T1849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1327.552501][ T1849] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1327.579826][ T1849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.589556][ T5278] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1327.602835][ T1849] usb 2-1: Product: syz [ 1327.609511][ T1849] usb 2-1: Manufacturer: syz [ 1327.614173][ T1849] usb 2-1: SerialNumber: syz [ 1327.694294][ T1849] usb 2-1: config 0 descriptor?? [ 1327.756056][ T1849] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1327.822204][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1327.833583][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1327.856269][ T5278] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1327.874916][ T5278] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1327.884891][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.900929][T19287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1328.000836][ T5278] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1328.440737][ T5277] usb 4-1: USB disconnect, device number 30 [ 1328.601368][ T5278] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1328.780011][ T2940] usb 2-1: Failed to submit usb control message: -110 [ 1328.791644][ T2940] usb 2-1: unable to send the bmi data to the device: -110 [ 1328.813405][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1328.824777][ T2940] usb 2-1: unable to get target info from device [ 1328.836999][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1328.864228][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1328.889655][ T1849] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1328.899571][ T5278] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1328.922508][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.925907][ T2940] usb 2-1: could not get target info (-110) [ 1328.946202][ T5278] usb 5-1: config 0 descriptor?? [ 1328.952804][T19295] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1328.979005][ T2940] usb 2-1: could not probe fw (-110) [ 1329.119902][ T1849] usb 1-1: Using ep0 maxpacket: 16 [ 1329.142325][ T1849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.179492][ T1849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.217326][ T1849] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1329.237772][ T1849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.273444][ T1849] usb 1-1: config 0 descriptor?? [ 1329.311052][ T5277] usb 2-1: USB disconnect, device number 120 [ 1329.445105][T19302] netlink: 'syz.2.4353': attribute type 4 has an invalid length. [ 1329.521351][ T5278] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1329.528875][ T5278] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1329.605820][ T5278] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1329.618800][T19297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.632607][T19297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.723947][ T5278] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1329.876481][ T5278] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1330.129742][ T5278] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 1330.170223][ T5278] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1330.217983][ T5278] usb 5-1: USB disconnect, device number 89 [ 1330.330718][ T1849] uclogic 0003:5543:0004.0054: unknown main item tag 0x0 [ 1330.368407][ T1849] uclogic 0003:5543:0004.0054: unknown main item tag 0x0 [ 1330.430005][ T1849] uclogic 0003:5543:0004.0054: No inputs registered, leaving [ 1330.503385][ T1849] uclogic 0003:5543:0004.0054: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 1330.580273][ T1849] usb 1-1: USB disconnect, device number 113 [ 1331.039539][ T5278] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1331.251404][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 1331.299720][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1331.363274][ T5278] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1331.377438][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.424067][ T5278] usb 2-1: Product: syz [ 1331.429516][ T5278] usb 2-1: Manufacturer: syz [ 1331.506679][ T5278] usb 2-1: SerialNumber: syz [ 1331.542204][ T5278] usb 2-1: config 0 descriptor?? [ 1331.709665][ T1849] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1331.728668][T19317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4360'. [ 1331.797601][ T5277] usb 2-1: USB disconnect, device number 121 [ 1331.964119][ T1849] usb 5-1: Using ep0 maxpacket: 16 [ 1331.990908][T18855] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1331.998935][ T1849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.040675][ T1849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.089818][ T1849] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1332.135416][ T1849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.172815][ T1849] usb 5-1: config 0 descriptor?? [ 1332.250329][T18855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1332.279140][T18855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1332.339592][T18855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1332.402365][T18855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1332.453732][T18855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.504188][T19313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.548952][T18855] usb 4-1: config 0 descriptor?? [ 1332.575889][T19315] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1332.593041][T19313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.616855][T19327] netlink: 'syz.1.4363': attribute type 4 has an invalid length. [ 1332.927514][ T29] audit: type=1326 audit(1722101789.829:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19318 comm="syz.2.4361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe505377299 code=0x0 [ 1332.958602][ T1849] uclogic 0003:5543:0004.0055: unknown main item tag 0x0 [ 1332.994292][ T1849] uclogic 0003:5543:0004.0055: unknown main item tag 0x0 [ 1333.028674][ T1849] uclogic 0003:5543:0004.0055: No inputs registered, leaving [ 1333.071538][T18855] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 1333.074789][ T1849] uclogic 0003:5543:0004.0055: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.4-1/input0 [ 1333.180331][T19335] /dev/sg0: Can't lookup blockdev [ 1333.190115][T18855] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 1333.239754][T18855] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 1333.255928][T18855] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 1333.307016][T18855] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 1333.354992][T18855] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 1333.404186][T18855] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1333.507196][T18855] usb 4-1: USB disconnect, device number 31 [ 1333.636036][ T5278] usb 5-1: USB disconnect, device number 90 [ 1334.140960][ T1849] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1334.171025][T19340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1334.375515][ T1849] usb 1-1: Using ep0 maxpacket: 8 [ 1334.393546][ T1849] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1334.421581][ T1849] usb 1-1: config 179 has no interface number 0 [ 1334.446014][ T1849] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1334.503960][ T1849] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1334.546288][ T1849] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1334.610834][ T1849] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1334.650494][ T1849] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1334.712768][ T1849] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1334.762686][ T1849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.831762][T19338] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1334.877292][T19348] netlink: 'syz.3.4368': attribute type 8 has an invalid length. [ 1335.433052][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1335.606691][T19344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1335.760784][T19355] binder: 19354:19355 ioctl c018620b 0 returned -14 [ 1335.801103][ T1849] usb 1-1: USB disconnect, device number 114 [ 1335.801167][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1335.815921][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1336.058178][T19358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4372'. [ 1336.599684][T18855] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1336.669401][T19367] wg2: left promiscuous mode [ 1336.676458][T19367] wg2: left allmulticast mode [ 1336.759618][ T5278] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1336.789541][T18855] usb 5-1: Using ep0 maxpacket: 16 [ 1336.799332][T18855] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1336.825617][T18855] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1336.835321][T18855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.853745][T18855] usb 5-1: Product: syz [ 1336.864063][T18855] usb 5-1: Manufacturer: syz [ 1336.873076][T18855] usb 5-1: SerialNumber: syz [ 1336.900166][T18855] usb 5-1: config 0 descriptor?? [ 1337.094741][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 1337.124590][T18855] usb 5-1: USB disconnect, device number 91 [ 1337.221248][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1337.234996][T19367] wg2: entered promiscuous mode [ 1337.243022][T19367] wg2: entered allmulticast mode [ 1337.273445][ T5278] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1337.306811][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.383582][ T5278] usb 4-1: Product: syz [ 1337.411461][ T5278] usb 4-1: Manufacturer: syz [ 1337.424228][ T5278] usb 4-1: SerialNumber: syz [ 1337.501709][ T5278] usb 4-1: config 0 descriptor?? [ 1338.369721][ T5277] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1338.969534][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 1338.986227][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1339.017454][T18855] usb 4-1: USB disconnect, device number 32 [ 1339.038537][ T5277] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1339.066670][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.107257][ T5277] usb 1-1: Product: syz [ 1339.111627][ T5277] usb 1-1: Manufacturer: syz [ 1339.116243][ T5277] usb 1-1: SerialNumber: syz [ 1339.145210][ T5277] usb 1-1: config 0 descriptor?? [ 1339.190210][ T5277] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1340.360240][ T2940] usb 1-1: Failed to submit usb control message: -110 [ 1340.447772][ T2940] usb 1-1: unable to send the bmi data to the device: -110 [ 1340.567785][ T5278] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1340.735733][ T2940] usb 1-1: unable to get target info from device [ 1340.827025][ T2940] usb 1-1: could not get target info (-110) [ 1340.858192][T18855] usb 1-1: USB disconnect, device number 115 [ 1340.921774][ T2940] usb 1-1: could not probe fw (-110) [ 1340.999518][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 1341.142272][ T5278] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1341.899530][ T5278] usb 4-1: config 179 has no interface number 0 [ 1341.915325][ T5278] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1341.930010][ T5278] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1341.943062][ T5278] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1341.954642][ T5278] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1341.978990][ T5278] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1342.037446][T19389] binder: 19388:19389 ioctl c018620b 0 returned -14 [ 1342.050337][ T5278] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1342.129828][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.145884][T19382] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1342.374163][ T5280] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1342.426396][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4385'. [ 1342.652933][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 1342.729211][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.784997][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.838627][ T5278] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input50 [ 1342.839854][ T5280] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1342.911047][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.957036][ T5280] usb 5-1: config 0 descriptor?? [ 1343.097395][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1343.097402][T18855] usb 4-1: USB disconnect, device number 33 [ 1343.111860][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1343.122426][T18855] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1343.370534][T19392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.446516][T19392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.772755][ T5280] uclogic 0003:5543:0004.0057: unknown main item tag 0x0 [ 1343.809660][ T5280] uclogic 0003:5543:0004.0057: unknown main item tag 0x0 [ 1343.830838][ T5280] uclogic 0003:5543:0004.0057: No inputs registered, leaving [ 1343.902525][ T5280] uclogic 0003:5543:0004.0057: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.4-1/input0 [ 1343.999698][ T5278] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1344.230056][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 1344.272480][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1344.294093][T19412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1344.300464][ T5280] usb 5-1: USB disconnect, device number 92 [ 1344.387606][ T5278] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1344.431842][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.486098][ T5278] usb 2-1: Product: syz [ 1344.521719][ T5278] usb 2-1: Manufacturer: syz [ 1344.539578][ T5278] usb 2-1: SerialNumber: syz [ 1344.596082][ T5278] usb 2-1: config 0 descriptor?? [ 1344.789602][T18855] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1344.972678][ T5278] usb 2-1: USB disconnect, device number 122 [ 1344.994556][T18855] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1345.035480][T18855] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1345.099532][T18855] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1345.165738][T18855] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1345.189887][T18855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.257788][T19411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1345.299741][T18855] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1345.755547][T19415] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4390'. [ 1345.881267][ T5278] usb 4-1: USB disconnect, device number 34 [ 1346.202232][T18855] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1346.401760][T18855] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1346.416241][T18855] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1346.437026][T18855] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1346.454608][T18855] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1346.469067][T18855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.488080][T19415] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1346.506496][T18855] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1347.119668][ T1849] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1347.319731][ T1849] usb 3-1: Using ep0 maxpacket: 32 [ 1347.332007][ T1849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1347.660506][ T1849] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1347.690365][ T1849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.710041][ T1849] usb 3-1: Product: syz [ 1347.714383][ T1849] usb 3-1: Manufacturer: syz [ 1347.726496][ T1849] usb 3-1: SerialNumber: syz [ 1347.742570][T19426] netlink: 'syz.0.4392': attribute type 4 has an invalid length. [ 1347.755940][ T1849] usb 3-1: config 0 descriptor?? [ 1347.824002][ T1849] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1348.859819][ T62] usb 3-1: Failed to submit usb control message: -110 [ 1349.072178][ T62] usb 3-1: unable to send the bmi data to the device: -110 [ 1349.146058][ T62] usb 3-1: unable to get target info from device [ 1349.233963][ T62] usb 3-1: could not get target info (-110) [ 1349.294845][T14284] usb 3-1: USB disconnect, device number 91 [ 1349.331182][ T62] usb 3-1: could not probe fw (-110) [ 1349.378039][ T5280] usb 5-1: USB disconnect, device number 93 [ 1349.490270][T19436] binder: 19435:19436 ioctl c018620b 0 returned -14 [ 1349.795836][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4397'. [ 1350.239863][T14284] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1350.854651][T14284] usb 4-1: Using ep0 maxpacket: 32 [ 1350.884277][T14284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1350.923240][T14284] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1350.942986][T14284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.964791][T14284] usb 4-1: Product: syz [ 1350.977863][T14284] usb 4-1: Manufacturer: syz [ 1351.001497][T14284] usb 4-1: SerialNumber: syz [ 1351.032937][T14284] usb 4-1: config 0 descriptor?? [ 1351.240448][ T5277] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1351.579591][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 1352.125576][T14284] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1352.137837][ T5277] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1352.206036][ T5277] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1352.259816][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.288286][ T5277] usb 1-1: Product: syz [ 1352.309513][ T5277] usb 1-1: Manufacturer: syz [ 1352.338125][ T5277] usb 1-1: SerialNumber: syz [ 1352.389205][ T5277] usb 1-1: config 0 descriptor?? [ 1352.834050][ T12] usb 4-1: Failed to submit usb control message: -71 [ 1352.841365][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 1352.848519][ T12] usb 4-1: unable to get target info from device [ 1352.853103][T14284] usb 1-1: USB disconnect, device number 116 [ 1352.869360][ T1849] usb 4-1: USB disconnect, device number 35 [ 1352.881939][ T12] usb 4-1: could not get target info (-71) [ 1352.888193][ T12] usb 4-1: could not probe fw (-71) [ 1354.495965][T19472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4404'. [ 1355.509651][ T5280] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1355.792249][ T5280] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1355.856778][ T5280] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1355.894914][ T5280] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1355.955437][ T5280] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1355.994882][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.078164][ T5280] usb 4-1: can't set config #27, error -71 [ 1356.121094][ T5280] usb 4-1: USB disconnect, device number 36 [ 1356.230744][T19490] binder: 19488:19490 ioctl c018620b 0 returned -14 [ 1356.341893][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4411'. [ 1356.558727][T19498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4410'. [ 1356.656810][T19500] 9pnet_virtio: no channels available for device syz [ 1356.949701][T14284] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1357.165118][T14284] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1357.241312][T14284] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1357.260209][T14284] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1357.309710][T14284] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1357.328867][T19503] wg2: left promiscuous mode [ 1357.341545][T14284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.391498][T19503] wg2: left allmulticast mode [ 1357.445684][T19498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1357.516109][T19508] wg2: entered promiscuous mode [ 1357.539330][T14284] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1357.546937][T19508] wg2: entered allmulticast mode [ 1357.595750][T19509] netlink: 'syz.0.4414': attribute type 4 has an invalid length. [ 1358.729542][ T5277] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1358.969618][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 1359.002934][ T1849] usb 2-1: USB disconnect, device number 123 [ 1359.019265][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1359.071244][ T5277] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1359.112854][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.130704][ T5277] usb 3-1: Product: syz [ 1359.143364][ T5277] usb 3-1: Manufacturer: syz [ 1359.158250][ T5277] usb 3-1: SerialNumber: syz [ 1359.370903][ T5277] usb 3-1: config 0 descriptor?? [ 1359.460585][ T5277] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1359.688909][T14284] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1360.296062][T14284] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1360.488089][T14284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.530017][ T12] usb 3-1: Failed to submit usb control message: -110 [ 1360.639278][ T12] usb 3-1: unable to send the bmi data to the device: -110 [ 1360.739856][ T5277] usb 3-1: USB disconnect, device number 92 [ 1360.771981][T14284] usb 1-1: config 0 descriptor?? [ 1360.819575][ T12] usb 3-1: unable to get target info from device [ 1360.836211][ T12] usb 3-1: could not get target info (-110) [ 1360.837870][T14284] usb 1-1: selecting invalid altsetting 1 [ 1360.897134][ T12] usb 3-1: could not probe fw (-110) [ 1360.908557][T14284] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1361.343777][T19537] binder: 19535:19537 ioctl c018620b 0 returned -14 [ 1362.294805][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.500180][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.269299][ T1849] usb 1-1: USB disconnect, device number 117 [ 1363.410596][T19546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4423'. [ 1363.661969][T19534] wg2: left promiscuous mode [ 1363.669788][T19534] wg2: left allmulticast mode [ 1363.889871][T19534] wg2: entered promiscuous mode [ 1363.929616][T19534] wg2: entered allmulticast mode [ 1364.743095][T19562] 9pnet_virtio: no channels available for device syz [ 1364.755698][T19560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4426'. [ 1365.374147][T19567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4429'. [ 1365.559595][T18855] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1366.735024][T18855] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1366.789660][ T5277] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1366.819897][T18855] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1366.862796][T18855] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1366.913528][T18855] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1366.957690][T18855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.000201][T19556] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1367.049746][ T5277] usb 2-1: Using ep0 maxpacket: 32 [ 1367.075322][T18855] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1367.094616][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1367.122630][ T5277] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1367.158816][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.219627][ T5277] usb 2-1: Product: syz [ 1367.245500][ T5277] usb 2-1: Manufacturer: syz [ 1367.265431][ T5277] usb 2-1: SerialNumber: syz [ 1367.300813][ T5277] usb 2-1: config 0 descriptor?? [ 1367.320226][T18855] usb 3-1: USB disconnect, device number 93 [ 1367.367222][ T5277] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1367.380838][T19575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4431'. [ 1367.992230][ T25] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1368.460223][ T12] usb 2-1: Failed to submit usb control message: -110 [ 1368.590692][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1368.741884][ T5277] usb 2-1: USB disconnect, device number 124 [ 1368.751074][ T12] usb 2-1: unable to send the bmi data to the device: -110 [ 1368.759518][ T12] usb 2-1: unable to get target info from device [ 1368.797857][ T12] usb 2-1: could not get target info (-110) [ 1368.821517][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1368.832967][ T12] usb 2-1: could not probe fw (-110) [ 1368.842025][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1368.879758][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1368.907187][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.947942][T19575] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1370.165622][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1371.216549][T19586] binder: 19585:19586 ioctl c018620b 0 returned -14 [ 1374.255986][T18855] usb 4-1: USB disconnect, device number 37 [ 1374.959804][T19598] binder: 19594:19598 unknown command 536871296 [ 1374.966120][T19598] binder: 19594:19598 ioctl c0306201 20000480 returned -22 [ 1375.461208][T19604] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1376.221599][T19612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1376.235249][T19612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1376.245874][T19612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1376.266086][T19612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1376.274782][T19612] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1376.282658][T19612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1376.618639][T19611] lo speed is unknown, defaulting to 1000 [ 1376.829797][T19623] netlink: 'syz.1.4445': attribute type 8 has an invalid length. [ 1376.863118][T19621] binder: 19620:19621 ioctl c018620b 0 returned -14 [ 1378.379621][T19612] Bluetooth: hci6: command tx timeout [ 1379.894480][T19612] Bluetooth: hci5: command 0x0406 tx timeout [ 1379.918140][T19628] 9pnet_virtio: no channels available for device syz [ 1380.459536][T14120] Bluetooth: hci6: command tx timeout [ 1380.977568][ T2470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.441798][ T2470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.836801][ T2470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.960463][ T5307] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1382.077090][ T2470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.176284][ T5307] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1382.209674][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.290572][ T5307] usb 4-1: config 0 descriptor?? [ 1382.529709][T14120] Bluetooth: hci6: command tx timeout [ 1382.762077][T14120] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1382.811806][ T5307] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1382.836233][ T5307] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1382.890994][ T5307] usb 4-1: USB disconnect, device number 38 [ 1382.951436][T19611] chnl_net:caif_netlink_parms(): no params data found [ 1383.969611][ T2470] bridge_slave_1: left allmulticast mode [ 1383.975330][ T2470] bridge_slave_1: left promiscuous mode [ 1384.031667][ T2470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.137848][ T2470] bridge_slave_0: left allmulticast mode [ 1384.191417][ T2470] bridge_slave_0: left promiscuous mode [ 1384.206186][ T2470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.259566][T14120] Bluetooth: hci6: command tx timeout [ 1386.282076][T19671] binder: 19669:19671 ioctl c018620b 0 returned -14 [ 1392.249736][ T25] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1392.501890][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1392.530757][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1392.600728][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1392.629639][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1392.676487][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.724239][T19687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1392.751796][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1394.141521][ T2470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.176810][ T2470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.229258][ T2470] bond0 (unregistering): Released all slaves [ 1394.393177][T19663] netlink: 'syz.2.4456': attribute type 4 has an invalid length. [ 1394.592237][T19684] wg2: left promiscuous mode [ 1394.607162][T19684] wg2: left allmulticast mode [ 1394.650155][T19682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4461'. [ 1394.695466][T19695] netlink: 'syz.1.4464': attribute type 4 has an invalid length. [ 1394.771154][T19611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.778355][T19611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.851875][ T25] usb 1-1: USB disconnect, device number 118 [ 1394.879738][T19611] bridge_slave_0: entered allmulticast mode [ 1394.964305][T19611] bridge_slave_0: entered promiscuous mode [ 1395.027278][T19611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.079929][T19611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.087303][T19611] bridge_slave_1: entered allmulticast mode [ 1395.168796][T19611] bridge_slave_1: entered promiscuous mode [ 1395.383360][T19612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1395.394601][T19612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1395.403480][T19612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1395.412688][T19612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1395.422259][T19612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1395.429665][T19612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1396.074789][T19701] wg2: left promiscuous mode [ 1396.099739][T19701] wg2: left allmulticast mode [ 1396.319226][T19611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.613255][T19611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.009772][ T5280] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1397.219585][T18855] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1397.239787][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 1397.289099][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1397.335114][T19721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1397.353149][ T5280] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1397.389457][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.430345][T19708] lo speed is unknown, defaulting to 1000 [ 1397.449853][ T5280] usb 1-1: Product: syz [ 1397.471649][T18855] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1397.489473][ T5280] usb 1-1: Manufacturer: syz [ 1397.490312][T19612] Bluetooth: hci4: command tx timeout [ 1397.509724][ T5280] usb 1-1: SerialNumber: syz [ 1397.544932][T18855] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1397.610024][ T5280] usb 1-1: config 0 descriptor?? [ 1397.628835][T18855] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1399.569589][T19612] Bluetooth: hci4: command tx timeout [ 1399.603073][T18855] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1400.609537][T18855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.739748][T19612] Bluetooth: hci4: command tx timeout [ 1506.629372][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1506.636374][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11696/1:b..l P18604/1:b..l P19725/1:b..l [ 1506.647520][ C1] rcu: (detected by 1, t=10502 jiffies, g=148253, q=203 ncpus=2) [ 1506.655337][ C1] task:syz.1.4469 state:R running task stack:27680 pid:19725 tgid:19719 ppid:14119 flags:0x00004004 [ 1506.668481][ C1] Call Trace: [ 1506.671782][ C1] [ 1506.674723][ C1] __schedule+0xe37/0x5490 [ 1506.679185][ C1] ? hlock_class+0x4e/0x130 [ 1506.683710][ C1] ? __pfx___schedule+0x10/0x10 [ 1506.688582][ C1] ? find_held_lock+0x2d/0x110 [ 1506.693378][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1506.698779][ C1] preempt_schedule_common+0x44/0xc0 [ 1506.704089][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1506.709305][ C1] _raw_spin_unlock+0x3e/0x50 [ 1506.714006][ C1] unmap_page_range+0xbb8/0x3c10 [ 1506.718971][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1506.724361][ C1] ? uprobe_munmap+0x20/0x5d0 [ 1506.729068][ C1] unmap_single_vma+0x194/0x2b0 [ 1506.733937][ C1] unmap_vmas+0x22f/0x490 [ 1506.738290][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1506.743160][ C1] ? __pfx_lock_release+0x10/0x10 [ 1506.748203][ C1] ? lru_add_drain_cpu+0x454/0x860 [ 1506.753341][ C1] exit_mmap+0x1b8/0xb20 [ 1506.757611][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1506.762403][ C1] __mmput+0x12a/0x480 [ 1506.766495][ C1] mmput+0x62/0x70 [ 1506.770239][ C1] do_exit+0x9bf/0x2bb0 [ 1506.774417][ C1] ? get_signal+0x8f2/0x2770 [ 1506.779029][ C1] ? __pfx_do_exit+0x10/0x10 [ 1506.783639][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1506.788684][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1506.794085][ C1] do_group_exit+0xd3/0x2a0 [ 1506.798607][ C1] get_signal+0x25fd/0x2770 [ 1506.803133][ C1] ? down_interruptible+0x66/0xa0 [ 1506.808172][ C1] ? __pfx___down_common+0x10/0x10 [ 1506.813297][ C1] ? __pfx_get_signal+0x10/0x10 [ 1506.818172][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1506.823998][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1506.829224][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 1506.834795][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1506.840975][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 1506.846632][ C1] do_syscall_64+0xda/0x250 [ 1506.851163][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.857073][ C1] RIP: 0033:0x7f037e576e9b [ 1506.861510][ C1] RSP: 002b:00007f037df99f20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1506.869953][ C1] RAX: fffffffffffffffc RBX: 000000000000000b RCX: 00007f037e576e9b [ 1506.877935][ C1] RDX: 00007f037df9aff0 RSI: 0000000080085502 RDI: 000000000000000b [ 1506.885955][ C1] RBP: 00007f037df9aff0 R08: 0000000000000080 R09: 00007f037df99fe8 [ 1506.893939][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 1506.901922][ C1] R13: 0000000800000000 R14: 0000000000000024 R15: 00007f037e5edee8 [ 1506.909908][ C1] [ 1506.912938][ C1] task:syz.2.4168 state:R running task stack:26712 pid:18604 tgid:18603 ppid:14139 flags:0x00004006 [ 1506.924691][ C1] Call Trace: [ 1506.927979][ C1] [ 1506.930920][ C1] __schedule+0xe37/0x5490 [ 1506.935368][ C1] ? __pfx___schedule+0x10/0x10 [ 1506.940241][ C1] ? hlock_class+0x4e/0x130 [ 1506.944761][ C1] ? mark_held_locks+0x9f/0xe0 [ 1506.949543][ C1] preempt_schedule_irq+0x51/0x90 [ 1506.954590][ C1] irqentry_exit+0x36/0x90 [ 1506.959037][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1506.965047][ C1] RIP: 0010:mtree_range_walk+0x545/0xbe0 [ 1506.970697][ C1] Code: f6 48 8b 44 24 38 48 89 44 24 28 e8 f5 7f 8d f6 48 8b 04 24 4c 8d b0 80 00 00 00 e9 27 fc ff ff e8 e0 7f 8d f6 e8 db 7f 8d f6 <44> 89 e6 bf 01 00 00 00 e8 6e 7a 8d f6 41 80 fc 01 0f 86 b0 03 00 [ 1506.990321][ C1] RSP: 0018:ffffc900034bf798 EFLAGS: 00000246 [ 1506.996404][ C1] RAX: 0000000000040000 RBX: 000000000000000f RCX: ffffc9000403a000 [ 1507.004385][ C1] RDX: 0000000000040000 RSI: ffffffff8afd12f5 RDI: 0000000000000006 [ 1507.012368][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 000000001fffefff [ 1507.020351][ C1] R10: 0000000020013000 R11: 0000000000000000 R12: 000000000000000a [ 1507.028336][ C1] R13: 0000000000000000 R14: 0000000020013000 R15: 000000001fffefff [ 1507.036326][ C1] ? mtree_range_walk+0x545/0xbe0 [ 1507.041380][ C1] ? mtree_range_walk+0x545/0xbe0 [ 1507.046425][ C1] mt_find+0x5af/0xa20 [ 1507.050518][ C1] ? __pfx_mt_find+0x10/0x10 [ 1507.055131][ C1] ? find_held_lock+0x2d/0x110 [ 1507.059924][ C1] ? count_memcg_event_mm.part.0+0x12c/0x340 [ 1507.065928][ C1] find_vma+0xc0/0x140 [ 1507.070016][ C1] ? __pfx_find_vma+0x10/0x10 [ 1507.074714][ C1] ? __pfx___up_read+0x10/0x10 [ 1507.079500][ C1] lock_mm_and_find_vma+0x62/0x6a0 [ 1507.084631][ C1] do_user_addr_fault+0x2b5/0x13f0 [ 1507.089769][ C1] exc_page_fault+0x5c/0xc0 [ 1507.094297][ C1] asm_exc_page_fault+0x26/0x30 [ 1507.099168][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1507.105003][ C1] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1507.124633][ C1] RSP: 0018:ffffc900034bfb40 EFLAGS: 00050246 [ 1507.130724][ C1] RAX: 0000000000000001 RBX: 0000000000000040 RCX: 0000000000000040 [ 1507.138707][ C1] RDX: fffff52000697f81 RSI: ffffc900034bfbc8 RDI: 0000000020013000 [ 1507.146696][ C1] RBP: 0000000020013000 R08: 0000000000000000 R09: fffff52000697f80 [ 1507.154686][ C1] R10: ffffc900034bfc07 R11: 0000000000000000 R12: ffffc900034bfbc8 [ 1507.162670][ C1] R13: 0000000020013040 R14: 0000000000000000 R15: 0000000000011580 [ 1507.170659][ C1] _copy_to_user+0xac/0xc0 [ 1507.175101][ C1] rng_dev_read+0x25d/0x720 [ 1507.179627][ C1] ? __pfx_virtio_read+0x10/0x10 [ 1507.184586][ C1] ? __pfx_rng_dev_read+0x10/0x10 [ 1507.189631][ C1] ? avc_policy_seqno+0x9/0x20 [ 1507.194422][ C1] ? security_file_permission+0x98/0xc0 [ 1507.199989][ C1] ? __pfx_rng_dev_read+0x10/0x10 [ 1507.205042][ C1] vfs_readv+0x6cb/0x8a0 [ 1507.209309][ C1] ? futex_wait+0x121/0x380 [ 1507.213831][ C1] ? __pfx_vfs_readv+0x10/0x10 [ 1507.218614][ C1] ? find_held_lock+0x2d/0x110 [ 1507.223404][ C1] ? __pfx_lock_release+0x10/0x10 [ 1507.228459][ C1] ? __x64_sys_preadv+0x22b/0x310 [ 1507.233505][ C1] __x64_sys_preadv+0x22b/0x310 [ 1507.238369][ C1] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1507.243763][ C1] do_syscall_64+0xcd/0x250 [ 1507.248297][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.254209][ C1] RIP: 0033:0x7f714b377299 [ 1507.258633][ C1] RSP: 002b:00007f714c133048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1507.267083][ C1] RAX: ffffffffffffffda RBX: 00007f714b505f80 RCX: 00007f714b377299 [ 1507.275076][ C1] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000008 [ 1507.283068][ C1] RBP: 00007f714b3e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1507.291058][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.299046][ C1] R13: 000000000000000b R14: 00007f714b505f80 R15: 00007ffd3fb2bf98 [ 1507.307039][ C1] [ 1507.310068][ C1] task:syz.4.2215 state:R running task stack:24320 pid:11696 tgid:11683 ppid:6359 flags:0x00004006 [ 1507.321826][ C1] Call Trace: [ 1507.325116][ C1] [ 1507.328061][ C1] __schedule+0xe37/0x5490 [ 1507.332509][ C1] ? __pfx___schedule+0x10/0x10 [ 1507.337380][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1507.342863][ C1] ? mark_held_locks+0x9f/0xe0 [ 1507.347651][ C1] preempt_schedule_irq+0x51/0x90 [ 1507.352707][ C1] irqentry_exit+0x36/0x90 [ 1507.357150][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1507.363154][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x60 [ 1507.369275][ C1] Code: c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 64 48 79 7e <65> 8b 05 65 48 79 7e a9 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 [ 1507.388985][ C1] RSP: 0018:ffffc90003c774e8 EFLAGS: 00000202 [ 1507.395074][ C1] RAX: ffffffff81cf49c1 RBX: ffff88807c54d580 RCX: ffffffff81cf49d7 [ 1507.403059][ C1] RDX: ffff888026181e00 RSI: 0000000000000000 RDI: 0000000000000005 [ 1507.411040][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1507.419029][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000017 [ 1507.427008][ C1] R13: ffffc90003c775f8 R14: 0000000000000000 R15: ffff88807c54d580 [ 1507.434997][ C1] ? count_memcg_event_mm.part.0+0x31/0x340 [ 1507.440920][ C1] ? count_memcg_event_mm.part.0+0x47/0x340 [ 1507.446838][ C1] ? count_memcg_event_mm.part.0+0x47/0x340 [ 1507.452753][ C1] count_memcg_event_mm.part.0+0x13f/0x340 [ 1507.458597][ C1] handle_mm_fault+0x1b5/0x7b0 [ 1507.463399][ C1] ? __pkru_allows_pkey+0x52/0xb0 [ 1507.468452][ C1] do_user_addr_fault+0x7a3/0x13f0 [ 1507.473595][ C1] exc_page_fault+0x5c/0xc0 [ 1507.478126][ C1] asm_exc_page_fault+0x26/0x30 [ 1507.482994][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1507.488831][ C1] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1507.508454][ C1] RSP: 0018:ffffc90003c776a0 EFLAGS: 00050206 [ 1507.514543][ C1] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 1507.522526][ C1] RDX: 0000000000000000 RSI: ffff888060897000 RDI: 00000000201ff000 [ 1507.530511][ C1] RBP: 00000000201ff000 R08: 0000000000000000 R09: ffffed100c112fff [ 1507.538491][ C1] R10: ffff888060897fff R11: 0000000000000000 R12: ffffc90003c77b38 [ 1507.546474][ C1] R13: 0000000020200000 R14: ffff888060897000 R15: 0000000000000000 [ 1507.554471][ C1] _copy_to_iter+0x37e/0x1150 [ 1507.559179][ C1] ? __pfx__copy_to_iter+0x10/0x10 [ 1507.564310][ C1] ? const_folio_flags+0x71/0x1f0 [ 1507.569353][ C1] ? folio_flags.constprop.0+0x56/0x150 [ 1507.574918][ C1] ? folio_mark_accessed+0x1ff/0xb20 [ 1507.580224][ C1] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1507.585877][ C1] copy_page_to_iter+0xf1/0x180 [ 1507.590751][ C1] filemap_read+0x69f/0xd10 [ 1507.595285][ C1] ? __pfx_filemap_read+0x10/0x10 [ 1507.600332][ C1] ? mark_lock+0xb5/0xc60 [ 1507.604683][ C1] blkdev_read_iter+0x18d/0x490 [ 1507.609553][ C1] aio_read+0x31c/0x4e0 [ 1507.613745][ C1] ? __pfx_aio_read+0x10/0x10 [ 1507.618455][ C1] ? find_held_lock+0x2d/0x110 [ 1507.623268][ C1] ? __pfx___might_resched+0x10/0x10 [ 1507.628584][ C1] ? io_submit_one+0x1487/0x1df0 [ 1507.633544][ C1] io_submit_one+0x1487/0x1df0 [ 1507.638334][ C1] ? __pfx_io_submit_one+0x10/0x10 [ 1507.643473][ C1] ? __might_fault+0x13b/0x190 [ 1507.648257][ C1] ? __pfx_lock_release+0x10/0x10 [ 1507.653307][ C1] ? __might_fault+0xe3/0x190 [ 1507.658004][ C1] ? __x64_sys_io_submit+0x19d/0x330 [ 1507.663313][ C1] __x64_sys_io_submit+0x19d/0x330 [ 1507.668449][ C1] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1507.674102][ C1] ? xfd_validate_state+0x5d/0x180 [ 1507.679247][ C1] do_syscall_64+0xcd/0x250 [ 1507.683776][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.689690][ C1] RIP: 0033:0x7f183c177299 [ 1507.694115][ C1] RSP: 002b:00007f183ce73048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1507.702546][ C1] RAX: ffffffffffffffda RBX: 00007f183c306058 RCX: 00007f183c177299 [ 1507.710528][ C1] RDX: 00000000200000c0 RSI: 00000000000000ca RDI: 00007f183ce52000 [ 1507.718510][ C1] RBP: 00007f183c1e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 1507.726492][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.733690][T18855] usb 2-1: can't set config #27, error -110 [ 1507.734458][ C1] R13: 000000000000006e R14: 00007f183c306058 R15: 00007fff72b49be8 [ 1507.748335][ C1] [ 1507.751347][ C1] rcu: rcu_preempt kthread starved for 10613 jiffies! g148253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1507.762629][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1507.772578][ C1] rcu: RCU grace-period kthread stack dump: [ 1507.778442][ C1] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1507.790165][ C1] Call Trace: [ 1507.793447][ C1] [ 1507.796367][ C1] __schedule+0xe37/0x5490 [ 1507.800775][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1507.805969][ C1] ? __pfx___schedule+0x10/0x10 [ 1507.810813][ C1] ? schedule+0x298/0x350 [ 1507.815128][ C1] ? __pfx_lock_release+0x10/0x10 [ 1507.820137][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1507.825062][ C1] ? lock_acquire+0x1b1/0x560 [ 1507.829723][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 1507.835166][ C1] schedule+0xe7/0x350 [ 1507.839219][ C1] schedule_timeout+0x136/0x2a0 [ 1507.844065][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1507.849424][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1507.854695][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1507.860492][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 1507.865937][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1507.870689][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1507.875957][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1507.880616][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1507.885803][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1507.891596][ C1] rcu_gp_kthread+0x271/0x380 [ 1507.896257][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1507.901439][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1507.906627][ C1] ? __kthread_parkme+0x148/0x220 [ 1507.911640][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1507.916820][ C1] kthread+0x2c1/0x3a0 [ 1507.920871][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.926056][ C1] ? __pfx_kthread+0x10/0x10 [ 1507.930627][ C1] ret_from_fork+0x45/0x80 [ 1507.935034][ C1] ? __pfx_kthread+0x10/0x10 [ 1507.939606][ C1] ret_from_fork_asm+0x1a/0x30 [ 1507.944362][ C1] [ 1507.947365][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1507.953685][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 1507.963653][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1507.973692][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1507.978964][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 48 69 f2 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d b8 82 aa 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1507.998729][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 1508.004782][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b115519 [ 1508.012737][ C1] RDX: 0000000000000001 RSI: ffff888019edc800 RDI: ffff888019edc864 [ 1508.020693][ C1] RBP: ffff888019edc864 R08: 0000000000000001 R09: ffffed1017266fe1 [ 1508.028645][ C1] R10: ffff8880b9337f0b R11: 0000000000000000 R12: ffff888019bbd800 [ 1508.036615][ C1] R13: ffffffff8e94eac0 R14: 0000000000000001 R15: 0000000000000000 [ 1508.044571][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1508.053486][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1508.060063][ C1] CR2: 0000000000000000 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 1508.068039][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1508.076007][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1508.083962][ C1] Call Trace: [ 1508.087226][ C1] [ 1508.090058][ C1] ? show_regs+0x8c/0xa0 [ 1508.094293][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1508.100603][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1508.105791][ C1] ? rcu_sched_clock_irq+0x2501/0x33f0 [ 1508.111237][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1508.116854][ C1] ? __asan_memcpy+0x3c/0x60 [ 1508.121429][ C1] ? __asan_memcpy+0x3c/0x60 [ 1508.126004][ C1] ? update_process_times+0x175/0x220 [ 1508.131362][ C1] ? __pfx_update_process_times+0x10/0x10 [ 1508.137067][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1508.142518][ C1] ? update_wall_time+0x1c/0x40 [ 1508.147356][ C1] ? tick_nohz_handler+0x376/0x530 [ 1508.152451][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1508.157898][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 1508.163274][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1508.169006][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 1508.175060][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 1508.180161][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 1508.186298][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 1508.192096][ C1] [ 1508.195012][ C1] [ 1508.197928][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1508.204072][ C1] ? ct_kernel_exit+0x139/0x190 [ 1508.208914][ C1] ? acpi_safe_halt+0x1a/0x20 [ 1508.213584][ C1] acpi_idle_enter+0xc5/0x160 [ 1508.218244][ C1] cpuidle_enter_state+0x85/0x500 [ 1508.223252][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1508.229047][ C1] cpuidle_enter+0x4e/0xa0 [ 1508.233446][ C1] do_idle+0x313/0x3f0 [ 1508.237500][ C1] ? __pfx_do_idle+0x10/0x10 [ 1508.242076][ C1] cpu_startup_entry+0x4f/0x60 [ 1508.246827][ C1] start_secondary+0x220/0x2b0 [ 1508.251581][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1508.256853][ C1] common_startup_64+0x13e/0x148 [ 1508.261782][ C1] [ 1508.269552][T19612] Bluetooth: hci4: command tx timeout [ 1508.286111][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1508.293158][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1508.332476][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1508.338837][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1509.419587][T18855] usb 2-1: USB disconnect, device number 125 [ 1509.701792][T19611] team0: Port device team_slave_0 added [ 1510.019530][ T5307] usb 1-1: USB disconnect, device number 119 SYZFAIL: failed to send rpc fd=3 want=93408 sent=0 n=-1 (errno 32: Broken pipe) [ 1510.331465][T19731] Bluetooth: hci6: command 0x0406 tx timeout [ 1510.383492][T19611] team0: Port device team_slave_1 added [ 1511.269445][ T2470] hsr_slave_0: left promiscuous mode [ 1511.459571][ T2470] hsr_slave_1: left promiscuous mode [ 1511.579701][ T2470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.587198][ T2470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.641801][ T2470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1511.669457][ T2470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.859493][ T2470] veth1_macvtap: left promiscuous mode [ 1511.865082][ T2470] veth0_macvtap: left promiscuous mode [ 1511.929659][ T2470] veth1_vlan: left promiscuous mode [ 1511.949569][ T2470] veth0_vlan: left promiscuous mode [ 1514.281253][ T2470] team0 (unregistering): Port device team_slave_1 removed [ 1514.514758][ T2470] team0 (unregistering): Port device team_slave_0 removed