last executing test programs: 9m6.690667094s ago: executing program 0 (id=115): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x30, 0xffffffffffffffff, 0x57789000) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) unshare(0x2a020480) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001000000", @ANYRES64=0x0], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 9m6.460365223s ago: executing program 0 (id=116): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) 9m6.357837003s ago: executing program 0 (id=118): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80284511, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2a}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bdf000fcdbdf251000000008000300", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="05003f000700000008003a"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="586c74ca222af2528627ab74b1219e9b00e5404082a2a409657e7532a702d3e42f77994ebe0695a6915118674e4e03d638eea0526594da4809e65cc26aa4f877f9569e64475f67c83616ee0684f3d49d49058392e1b1babdf2a8aaee0ee68aaae66eaea69f6a33735a514e3f2e216159d01cb8adfa1841", @ANYRES16=r5, @ANYBLOB="20002cbd7000fedbdf250f00000008003c000100010008003b0003000000060028000200000005002a0001000000050037000100000005003800010000000500350010000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) close(0x3) 9m6.184838658s ago: executing program 0 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="b05ee84b68361400000010000100000000000000000054ed501c385023f71a0a030600d8cf000000000002000000200004801c000180809d9a72ec983db652740c0001007061796c6f6164000c00028008000240000000020900010073797230200000000900020073797a32280000001400000011000100000000000000"], 0x74}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="b05ee84b68361400000010000100000000000000000054ed501c385023f71a0a030600d8cf000000000002000000200004801c000180809d9a72ec983db652740c0001007061796c6f6164000c00028008000240000000020900010073797230200000000900020073797a32280000001400000011000100000000000000"], 0x74}}, 0x0) (async) 9m6.082818599s ago: executing program 0 (id=120): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002400050c27bd70969affffffffffff0006000300fd"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 9m5.954663168s ago: executing program 0 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r2, @ANYRESOCT=r0], 0x15) mount$9p_fd(0x0, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) fanotify_init(0xf00, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x0, 0x21, 0x17, {0x17, 0x30, "12f154d875a89284033c8f1b8e83c503d0683a8b34"}}, 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto$phonet(r3, &(0x7f00000002c0)="df5e33ae1612e32edbb03a24fa3641f45b9356df60e70fb0631458d6df35310ae196fa7771ba7fba7a8e0ff8ac5bc2045cb3f5d076a422603c4222409250bc6632e7734d46348200000000002319c7c3d2e04c196c09e20c2c73957483c30ee614b613f1ad47d4a506000000000000000002000000", 0x75, 0x20040000, 0x0, 0x0) 9m0.781993169s ago: executing program 2 (id=152): mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x1000080, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x1000080, 0x0) (async) 9m0.740788363s ago: executing program 2 (id=153): r0 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xe8, 0x3ed, 0x400, 0x70bd2c, 0x25dfdbfd, "d17f4e75f51bc73dea5d802e7b192a04d2d268607488decd8db0a17d6c6ef2f474821ce1c43fafe08cdbb37797162be519a3803920dcf9d691ea0b4ffe4eccc6a7e36cf74122b87e127634dfaeb00a4f5ef1db57f5b49c3e8cb0d27c40a760384512ee8ee1f982eea8449748aba9abb93bcb1b07acb209acb9bf07ad9885c4ed2886f92b760626429dc505a3b0ae94a82daa812f97f3c5d20802e3b1dfd8b1a5895dd14c29e48b21e205768e846babf037474a4ea385200b5c319d75b8a6bbd52fa7db7415c18ea3ac31492b9b23a2905cd3e51d91af", ["", "", "", "", "", ""]}, 0xe8}, 0x1, 0x0, 0x0, 0xc0}, 0x8bb6e5fc10fdd308) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x5, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x801) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) socket(0x11, 0x800000002, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xe8, 0x3ed, 0x400, 0x70bd2c, 0x25dfdbfd, "d17f4e75f51bc73dea5d802e7b192a04d2d268607488decd8db0a17d6c6ef2f474821ce1c43fafe08cdbb37797162be519a3803920dcf9d691ea0b4ffe4eccc6a7e36cf74122b87e127634dfaeb00a4f5ef1db57f5b49c3e8cb0d27c40a760384512ee8ee1f982eea8449748aba9abb93bcb1b07acb209acb9bf07ad9885c4ed2886f92b760626429dc505a3b0ae94a82daa812f97f3c5d20802e3b1dfd8b1a5895dd14c29e48b21e205768e846babf037474a4ea385200b5c319d75b8a6bbd52fa7db7415c18ea3ac31492b9b23a2905cd3e51d91af", ["", "", "", "", "", ""]}, 0xe8}, 0x1, 0x0, 0x0, 0xc0}, 0x8bb6e5fc10fdd308) (async) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x5, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x801) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (async) 9m0.666724374s ago: executing program 2 (id=154): syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x2, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1d, 0x80, 0x40, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x28, 0x10, 0x7}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x5, 0x0, 0x7, 0x40, 0x3}, 0xfe, &(0x7f0000000100)={0x5, 0xf, 0xfe, 0x6, [@generic={0x97, 0x10, 0x4, "682b04d42e405ac37f650f9a6a6c2609bdf462b7345caf859b255f1b8e8e62b7348b1c1b513ea83c48b99b3c2d1164e1ed64335a8680753ed2046c5b6fc51926f6fd5180dee03d11162156055cd414c8be210b4af8f43f5ac607b539edb9fb033ce38a3b599c62ed37cda310c45e0bcad9653a324eb6bb2d8dd8a22878292259ca9f5f317664718a3757f853c81229a165e5f9df"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "a06cdfc13684d287474a42b984c2e3d7"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "373193a8a7f4bb7b8ac772ba828b9364"}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x5, 0xf, 0x6eb, [0xff0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x2, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x800, 0xf00, 0x3aa, [0x3f0f, 0xc0f0, 0x3f, 0xffcf, 0x0]}]}, 0x4, [{0xfd, &(0x7f0000000200)=@string={0xfd, 0x3, "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"}}, {0xdb, &(0x7f0000000300)=@string={0xdb, 0x3, "b99a739ca6ac25c0c0790a9869d29272660d29911078bc5df89c19f6213e602e13760682ae5072fad8b20cfc7c65e4ab36c65a4eacb96cc5ad1e863d7c32d23292fba26eb13555a48455a874526018d4c81bd66120b28abecad2f40e6d17d655c33ce31499b069023a67fc741513ba8f4268714dbadd46d164f6306e0a4140ba3aad726bc55cdbd6cfdf2a035461997e664135c3fef8c5413ed2b58d065404c5d9ad45b5193ea44d12cb31de7f4ad96a542818bf4e246ef9f5ca633efc958c8c3daf4729cc404c3b7aede6df319d82d15336da465985411d17"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x812}}, {0x91, &(0x7f0000000440)=@string={0x91, 0x3, "f5471c6019884feebabacdd4a1eb616e3715e6613ec294cfba53f81d3c7af3512cd0604ebce08d0511cd3d96c15dc24c03dae92fa36c67263308f3cf87301ddc6bfaa198af029fc9d3b619904fa339a4d370f38a59c1b5e7feb4b00f861b64c7c3624c74bbd59d9edbc23438497f1cb26f12da3f20bb06467ca9abd5bfb1ef0664e36ef9c55d11450a68cfc6dbd0ac"}}]}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x6) 8m58.722060653s ago: executing program 2 (id=160): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xa, 0x58, 0x5d, 0x20, 0x40a, 0x2, 0x518f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x10, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xfb, 0x52, 0x99}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x200e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x50, 0x8b, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x1000}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xff, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7d, 0x6, 0x5}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x6f, 0x1, 0x1, 0xff, 0x68}, 0x11d, &(0x7f0000000080)={0x5, 0xf, 0x11d, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xf9, 0x6, 0x7, 0x0, 0x6, [0xc000, 0xff0030, 0x30, 0x3f30, 0xff3f00, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x30, "0711e583fbd80c0dea6172c72c36fc5a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x1a, 0x8}, @generic={0xd, 0x10, 0x3, "f2fd57fdb2294446a0ec"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a52bb9ef592685ffbf6da04ef128beea"}, @generic={0xb5, 0x10, 0x1, "61d4b5c2c549e45dbe196c1e57e9fc140fe588db2c3616a5ed08ea7df4a2ea29e809abcbf074fe8bde2a55c70dcd0175c4a7eb197d2f22c8b5381a53aee75c16ef1893cbb8005652c6a490bded4bfec872e3338c58988e23ef291a8f2458deecde97a141d6bd3a93a0b636ea94c7a65b71283b7dd0ddaa16ec17f14db95a9ca084b9fb8ebc4a9a32341269535496b1fa59d5d547af3cc1d3ba47778bcb7290eff6516cd34dff4f6e36938bb39886263879d2"}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x403}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "3a0e313e608f2d2f2aa69bea62c8a542f715b8fad4f4eed826cef9d6b31c50810945cc98e7b640a577514d0e2dedfca68eb6ac2ebce1bd9bc6"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1409}}, {0xb2, &(0x7f0000000340)=@string={0xb2, 0x3, "64bfbb30e78d118490fe6be67fd493ddfe45f967775e9834db6c91d15e4acff79ca932145dc606071ed0694649fea9506fc1baad19e5586f2de8b766b2da45fa30322ba6211958ca13255a8555276da235c8825d00098ef3b8a0bc66fdee3a43c911b64105e6320462d23a2235ce4c00f478e267fed6a8fd1cd60d57b3b832e1436b71ec9aaf86e3754a2924a5d6e7d2acc97d86c11a1d561cfab3d146312009bbe2ce411ed3b5b79e8a047de6b02e15"}}]}) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 64) 8m57.779575515s ago: executing program 2 (id=161): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x2, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0x8000000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1e, @broadcast}, 0x10) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000000c0)={0x40000}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x4) r3 = openat(r2, &(0x7f00000002c0)='./file0\x00', 0x282c41, 0x12) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x14) write$6lowpan_control(r4, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 0', 0x18) flock(r3, 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000040)={0x7fffffff, 0x496, 0x3, 0xd0, 0x9, 0x9}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_S390_VCPU_FAULT(r6, 0x4008ae52, &(0x7f0000000000)=0xfffffffffffff001) 8m57.654551906s ago: executing program 2 (id=162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xe, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) 8m50.850047869s ago: executing program 32 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r2, @ANYRESOCT=r0], 0x15) mount$9p_fd(0x0, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) fanotify_init(0xf00, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x0, 0x21, 0x17, {0x17, 0x30, "12f154d875a89284033c8f1b8e83c503d0683a8b34"}}, 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto$phonet(r3, &(0x7f00000002c0)="df5e33ae1612e32edbb03a24fa3641f45b9356df60e70fb0631458d6df35310ae196fa7771ba7fba7a8e0ff8ac5bc2045cb3f5d076a422603c4222409250bc6632e7734d46348200000000002319c7c3d2e04c196c09e20c2c73957483c30ee614b613f1ad47d4a506000000000000000002000000", 0x75, 0x20040000, 0x0, 0x0) 8m42.403727417s ago: executing program 33 (id=162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xe, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) 4m51.190089124s ago: executing program 3 (id=1296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2, 0x3, 0x5) setsockopt(r2, 0xff, 0xfffffffe, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 4m50.958325197s ago: executing program 3 (id=1298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={r2, 0x1, 0x42, 0x5, 0x6d9, 0x3ff, 0x0, 0x9, {r2, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0xfffffe00, 0x7, 0x0, 0x5}}, &(0x7f00000004c0)=0xb0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000032680)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1ddab8e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789a31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df461e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe52904001802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71807f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d00a3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e033f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c78ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000a86a0000000000000500000a06000000090a010400000000000000000a00000009000100733100000000085e009b200000020900020073797a310000100008000a40fffffffc0800034000000014400000000c0a010100000000000000000a0000060900020073797a31005323f1790000000900010073797a310000000014000380100000800c00018006000100d10300001400000011000100"/174], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r0) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0) 4m47.892734637s ago: executing program 3 (id=1311): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) getdents64(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0xa5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'vcan0\x00', @local}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (async, rerun: 64) write$tun(r4, &(0x7f0000000280)=ANY=[], 0xc2) (async, rerun: 64) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[], 0xffdd) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002000000ffffffff0000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc000000000000000000000000000001013500000200730001800000040000000700000000000000000000000000000000000000000004d33c00000002000000640101020000000000000000000000000635000002030700050000000300000007000000ac1414aa000000000000000000000000000004d43200000002000000fe8000000000000000000000000000bb0235000010"], 0x1fc}}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="002185"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m44.809117389s ago: executing program 3 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000600)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1000}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}], [{@smackfshat={'smackfshat', 0x3d, 'tmpfs\x00'}}, {@fsname}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'tmpfs\x00'}}, {@fowner_gt={'fowner>', r3}}, {@obj_type={'obj_type', 0x3d, '[,'}}, {@fowner_lt={'fowner<', r4}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x10f, 0x1, 0x0, &(0x7f0000000300)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 4m44.699592319s ago: executing program 3 (id=1333): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'jitterentropy_rng\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4, 0x10}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4, 0x10}, 0xc) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0x10000000000a) (async) ioctl$I2C_TIMEOUT(r0, 0x702, 0x10000000000a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x300, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x7c}}}}, [@NL80211_ATTR_NAN_FUNC={0x2d8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e99ff320ad66"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2a0, 0xd, 0x0, 0x1, [{0x39, 0x0, "3fd1d15aca8a09e3e8c6d5727c1ab6178161d48c398f8ee848328a05fa58f0c77d44806df37a114a8e530ddb83b26eef1ad592bb6b"}, {0x45, 0x0, "4672bcaaedcaccc59ead274245a7afec48e48e0ce71728dbbe8874d7fc42d8b2324cd91e3a38a30803efb263565e40fbb25177d9739f2fe465dcd658dc3d351143"}, {0x4}, {0x29, 0x0, "a9a72dbee3b9e34784b8878e7374b137c079accb7100eafbaaf4def1cebc0b02838711d54c"}, {0xf5, 0x0, "01e4910b3454869f68dcf5659112b184088899ccf20668d0d8a62c55c17cd89390e0fe23d9c6851e6133e33d260bca03a0866120a35f656ee260c44da1eeb4103c0e53240d842ad517366b99402d0eb19da26e9f0e3455412eb908f21ccfe56f2a33fe14caa056c4df614d30ac60c50ea60a79fd030f6e6f5da52c6c70dbb122d71954a3f7e638ffd82e254d241aaec810f073ac7dfc15213eb7d46011a7b84974dbfbd1c5513a94e98fd12ceb6614f09fbad40011d586ee316d67cad89fc1c19fb1480c03b82b4a88f813cca7a5efaee0c1e660151a3e249ab3420c0d5091cf995e0e13096ceded9f7a8ea6ae14495635"}, {0xe9, 0x0, "acc190597ee8022486b26765a6b94dda35b95dae6b520a9f905be0b447e769755038f1dfb56804c0f71661dee075092718accf7dfba22b66c6d72307ceac4aa93ef84f7da653b78a901a6684ee4e9a86ccb9280b85b6aed9e6a65ededf1e885f4d0e15fdfd4019d24cb08700cc8bd2b5866ce57cdc067a0b19c0679d9ed0d04553e55a88b93abe08b4e3cc3c3e49a3cfcb9e55c5c690ce743b583cda1e71cd8fc382e71182350d1e4c4f1c47f756bee8073ef1cb60a01759aeba581df3d261e510c7992041249546cc48c1179502bcc4eff58fb82dba3d92876dd164364829e8b2a028f47b"}, {0x4}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xa}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xd}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}]}, 0x300}, 0x1, 0x0, 0x0, 0xa0}, 0x91) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x70) accept4$alg(r4, 0x0, 0x0, 0x80800) 4m44.274580573s ago: executing program 3 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0305602, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x1, &(0x7f00001e8000/0x3000)=nil, &(0x7f0000839000/0x1000)=nil, 0x1, 0x0, 0x0, 0x56, 0x4b, 0x0, 0x5a, 0x5e}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080005000700020006000ac00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@arm64={0x8, 0x8, 0x9, '\x00', 0x7fff}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000200)={0x8, 0x12, 0x6, 0x5}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB=' \x00\x00\x00+\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x20}}, 0x8000) 4m44.096346217s ago: executing program 34 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0305602, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x1, &(0x7f00001e8000/0x3000)=nil, &(0x7f0000839000/0x1000)=nil, 0x1, 0x0, 0x0, 0x56, 0x4b, 0x0, 0x5a, 0x5e}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080005000700020006000ac00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@arm64={0x8, 0x8, 0x9, '\x00', 0x7fff}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000200)={0x8, 0x12, 0x6, 0x5}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB=' \x00\x00\x00+\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x20}}, 0x8000) 3m22.71471337s ago: executing program 5 (id=1848): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x4180) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7ff, 0xcc87, 0x56, 0x2, 0x7fff, 0x4, 0x73}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f00000000c0)=0x5) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x1, 0x8000, 0x5, 0x9, 0x8, 0x5, 0x4ddc, 0x100, 0xffffffff00000001, 0x1, 0x34d, 0x101, 0x8, 0x9, 0x80000000, 0x3], 0x1, 0x80000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x1, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/100, 0x64}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/255, 0xff}], 0x5) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000640)=@s={0x5, @generic=0x9, 0x9, 0x8c}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x6a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000889}, 0x804) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0xda530000) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @pic={0x7, 0x7, 0xd, 0x6, 0xc, 0x2, 0x1, 0x24, 0x2, 0xd, 0xfb, 0x8, 0x5, 0x5, 0x9, 0x3}}) fsetxattr$security_ima(r2, &(0x7f0000000a40), &(0x7f0000000a80)=@v2={0x3, 0x3, 0x4, 0x5, 0xd7, "4a3dcf35f1ade42821ee6f05d429ce789b469325a82112e9138e12bf52c602086227f7c8fdaa2f26419859dd8f18c542235e8d42a14217360030dc855ab7b95149d254cb8339a39670d409c827c1e4966356d4915af83aef55e04e0dbcc5453da438fcaf6aa8d1098c47e3a4a3c31eb10ba548fcbe4c07f9d14e37707f2c98952f07a7b11a9dda69f6cd61c308c4d80296573f2fe1dbab3ef20d3d101f5d09f5dca8687ac6e426f418a4ed13db3d7f6550ed2b4e5a2e505c2ca7e3e1372a64c76adccef15f56a331f2628ad6149c9faca66de792b7650b"}, 0xe0, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000b80)=0x1) r6 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x14000) r8 = syz_open_dev$usbmon(&(0x7f0000000d00), 0xffffffffffffffff, 0x50000) ioctl$MON_IOCQ_RING_SIZE(r8, 0x9205) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$802154_raw(r7, &(0x7f0000000d40)={0x24, @none={0x0, 0x2}}, 0x14) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008880}, 0x80) write$P9_RSTATu(r6, &(0x7f0000001180)={0x6e, 0x7d, 0x2, {{0x0, 0x53, 0x80, 0x693c, {0x8, 0x4, 0x8}, 0x40080000, 0x10001, 0x5, 0x4, 0xc, '/dev/userio\x00', 0x6, 'wlan0\x00', 0x8, 'nl80211\x00', 0x6, 'wlan0\x00'}, 0x6, 'wlan0\x00'}}, 0x6e) 3m22.554662054s ago: executing program 5 (id=1852): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x5, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000001c0)={0xfa, "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"}) 3m22.485945249s ago: executing program 5 (id=1854): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m20.764905827s ago: executing program 5 (id=1870): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0x8000004, 0x0, "7eb07d82287af45095b338f9ebf9b45c9041dbac2c227be9b033f71f8edccf09"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) shutdown(r1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0x8000004, 0x0, "7eb07d82287af45095b338f9ebf9b45c9041dbac2c227be9b033f71f8edccf09"}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) chroot(&(0x7f0000000000)='./file0/../file0\x00') (async) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) shutdown(r1, 0x0) (async) 3m20.719886443s ago: executing program 5 (id=1871): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x485, 0x40000) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000003d7940c71a010019cc0102030109021b0001000000000904000001932cf400090588000000000000d7742e33ad35b956c72510f3f3e897c044b65e7ec211f09ef460a4e1746e57c52635be1faa6e4a22fd57ce166634421bd8cd98e2441c4797c35e958dbdc4f24e56cdaa75cb46678f7c9a1ef134205f808826bcc32df7ef3cba2c01de8fe7fe9aa54860603f0ed486bdb71d035163a0c7df53055bb82d43999c319eda00"/199], 0x0) 3m19.84725834s ago: executing program 5 (id=1877): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$setregs(0xf, r2, 0xf8, &(0x7f0000000000)="65ee4a67f3e2130e86de7d5dde28b8b4d29b") (async) ptrace$cont(0x20, r2, 0x0, 0x0) (async) ptrace$cont(0x1f, r2, 0xf07, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20048081}, 0x200080c1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 3m19.332271896s ago: executing program 35 (id=1877): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$setregs(0xf, r2, 0xf8, &(0x7f0000000000)="65ee4a67f3e2130e86de7d5dde28b8b4d29b") (async) ptrace$cont(0x20, r2, 0x0, 0x0) (async) ptrace$cont(0x1f, r2, 0xf07, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYBLOB="49697f1a73888ed1fa38d202bfbafaee2f763d481963933a62a29937c42ac9d1fe683fea77aa882e28f702f5e0894ab436659e775ef9c939f78ccef7104144af0821b177acf90a24316f132e70a65d1c202cc98b993ff630db92de61241b57979ec39bd31831dda8a8cede92fe79842d6022157701cd291f81e7b4bc937486f157712560d0de0889d7537aa10924642f1cb64b02c2f6c870a1098e3595978628a17c29c8b8849795d9d480d33295b2b36aa96e4206ac2eb54a16302dfef106ebb5ec894259cf9abb8d1ea40b1dff77dfb2b3a8c552a65e22c4bdb85fc0a4e80b1957ee852ed58128ff068f6983144a20149733984d2aab455d688f7454205c3e1c462bced6db6f2868d50eee7bbe38db08912101f2da9af05fe03a42e0849fb7567057480d8861a8297d7cad915f7c64a686c0b26c157c28c21e90a0084b55bee33510642f0d2a6accaa328aa33ad40e648cb1ecb0d3a8bf18190777386267861137647df5cf28762a9b9227a3e85d38b45ee82e55cf"], 0x20}, 0x1, 0x0, 0x0, 0x20048081}, 0x200080c1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 1m30.674694382s ago: executing program 4 (id=2490): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000001c0)={0xfa, "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"}) 1m30.621013652s ago: executing program 4 (id=2491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) sendmsg$sock(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4054) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x4}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f00000002c0)) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz '], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004980, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r6, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x5, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xc, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_PMU_CAPABILITY(r5, 0x4068aea3, &(0x7f0000000040)={0xd4, 0x0, 0xff}) 1m30.460882402s ago: executing program 4 (id=2494): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="120110013e083f10cc04332558fc010203010902240001050940190904"], 0x0) 1m29.142800447s ago: executing program 4 (id=2497): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close(0x4) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r1, 0x0, 0x0, 0x3}]) 1m29.003052981s ago: executing program 4 (id=2498): r0 = socket$inet(0x2, 0xa, 0x9) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@local, @broadcast}, &(0x7f0000000040)=0x8) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x80) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/46) (async) splice(r1, &(0x7f0000000100)=0x61e, 0xffffffffffffffff, &(0x7f0000000140)=0x6, 0xffffffff, 0x1) (async) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async) r2 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x4, 0x0, r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)='./file0\x00', 0x7ff, 0x4000, 0x1}) (async) lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@random={'system.', '/dev/snd/controlC#\x00'}, &(0x7f00000003c0)='\x00', 0x1, 0x2) (async) close_range(r0, r2, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, 0x3, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc66}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x37a}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x80c2) (async) r4 = memfd_secret(0x80000) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x40008, &(0x7f0000000600)={[{@index_on}, {@nfs_export_off}, {@nfs_export_on}, {@redirect_dir_on}, {@uuid_off}, {@redirect_dir_follow}, {@xino_off}, {@userxattr}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@seclabel}, {@subj_user}, {@fowner_lt={'fowner<', r3}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_measure}, {@hash}, {@audit}, {@euid_lt={'euid<', r3}}, {@smackfsdef={'smackfsdef', 0x3d, '+.'}}]}) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x4, 0xfd, 0xb, 0x81, 0x51, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x700, 0x9, 0xb}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x130, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ac0)={'veth0_to_team\x00'}) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000b80), 0x2, 0x2) (async) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) (async) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000bc0)={0x2, r4}) (async) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$alg(0x26, 0x5, 0x0) (async) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000c00)) read$FUSE(r4, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r2, &(0x7f0000006480)={&(0x7f0000000c40)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc, &(0x7f00000061c0)=[{&(0x7f0000002d80)={0x2264, 0x3e, 0x300, 0x70bd25, 0x25dfdbff, "", [@nested={0xc, 0x79, 0x0, 0x1, [@typed={0x4, 0x20}, @nested={0x4, 0x10d}]}, @typed={0x4, 0xe5}, @generic="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", @generic="96eb5d393bda4a4e", @generic="7772964d90c4b19c69d4c30f03d72d3298f7ef50e18c9814b85d169de2e4485f5d454554a1947e2a41eaf171d32a8d06493c79909d31cbc8a843daa80bc26888f755db6d69d86e4cfdac9e8f83be5d8766afac3aa1d4790d0291d2dd2c783efb0fac2014317884ef16ca4cf3e31b354e1706b05bbd29ecb3da8f65892033ceabbf860eb2be65f8e18e0a5632af0627437230a4ab76f8de5b79", @typed={0x8, 0x28, 0x0, 0x0, @pid=r12}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x9c, 0x0, 0x0, @uid}, @nested={0x10a2, 0x146, 0x0, 0x1, [@nested={0x4, 0x2}, @nested={0x4, 0x77}, @typed={0x8, 0x136, 0x0, 0x0, @u32=0x7}, @generic="a077457b9444ee70308fb7302b409193e0f257cf2ac2d69f9e21c63ec7e8caf1b89600b97d9b1e9392e9af45ada3cf52085946483daa8f21d2ef52ed733d975a654b826227007acdb44841f1ea4931aa29cb32ca57d3bb2acdc872815ff249094136d143266d8cdca0f318dd8dcf6c7b3ee52088f1fe6a26d7c4669c3f60a90aee26f151b9e695b8357f", @nested={0x4, 0x41}, @generic="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"]}, @nested={0xe2, 0x141, 0x0, 0x1, [@typed={0x4, 0x23}, @nested={0x4, 0x129}, @typed={0x4, 0x4d}, @generic="bb93b8896d115f9be309a7f8a37660d1b8a1f7ef8f87cb06bd96c585cf8d7863e43ea95b7820997c4ecaac8ef8ec3ddb5f1cbd75390c80d5c2498f7749642e189bdf1e74f2fef01a3fbafebbeb907cb2a7c1492bd5432fcbe2fc4f6cdd2911c191a6dfa19ac84ba7ab1311fabe643e871250d89bf168ec30bb4f4bb1b9f2067a4f8eb40c16eacff79fa195e3e0b24b59515b9095f0c3aa67ffba0679b3dc58ed155444642771f7425a059b1a9a94c591a1c61971fdc609dc1a341af5", @generic="b7e6", @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xb, 0x132, 0x0, 0x0, @str='%/..-:\x00'}]}]}, 0x2264}, {&(0x7f0000005000)={0x11b0, 0x3a, 0x300, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x108, 0x0, 0x0, @u64=0x8}, @nested={0x1194, 0xd2, 0x0, 0x1, [@generic="43f226a5ed5f3d79ad760b95c6512827750da9bf9834c767a33015e1a313e84f08d71a052ab9cdc9af875b71658f254746a2972785ec8b4a740195fcc2135c079c", @generic="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", @nested={0x4, 0xd6}, @generic="3c522b48a664ff976f7acee87fafa643491caad6837e2b1cf83bf9aae29af9ba50d63f5030dea57d2b89fc2f3313633068da04c2c2eb761030ef7077c4f81cf32f2e37ec29514a7a78f7ebaba1a99cd3fb4ad5119d1e7df0369de6df0b2511b42fc247a601a24409806102dda4db5305e569c6aab35e7b02d467bcaecccddbf309187be8a65b2d06c62efa79f3b04577969789e904c381627df06f8028eb", @typed={0x4, 0x150}, @generic="27a1b5a1f4007faf66fdf91848ccf7d33c23c6d8c1904256f73b51fb539f66204e0ebce6cb0c4d0059a0198ebaa5426dcb3ec158471f0fef83b12aee44a0f1e42d9f88386922e27bc3648574683adc5c4974c7a7cacda8ad58e6938b6c950c766418c5e29d40e7b2863638dd06041e60dd68c238ccbfad4a5c405a398ffa605e79071b952e72b5182a7ea52ac4448d1a6e6dc2503408ac7b5674d1e279b67c1686", @typed={0x8, 0x72, 0x0, 0x0, @u32=0xe}]}]}, 0x11b0}], 0x2, &(0x7f0000006380)=[@rights={{0x24, 0x1, 0x1, [r11, r10, r11, 0xffffffffffffffff, r10]}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r9, r1, 0xffffffffffffffff, r10]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3}}}, @rights={{0x1c, 0x1, 0x1, [r11, r10, r11]}}, @rights={{0x1c, 0x1, 0x1, [r4, r0, r11]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r11, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8, 0x44004}, 0x4004) 1m28.714605265s ago: executing program 4 (id=2502): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x5) (async) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r3) (async) r4 = dup(r3) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x7}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x5, 0x8000000000000000}) (async) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x5, 0x8000000000000000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x80}, {0x5, 0x4, 0x0, 0x0, 0x2, 0xfd, 0xfd, 0x7, 0x0, 0x0, 0x44}, {0x200002, 0x80, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}], 0x2000003}) (async) ioctl$KVM_SET_PIT(r6, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x80}, {0x5, 0x4, 0x0, 0x0, 0x2, 0xfd, 0xfd, 0x7, 0x0, 0x0, 0x44}, {0x200002, 0x80, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}], 0x2000003}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000001001c00000008000226e54e50cd9cae12433cec36b4dc468f92879845fab81332263d6ab78a1800"/69], 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000001001c00000008000226e54e50cd9cae12433cec36b4dc468f92879845fab81332263d6ab78a1800"/69], 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) (async) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getpgid(0xffffffffffffffff) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0x1000c, 0x4, 0x23}, 0xb62d18fbf43bc210, 0xfffffffe, 0x0, 0xc, 0x0, 0x6}}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x7}) close_range(r12, 0xffffffffffffffff, 0x0) 1m28.475372322s ago: executing program 36 (id=2502): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x5) (async) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r3) (async) r4 = dup(r3) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x7}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x5, 0x8000000000000000}) (async) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x5, 0x8000000000000000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x80}, {0x5, 0x4, 0x0, 0x0, 0x2, 0xfd, 0xfd, 0x7, 0x0, 0x0, 0x44}, {0x200002, 0x80, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}], 0x2000003}) (async) ioctl$KVM_SET_PIT(r6, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x80}, {0x5, 0x4, 0x0, 0x0, 0x2, 0xfd, 0xfd, 0x7, 0x0, 0x0, 0x44}, {0x200002, 0x80, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}], 0x2000003}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000001001c00000008000226e54e50cd9cae12433cec36b4dc468f92879845fab81332263d6ab78a1800"/69], 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000001001c00000008000226e54e50cd9cae12433cec36b4dc468f92879845fab81332263d6ab78a1800"/69], 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) (async) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getpgid(0xffffffffffffffff) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0x1000c, 0x4, 0x23}, 0xb62d18fbf43bc210, 0xfffffffe, 0x0, 0xc, 0x0, 0x6}}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x7}) close_range(r12, 0xffffffffffffffff, 0x0) 1m1.098955427s ago: executing program 1 (id=2702): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x50) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r0]) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) write$sysctl(r1, &(0x7f0000000000)='1\x00', 0x2) ftruncate(r1, 0x2007ffc) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', 'tmpfs\x00'}, &(0x7f00000002c0)='[\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m1.013823749s ago: executing program 1 (id=2705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x68001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r3) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES32=r1]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x34, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x7, 0x8, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x8080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000ffffffefffffaaaaaaaaaabb08004500001c00000000002f9078ac1e0101ac1414aa00000000004090780400000040000000000000000000000031a1f965d39ad6d14eb367e0e641eb0feea5f165bdbbe6a752419b55277871877e3bd39c524ddd9c02c1d19add00fbc545f6ae3f5835ea478af7fe9097979c5f5d4a10b606cff71ece67a022623a03f8b0f7b67797c06f6b84d18c537c4ddfec8f"], 0x3e) 1m0.87490324s ago: executing program 1 (id=2706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3001000000080004400000000a080009400000000308000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aba4ff8d96d83cab5b5d2"], 0x90}}, 0x0) 1m0.874468573s ago: executing program 1 (id=2707): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) 1m0.824222655s ago: executing program 1 (id=2709): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00', @ANYRES16, @ANYBLOB="01400000000000000000067400062c"], 0x78}, 0x1, 0xffffffff00000003}, 0x4000010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 1m0.742915265s ago: executing program 1 (id=2711): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x41, 0xe, 0x3, "d59788"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x3, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000207d1e9c31a384b9dbfd49e734d00000000000010902240001000000000904000001030002000921000000012205000c276f0e6467286b0b1b9ec26ed7fb19e2353ca0e2c5968492acc7b941055d491d53723efbc3318fc569c1344f336f426330c4aab30c62e34ff4e15a206d85599d532b43c4517e6d99e0bc947da1559afa97e10000"], 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) listen(r5, 0x100101) r6 = accept4(r5, 0x0, 0x0, 0x80800) listen(r6, 0x5) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) 45.212945877s ago: executing program 37 (id=2711): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x41, 0xe, 0x3, "d59788"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x3, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000207d1e9c31a384b9dbfd49e734d00000000000010902240001000000000904000001030002000921000000012205000c276f0e6467286b0b1b9ec26ed7fb19e2353ca0e2c5968492acc7b941055d491d53723efbc3318fc569c1344f336f426330c4aab30c62e34ff4e15a206d85599d532b43c4517e6d99e0bc947da1559afa97e10000"], 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) listen(r5, 0x100101) r6 = accept4(r5, 0x0, 0x0, 0x80800) listen(r6, 0x5) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) 5.303404847s ago: executing program 6 (id=3574): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x2}) (fail_nth: 2) 5.235062734s ago: executing program 6 (id=3577): syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.103496437s ago: executing program 6 (id=3582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) close(r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000240)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="b2", 0x1, 0x8044, &(0x7f0000000040)={0xa, 0x4e22, 0x80398, @empty, 0xfffffffe}, 0x1c) 1.748950521s ago: executing program 7 (id=3658): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 1.434391753s ago: executing program 8 (id=3665): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0x3, 0x2, {{0xb, 0x4, 0x0, 0x1, 0x2c, 0x65, 0x0, 0x81, 0x4, 0x0, @multicast2, @remote, {[@noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xd6, [@local, @private=0xa010100]}, @noop, @cipso={0x86, 0x6, 0x3}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg1\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000020a40)={'gre0\x00', 0x0}) sendto$packet(r3, &(0x7f00000003c0)="14042bfdd9fc03fc01004788031c", 0xe, 0x40044, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) 1.383861354s ago: executing program 8 (id=3666): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) 1.303024882s ago: executing program 8 (id=3667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.144816943s ago: executing program 7 (id=3668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.143665625s ago: executing program 8 (id=3669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040084) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r3) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.089272573s ago: executing program 9 (id=3670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3001000000080004400000000a080009400000000308000340000000000900010073797a300000000009000200"], 0x90}}, 0x0) 1.063204732s ago: executing program 7 (id=3671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xdc) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x1b278ab8}) 992.050609ms ago: executing program 9 (id=3672): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) 886.80482ms ago: executing program 9 (id=3673): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r1 = fsopen(&(0x7f0000000380)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @private1, 0xd}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000003c0)="fd2f8bbc63ac748aed7860335f607f0677d7654d594ebf8051fe0ccc2f0bfbf3b9de6feb9d3e9abe5b864e7f118a3ba3ebfa345d3d6e670e889f78e3ec861cbeccc6588dd863ce8f2751508b0a17e643452551abade150b684904d43b94c17db4dd0bf99af4691eaff1f605cb42e3c68c97e0dcc7fd984413453d19bf23ebbf1531c9149828893c1762c538cae464930817dd20c6691846ed06c73fd6b8aee38d31f3cbb9741d06fc5036e577f10baa53ca7a1d34ce3ca3afe500e14b332f467bef1e570289e96f611ce121e75", 0xcd}], 0x1, &(0x7f00000004c0)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x5c, 0xa, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x8, [0x7]}}, @jumbo={0xc2, 0x4, 0x100}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x2f, 0x14, 0x1, 0xd, 0x0, [@mcast1, @rand_addr=' \x01\x00', @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, @private0, @empty]}}}, @dstopts={{0x168, 0x29, 0x37, {0x8, 0x29, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}, @jumbo={0xc2, 0x4, 0xe}, @calipso={0x7, 0x28, {0x2, 0x8, 0xc, 0x5, [0x663d, 0x2, 0x8, 0x7f]}}, @generic={0x6c, 0xde, "db2be0109c3903bfadba965d02b62c6c5025d142052fb8603728c4d864eaade28a8f66d00555978eaa43d8a7a4e24f0c3e941e51151ebb46c91c52aede1e84c499fdcb437994b453453b2b0660738f49e982146b1c621b9b5a51ff582d6157775378cd2194a5bfc0a8be04fb5dff00fa30c184d8862b3ee943c15ff3422382831e6e126ec17354418648b86fe4e0b5a320c2230409e53fff95b88e9a4c3806d98697cb37a5ab738688953cabc69924f0309be662e0b079d816e60496487f98cf7ec088d4268c7fa221253929aad2f16c0b4d7fc0ad05c60f1b4944bc439c"}, @generic={0x80, 0x11, "b11d00f59a338109e8fed8370c9dcc89db"}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x3ff}]}}}], 0x2c0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rthdrdstopts={{0xc0, 0x29, 0x37, {0x3c, 0x15, '\x00', [@ra={0x5, 0x2, 0x7402}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x48, {0x3, 0x10, 0x5, 0x1, [0x4, 0xffffffffffff8001, 0x3ff, 0x4352, 0x401, 0x8000000000000001, 0xe2, 0x0]}}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x7ff}, @ra, @hao={0xc9, 0x10, @private0}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x8a, 0x0, [@private0={0xfc, 0x0, '\x00', 0x9}]}}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x5e, 0x1e, '\x00', [@generic={0x12, 0xee, "6c592f6e3a2a2f605b844b874ee93193470c861b5de8da8f5393d7ee876a1723b36e4fa3e1ca10544142936f546723198ba6d4922dc254634f174fb76e154d1f019d034b898fe5c33febcbc619f75f8ab6861631dab834d978c762d71eabcd08e0f3b824980fc487e88acf4ff3a556f10be6713143366bf64135d60cff4262b3cffac3dbfe8286eabc33bfed86ac8a2b7b05158e06d86295efcc4e19db2a067d38386b10319bc5f0b633d3be5f05d92a469f9958b0977b05ce4d6c890943cb8429ae9343262779cf1353f59f8deb3d8a78e3bcd5f4a2e2a78d30595f705e77e41ee458f97535342d39fe8e0f1b46"}, @enc_lim={0x4, 0x1, 0xc}]}}}], 0x1f8}}], 0x2, 0x24000080) 850.064179ms ago: executing program 9 (id=3674): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 789.264891ms ago: executing program 9 (id=3675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) close(r9) close(r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000240)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="b2", 0x1, 0x8044, &(0x7f0000000040)={0xa, 0x4e22, 0x80398, @empty, 0xfffffffe}, 0x1c) 708.282978ms ago: executing program 9 (id=3676): r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xb8, &(0x7f0000000380)={[{0xb1, 0x4e00, "063771994d29d420f6ba039523abccbf45b9448f31fcbc7858ee90b927d25bd816bab99549eab08fe881162c4b77a8e9f449b7fdae94c7607253067efbb172987e620b4c0c662b2f0955d6666e6edcaed6287baafbfc9ada33d3d01cd250eeb4d39896940da35c6a021bebd5897fb7384037fb1bc61dc2194e4e6429cc2d077f7d6d27c5c8a0c59043afbc63ca72bae431c3b69159b8a186814453e4cf1c6a9eb7b8b9a4ca4c7dd138322948ff0b2ee9da"}]}) 434.957496ms ago: executing program 8 (id=3677): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c"], 0x24}], 0x1}, 0x0) (fail_nth: 2) 400.046538ms ago: executing program 8 (id=3678): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x4, @any, 0xe0}, 0xe) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) syz_usb_connect$cdc_ncm(0x2, 0x98, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x9, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9f8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xffff, 0x6}, {0x6, 0x24, 0x1a, 0x5, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x27}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x5, 0xac}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x0, 0x81}}}}}}}]}}, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)={[{@noswap}]}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x838422, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000100)=@t={0x81, 0x3, 0x0, 0x4, @generic}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 279.07347ms ago: executing program 7 (id=3679): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c80)={0x8, 0x0, [{0x4000, 0x63, &(0x7f00000002c0)=""/99}, {0x4, 0x16, &(0x7f0000000000)=""/22}, {0x8080000, 0xce, &(0x7f0000000dc0)=""/206}, {0x0, 0x42, &(0x7f0000000880)=""/66}, {0xeeef0000, 0x5e, &(0x7f0000000940)=""/94}, {0xe6e49000, 0x8d, &(0x7f00000009c0)=""/141}, {0x3000, 0xe4, &(0x7f0000000a80)=""/228}, {0x80a0000, 0xe3, &(0x7f0000000b80)=""/227}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x4}) 262.813685ms ago: executing program 6 (id=3614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b00"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 131.001205ms ago: executing program 7 (id=3680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3001000000080004400000000a080009400000000308000340000000000900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x90}}, 0x0) 91.668898ms ago: executing program 7 (id=3681): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x4000010) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x70) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c1cedad21e9"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 54.580728ms ago: executing program 6 (id=3682): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r1 = fsopen(&(0x7f0000000380)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @private1, 0xd}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000003c0)="fd2f8bbc63ac748aed7860335f607f0677d7654d594ebf8051fe0ccc2f0bfbf3b9de6feb9d3e9abe5b864e7f118a3ba3ebfa345d3d6e670e889f78e3ec861cbeccc6588dd863ce8f2751508b0a17e643452551abade150b684904d43b94c17db4dd0bf99af4691eaff1f605cb42e3c68c97e0dcc7fd984413453d19bf23ebbf1531c9149828893c1762c538cae464930817dd20c6691846ed06c73fd6b8aee38d31f3cbb9741d06fc5036e577f10baa53ca7a1d34ce3ca3afe500e14b332f467bef1e570289e96f611ce121e75", 0xcd}], 0x1, &(0x7f00000004c0)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x5c, 0xa, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x8, [0x7]}}, @jumbo={0xc2, 0x4, 0x100}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x2f, 0x14, 0x1, 0xd, 0x0, [@mcast1, @rand_addr=' \x01\x00', @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, @private0, @empty]}}}, @dstopts={{0x168, 0x29, 0x37, {0x8, 0x29, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}, @jumbo={0xc2, 0x4, 0xe}, @calipso={0x7, 0x28, {0x2, 0x8, 0xc, 0x5, [0x663d, 0x2, 0x8, 0x7f]}}, @generic={0x6c, 0xde, "db2be0109c3903bfadba965d02b62c6c5025d142052fb8603728c4d864eaade28a8f66d00555978eaa43d8a7a4e24f0c3e941e51151ebb46c91c52aede1e84c499fdcb437994b453453b2b0660738f49e982146b1c621b9b5a51ff582d6157775378cd2194a5bfc0a8be04fb5dff00fa30c184d8862b3ee943c15ff3422382831e6e126ec17354418648b86fe4e0b5a320c2230409e53fff95b88e9a4c3806d98697cb37a5ab738688953cabc69924f0309be662e0b079d816e60496487f98cf7ec088d4268c7fa221253929aad2f16c0b4d7fc0ad05c60f1b4944bc439c"}, @generic={0x80, 0x11, "b11d00f59a338109e8fed8370c9dcc89db"}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x3ff}]}}}], 0x2c0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rthdrdstopts={{0xc0, 0x29, 0x37, {0x3c, 0x15, '\x00', [@ra={0x5, 0x2, 0x7402}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x48, {0x3, 0x10, 0x5, 0x1, [0x4, 0xffffffffffff8001, 0x3ff, 0x4352, 0x401, 0x8000000000000001, 0xe2, 0x0]}}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x7ff}, @ra, @hao={0xc9, 0x10, @private0}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x8a, 0x0, [@private0={0xfc, 0x0, '\x00', 0x9}]}}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x5e, 0x1e, '\x00', [@generic={0x12, 0xee, "6c592f6e3a2a2f605b844b874ee93193470c861b5de8da8f5393d7ee876a1723b36e4fa3e1ca10544142936f546723198ba6d4922dc254634f174fb76e154d1f019d034b898fe5c33febcbc619f75f8ab6861631dab834d978c762d71eabcd08e0f3b824980fc487e88acf4ff3a556f10be6713143366bf64135d60cff4262b3cffac3dbfe8286eabc33bfed86ac8a2b7b05158e06d86295efcc4e19db2a067d38386b10319bc5f0b633d3be5f05d92a469f9958b0977b05ce4d6c890943cb8429ae9343262779cf1353f59f8deb3d8a78e3bcd5f4a2e2a78d30595f705e77e41ee458f97535342d39fe8e0f1b46"}, @enc_lim={0x4, 0x1, 0xc}]}}}], 0x1f8}}], 0x2, 0x24000080) 0s ago: executing program 6 (id=3683): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) kernel console output (not intermixed with test programs): 7][ T5928] usb 2-1: config 0 has no interface number 0 [ 485.214607][ T5928] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 485.224967][ T5928] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 485.237998][ T5928] usb 2-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 485.251699][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.272487][ T5928] usb 2-1: Product: syz [ 485.276795][ T5928] usb 2-1: Manufacturer: syz [ 485.281439][ T5928] usb 2-1: SerialNumber: syz [ 485.292422][ T5928] usb 2-1: config 0 descriptor?? [ 485.305048][T22004] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 485.312888][T22004] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 485.328091][ T5872] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 485.405417][T22034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.415433][T22034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.430939][T22034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.440579][T22034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.466923][ T5872] usb 8-1: device descriptor read/64, error -71 [ 485.526905][ T5928] hub 2-1:0.219: bad descriptor, ignoring hub [ 485.533053][ T5928] hub 2-1:0.219: probe with driver hub failed with error -5 [ 485.567835][ T5928] option 2-1:0.219: GSM modem (1-port) converter detected [ 485.592072][ T5928] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 485.640011][ T5928] usb 2-1: USB disconnect, device number 56 [ 485.660791][ T5928] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 485.680405][ T5928] option 2-1:0.219: device disconnected [ 485.706738][ T5872] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 485.850138][ T5872] usb 8-1: device descriptor read/64, error -71 [ 485.936972][ T10] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 485.959597][ T5872] usb usb8-port1: attempt power cycle [ 486.064246][ T30] audit: type=1326 audit(6000067039.747:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22072 comm="syz.1.2116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdbe58eba9 code=0x0 [ 486.111054][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.122285][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.139584][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.154327][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 486.163846][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.177527][ T10] usb 7-1: config 0 descriptor?? [ 486.252275][T22080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.261748][T22080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.274484][T22080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.283726][T22080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.297541][ T5872] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 486.317532][ T5872] usb 8-1: device descriptor read/8, error -71 [ 486.556750][ T5872] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 486.582313][ T5872] usb 8-1: device descriptor read/8, error -71 [ 486.600045][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.608073][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.618304][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.632710][T22064] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 486.652614][T22064] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 486.663317][ T10] apple 0003:05AC:8102.0032: unknown main item tag 0x0 [ 486.676712][ T10] apple 0003:05AC:8102.0032: unknown main item tag 0x0 [ 486.683835][ T10] apple 0003:05AC:8102.0032: unknown main item tag 0x0 [ 486.698441][ T10] apple 0003:05AC:8102.0032: unknown main item tag 0x0 [ 486.701764][ T5872] usb usb8-port1: unable to enumerate USB device [ 486.705619][ T10] apple 0003:05AC:8102.0032: unknown main item tag 0x0 [ 486.724609][ T10] apple 0003:05AC:8102.0032: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.6-1/input0 [ 486.730136][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.749209][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.759735][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.768847][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.781992][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.791716][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.801833][T22064] wlan1 speed is unknown, defaulting to 1000 [ 486.867318][ T5872] usb 7-1: USB disconnect, device number 68 [ 486.960959][T22096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.983230][T22096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.000110][T22111] fuse: Bad value for 'fd' [ 487.004962][T22111] fuse: Bad value for 'fd' [ 487.012673][T22111] fuse: Bad value for 'fd' [ 487.065469][T22119] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 487.072040][T22119] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 487.082679][T22119] vhci_hcd vhci_hcd.0: Device attached [ 487.093820][T22120] vhci_hcd: connection closed [ 487.094104][T16539] vhci_hcd: stop threads [ 487.114241][T16539] vhci_hcd: release socket [ 487.119151][T16539] vhci_hcd: disconnect device [ 487.360368][T22133] Bluetooth: hci2: Frame reassembly failed (-84) [ 487.368606][ T1165] Bluetooth: hci2: Frame reassembly failed (-84) [ 487.369430][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'. [ 487.385076][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'. [ 487.394651][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'. [ 487.662575][T22147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.672748][T22147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.713115][T22154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.723979][T22154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.747283][ T5928] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 487.906917][ T5928] usb 7-1: Using ep0 maxpacket: 16 [ 487.914225][ T5928] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.925385][ T5928] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.943427][ T1165] wlan1: Trigger new scan to find an IBSS to join [ 487.958892][ T5928] usb 7-1: New USB device found, idVendor=1f6b, idProduct=0101, bcdDevice= 0.40 [ 487.974587][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.983051][ T5928] usb 7-1: Product: syz [ 487.987773][ T5928] usb 7-1: Manufacturer: syz [ 487.992387][ T5928] usb 7-1: SerialNumber: syz [ 488.393249][T22173] unsupported nlmsg_type 40 [ 488.403372][T22173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.413472][T22173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.847334][T16539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.059419][T22179] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2137'. [ 489.071184][T22179] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 489.453297][ T5862] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 489.455325][ T5876] Bluetooth: hci2: command 0x1003 tx timeout [ 489.642585][T22195] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2142'. [ 489.679125][T22195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2142'. [ 489.965078][T22203] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2143'. [ 490.677210][ T5928] usb 7-1: 0:66 : does not exist [ 490.721150][ T5928] usb 7-1: unit 4 not found! [ 490.846919][ T5928] usb 7-1: USB disconnect, device number 69 [ 490.974446][T19262] udevd[19262]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.489735][T22252] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2152'. [ 491.586922][ T5908] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 491.761154][ T5908] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 491.792731][ T5908] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 491.837275][ T5908] usb 7-1: Product: syz [ 491.841482][ T5908] usb 7-1: Manufacturer: syz [ 491.846091][ T5908] usb 7-1: SerialNumber: syz [ 491.896509][ T5908] usb 7-1: config 0 descriptor?? [ 491.915575][ T5908] ch341 7-1:0.0: ch341-uart converter detected [ 492.196755][ T5928] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 492.359571][ T5928] usb 8-1: Using ep0 maxpacket: 8 [ 492.418172][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880863dd800: rx timeout, send abort [ 492.424972][ T5928] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.456503][ T5928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 492.486832][ T5928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.509941][ T5928] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 492.521574][ T5908] usb 7-1: failed to send control message: -71 [ 492.539966][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.548500][ T5908] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 492.559927][ T5928] usb 8-1: config 0 descriptor?? [ 492.607486][ T5908] usb 7-1: USB disconnect, device number 70 [ 492.615415][ T5908] ch341 7-1:0.0: device disconnected [ 492.626790][ T845] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 492.647119][T22273] raw-gadget.7 gadget.7: fail, usb_ep_enable returned -22 [ 492.790747][ T845] usb 2-1: Using ep0 maxpacket: 32 [ 492.797887][ T845] usb 2-1: config 8 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.812545][ T845] usb 2-1: config 8 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.822953][ T845] usb 2-1: config 8 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.837007][ T845] usb 2-1: config 8 interface 0 has no altsetting 0 [ 492.844721][ T845] usb 2-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 492.882785][ T845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.892054][ T5928] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 492.926054][ T5928] usb 8-1: USB disconnect, device number 19 [ 492.926451][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880863dd800: abort rx timeout. Force session deactivation [ 493.061621][T22355] netlink: 'syz.4.2160': attribute type 3 has an invalid length. [ 493.083945][T22355] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2160'. [ 493.127208][T22299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.136160][T22299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.332008][ T845] usbhid 2-1:8.0: can't add hid device: -71 [ 493.359897][ T845] usbhid 2-1:8.0: probe with driver usbhid failed with error -71 [ 493.392231][ T845] usb 2-1: USB disconnect, device number 57 [ 493.489853][T22383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.501052][T22383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.596938][ T5928] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 493.750350][ T5928] usb 7-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 493.759585][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.772076][ T5928] usb 7-1: config 0 descriptor?? [ 493.780552][ T5928] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 493.787299][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 493.916784][ T10] usb 8-1: device descriptor read/64, error -71 [ 493.982322][ T5928] gspca_sn9c2028: read1 error -32 [ 494.126766][ T5872] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 494.156877][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 494.182696][T22407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.195723][T22374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.199288][T22407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.224513][T22374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.245196][T22374] lo speed is unknown, defaulting to 1000 [ 494.255274][T22374] lo speed is unknown, defaulting to 1000 [ 494.261917][T22374] lo speed is unknown, defaulting to 1000 [ 494.280636][T22374] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 494.296743][ T10] usb 8-1: device descriptor read/64, error -71 [ 494.296948][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 494.319986][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.322577][T22374] lo speed is unknown, defaulting to 1000 [ 494.331778][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.353727][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 494.365650][T22374] lo speed is unknown, defaulting to 1000 [ 494.369462][ T5872] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 494.381090][T22374] lo speed is unknown, defaulting to 1000 [ 494.382120][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.393916][T22374] lo speed is unknown, defaulting to 1000 [ 494.405460][T22374] lo speed is unknown, defaulting to 1000 [ 494.411099][ T5872] usb 2-1: config 0 descriptor?? [ 494.415407][ T10] usb usb8-port1: attempt power cycle [ 494.432838][T22374] lo speed is unknown, defaulting to 1000 [ 494.442030][T22374] lo speed is unknown, defaulting to 1000 [ 494.497792][ T5928] gspca_sn9c2028: read1 error -110 [ 494.503368][ T5928] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -110 [ 494.767866][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 494.799120][ T10] usb 8-1: device descriptor read/8, error -71 [ 494.824929][ T5872] logitech 0003:046D:C293.0033: nested delimiters [ 494.831787][ T5872] logitech 0003:046D:C293.0033: item 0 4 2 10 parsing failed [ 494.839906][ T5872] logitech 0003:046D:C293.0033: parse failed [ 494.845994][ T5872] logitech 0003:046D:C293.0033: probe with driver logitech failed with error -22 [ 494.890036][T22429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.901902][T22429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.971319][ T845] usb 7-1: USB disconnect, device number 71 [ 495.035864][ T5928] usb 2-1: USB disconnect, device number 58 [ 495.047065][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 495.087470][ T10] usb 8-1: device descriptor read/8, error -71 [ 495.197122][ T10] usb usb8-port1: unable to enumerate USB device [ 495.368229][ T845] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 495.442808][T22453] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2170'. [ 495.519727][ T845] usb 7-1: device descriptor read/64, error -71 [ 495.582160][T22459] misc userio: No port type given on /dev/userio [ 495.756759][ T845] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 495.828553][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 495.896893][ T845] usb 7-1: device descriptor read/64, error -71 [ 495.976881][ T10] usb 2-1: device descriptor read/64, error -71 [ 496.007528][ T845] usb usb7-port1: attempt power cycle [ 496.216878][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 496.349138][ T845] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 496.358274][ T10] usb 2-1: device descriptor read/64, error -71 [ 496.387889][ T845] usb 7-1: device descriptor read/8, error -71 [ 496.422187][T22471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.431635][T22471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.443245][T22471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.453542][T22471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.468973][ T10] usb usb2-port1: attempt power cycle [ 496.626942][ T845] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 496.649102][ T845] usb 7-1: device descriptor read/8, error -71 [ 496.759608][ T845] usb usb7-port1: unable to enumerate USB device [ 496.807223][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 496.837565][ T10] usb 2-1: device descriptor read/8, error -71 [ 496.946782][ T5928] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 497.087620][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 497.108489][ T5928] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 497.118141][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.129191][ T5928] usb 8-1: config 0 descriptor?? [ 497.133782][ T10] usb 2-1: device descriptor read/8, error -71 [ 497.259985][ T10] usb usb2-port1: unable to enumerate USB device [ 497.342853][ T10] usb 8-1: USB disconnect, device number 24 [ 498.136901][ T5963] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 498.283415][T22547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.293382][T22547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.308408][T22547] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2187'. [ 498.341302][ T5963] usb 8-1: config 0 has an invalid interface number: 116 but max is 0 [ 498.349947][ T5963] usb 8-1: config 0 has no interface number 0 [ 498.356069][ T5963] usb 8-1: config 0 interface 116 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 498.368674][ T5963] usb 8-1: config 0 interface 116 has no altsetting 0 [ 498.379099][ T5963] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10ad, bcdDevice=d8.bc [ 498.388500][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.396520][ T5963] usb 8-1: Product: syz [ 498.400858][ T5963] usb 8-1: Manufacturer: syz [ 498.405461][ T5963] usb 8-1: SerialNumber: syz [ 498.416230][ T5963] usb 8-1: config 0 descriptor?? [ 498.506937][ T845] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 498.631179][T22522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.647508][T22522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.674887][ T845] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 498.703182][ T845] usb 7-1: config 0 has no interface number 0 [ 498.721533][ T5963] usb 8-1: USB disconnect, device number 25 [ 498.738020][ T845] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 498.768061][ T845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.777158][ T845] usb 7-1: Product: syz [ 498.781343][ T845] usb 7-1: Manufacturer: syz [ 498.822029][ T845] usb 7-1: SerialNumber: syz [ 498.848618][ T845] usb 7-1: config 0 descriptor?? [ 499.059952][ T845] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 499.077067][ T5872] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 499.078140][ T845] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 499.096036][ T845] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 499.105823][ T845] usb 7-1: media controller created [ 499.126858][ T5963] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 499.147446][ T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.195183][T22598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.206421][T22598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.237601][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 499.244817][ T5872] usb 2-1: config index 0 descriptor too short (expected 8242, got 50) [ 499.254420][ T5872] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 499.265112][ T845] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 499.266752][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.288922][ T5872] usb 2-1: config 0 has no interface number 0 [ 499.295850][ T5872] usb 2-1: config 0 interface 234 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.307061][ T5872] usb 2-1: config 0 interface 234 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.318109][ T5872] usb 2-1: config 0 interface 234 has no altsetting 0 [ 499.328716][ T5872] usb 2-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=3c.a2 [ 499.339691][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.345303][ T845] usb 7-1: USB disconnect, device number 76 [ 499.353329][ T5872] usb 2-1: Product: syz [ 499.354061][ T5963] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.383387][ T5963] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.397491][ T5872] usb 2-1: Manufacturer: syz [ 499.402387][ T5872] usb 2-1: SerialNumber: syz [ 499.410628][ T5963] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.424059][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.436298][ T5963] usb 8-1: Product: syz [ 499.440831][ T5963] usb 8-1: Manufacturer: syz [ 499.441257][ T5872] usb 2-1: config 0 descriptor?? [ 499.445433][ T5963] usb 8-1: SerialNumber: syz [ 499.471429][ T5963] cdc_ncm 8-1:1.0: skipping garbage [ 499.479313][ T5963] cdc_ncm 8-1:1.0: NCM or ECM functional descriptors missing [ 499.491713][ T5963] cdc_ncm 8-1:1.0: bind() failure [ 499.503202][ T5963] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 499.510599][ T5963] cdc_ncm 8-1:1.1: bind() failure [ 499.661788][ T5963] usb 8-1: USB disconnect, device number 26 [ 499.670459][ T5872] ums-sddr09 2-1:0.234: USB Mass Storage device detected [ 499.757121][ T5872] ums-sddr09 2-1:0.234: probe with driver ums-sddr09 failed with error -22 [ 499.777856][ T5872] usb 2-1: USB disconnect, device number 63 [ 500.382888][T22673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.402808][T22673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.766746][ T5872] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 500.926725][ T5872] usb 8-1: Using ep0 maxpacket: 32 [ 500.933852][ T5872] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 500.947784][ T5872] usb 8-1: config 0 has no interface number 0 [ 500.955830][ T5872] usb 8-1: config 0 interface 12 has no altsetting 0 [ 500.965848][ T5872] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 500.978335][ T30] audit: type=1326 audit(6000067054.667:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22699 comm="syz.4.2201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9eb818eba9 code=0x0 [ 501.000746][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.009784][ T5872] usb 8-1: Product: syz [ 501.013972][ T5872] usb 8-1: Manufacturer: syz [ 501.019096][ T5872] usb 8-1: SerialNumber: syz [ 501.033300][ T5872] usb 8-1: config 0 descriptor?? [ 501.248904][T22686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.262253][T22718] syzkaller1: entered promiscuous mode [ 501.265838][T22686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.274807][T22718] syzkaller1: entered allmulticast mode [ 501.283143][T22686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.300588][T22686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.314850][T22686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.324644][T22686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.336355][T22686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.355152][T22686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.366118][T22686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.376094][T22686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.432797][ T5872] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 501.461983][T22740] netlink: 'syz.6.2207': attribute type 3 has an invalid length. [ 501.465576][ T5872] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 501.479092][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2207'. [ 501.500324][ T5872] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 501.531408][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.533875][ T5872] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 501.538067][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.558967][ T5872] usb 8-1: USB disconnect, device number 27 [ 501.736775][ T5946] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 501.789193][T22755] 9pnet: p9_errstr2errno: server reported unknown error tun [ 501.896727][ T5946] usb 7-1: Using ep0 maxpacket: 32 [ 501.904089][ T5946] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 501.913804][ T5946] usb 7-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 501.925366][ T5946] usb 7-1: config 0 has no interface number 0 [ 501.933433][ T5946] usb 7-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.947060][ T5946] usb 7-1: config 0 interface 196 has no altsetting 0 [ 501.956446][ T5946] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 501.967399][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.982240][ T5946] usb 7-1: Product: syz [ 501.986490][ T5946] usb 7-1: Manufacturer: syz [ 501.992693][ T5946] usb 7-1: SerialNumber: syz [ 502.005903][ T5946] usb 7-1: config 0 descriptor?? [ 502.111760][T22774] 9pnet_fd: Insufficient options for proto=fd [ 502.136109][T22776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.145517][T22776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.159933][T22778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.171136][T22778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.318900][ T5946] ipheth 7-1:0.196: Unable to find alternate settings interface [ 502.337326][ T5946] usb 7-1: USB disconnect, device number 77 [ 502.425395][T22798] netlink: 'syz.7.2215': attribute type 21 has an invalid length. [ 502.434589][T22798] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2215'. [ 502.446367][T22798] netlink: 'syz.7.2215': attribute type 21 has an invalid length. [ 502.454316][T22798] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2215'. [ 502.513650][T22803] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 502.525684][T22803] gfs2: error -5 reading superblock [ 502.542959][T22803] overlayfs: failed lookup in lower (newroot/49, name='file1', err=-40): overlapping layers [ 502.564784][T22803] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2216'. [ 502.755234][T22814] dlm: no locking on control device [ 502.761504][T22815] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2219'. [ 502.920763][T22828] netlink: 'syz.4.2223': attribute type 1 has an invalid length. [ 502.930597][T22828] netlink: 'syz.4.2223': attribute type 2 has an invalid length. [ 502.975004][T22830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.985126][T22830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.998871][T22830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.009185][T22830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.017636][ T5946] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 503.189678][ T5946] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.200906][ T5946] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.210845][ T5946] usb 8-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.223931][ T5946] usb 8-1: config 0 interface 0 has no altsetting 0 [ 503.230632][ T5946] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 503.239745][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.253415][ T5946] usb 8-1: config 0 descriptor?? [ 503.479846][ T5946] nzxt-smart2 0003:1E71:2009.0034: item fetching failed at offset 5/7 [ 503.489319][ T5946] nzxt-smart2 0003:1E71:2009.0034: probe with driver nzxt-smart2 failed with error -22 [ 503.536709][ T5963] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 503.618828][T22851] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2227'. [ 503.686214][ T5872] usb 8-1: USB disconnect, device number 28 [ 503.698904][ T5963] usb 7-1: Using ep0 maxpacket: 32 [ 503.718810][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.752063][ T5963] usb 7-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 503.784936][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.815862][ T5963] usb 7-1: config 0 descriptor?? [ 503.826137][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'. [ 504.116827][ T5872] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 504.266741][ T5872] usb 8-1: Using ep0 maxpacket: 32 [ 504.274084][ T5872] usb 8-1: config 0 has an invalid interface number: 180 but max is 0 [ 504.283206][ T5872] usb 8-1: config 0 has no interface number 0 [ 504.289548][ T5872] usb 8-1: config 0 interface 180 has no altsetting 0 [ 504.298962][ T5872] usb 8-1: New USB device found, idVendor=050d, idProduct=1202, bcdDevice=47.d7 [ 504.308143][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.316215][ T5872] usb 8-1: Product: syz [ 504.320548][ T5872] usb 8-1: Manufacturer: syz [ 504.325166][ T5872] usb 8-1: SerialNumber: syz [ 504.335538][ T5872] usb 8-1: config 0 descriptor?? [ 504.548636][ T845] usb 8-1: USB disconnect, device number 29 [ 504.861167][T22903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.874031][T22903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.139287][T22912] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 505.367137][ T5872] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 505.388594][ T845] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 505.444421][T22925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2237'. [ 505.454741][T22925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2237'. [ 505.464091][T22925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2237'. [ 505.520582][ T5872] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 505.529686][ T5872] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 505.540031][ T5872] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 505.546843][ T845] usb 2-1: Using ep0 maxpacket: 32 [ 505.552083][ T5872] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 505.557382][ T845] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.570315][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 505.576163][ T845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.591406][ T5872] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 505.599374][ T845] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.618342][ T845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.620048][ T5872] usb 8-1: string descriptor 0 read error: -22 [ 505.626393][ T845] usb 2-1: Product: syz [ 505.626414][ T845] usb 2-1: Manufacturer: syz [ 505.626429][ T845] usb 2-1: SerialNumber: syz [ 505.652661][ T5872] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 505.662052][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.674799][ T5872] usb 8-1: config 0 descriptor?? [ 505.689206][T22914] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 505.698506][ T5872] hub 8-1:0.0: bad descriptor, ignoring hub [ 505.706672][ T5872] hub 8-1:0.0: probe with driver hub failed with error -5 [ 505.720591][ T5872] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input62 [ 505.854816][ T845] usb 2-1: 0:2 : does not exist [ 505.894208][ T845] usb 2-1: USB disconnect, device number 64 [ 505.945027][ T10] usb 8-1: USB disconnect, device number 30 [ 505.955413][T19262] udevd[19262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.363147][T22970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.373239][T22970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.411480][ T5963] usbhid 7-1:0.0: can't add hid device: -71 [ 506.421452][ T5963] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 506.443103][ T5963] usb 7-1: USB disconnect, device number 78 [ 506.707360][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2243'. [ 506.838495][ T5928] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 506.896726][ T5963] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 506.999683][ T5928] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 507.009005][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.019970][ T5928] usb 2-1: config 0 descriptor?? [ 507.027001][ T5963] usb 7-1: device descriptor read/64, error -71 [ 507.114458][T23007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.123419][T23007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.276759][ T5963] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 507.406855][ T5963] usb 7-1: device descriptor read/64, error -71 [ 507.431292][ T5928] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 507.439975][ T5928] [drm:udl_init] *ERROR* Selecting channel failed [ 507.478017][ T5928] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 507.485324][ T5928] [drm] Initialized udl on minor 2 [ 507.495668][ T5928] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 507.512737][ T5928] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 507.519555][ T5963] usb usb7-port1: attempt power cycle [ 507.526077][ T5908] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 507.538007][ T5928] usb 2-1: USB disconnect, device number 65 [ 507.548757][ T5908] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 507.821591][T23041] syz.7.2247(23041): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 507.877179][ T5963] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 507.897485][ T5963] usb 7-1: device descriptor read/8, error -71 [ 508.077684][ T10] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 508.136778][ T5963] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 508.157261][ T5963] usb 7-1: device descriptor read/8, error -71 [ 508.206735][ T1226] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 508.228219][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.236253][ T10] usb 8-1: config 0 has no interface number 0 [ 508.244671][ T10] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 508.253869][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.262334][ T10] usb 8-1: Product: syz [ 508.266542][ T10] usb 8-1: Manufacturer: syz [ 508.272053][ T5963] usb usb7-port1: unable to enumerate USB device [ 508.278546][ T10] usb 8-1: SerialNumber: syz [ 508.286927][ T10] usb 8-1: config 0 descriptor?? [ 508.356959][ T1226] usb 2-1: Using ep0 maxpacket: 8 [ 508.367647][ T1226] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.380007][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 508.391085][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 508.402561][ T1226] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 508.412107][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.423594][ T1226] usb 2-1: config 0 descriptor?? [ 508.430232][T23046] raw-gadget.9 gadget.1: fail, usb_ep_enable returned -22 [ 508.495478][ T10] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 508.510786][ T10] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 508.521375][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 508.529611][ T10] usb 8-1: media controller created [ 508.550571][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.643697][T23046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.652615][T23046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.668335][ T1226] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 508.692689][ T1226] usb 2-1: USB disconnect, device number 66 [ 508.701855][T23041] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4 (error=-5) [ 508.746528][ T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 508.795790][ T10] usb 8-1: USB disconnect, device number 31 [ 509.636853][ T5928] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 509.657008][ T10] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 509.728814][T23114] netlink: 'syz.6.2254': attribute type 10 has an invalid length. [ 509.737278][T23114] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2254'. [ 509.754795][T23114] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 509.763963][T23114] team0: Failed to send options change via netlink (err -105) [ 509.773201][T23114] team0: Port device geneve0 added [ 509.787462][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 509.794474][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.807841][ T5928] usb 2-1: config 0 has no interfaces? [ 509.813361][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 509.822892][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.824037][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 509.834778][ T5928] usb 2-1: config 0 descriptor?? [ 509.848485][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.877092][ T10] usb 8-1: config 0 descriptor?? [ 509.891866][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 510.079671][ T5928] usb 2-1: USB disconnect, device number 67 [ 510.096564][ T10] gspca_sn9c2028: read1 error -32 [ 510.119456][ T10] gspca_sn9c2028: read1 error -32 [ 510.263770][T23146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.274364][T23146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.416881][ T10] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 510.572768][ T10] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 510.581949][ T10] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 510.590262][ T10] usb 7-1: Product: syz [ 510.594436][ T10] usb 7-1: Manufacturer: syz [ 510.599169][ T10] usb 7-1: SerialNumber: syz [ 510.605777][ T10] usb 7-1: config 0 descriptor?? [ 510.612954][ T10] ch341 7-1:0.0: ch341-uart converter detected [ 510.852029][ T10] usb 7-1: failed to send control message: -71 [ 510.867948][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 510.902963][ T10] usb 7-1: USB disconnect, device number 83 [ 510.934036][ T10] ch341 7-1:0.0: device disconnected [ 511.017335][ T1226] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 511.073170][T23193] tipc: Started in network mode [ 511.079457][T23193] tipc: Node identity 100, cluster identity 4711 [ 511.086014][T23193] tipc: Node number set to 256 [ 511.155711][T23201] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2269'. [ 511.190459][ T1226] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 511.204760][ T1226] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 511.215768][ T1226] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 511.231141][ T1226] usb 2-1: config 220 has no interface number 2 [ 511.240070][ T1226] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 511.254011][ T1226] usb 2-1: config 220 interface 0 has no altsetting 0 [ 511.261264][ T1226] usb 2-1: config 220 interface 76 has no altsetting 0 [ 511.268246][ T1226] usb 2-1: config 220 interface 1 has no altsetting 0 [ 511.277489][ T1226] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 511.288010][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.296039][ T1226] usb 2-1: Product: syz [ 511.303827][ T1226] usb 2-1: Manufacturer: syz [ 511.309939][ T1226] usb 2-1: SerialNumber: syz [ 511.320927][T23209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.333144][T23209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.346386][T23209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 511.456814][ T10] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 511.617083][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 511.624376][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 511.641820][ T1226] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 511.649555][ T1226] usb 2-1: No valid video chain found. [ 511.655205][ T10] usb 7-1: config 17 has an invalid interface number: 8 but max is 1 [ 511.663417][ T1226] usb 2-1: selecting invalid altsetting 0 [ 511.670122][ T10] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 511.693845][ T10] usb 7-1: config 17 has no interface number 0 [ 511.703770][ T10] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 144, changing to 7 [ 511.716307][ T10] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 57893, setting to 1024 [ 511.728915][ T1226] usb 2-1: selecting invalid altsetting 0 [ 511.734673][ T1226] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 511.742856][ T10] usb 7-1: config 17 interface 8 has no altsetting 0 [ 511.753587][ T10] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 511.775659][ T1226] usb 2-1: USB disconnect, device number 68 [ 511.786811][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.794872][ T10] usb 7-1: Product: syz [ 511.816747][ T10] usb 7-1: Manufacturer: syz [ 511.821389][ T10] usb 7-1: SerialNumber: syz [ 512.054453][ T10] usb 7-1: selecting invalid altsetting 0 [ 512.076687][ T10] usb 7-1: 8:6 : no UAC_FORMAT_TYPE desc [ 512.082373][ T10] usb 7-1: selecting invalid altsetting 0 [ 512.110376][ T10] usb 7-1: USB disconnect, device number 84 [ 512.136342][T19262] udevd[19262]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.435210][ T10] usb 8-1: USB disconnect, device number 32 [ 512.451148][ T5928] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 512.639518][ T5928] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 512.649283][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.660819][ T5928] usb 2-1: config 0 descriptor?? [ 512.836771][ T5908] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 512.870649][ T5928] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 512.882004][ T5928] [drm:udl_init] *ERROR* Selecting channel failed [ 512.886734][ T10] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 512.914792][ T5928] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 512.921677][ T5928] [drm] Initialized udl on minor 2 [ 512.935427][ T5928] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 512.946566][ T5928] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 512.961714][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 512.976955][ T5928] usb 2-1: USB disconnect, device number 69 [ 512.984076][ T43] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 513.000714][ T5908] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 513.018931][ T5908] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.031352][ T5908] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.038540][ T5908] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 513.049057][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.061033][ T5908] usb 7-1: config 0 descriptor?? [ 513.066859][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 513.074773][ T10] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 513.086471][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 513.098501][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 513.108986][ T10] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.123238][ T10] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 513.134724][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 513.145871][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 513.155828][ T10] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.174822][ T10] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 513.186522][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 513.197797][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 513.208452][ T10] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.224047][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 513.233170][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.242240][ T10] usb 8-1: Product: syz [ 513.246439][ T10] usb 8-1: Manufacturer: syz [ 513.251109][ T10] usb 8-1: SerialNumber: syz [ 513.280664][ T5908] kovaplus 0003:1E7D:2D50.0035: unknown main item tag 0x0 [ 513.289905][ T5908] kovaplus 0003:1E7D:2D50.0035: unknown main item tag 0x0 [ 513.298473][ T5908] kovaplus 0003:1E7D:2D50.0035: unknown main item tag 0x0 [ 513.310167][ T5908] kovaplus 0003:1E7D:2D50.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 513.439333][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'. [ 513.472104][ T10] adutux 8-1:168.0: interrupt endpoints not found [ 513.487524][ T10] usb 8-1: USB disconnect, device number 33 [ 513.916772][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 514.108200][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 514.116524][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.128813][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.142695][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 514.154454][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.175026][ T10] usb 2-1: config 0 descriptor?? [ 514.197366][ T10] hub 2-1:0.0: USB hub found [ 514.412565][ T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 514.446887][ T5908] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 514.576891][ T5908] usb 8-1: device descriptor read/64, error -71 [ 514.652441][ T10] hid-generic 0003:046D:C31C.0036: item fetching failed at offset 0/1 [ 514.661614][ T10] hid-generic 0003:046D:C31C.0036: probe with driver hid-generic failed with error -22 [ 514.821896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 514.826782][ T5908] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 514.951778][ T5872] usb 2-1: USB disconnect, device number 70 [ 514.976703][ T5908] usb 8-1: device descriptor read/64, error -71 [ 515.099876][ T5908] usb usb8-port1: attempt power cycle [ 515.451622][ T5908] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 515.497414][ T5908] usb 8-1: device descriptor read/8, error -71 [ 515.634600][ T43] usb 7-1: USB disconnect, device number 85 [ 515.766968][ T5908] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 515.807732][ T5908] usb 8-1: device descriptor read/8, error -71 [ 515.867011][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 515.918697][ T5908] usb usb8-port1: unable to enumerate USB device [ 515.964713][T23413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.979491][T23413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.046941][ T43] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 516.047017][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 516.063148][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 516.082988][ T10] usb 2-1: config 0 has no interface number 0 [ 516.095093][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 516.105714][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.114976][ T10] usb 2-1: Product: syz [ 516.121574][ T10] usb 2-1: Manufacturer: syz [ 516.126202][ T10] usb 2-1: SerialNumber: syz [ 516.147487][ T10] usb 2-1: config 0 descriptor?? [ 516.164881][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 516.212944][ T43] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 516.222581][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.234658][ T43] usb 7-1: Product: syz [ 516.244436][ T43] usb 7-1: Manufacturer: syz [ 516.251375][ T43] usb 7-1: SerialNumber: syz [ 516.373040][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 516.390031][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 516.575302][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 516.607134][T23441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.616568][T23441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.781886][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 516.782445][ T5872] usb 2-1: USB disconnect, device number 71 [ 516.803643][ T5872] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 516.824233][ T5872] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 516.842503][ T5872] quatech2 2-1:0.51: device disconnected [ 517.263664][T23464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.285825][T23464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.461692][T23477] : renamed from lo (while UP) [ 517.475047][T23477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.494330][T23477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.687216][ T5908] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 517.706997][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 517.812541][ T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 517.836715][ T5908] usb 8-1: Using ep0 maxpacket: 8 [ 517.853291][ T5908] usb 8-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 517.862587][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 517.875519][ T5908] usb 8-1: Product: syz [ 517.879233][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 517.885855][ T5908] usb 8-1: Manufacturer: syz [ 517.888863][ T10] usb 2-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 517.901399][ T5908] usb 8-1: SerialNumber: syz [ 517.915963][ T5908] usb 8-1: config 0 descriptor?? [ 517.921208][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 517.921238][ T10] usb 2-1: config 1 has no interface number 1 [ 517.921277][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 517.921311][ T10] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.923792][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.961786][ T5908] usbtest 8-1:0.0: FX2 device [ 517.981920][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.991784][ T5908] usbtest 8-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 517.993113][ T10] usb 2-1: Product: syz [ 518.005384][ T10] usb 2-1: Manufacturer: syz [ 518.010660][ T10] usb 2-1: SerialNumber: syz [ 518.018308][T23489] netlink: 'syz.4.2298': attribute type 4 has an invalid length. [ 518.046555][T23489] netlink: 'syz.4.2298': attribute type 4 has an invalid length. [ 518.166236][ T5908] usb 8-1: USB disconnect, device number 38 [ 518.230994][ T10] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 518.242997][T23505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.258446][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 518.264376][T23505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.314692][ T10] usb 2-1: USB disconnect, device number 72 [ 518.445983][ T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 518.460525][ T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 518.474032][ T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 518.484584][ T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 518.495872][ T43] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 518.512460][ T43] usb 7-1: USB disconnect, device number 86 [ 518.781381][T23554] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 518.899524][T23564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.915432][T23564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.976929][ T5872] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 519.012870][ T30] audit: type=1326 audit(6000067072.697:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23569 comm="syz.1.2305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdbe58eba9 code=0x0 [ 519.137678][ T5872] usb 8-1: Using ep0 maxpacket: 16 [ 519.148685][ T5872] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.161943][ T5872] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 519.171710][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.179891][ T5872] usb 8-1: Product: syz [ 519.185076][ T5872] usb 8-1: Manufacturer: syz [ 519.190033][ T5872] usb 8-1: SerialNumber: syz [ 519.205675][ T5872] usb 8-1: config 0 descriptor?? [ 519.219574][ T5872] dm9601 8-1:0.0: probe with driver dm9601 failed with error -22 [ 519.233442][ T5872] sr9700 8-1:0.0: probe with driver sr9700 failed with error -22 [ 519.261892][T23580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2307'. [ 519.431949][ T845] usb 8-1: USB disconnect, device number 39 [ 519.649263][ T10] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 519.827597][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.835644][ T10] usb 7-1: config 0 has no interface number 0 [ 519.866751][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.906976][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.927562][ T10] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 519.966681][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.012200][ T10] usb 7-1: config 0 descriptor?? [ 520.089420][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 520.105464][T23623] tipc: Started in network mode [ 520.135876][T23623] tipc: Node identity 100, cluster identity 4711 [ 520.148453][T23623] tipc: Node number set to 256 [ 520.301717][ T5908] usb 5-1: USB disconnect, device number 36 [ 520.323357][ T5908] em28xx 5-1:0.132: Disconnecting em28xx [ 520.351686][ T5908] em28xx 5-1:0.132: Closing input extension [ 520.437140][ T5963] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 520.486510][ T10] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0 [ 520.516715][ T10] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0 [ 520.528298][ T5908] em28xx 5-1:0.132: Freeing device [ 520.537860][ T10] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0 [ 520.576758][ T10] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0 [ 520.599204][ T10] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0 [ 520.655087][ T5963] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 520.666228][ T10] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0 [ 520.679313][T23593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.709366][ T5963] usb 2-1: config 0 has no interface number 0 [ 520.726906][ T10] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0 [ 520.735435][T23593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.754229][ T5963] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 520.791889][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.808537][ T10] prodikeys 0003:041E:2801.0037: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input1 [ 520.840497][ T5963] usb 2-1: Product: syz [ 520.844725][ T5963] usb 2-1: Manufacturer: syz [ 520.859530][ T10] hid_prodikeys: hid-prodikeys: failed to find output report [ 520.859530][ T10] [ 520.880260][ T5963] usb 2-1: SerialNumber: syz [ 520.900306][ T5963] usb 2-1: config 0 descriptor?? [ 520.956485][ T10] usb 7-1: USB disconnect, device number 87 [ 521.062329][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 521.076490][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 521.087030][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 521.090756][T23669] fido_id[23669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 521.136391][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 521.153453][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.350373][T23680] wlan1 speed is unknown, defaulting to 1000 [ 521.404397][T23680] lo speed is unknown, defaulting to 1000 [ 521.642315][T10403] bond0: (slave syz_tun): Releasing backup interface [ 521.655373][T23721] loop6: detected capacity change from 0 to 524287999 [ 521.732051][T23724] pimreg3: entered allmulticast mode [ 522.065672][T16537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.359714][T16537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.407901][ T10] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 522.582520][T16537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.609098][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.629877][ T10] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 522.649568][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.661347][ T10] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 522.677168][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.688169][T23680] chnl_net:caif_netlink_parms(): no params data found [ 522.695528][ T10] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 522.726853][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.745198][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 522.769789][ T10] usb 8-1: SerialNumber: syz [ 522.778927][T16537] batman_adv: batadv0: Removing interface: netdevsim0 [ 522.808263][T16537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.973524][T23680] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.982060][T23680] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.992082][T23680] bridge_slave_0: entered allmulticast mode [ 523.000425][T23680] bridge_slave_0: entered promiscuous mode [ 523.011273][T23680] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.019631][T23680] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.021941][ T845] usb 8-1: USB disconnect, device number 40 [ 523.027105][T23680] bridge_slave_1: entered allmulticast mode [ 523.042537][T23680] bridge_slave_1: entered promiscuous mode [ 523.097131][ T5963] f81534a_ctrl 2-1:0.74: failed to set register 0x116: -5 [ 523.104332][ T5963] f81534a_ctrl 2-1:0.74: failed to enable ports: -5 [ 523.137146][ T5963] f81534a_ctrl 2-1:0.74: probe with driver f81534a_ctrl failed with error -5 [ 523.155363][ T5963] usb 2-1: USB disconnect, device number 73 [ 523.207281][ T5862] Bluetooth: hci2: command tx timeout [ 523.254175][T23928] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2323'. [ 523.350374][T23680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.365954][T23680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.504508][T23680] team0: Port device team_slave_0 added [ 523.521083][T23680] team0: Port device team_slave_1 added [ 523.523812][T23928] wlan1 speed is unknown, defaulting to 1000 [ 523.529576][T16537] team0: left allmulticast mode [ 523.550011][T16537] team_slave_0: left allmulticast mode [ 523.555557][T16537] team_slave_1: left allmulticast mode [ 523.577074][T16537] dummy0: left allmulticast mode [ 523.585225][T16537] bridge0: port 3(team0) entered disabled state [ 523.620573][T16537] bridge_slave_1: left allmulticast mode [ 523.626268][T16537] bridge_slave_1: left promiscuous mode [ 523.635867][T16537] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.646137][T16537] bridge_slave_0: left allmulticast mode [ 523.652710][T16537] bridge_slave_0: left promiscuous mode [ 523.661457][T16537] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.009042][ T5963] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 524.039616][T16537] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 524.159599][ T43] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 524.179492][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 524.185626][ T5963] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 524.195832][ T5963] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 524.203813][ T5963] usb 2-1: can't read configurations, error -61 [ 524.294251][T16537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.305004][T16537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.321532][T16537] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 524.327317][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 524.335560][T16537] bond0 (unregistering): Released all slaves [ 524.342374][ T5963] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 524.343444][ T43] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.363644][ T43] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.373780][ T43] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 524.389902][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.496842][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 524.500660][T23928] lo speed is unknown, defaulting to 1000 [ 524.505588][ T5963] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 524.525810][ T5963] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 524.530856][T16537] tipc: Left network mode [ 524.534471][ T5963] usb 2-1: can't read configurations, error -61 [ 524.539408][T23680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.544577][ T5963] usb usb2-port1: attempt power cycle [ 524.551990][T23680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.585184][T23680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.605152][T23680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.612471][T23680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.638373][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.645123][T23680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.648946][T23993] 9pnet_fd: Insufficient options for proto=fd [ 524.862631][T23680] hsr_slave_0: entered promiscuous mode [ 524.875533][T23680] hsr_slave_1: entered promiscuous mode [ 524.883600][T23680] debugfs: 'hsr0' already exists in 'hsr' [ 524.889677][T23680] Cannot create hsr debugfs directory [ 524.926971][ T5963] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 524.975348][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 524.986181][ T5963] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 525.015100][ T5963] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 525.028224][ T5963] usb 2-1: can't read configurations, error -61 [ 525.082020][ T43] usbhid 8-1:1.0: can't add hid device: -71 [ 525.100966][ T43] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 525.132254][ T43] usb 8-1: USB disconnect, device number 41 [ 525.171172][ T5963] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 525.217944][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 525.228462][ T5963] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 525.271183][ T5963] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 525.287785][ T5862] Bluetooth: hci2: command tx timeout [ 525.296676][ T5963] usb 2-1: can't read configurations, error -61 [ 525.306138][ T5963] usb usb2-port1: unable to enumerate USB device [ 525.695338][T16537] hsr_slave_0: left promiscuous mode [ 525.724400][T16537] hsr_slave_1: left promiscuous mode [ 525.738088][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.755150][T16537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.767521][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.775294][T16537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.812266][T16537] veth1_macvtap: left promiscuous mode [ 525.819168][T16537] veth0_macvtap: left promiscuous mode [ 525.826989][T16537] veth1_vlan: left promiscuous mode [ 525.832309][T16537] veth0_vlan: left promiscuous mode [ 526.595308][T24214] netlink: 'syz.6.2332': attribute type 10 has an invalid length. [ 526.879413][T24223] tmpfs: User quota inode hardlimit too large. [ 526.919404][T24225] block nbd1: Attempted send on invalid socket [ 526.926521][T24225] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 526.938924][T24225] SQUASHFS error: Failed to read block 0x0: -5 [ 526.955364][T24225] unable to read squashfs_super_block [ 527.121279][T16537] team_slave_1 (unregistering): left promiscuous mode [ 527.122433][T16537] team0 (unregistering): Port device team_slave_1 removed [ 527.228599][T16537] team_slave_0 (unregistering): left promiscuous mode [ 527.229748][T16537] team0 (unregistering): Port device team_slave_0 removed [ 527.366794][ T5862] Bluetooth: hci2: command tx timeout [ 527.617246][ T5963] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 527.646840][ T1226] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 527.751752][T16537] dummy0 (unregistering): left promiscuous mode [ 527.760114][T16537] team0 (unregistering): Port device dummy0 removed [ 527.787207][ T1226] usb 8-1: Using ep0 maxpacket: 8 [ 527.794126][ T1226] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 527.802852][ T1226] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 527.812787][ T1226] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 527.824065][ T1226] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 527.834778][ T1226] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.848662][ T5963] usb 2-1: too many endpoints for config 16 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 527.860005][ T1226] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 527.869170][ T5963] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.879075][ T1226] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.887785][ T5963] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 527.902482][ T5963] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 527.911615][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.139097][ T1226] usb 8-1: usb_control_msg returned -32 [ 528.144781][ T1226] usbtmc 8-1:16.0: can't read capabilities [ 528.169093][T24214] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 528.198592][ T845] wlan1 speed is unknown, defaulting to 1000 [ 528.205516][ T43] wlan1 speed is unknown, defaulting to 1000 [ 528.536001][T24276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.563465][T24276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.637302][ T5963] holtek_kbd 0003:04D9:A055.0038: unknown main item tag 0x0 [ 528.655043][ T5963] holtek_kbd 0003:04D9:A055.0038: unknown main item tag 0x0 [ 528.663696][T24286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.687607][ T5963] holtek_kbd 0003:04D9:A055.0038: unknown main item tag 0x0 [ 528.705182][ T5963] holtek_kbd 0003:04D9:A055.0038: item fetching failed at offset 5/7 [ 528.734005][T24286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.739854][ T5963] holtek_kbd 0003:04D9:A055.0038: probe with driver holtek_kbd failed with error -22 [ 528.761033][ T5862] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 528.791001][ T5963] usb 2-1: USB disconnect, device number 78 [ 528.844813][T16537] IPVS: stop unused estimator thread 0... [ 528.982665][T23680] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 528.996406][T23680] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 529.014303][T23680] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 529.031617][T23680] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 529.183276][T23680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.219685][T23680] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.239597][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.246812][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.349599][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.356843][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.446824][ T5862] Bluetooth: hci2: command tx timeout [ 529.504796][T24341] netlink: 272 bytes leftover after parsing attributes in process `syz.6.2344'. [ 529.980199][T23680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.980569][T24364] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2348'. [ 530.366959][ T1226] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 530.445388][ T845] usb 8-1: USB disconnect, device number 42 [ 530.526890][ T1226] usb 2-1: Using ep0 maxpacket: 32 [ 530.537660][ T1226] usb 2-1: unable to get BOS descriptor or descriptor too short [ 530.560795][ T1226] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 530.566195][T23680] veth0_vlan: entered promiscuous mode [ 530.571227][ T1226] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 530.589629][ T1226] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 530.609654][ T1226] usb 2-1: config 128 has no interface number 0 [ 530.626199][ T1226] usb 2-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0x37, changing to 0x7 [ 530.626246][T23680] veth1_vlan: entered promiscuous mode [ 530.648577][ T1226] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 530.676432][ T1226] usb 2-1: config 128 interface 127 has no altsetting 0 [ 530.695974][ T1226] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 530.717743][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.721696][T23680] veth0_macvtap: entered promiscuous mode [ 530.725767][ T1226] usb 2-1: Product: syz [ 530.725785][ T1226] usb 2-1: Manufacturer: syz [ 530.725799][ T1226] usb 2-1: SerialNumber: syz [ 530.745087][T23680] veth1_macvtap: entered promiscuous mode [ 530.800816][T23680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.814598][T23680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.840436][ T3559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.854682][ T3559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.867544][ T845] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 530.877623][ T3559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.886560][ T3559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.027257][ T845] usb 8-1: device descriptor read/64, error -71 [ 531.132889][T16539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.167786][T16539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.188448][ T1226] usb 2-1: USB disconnect, device number 79 [ 531.205243][ T5862] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 531.268977][T19262] udevd[19262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.287492][ T845] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 531.290654][T16537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.330744][T16537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.416837][ T845] usb 8-1: device descriptor read/64, error -71 [ 531.529484][ T845] usb usb8-port1: attempt power cycle [ 531.668989][T24465] Falling back ldisc for ptm1. [ 531.792140][T24477] netlink: 'syz.4.2361': attribute type 1 has an invalid length. [ 531.800184][T24477] netlink: 1288 bytes leftover after parsing attributes in process `syz.4.2361'. [ 531.906962][ T845] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 531.942984][ T845] usb 8-1: device descriptor read/8, error -71 [ 532.056936][ T5928] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 532.129722][T24500] netlink: 63 bytes leftover after parsing attributes in process `syz.6.2366'. [ 532.139312][T24500] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2366'. [ 532.186818][ T845] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 532.206697][ T5872] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 532.220496][ T845] usb 8-1: device descriptor read/8, error -71 [ 532.226714][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 532.234660][ T5928] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 532.253644][ T5928] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 532.263987][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.273126][ T5928] usb 2-1: Product: syz [ 532.279247][ T5928] usb 2-1: Manufacturer: syz [ 532.284050][ T5928] usb 2-1: SerialNumber: syz [ 532.356756][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 532.373488][ T5872] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 532.397217][ T845] usb usb8-port1: unable to enumerate USB device [ 532.411335][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.430044][ T5872] usb 5-1: Product: syz [ 532.435399][ T5872] usb 5-1: Manufacturer: syz [ 532.440666][ T5872] usb 5-1: SerialNumber: syz [ 532.450194][ T5872] usb 5-1: config 0 descriptor?? [ 532.465834][ T5872] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 532.502697][T24481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2363'. [ 532.514829][ T5928] pn533_usb 2-1:5.0: NFC: Could not find bulk-in or bulk-out endpoint [ 532.534004][ T5928] usb 2-1: USB disconnect, device number 80 [ 533.176888][ T5872] gspca_sn9c2028: read1 error -71 [ 533.186500][T24529] veth1_macvtap: entered allmulticast mode [ 533.187431][ T5872] gspca_sn9c2028: read1 error -71 [ 533.198894][ T5872] gspca_sn9c2028: read1 error -71 [ 533.208458][ T5872] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 533.224371][ T5872] usb 5-1: USB disconnect, device number 37 [ 533.350505][T24538] netlink: zone id is out of range [ 533.355772][T24538] netlink: zone id is out of range [ 533.616703][ T5963] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 533.779050][ T5963] usb 2-1: Using ep0 maxpacket: 8 [ 533.799733][ T5963] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 533.823608][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.843054][ T5963] usb 2-1: Product: syz [ 533.848191][ T5963] usb 2-1: Manufacturer: syz [ 533.852975][ T5963] usb 2-1: SerialNumber: syz [ 533.864853][ T5963] usb 2-1: config 0 descriptor?? [ 533.889282][ T5963] gspca_main: se401-2.14.0 probing 047d:5003 [ 533.897713][ T1226] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 533.926419][T24583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.079234][ T1226] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 534.092363][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.105251][ T1226] usb 5-1: config 0 descriptor?? [ 534.196876][ T5872] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 534.292934][ T5963] gspca_se401: Frame size: 0x2 bayer [ 534.300492][ T5963] gspca_se401: Frame size: 0x127 bayer [ 534.306132][ T5963] gspca_se401: Frame size: 256x0 bayer [ 534.325827][ T1226] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 534.342676][ T1226] [drm:udl_init] *ERROR* Selecting channel failed [ 534.366930][ T5872] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.377960][ T5872] usb 8-1: config 0 has no interfaces? [ 534.392833][ T5872] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 534.402708][ T1226] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 534.417199][ T1226] [drm] Initialized udl on minor 2 [ 534.426132][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.426488][ T1226] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 534.436709][ T5872] usb 8-1: Product: syz [ 534.458338][ T1226] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 534.466427][ T6032] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 534.471986][ T5872] usb 8-1: Manufacturer: syz [ 534.479131][ T5872] usb 8-1: SerialNumber: syz [ 534.495847][ T1226] usb 5-1: USB disconnect, device number 38 [ 534.506398][ T5963] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input64 [ 534.517338][ T6032] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 534.520060][ T5872] usb 8-1: config 0 descriptor?? [ 534.563148][ T5963] usb 2-1: USB disconnect, device number 81 [ 536.256772][ T5928] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 536.296822][ T1226] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 536.418649][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.427359][ T5928] usb 5-1: not running at top speed; connect to a high speed hub [ 536.438151][ T5928] usb 5-1: config 8 has an invalid interface number: 4 but max is 0 [ 536.446161][ T5928] usb 5-1: config 8 has no interface number 0 [ 536.452382][ T5928] usb 5-1: config 8 interface 4 has no altsetting 0 [ 536.462425][ T5928] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=57.da [ 536.466831][ T1226] usb 2-1: Using ep0 maxpacket: 8 [ 536.472504][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.480297][ T1226] usb 2-1: unable to get BOS descriptor or descriptor too short [ 536.484823][ T5928] usb 5-1: Product: syz [ 536.496971][ T5928] usb 5-1: Manufacturer: syz [ 536.499306][ T1226] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 536.501605][ T5928] usb 5-1: SerialNumber: syz [ 536.514824][ T1226] usb 2-1: config 11 has no interface number 0 [ 536.524818][ T1226] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 536.535692][ T1226] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 536.546005][ T1226] usb 2-1: config 11 interface 244 has no altsetting 0 [ 536.555949][ T1226] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 536.565114][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.574640][ T1226] usb 2-1: Product: syz [ 536.586551][ T1226] usb 2-1: Manufacturer: syz [ 536.591354][ T1226] usb 2-1: SerialNumber: syz [ 536.640387][T24678] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2391'. [ 536.757494][ T5862] Bluetooth: hci3: unexpected subevent 0x04 length: 68 > 11 [ 536.762275][ T5928] peak_usb 5-1:8.4 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 536.782035][ T5928] peak_usb 5-1:8.4: unable to read PCAN-USB serial number (err -22) [ 536.847229][ T1226] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 536.848890][ T5928] peak_usb 5-1:8.4: probe with driver peak_usb failed with error -22 [ 536.865370][ T1226] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 536.913621][ T5872] usb 8-1: USB disconnect, device number 47 [ 536.925143][ T5928] usb 5-1: USB disconnect, device number 39 [ 536.958131][ T1226] peak_usb 2-1:11.244: probe with driver peak_usb failed with error -71 [ 537.034123][ T1226] usb 2-1: USB disconnect, device number 82 [ 537.577783][ T5928] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 537.736720][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 537.743902][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.766772][ T5928] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 537.805108][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.842267][ T5928] usb 5-1: config 0 descriptor?? [ 537.917407][T24800] program syz.7.2406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.080755][T24811] 9pnet_fd: Insufficient options for proto=fd [ 538.303553][T24828] netlink: 'syz.1.2412': attribute type 83 has an invalid length. [ 538.313701][T24828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2412'. [ 538.338818][T24828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2412'. [ 538.370774][T24822] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2412'. [ 538.419622][T24832] 9pnet_fd: Insufficient options for proto=fd [ 538.572310][T24831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.582681][T24831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.603901][T24831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.614380][T24831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.633152][ T5963] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 538.791501][T24851] fuse: Bad value for 'fd' [ 538.812403][ T5963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.822953][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.836189][ T5963] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 538.845414][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.856102][ T5963] usb 2-1: config 0 descriptor?? [ 538.866293][ T5963] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 538.866721][ T43] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 539.036784][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 539.043638][ T43] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.054128][ T43] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.070614][ T43] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.079756][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.087990][ T43] usb 8-1: Product: syz [ 539.093723][ T43] usb 8-1: Manufacturer: syz [ 539.098437][ T43] usb 8-1: SerialNumber: syz [ 539.312005][T24846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.327556][T24846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.343876][T24846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.357467][T24846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.370331][T24846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.380387][T24846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.427949][T24865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2418'. [ 539.437365][T24866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2418'. [ 540.462494][ T5928] usbhid 5-1:0.0: can't add hid device: -71 [ 540.487599][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 540.508899][ T5928] usb 5-1: USB disconnect, device number 40 [ 540.648925][T24886] wlan1 speed is unknown, defaulting to 1000 [ 540.664998][T24886] lo speed is unknown, defaulting to 1000 [ 540.666252][T24885] wlan1 speed is unknown, defaulting to 1000 [ 540.701759][T24885] lo speed is unknown, defaulting to 1000 [ 541.260984][ T845] usb 2-1: USB disconnect, device number 83 [ 541.328399][ T30] audit: type=1804 audit(6000099863.008:357): pid=24961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2428" name="/newroot/87/cgroup.controllers" dev="tmpfs" ino=498 res=1 errno=0 [ 541.350813][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.359137][ T30] audit: type=1800 audit(6000099863.018:358): pid=24961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2428" name="cgroup.controllers" dev="tmpfs" ino=498 res=0 errno=0 [ 541.436861][ T1226] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 541.562616][ T43] usb 8-1: 0:2 : does not exist [ 541.570066][ T43] usb 8-1: unit 9 not found! [ 541.603461][ T1226] usb 5-1: device descriptor read/64, error -71 [ 541.623335][ T43] usb 8-1: 4:0: cannot get min/max values for control 1 (id 4) [ 541.643568][ T43] usb 8-1: 4:0: cannot get min/max values for control 3 (id 4) [ 541.664787][ T43] usb 8-1: 4:0: cannot get min/max values for control 4 (id 4) [ 541.693682][ T43] usb 8-1: USB disconnect, device number 48 [ 541.740502][T19262] udevd[19262]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.876773][ T1226] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 542.006757][ T1226] usb 5-1: device descriptor read/64, error -71 [ 542.127362][ T1226] usb usb5-port1: attempt power cycle [ 542.211374][T25001] wlan1 speed is unknown, defaulting to 1000 [ 542.220809][T25001] lo speed is unknown, defaulting to 1000 [ 542.490245][ T1226] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 542.519423][ T1226] usb 5-1: device descriptor read/8, error -71 [ 542.568990][ T43] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 542.739061][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 542.748006][ T43] usb 2-1: config 9 has an invalid interface number: 133 but max is 0 [ 542.756223][ T43] usb 2-1: config 9 has no interface number 0 [ 542.762547][ T43] usb 2-1: config 9 interface 133 has no altsetting 0 [ 542.766744][ T845] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 542.771721][ T43] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.9b [ 542.777534][ T1226] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 542.794862][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.803049][ T43] usb 2-1: Product: syz [ 542.807358][ T43] usb 2-1: Manufacturer: syz [ 542.808470][ T1226] usb 5-1: device descriptor read/8, error -71 [ 542.811966][ T43] usb 2-1: SerialNumber: syz [ 542.926868][ T845] usb 8-1: Using ep0 maxpacket: 8 [ 542.932883][ T1226] usb usb5-port1: unable to enumerate USB device [ 542.943560][ T845] usb 8-1: unable to get BOS descriptor or descriptor too short [ 542.952528][ T845] usb 8-1: config 4 interface 0 has no altsetting 0 [ 542.962607][ T845] usb 8-1: string descriptor 0 read error: -22 [ 542.969280][ T845] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 542.978624][ T845] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 543.003457][ T845] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 543.015738][ T845] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 543.028289][ T845] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 543.035492][ T845] usb 8-1: media controller created [ 543.043664][T25026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.053030][T25026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.100854][ T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.203651][ T845] zl10353_read_register: readreg error (reg=127, ret==0) [ 543.272372][ T845] usb 8-1: USB disconnect, device number 49 [ 543.625144][ T43] pegasus 2-1:9.133: probe with driver pegasus failed with error -71 [ 543.650641][ T43] usb 2-1: USB disconnect, device number 84 [ 543.842633][T25089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.076819][ T845] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 544.106708][ T5963] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 544.227521][ T845] usb 8-1: Using ep0 maxpacket: 16 [ 544.234815][ T845] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.245595][ T845] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 5 [ 544.259353][ T845] usb 8-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=e5.23 [ 544.268880][ T845] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 544.277285][ T845] usb 8-1: Manufacturer: syz [ 544.282293][ T845] usb 8-1: SerialNumber: syz [ 544.289567][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.301629][ T5963] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 544.310862][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.329733][ T5963] usb 2-1: config 0 descriptor?? [ 544.534242][T25093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.543909][T25093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.586944][ T5872] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 544.753338][ T5963] hid_mf 0003:0079:1846.0039: unknown main item tag 0x1 [ 544.762220][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.772747][ T5872] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 544.773779][ T5963] hid_mf 0003:0079:1846.0039: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 544.782622][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.811505][ T5963] hid_mf 0003:0079:1846.0039: Invalid report, this should never happen! [ 544.827933][ T5872] usb 5-1: config 0 descriptor?? [ 544.828705][ T5963] hid_mf 0003:0079:1846.0039: Force feedback init failed. [ 544.956186][ T5963] usb 2-1: USB disconnect, device number 85 [ 545.255567][ T5872] kye 0003:0458:5016.003A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 545.273639][ T5872] kye 0003:0458:5016.003A: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 545.294504][ T5872] kye 0003:0458:5016.003A: tablet-enabling feature report not found [ 545.303507][ T5872] kye 0003:0458:5016.003A: tablet enabling failed [ 545.458865][ T1226] usb 5-1: USB disconnect, device number 45 [ 545.681527][T25185] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2456'. [ 545.691689][T25185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2456'. [ 545.856887][ T5963] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 546.006948][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 546.014559][ T5963] usb 2-1: unable to get BOS descriptor or descriptor too short [ 546.023556][ T5963] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 546.034285][ T5963] usb 2-1: config 15 has no interface number 0 [ 546.040857][ T5963] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 546.050919][ T5963] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 546.062727][ T5963] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 546.073831][ T5963] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 546.086017][ T5963] usb 2-1: config 15 interface 174 has no altsetting 0 [ 546.096144][ T5963] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 546.105285][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.113339][ T5963] usb 2-1: Product: syz [ 546.118077][ T5963] usb 2-1: Manufacturer: syz [ 546.122681][ T5963] usb 2-1: SerialNumber: syz [ 546.131423][T25176] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 546.237052][ T122] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 546.346024][T25176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.354906][T25176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.371977][ T5963] sierra 2-1:15.174: Sierra USB modem converter detected [ 546.383291][ T5963] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 546.387028][ T122] usb 5-1: Using ep0 maxpacket: 16 [ 546.399452][ T5963] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 546.411298][ T122] usb 5-1: unable to get BOS descriptor or descriptor too short [ 546.422354][ T122] usb 5-1: config 6 has an invalid interface number: 202 but max is 0 [ 546.427113][ T5963] usb 2-1: USB disconnect, device number 86 [ 546.434101][ T122] usb 5-1: config 6 has an invalid interface descriptor of length 2, skipping [ 546.446033][ T122] usb 5-1: config 6 has no interface number 0 [ 546.450251][ T5963] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 546.459092][ T122] usb 5-1: config 6 interface 202 altsetting 244 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 546.480413][ T5963] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 546.485114][ T122] usb 5-1: config 6 interface 202 has no altsetting 0 [ 546.491070][ T5963] sierra 2-1:15.174: device disconnected [ 546.510319][ T122] usb 5-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d4.1f [ 546.525748][ T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.535498][ T122] usb 5-1: Product: syz [ 546.545067][ T122] usb 5-1: Manufacturer: syz [ 546.550350][ T122] usb 5-1: SerialNumber: syz [ 546.795231][ T122] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 14 is not bulk. [ 546.805761][ T122] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 8 is not bulk. [ 546.816143][ T122] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 7 is not bulk. [ 546.826559][ T122] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 546.856024][ T122] usb 5-1: USB disconnect, device number 46 [ 546.891273][ T5872] usb 8-1: USB disconnect, device number 50 [ 547.072817][T25253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2464'. [ 547.327451][ T5872] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 547.413262][T16539] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9b [ 547.476846][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 547.483575][ T5872] usb 8-1: config 127 has an invalid interface number: 171 but max is 1 [ 547.493382][ T5872] usb 8-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 547.503960][ T5872] usb 8-1: config 127 has no interface number 1 [ 547.510351][ T43] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 547.518277][ T5872] usb 8-1: config 127 interface 171 has no altsetting 0 [ 547.529773][ T5872] usb 8-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 547.539806][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.548182][ T5872] usb 8-1: Product: syz [ 547.552393][ T5872] usb 8-1: Manufacturer: syz [ 547.557659][ T5872] usb 8-1: SerialNumber: syz [ 547.585897][T25280] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2468'. [ 547.660039][ T43] usb 2-1: device descriptor read/64, error -71 [ 547.667015][ T5928] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 547.802481][ T5928] usb 5-1: device descriptor read/64, error -71 [ 547.805880][T25244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.819862][T25244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.848119][ T5872] xr_serial 8-1:127.171: xr_serial converter detected [ 547.856503][ T5872] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 547.866482][ T5872] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 547.884688][ T5872] usb 8-1: USB disconnect, device number 51 [ 547.893916][ T5872] xr_serial 8-1:127.171: device disconnected [ 547.901448][ T43] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 548.036907][ T43] usb 2-1: device descriptor read/64, error -71 [ 548.046711][ T5928] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 548.147329][ T43] usb usb2-port1: attempt power cycle [ 548.176827][ T5928] usb 5-1: device descriptor read/64, error -71 [ 548.287040][ T5928] usb usb5-port1: attempt power cycle [ 548.450499][T25315] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2473'. [ 548.487179][ T43] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 548.507896][ T43] usb 2-1: device descriptor read/8, error -71 [ 548.636951][ T5928] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 548.658799][ T5928] usb 5-1: device descriptor read/8, error -71 [ 548.696920][ T24] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 548.746707][ T43] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 548.770671][ T43] usb 2-1: device descriptor read/8, error -71 [ 548.849195][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.860314][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.870367][ T24] usb 8-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 548.879660][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.888387][ T43] usb usb2-port1: unable to enumerate USB device [ 548.896852][ T5928] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 548.905069][ T24] usb 8-1: config 0 descriptor?? [ 548.927542][ T5928] usb 5-1: device descriptor read/8, error -71 [ 549.038051][ T5928] usb usb5-port1: unable to enumerate USB device [ 549.322930][ T24] cypress 0003:04B4:DE64.003B: unknown main item tag 0x0 [ 549.330173][ T24] cypress 0003:04B4:DE64.003B: unknown main item tag 0x0 [ 549.339362][ T24] cypress 0003:04B4:DE64.003B: unknown main item tag 0x0 [ 549.346445][ T24] cypress 0003:04B4:DE64.003B: unknown main item tag 0x0 [ 549.356079][ T24] cypress 0003:04B4:DE64.003B: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.7-1/input0 [ 549.522788][T25315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.532863][T25315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.547311][ T24] usb 8-1: USB disconnect, device number 52 [ 550.093271][T25342] loop2: detected capacity change from 0 to 8 [ 550.106177][T25342] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 550.113402][T25342] loop2: partition table partially beyond EOD, truncated [ 550.122086][T25342] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 550.342954][T25266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.509355][T25364] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2476'. [ 550.531911][T25364] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2476'. [ 550.638745][T25372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.676116][T25372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.727107][T25372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.756249][T25372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.766508][T25387] Invalid ELF header len 16 [ 550.876762][ T5963] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 551.026756][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 551.038189][ T5963] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 551.047676][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.056444][ T5963] usb 5-1: Product: syz [ 551.061464][ T5963] usb 5-1: Manufacturer: syz [ 551.066076][ T5963] usb 5-1: SerialNumber: syz [ 551.076232][ T5963] usb 5-1: config 0 descriptor?? [ 551.084260][ T5963] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 551.196933][ T6032] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 551.284559][ T5963] gspca_ov534_9: reg_w failed -71 [ 551.346707][ T6032] usb 2-1: Using ep0 maxpacket: 16 [ 551.353198][ T6032] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 551.366377][ T6032] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 551.375596][ T6032] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 551.384416][ T6032] usb 2-1: Product: syz [ 551.388785][ T6032] usb 2-1: Manufacturer: syz [ 551.393386][ T6032] usb 2-1: SerialNumber: syz [ 551.409409][ T6032] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 551.605671][T16537] usb 2-1: Failed to submit usb control message: -71 [ 551.613166][ T24] usb 2-1: USB disconnect, device number 91 [ 551.620289][T25398] delete_channel: no stack [ 551.629322][T16537] usb 2-1: unable to send the bmi data to the device: -71 [ 551.639050][T16537] usb 2-1: unable to get target info from device [ 551.645422][T16537] usb 2-1: could not get target info (-71) [ 551.654169][T16537] usb 2-1: could not probe fw (-71) [ 551.704897][ T5963] gspca_ov534_9: Unknown sensor 0000 [ 551.704993][ T5963] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 551.733428][ T5963] usb 5-1: USB disconnect, device number 51 [ 552.497354][ T6032] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 552.659632][ T6032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.670748][ T6032] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 552.680332][ T6032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.690362][ T6032] usb 2-1: config 0 descriptor?? [ 552.796916][ T5963] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 552.905852][ T6032] usbhid 2-1:0.0: can't add hid device: -71 [ 552.911962][ T6032] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 552.924193][ T6032] usb 2-1: USB disconnect, device number 92 [ 552.966876][ T5963] usb 5-1: Using ep0 maxpacket: 16 [ 552.974460][ T5963] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 552.988050][ T5963] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 552.997429][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.005430][ T5963] usb 5-1: Product: syz [ 553.010013][ T5963] usb 5-1: Manufacturer: syz [ 553.014619][ T5963] usb 5-1: SerialNumber: syz [ 553.233939][ T5963] pn533_usb 5-1:5.0: NFC: Could not find bulk-in or bulk-out endpoint [ 553.249062][ T5963] usb 5-1: USB disconnect, device number 52 [ 553.285099][T25480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2495'. [ 553.536915][ T6032] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 553.686962][ T6032] usb 2-1: Using ep0 maxpacket: 32 [ 553.694969][ T6032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.711420][ T6032] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 553.720985][ T6032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.734919][ T6032] usb 2-1: config 0 descriptor?? [ 553.751760][ T6032] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 553.775642][ T6032] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 554.191994][ T5963] usb 2-1: USB disconnect, device number 93 [ 554.203498][ T5963] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 554.331940][T16537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.439334][T16537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.523088][T16537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.620100][T16537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.836717][ T43] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 554.903138][T16537] bridge_slave_1: left allmulticast mode [ 554.911756][T16537] bridge_slave_1: left promiscuous mode [ 554.920898][T16537] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.942336][T16537] bridge_slave_0: left allmulticast mode [ 554.948646][T16537] bridge_slave_0: left promiscuous mode [ 554.954474][T16537] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.986753][ T43] usb 8-1: device descriptor read/64, error -71 [ 555.013666][T25543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'. [ 555.153251][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 555.176273][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 555.186542][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 555.200473][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 555.210663][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.246721][ T43] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 555.407556][ T43] usb 8-1: device descriptor read/64, error -71 [ 555.520215][ T43] usb usb8-port1: attempt power cycle [ 555.882258][ T43] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 555.917769][ T43] usb 8-1: device descriptor read/8, error -71 [ 555.968316][T25575] netlink: 'syz.6.2510': attribute type 1 has an invalid length. [ 556.015046][T16537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.029873][T16537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.055102][T16537] bond0 (unregistering): Released all slaves [ 556.157517][ T43] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 556.219430][ T43] usb 8-1: device descriptor read/8, error -71 [ 556.242512][T25550] wlan1 speed is unknown, defaulting to 1000 [ 556.271750][T25550] lo speed is unknown, defaulting to 1000 [ 556.337752][ T43] usb usb8-port1: unable to enumerate USB device [ 556.343096][T25586] netlink: 'syz.6.2511': attribute type 33 has an invalid length. [ 556.383967][T25586] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2511'. [ 556.597202][T25596] wlan1 speed is unknown, defaulting to 1000 [ 556.607747][T25596] lo speed is unknown, defaulting to 1000 [ 556.981829][T16537] hsr_slave_0: left promiscuous mode [ 557.002471][T16537] hsr_slave_1: left promiscuous mode [ 557.015825][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.041101][T16537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.057671][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.075356][T16537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.149910][T16537] veth1_macvtap: left promiscuous mode [ 557.155494][T16537] veth0_macvtap: left promiscuous mode [ 557.178375][T16537] veth1_vlan: left promiscuous mode [ 557.187240][T16537] veth0_vlan: left promiscuous mode [ 557.277397][ T5963] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 557.287262][ T5876] Bluetooth: hci2: command tx timeout [ 557.335735][T25663] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 557.472384][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 557.517263][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.559571][ T5963] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 557.592808][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.652977][ T5963] usb 2-1: config 0 descriptor?? [ 558.104296][ T5963] uclogic 0003:28BD:0042.003C: interface is invalid, ignoring [ 558.217024][ T845] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 558.304609][T25653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.328440][T25653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.363648][ T5963] usb 2-1: USB disconnect, device number 94 [ 558.376920][ T845] usb 8-1: Using ep0 maxpacket: 16 [ 558.399724][ T845] usb 8-1: config 4 has an invalid interface number: 140 but max is 0 [ 558.427415][ T845] usb 8-1: config 4 has no interface number 0 [ 558.433997][ T845] usb 8-1: config 4 interface 140 has no altsetting 0 [ 558.459020][ T845] usb 8-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b [ 558.477372][ T845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.486919][ T845] usb 8-1: Product: syz [ 558.491109][ T845] usb 8-1: Manufacturer: syz [ 558.495715][ T845] usb 8-1: SerialNumber: syz [ 558.536433][ T845] ums-cypress 8-1:4.140: USB Mass Storage device detected [ 558.680162][T16537] team0 (unregistering): Port device team_slave_1 removed [ 558.738496][T16537] team0 (unregistering): Port device team_slave_0 removed [ 558.939682][ T845] usb 8-1: USB disconnect, device number 57 [ 559.246793][ T5963] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 559.369400][ T5876] Bluetooth: hci2: command tx timeout [ 559.406467][ T5963] usb 2-1: device descriptor read/64, error -71 [ 559.657529][ T5963] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 559.677831][T25550] chnl_net:caif_netlink_parms(): no params data found [ 559.807400][ T5963] usb 2-1: device descriptor read/64, error -71 [ 559.888519][ T5946] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 559.918514][ T5963] usb usb2-port1: attempt power cycle [ 560.037186][ T5946] usb 8-1: device descriptor read/64, error -71 [ 560.081169][T25550] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.100693][T25550] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.109573][T25550] bridge_slave_0: entered allmulticast mode [ 560.124528][T25550] bridge_slave_0: entered promiscuous mode [ 560.139536][T25550] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.149071][T25550] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.156316][T25550] bridge_slave_1: entered allmulticast mode [ 560.164715][T25550] bridge_slave_1: entered promiscuous mode [ 560.171817][T25878] cgroup2: Unknown parameter 'memoryDX8' [ 560.277785][ T5963] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 560.306687][ T5946] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 560.316094][ T5963] usb 2-1: device descriptor read/8, error -71 [ 560.345783][T25550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.359369][T25550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.466773][ T5946] usb 8-1: device descriptor read/64, error -71 [ 560.483006][T25550] team0: Port device team_slave_0 added [ 560.517908][T25550] team0: Port device team_slave_1 added [ 560.586254][T25550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.587095][ T5963] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 560.603999][T25550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.606717][ T5946] usb usb8-port1: attempt power cycle [ 560.638450][T25550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.661529][T25550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.670051][T25550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.680028][ T5963] usb 2-1: device descriptor read/8, error -71 [ 560.706460][T25550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.838778][ T5963] usb usb2-port1: unable to enumerate USB device [ 560.853824][T25550] hsr_slave_0: entered promiscuous mode [ 560.867451][T25550] hsr_slave_1: entered promiscuous mode [ 560.874041][T25550] debugfs: 'hsr0' already exists in 'hsr' [ 560.884906][T25550] Cannot create hsr debugfs directory [ 560.909750][T25994] IPVS: set_ctl: invalid protocol: 50 172.20.20.36:19999 [ 560.996776][ T5946] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 561.028491][ T5946] usb 8-1: device descriptor read/8, error -71 [ 561.287714][ T5946] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 561.318570][ T5946] usb 8-1: device descriptor read/8, error -71 [ 561.427721][ T5946] usb usb8-port1: unable to enumerate USB device [ 561.447138][ T5876] Bluetooth: hci2: command tx timeout [ 561.549991][T25550] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 561.583588][T25550] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 561.592501][T26076] fuse: Unknown parameter 'rootmPde' [ 561.609065][T25550] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 561.623917][T25550] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 561.750901][T25550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.784775][T25550] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.815395][T16539] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.822641][T16539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.841982][T16539] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.849198][T16539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.245475][T26102] overlayfs: failed to clone upperpath [ 562.267990][T26102] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2533'. [ 562.280646][T26102] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2533'. [ 562.395471][T25550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.402709][T26116] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2535'. [ 562.920324][T25550] veth0_vlan: entered promiscuous mode [ 562.931451][T25550] veth1_vlan: entered promiscuous mode [ 562.964461][T25550] veth0_macvtap: entered promiscuous mode [ 562.971939][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.978447][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.992687][T25550] veth1_macvtap: entered promiscuous mode [ 563.010696][T25550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.025680][T25550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.042128][T16537] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.053188][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.070572][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.080355][ T5946] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 563.080744][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.097261][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 563.175529][T16537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.192758][T16537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.217157][ T5946] usb 8-1: device descriptor read/64, error -71 [ 563.226472][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.235498][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.252293][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.267364][ T24] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 563.276459][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.288105][ T24] usb 2-1: config 0 descriptor?? [ 563.350129][T26180] openvswitch: netlink: Flow key attr not present in new flow. [ 563.458663][ T5946] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 563.527098][ T5876] Bluetooth: hci2: command tx timeout [ 563.618024][ T5946] usb 8-1: device descriptor read/64, error -71 [ 563.737175][ T5946] usb usb8-port1: attempt power cycle [ 563.738113][ T24] hid_mf 0003:0079:1846.003D: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 563.780709][ T24] hid_mf 0003:0079:1846.003D: Invalid report, this should never happen! [ 563.798300][ T24] hid_mf 0003:0079:1846.003D: Force feedback init failed. [ 563.850099][T26189] Invalid ELF header len 16 [ 563.962801][T26152] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.978682][T26152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.988855][T26152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.081752][ T43] usb 2-1: USB disconnect, device number 99 [ 564.106930][ T5946] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 564.179356][ T5946] usb 8-1: device descriptor read/8, error -71 [ 564.303161][T26218] input: syz0 as /devices/virtual/input/input65 [ 564.427719][ T5946] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 564.488473][ T5946] usb 8-1: device descriptor read/8, error -71 [ 564.537752][T26230] trusted_key: syz.8.2548 sent an empty control message without MSG_MORE. [ 564.608431][ T5946] usb usb8-port1: unable to enumerate USB device [ 564.801900][ T5963] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 564.979299][ T5963] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.990345][ T5963] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 565.000937][ T5963] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.011262][ T5963] usb 9-1: config 0 descriptor?? [ 565.088831][ T5946] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 565.261554][ T5946] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 565.270839][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.279962][ T5946] usb 2-1: Product: syz [ 565.284173][ T5946] usb 2-1: Manufacturer: syz [ 565.289061][ T5946] usb 2-1: SerialNumber: syz [ 565.295923][ T5946] usb 2-1: config 0 descriptor?? [ 565.309485][ T5946] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 565.427398][ T5963] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor [ 565.458438][ T5963] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.003E/input/input66 [ 565.468352][T26259] netlink: 'syz.6.2554': attribute type 21 has an invalid length. [ 565.480455][T26259] sctp: [Deprecated]: syz.6.2554 (pid 26259) Use of int in maxseg socket option. [ 565.480455][T26259] Use struct sctp_assoc_value instead [ 565.498375][T26259] 9pnet_fd: Insufficient options for proto=fd [ 565.581776][ T5963] keytouch 0003:0926:3333.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 565.633033][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.633523][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.634092][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.634377][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.634391][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.634424][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.634436][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.634696][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.634713][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.635003][ C0] keyboard: can't emulate rawmode for keycode 240 [ 565.717246][ T5946] sonixb 2-1:0.0: Error writing register 01: -71 [ 565.717646][ T5946] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 565.747544][ T5946] usb 2-1: USB disconnect, device number 100 [ 565.899290][ T1226] [ 565.899305][ T1226] ====================================================== [ 565.899314][ T1226] WARNING: possible circular locking dependency detected [ 565.899327][ T1226] syzkaller #0 Not tainted [ 565.899337][ T1226] ------------------------------------------------------ [ 565.899346][ T1226] kworker/0:3/1226 is trying to acquire lock: [ 565.899357][ T1226] ffff88801a8a10b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x74/0x2b0 [ 565.899406][ T1226] [ 565.899406][ T1226] but task is already holding lock: [ 565.899413][ T1226] ffffffff8e530860 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 565.899459][ T1226] [ 565.899459][ T1226] which lock already depends on the new lock. [ 565.899459][ T1226] [ 565.899466][ T1226] [ 565.899466][ T1226] the existing dependency chain (in reverse order) is: [ 565.899475][ T1226] [ 565.899475][ T1226] -> #2 (console_lock){+.+.}-{0:0}: [ 565.899501][ T1226] lock_acquire+0x120/0x360 [ 565.899520][ T1226] console_lock+0x76/0x90 [ 565.899539][ T1226] con_flush_chars+0x70/0x280 [ 565.899556][ T1226] n_tty_write+0xf1d/0x1200 [ 565.899574][ T1226] file_tty_write+0x559/0xa30 [ 565.899589][ T1226] vfs_write+0x5c9/0xb30 [ 565.899608][ T1226] ksys_write+0x145/0x250 [ 565.899627][ T1226] do_syscall_64+0xfa/0xfa0 [ 565.899646][ T1226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.899663][ T1226] [ 565.899663][ T1226] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 565.899688][ T1226] lock_acquire+0x120/0x360 [ 565.899704][ T1226] down_write+0x96/0x1f0 [ 565.899725][ T1226] tty_unthrottle+0x23/0x110 [ 565.899746][ T1226] tty_ldisc_receive_buf+0x119/0x160 [ 565.899765][ T1226] tty_port_default_receive_buf+0x6e/0xa0 [ 565.899786][ T1226] flush_to_ldisc+0x24a/0x6e0 [ 565.899803][ T1226] process_scheduled_works+0xae1/0x17b0 [ 565.899822][ T1226] worker_thread+0x8a0/0xda0 [ 565.899839][ T1226] kthread+0x711/0x8a0 [ 565.899860][ T1226] ret_from_fork+0x4bc/0x870 [ 565.899875][ T1226] ret_from_fork_asm+0x1a/0x30 [ 565.899901][ T1226] [ 565.899901][ T1226] -> #0 (&buf->lock){+.+.}-{4:4}: [ 565.899925][ T1226] validate_chain+0xb9b/0x2140 [ 565.899944][ T1226] __lock_acquire+0xab9/0xd20 [ 565.899959][ T1226] lock_acquire+0x120/0x360 [ 565.899975][ T1226] __mutex_lock+0x187/0x1350 [ 565.899992][ T1226] tty_buffer_flush+0x74/0x2b0 [ 565.900009][ T1226] tty_ldisc_flush+0x6b/0xc0 [ 565.900024][ T1226] __do_SAK+0xf2/0x6e0 [ 565.900041][ T1226] vc_SAK+0x78/0x220 [ 565.900061][ T1226] process_scheduled_works+0xae1/0x17b0 [ 565.900080][ T1226] worker_thread+0x8a0/0xda0 [ 565.900098][ T1226] kthread+0x711/0x8a0 [ 565.900118][ T1226] ret_from_fork+0x4bc/0x870 [ 565.900136][ T1226] ret_from_fork_asm+0x1a/0x30 [ 565.900154][ T1226] [ 565.900154][ T1226] other info that might help us debug this: [ 565.900154][ T1226] [ 565.900161][ T1226] Chain exists of: [ 565.900161][ T1226] &buf->lock --> &tty->termios_rwsem --> console_lock [ 565.900161][ T1226] [ 565.900195][ T1226] Possible unsafe locking scenario: [ 565.900195][ T1226] [ 565.900202][ T1226] CPU0 CPU1 [ 565.900210][ T1226] ---- ---- [ 565.900216][ T1226] lock(console_lock); [ 565.900230][ T1226] lock(&tty->termios_rwsem); [ 565.900246][ T1226] lock(console_lock); [ 565.900261][ T1226] lock(&buf->lock); [ 565.900274][ T1226] [ 565.900274][ T1226] *** DEADLOCK *** [ 565.900274][ T1226] [ 565.900281][ T1226] 4 locks held by kworker/0:3/1226: [ 565.900292][ T1226] #0: ffff88801a871548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 565.900340][ T1226] #1: ffffc9000406fba0 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 565.900385][ T1226] #2: ffffffff8e530860 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 565.900433][ T1226] #3: ffff88802866d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x20/0xc0 [ 565.900477][ T1226] [ 565.900477][ T1226] stack backtrace: [ 565.900488][ T1226] CPU: 0 UID: 0 PID: 1226 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 565.900508][ T1226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.900519][ T1226] Workqueue: events vc_SAK [ 565.900540][ T1226] Call Trace: [ 565.900547][ T1226] [ 565.900555][ T1226] dump_stack_lvl+0x189/0x250 [ 565.900573][ T1226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.900588][ T1226] ? __pfx__printk+0x10/0x10 [ 565.900610][ T1226] ? print_lock_name+0xde/0x100 [ 565.900630][ T1226] print_circular_bug+0x2ee/0x310 [ 565.900652][ T1226] check_noncircular+0x134/0x160 [ 565.900674][ T1226] validate_chain+0xb9b/0x2140 [ 565.900703][ T1226] __lock_acquire+0xab9/0xd20 [ 565.900723][ T1226] ? tty_buffer_flush+0x74/0x2b0 [ 565.900738][ T1226] lock_acquire+0x120/0x360 [ 565.900754][ T1226] ? tty_buffer_flush+0x74/0x2b0 [ 565.900775][ T1226] __mutex_lock+0x187/0x1350 [ 565.900794][ T1226] ? tty_buffer_flush+0x74/0x2b0 [ 565.900813][ T1226] ? __lock_acquire+0xab9/0xd20 [ 565.900833][ T1226] ? tty_buffer_flush+0x74/0x2b0 [ 565.900852][ T1226] ? __pfx___mutex_lock+0x10/0x10 [ 565.900871][ T1226] ? do_raw_spin_lock+0x121/0x290 [ 565.900904][ T1226] ? ldsem_down_read_trylock+0x137/0x1a0 [ 565.900926][ T1226] ? tty_ldisc_flush+0x20/0xc0 [ 565.900942][ T1226] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 565.900966][ T1226] tty_buffer_flush+0x74/0x2b0 [ 565.900986][ T1226] tty_ldisc_flush+0x6b/0xc0 [ 565.901003][ T1226] __do_SAK+0xf2/0x6e0 [ 565.901025][ T1226] vc_SAK+0x78/0x220 [ 565.901047][ T1226] ? process_scheduled_works+0x9ef/0x17b0 [ 565.901067][ T1226] process_scheduled_works+0xae1/0x17b0 [ 565.901098][ T1226] ? __pfx_process_scheduled_works+0x10/0x10 [ 565.901124][ T1226] worker_thread+0x8a0/0xda0 [ 565.901149][ T1226] ? __kthread_parkme+0x7b/0x200 [ 565.901173][ T1226] kthread+0x711/0x8a0 [ 565.901197][ T1226] ? __pfx_worker_thread+0x10/0x10 [ 565.901216][ T1226] ? __pfx_kthread+0x10/0x10 [ 565.901238][ T1226] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.901256][ T1226] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.901275][ T1226] ? __pfx_kthread+0x10/0x10 [ 565.901298][ T1226] ret_from_fork+0x4bc/0x870 [ 565.901318][ T1226] ? __pfx_ret_from_fork+0x10/0x10 [ 565.901339][ T1226] ? __switch_to_asm+0x39/0x70 [ 565.901357][ T1226] ? __switch_to_asm+0x33/0x70 [ 565.901374][ T1226] ? __pfx_kthread+0x10/0x10 [ 565.901397][ T1226] ret_from_fork_asm+0x1a/0x30 [ 565.901421][ T1226] [ 566.247097][ T5872] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 566.397971][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 566.399365][ T5872] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 566.399391][ T5872] usb 8-1: config 0 has no interface number 0 [ 566.399419][ T5872] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 566.399442][ T5872] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 566.399465][ T5872] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.399490][ T5872] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 566.399526][ T5872] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 566.399548][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.407567][ T5872] usb 8-1: config 0 descriptor?? [ 566.415880][ T5872] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 566.443325][T26323] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2563'. [ 566.503033][ T5872] usb 9-1: USB disconnect, device number 2 [ 566.619319][ T5946] usb 8-1: USB disconnect, device number 66 [ 566.632435][ T5946] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 566.826735][ T43] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 566.978365][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.978409][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 566.978431][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.982646][ T43] usb 2-1: config 0 descriptor?? [ 567.195203][T26396] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2573'. [ 567.273213][T26399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.275816][T26399] rdma_op ffff8880278a51f0 conn xmit_rdma 0000000000000000 [ 567.376737][ T5872] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 567.527281][ T5872] usb 9-1: Using ep0 maxpacket: 8 [ 567.531571][ T5872] usb 9-1: config index 0 descriptor too short (expected 2322, got 18) [ 567.531589][ T5872] usb 9-1: config 180 has an invalid descriptor of length 136, skipping remainder of the config [ 567.531600][ T5872] usb 9-1: config 180 has 0 interfaces, different from the descriptor's value: 4 [ 567.533544][ T5872] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 567.533579][ T5872] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 567.533598][ T5872] usb 9-1: Product: syz [ 567.533612][ T5872] usb 9-1: Manufacturer: syz [ 567.533625][ T5872] usb 9-1: SerialNumber: syz [ 567.630501][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 567.630604][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 567.643013][ T43] usb 2-1: USB disconnect, device number 101 [ 567.743850][ T5872] usb 9-1: USB disconnect, device number 3 [ 567.814894][T26439] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 567.907882][T26461] sctp: [Deprecated]: syz.1.2579 (pid 26461) Use of int in max_burst socket option deprecated. [ 567.907882][T26461] Use struct sctp_assoc_value instead [ 568.074757][T26474] binder: 26473:26474 ioctl c018620c 200000000380 returned -22 [ 568.168703][ T5872] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 568.184843][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2582'. [ 568.196776][ T5946] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 568.318389][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 568.318421][ T5872] usb 2-1: can't read configurations, error -61 [ 568.347103][ T5946] usb 9-1: Using ep0 maxpacket: 8 [ 568.348332][ T5946] usb 9-1: config index 0 descriptor too short (expected 2322, got 18) [ 568.348358][ T5946] usb 9-1: config 180 has an invalid descriptor of length 136, skipping remainder of the config [ 568.348377][ T5946] usb 9-1: config 180 has 0 interfaces, different from the descriptor's value: 4 [ 568.350011][ T5946] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 568.350036][ T5946] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 568.350055][ T5946] usb 9-1: Product: syz [ 568.350069][ T5946] usb 9-1: Manufacturer: syz [ 568.350081][ T5946] usb 9-1: SerialNumber: syz [ 568.446846][ T5872] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 568.556314][ T5946] usb 9-1: USB disconnect, device number 4 [ 568.557186][ T845] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 568.599321][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 568.599354][ T5872] usb 2-1: can't read configurations, error -61 [ 568.599506][ T5872] usb usb2-port1: attempt power cycle [ 568.696776][ T845] usb 8-1: device descriptor read/64, error -71 [ 568.719113][T26505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2586'. [ 568.720486][T26505] netlink: 'syz.6.2586': attribute type 5 has an invalid length. [ 568.720498][T26505] netlink: 'syz.6.2586': attribute type 9 has an invalid length. [ 568.936835][ T5872] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 568.946724][ T845] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 568.958882][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 568.958903][ T5872] usb 2-1: can't read configurations, error -61 [ 569.086673][ T5872] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 569.090545][ T845] usb 8-1: device descriptor read/64, error -71 [ 569.109813][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 569.109846][ T5872] usb 2-1: can't read configurations, error -61 [ 569.110011][ T5872] usb usb2-port1: unable to enumerate USB device [ 569.196961][ T845] usb usb8-port1: attempt power cycle [ 569.536819][ T845] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 569.568274][ T845] usb 8-1: device descriptor read/8, error -71 [ 569.606821][ T5946] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 569.746792][ T5946] usb 9-1: device descriptor read/64, error -71 [ 569.816827][ T845] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 569.837919][ T845] usb 8-1: device descriptor read/8, error -71 [ 569.946973][ T845] usb usb8-port1: unable to enumerate USB device [ 569.996794][ T5946] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 570.136744][ T5946] usb 9-1: device descriptor read/64, error -71 [ 570.166812][T26479] Bluetooth: hci3: command 0x0406 tx timeout [ 570.166853][T26479] Bluetooth: hci5: command 0x0406 tx timeout [ 570.247776][ T5946] usb usb9-port1: attempt power cycle [ 570.574481][ T5862] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 570.575160][ T5862] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 570.575197][ T5862] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 570.588534][ T5946] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 570.608064][ T5946] usb 9-1: device descriptor read/8, error -71 [ 570.676347][T26581] fuse: Bad value for 'user_id' [ 570.676361][T26581] fuse: Bad value for 'user_id' [ 570.700085][T26583] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2605'. [ 570.846718][ T5946] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 570.867252][ T5946] usb 9-1: device descriptor read/8, error -71 [ 570.987090][ T5946] usb usb9-port1: unable to enumerate USB device [ 571.688687][ T122] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 571.802441][T26616] overlayfs: failed to resolve './file1': -2 [ 571.842400][ T122] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 571.842430][ T122] usb 8-1: config 0 has no interface number 0 [ 571.842460][ T122] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 571.842483][ T122] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.844084][ T122] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 571.844111][ T122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.844130][ T122] usb 8-1: Product: syz [ 571.844145][ T122] usb 8-1: Manufacturer: syz [ 571.844160][ T122] usb 8-1: SerialNumber: syz [ 571.847386][ T122] usb 8-1: config 0 descriptor?? [ 571.847911][T26609] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 571.851079][ T122] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 571.860163][ T122] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 571.907933][T26634] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2615'. [ 572.070452][ T845] usb 8-1: USB disconnect, device number 71 [ 572.078975][ T845] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 572.079409][ T845] cyberjack 8-1:0.69: device disconnected [ 572.346773][ T122] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 572.498273][ T122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.498304][ T122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 572.498329][ T122] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 572.498409][ T122] usb 2-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 572.498432][ T122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.500499][ T122] usb 2-1: config 0 descriptor?? [ 572.502270][T26665] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 572.524292][ T122] usbhid 2-1:0.0: can't add hid device: -22 [ 572.524371][ T122] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 572.856833][ T122] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 572.966824][ T845] usb 8-1: new low-speed USB device number 72 using dummy_hcd [ 573.008424][ T122] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 573.008453][ T122] usb 9-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 573.008466][ T122] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.009570][ T122] usb 9-1: config 0 descriptor?? [ 573.010501][T26711] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 573.118637][ T845] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 573.118665][ T845] usb 8-1: config 0 has no interface number 0 [ 573.118694][ T845] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 573.118716][ T845] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 573.118731][ T845] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 573.118745][ T845] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 573.118768][ T845] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 573.118792][ T845] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 573.118827][ T845] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 573.118841][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.120187][ T845] usb 8-1: config 0 descriptor?? [ 573.120825][T26726] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 573.120920][T26726] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 573.128987][ T845] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 573.325532][T26726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.326572][T26726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.332397][ T5872] usb 8-1: USB disconnect, device number 72 [ 573.336468][ T5872] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 573.418657][T26711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.418950][T26711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.422542][T26757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.422810][T26757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.431967][ T122] usbhid 9-1:0.0: can't add hid device: -71 [ 573.432054][ T122] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 573.436295][ T122] usb 9-1: USB disconnect, device number 9 [ 573.951834][T26781] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2627'. [ 574.086434][T26784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2628'. [ 574.096799][ T845] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 574.248098][ T845] usb 8-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.248133][ T845] usb 8-1: config 0 interface 0 has no altsetting 0 [ 574.248163][ T845] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 574.248185][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.250389][ T845] usb 8-1: config 0 descriptor?? [ 574.655807][ T845] playstation 0003:054C:05C4.003F: unknown main item tag 0x0 [ 574.655832][ T845] playstation 0003:054C:05C4.003F: unknown main item tag 0x0 [ 574.655849][ T845] playstation 0003:054C:05C4.003F: unknown main item tag 0x0 [ 574.655865][ T845] playstation 0003:054C:05C4.003F: unknown main item tag 0x0 [ 574.655881][ T845] playstation 0003:054C:05C4.003F: unknown main item tag 0x0 [ 574.655897][ T845] playstation 0003:054C:05C4.003F: unknown main item tag 0x0 [ 574.655913][ T845] playstation 0003:054C:05C4.003F: unknown main item tag 0x0 [ 574.658893][ T845] playstation 0003:054C:05C4.003F: hidraw0: USB HID v40.00 Device [HID 054c:05c4] on usb-dummy_hcd.7-1/input0 [ 574.855135][ T845] playstation 0003:054C:05C4.003F: Invalid byte count transferred, expected 16 got 0 [ 574.855153][ T845] playstation 0003:054C:05C4.003F: Failed to retrieve DualShock4 pairing info: -22 [ 574.855171][ T845] playstation 0003:054C:05C4.003F: Failed to get MAC address from DualShock4 [ 574.855193][ T845] playstation 0003:054C:05C4.003F: Failed to create dualshock4. [ 574.856163][ T845] playstation 0003:054C:05C4.003F: probe with driver playstation failed with error -22 [ 574.858320][ T5946] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 575.006706][ T5946] usb 9-1: Using ep0 maxpacket: 8 [ 575.009410][ T5946] usb 9-1: unable to get BOS descriptor or descriptor too short [ 575.010333][ T5946] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 575.010357][ T5946] usb 9-1: config 0 has no interface number 0 [ 575.010453][ T5946] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 575.010474][ T5946] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 575.010486][ T5946] usb 9-1: config 0 interface 88 has no altsetting 0 [ 575.012914][ T5946] usb 9-1: string descriptor 0 read error: -22 [ 575.013005][ T5946] usb 9-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 575.013019][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 575.014172][ T5946] usb 9-1: config 0 descriptor?? [ 575.019231][ T5946] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input67 [ 575.050545][ T6147] udevd[6147]: Error opening device "/dev/input/event4": Input/output error [ 575.050601][ T6147] udevd[6147]: Unable to EVIOCGABS device "/dev/input/event4" [ 575.050643][ T6147] udevd[6147]: Unable to EVIOCGABS device "/dev/input/event4" [ 575.059088][T26775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.061926][T26775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.062889][ T5946] usb 8-1: USB disconnect, device number 73 [ 575.124066][ T845] usb 2-1: USB disconnect, device number 106 [ 575.219784][ T5872] usb 9-1: USB disconnect, device number 10 [ 575.243033][T26851] syzkaller1: entered promiscuous mode [ 575.243056][T26851] syzkaller1: entered allmulticast mode [ 575.556737][ T845] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 575.728994][ T845] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 575.730378][ T845] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 575.730397][ T845] usb 2-1: can't read configurations, error -61 [ 575.857921][ T845] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 576.008012][ T845] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 576.009202][ T845] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 576.009231][ T845] usb 2-1: can't read configurations, error -61 [ 576.009469][ T845] usb usb2-port1: attempt power cycle [ 576.101839][T26872] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2643'. [ 576.143537][T26881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2636'. [ 576.271895][T26893] netlink: 14532 bytes leftover after parsing attributes in process `syz.8.2638'. [ 576.366728][ T845] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 576.389083][ T845] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 576.390239][ T845] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 576.390266][ T845] usb 2-1: can't read configurations, error -61 [ 576.518385][ T845] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 576.553388][ T845] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 576.554561][ T845] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 576.554591][ T845] usb 2-1: can't read configurations, error -61 [ 576.554898][ T845] usb usb2-port1: unable to enumerate USB device [ 576.623499][T26902] syz.7.2644: vmalloc error: size 2764800, failed to allocated page array size 5400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 576.623564][T26902] CPU: 1 UID: 0 PID: 26902 Comm: syz.7.2644 Not tainted syzkaller #0 PREEMPT(full) [ 576.623584][T26902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 576.623595][T26902] Call Trace: [ 576.623601][T26902] [ 576.623607][T26902] dump_stack_lvl+0x189/0x250 [ 576.623620][T26902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.623630][T26902] ? __pfx__printk+0x10/0x10 [ 576.623642][T26902] ? lock_release+0x4b/0x3e0 [ 576.623654][T26902] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 576.623668][T26902] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 576.623681][T26902] warn_alloc+0x214/0x310 [ 576.623694][T26902] ? __pfx_warn_alloc+0x10/0x10 [ 576.623707][T26902] ? __get_vm_area_node+0x28f/0x300 [ 576.623717][T26902] ? vb2_vmalloc_alloc+0xef/0x340 [ 576.623728][T26902] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 576.623744][T26902] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 576.623754][T26902] ? vb2_vmalloc_alloc+0xb2/0x340 [ 576.623764][T26902] ? __kasan_kmalloc+0x93/0xb0 [ 576.623776][T26902] vmalloc_user_noprof+0xad/0xf0 [ 576.623787][T26902] ? vb2_vmalloc_alloc+0xef/0x340 [ 576.623796][T26902] vb2_vmalloc_alloc+0xef/0x340 [ 576.623804][T26902] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 576.623814][T26902] __vb2_queue_alloc+0x9c2/0x15a0 [ 576.623831][T26902] vb2_core_reqbufs+0xc31/0x1420 [ 576.623847][T26902] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 576.623868][T26902] ? vb2_verify_memory_type+0x1fc/0x570 [ 576.623881][T26902] ? vb2_reqbufs+0x3a9/0x630 [ 576.623895][T26902] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 576.623907][T26902] __video_do_ioctl+0xa59/0xc10 [ 576.623916][T26902] ? rcu_is_watching+0x15/0xb0 [ 576.623930][T26902] ? __pfx___video_do_ioctl+0x10/0x10 [ 576.623939][T26902] ? __might_fault+0xb0/0x130 [ 576.623950][T26902] ? __might_fault+0xcc/0x130 [ 576.623960][T26902] video_usercopy+0x82d/0x1450 [ 576.623971][T26902] ? __pfx___video_do_ioctl+0x10/0x10 [ 576.623980][T26902] ? __pfx_video_usercopy+0x10/0x10 [ 576.623992][T26902] ? __fget_files+0x3a0/0x420 [ 576.624006][T26902] v4l2_ioctl+0x18d/0x1e0 [ 576.624015][T26902] ? __pfx_v4l2_ioctl+0x10/0x10 [ 576.624023][T26902] __se_sys_ioctl+0xfc/0x170 [ 576.624035][T26902] do_syscall_64+0xfa/0xfa0 [ 576.624047][T26902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.624056][T26902] ? clear_bhb_loop+0x60/0xb0 [ 576.624067][T26902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.624077][T26902] RIP: 0033:0x7f58f158eba9 [ 576.624087][T26902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.624096][T26902] RSP: 002b:00007f58f23a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.624106][T26902] RAX: ffffffffffffffda RBX: 00007f58f17d5fa0 RCX: 00007f58f158eba9 [ 576.624116][T26902] RDX: 00002000000001c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 576.624123][T26902] RBP: 00007f58f1611e19 R08: 0000000000000000 R09: 0000000000000000 [ 576.624129][T26902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.624135][T26902] R13: 00007f58f17d6038 R14: 00007f58f17d5fa0 R15: 00007ffc991400e8 [ 576.624146][T26902] [ 576.624150][T26902] Mem-Info: [ 576.624156][T26902] active_anon:8438 inactive_anon:0 isolated_anon:0 [ 576.624156][T26902] active_file:16783 inactive_file:40117 isolated_file:0 [ 576.624156][T26902] unevictable:768 dirty:99 writeback:0 [ 576.624156][T26902] slab_reclaimable:7061 slab_unreclaimable:106528 [ 576.624156][T26902] mapped:35537 shmem:1432 pagetables:1870 [ 576.624156][T26902] sec_pagetables:0 bounce:0 [ 576.624156][T26902] kernel_misc_reclaimable:0 [ 576.624156][T26902] free:1283466 free_pcp:18861 free_cma:0 [ 576.624182][T26902] Node 0 active_anon:33752kB inactive_anon:0kB active_file:67108kB inactive_file:160268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142124kB dirty:392kB writeback:0kB shmem:4192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13864kB pagetables:7348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 576.624207][T26902] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 576.624231][T26902] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 576.624259][T26902] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 576.624279][T26902] Node 0 DMA32 free:1249456kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33700kB inactive_anon:0kB active_file:67108kB inactive_file:159188kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2555276kB mlocked:0kB bounce:0kB free_pcp:35764kB local_pcp:15752kB free_cma:0kB [ 576.624311][T26902] lowmem_reserve[]: 0 0 1 1 1 [ 576.624331][T26902] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.624361][T26902] lowmem_reserve[]: 0 0 0 0 0 [ 576.624379][T26902] Node 1 Normal free:3869080kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39648kB local_pcp:33280kB free_cma:0kB [ 576.624408][T26902] lowmem_reserve[]: 0 0 0 0 0 [ 576.624427][T26902] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 15328kB [ 576.624498][T26902] Node 0 DMA32: 1099*4kB (UME) 1202*8kB (ME) 676*16kB (M) 436*32kB (UME) 208*64kB (UME) 272*128kB (UME) 215*256kB (UME) 57*512kB (UME) 65*1024kB (UME) 34*2048kB (UM) 230*4096kB (UM) = 1249404kB [ 576.624580][T26902] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 576.624631][T26902] Node 1 Normal: 198*4kB (UME) 48*8kB (UME) 36*16kB (UME) 230*32kB (UME) 86*64kB (UME) 19*128kB (UME) 5*256kB (UE) 1*512kB (M) 0*1024kB 2*2048kB (UE) 939*4096kB (UM) = 3869080kB [ 576.624723][T26902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.624732][T26902] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.624740][T26902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.624749][T26902] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.624757][T26902] 58328 total pagecache pages [ 576.624762][T26902] 0 pages in swap cache [ 576.624766][T26902] Free swap = 124996kB [ 576.624770][T26902] Total swap = 124996kB [ 576.624775][T26902] 2097051 pages RAM [ 576.624779][T26902] 0 pages HighMem/MovableOnly [ 576.624783][T26902] 426334 pages reserved [ 576.624787][T26902] 0 pages cma reserved [ 576.699766][T26908] Did not find alt setting 32 for intf 0, config 1 [ 576.699790][T26908] usb usb8: usbfs: process 26908 (syz.7.2645) did not claim interface 32 before use [ 576.817574][T26917] vlan0: entered promiscuous mode [ 576.817717][T26917] vlan0: entered allmulticast mode [ 576.817732][T26917] veth0_vlan: entered allmulticast mode [ 576.996710][ T5872] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 577.056823][ T845] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 577.170231][ T5872] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 577.170258][ T5872] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 577.170278][ T5872] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 577.170296][ T5872] usb 8-1: config 220 has no interface number 2 [ 577.170327][ T5872] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 577.170341][ T5872] usb 8-1: config 220 interface 0 has no altsetting 0 [ 577.170350][ T5872] usb 8-1: config 220 interface 76 has no altsetting 0 [ 577.170359][ T5872] usb 8-1: config 220 interface 1 has no altsetting 0 [ 577.171926][ T5872] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 577.171952][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.171970][ T5872] usb 8-1: Product: syz [ 577.171984][ T5872] usb 8-1: Manufacturer: syz [ 577.171998][ T5872] usb 8-1: SerialNumber: syz [ 577.207022][ T845] usb 9-1: Using ep0 maxpacket: 8 [ 577.209420][ T845] usb 9-1: unable to get BOS descriptor or descriptor too short [ 577.210325][ T845] usb 9-1: config 9 has an invalid interface number: 55 but max is 0 [ 577.210344][ T845] usb 9-1: config 9 has no interface number 0 [ 577.210356][ T845] usb 9-1: config 9 interface 55 has no altsetting 0 [ 577.212073][ T845] usb 9-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=93.30 [ 577.212098][ T845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.212117][ T845] usb 9-1: Product: syz [ 577.212126][ T845] usb 9-1: Manufacturer: syz [ 577.212134][ T845] usb 9-1: SerialNumber: syz [ 577.386543][ T5872] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 577.386857][ T5872] usb 8-1: No valid video chain found. [ 577.386908][ T5872] usb 8-1: selecting invalid altsetting 0 [ 577.392401][ T5872] usb 8-1: selecting invalid altsetting 0 [ 577.392418][ T5872] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 577.394491][ T5872] usb 8-1: USB disconnect, device number 74 [ 577.397550][T19262] udevd[19262]: setting mode of /dev/bus/usb/008/074 to 020664 failed: No such file or directory [ 577.397656][T19262] udevd[19262]: setting owner of /dev/bus/usb/008/074 to uid=0, gid=0 failed: No such file or directory [ 577.429114][ T845] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 577.433053][ T845] usb 9-1: USB disconnect, device number 11 [ 577.995782][T26960] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2652'. [ 578.007568][T26960] fuse: Unknown parameter 'fd0x000000000000000a' [ 578.169501][T26967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2653'. [ 578.256737][T26787] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 578.426693][T26787] usb 9-1: Using ep0 maxpacket: 8 [ 578.428325][T26787] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 578.428353][T26787] usb 9-1: config 0 has no interface number 0 [ 578.428383][T26787] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 578.428405][T26787] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 578.428428][T26787] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.428452][T26787] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 578.428487][T26787] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 578.428508][T26787] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.434278][T26787] usb 9-1: config 0 descriptor?? [ 578.439089][T26787] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 578.596944][ T845] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 578.653782][ T122] usb 9-1: USB disconnect, device number 12 [ 578.662268][ T122] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 578.746664][ T845] usb 8-1: Using ep0 maxpacket: 8 [ 578.748973][ T845] usb 8-1: unable to get BOS descriptor or descriptor too short [ 578.753592][ T845] usb 8-1: config 4 has an invalid interface number: 201 but max is 0 [ 578.753619][ T845] usb 8-1: config 4 has no interface number 0 [ 578.753643][ T845] usb 8-1: config 4 interface 201 has no altsetting 0 [ 578.755520][ T845] usb 8-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=c0.e3 [ 578.755546][ T845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.755565][ T845] usb 8-1: Product: ᄡ竕筙ꇑ狖酮 [ 578.755580][ T845] usb 8-1: Manufacturer: ࠬ [ 578.755594][ T845] usb 8-1: SerialNumber: syz [ 578.796380][T27053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.816548][ T5928] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 578.830277][ T5928] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 578.974616][ T845] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:4.201/input/input68 [ 578.975946][ T5217] bcm5974 8-1:4.201: could not read from device [ 578.975978][ T5217] bcm5974: mode switch failed [ 578.976520][ T5217] bcm5974 8-1:4.201: could not read from device [ 578.976543][ T5217] bcm5974: mode switch failed [ 578.979095][ T5217] bcm5974 8-1:4.201: could not read from device [ 578.979119][ T5217] bcm5974: mode switch failed [ 578.979614][ T5217] bcm5974 8-1:4.201: could not read from device [ 578.979636][ T5217] bcm5974: mode switch failed [ 578.981791][ T845] usb 8-1: USB disconnect, device number 75 [ 579.249903][T27087] could not allocate digest TFM handle hmac(sha1-avx2) [ 579.442988][T27113] [U]  [ 579.443004][T27113] [U] K{ [ 579.443014][T27113] [U] t 1ŠFfˊ`GJgo/mC [ 579.443036][T27113] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 579.443055][T27113] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 579.443086][T27113] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 579.443136][T27113] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 579.443160][T27113] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 579.443177][T27113] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 579.443200][T27113] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 579.443308][T27113] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 579.443324][T27113] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 579.443338][T27113] [U] 22Ʃx?0;3u [ 579.443359][T27113] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 579.443381][T27113] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 579.443395][T27113] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 579.443407][T27113] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 579.443420][T27113] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 579.443433][T27113] [U] ec [ 579.443445][T27113] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 579.444097][T27113] netlink: 184 bytes leftover after parsing attributes in process `syz.8.2675'. [ 579.444888][T27110] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 579.550383][T27137] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.2679'. [ 579.551895][T27137] netlink: 'syz.6.2679': attribute type 4 has an invalid length. [ 579.555596][T27128] syzkaller1: entered promiscuous mode [ 579.555616][T27128] syzkaller1: entered allmulticast mode [ 579.559697][ T5872] lo speed is unknown, defaulting to 1000 [ 579.559728][ T5872] syz2: Port: 1 Link DOWN [ 579.560934][T27128] syzkaller1: left promiscuous mode [ 579.560951][T27128] syzkaller1: left allmulticast mode [ 579.562748][T27137] netlink: 'syz.6.2679': attribute type 4 has an invalid length. [ 579.565277][ T5915] lo speed is unknown, defaulting to 1000 [ 579.565294][ T5915] syz2: Port: 1 Link ACTIVE [ 579.756809][ T5928] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 579.796684][ T845] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 579.796774][ T122] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 579.906864][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 579.907946][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.909367][ T5928] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 579.909392][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.909412][ T5928] usb 2-1: Product: syz [ 579.909422][ T5928] usb 2-1: Manufacturer: syz [ 579.909429][ T5928] usb 2-1: SerialNumber: syz [ 579.910484][ T5928] usb 2-1: config 0 descriptor?? [ 579.913755][ T5928] usb 2-1: bad CDC descriptors [ 579.914241][ T5928] usb 2-1: unsupported MDLM descriptors [ 579.947047][ T122] usb 9-1: Using ep0 maxpacket: 32 [ 579.949133][ T122] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 579.949149][ T122] usb 9-1: config 0 has no interface number 0 [ 579.949166][ T122] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 579.949181][ T122] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 579.950736][ T122] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 579.950752][ T122] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.950762][ T122] usb 9-1: Product: syz [ 579.950769][ T122] usb 9-1: Manufacturer: syz [ 579.950776][ T122] usb 9-1: SerialNumber: syz [ 579.951862][ T122] usb 9-1: config 0 descriptor?? [ 579.956887][ T845] usb 8-1: Using ep0 maxpacket: 8 [ 579.959008][ T845] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 579.959032][ T845] usb 8-1: config 0 has no interface number 0 [ 579.959061][ T845] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 579.959084][ T845] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 579.959107][ T845] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.959132][ T845] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 579.959166][ T845] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 579.959187][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.960688][ T845] usb 8-1: config 0 descriptor?? [ 579.967385][ T845] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 580.114891][ T5928] usb 2-1: USB disconnect, device number 111 [ 580.156214][T27128] comedi: valid board names for 8255 driver are: [ 580.156225][T27128] 8255 [ 580.156230][T27128] comedi: valid board names for vmk80xx driver are: [ 580.156235][T27128] vmk80xx [ 580.156239][T27128] comedi: valid board names for usbduxsigma driver are: [ 580.156244][T27128] usbduxsigma [ 580.156248][T27128] comedi: valid board names for usbduxfast driver are: [ 580.156255][T27128] usbduxfast [ 580.156262][T27128] comedi: valid board names for usbdux driver are: [ 580.156270][T27128] usbdux [ 580.156278][T27128] comedi: valid board names for ni6501 driver are: [ 580.156287][T27128] ni6501 [ 580.156295][T27128] comedi: valid board names for dt9812 driver are: [ 580.156305][T27128] dt9812 [ 580.156312][T27128] comedi: valid board names for ni_labpc_cs driver are: [ 580.156321][T27128] ni_labpc_cs [ 580.156328][T27128] comedi: valid board names for ni_daq_700 driver are: [ 580.156337][T27128] ni_daq_700 [ 580.156345][T27128] comedi: valid board names for labpc_pci driver are: [ 580.156350][T27128] labpc_pci [ 580.156354][T27128] comedi: valid board names for adl_pci9118 driver are: [ 580.156358][T27128] pci9118dg [ 580.156362][T27128] pci9118hg [ 580.156366][T27128] pci9118hr [ 580.156370][T27128] comedi: valid board names for 8255_pci driver are: [ 580.156374][T27128] 8255_pci [ 580.156378][T27128] comedi: valid board names for s526 driver are: [ 580.156383][T27128] s526 [ 580.156386][T27128] comedi: valid board names for multiq3 driver are: [ 580.156391][T27128] multiq3 [ 580.156395][T27128] comedi: valid board names for pcmuio driver are: [ 580.156399][T27128] pcmuio48 [ 580.156403][T27128] pcmuio96 [ 580.156410][T27128] comedi: valid board names for pcmmio driver are: [ 580.156419][T27128] pcmmio [ 580.156426][T27128] comedi: valid board names for pcmda12 driver are: [ 580.156436][T27128] pcmda12 [ 580.156443][T27128] comedi: valid board names for pcmad driver are: [ 580.156453][T27128] pcmad12 [ 580.156460][T27128] pcmad16 [ 580.156467][T27128] comedi: valid board names for ni_labpc driver are: [ 580.156476][T27128] lab-pc-1200 [ 580.156484][T27128] lab-pc-1200ai [ 580.156491][T27128] lab-pc+ [ 580.156495][T27128] comedi: valid board names for atmio16 driver are: [ 580.156500][T27128] atmio16 [ 580.156503][T27128] atmio16d [ 580.156507][T27128] comedi: valid board names for ni_at_ao driver are: [ 580.156512][T27128] at-ao-6 [ 580.156515][T27128] at-ao-10 [ 580.156519][T27128] comedi: valid board names for ni_at_a2150 driver are: [ 580.156524][T27128] ni_at_a2150 [ 580.156528][T27128] comedi: valid board names for adq12b driver are: [ 580.156532][T27128] adq12b [ 580.156536][T27128] comedi: valid board names for mpc624 driver are: [ 580.156540][T27128] mpc624 [ 580.156544][T27128] comedi: valid board names for c6xdigio driver are: [ 580.156549][T27128] c6xdigio [ 580.156554][T27128] comedi: valid board names for aio_iiro_16 driver are: [ 580.156564][T27128] aio_iiro_16 [ 580.156571][T27128] comedi: valid board names for aio_aio12_8 driver are: [ 580.159101][T27128] aio_aio12_8 [ 580.159112][T27128] aio_ai12_8 [ 580.159120][T27128] aio_ao12_4 [ 580.159128][T27128] comedi: valid board names for fl512 driver are: [ 580.159138][T27128] fl512 [ 580.159145][T27128] comedi: valid board names for dmm32at driver are: [ 580.159156][T27128] dmm32at [ 580.159163][T27128] comedi: valid board names for dt282x driver are: [ 580.159173][T27128] dt2821 [ 580.159180][T27128] dt2821-f [ 580.159188][T27128] dt2821-g [ 580.159195][T27128] dt2823 [ 580.159202][T27128] dt2824-pgh [ 580.159208][T27128] dt2824-pgl [ 580.159216][T27128] dt2825 [ 580.159223][T27128] dt2827 [ 580.159230][T27128] dt2828 [ 580.159237][T27128] dt2829 [ 580.159244][T27128] dt21-ez [ 580.159251][T27128] dt23-ez [ 580.159258][T27128] dt24-ez [ 580.159265][T27128] dt24-ez-pgl [ 580.159272][T27128] comedi: valid board names for dt2817 driver are: [ 580.159282][T27128] dt2817 [ 580.159290][T27128] comedi: valid board names for dt2815 driver are: [ 580.159298][T27128] dt2815 [ 580.159305][T27128] comedi: valid board names for dt2814 driver are: [ 580.159314][T27128] dt2814 [ 580.159321][T27128] comedi: valid board names for dt2811 driver are: [ 580.159331][T27128] dt2811-pgh [ 580.159338][T27128] dt2811-pgl [ 580.159345][T27128] comedi: valid board names for dt2801 driver are: [ 580.159354][T27128] dt2801 [ 580.159361][T27128] comedi: valid board names for das6402 driver are: [ 580.159370][T27128] das6402-12 [ 580.159396][T27128] das6402-16 [ 580.159404][T27128] comedi: valid board names for das1800 driver are: [ 580.159413][T27128] das-1701st [ 580.159421][T27128] das-1701st-da [ 580.159428][T27128] das-1702st [ 580.159434][T27128] das-1702st-da [ 580.159441][T27128] das-1702hr [ 580.159448][T27128] das-1702hr-da [ 580.159455][T27128] das-1701ao [ 580.159462][T27128] das-1702ao [ 580.159469][T27128] das-1801st [ 580.159476][T27128] das-1801st-da [ 580.159483][T27128] das-1802st [ 580.159489][T27128] das-1802st-da [ 580.159497][T27128] das-1802hr [ 580.159504][T27128] das-1802hr-da [ 580.159511][T27128] das-1801hc [ 580.159517][T27128] das-1802hc [ 580.159523][T27128] das-1801ao [ 580.159530][T27128] das-1802ao [ 580.159537][T27128] comedi: valid board names for das800 driver are: [ 580.159547][T27128] das-800 [ 580.159554][T27128] cio-das800 [ 580.159562][T27128] das-801 [ 580.159569][T27128] cio-das801 [ 580.159576][T27128] das-802 [ 580.159584][T27128] cio-das802 [ 580.159590][T27128] cio-das802/16 [ 580.159596][T27128] comedi: valid board names for isa-das08 driver are: [ 580.159601][T27128] isa-das08 [ 580.159605][T27128] das08-pgm [ 580.159609][T27128] das08-pgh [ 580.159612][T27128] das08-pgl [ 580.159616][T27128] das08-aoh [ 580.159619][T27128] das08-aol [ 580.159624][T27128] das08-aom [ 580.159630][T27128] das08/jr-ao [ 580.159636][T27128] das08jr-16-ao [ 580.159642][T27128] pc104-das08 [ 580.159650][T27128] das08jr/16 [ 580.159657][T27128] comedi: valid board names for das16m1 driver are: [ 580.159667][T27128] das16m1 [ 580.159674][T27128] comedi: valid board names for dac02 driver are: [ 580.159684][T27128] dac02 [ 580.159691][T27128] comedi: valid board names for rti802 driver are: [ 580.159700][T27128] rti802 [ 580.159707][T27128] comedi: valid board names for rti800 driver are: [ 580.159716][T27128] rti800 [ 580.159722][T27128] rti815 [ 580.159725][T27128] comedi: valid board names for pcm3724 driver are: [ 580.159730][T27128] pcm3724 [ 580.159733][T27128] comedi: valid board names for pcl818 driver are: [ 580.159738][T27128] pcl818l [ 580.159742][T27128] pcl818h [ 580.159745][T27128] pcl818hd [ 580.159749][T27128] pcl818hg [ 580.159753][T27128] pcl818 [ 580.159756][T27128] pcl718 [ 580.159760][T27128] pcm3718 [ 580.159763][T27128] comedi: valid board names for pcl816 driver are: [ 580.159768][T27128] pcl816 [ 580.159771][T27128] pcl814b [ 580.159775][T27128] comedi: valid board names for pcl812 driver are: [ 580.159780][T27128] pcl812 [ 580.159787][T27128] pcl812pg [ 580.159793][T27128] acl8112pg [ 580.159801][T27128] acl8112dg [ 580.159808][T27128] acl8112hg [ 580.159815][T27128] a821pgl [ 580.159822][T27128] a821pglnda [ 580.159830][T27128] a821pgh [ 580.159837][T27128] a822pgl [ 580.159844][T27128] a822pgh [ 580.159851][T27128] a823pgl [ 580.159858][T27128] a823pgh [ 580.159865][T27128] pcl813 [ 580.159869][T27128] pcl813b [ 580.159873][T27128] acl8113 [ 580.159876][T27128] iso813 [ 580.159880][T27128] acl8216 [ 580.159889][T27128] a826pg [ 580.159893][T27128] comedi: valid board names for pcl730 driver are: [ 580.159898][T27128] pcl730 [ 580.159902][T27128] iso730 [ 580.159906][T27128] acl7130 [ 580.159909][T27128] pcm3730 [ 580.159913][T27128] pcl725 [ 580.159917][T27128] p8r8dio [ 580.159921][T27128] acl7225b [ 580.159925][T27128] p16r16dio [ 580.159931][T27128] pcl733 [ 580.159938][T27128] pcl734 [ 580.159945][T27128] opmm-1616-xt [ 580.159953][T27128] pearl-mm-p [ 580.159960][T27128] ir104-pbf [ 580.159968][T27128] comedi: valid board names for pcl726 driver are: [ 580.159978][T27128] pcl726 [ 580.159985][T27128] pcl727 [ 580.159993][T27128] pcl728 [ 580.160000][T27128] acl6126 [ 580.160008][T27128] acl6128 [ 580.160013][T27128] comedi: valid board names for pcl724 driver are: [ 580.160018][T27128] pcl724 [ 580.160022][T27128] pcl722 [ 580.160025][T27128] pcl731 [ 580.160029][T27128] acl7122 [ 580.160032][T27128] acl7124 [ 580.160036][T27128] pet48dio [ 580.160039][T27128] pcmio48 [ 580.160043][T27128] onyx-mm-dio [ 580.160047][T27128] comedi: valid board names for pcl711 driver are: [ 580.160052][T27128] pcl711 [ 580.160055][T27128] pcl711b [ 580.160059][T27128] acl8112hg [ 580.160062][T27128] acl8112dg [ 580.160066][T27128] comedi: valid board names for amplc_pc263 driver are: [ 580.160071][T27128] pc263 [ 580.160076][T27128] comedi: valid board names for amplc_pc236 driver are: [ 580.160086][T27128] pc36at [ 580.160093][T27128] comedi: valid board names for amplc_dio200 driver are: [ 580.160103][T27128] pc212e [ 580.160110][T27128] pc214e [ 580.160117][T27128] pc215e [ 580.160124][T27128] pc218e [ 580.160131][T27128] pc272e [ 580.160138][T27128] comedi: valid board names for comedi_parport driver are: [ 580.160148][T27128] comedi_parport [ 580.160155][T27128] comedi: valid board names for comedi_test driver are: [ 580.160161][T27128] comedi_test [ 580.160165][T27128] comedi: valid board names for comedi_bond driver are: [ 580.160170][T27128] comedi_bond [ 580.164896][ T122] radio-si470x 9-1:0.35: this is not a si470x device. [ 580.174011][ T845] usb 8-1: USB disconnect, device number 76 [ 580.179831][ T845] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 580.186905][ T122] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 580.193414][ T122] usb 9-1: USB disconnect, device number 13 [ 580.839492][T27186] cgroup: Invalid name [ 580.966690][ T5946] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 581.075278][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2693'. [ 581.108033][T27221] PM: Image not found (code -22) [ 581.115599][T27224] PM: Image not found (code -22) [ 581.126200][ T5946] usb 9-1: config index 0 descriptor too short (expected 44306, got 18) [ 581.126229][ T5946] usb 9-1: config 0 has too many interfaces: 140, using maximum allowed: 32 [ 581.126249][ T5946] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 140 [ 581.126267][ T5946] usb 9-1: config 0 has no interface number 0 [ 581.126299][ T5946] usb 9-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.22 [ 581.126320][ T5946] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.133137][ T5946] usb 9-1: config 0 descriptor?? [ 581.134469][ T5946] usb-storage 9-1:0.33: USB Mass Storage device detected [ 581.338857][ T122] usb 9-1: USB disconnect, device number 14 [ 581.446840][ T5946] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 581.612628][ T5946] usb 8-1: unable to get BOS descriptor or descriptor too short [ 581.612661][ T5946] usb 8-1: too many configurations: 161, using maximum allowed: 8 [ 581.613931][ T5946] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 581.613949][ T5946] usb 8-1: can't read configurations, error -71 [ 581.866034][T27272] tmpfs: Unknown parameter '' [ 581.965599][T27272] syz.1.2702 (27272): drop_caches: 2 [ 582.003291][T27282] tipc: Started in network mode [ 582.003308][T27282] tipc: Node identity ce06164015b, cluster identity 4711 [ 582.003367][T27282] tipc: Enabled bearer , priority 0 [ 582.003772][T27282] syzkaller0: entered promiscuous mode [ 582.003783][T27282] syzkaller0: entered allmulticast mode [ 582.006300][T27282] tipc: Resetting bearer [ 582.012525][T27281] tipc: Resetting bearer [ 582.013330][T27281] tipc: Disabling bearer [ 582.146783][ T845] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 582.296853][ T845] usb 9-1: Using ep0 maxpacket: 32 [ 582.298381][ T845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.298418][ T845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.298449][ T845] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 582.298465][ T845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.299572][ T845] usb 9-1: config 0 descriptor?? [ 582.302503][ T845] hub 9-1:0.0: USB hub found [ 582.467028][T27324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2714'. [ 582.510673][T26787] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 582.530959][ T845] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 582.676844][T26787] usb 2-1: Using ep0 maxpacket: 16 [ 582.680089][T26787] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 582.680107][T26787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 582.681503][T26787] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 582.681518][T26787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.681529][T26787] usb 2-1: Product: syz [ 582.681536][T26787] usb 2-1: Manufacturer: syz [ 582.681544][T26787] usb 2-1: SerialNumber: syz [ 582.682881][T26787] usb 2-1: config 0 descriptor?? [ 582.686919][T26787] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 582.686947][T26787] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 582.696719][ T5946] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 582.858574][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.858610][ T5946] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 582.858623][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.859829][ T5946] usb 8-1: config 0 descriptor?? [ 582.938788][ T845] usbhid 9-1:0.0: can't add hid device: -71 [ 582.938904][ T845] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 582.967780][ T845] usb 9-1: USB disconnect, device number 15 [ 583.263128][ T5946] keytouch 0003:0926:3333.0041: fixing up Keytouch IEC report descriptor [ 583.267074][ T5946] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0041/input/input69 [ 583.286515][T26787] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 583.287212][T26787] em28xx 2-1:0.0: Config register raw data: 0xd5 [ 583.349930][ T5946] keytouch 0003:0926:3333.0041: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 583.473937][ C0] kbd_keycode: 1064 callbacks suppressed [ 583.473961][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.474260][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.474826][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.475097][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.475115][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.475152][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.475166][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.475419][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.475437][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.475692][ C0] keyboard: can't emulate rawmode for keycode 240 [ 583.552096][T27375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.552336][T27375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.771063][ T845] usb 8-1: USB disconnect, device number 78 [ 583.856687][ T5928] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 584.008587][ T5928] usb 9-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 584.008619][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.010106][ T5928] usb 9-1: config 0 descriptor?? [ 584.222077][ T5928] kaweth 9-1:0.0: Firmware present in device. [ 584.327921][T26787] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 584.327946][T26787] em28xx 2-1:0.0: No AC97 audio processor [ 584.411697][ T5928] kaweth 9-1:0.0: Statistics collection: 0 [ 584.411721][ T5928] kaweth 9-1:0.0: Multicast filter limit: 0 [ 584.411737][ T5928] kaweth 9-1:0.0: MTU: 0 [ 584.411750][ T5928] kaweth 9-1:0.0: Read MAC address 00:00:00:00:00:00 [ 584.528353][T27428] blktrace: Concurrent blktraces are not allowed on loop12 [ 584.664076][T27443] overlayfs: failed to resolve './file0': -2 [ 584.818063][ T5928] kaweth 9-1:0.0: kaweth interface created at eth13 [ 584.977220][ T5872] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 585.015557][T27386] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 585.015579][T27386] overlayfs: failed to set xattr on upper [ 585.015588][T27386] overlayfs: ...falling back to redirect_dir=nofollow. [ 585.015596][T27386] overlayfs: ...falling back to index=off. [ 585.015603][T27386] overlayfs: ...falling back to uuid=null. [ 585.022807][T27385] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 585.022830][T27385] overlayfs: failed to set xattr on upper [ 585.022839][T27385] overlayfs: ...falling back to redirect_dir=nofollow. [ 585.022846][T27385] overlayfs: ...falling back to index=off. [ 585.022854][T27385] overlayfs: ...falling back to uuid=null. [ 585.025133][ T5928] usb 9-1: USB disconnect, device number 16 [ 585.129263][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 585.132366][ T5872] usb 8-1: config 0 has an invalid descriptor of length 240, skipping remainder of the config [ 585.132401][ T5872] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.132424][ T5872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 585.132449][ T5872] usb 8-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 585.132470][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.135153][ T5872] usb 8-1: config 0 descriptor?? [ 585.834185][T27532] tipc: Started in network mode [ 585.834209][T27532] tipc: Node identity 9ee611b11535, cluster identity 4711 [ 585.834274][T27532] tipc: Enabled bearer , priority 0 [ 585.834769][T27532] syzkaller0: entered promiscuous mode [ 585.834781][T27532] syzkaller0: entered allmulticast mode [ 585.840672][T27532] tipc: Resetting bearer [ 585.849932][T27531] tipc: Resetting bearer [ 585.850992][T27531] tipc: Disabling bearer [ 586.266714][ T845] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 586.426777][ T845] usb 9-1: Using ep0 maxpacket: 16 [ 586.435932][ T845] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.435971][ T845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.435995][ T845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.436027][ T845] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 586.436048][ T845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.438067][ T845] usb 9-1: config 0 descriptor?? [ 586.896884][ T845] hid-picolcd 0003:04D8:F002.0042: No report with id 0xf3 found [ 586.896910][ T845] hid-picolcd 0003:04D8:F002.0042: No report with id 0xf4 found [ 587.045454][ T122] usb 9-1: USB disconnect, device number 17 [ 587.751464][ T5928] usb 8-1: USB disconnect, device number 79 [ 597.851146][T27599] tipc: Enabled bearer , priority 0 [ 597.851761][T27599] syzkaller0: entered promiscuous mode [ 597.851781][T27599] syzkaller0: entered allmulticast mode [ 597.867036][T27599] tipc: Resetting bearer [ 597.896125][T27597] tipc: Resetting bearer [ 597.901930][T27597] tipc: Disabling bearer [ 598.024365][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 598.024615][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 598.024837][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 598.025438][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 598.025845][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 598.053932][T27621] wlan1 speed is unknown, defaulting to 1000 [ 598.054683][T27621] lo speed is unknown, defaulting to 1000 [ 598.153369][T27681] syzkaller1: entered promiscuous mode [ 598.153392][T27681] syzkaller1: entered allmulticast mode [ 598.155319][T27681] program syz.7.2767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.183387][T27621] chnl_net:caif_netlink_parms(): no params data found [ 598.236543][T27621] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.237847][T27621] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.237959][T27621] bridge_slave_0: entered allmulticast mode [ 598.238887][T27621] bridge_slave_0: entered promiscuous mode [ 598.240537][T27621] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.240636][T27621] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.240740][T27621] bridge_slave_1: entered allmulticast mode [ 598.241897][T27621] bridge_slave_1: entered promiscuous mode [ 598.275873][T27621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.277893][T27621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.314608][T27621] team0: Port device team_slave_0 added [ 598.316550][T27621] team0: Port device team_slave_1 added [ 598.342214][T27621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.342231][T27621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.342245][T27621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.342896][T27621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.342910][T27621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.342925][T27621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.384915][T27621] hsr_slave_0: entered promiscuous mode [ 598.385678][T27621] hsr_slave_1: entered promiscuous mode [ 598.386128][T27621] debugfs: 'hsr0' already exists in 'hsr' [ 598.386143][T27621] Cannot create hsr debugfs directory [ 598.513603][T27621] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 598.516457][T27621] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 598.519236][T27621] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 598.520955][T27621] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 598.533015][T27621] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.533061][T27621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.533153][T27621] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.533193][T27621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.564256][T27621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.601486][T27621] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.605065][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.613954][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.627890][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.627957][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.632485][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.632555][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.673657][T27996] overlayfs: failed to resolve './file0': -2 [ 598.710195][T28001] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2776'. [ 598.711698][T28001] netlink: 'syz.7.2776': attribute type 8 has an invalid length. [ 598.793330][T27621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.846929][T26787] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 598.996505][T27621] veth0_vlan: entered promiscuous mode [ 598.996857][T26787] usb 9-1: Using ep0 maxpacket: 8 [ 598.998602][T26787] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.998632][T26787] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.998663][T26787] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 598.998686][T26787] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.000065][T26787] usb 9-1: config 0 descriptor?? [ 599.002510][T27621] veth1_vlan: entered promiscuous mode [ 599.026519][T27621] veth0_macvtap: entered promiscuous mode [ 599.031488][T27621] veth1_macvtap: entered promiscuous mode [ 599.038227][T27621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.043086][T27621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.049816][ T1165] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.049862][ T1165] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.049893][ T1165] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.049920][ T1165] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.066010][T27621] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 599.081681][T16541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.081702][T16541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.083858][T27621] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 599.101613][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.101634][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.246753][ T122] usb 8-1: new full-speed USB device number 80 using dummy_hcd [ 599.404060][ T122] usb 8-1: config 0 has an invalid interface number: 133 but max is 3 [ 599.404088][ T122] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 599.404106][ T122] usb 8-1: config 0 has an invalid interface number: 91 but max is 3 [ 599.404125][ T122] usb 8-1: config 0 has an invalid interface number: 71 but max is 3 [ 599.404143][ T122] usb 8-1: config 0 has an invalid interface number: 18 but max is 3 [ 599.404161][ T122] usb 8-1: config 0 has an invalid interface number: 17 but max is 3 [ 599.404180][ T122] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 599.404197][ T122] usb 8-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 599.404228][ T122] usb 8-1: config 0 has no interface number 0 [ 599.404243][ T122] usb 8-1: config 0 has no interface number 1 [ 599.404259][ T122] usb 8-1: config 0 has no interface number 2 [ 599.404274][ T122] usb 8-1: config 0 has no interface number 3 [ 599.404289][ T122] usb 8-1: config 0 has no interface number 4 [ 599.404340][ T122] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x7 has an invalid bInterval 216, changing to 4 [ 599.404363][ T122] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 599.404386][ T122] usb 8-1: config 0 interface 133 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 599.404406][ T122] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x6 has invalid maxpacket 1951, setting to 64 [ 599.404429][ T122] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 599.404452][ T122] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 599.404473][ T122] usb 8-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 599.404492][ T122] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x8C has invalid maxpacket 60129, setting to 64 [ 599.404512][ T122] usb 8-1: config 0 interface 133 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 599.404533][ T122] usb 8-1: config 0 interface 133 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 599.404563][ T122] usb 8-1: config 0 interface 91 altsetting 94 has an invalid descriptor for endpoint zero, skipping [ 599.404583][ T122] usb 8-1: config 0 interface 91 altsetting 94 has a duplicate endpoint with address 0xC, skipping [ 599.404604][ T122] usb 8-1: config 0 interface 91 altsetting 94 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 599.404632][ T122] usb 8-1: config 0 interface 71 altsetting 154 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 599.404655][ T122] usb 8-1: config 0 interface 71 altsetting 154 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 599.404679][ T122] usb 8-1: config 0 interface 71 altsetting 154 has a duplicate endpoint with address 0xF, skipping [ 599.404698][ T122] usb 8-1: config 0 interface 71 altsetting 154 has a duplicate endpoint with address 0xF, skipping [ 599.404719][ T122] usb 8-1: config 0 interface 71 altsetting 154 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 599.404749][ T122] usb 8-1: config 0 interface 18 altsetting 9 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 599.404771][ T122] usb 8-1: config 0 interface 18 altsetting 9 endpoint 0x8A has invalid maxpacket 7238, setting to 64 [ 599.404795][ T122] usb 8-1: config 0 interface 18 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.404822][ T122] usb 8-1: config 0 interface 17 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 599.404840][ T122] usb 8-1: config 0 interface 17 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 599.404858][ T122] usb 8-1: config 0 interface 17 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 599.404876][ T122] usb 8-1: config 0 interface 17 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 599.404895][ T122] usb 8-1: config 0 interface 17 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 599.404915][ T122] usb 8-1: config 0 interface 17 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 599.404934][ T122] usb 8-1: config 0 interface 91 has no altsetting 0 [ 599.404951][ T122] usb 8-1: config 0 interface 71 has no altsetting 0 [ 599.404967][ T122] usb 8-1: config 0 interface 18 has no altsetting 0 [ 599.404984][ T122] usb 8-1: config 0 interface 17 has no altsetting 0 [ 599.405738][T26787] kye 0003:0458:5010.0043: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 599.406260][T26787] kye 0003:0458:5010.0043: item fetching failed at offset 0/3 [ 599.408701][ T122] usb 8-1: New USB device found, idVendor=12d1, idProduct=52c8, bcdDevice=81.f5 [ 599.408727][ T122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.408746][ T122] usb 8-1: Product: syz [ 599.408760][ T122] usb 8-1: Manufacturer: ⠁ [ 599.408774][ T122] usb 8-1: SerialNumber: syz [ 599.415050][T26787] kye 0003:0458:5010.0043: parse failed [ 599.415095][T26787] kye 0003:0458:5010.0043: probe with driver kye failed with error -22 [ 599.415312][ T122] usb 8-1: config 0 descriptor?? [ 599.416209][T28029] raw-gadget.5 gadget.7: fail, usb_ep_enable returned -22 [ 599.416440][T28029] raw-gadget.5 gadget.7: fail, usb_ep_enable returned -22 [ 599.586901][ T5872] IPVS: starting estimator thread 0... [ 599.637335][ T122] option 8-1:0.133: GSM modem (1-port) converter detected [ 599.669156][T27989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.669401][T27989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.677692][T28086] IPVS: using max 40 ests per chain, 96000 per kthread [ 599.690915][ T122] usb 8-1: USB disconnect, device number 80 [ 599.693825][ T122] option 8-1:0.133: device disconnected [ 600.032467][T28138] tipc: Enabling of bearer rejected, failed to enable media [ 600.086959][ T5876] Bluetooth: hci4: command tx timeout [ 600.236909][ T122] IPVS: starting estimator thread 0... [ 600.286178][T28149] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2804'. [ 600.287300][T28150] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2804'. [ 600.336696][T28147] IPVS: using max 48 ests per chain, 115200 per kthread [ 600.385505][T28155] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2806'. [ 600.593784][T28164] tipc: Enabled bearer , priority 0 [ 600.595739][T28164] syzkaller0: entered promiscuous mode [ 600.595759][T28164] syzkaller0: entered allmulticast mode [ 600.609786][T28164] tipc: Resetting bearer [ 600.622424][T28162] tipc: Resetting bearer [ 600.643923][T28162] tipc: Disabling bearer [ 600.702505][T28176] syzkaller1: entered promiscuous mode [ 600.702528][T28176] syzkaller1: entered allmulticast mode [ 600.707140][T28176] program syz.8.2811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.798205][T28185] netlink: 'syz.9.2813': attribute type 21 has an invalid length. [ 600.813201][T28185] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2813'. [ 600.929196][T28195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2816'. [ 601.052392][ T5872] IPVS: starting estimator thread 0... [ 601.136776][T28202] IPVS: using max 47 ests per chain, 112800 per kthread [ 601.148018][T28212] netlink: 'syz.8.2821': attribute type 3 has an invalid length. [ 601.159195][T28212] pim6reg1: entered promiscuous mode [ 601.159215][T28212] pim6reg1: entered allmulticast mode [ 601.424894][T28237] overlayfs: failed to resolve './file0': -2 [ 601.471035][T28239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2826'. [ 601.476962][ T122] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 601.619173][ T122] usb 10-1: device descriptor read/64, error -71 [ 601.856901][ T122] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 601.986864][ T122] usb 10-1: device descriptor read/64, error -71 [ 602.097632][ T122] usb usb10-port1: attempt power cycle [ 602.166689][ T5876] Bluetooth: hci4: command tx timeout [ 602.437404][ T122] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 602.461592][ T122] usb 10-1: device descriptor read/8, error -71 [ 602.696656][ T122] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 602.717305][ T122] usb 10-1: device descriptor read/8, error -71 [ 602.827691][ T122] usb usb10-port1: unable to enumerate USB device [ 604.246734][ T5876] Bluetooth: hci4: command tx timeout [ 604.248084][T28272] syzkaller1: entered promiscuous mode [ 604.248103][T28272] syzkaller1: entered allmulticast mode [ 604.250515][T28272] program syz.9.2835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.381689][T28387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2866'. [ 606.327497][ T5876] Bluetooth: hci4: command tx timeout [ 606.539250][T28446] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2887'. [ 606.683990][T28456] tipc: Enabling of bearer rejected, failed to enable media [ 607.209411][T28496] tipc: Started in network mode [ 607.209439][T28496] tipc: Node identity 8e7995ee0acb, cluster identity 4711 [ 607.209575][T28496] tipc: Enabled bearer , priority 0 [ 607.210131][T28496] syzkaller0: entered promiscuous mode [ 607.210149][T28496] syzkaller0: entered allmulticast mode [ 607.231093][T28495] tipc: Resetting bearer [ 607.247131][T28495] tipc: Disabling bearer [ 607.276688][ T5872] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 607.428972][ T5872] usb 8-1: Using ep0 maxpacket: 32 [ 607.430313][ T5872] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 607.430343][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 607.430368][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 607.430390][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 607.430414][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 607.432127][ T5872] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 607.432153][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.432172][ T5872] usb 8-1: Product: syz [ 607.432186][ T5872] usb 8-1: Manufacturer: syz [ 607.432200][ T5872] usb 8-1: SerialNumber: syz [ 607.433718][ T5872] usb 8-1: config 0 descriptor?? [ 607.859681][ T5872] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 607.859721][ T5872] input input70: Device does not respond to id packet M [ 607.866687][ T5872] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 607.866721][ T5872] input input70: Device does not respond to id packet P [ 607.867662][ T5872] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 607.867693][ T5872] input input70: Device does not respond to id packet B [ 607.867984][ T5872] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 607.868014][ T5872] input input70: Device does not respond to id packet N [ 607.868738][ T5872] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 607.869765][ T5872] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 607.872111][ T5872] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 607.877270][ T5872] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 607.881363][ T5872] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input70 [ 607.897154][ T5872] usb 8-1: USB disconnect, device number 81 [ 607.978007][T28557] tipc: Enabled bearer , priority 0 [ 607.978454][T28557] syzkaller0: entered promiscuous mode [ 607.978472][T28557] syzkaller0: entered allmulticast mode [ 607.985004][T28556] tipc: Resetting bearer [ 608.007585][T28556] tipc: Disabling bearer [ 608.723785][T28633] tipc: Enabling of bearer rejected, failed to enable media [ 608.746668][ T5872] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 608.906676][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 608.907916][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.907945][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.907975][ T5872] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 608.907997][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.909443][ T5872] usb 8-1: config 0 descriptor?? [ 609.136657][ T43] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 609.301580][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 609.317059][ T43] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 609.317091][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 609.317115][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 609.317166][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 609.317191][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 609.320879][ T5872] kye 0003:0458:5010.0044: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 609.321455][ T5872] kye 0003:0458:5010.0044: item fetching failed at offset 0/3 [ 609.332213][ T5872] kye 0003:0458:5010.0044: parse failed [ 609.332264][ T5872] kye 0003:0458:5010.0044: probe with driver kye failed with error -22 [ 609.333892][ T43] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 609.333919][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.333938][ T43] usb 10-1: Product: syz [ 609.333951][ T43] usb 10-1: Manufacturer: syz [ 609.333965][ T43] usb 10-1: SerialNumber: syz [ 609.335430][ T43] usb 10-1: config 0 descriptor?? [ 609.509933][T28669] tipc: Enabling of bearer rejected, failed to enable media [ 609.644976][T28609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.645237][T28609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.778203][ T43] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 609.778241][ T43] input input71: Device does not respond to id packet M [ 609.778524][ T43] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 609.778555][ T43] input input71: Device does not respond to id packet P [ 609.778827][ T43] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 609.778858][ T43] input input71: Device does not respond to id packet B [ 609.779118][ T43] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 609.779148][ T43] input input71: Device does not respond to id packet N [ 609.779408][ T43] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 609.779739][ T43] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 609.780021][ T43] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 609.780303][ T43] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 609.781517][ T43] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input71 [ 609.817107][ T43] usb 10-1: USB disconnect, device number 6 [ 610.583973][T28730] tipc: Enabled bearer , priority 0 [ 610.596275][T28730] syzkaller0: entered promiscuous mode [ 610.596298][T28730] syzkaller0: entered allmulticast mode [ 610.647628][T28728] tipc: Resetting bearer [ 610.681340][T28728] tipc: Disabling bearer [ 611.446777][ T6032] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 611.606915][ T6032] usb 10-1: Using ep0 maxpacket: 8 [ 611.617156][ T6032] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.617186][ T6032] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.617218][ T6032] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 611.617240][ T6032] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.618624][ T6032] usb 10-1: config 0 descriptor?? [ 612.025652][ T6032] kye 0003:0458:5010.0045: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 612.026170][ T6032] kye 0003:0458:5010.0045: item fetching failed at offset 0/3 [ 612.026564][ T6032] kye 0003:0458:5010.0045: parse failed [ 612.026662][ T6032] kye 0003:0458:5010.0045: probe with driver kye failed with error -22 [ 612.251529][T28766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.251735][T28766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.775348][T28790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.775587][T28790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.803046][ T5876] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 612.867832][T28806] tipc: Enabled bearer , priority 0 [ 612.868260][T28806] syzkaller0: entered promiscuous mode [ 612.868278][T28806] syzkaller0: entered allmulticast mode [ 612.870137][T28805] tipc: Resetting bearer [ 612.885811][T28805] tipc: Disabling bearer [ 612.896502][T28815] netlink: 'syz.9.2958': attribute type 19 has an invalid length. [ 612.896516][T28815] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2958'. [ 613.144461][T28833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.145057][T28833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.349167][T28856] tipc: Enabled bearer , priority 0 [ 613.349731][T28856] syzkaller0: entered promiscuous mode [ 613.349749][T28856] syzkaller0: entered allmulticast mode [ 613.352901][T28855] tipc: Resetting bearer [ 613.359579][T28855] tipc: Disabling bearer [ 613.620706][T28886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.620951][T28886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.714591][T28893] tipc: Enabled bearer , priority 0 [ 613.715060][T28893] syzkaller0: entered promiscuous mode [ 613.715078][T28893] syzkaller0: entered allmulticast mode [ 613.726197][T28892] tipc: Resetting bearer [ 613.733007][T28892] tipc: Disabling bearer [ 614.117704][T28944] tipc: Enabling of bearer rejected, failed to enable media [ 614.393465][T28978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.393712][T28978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.403218][T28976] tipc: Enabled bearer , priority 0 [ 614.404700][T28976] tipc: Resetting bearer [ 614.406346][T28975] tipc: Disabling bearer [ 614.589154][T29006] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3011'. [ 614.811892][T29033] tipc: Enabling of bearer rejected, failed to enable media [ 615.161407][T29069] syzkaller0: entered promiscuous mode [ 615.161429][T29069] syzkaller0: entered allmulticast mode [ 615.166116][T29076] FAULT_INJECTION: forcing a failure. [ 615.166116][T29076] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 615.166209][T29076] CPU: 1 UID: 0 PID: 29076 Comm: syz.7.3032 Not tainted syzkaller #0 PREEMPT(full) [ 615.166230][T29076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 615.166242][T29076] Call Trace: [ 615.166249][T29076] [ 615.166257][T29076] dump_stack_lvl+0x189/0x250 [ 615.166279][T29076] ? __pfx____ratelimit+0x10/0x10 [ 615.166299][T29076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.166316][T29076] ? __pfx__printk+0x10/0x10 [ 615.166338][T29076] ? __might_fault+0xb0/0x130 [ 615.166361][T29076] ? rcu_is_watching+0x15/0xb0 [ 615.166389][T29076] should_fail_ex+0x414/0x560 [ 615.166415][T29076] _copy_from_user+0x2d/0xb0 [ 615.166437][T29076] ___sys_sendmsg+0x158/0x2a0 [ 615.166461][T29076] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.166497][T29076] ? __fget_files+0x2a/0x420 [ 615.166521][T29076] ? __fget_files+0x3a0/0x420 [ 615.166548][T29076] __x64_sys_sendmsg+0x19b/0x260 [ 615.166572][T29076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.166599][T29076] ? __pfx_ksys_write+0x10/0x10 [ 615.166620][T29076] ? rcu_is_watching+0x15/0xb0 [ 615.166639][T29076] do_syscall_64+0xfa/0xfa0 [ 615.166657][T29076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.166674][T29076] ? clear_bhb_loop+0x60/0xb0 [ 615.166693][T29076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.166709][T29076] RIP: 0033:0x7f58f158eba9 [ 615.166724][T29076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.166737][T29076] RSP: 002b:00007f58f23a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.166753][T29076] RAX: ffffffffffffffda RBX: 00007f58f17d5fa0 RCX: 00007f58f158eba9 [ 615.166766][T29076] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 615.166777][T29076] RBP: 00007f58f23a9090 R08: 0000000000000000 R09: 0000000000000000 [ 615.166788][T29076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.166799][T29076] R13: 00007f58f17d6038 R14: 00007f58f17d5fa0 R15: 00007ffc991400e8 [ 615.166818][T29076] [ 615.252485][T29086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.252743][T29086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.431616][ T5876] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 615.433664][T29108] netlink: 'syz.7.3042': attribute type 2 has an invalid length. [ 615.440016][T29108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.440535][T29108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.626547][T29126] syzkaller0: entered promiscuous mode [ 615.626569][T29126] syzkaller0: entered allmulticast mode [ 615.990305][T29174] syzkaller0: entered promiscuous mode [ 615.990327][T29174] syzkaller0: entered allmulticast mode [ 616.910773][T29261] syzkaller0: entered promiscuous mode [ 616.910788][T29261] syzkaller0: entered allmulticast mode [ 617.264017][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3101'. [ 618.744508][T29384] TCP: TCP_TX_DELAY enabled [ 618.853141][T29393] netlink: 'syz.9.3134': attribute type 2 has an invalid length. [ 618.860908][T29393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.862967][T29393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.392414][T29442] FAULT_INJECTION: forcing a failure. [ 619.392414][T29442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.392436][T29442] CPU: 0 UID: 0 PID: 29442 Comm: syz.7.3154 Not tainted syzkaller #0 PREEMPT(full) [ 619.392448][T29442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 619.392454][T29442] Call Trace: [ 619.392458][T29442] [ 619.392463][T29442] dump_stack_lvl+0x189/0x250 [ 619.392477][T29442] ? __pfx____ratelimit+0x10/0x10 [ 619.392489][T29442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.392498][T29442] ? __pfx__printk+0x10/0x10 [ 619.392509][T29442] ? __might_fault+0xb0/0x130 [ 619.392521][T29442] ? vfs_write+0x956/0xb30 [ 619.392533][T29442] ? rcu_is_watching+0x15/0xb0 [ 619.392545][T29442] should_fail_ex+0x414/0x560 [ 619.392560][T29442] _copy_from_user+0x2d/0xb0 [ 619.392573][T29442] do_sock_getsockopt+0x17d/0x450 [ 619.392586][T29442] ? lock_release+0x4b/0x3e0 [ 619.392596][T29442] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 619.392608][T29442] ? rcu_needs_cpu+0x70/0xb0 [ 619.392618][T29442] ? __fget_files+0x2a/0x420 [ 619.392631][T29442] ? __fget_files+0x3a0/0x420 [ 619.392644][T29442] ? __fget_files+0x2a/0x420 [ 619.392657][T29442] __x64_sys_getsockopt+0x1a5/0x250 [ 619.392669][T29442] ? rcu_needs_cpu+0x70/0xb0 [ 619.392680][T29442] ? rcu_needs_cpu+0x70/0xb0 [ 619.392691][T29442] do_syscall_64+0xfa/0xfa0 [ 619.392702][T29442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.392712][T29442] ? clear_bhb_loop+0x60/0xb0 [ 619.392722][T29442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.392732][T29442] RIP: 0033:0x7f58f158eba9 [ 619.392741][T29442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.392750][T29442] RSP: 002b:00007f58f23a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 619.392761][T29442] RAX: ffffffffffffffda RBX: 00007f58f17d5fa0 RCX: 00007f58f158eba9 [ 619.392769][T29442] RDX: 000000000000003b RSI: 0000000000000029 RDI: 0000000000000003 [ 619.392778][T29442] RBP: 00007f58f23a9090 R08: 0000200000000100 R09: 0000000000000000 [ 619.392785][T29442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.392791][T29442] R13: 00007f58f17d6038 R14: 00007f58f17d5fa0 R15: 00007ffc991400e8 [ 619.392801][T29442] [ 619.525618][T29451] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3158'. [ 619.525986][T29451] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3158'. [ 619.531036][T29451] netlink: 'syz.9.3158': attribute type 2 has an invalid length. [ 619.535524][T29451] netlink: 'syz.9.3158': attribute type 2 has an invalid length. [ 619.934615][ T5876] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 619.936126][T29482] netlink: 'syz.6.3168': attribute type 2 has an invalid length. [ 620.039823][T29495] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3172'. [ 620.514698][T29520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3181'. [ 620.765659][ T5876] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 620.770245][T29541] netlink: 'syz.6.3189': attribute type 2 has an invalid length. [ 620.795153][T29543] program syz.9.3188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.805886][T29549] FAULT_INJECTION: forcing a failure. [ 620.805886][T29549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.805916][T29549] CPU: 1 UID: 0 PID: 29549 Comm: syz.7.3190 Not tainted syzkaller #0 PREEMPT(full) [ 620.805936][T29549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 620.805955][T29549] Call Trace: [ 620.805962][T29549] [ 620.805971][T29549] dump_stack_lvl+0x189/0x250 [ 620.805992][T29549] ? __pfx____ratelimit+0x10/0x10 [ 620.806012][T29549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.806028][T29549] ? __pfx__printk+0x10/0x10 [ 620.806050][T29549] ? __might_fault+0xb0/0x130 [ 620.806072][T29549] ? rcu_is_watching+0x15/0xb0 [ 620.806094][T29549] should_fail_ex+0x414/0x560 [ 620.806120][T29549] _copy_from_user+0x2d/0xb0 [ 620.806142][T29549] do_ipv6_setsockopt+0x23e/0x2eb0 [ 620.806165][T29549] ? get_pid_task+0x20/0x1f0 [ 620.806188][T29549] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 620.806206][T29549] ? lock_release+0x4b/0x3e0 [ 620.806224][T29549] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 620.806249][T29549] ? get_pid_task+0x20/0x1f0 [ 620.806271][T29549] ? get_pid_task+0x20/0x1f0 [ 620.806295][T29549] ? rcu_is_watching+0x15/0xb0 [ 620.806315][T29549] ? lock_release+0x4b/0x3e0 [ 620.806330][T29549] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 620.806349][T29549] ? security_file_permission+0x75/0x290 [ 620.806373][T29549] ? __pfx___might_resched+0x10/0x10 [ 620.806394][T29549] ? lock_release+0x4b/0x3e0 [ 620.806410][T29549] ? vfs_write+0x956/0xb30 [ 620.806434][T29549] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 620.806458][T29549] ? aa_sk_perm+0x81e/0x950 [ 620.806484][T29549] ? __pfx_aa_sk_perm+0x10/0x10 [ 620.806507][T29549] ? aa_sock_opt_perm+0xff/0x1b0 [ 620.806525][T29549] ipv6_setsockopt+0x59/0x170 [ 620.806544][T29549] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 620.806564][T29549] do_sock_setsockopt+0x17c/0x1b0 [ 620.806589][T29549] __x64_sys_setsockopt+0x13f/0x1b0 [ 620.806611][T29549] do_syscall_64+0xfa/0xfa0 [ 620.806630][T29549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.806646][T29549] ? clear_bhb_loop+0x60/0xb0 [ 620.806665][T29549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.806682][T29549] RIP: 0033:0x7f58f158eba9 [ 620.806697][T29549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.806712][T29549] RSP: 002b:00007f58f23a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 620.806730][T29549] RAX: ffffffffffffffda RBX: 00007f58f17d5fa0 RCX: 00007f58f158eba9 [ 620.806744][T29549] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 620.806754][T29549] RBP: 00007f58f23a9090 R08: 0000000000000020 R09: 0000000000000000 [ 620.806765][T29549] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.806777][T29549] R13: 00007f58f17d6038 R14: 00007f58f17d5fa0 R15: 00007ffc991400e8 [ 620.806797][T29549] [ 620.816371][T29551] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3191'. [ 621.195125][ T5876] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 621.195778][T29576] netlink: 'syz.6.3199': attribute type 2 has an invalid length. [ 621.578639][ T5876] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 621.582608][T29603] netlink: 'syz.7.3208': attribute type 2 has an invalid length. [ 621.733570][T29611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3209'. [ 621.734048][T29611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3209'. [ 621.748657][T29611] netlink: 'syz.7.3209': attribute type 2 has an invalid length. [ 621.750773][T29611] netlink: 'syz.7.3209': attribute type 2 has an invalid length. [ 622.351265][T29638] netlink: 'syz.7.3218': attribute type 2 has an invalid length. [ 623.484506][T29707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3238'. [ 623.485001][T29707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3238'. [ 623.619091][T29711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3239'. [ 623.620407][T29711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.620649][T29711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.017492][ T5876] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 624.018092][T29758] validate_nla: 5 callbacks suppressed [ 624.018105][T29758] netlink: 'syz.6.3253': attribute type 2 has an invalid length. [ 624.092880][T29767] tipc: Enabled bearer , priority 0 [ 624.093321][T29767] syzkaller0: entered promiscuous mode [ 624.093338][T29767] syzkaller0: entered allmulticast mode [ 624.094974][T29772] program syz.9.3255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.101157][T29767] tipc: Resetting bearer [ 624.102044][T29766] tipc: Resetting bearer [ 624.104499][T29766] tipc: Disabling bearer [ 624.343298][T29802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.345036][T29802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.408842][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.408888][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.822493][T26564] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 624.823190][T29852] netlink: 'syz.6.3279': attribute type 2 has an invalid length. [ 625.069191][ T5876] block nbd8: Receive control failed (result -32) [ 625.069585][T29791] block nbd8: shutting down sockets [ 625.080735][T29869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.080969][T29869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.687094][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 625.701834][T29913] tipc: Enabled bearer , priority 0 [ 625.703543][T29913] tipc: Resetting bearer [ 625.735958][T29911] tipc: Disabling bearer [ 626.087317][T29950] program syz.9.3309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.404667][T29965] tipc: Enabling of bearer rejected, failed to enable media [ 626.487054][ T5876] Bluetooth: hci7: command 0x0406 tx timeout [ 626.759939][T29998] tipc: Enabling of bearer rejected, failed to enable media [ 627.137209][T30024] tipc: Enabled bearer , priority 0 [ 627.140891][T30024] tipc: Resetting bearer [ 627.143695][T30023] tipc: Disabling bearer [ 627.363698][T30052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.363941][T30052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.564408][T30076] tipc: Enabling of bearer rejected, failed to enable media [ 627.575543][T30078] netlink: 'syz.8.3348': attribute type 2 has an invalid length. [ 627.584151][T30078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.584395][T30078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.735576][ T5862] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 627.736232][T30089] netlink: 'syz.6.3353': attribute type 2 has an invalid length. [ 627.919891][T30094] syzkaller1: entered promiscuous mode [ 627.919906][T30094] syzkaller1: entered allmulticast mode [ 628.134981][T30107] tipc: Enabled bearer , priority 0 [ 628.136540][T30107] tipc: Resetting bearer [ 628.142687][T30106] tipc: Disabling bearer [ 628.550452][ T5862] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 628.551460][T30166] netlink: 'syz.7.3371': attribute type 2 has an invalid length. [ 628.554337][T30166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.554907][T30166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.655742][T30177] tipc: Enabling of bearer rejected, failed to enable media [ 628.705126][ T5862] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 628.705836][T30180] netlink: 'syz.6.3376': attribute type 2 has an invalid length. [ 628.905818][T30200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.907539][T30200] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 629.412119][T30265] FAULT_INJECTION: forcing a failure. [ 629.412119][T30265] name failslab, interval 1, probability 0, space 0, times 1 [ 629.412229][T30265] CPU: 0 UID: 0 PID: 30265 Comm: syz.7.3401 Not tainted syzkaller #0 PREEMPT(full) [ 629.412250][T30265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 629.412261][T30265] Call Trace: [ 629.412268][T30265] [ 629.412276][T30265] dump_stack_lvl+0x189/0x250 [ 629.412296][T30265] ? __pfx____ratelimit+0x10/0x10 [ 629.412316][T30265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.412333][T30265] ? __pfx__printk+0x10/0x10 [ 629.412357][T30265] ? fs_reclaim_acquire+0x7d/0x100 [ 629.412384][T30265] ? rcu_is_watching+0x15/0xb0 [ 629.412405][T30265] ? __pfx___might_resched+0x10/0x10 [ 629.412424][T30265] ? lock_acquire+0x5f/0x360 [ 629.412443][T30265] should_fail_ex+0x414/0x560 [ 629.412470][T30265] should_failslab+0xa8/0x100 [ 629.412492][T30265] __kmalloc_noprof+0xcb/0x7f0 [ 629.412511][T30265] ? kfree+0x4d/0x6d0 [ 629.412526][T30265] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 629.412545][T30265] ? get_pid_task+0x20/0x1f0 [ 629.412570][T30265] tomoyo_realpath_from_path+0xe3/0x5d0 [ 629.412589][T30265] ? tomoyo_domain+0xd9/0x130 [ 629.412609][T30265] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 629.412632][T30265] tomoyo_path_number_perm+0x1e8/0x5a0