last executing test programs: 13.571251809s ago: executing program 1 (id=1765): socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) fsmount(r0, 0x0, 0x7e) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b0001000310030904580801196621940905"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$nbd(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_open_procfs(0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40000000a) 13.511132952s ago: executing program 3 (id=1766): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="f78dffffffffffffff79ff5c55c32d6d", 0x10}], 0x1, &(0x7f0000000380)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) 12.397710489s ago: executing program 1 (id=1769): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x4) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000880)="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", &(0x7f0000000240)=@tcp6}, 0xffffffffffffffd6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x0, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x942, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') 11.019811379s ago: executing program 3 (id=1772): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000016c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x4000, &(0x7f00000006c0)="02"}) 8.922434236s ago: executing program 4 (id=1775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r1 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="120100030000001e0000000000007c6d03010902240001010882070900000a0107010302090501024000e105ee827301c000f2a7d7a781642600dafcdf29ca160087b4d69ec09e2a8f82251acac183d973eb49bdd478f6b2059113f7572c65a3f65bff818804a29f49ec31d77764a3bd310e1d968717890c46ccc09e9e1c8a8a3a27070f6fefa1e3b54ff0ae5c659b61a3186a68ecc107ac048282702eb329c321a92f2ac114494f"], &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0xf, 0xe, 0xa, 0x20, 0x5}, 0x32, &(0x7f00000003c0)={0x5, 0xf, 0x32, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x94, 0x4, 0x6, 0xf00, 0x7, [0x3f00, 0x0, 0xfffff0, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x0, 0x9, 0xda6d, 0x9}, @ptm_cap={0x3}]}}) syz_usb_control_io$printer(r1, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x22, 0x33, {0x33, 0x2, "61efafd8d3ff5cf7e372c8d454d5b887c6d57633e25c73648e4c96f246264f36dcc81364eb7fda52750ae421048b8778ef"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c2d}}}, &(0x7f0000000bc0)={0x34, &(0x7f00000008c0)={0x40, 0x0, 0xcc, "a2f72453dda4f9e7a11ce0033edbe9a7d88183589191d8f913e92a4b42af6e8a960dcd6406af55fd2ca1f9f873dba71a59500239d670f35967870915b195ef08b2784f4ca1d99909fa21246f923b26a560973898e883874442bdaec8e5888d98d31e2e02cd00a399e30c9391ea0a5920e2103e559c81511c0d4d9a993868f69e8f9a09b6934a80c8c4ff4b6625d8a81d55244bc463a4bf5f30aeb31f3e0b304c5f0f2fbe7ca301e02704442fafb96e6936e53a60f5db284d58ab1b5d3cb8e715389bddf6698657f760bee40c"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ac0)={0x20, 0x0, 0x58, {0x56, "c4d1f0432d5ce46c2af10b8ce51d536040d589663e6ac0a5a294a547333a40d68e4ea013ba4f9a768ab7e80372dd6c872cf178191e816a52474e9a3e26f57bf2d7ad3a95dc456aec5b88f4c4f1b1ba82276aeebde157"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0x4}, 0x0}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) kcmp(0xffffffffffffffff, r3, 0x6, r4, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) r7 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000180)={0x7, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f0000000040)=0x3) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000080)={0x8, 0x1, 0x3, 0x3, 0x4}) 8.85303587s ago: executing program 1 (id=1776): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=r1]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000540)={0x3, 0x2, @stop_pts=0x1}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 8.588489033s ago: executing program 3 (id=1778): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x1e00, 0x5e, '\x00', r4, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.427816821s ago: executing program 0 (id=1779): socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=""/19, 0x13}, 0x4}], 0x1, 0x4000002b, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 8.170633594s ago: executing program 4 (id=1780): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x2, @local, 0x81}}, 0x6, 0xe, 0x9, 0x8, 0x20, 0x6, 0x81}, 0x9c) connect$unix(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180), &(0x7f0000000200)=[0x0], &(0x7f0000000240), &(0x7f00000002c0)=[0x0], 0x0, 0x1, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000140)={r8}) close(r2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x80503d0a, &(0x7f0000000200)={{0xa4}, {0x0, 0x80000001}, 0x1322, 0x1}) ioctl$TCXONC(r0, 0x540a, 0x2) 6.966823075s ago: executing program 2 (id=1782): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.783570174s ago: executing program 3 (id=1783): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000111401000000000000000000050003000000007676571a7f058b"], 0x20}}, 0x801) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 5.927602298s ago: executing program 2 (id=1784): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 5.742113508s ago: executing program 0 (id=1785): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x149801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8005) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 5.594916725s ago: executing program 2 (id=1786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xffffffffffffffff, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xffeffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.570332966s ago: executing program 4 (id=1787): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0xfffff001, @empty, 0x8}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x10, @rand_addr=' \x01\x00', 0x1}, @in6={0xa, 0x4e24, 0x2, @empty, 0x1000}, @in={0x2, 0x4e24, @multicast1}], 0x94) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x4, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x4d, 0x24040814) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000789000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000280)=0x1, 0x56, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.604406795s ago: executing program 2 (id=1788): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000016c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x4000, &(0x7f00000006c0)="02"}) 4.561034728s ago: executing program 0 (id=1789): socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x64000600) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.033942584s ago: executing program 1 (id=1790): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r1 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="120100030000001e0000000000007c6d03010902240001010882070900000a0107010302090501024000e105ee827301c000f2a7d7a781642600dafcdf29ca160087b4d69ec09e2a8f82251acac183d973eb49bdd478f6b2059113f7572c65a3f65bff818804a29f49ec31d77764a3bd310e1d968717890c46ccc09e9e1c8a8a3a27070f6fefa1e3b54ff0ae5c659b61a3186a68ecc107ac048282702eb329c321a92f2ac114494f"], &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0xf, 0xe, 0xa, 0x20, 0x5}, 0x32, &(0x7f00000003c0)={0x5, 0xf, 0x32, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x94, 0x4, 0x6, 0xf00, 0x7, [0x3f00, 0x0, 0xfffff0, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x0, 0x9, 0xda6d, 0x9}, @ptm_cap={0x3}]}}) syz_usb_control_io$printer(r1, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x22, 0x33, {0x33, 0x2, "61efafd8d3ff5cf7e372c8d454d5b887c6d57633e25c73648e4c96f246264f36dcc81364eb7fda52750ae421048b8778ef"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c2d}}}, &(0x7f0000000bc0)={0x34, &(0x7f00000008c0)={0x40, 0x0, 0xcc, "a2f72453dda4f9e7a11ce0033edbe9a7d88183589191d8f913e92a4b42af6e8a960dcd6406af55fd2ca1f9f873dba71a59500239d670f35967870915b195ef08b2784f4ca1d99909fa21246f923b26a560973898e883874442bdaec8e5888d98d31e2e02cd00a399e30c9391ea0a5920e2103e559c81511c0d4d9a993868f69e8f9a09b6934a80c8c4ff4b6625d8a81d55244bc463a4bf5f30aeb31f3e0b304c5f0f2fbe7ca301e02704442fafb96e6936e53a60f5db284d58ab1b5d3cb8e715389bddf6698657f760bee40c"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ac0)={0x20, 0x0, 0x58, {0x56, "c4d1f0432d5ce46c2af10b8ce51d536040d589663e6ac0a5a294a547333a40d68e4ea013ba4f9a768ab7e80372dd6c872cf178191e816a52474e9a3e26f57bf2d7ad3a95dc456aec5b88f4c4f1b1ba82276aeebde157"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0x4}, 0x0}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) kcmp(0xffffffffffffffff, r3, 0x6, r4, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) r7 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000180)={0x7, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f0000000040)=0x3) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000080)={0x8, 0x1, 0x3, 0x3, 0x4}) 3.855231653s ago: executing program 4 (id=1791): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 2.804439077s ago: executing program 4 (id=1792): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x20040840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010700"], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x13, &(0x7f00000000c0)=0x408, 0x4) r8 = dup(r7) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 2.667760004s ago: executing program 0 (id=1793): utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000009, 0x4082172, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 1.700417013s ago: executing program 0 (id=1794): socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) fsmount(r0, 0x0, 0x7e) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b0001000310030904580801196621940905"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$nbd(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_open_procfs(0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40000000a) 744.371672ms ago: executing program 3 (id=1795): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 577.12611ms ago: executing program 1 (id=1796): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 566.74937ms ago: executing program 0 (id=1797): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x2, @local, 0x81}}, 0x6, 0xe, 0x9, 0x8, 0x20, 0x6, 0x81}, 0x9c) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x2, 0x4934, 0x7, 0xc, 0x15, "7987cf309c1367bde8518d27e17302992cbd2e"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180), &(0x7f0000000200)=[0x0], &(0x7f0000000240), &(0x7f00000002c0)=[0x0], 0x0, 0x1, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000140)={r8}) close(r2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x80503d0a, &(0x7f0000000200)={{0xa4}, {0x0, 0x80000001}, 0x1322, 0x1}) ioctl$TCXONC(r0, 0x540a, 0x2) 336.767873ms ago: executing program 2 (id=1798): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) 244.215267ms ago: executing program 1 (id=1799): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 148.849332ms ago: executing program 3 (id=1800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 293.46µs ago: executing program 4 (id=1801): set_mempolicy(0x4005, 0x0, 0x8) socket(0x10, 0x80002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20084850}, 0x0) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000100)=0x1, 0x8c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000280)) 0s ago: executing program 2 (id=1802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x28002, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x70bd23, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x6, 0xb}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x4, 0x6, 0x7356, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): ower cycle [ 117.519159][ T4316] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 117.577095][ T4316] usb 1-1: device descriptor read/8, error -71 [ 117.772842][ T5319] device syzkaller0 entered promiscuous mode [ 117.845810][ T4316] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 117.886655][ T4316] usb 1-1: device descriptor read/8, error -71 [ 118.006981][ T4316] usb usb1-port1: unable to enumerate USB device [ 118.124558][ T5326] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 118.314193][ T5328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.325082][ T5328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.732997][ T5351] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 120.074800][ T4316] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.145029][ T5358] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 120.274569][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 120.292916][ T4316] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.340542][ T4316] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.380854][ T4316] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.419346][ T4316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.434493][ T4316] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 120.461419][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.483609][ T4316] usb 5-1: config 0 descriptor?? [ 120.784158][ T5371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.826420][ T5371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.946427][ T4316] usbhid 5-1:0.0: can't add hid device: -71 [ 120.952484][ T4316] usbhid: probe of 5-1:0.0 failed with error -71 [ 120.994412][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 121.003174][ T4316] usb 5-1: USB disconnect, device number 10 [ 121.260869][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.291680][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.320485][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.349262][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.398191][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.431403][ T7] usb 4-1: config 0 descriptor?? [ 121.603234][ T3598] usb 3-1: USB disconnect, device number 10 [ 121.687129][ T3598] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 121.743918][ T4316] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 121.855852][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 121.861810][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 121.898478][ T7] usb 4-1: USB disconnect, device number 14 [ 121.943792][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 121.955079][ T4316] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 121.966565][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.974994][ T4316] usb 5-1: Product: syz [ 121.980748][ T4316] usb 5-1: Manufacturer: syz [ 121.986978][ T4316] usb 5-1: SerialNumber: syz [ 121.999343][ T4316] usb 5-1: config 0 descriptor?? [ 122.269627][ T5394] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 122.557274][ T4316] usb-storage 5-1:0.0: USB Mass Storage device detected [ 122.583619][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 122.623066][ T4316] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 122.663510][ T4316] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 122.663510][ T4316] Please send a copy of this message to and [ 122.688724][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.764870][ T4316] usb 5-1: USB disconnect, device number 11 [ 122.797197][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.816453][ T7] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 122.867519][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.890140][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.965439][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.975244][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.002326][ T7] usb 3-1: Product: syz [ 123.007679][ T7] usb 3-1: Manufacturer: syz [ 123.060513][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 123.069107][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 123.080666][ T7] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 123.259636][ T4315] usb 3-1: USB disconnect, device number 11 [ 123.522965][ T4316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 123.714563][ T4316] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.756170][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.793667][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.824440][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.872303][ T4316] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.897910][ T4316] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.913673][ T4316] usb 1-1: Manufacturer: syz [ 123.940511][ T4316] usb 1-1: config 0 descriptor?? [ 123.958645][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 124.301956][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.375899][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.024341][ T5504] netlink: 68 bytes leftover after parsing attributes in process `syz.3.327'. [ 127.026318][ T5500] fuse: Bad value for 'fd' [ 127.226370][ T5505] kvm [5498]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80 [ 127.244627][ T5505] kvm [5498]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x81 [ 127.303452][ T5505] kvm [5498]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 127.331100][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 127.393800][ T5505] kvm [5498]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 127.525990][ T7] usb 4-1: config index 0 descriptor too short (expected 1426, got 146) [ 127.543436][ T7] usb 4-1: config 113 has an invalid descriptor of length 0, skipping remainder of the config [ 127.606072][ T7] usb 4-1: config 113 has 0 interfaces, different from the descriptor's value: 4 [ 127.639507][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.669788][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.697802][ T7] usb 4-1: SerialNumber: syz [ 127.960704][ T4315] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 128.120726][ T4315] usb 5-1: device descriptor read/64, error -71 [ 128.404076][ T4315] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 128.451588][ T5539] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.460352][ T5538] netlink: 'syz.1.336': attribute type 4 has an invalid length. [ 128.501712][ T7] usb 4-1: USB disconnect, device number 15 [ 128.560510][ T4315] usb 5-1: device descriptor read/64, error -71 [ 128.690543][ T4315] usb usb5-port1: attempt power cycle [ 128.829390][ T5544] Set syz1 is full, maxelem 6117 reached [ 129.100354][ T4315] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 129.150817][ T4315] usb 5-1: device descriptor read/8, error -71 [ 129.419971][ T4315] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 129.460586][ T4315] usb 5-1: device descriptor read/8, error -71 [ 129.510189][ T4316] usbhid 1-1:0.0: can't add hid device: -110 [ 129.516520][ T4316] usbhid: probe of 1-1:0.0 failed with error -110 [ 129.590215][ T4315] usb usb5-port1: unable to enumerate USB device [ 130.074327][ T5570] kvm [5568]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 130.094876][ T5570] kvm [5568]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 130.139850][ T4314] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 130.185450][ T5570] kvm [5568]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 130.216477][ T5570] kvm [5568]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 130.251107][ T5570] kvm [5568]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 130.290791][ T5570] kvm [5568]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x1 [ 130.321952][ T5570] kvm [5568]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 130.343218][ T4314] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 130.377829][ T4314] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 130.402458][ T4314] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 130.407205][ T5574] binder: BINDER_SET_CONTEXT_MGR already set [ 130.426497][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.439108][ T4314] usb 3-1: Product: syz [ 130.443959][ T5574] binder: 5573:5574 ioctl 4018620d 200000000040 returned -16 [ 130.463695][ T4314] usb 3-1: Manufacturer: syz [ 130.468287][ T4314] usb 3-1: SerialNumber: syz [ 130.831486][ T5581] netlink: 'syz.0.349': attribute type 4 has an invalid length. [ 131.189204][ T4315] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 131.379062][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 131.394722][ T4315] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 131.436760][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.453228][ T4315] usb 5-1: config 0 descriptor?? [ 131.478748][ T4315] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 131.560437][ T5595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.594879][ T5595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.178800][ T4315] gspca_vc032x: reg_w err -110 [ 132.183749][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.209888][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.237068][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.266269][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.292510][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.327083][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.354928][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.393747][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.423551][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.457634][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.498135][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.525158][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.556384][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.582854][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.614461][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.630715][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.639269][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.654248][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.661937][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.667338][ T4315] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.678320][ T4315] gspca_vc032x: Unknown sensor... [ 132.683652][ T4315] vc032x: probe of 5-1:0.0 failed with error -22 [ 132.933979][ T4314] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 132.988434][ T4314] usb 3-1: unit 6 not found! [ 133.016675][ T3598] usb 5-1: USB disconnect, device number 16 [ 133.123741][ T4314] usb 3-1: USB disconnect, device number 12 [ 133.692410][ T5624] netlink: 'syz.3.362': attribute type 4 has an invalid length. [ 133.767958][ T3598] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 133.937870][ T3598] usb 5-1: device descriptor read/64, error -71 [ 134.207611][ T3598] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 134.387600][ T3598] usb 5-1: device descriptor read/64, error -71 [ 134.547854][ T3598] usb usb5-port1: attempt power cycle [ 134.958635][ T3598] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 135.028159][ T3598] usb 5-1: device descriptor read/8, error -71 [ 135.337738][ T3598] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 135.380980][ T3598] usb 5-1: device descriptor read/8, error -71 [ 135.507167][ T3598] usb usb5-port1: unable to enumerate USB device [ 135.678591][ T5655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 135.995083][ T5662] netlink: 'syz.3.373': attribute type 4 has an invalid length. [ 136.781308][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.809991][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.683795][ T5697] IPVS: stopping backup sync thread 5698 ... [ 137.684105][ T5698] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 138.985383][ T126] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 139.175074][ T126] usb 4-1: device descriptor read/64, error -71 [ 139.474953][ T126] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 139.644915][ T126] usb 4-1: device descriptor read/64, error -71 [ 139.804931][ T126] usb usb4-port1: attempt power cycle [ 140.108412][ T5722] device syzkaller0 entered promiscuous mode [ 140.234600][ T126] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 140.275970][ T126] usb 4-1: device descriptor read/8, error -71 [ 140.574641][ T126] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 140.635102][ T126] usb 4-1: device descriptor read/8, error -71 [ 140.755525][ T126] usb usb4-port1: unable to enumerate USB device [ 140.802848][ T5730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.827601][ T5730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.808685][ T5753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.397'. [ 142.253839][ T126] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 142.459213][ T126] usb 4-1: config index 0 descriptor too short (expected 1426, got 146) [ 142.473324][ T126] usb 4-1: config 113 has an invalid descriptor of length 0, skipping remainder of the config [ 142.498283][ T126] usb 4-1: config 113 has 0 interfaces, different from the descriptor's value: 4 [ 142.527809][ T126] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.543447][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.552255][ T126] usb 4-1: SerialNumber: syz [ 142.662438][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.726992][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.764019][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.826155][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.859575][ T5774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 143.177995][ T5778] tipc: Started in network mode [ 143.216162][ T126] usb 4-1: USB disconnect, device number 20 [ 143.223356][ T5778] tipc: Node identity f25e4672cc82, cluster identity 4711 [ 143.255162][ T5778] tipc: Enabled bearer , priority 0 [ 143.384642][ T5777] tipc: Disabling bearer [ 144.023835][ T5789] device syzkaller0 entered promiscuous mode [ 144.758165][ T5805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.787608][ T5805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.242065][ T126] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 145.442142][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 145.461695][ T126] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 145.499398][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.518282][ T126] usb 3-1: config 0 has no interface number 0 [ 145.535254][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 145.544865][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.553014][ T126] usb 3-1: Product: syz [ 145.557395][ T126] usb 3-1: Manufacturer: syz [ 145.563943][ T126] usb 3-1: SerialNumber: syz [ 145.581787][ T126] usb 3-1: config 0 descriptor?? [ 145.613080][ T126] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 145.620202][ T126] usb 3-1: No valid video chain found. [ 145.817713][ T5809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'. [ 145.831471][ T126] usb 3-1: USB disconnect, device number 13 [ 146.958768][ T5836] kvm: pic: non byte write [ 147.401173][ T41] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 147.550994][ T126] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 147.602443][ T41] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.624815][ T41] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.641363][ T41] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.657427][ T41] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 147.667398][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 147.675907][ T41] usb 4-1: Product: syz [ 147.680389][ T41] usb 4-1: Manufacturer: syz [ 147.685405][ T41] usb 4-1: SerialNumber: syz [ 147.752133][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 147.765338][ T126] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 147.786278][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.824768][ T126] usb 5-1: config 0 has no interface number 0 [ 147.865794][ T126] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 147.898696][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.924527][ T41] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 147.962164][ T126] usb 5-1: Product: syz [ 147.979454][ T126] usb 5-1: Manufacturer: syz [ 148.000175][ T126] usb 5-1: SerialNumber: syz [ 148.019002][ T126] usb 5-1: config 0 descriptor?? [ 148.022388][ T5864] device syzkaller0 entered promiscuous mode [ 148.041361][ T126] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 148.056105][ T126] usb 5-1: No valid video chain found. [ 148.245761][ T5851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.432'. [ 148.286142][ T126] usb 5-1: USB disconnect, device number 21 [ 148.713939][ T126] usb 4-1: USB disconnect, device number 21 [ 148.748709][ T126] usblp0: removed [ 149.534780][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.549955][ T126] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 149.559423][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.766495][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.780938][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.798116][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.820001][ T126] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.834742][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.862199][ T126] usb 4-1: config 0 descriptor?? [ 150.494152][ T126] usbhid 4-1:0.0: can't add hid device: -71 [ 150.503836][ T126] usbhid: probe of 4-1:0.0 failed with error -71 [ 150.516057][ T126] usb 4-1: USB disconnect, device number 22 [ 151.944134][ C1] sd 0:0:1:0: [sda] tag#4639 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 151.954661][ C1] sd 0:0:1:0: [sda] tag#4639 CDB: Write(6) 0a 00 0e 22 00 00 00 00 fc 02 00 00 [ 151.980946][ T5917] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 152.448661][ T4314] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 152.651728][ T4314] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.665133][ T4314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.715704][ T4314] usb 5-1: config 0 has no interface number 0 [ 152.739865][ T4314] usb 5-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.817488][ T4314] usb 5-1: config 0 interface 1 has no altsetting 0 [ 152.827515][ T4314] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 152.842382][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.873313][ T4314] usb 5-1: config 0 descriptor?? [ 152.886201][ T4314] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 153.021455][ T7] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 153.094800][ T5924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.109650][ T5924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.137182][ T4314] usb 5-1: USB disconnect, device number 22 [ 153.221994][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.246517][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.270188][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.289173][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.301666][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.337186][ T7] usb 4-1: config 0 descriptor?? [ 153.729801][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.758160][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.770596][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.782056][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.796512][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.804306][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.807892][ T4316] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.811995][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.837274][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.859118][ T7] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 153.883793][ T7] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 153.933587][ T5953] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.038023][ T4316] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 154.052094][ T126] usb 4-1: USB disconnect, device number 23 [ 154.077891][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.102481][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.125859][ T5955] fido_id[5955]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 154.137565][ T4316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.182785][ T4316] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 154.199418][ T4316] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 154.211336][ T4316] usb 3-1: Manufacturer: syz [ 154.224228][ T4316] usb 3-1: config 0 descriptor?? [ 154.395742][ T5953] sctp: [Deprecated]: syz.1.468 (pid 5953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.395742][ T5953] Use struct sctp_sack_info instead [ 154.417051][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.432918][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.210028][ T7] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 156.321561][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.360358][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.420985][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.443112][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.466778][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.499664][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.534890][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.561517][ T7] usb 4-1: config 0 descriptor?? [ 156.985397][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 157.009306][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 157.032730][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.043231][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 157.062011][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.073972][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 157.094981][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 157.112144][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 157.151483][ T7] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 157.199760][ T7] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 157.246119][ T41] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 157.314276][ T7] usb 4-1: USB disconnect, device number 24 [ 157.433196][ T6017] fido_id[6017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 158.166512][ T6030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.493'. [ 159.501367][ T6000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.515132][ T6000] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 159.530254][ T6000] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 159.538235][ T6000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.544213][ T6000] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 159.553296][ T6000] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 159.566745][ T6000] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.572993][ T6000] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 159.584324][ T6000] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 159.592666][ T6000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.599841][ T6000] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.607882][ T6000] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 159.619172][ T6000] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.627936][ T6000] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 159.643015][ T6000] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 159.654155][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.673233][ T4316] usbhid 3-1:0.0: can't add hid device: -32 [ 159.678055][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.688044][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.688374][ T4316] usbhid: probe of 3-1:0.0 failed with error -32 [ 159.705910][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.809109][ T41] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 159.829320][ T41] usb 5-1: can't read configurations, error -71 [ 159.894870][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.938983][ T7] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 160.145939][ T7] usb 4-1: config index 0 descriptor too short (expected 1426, got 146) [ 160.156502][ T7] usb 4-1: config 113 has an invalid descriptor of length 0, skipping remainder of the config [ 160.167020][ T7] usb 4-1: config 113 has 0 interfaces, different from the descriptor's value: 4 [ 160.179438][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.190617][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.201087][ T7] usb 4-1: SerialNumber: syz [ 160.504519][ T41] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 160.686058][ T41] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 160.752278][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.813099][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.893927][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 160.947930][ T7] usb 4-1: USB disconnect, device number 25 [ 160.962113][ T41] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 161.010231][ T41] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 161.028693][ T41] usb 5-1: Manufacturer: syz [ 161.060403][ T41] usb 5-1: config 0 descriptor?? [ 161.085369][ T6064] device syzkaller0 entered promiscuous mode [ 161.574301][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.580456][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.658401][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 161.665337][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.981552][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 163.652980][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 163.659069][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 163.732883][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 163.738934][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 163.987516][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.017090][ T14] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 164.031091][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.139400][ T6124] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 164.234617][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 164.253834][ T14] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 164.296787][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.327977][ T14] usb 4-1: Product: syz [ 164.340254][ T14] usb 4-1: Manufacturer: syz [ 164.360854][ T14] usb 4-1: SerialNumber: syz [ 164.392318][ T14] usb 4-1: config 0 descriptor?? [ 164.621263][ T14] usb-storage 4-1:0.0: USB Mass Storage device detected [ 164.661271][ T14] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 164.674931][ T14] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 164.674931][ T14] Please send a copy of this message to and [ 164.756425][ T14] usb 4-1: USB disconnect, device number 26 [ 166.299272][ T6149] device syzkaller0 entered promiscuous mode [ 166.532334][ T41] usbhid 5-1:0.0: can't add hid device: -32 [ 166.538446][ T41] usbhid: probe of 5-1:0.0 failed with error -32 [ 167.302069][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.312773][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.993954][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.016774][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.654203][ T6217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.672240][ T6217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.533328][ T6255] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.116450][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.159482][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.179989][ T6258] sctp: [Deprecated]: syz.2.553 (pid 6258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.179989][ T6258] Use struct sctp_sack_info instead [ 173.242832][ T6258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.553'. [ 174.545089][ T6309] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.869637][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.897428][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.080215][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.114943][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.392647][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.420166][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.975313][ T6345] kvm: pic: non byte write [ 175.986910][ T14] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 176.176803][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 176.190947][ T14] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 176.234990][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.311673][ T14] usb 4-1: config 0 has no interface number 0 [ 176.382163][ T14] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 176.411223][ T6355] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.422135][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.451904][ T14] usb 4-1: Product: syz [ 176.490542][ T14] usb 4-1: Manufacturer: syz [ 176.512227][ T14] usb 4-1: SerialNumber: syz [ 176.575590][ T14] usb 4-1: config 0 descriptor?? [ 176.617353][ T14] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 176.657662][ T14] usb 4-1: No valid video chain found. [ 176.806715][ T14] usb 4-1: USB disconnect, device number 27 [ 177.672791][ T6380] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 177.683126][ T6379] IPVS: stopping backup sync thread 6380 ... [ 178.059350][ T6385] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 178.072597][ T6384] IPVS: stopping backup sync thread 6385 ... [ 178.716156][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.842795][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.800630][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 179.845598][ T41] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.846819][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.878062][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.674165][ T6432] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 180.674764][ T6430] IPVS: stopping backup sync thread 6432 ... [ 180.774643][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 180.780738][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 180.792127][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 180.798891][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 180.798914][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 181.057598][ T6452] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 181.117812][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.602'. [ 181.831574][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.904049][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.973216][ T41] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 182.010628][ T41] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.263566][ T14] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 182.453657][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 182.464796][ T14] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 182.535350][ T14] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 182.555227][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.575487][ T14] usb 4-1: Product: syz [ 182.579683][ T14] usb 4-1: Manufacturer: syz [ 182.600693][ T14] usb 4-1: SerialNumber: syz [ 182.626860][ T14] usb 4-1: config 0 descriptor?? [ 182.668210][ T14] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 182.729892][ T14] usb 4-1: setting power ON [ 182.739971][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 182.777888][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.806758][ T14] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 182.826325][ T14] usb 4-1: media controller created [ 182.867994][ T6479] dvb-usb: bulk message failed: -22 (3/0) [ 182.889313][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.899499][ T6497] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 182.901009][ T6479] cxusb: i2c wr: len=79 is too big! [ 182.901009][ T6479] [ 182.930242][ T14] usb 4-1: selecting invalid altsetting 6 [ 182.940351][ T14] usb 4-1: digital interface selection failed (-22) [ 182.948150][ T14] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 182.961712][ T14] usb 4-1: setting power OFF [ 182.971663][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 182.978082][ T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 182.993043][ T14] (NULL device *): no alternate interface [ 183.021231][ T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 183.045787][ T14] usb 4-1: USB disconnect, device number 28 [ 183.703897][ T4314] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 183.716810][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.727740][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.754197][ T4314] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.241525][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 184.436463][ T6547] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 185.318838][ T6556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.334293][ T6556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.897218][ T4380] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 186.089047][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.097787][ T4380] usb 4-1: Using ep0 maxpacket: 32 [ 186.104842][ T4380] usb 4-1: config 0 has no interfaces? [ 186.128060][ T4380] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 186.147016][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.161762][ T4380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.179210][ T4380] usb 4-1: Product: syz [ 186.193120][ T4380] usb 4-1: Manufacturer: syz [ 186.216875][ T4380] usb 4-1: SerialNumber: syz [ 186.255539][ T4380] usb 4-1: config 0 descriptor?? [ 186.394776][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.443556][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.462667][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.537486][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.579220][ T4380] usb 4-1: USB disconnect, device number 29 [ 186.610552][ T6596] kvm: pic: non byte write [ 186.883445][ T6600] kvm_pr_unimpl_wrmsr: 2 callbacks suppressed [ 186.883456][ T6600] kvm [6599]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1000 [ 186.901973][ T6600] kvm [6599]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfffe00000000 [ 187.920372][ T6619] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 188.730665][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.760639][ T4380] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 188.796347][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.955488][ T4380] usb 4-1: config index 0 descriptor too short (expected 1426, got 146) [ 188.966870][ T4380] usb 4-1: config 113 has an invalid descriptor of length 0, skipping remainder of the config [ 188.984763][ T4380] usb 4-1: config 113 has 0 interfaces, different from the descriptor's value: 4 [ 188.998332][ T4380] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.012550][ T4380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.023701][ T4380] usb 4-1: SerialNumber: syz [ 189.490404][ T4380] usb 4-1: USB disconnect, device number 30 [ 189.905777][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.938033][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.429484][ T4314] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 190.458443][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.472263][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.501908][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.513279][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.639516][ T4314] usb 4-1: Using ep0 maxpacket: 32 [ 190.646382][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.725808][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.792090][ T4314] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 190.832563][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.884040][ T4314] usb 4-1: config 0 descriptor?? [ 191.166349][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.195632][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.256875][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.294441][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.307530][ T4314] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 191.332367][ T4314] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 191.354922][ T4314] ft260 0003:0403:6030.0006: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 191.388282][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.407788][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.671'. [ 191.457130][ T6702] kvm: pic: non byte write [ 191.505972][ T4314] ft260 0003:0403:6030.0006: failed to retrieve chip version [ 191.524853][ T4314] ft260: probe of 0003:0403:6030.0006 failed with error -32 [ 191.685993][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 191.802702][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.824513][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.491504][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.558732][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.455856][ T6728] Set syz1 is full, maxelem 6117 reached [ 193.654842][ T4380] usb 4-1: USB disconnect, device number 31 [ 193.717797][ T6733] trusted_key: encrypted_key: insufficient parameters specified [ 194.043613][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.049967][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.184390][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.214531][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.266541][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.308868][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.325305][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.042956][ T6759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.076090][ T6759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.084085][ T4314] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 195.288786][ T4314] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 195.304067][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.332755][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.349288][ T4314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.371224][ T4314] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.388577][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.404948][ T4314] usb 4-1: config 0 descriptor?? [ 195.554868][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.578861][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.691560][ T6767] trusted_key: encrypted_key: insufficient parameters specified [ 195.826486][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.834256][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.842101][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.851030][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.858643][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.866170][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.873950][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.882240][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.889890][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.897611][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.905004][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.912640][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.920866][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.936690][ T4314] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 195.946052][ T4314] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 195.973081][ T4314] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 196.175105][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.201292][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.441506][ C1] sd 0:0:1:0: [sda] tag#4633 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 196.452048][ C1] sd 0:0:1:0: [sda] tag#4633 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 196.518467][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.527267][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.269693][ T6804] tipc: Started in network mode [ 197.282868][ T6804] tipc: Node identity fa2bc41fc9a8, cluster identity 4711 [ 197.307231][ T6804] tipc: Enabled bearer , priority 0 [ 197.348175][ T6803] tipc: Disabling bearer [ 197.913875][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.936387][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.255615][ T41] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 198.447878][ T41] usb 4-1: device firmware changed [ 198.457846][ T4314] usb 4-1: USB disconnect, device number 32 [ 198.635460][ T4314] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 198.654745][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.683203][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.852021][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.869417][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.877897][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.914710][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.918219][ T4314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.950707][ T4314] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.985201][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.003894][ T4314] usb 4-1: config 0 descriptor?? [ 199.072831][ T6832] tipc: Enabled bearer , priority 0 [ 199.097889][ T6831] tipc: Disabling bearer [ 199.317757][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.380946][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.442943][ T4314] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 199.466085][ T4314] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 199.507277][ T4314] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 199.557426][ T4314] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 199.728676][ T4314] usb 4-1: USB disconnect, device number 33 [ 199.822207][ T6842] fido_id[6842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 200.139783][ T6850] device syzkaller0 entered promiscuous mode [ 200.191699][ T6850] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 200.203790][ T6852] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.788779][ T6852] netlink: 44 bytes leftover after parsing attributes in process `syz.1.724'. [ 201.039005][ T6866] tipc: Enabled bearer , priority 0 [ 201.058582][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.089198][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.110885][ T6865] tipc: Disabling bearer [ 201.463653][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.481715][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.798004][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.823228][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.898922][ T6886] device syzkaller0 entered promiscuous mode [ 202.711079][ T6900] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 202.735843][ T4281] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 202.930571][ T6909] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.474893][ T6909] sctp: [Deprecated]: syz.2.743 (pid 6909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.474893][ T6909] Use struct sctp_sack_info instead [ 204.265620][ T6910] device syzkaller0 entered promiscuous mode [ 204.286141][ T6909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.743'. [ 204.691916][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.720921][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.850678][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.903448][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.962237][ T4380] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 205.172162][ T4380] usb 4-1: Using ep0 maxpacket: 32 [ 205.186604][ T4380] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 205.212228][ T4380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.237668][ T4380] usb 4-1: config 0 descriptor?? [ 205.246514][ T4380] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 205.368799][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.384525][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.687486][ T6955] kvm: pic: non byte write [ 205.952040][ T4380] gspca_vc032x: reg_w err -110 [ 205.957003][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 205.981760][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.000638][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.011769][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.018096][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.024425][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.035807][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.039790][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.059195][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.070435][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.081658][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.094157][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.099907][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.105970][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.112604][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.118043][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.125303][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.130687][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.136461][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.142186][ T4380] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.147724][ T4380] gspca_vc032x: Unknown sensor... [ 206.159971][ T4380] vc032x: probe of 4-1:0.0 failed with error -22 [ 206.201304][ T4380] usb 4-1: USB disconnect, device number 34 [ 206.391733][ T6968] binder: BINDER_SET_CONTEXT_MGR already set [ 206.397956][ T6968] binder: 6967:6968 ioctl 4018620d 200000004a80 returned -16 [ 206.831154][ T6982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.878453][ T6982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.965955][ T6965] sctp: [Deprecated]: syz.4.758 (pid 6965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.965955][ T6965] Use struct sctp_sack_info instead [ 207.050596][ T6965] netlink: 44 bytes leftover after parsing attributes in process `syz.4.758'. [ 207.755476][ T6991] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 208.039448][ T6999] kvm: pic: non byte write [ 208.232265][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 208.417613][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.444827][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.584563][ T7017] device syzkaller0 entered promiscuous mode [ 208.610408][ T4382] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 208.800312][ T4382] usb 4-1: Using ep0 maxpacket: 8 [ 208.839601][ T4382] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.861821][ T4382] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 208.880422][ T4382] usb 4-1: can't read configurations, error -71 [ 209.993026][ T7042] kvm: pic: non byte write [ 210.931744][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.964171][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.481777][ T7092] device syzkaller0 entered promiscuous mode [ 213.226653][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.281203][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.883838][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.894087][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.761036][ T7144] IPVS: stopping backup sync thread 6124 ... [ 215.820038][ T7146] trusted_key: encrypted_key: insufficient parameters specified [ 215.835573][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'. [ 215.926144][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.963766][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.101470][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.159426][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.683614][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.722671][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.030250][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.106221][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.351840][ T7167] kvm: pic: non byte write [ 217.533608][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.548668][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.599994][ T7174] device syzkaller0 entered promiscuous mode [ 217.867225][ T7178] trusted_key: encrypted_key: insufficient parameters specified [ 219.071263][ T7190] binder: BINDER_SET_CONTEXT_MGR already set [ 219.083936][ T7190] binder: 7189:7190 ioctl 4018620d 200000004a80 returned -16 [ 219.758006][ T7197] IPVS: stopping backup sync thread 7199 ... [ 219.764121][ T7199] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 219.953165][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.984788][ T7205] device syzkaller0 entered promiscuous mode [ 219.997788][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.713814][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.735380][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.094097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 221.104095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 221.114071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 221.124071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 221.134062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 221.144056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 221.154054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 223.033098][ C1] sched: RT throttling activated [ 223.516249][ T7234] device syzkaller0 entered promiscuous mode [ 223.551129][ T7239] device syzkaller0 entered promiscuous mode [ 223.666984][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.699701][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.201721][ T7257] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 224.479976][ T7264] kvm [7263]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff4800004800 [ 226.792725][ T7254] device syzkaller0 entered promiscuous mode [ 226.997873][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.013684][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.810368][ T7309] trusted_key: encrypted_key: insufficient parameters specified [ 227.860954][ T14] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 228.020776][ T14] usb 4-1: device descriptor read/64, error -71 [ 228.069393][ T7314] device syzkaller0 entered promiscuous mode [ 228.194649][ T7317] device syzkaller0 entered promiscuous mode [ 228.300542][ T14] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 228.465993][ T14] usb 4-1: device descriptor read/64, error -71 [ 228.611237][ T14] usb usb4-port1: attempt power cycle [ 229.023039][ T14] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 229.060878][ T14] usb 4-1: device descriptor read/8, error -71 [ 229.340000][ T14] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 229.377745][ T14] usb 4-1: device descriptor read/8, error -71 [ 229.500216][ T14] usb usb4-port1: unable to enumerate USB device [ 230.719112][ T7356] IPVS: stopping backup sync thread 7358 ... [ 230.728183][ T7358] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 230.815262][ T7360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.879'. [ 231.582788][ T7371] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 231.582788][ T7371] The task syz.2.882 (7371) triggered the difference, watch for misbehavior. [ 232.083661][ T7375] device syzkaller0 entered promiscuous mode [ 232.302267][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.315344][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.924797][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.937321][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.010772][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.892'. [ 233.161514][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.176592][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.668058][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.690202][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.706660][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.715554][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.792590][ T7422] kvm: pic: non byte write [ 235.102905][ T4316] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 235.257052][ T4316] usb 4-1: device descriptor read/64, error -71 [ 235.423054][ T7434] sctp: [Deprecated]: syz.4.906 (pid 7434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.423054][ T7434] Use struct sctp_sack_info instead [ 235.499358][ T7434] netlink: 44 bytes leftover after parsing attributes in process `syz.4.906'. [ 235.537042][ T4316] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 235.706973][ T4316] usb 4-1: device descriptor read/64, error -71 [ 235.732829][ T7448] kvm [7447]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffcc0000c800 [ 235.744348][ T7448] kvm [7447]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffe500000000 [ 235.757428][ T7448] kvm [7447]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffd500000000 [ 235.770314][ T7448] kvm [7447]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffffffc000000000 [ 235.827621][ T4316] usb usb4-port1: attempt power cycle [ 236.264008][ T7458] IPVS: stopping backup sync thread 7460 ... [ 236.270062][ T7460] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 236.277045][ T4316] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 236.342352][ T7457] kvm: pic: non byte write [ 236.390786][ T4316] usb 4-1: device descriptor read/8, error -71 [ 236.666444][ T4316] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 236.727073][ T4316] usb 4-1: device descriptor read/8, error -71 [ 236.856746][ T4316] usb usb4-port1: unable to enumerate USB device [ 236.970657][ T7476] syz.4.920 sent an empty control message without MSG_MORE. [ 238.236523][ T7499] kvm [7498]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffcc0000c800 [ 238.250703][ T7499] kvm [7498]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffe500000000 [ 238.287251][ T7499] kvm [7498]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffd500000000 [ 238.326085][ T7499] kvm [7498]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffffffc000000000 [ 238.355649][ T14] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 238.547312][ T14] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.568434][ T14] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.584208][ T14] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.599079][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.615487][ T7496] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 238.886391][ T4316] usb 4-1: USB disconnect, device number 45 [ 239.214047][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.226744][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.781461][ T7546] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 239.782132][ T7543] IPVS: stopping backup sync thread 7546 ... [ 240.738822][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.791013][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.495449][ T7588] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 242.886200][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.938339][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.496656][ T7612] device syzkaller0 entered promiscuous mode [ 243.522912][ T7612] 0: reclassify loop, rule prio 0, protocol 700 [ 244.032078][ T7633] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 244.231807][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.247439][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.499940][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.527580][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.771373][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.787653][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.130023][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.976'. [ 245.710728][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.733857][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.961549][ T7656] Dead loop on virtual device ip6_vti0, fix it urgently! [ 246.897373][ T7671] kvm: pic: non byte write [ 247.348613][ T7676] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 248.080402][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.104288][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.172825][ T7684] Set syz1 is full, maxelem 6117 reached [ 248.995631][ T7702] kvm: pic: non byte write [ 249.056850][ T7709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.092163][ T7709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.220704][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.227931][ T7711] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 249.257465][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.282035][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.292254][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.767331][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.797778][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.928267][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.959372][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.960892][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.976696][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.135683][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.179871][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.197921][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.225564][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.499964][ T41] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 250.719456][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 250.730091][ T41] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 250.744469][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.752102][ T41] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 250.759066][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.770606][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.793316][ T41] usb 4-1: Product: syz [ 250.801944][ T41] usb 4-1: Manufacturer: syz [ 250.837107][ T41] usb 4-1: SerialNumber: syz [ 250.843776][ T41] usb 4-1: config 0 descriptor?? [ 250.854351][ T41] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 250.868245][ T41] usb 4-1: setting power ON [ 250.883879][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 250.901089][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.912877][ T41] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 250.921630][ T41] usb 4-1: media controller created [ 250.946266][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.989775][ T41] usb 4-1: selecting invalid altsetting 6 [ 250.995528][ T41] usb 4-1: digital interface selection failed (-22) [ 251.002702][ T41] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 251.012916][ T41] usb 4-1: setting power OFF [ 251.018314][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 251.025161][ T41] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 251.037337][ T41] (NULL device *): no alternate interface [ 251.055584][ T7742] dvb-usb: bulk message failed: -22 (3/0) [ 251.077960][ T7742] dvb-usb: bulk message failed: -22 (3/0) [ 251.096096][ T41] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 251.120588][ T41] usb 4-1: USB disconnect, device number 46 [ 251.273036][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.282200][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.048787][ T41] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 252.265032][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 252.284701][ T41] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 252.337028][ T41] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 252.366876][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.380993][ T41] usb 4-1: Product: syz [ 252.397623][ T41] usb 4-1: Manufacturer: syz [ 252.420691][ T41] usb 4-1: SerialNumber: syz [ 252.458795][ T41] usb 4-1: config 0 descriptor?? [ 252.634194][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.657192][ T7803] kvm: pic: non byte write [ 252.662213][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.796704][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.833793][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.852552][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.863420][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.298100][ T7818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.306991][ T7818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.127932][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.153098][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.839462][ T7856] netlink: 'syz.4.1039': attribute type 4 has an invalid length. [ 254.847792][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.866751][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.915926][ T7] usb 4-1: USB disconnect, device number 47 [ 255.058918][ T7864] device syzkaller0 entered promiscuous mode [ 255.463530][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.469993][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.767092][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.838835][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.169411][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.206856][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.911836][ T7907] netlink: 'syz.1.1054': attribute type 4 has an invalid length. [ 257.105126][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.131149][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.692233][ T7943] device syzkaller0 entered promiscuous mode [ 257.733925][ T7943] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 257.748176][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.762350][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.088265][ T7955] netlink: 'syz.0.1069': attribute type 4 has an invalid length. [ 259.097930][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.118560][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.552302][ T7989] netlink: 'syz.0.1082': attribute type 4 has an invalid length. [ 260.304323][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.327939][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.098195][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.118161][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 261.160407][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.319582][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.361872][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.841912][ T8035] netlink: 'syz.2.1096': attribute type 4 has an invalid length. [ 263.978968][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.017943][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.079959][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.099845][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.155239][ T8066] device syzkaller0 entered promiscuous mode [ 264.191169][ T8066] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 264.462505][ T4382] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 264.652407][ T4382] usb 4-1: Using ep0 maxpacket: 16 [ 264.671138][ T4382] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 264.720537][ T4382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.740137][ T4382] usb 4-1: Product: syz [ 264.745033][ T4382] usb 4-1: Manufacturer: syz [ 264.749869][ T4382] usb 4-1: SerialNumber: syz [ 264.768192][ T4382] usb 4-1: config 0 descriptor?? [ 265.001744][ T4382] usb-storage 4-1:0.0: USB Mass Storage device detected [ 265.045725][ T4382] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 265.059008][ T4382] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 265.059008][ T4382] Please send a copy of this message to and [ 265.289309][ T4382] usb 4-1: USB disconnect, device number 48 [ 265.350228][ T8094] netlink: 'syz.2.1116': attribute type 29 has an invalid length. [ 265.361342][ T8094] netlink: 'syz.2.1116': attribute type 29 has an invalid length. [ 265.370549][ T8091] netlink: 'syz.2.1116': attribute type 29 has an invalid length. [ 265.390964][ T8094] netlink: 'syz.2.1116': attribute type 29 has an invalid length. [ 265.735425][ T8103] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 265.859269][ T8106] device syzkaller0 entered promiscuous mode [ 266.136743][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.186234][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.200066][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.224643][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.544050][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.609819][ T8103] sctp: [Deprecated]: syz.3.1119 (pid 8103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.609819][ T8103] Use struct sctp_sack_info instead [ 266.638660][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.656676][ T8103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1119'. [ 267.409232][ T8139] device syzkaller0 entered promiscuous mode [ 267.699020][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.755838][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.559867][ T8172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.589504][ T8172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.633606][ T14] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 268.870277][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 268.919508][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.990221][ T14] usb 4-1: config 0 has no interfaces? [ 269.026883][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.065475][ T14] usb 4-1: config 0 has no interfaces? [ 269.079369][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.095121][ T14] usb 4-1: config 0 has no interfaces? [ 269.103096][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.106608][ T8184] device syzkaller0 entered promiscuous mode [ 269.121593][ T14] usb 4-1: config 0 has no interfaces? [ 269.128584][ T14] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 269.148914][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.165299][ T8186] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 269.185355][ T14] usb 4-1: config 0 descriptor?? [ 269.773744][ T8194] sctp: [Deprecated]: syz.0.1149 (pid 8194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.773744][ T8194] Use struct sctp_sack_info instead [ 269.922740][ T8194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1149'. [ 269.989248][ T8198] sctp: [Deprecated]: syz.4.1150 (pid 8198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.989248][ T8198] Use struct sctp_sack_info instead [ 271.082509][ T8198] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1150'. [ 271.654556][ T8227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.719081][ T8227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.784368][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1160'. [ 271.835098][ T8232] device syzkaller0 entered promiscuous mode [ 271.878521][ T7] usb 4-1: USB disconnect, device number 49 [ 272.638173][ T8238] sctp: [Deprecated]: syz.4.1165 (pid 8238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.638173][ T8238] Use struct sctp_sack_info instead [ 273.596455][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.637181][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.218794][ T8263] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.746958][ T8263] sctp: [Deprecated]: syz.1.1172 (pid 8263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.746958][ T8263] Use struct sctp_sack_info instead [ 274.798871][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.834134][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.778806][ T8238] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1165'. [ 275.792827][ T8263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1172'. [ 276.272757][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.298594][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.502152][ T8290] kvm: pic: non byte write [ 276.670699][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.694930][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.923057][ T8315] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 278.597168][ T8329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.615563][ T8329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.685969][ T8316] sctp: [Deprecated]: syz.2.1188 (pid 8316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.685969][ T8316] Use struct sctp_sack_info instead [ 278.686222][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.709937][ T8316] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1188'. [ 278.751116][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.848716][ T8352] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 280.758500][ T8366] kvm: pic: non byte write [ 281.926741][ T14] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 281.962887][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.978345][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.126589][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 282.139703][ T14] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 282.151393][ T14] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 282.161072][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.169450][ T14] usb 4-1: Product: syz [ 282.173875][ T14] usb 4-1: Manufacturer: syz [ 282.178490][ T14] usb 4-1: SerialNumber: syz [ 282.191960][ T14] usb 4-1: config 0 descriptor?? [ 282.201493][ T14] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 282.210168][ T14] usb 4-1: setting power ON [ 282.214946][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 282.236274][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.246008][ T14] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 282.254766][ T14] usb 4-1: media controller created [ 282.269800][ T8341] netlink: 'syz.4.1199': attribute type 10 has an invalid length. [ 282.271816][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.278002][ T8341] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1199'. [ 282.307518][ T14] usb 4-1: selecting invalid altsetting 6 [ 282.314559][ T14] usb 4-1: digital interface selection failed (-22) [ 282.321173][ T14] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 282.331343][ T14] usb 4-1: setting power OFF [ 282.336218][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 282.341965][ T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 282.357675][ T14] (NULL device *): no alternate interface [ 282.395628][ T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 282.438727][ T14] usb 4-1: USB disconnect, device number 50 [ 282.444161][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.459082][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.912826][ T8404] netlink: 'syz.0.1217': attribute type 4 has an invalid length. [ 283.121220][ T8406] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 285.695406][ T8439] tipc: Enabling of bearer rejected, failed to enable media [ 285.915983][ T8461] netlink: 'syz.2.1229': attribute type 4 has an invalid length. [ 285.935562][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.974509][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.078477][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.090517][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.234735][ T8473] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 286.251798][ T4382] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 286.455453][ T4382] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 286.464583][ T4382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.472701][ T4382] usb 4-1: Product: syz [ 286.476887][ T4382] usb 4-1: Manufacturer: syz [ 286.481580][ T4382] usb 4-1: SerialNumber: syz [ 286.488777][ T4382] usb 4-1: config 0 descriptor?? [ 286.704039][ T4382] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 286.943235][ T8487] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 287.392318][ T8501] tipc: Enabling of bearer rejected, failed to enable media [ 287.402212][ T8501] device syzkaller0 entered promiscuous mode [ 287.571421][ T8487] sctp: [Deprecated]: syz.1.1239 (pid 8487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.571421][ T8487] Use struct sctp_sack_info instead [ 287.686823][ T8504] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 287.740670][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.764621][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.855904][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.898583][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.935557][ T4382] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 288.084863][ T8487] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1239'. [ 288.997096][ T4316] usb 4-1: USB disconnect, device number 51 [ 289.739908][ T14] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 289.949834][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 289.973626][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.034481][ T14] usb 4-1: config 0 has no interfaces? [ 290.065928][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.078334][ T8566] netlink: 'syz.1.1264': attribute type 29 has an invalid length. [ 290.092729][ T8566] netlink: 'syz.1.1264': attribute type 29 has an invalid length. [ 290.127392][ T14] usb 4-1: config 0 has no interfaces? [ 290.143893][ T8566] netlink: 'syz.1.1264': attribute type 29 has an invalid length. [ 290.149968][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.186339][ T14] usb 4-1: config 0 has no interfaces? [ 290.212714][ T8567] netlink: 'syz.1.1264': attribute type 29 has an invalid length. [ 290.236968][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.264907][ T14] usb 4-1: config 0 has no interfaces? [ 290.312256][ T14] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 290.389596][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.530585][ T14] usb 4-1: config 0 descriptor?? [ 290.733247][ T8574] sch_tbf: burst 0 is lower than device nlmon0 mtu (3776) ! [ 290.797962][ T8576] netlink: 'syz.0.1268': attribute type 4 has an invalid length. [ 290.933501][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.984221][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.247039][ T8585] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1272'. [ 291.458270][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 292.986179][ T8626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.034333][ T8626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.053074][ T14] usb 4-1: USB disconnect, device number 52 [ 293.394089][ T8639] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 293.498267][ T8641] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1295'. [ 293.816841][ T8643] kvm: pic: non byte write [ 293.990048][ T8656] IPVS: stopping backup sync thread 8657 ... [ 294.702670][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.726849][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.427011][ T14] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 295.616957][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 295.623635][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 295.640056][ T8690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'. [ 295.688523][ T14] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 295.736845][ T14] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 295.770894][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.795882][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.817329][ T14] usb 4-1: Product: syz [ 295.826039][ T14] usb 4-1: Manufacturer: 騶聒ꬓ䰥ꛂ覴ᖓ틂㢿릋馒焺෌ܙ⌏놗㴴퐝碷싴皋ᄻ鰬६佄ㅟቈ벉尡댄⿢喲߻䝤➵㕛砯蕕⬲ꚠ쓱仃㣳퇰᯺ꥲ砚됛ﾵ殛壧텦큟㉜蕣韢ꆰ꿰쓽⑵狟蝟斍ᇊ眞츂Ἄﶽ젣䓳મꢨ쁶쪍钱綋ࢼ垬覕኿蜾뇢뇪暈戕厣 [ 295.871264][ T8695] device syzkaller0 entered promiscuous mode [ 295.899771][ T8695] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 295.900815][ T14] usb 4-1: SerialNumber: syz [ 296.151498][ T14] cdc_ncm 4-1:1.0: bind() failure [ 296.169442][ T14] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 296.176427][ T14] cdc_ncm 4-1:1.1: bind() failure [ 296.193560][ T14] usb 4-1: USB disconnect, device number 53 [ 296.224927][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 296.513560][ T8708] device syzkaller0 entered promiscuous mode [ 296.824249][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.853341][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.007257][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 297.905516][ T8744] device syzkaller0 entered promiscuous mode [ 297.969186][ T8744] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 298.231016][ T8748] device syzkaller0 entered promiscuous mode [ 299.129614][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.223427][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.155497][ T8791] device syzkaller0 entered promiscuous mode [ 300.329063][ T8795] device syzkaller0 entered promiscuous mode [ 300.497138][ T8803] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1357'. [ 300.640535][ T8808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.672959][ T8808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.879532][ T4382] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 301.084293][ T4382] usb 4-1: Using ep0 maxpacket: 32 [ 301.091369][ T4382] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 301.178836][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.226955][ T4382] usb 4-1: config 0 descriptor?? [ 301.256203][ T4382] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 301.307617][ T8834] device syzkaller0 entered promiscuous mode [ 301.651963][ T4382] gspca_vc032x: reg_w err -71 [ 301.661892][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.688260][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.701561][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.721702][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.741648][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.761876][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.782071][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.792311][ T8842] device syzkaller0 entered promiscuous mode [ 301.796707][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.808681][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.833229][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.851855][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.866150][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.878832][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.892792][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.907198][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.933437][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.947848][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.953177][ T4382] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.971833][ T4382] gspca_vc032x: Unknown sensor... [ 301.977007][ T4382] vc032x: probe of 4-1:0.0 failed with error -22 [ 302.028733][ T4382] usb 4-1: USB disconnect, device number 54 [ 302.240234][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1373'. [ 302.921290][ T8873] device syzkaller0 entered promiscuous mode [ 303.914945][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.982212][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.567045][ T8915] device syzkaller0 entered promiscuous mode [ 306.161487][ T8954] wlan1 speed is unknown, defaulting to 1000 [ 306.168104][ T8954] wlan1 speed is unknown, defaulting to 1000 [ 306.183184][ T8954] wlan1 speed is unknown, defaulting to 1000 [ 306.203810][ T8954] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 306.218403][ T8954] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 306.271130][ T8954] wlan1 speed is unknown, defaulting to 1000 [ 306.287169][ T8954] wlan1 speed is unknown, defaulting to 1000 [ 306.305381][ T8954] wlan1 speed is unknown, defaulting to 1000 [ 306.324507][ T8954] wlan1 speed is unknown, defaulting to 1000 [ 306.336638][ T8954] wlan1 speed is unknown, defaulting to 1000 [ 307.541015][ T8987] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 307.541784][ T8988] netlink: 'syz.0.1415': attribute type 33 has an invalid length. [ 307.580728][ T8988] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1415'. [ 308.352801][ T9001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1419'. [ 309.283177][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.314110][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.405921][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.426476][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.470005][ T41] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 309.729915][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 309.742409][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.795212][ T41] usb 4-1: config 0 has no interfaces? [ 309.844664][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.886081][ T41] usb 4-1: config 0 has no interfaces? [ 309.916467][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.951525][ T41] usb 4-1: config 0 has no interfaces? [ 309.984263][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.013767][ T41] usb 4-1: config 0 has no interfaces? [ 310.029799][ T41] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 310.038993][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.096124][ T41] usb 4-1: config 0 descriptor?? [ 310.124369][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.195308][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.686316][ T9042] kvm: pic: non byte write [ 311.486314][ T9055] trusted_key: encrypted_key: insufficient parameters specified [ 312.582379][ T7] usb 4-1: USB disconnect, device number 55 [ 315.354965][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.387217][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.453039][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.482147][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.490190][ T9109] kvm: pic: non byte write [ 315.711117][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.751743][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.845273][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.861683][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.375634][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 316.867918][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.874265][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.278997][ T9158] sctp: [Deprecated]: syz.4.1464 (pid 9158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.278997][ T9158] Use struct sctp_sack_info instead [ 318.302101][ T9169] loop5: detected capacity change from 0 to 7 [ 318.323281][ T9169] Dev loop5: unable to read RDB block 7 [ 318.329209][ T9169] loop5: unable to read partition table [ 318.335591][ T9169] loop5: partition table beyond EOD, truncated [ 318.341943][ T9169] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 318.495661][ T9170] binder: 9165:9170 ioctl c0285840 200000000000 returned -22 [ 320.033826][ T9158] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1464'. [ 320.047726][ T9166] netlink: 'syz.2.1466': attribute type 39 has an invalid length. [ 321.335986][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.350567][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.626935][ T9211] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 321.761380][ T9213] sctp: [Deprecated]: syz.1.1479 (pid 9213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.761380][ T9213] Use struct sctp_sack_info instead [ 321.838143][ T9213] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1479'. [ 325.019465][ T9233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.034219][ T9233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.763433][ T9254] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 325.910882][ T9256] sctp: [Deprecated]: syz.0.1493 (pid 9256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.910882][ T9256] Use struct sctp_sack_info instead [ 325.941951][ T9256] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1493'. [ 326.350274][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.392383][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.444665][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.464993][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.928972][ T9280] wlan1 speed is unknown, defaulting to 1000 [ 328.652741][ T9297] kvm: pic: non byte write [ 328.748983][ T9300] device syzkaller0 entered promiscuous mode [ 328.787754][ T4281] Bluetooth: unknown link type 232 [ 328.947032][ T9306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.049662][ T9308] device syzkaller0 entered promiscuous mode [ 329.069448][ T9308] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 329.133460][ T126] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 329.340060][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 329.351211][ T126] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 329.384450][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.421204][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.437711][ T126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.447208][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.461299][ T126] usb 4-1: Product: syz [ 329.466173][ T9320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.474808][ T126] usb 4-1: Manufacturer: syz [ 329.479452][ T126] usb 4-1: SerialNumber: syz [ 329.484526][ T9320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.576299][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.586525][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.859437][ T126] usb 4-1: 0:2 : does not exist [ 329.883782][ T126] usb 4-1: USB disconnect, device number 56 [ 330.126087][ T7516] udevd[7516]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.396980][ T9330] wlan1 speed is unknown, defaulting to 1000 [ 330.642718][ T9333] device syzkaller0 entered promiscuous mode [ 330.849280][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 331.796630][ T9348] kvm: pic: non byte write [ 333.216938][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1527'. [ 333.420575][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.432596][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.446251][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.456487][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.317158][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.325699][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.495595][ T9397] binder: BINDER_SET_CONTEXT_MGR bad uid 16832 != 0 [ 335.502717][ T9397] binder: 9396:9397 ioctl 4018620d 200000004a80 returned -1 [ 336.301034][ T9410] device syzkaller0 entered promiscuous mode [ 336.325251][ T9410] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 336.328428][ T9407] kvm: pic: non byte write [ 336.854096][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.871697][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.052086][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.062038][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.460150][ T9430] device syzkaller0 entered promiscuous mode [ 337.554711][ T9435] wlan1 speed is unknown, defaulting to 1000 [ 337.645304][ T9438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1552'. [ 338.476767][ T9455] device syzkaller0 entered promiscuous mode [ 338.734663][ T9461] kvm: pic: non byte write [ 339.140538][ T9467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.151066][ T9467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.248768][ T9481] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 340.684474][ T9485] sctp: [Deprecated]: syz.1.1566 (pid 9485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.684474][ T9485] Use struct sctp_sack_info instead [ 340.748626][ T9485] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1566'. [ 341.521666][ T9508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.548294][ T9509] device syzkaller0 entered promiscuous mode [ 341.565964][ T9508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.732909][ T9512] device syzkaller0 entered promiscuous mode [ 341.745443][ T9512] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 342.108497][ T9518] kvm: pic: non byte write [ 342.173705][ T4314] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 342.327598][ T4314] usb 4-1: device descriptor read/64, error -71 [ 342.343173][ T9523] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 342.352136][ T9521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.364336][ T9521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.390705][ T9523] sctp: [Deprecated]: syz.2.1579 (pid 9523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.390705][ T9523] Use struct sctp_sack_info instead [ 342.408180][ T9523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1579'. [ 342.452772][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.464525][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.613754][ T4314] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 342.773749][ T4314] usb 4-1: device descriptor read/64, error -71 [ 342.903544][ T4314] usb usb4-port1: attempt power cycle [ 343.373310][ T4314] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 343.439944][ T4314] usb 4-1: device descriptor read/8, error -71 [ 343.857881][ T4314] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 343.903185][ T4314] usb 4-1: device descriptor read/8, error -71 [ 343.912007][ T9557] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 343.924528][ T9556] IPVS: stopping backup sync thread 9557 ... [ 344.023455][ T4314] usb usb4-port1: unable to enumerate USB device [ 344.644282][ T9565] tipc: Enabled bearer , priority 0 [ 344.668546][ T9565] tipc: Resetting bearer [ 344.729530][ T9564] tipc: Disabling bearer [ 345.036342][ T9567] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 345.217347][ T9567] sctp: [Deprecated]: syz.2.1591 (pid 9567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.217347][ T9567] Use struct sctp_sack_info instead [ 345.322805][ T9567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1591'. [ 348.111516][ T9607] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 348.432689][ T9612] tipc: Enabled bearer , priority 0 [ 348.488662][ T9612] tipc: Resetting bearer [ 348.531439][ T9611] tipc: Disabling bearer [ 349.019798][ T9618] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 349.259888][ T9618] sctp: [Deprecated]: syz.1.1605 (pid 9618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.259888][ T9618] Use struct sctp_sack_info instead [ 349.357101][ T9618] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1605'. [ 349.497639][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.524746][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.561658][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.571147][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.599156][ T9642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1610'. [ 351.083879][ T9651] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 352.340930][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.417734][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.169044][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.369403][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.612583][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.744662][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.748571][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.778068][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.194352][ T9705] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 356.526670][ T126] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 356.739483][ T126] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 356.757161][ T126] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.772911][ T126] usb 4-1: config 0 interface 0 has no altsetting 0 [ 356.783227][ T126] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 356.794675][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.477791][ T126] usb 4-1: config 0 descriptor?? [ 357.483571][ T9701] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 358.187106][ T126] usbhid 4-1:0.0: can't add hid device: -71 [ 358.199372][ T126] usbhid: probe of 4-1:0.0 failed with error -71 [ 358.224560][ T126] usb 4-1: USB disconnect, device number 61 [ 358.323032][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.333103][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.553673][ T9727] binder: 9724:9727 ioctl c0306201 0 returned -14 [ 359.580803][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.688437][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.925998][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1643'. [ 362.266192][ T9768] wlan1 speed is unknown, defaulting to 1000 [ 362.703411][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1647'. [ 363.712498][ T9776] kvm: pic: non byte write [ 363.738668][ T9783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.752222][ T9783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.895033][ T9785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.906047][ T9785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.923029][ T4314] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 364.024734][ T9789] wlan1 speed is unknown, defaulting to 1000 [ 364.122627][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 364.131845][ T4314] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 364.141390][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.149683][ T4314] usb 4-1: Product: syz [ 364.154229][ T4314] usb 4-1: Manufacturer: syz [ 364.158840][ T4314] usb 4-1: SerialNumber: syz [ 364.363841][ T9792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.380188][ T9792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.478386][ T9794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.507848][ T9794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.629566][ T4314] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 364.668108][ T4314] mxuport: probe of 4-1:254.0 failed with error -5 [ 364.679814][ T9800] binder: BINDER_SET_CONTEXT_MGR already set [ 364.686594][ T9800] binder: 9795:9800 ioctl 4018620d 200000000040 returned -16 [ 364.919630][ T4314] usb 4-1: USB disconnect, device number 62 [ 365.224158][ T9800] binder: 9795:9800 ioctl c0306201 0 returned -14 [ 365.314497][ T9806] wlan1 speed is unknown, defaulting to 1000 [ 365.873416][ T9820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1663'. [ 367.236392][ T9834] wlan1 speed is unknown, defaulting to 1000 [ 367.600959][ T4314] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 367.928763][ T4314] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 368.076637][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.125900][ T4314] usb 4-1: Product: syz [ 368.130109][ T4314] usb 4-1: Manufacturer: syz [ 368.168919][ T4314] usb 4-1: SerialNumber: syz [ 368.189688][ T4314] usb 4-1: config 0 descriptor?? [ 368.209527][ T4314] hub 4-1:0.0: bad descriptor, ignoring hub [ 368.316344][ T4314] hub: probe of 4-1:0.0 failed with error -5 [ 368.378528][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.410351][ T4314] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 368.431666][ T4314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.437628][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.448981][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.458440][ T4314] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 368.462216][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.478746][ T4314] usb 4-1: media controller created [ 368.523075][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.666222][ T4314] DVB: Unable to find symbol dib7000p_attach() [ 368.679598][ T4314] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 368.728976][ T9855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.767603][ T9855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.820393][ T4314] rc_core: IR keymap rc-dib0700-rc5 not found [ 368.826800][ T4314] Registered IR keymap rc-empty [ 368.832421][ T4314] dvb-usb: could not initialize remote control. [ 368.838699][ T4314] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 369.138618][ T9862] tipc: Enabled bearer , priority 0 [ 369.163833][ T9862] device syzkaller0 entered promiscuous mode [ 369.190867][ T9862] tipc: Resetting bearer [ 369.203729][ T9861] tipc: Resetting bearer [ 369.229213][ T9861] tipc: Disabling bearer [ 369.933714][ T9872] wlan1 speed is unknown, defaulting to 1000 [ 369.989285][ T9876] binder: 9865:9876 ioctl c0306201 0 returned -14 [ 371.166634][ T9895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.222850][ T9895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.299244][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.330561][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.591441][ T9903] tipc: Enabled bearer , priority 0 [ 371.599714][ T9903] device syzkaller0 entered promiscuous mode [ 371.621221][ T9903] tipc: Resetting bearer [ 371.628717][ T9902] tipc: Resetting bearer [ 371.658271][ T9902] tipc: Disabling bearer [ 371.768898][ T9906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.799476][ T9906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.616049][ T9932] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.616759][ T9929] wlan1 speed is unknown, defaulting to 1000 [ 373.676943][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.695867][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.728030][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.746916][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.934314][ T4382] usb 4-1: USB disconnect, device number 63 [ 374.005081][ T4382] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 374.138519][ T9937] sctp: [Deprecated]: syz.0.1700 (pid 9937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.138519][ T9937] Use struct sctp_sack_info instead [ 374.184001][ T9937] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1700'. [ 374.447501][ T4382] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 374.681628][ T4382] usb 4-1: Using ep0 maxpacket: 16 [ 374.701803][ T4382] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.769358][ T4382] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.794361][ T4382] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.824425][ T4382] usb 4-1: config 0 interface 0 has no altsetting 0 [ 374.828756][ T9960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.831560][ T4382] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 374.915683][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.942436][ T4382] usb 4-1: config 0 descriptor?? [ 375.330033][ T9960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.833214][ T4382] usbhid 4-1:0.0: can't add hid device: -71 [ 375.841250][ T4382] usbhid: probe of 4-1:0.0 failed with error -71 [ 375.898746][ T4382] usb 4-1: USB disconnect, device number 64 [ 376.074905][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.145055][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.425518][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.461335][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.507388][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.535987][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.674129][ T9986] wlan1 speed is unknown, defaulting to 1000 [ 377.772117][T10007] device syzkaller0 entered promiscuous mode [ 377.782502][T10008] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.166379][T10013] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 378.191833][T10013] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 378.232561][T10017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.247308][T10017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.280028][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.289905][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.496228][T10011] sctp: [Deprecated]: syz.1.1722 (pid 10011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.496228][T10011] Use struct sctp_sack_info instead [ 380.215637][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.241603][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.259990][T10011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1722'. [ 380.402937][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.419153][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.551160][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.564258][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.581033][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.595449][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.262380][T10048] wlan1 speed is unknown, defaulting to 1000 [ 382.031741][T10065] device syzkaller0 entered promiscuous mode [ 382.328628][ T7] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 382.338422][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.398450][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.516477][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 382.531472][ T7] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.542653][ T7] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.554060][ T7] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.571362][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 382.582232][ T7] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 382.593743][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.619302][ T7] usb 4-1: config 0 descriptor?? [ 383.047047][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 383.060053][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 383.119746][ T7] usb 4-1: USB disconnect, device number 65 [ 383.310467][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.377723][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.349248][T10085] wlan1 speed is unknown, defaulting to 1000 [ 388.270676][ T7] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 388.278952][T10106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.320982][T10106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.470611][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 388.481628][ T7] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.496990][ T7] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.507527][ T7] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.523643][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 388.530252][ T7] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 388.540210][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.555754][ T7] usb 4-1: config 0 descriptor?? [ 389.263961][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 389.281547][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 389.313396][ T7] usb 4-1: USB disconnect, device number 66 [ 389.325785][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.374038][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.387753][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.399477][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.484658][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.493369][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.145795][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.156731][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.997577][T10160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.355604][T10160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.135289][T10171] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 395.333318][T10177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.348981][T10177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.406060][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.423916][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.038281][T10189] IPVS: stopping backup sync thread 8987 ... [ 398.314488][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.345093][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.807260][T10225] wlan1 speed is unknown, defaulting to 1000 [ 400.170000][T10232] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 402.335427][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.344035][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.687100][T10261] IPVS: stopping backup sync thread 10262 ... [ 403.736221][T10262] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 403.768048][T10265] netlink: 'syz.1.1799': attribute type 1 has an invalid length. [ 403.981096][T10265] device bond1 entered promiscuous mode [ 403.995567][T10265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.012440][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1799'. [ 404.098974][T10275] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 404.107848][T10275] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 404.131459][T10275] ------------[ cut here ]------------ [ 404.137015][T10275] WARNING: CPU: 0 PID: 10275 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 404.147476][T10275] Modules linked in: [ 404.151491][T10275] CPU: 0 PID: 10275 Comm: syz.3.1800 Not tainted syzkaller #0 [ 404.158967][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.169041][T10275] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 404.175513][T10275] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 404.195522][T10275] RSP: 0018:ffffc900032a7c48 EFLAGS: 00010287 [ 404.201612][T10275] RAX: ffffffff81100f7c RBX: ffff88807ec5a7c0 RCX: 0000000000080000 [ 404.209631][T10275] RDX: ffffc9000e2b1000 RSI: 00000000000003bf RDI: 00000000000003c0 [ 404.217637][T10275] RBP: ffff88807dbb2000 R08: dffffc0000000000 R09: 1ffffffff215f268 [ 404.225668][T10275] R10: dffffc0000000000 R11: fffffbfff215f269 R12: ffff88807ec5aab4 [ 404.233715][T10275] R13: ffff88807ec5a898 R14: dffffc0000000000 R15: 0000000000000000 [ 404.241694][T10275] FS: 00007f7f214aa6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 404.250662][T10275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.257275][T10275] CR2: 00007ffb7b1b3ff8 CR3: 0000000079de4000 CR4: 00000000003526f0 [ 404.265282][T10275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.273282][T10275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.281246][T10275] Call Trace: [ 404.284574][T10275] [ 404.287519][T10275] ? mutex_lock_nested+0x10/0x10 [ 404.292508][T10275] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 404.298255][T10275] kvm_vcpu_ioctl+0x8f7/0xc10 [ 404.302981][T10275] ? xa_release+0x50/0x50 [ 404.307332][T10275] ? __fget_files+0x28/0x4b0 [ 404.311916][T10275] ? __fget_files+0x28/0x4b0 [ 404.316562][T10275] ? bpf_lsm_file_ioctl+0x5/0x10 [ 404.321525][T10275] ? security_file_ioctl+0x7c/0xa0 [ 404.326680][T10275] ? xa_release+0x50/0x50 [ 404.331028][T10275] __se_sys_ioctl+0xfa/0x170 [ 404.335673][T10275] do_syscall_64+0x4c/0xa0 [ 404.340120][T10275] ? clear_bhb_loop+0x60/0xb0 [ 404.344841][T10275] ? clear_bhb_loop+0x60/0xb0 [ 404.349537][T10275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.355479][T10275] RIP: 0033:0x7f7f2059cdd9 [ 404.359915][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.379559][T10275] RSP: 002b:00007f7f214aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.388015][T10275] RAX: ffffffffffffffda RBX: 00007f7f20815fa0 RCX: 00007f7f2059cdd9 [ 404.396021][T10275] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 404.404020][T10275] RBP: 00007f7f20632d69 R08: 0000000000000000 R09: 0000000000000000 [ 404.412036][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.420043][T10275] R13: 00007f7f20816038 R14: 00007f7f20815fa0 R15: 00007ffd1004a598 [ 404.428053][T10275] [ 404.431064][T10275] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 404.438330][T10275] CPU: 0 PID: 10275 Comm: syz.3.1800 Not tainted syzkaller #0 [ 404.445769][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.455810][T10275] Call Trace: [ 404.459078][T10275] [ 404.461995][T10275] dump_stack_lvl+0x188/0x24e [ 404.466670][T10275] ? memcpy+0x3c/0x60 [ 404.470637][T10275] ? show_regs_print_info+0x12/0x12 [ 404.475828][T10275] ? load_image+0x400/0x400 [ 404.480331][T10275] panic+0x2e5/0x730 [ 404.484216][T10275] ? bpf_jit_dump+0xd0/0xd0 [ 404.488711][T10275] __warn+0x2f8/0x4f0 [ 404.492683][T10275] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 404.498497][T10275] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 404.504291][T10275] report_bug+0x2ba/0x4f0 [ 404.508614][T10275] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 404.514408][T10275] handle_bug+0x3a/0x70 [ 404.518556][T10275] exc_invalid_op+0x16/0x40 [ 404.523155][T10275] asm_exc_invalid_op+0x16/0x20 [ 404.528013][T10275] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 404.534425][T10275] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 404.554032][T10275] RSP: 0018:ffffc900032a7c48 EFLAGS: 00010287 [ 404.560085][T10275] RAX: ffffffff81100f7c RBX: ffff88807ec5a7c0 RCX: 0000000000080000 [ 404.568044][T10275] RDX: ffffc9000e2b1000 RSI: 00000000000003bf RDI: 00000000000003c0 [ 404.576002][T10275] RBP: ffff88807dbb2000 R08: dffffc0000000000 R09: 1ffffffff215f268 [ 404.583960][T10275] R10: dffffc0000000000 R11: fffffbfff215f269 R12: ffff88807ec5aab4 [ 404.591916][T10275] R13: ffff88807ec5a898 R14: dffffc0000000000 R15: 0000000000000000 [ 404.599881][T10275] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 404.605680][T10275] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 404.611473][T10275] ? mutex_lock_nested+0x10/0x10 [ 404.616402][T10275] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 404.622116][T10275] kvm_vcpu_ioctl+0x8f7/0xc10 [ 404.626784][T10275] ? xa_release+0x50/0x50 [ 404.631105][T10275] ? __fget_files+0x28/0x4b0 [ 404.635704][T10275] ? __fget_files+0x28/0x4b0 [ 404.640292][T10275] ? bpf_lsm_file_ioctl+0x5/0x10 [ 404.645227][T10275] ? security_file_ioctl+0x7c/0xa0 [ 404.650326][T10275] ? xa_release+0x50/0x50 [ 404.654641][T10275] __se_sys_ioctl+0xfa/0x170 [ 404.659231][T10275] do_syscall_64+0x4c/0xa0 [ 404.663648][T10275] ? clear_bhb_loop+0x60/0xb0 [ 404.668314][T10275] ? clear_bhb_loop+0x60/0xb0 [ 404.672980][T10275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.678861][T10275] RIP: 0033:0x7f7f2059cdd9 [ 404.683263][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.702853][T10275] RSP: 002b:00007f7f214aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.711250][T10275] RAX: ffffffffffffffda RBX: 00007f7f20815fa0 RCX: 00007f7f2059cdd9 [ 404.719208][T10275] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 404.727163][T10275] RBP: 00007f7f20632d69 R08: 0000000000000000 R09: 0000000000000000 [ 404.735118][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.743074][T10275] R13: 00007f7f20816038 R14: 00007f7f20815fa0 R15: 00007ffd1004a598 [ 404.751040][T10275] [ 404.754393][T10275] Kernel Offset: disabled [ 404.758751][T10275] Rebooting in 86400 seconds..