last executing test programs: 3m46.826412183s ago: executing program 0 (id=691): r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) 3m44.909709982s ago: executing program 0 (id=700): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x0, 0x8, 0x6, {{0x1c, 0x4, 0x2, 0x8, 0x70, 0x64, 0x0, 0x3, 0x29, 0x0, @loopback, @loopback, {[@generic={0x0, 0x9, "e6d69ae16c5a6a"}, @ssrr={0x89, 0x13, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0x89, 0x3, 0x3, [{@loopback, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb63}, {@local, 0x9}, {@broadcast, 0x8}]}, @generic={0x44, 0x3, "fa"}, @end, @cipso={0x86, 0x15, 0x3, [{0x5, 0x2}, {0x2, 0xd, "0abbdfdb403701b55f4e36"}]}]}}}}}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x9, @vifc_lcl_ifindex=r0, @multicast1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x0, 0x8, 0x6, {{0x1c, 0x4, 0x2, 0x8, 0x70, 0x64, 0x0, 0x3, 0x29, 0x0, @loopback, @loopback, {[@generic={0x0, 0x9, "e6d69ae16c5a6a"}, @ssrr={0x89, 0x13, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0x89, 0x3, 0x3, [{@loopback, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb63}, {@local, 0x9}, {@broadcast, 0x8}]}, @generic={0x44, 0x3, "fa"}, @end, @cipso={0x86, 0x15, 0x3, [{0x5, 0x2}, {0x2, 0xd, "0abbdfdb403701b55f4e36"}]}]}}}}}) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x9, @vifc_lcl_ifindex=r0, @multicast1}, 0x10) (async) 3m44.784222047s ago: executing program 0 (id=701): setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) (async) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/235, 0xeb) (async) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r2, &(0x7f00000002c0)='./file0\x00') capset(&(0x7f0000000300)={0x20071026, r1}, &(0x7f0000000340)={0x4, 0x8, 0x6, 0x7, 0x5, 0x3000}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0xffff0707, 0xce, {r1}, {r2}, 0x7fffffff, 0x6d}) capset(&(0x7f00000003c0)={0x19980330, r4}, &(0x7f0000000400)={0x9000000, 0x800, 0x5, 0x4, 0x101, 0x3}) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x4e23, @local}, {0x2, 0xfff8, @broadcast}, {0x2, 0x8, @multicast2}, 0x188, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)='hsr0\x00', 0x3ff, 0x8, 0x3}) (async) capset(&(0x7f0000000500)={0x19980330, r1}, &(0x7f0000000540)={0x7, 0x9, 0x2, 0x10001, 0x2, 0x3}) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0xc0400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000640)={'wg1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000006c0)={0x0, @local, @remote}, &(0x7f0000000700)=0xc) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000740)={@rand_addr, @initdev, 0x0}, &(0x7f0000000780)=0xc) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xec, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_EEE_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x100}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0x48001}, 0x48881) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r6) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x40) sendto$unix(0xffffffffffffffff, &(0x7f0000000a80)="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", 0x1000, 0x4000, &(0x7f0000001a80)=@file={0x1, './file1\x00'}, 0x6e) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001b40), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x30, r12, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x30}}, 0x10) (async) sendmsg$xdp(r6, &(0x7f0000001f80)={&(0x7f0000001c40)={0x2c, 0x8, r8, 0x3f}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001c80)="ce852347bca84e6f75607aa34fc3b77730c0f7d3ab9149b37df54cbcc3a377462f87f55e1ae9e967c31d53fe96ed73db968d034b5d2d0d7a644f7e", 0x3b}, {&(0x7f0000001cc0)="6db7e82e33312e73d1154318a2e79fc94233237c6ee66445e8404129ce6b0dea389c4c8c325b1a26e839755263d0b6368425b5b3c493d6299fc362bcc00647805ebbc11c8beb5df0225d341d0ed628187bf035e6deed0693be016b8d2bc174ab1cf9db4fc5cb7e066bd03a71dc8bd680a6138ae216ee7379fe9ace4c1c07f0f2a598acd992308a0a7963391c8f1db5ca9421fe4ff024fc23d45fceff17729efa88818fcbe117d5c22b2a3e00c0bc36085467101d45d4", 0xb6}, {&(0x7f0000001d80)="fc33ef2ce56cf8303f63eee85983bdddb2d97b07fcdf441f4ce500f0159e6aaafa600716ce8697476efdcbb643aa9f05c6ad7a40189711d0f93f22e574d2d1176d369fd982e6cc4a85b7ddad2d023d943486d088b42221df66e1ca84a756d2494ba88ddb915163f7f2e8af946b30c6688092", 0x72}, {&(0x7f0000001e00)="f4c0ed9ea3b1e78eed11d5d48849b28f5e2e38ed", 0x14}, {&(0x7f0000001e40)="b64a5f221324f985d5bc382ee1622b529828816f81e94784c9f5203bc8f3cf0724b81aa3f4f5dc4430d9388a1c49b6da935f8779886c3a5424fe4665d3d9bfc17c99d0a55f7dea72d6af4813bb2af4ff5355a7f3e4066841abf955e1fb5d07c731ee998acf6a884f6b03fff27baf68b30aea939e5089b451f970beff273fc16747e66fe508e557cb2c0bdc03f394730ec4b3de4cb054bbb2f9979ddb262c438184de0a7aad26e20730f9", 0xaa}], 0x5, 0x0, 0x0, 0x40005}, 0x42000) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002000), r6) sendmsg$TIPC_NL_BEARER_GET(r13, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x4c, r14, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x371e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbe1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) mount$tmpfs(0x0, &(0x7f0000002140)='./file1/file0\x00', &(0x7f0000002180), 0x2020c11, &(0x7f00000021c0)={[{@inode32}, {@gid={'gid', 0x3d, r3}}, {@huge_always}, {@mode}], [{@smackfsdef={'smackfsdef', 0x3d, 'dvmrp1\x00'}}, {@subj_user={'subj_user', 0x3d, 'tunl0\x00'}}, {@euid_eq={'euid', 0x3d, r2}}]}) (async) r15 = openat$cgroup_pressure(r6, &(0x7f0000002280)='cpu.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r15, 0xc038943b, &(0x7f0000002300)={0x7fffffffffffffff, 0x8, '\x00', 0x0, &(0x7f00000022c0)=[0x0]}) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x50, r6, 0xdb737000) 3m44.605295706s ago: executing program 0 (id=702): r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000240)={0x485, 0x81}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000100)=0x8) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x1, 'gretap0\x00', {}, 0x7}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xc, 0x6}, &(0x7f0000000240)=0x90) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xffffffffffffffff, 0x100000}) shutdown(r1, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106}}, 0x20) syz_create_resource$binfmt(&(0x7f0000000300)='./file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000850400000000000005"]) close_range(r0, 0xffffffffffffffff, 0x0) 3m44.503268101s ago: executing program 0 (id=703): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "1100"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000802"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000019c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001a00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf250f000000050037000000000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0xfffffffe, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r5}, {@in=@dev, 0x0, 0x6c}, @in6=@private0, {}, {}, {0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x5, 0x7fff}, [@etimer_thresh={0x8, 0xc, 0x6}]}, 0x100}}, 0x0) 3m40.825272266s ago: executing program 0 (id=715): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) setxattr$security_ima(0x0, &(0x7f0000000180), 0x0, 0x0, 0x3) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x7fff, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xa) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x40, 0x9, 0xc9, {0xc9, 0x23, "d784cbe6b84b59e11f9e69af3b75ba538f95a6dc9aa5414e2d8f28d01b741fa7834848997b694a36358faad98eae0bd9cce4fab61f784c30cb614bbad542a2861a2d9969a4d861552aaf66cc843239efd392cc2a7ff04e4972a0cefbcc075cdbd5b71a0150aeb867dac3f275e57c7ca85e7e8d6114e9842feba0d8072de6bfdcaf253d26e41ff4a63dcd2fc88a50eeb47b6992cd59724ea6fcb0b60f0e917314038945e16dd7b564207aa5270bddb78ec9ad9fd35e25a48a1dd419bfae5e568ab20235605d5705"}}, &(0x7f0000000740)=ANY=[@ANYBLOB="02032778000000000000000602cd3b"]}, &(0x7f0000000680)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014810000009c4214dc4f9484231467de8b3b2952abfb3726cd81fde90e7e9e660ff63d0100ec4aed7abed69caddad7f0f1fe6e5b7a0e7eead435903ded4454a3c4494287b2e5a40a615739b2f1d45e8f5482487f6c1ac6d5aa3d4b4db9f12a2d07f2bca8c545d2bb7509b6ef822d6c4c56f16bb6a84d7fbec2808fa8946195e30caed79e01d8"], &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x80, {0x7e, "a097ed687a45c2d57263ac52e59208131432946674bf82a9927621f89402af1f8d5eb67c33f5072d5a307d3e6f12a1c0dea2a17a7d8a99695c28668b237c627b95b2e529e38871a254eda276597258c3c550118c8db2b01d9e03ed1c579409de30fb8801618c0d35d509af6a9700bf01a9db38493af71a9e9632723cb46c"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x9}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000004400)=0x5, 0x4) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x400020000000a, 0x6}], 0x1, 0x0, 0x0, 0x2) syz_usb_control_io(r0, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) setuid(0xee00) recvmsg(r4, &(0x7f00000009c0)={&(0x7f00000006c0)=@llc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000780)=""/49, 0x31}, {&(0x7f0000000880)=""/137, 0x89}], 0x4}, 0x2000) ioctl$SNAPSHOT_FREE(r5, 0x3305) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x300b40, 0x0) openat2(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)={0x400000, 0x20, 0x2c}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x1c, 0x1d, 0x21, 0x70bd2d, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x200040c0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m25.781872895s ago: executing program 32 (id=715): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) setxattr$security_ima(0x0, &(0x7f0000000180), 0x0, 0x0, 0x3) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x7fff, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xa) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x40, 0x9, 0xc9, {0xc9, 0x23, "d784cbe6b84b59e11f9e69af3b75ba538f95a6dc9aa5414e2d8f28d01b741fa7834848997b694a36358faad98eae0bd9cce4fab61f784c30cb614bbad542a2861a2d9969a4d861552aaf66cc843239efd392cc2a7ff04e4972a0cefbcc075cdbd5b71a0150aeb867dac3f275e57c7ca85e7e8d6114e9842feba0d8072de6bfdcaf253d26e41ff4a63dcd2fc88a50eeb47b6992cd59724ea6fcb0b60f0e917314038945e16dd7b564207aa5270bddb78ec9ad9fd35e25a48a1dd419bfae5e568ab20235605d5705"}}, &(0x7f0000000740)=ANY=[@ANYBLOB="02032778000000000000000602cd3b"]}, &(0x7f0000000680)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014810000009c4214dc4f9484231467de8b3b2952abfb3726cd81fde90e7e9e660ff63d0100ec4aed7abed69caddad7f0f1fe6e5b7a0e7eead435903ded4454a3c4494287b2e5a40a615739b2f1d45e8f5482487f6c1ac6d5aa3d4b4db9f12a2d07f2bca8c545d2bb7509b6ef822d6c4c56f16bb6a84d7fbec2808fa8946195e30caed79e01d8"], &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x80, {0x7e, "a097ed687a45c2d57263ac52e59208131432946674bf82a9927621f89402af1f8d5eb67c33f5072d5a307d3e6f12a1c0dea2a17a7d8a99695c28668b237c627b95b2e529e38871a254eda276597258c3c550118c8db2b01d9e03ed1c579409de30fb8801618c0d35d509af6a9700bf01a9db38493af71a9e9632723cb46c"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x9}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000004400)=0x5, 0x4) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x400020000000a, 0x6}], 0x1, 0x0, 0x0, 0x2) syz_usb_control_io(r0, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) setuid(0xee00) recvmsg(r4, &(0x7f00000009c0)={&(0x7f00000006c0)=@llc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000780)=""/49, 0x31}, {&(0x7f0000000880)=""/137, 0x89}], 0x4}, 0x2000) ioctl$SNAPSHOT_FREE(r5, 0x3305) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x300b40, 0x0) openat2(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)={0x400000, 0x20, 0x2c}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x1c, 0x1d, 0x21, 0x70bd2d, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x200040c0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.379684213s ago: executing program 2 (id=1932): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000440)={0x20, 0x1, 0x7, "4aa5b24b0ccb63"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 5.812734167s ago: executing program 4 (id=1941): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) open(0x0, 0x80001, 0x81) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2019}}}, 0x7) syz_emit_vhci(0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$netlink(0x10, 0x3, 0x6) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x26}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 5.731692183s ago: executing program 4 (id=1942): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x5, "63aad0df8a"}, 0x0}) 4.204113754s ago: executing program 3 (id=1952): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x648000) r1 = dup(r0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x0) signalfd(r2, &(0x7f0000000080)={[0x3]}, 0x8) recvmmsg$unix(r2, &(0x7f0000003240)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/110, 0x6e}], 0x4, &(0x7f0000001340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/238, 0xee}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f0000001640)=""/123, 0x7b}], 0x3, &(0x7f0000001700)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001940)=[{&(0x7f0000001800)=""/22, 0x16}, {&(0x7f0000001840)=""/157, 0x9d}, {&(0x7f0000001900)=""/54, 0x36}], 0x3, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f00000019c0)=""/100, 0x64}, {&(0x7f0000001a40)=""/232, 0xe8}, {&(0x7f0000001b40)=""/14, 0xe}, {&(0x7f0000001b80)=""/104, 0x68}, {&(0x7f0000001c00)=""/226, 0xe2}, {&(0x7f0000001d00)=""/83, 0x53}, {&(0x7f0000001d80)=""/45, 0x2d}, {&(0x7f0000001dc0)=""/75, 0x4b}], 0x8, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002040)=""/88, 0x58}, {&(0x7f00000020c0)=""/209, 0xd1}], 0x2}}, {{&(0x7f0000002200), 0x6e, &(0x7f0000002780)=[{&(0x7f0000002280)=""/159, 0x9f}, {&(0x7f0000002340)=""/158, 0x9e}, {&(0x7f0000002400)=""/109, 0x6d}, {&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000002540)=""/114, 0x72}, {&(0x7f00000025c0)=""/32, 0x20}, {&(0x7f0000002600)=""/126, 0x7e}, {&(0x7f0000002680)=""/242, 0xf2}], 0x8}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002900)=[{&(0x7f0000002880)=""/65, 0x41}], 0x1, &(0x7f0000002940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002a80)=""/28, 0x1c}, {&(0x7f0000002ac0)=""/28, 0x1c}, {&(0x7f0000002b00)=""/156, 0x9c}, {&(0x7f0000002bc0)=""/30, 0x1e}, {&(0x7f0000002c00)=""/68, 0x44}, {&(0x7f0000002c80)=""/193, 0xc1}, {&(0x7f0000002d80)=""/67, 0x43}, {&(0x7f0000002e00)=""/100, 0x64}, {&(0x7f0000002e80)=""/203, 0xcb}, {&(0x7f0000002f80)=""/162, 0xa2}], 0xa, &(0x7f0000003100)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}], 0x8, 0x10000, &(0x7f0000003440)={0x77359400}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000003480)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0xfff, @empty, 0xfffff801}, @in6={0xa, 0x4e24, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x5, @mcast2, 0x5}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x8, @remote, 0x9a9f}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x2}, @in6={0xa, 0x4e24, 0x132c, @private0, 0xfffffffd}], 0xd8) ioctl$FIGETBSZ(r17, 0x2, &(0x7f0000003580)) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000003640)=[@text64={0x40, &(0x7f00000035c0)="66baf80cb818a3bb8bef66bafc0cb81f000000ef66baf80cb81137cd85ef66bafc0cb00beec462e1a603470f01cb8f093896d166b83b018ec8c4c17f70500202460f65b10f800000c442fd357044b9800000c00f3235004000000f30", 0x5c}], 0x1, 0x28, &(0x7f0000003680), 0x0) ioctl$TIOCL_SETSEL(r12, 0x541c, &(0x7f00000036c0)={0x2, {0x2, 0x1, 0x58, 0x200, 0x9, 0x3}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000003700)='./file0\x00', &(0x7f0000003740), &(0x7f0000003780)='./file0\x00', 0x8, 0x2) getpeername$unix(r11, &(0x7f00000037c0)=@abs, &(0x7f0000003840)=0x6e) write(r8, &(0x7f0000003880)="6080697de3e6b8a2eaa900dd8c3c39f527414356f7e65a0b", 0x18) write$char_usb(r10, &(0x7f00000038c0)="5959bc4da97b21a667f1faeaff3e5fcfc42bf9cf049fdfa0e41d654de48177e7b57002ddee9e5b0a5c5529c3093b2720dc90d70b72b1c33ca2ee1b573d7a83cd66b7997b7b5116a4ef6343a9d7d5db65e404b1bd7cb6341cb7081edce442fac6fbe0210a32555574849cda6552eec5e86f7795a2b9c9394516d4a9c10f8900421cfccc3a189ea9d474a22b2f7a5cd05579ddae68309d88f6c964c6ebbb840bf36870d7afe1d17aee600ffa710c3c5cd0c5ed1033b79c3a7960b9a515a9925759ced606a444ad67d5e076e1e4cfbeaaa30b063fbeca9c7ead42e0", 0xda) ioctl$KVM_CAP_PTP_KVM(r13, 0x4068aea3, &(0x7f00000039c0)) socket$inet6_sctp(0xa, 0x1, 0x84) clock_gettime(0x0, &(0x7f0000003a80)={0x0, 0x0}) futex(&(0x7f0000003a40), 0x6, 0x2, &(0x7f0000003ac0)={r18, r19+10000000}, &(0x7f0000003b00), 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r16, 0x80811501, &(0x7f0000003b40)={0x80}) userfaultfd(0x80001) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000003c00)='\x00', &(0x7f0000003c40)='./file0\x00', r4) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000003c80)='veth0_to_bond\x00', 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000003d00)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(r15, &(0x7f0000004c40)={&(0x7f0000003cc0), 0xc, &(0x7f0000004c00)={&(0x7f0000003d40)=@newtclass={0xebc, 0x28, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r20, {0xfff1, 0xffe0}, {0xfff2, 0x6}, {0xfff3, 0x10}}, [@c_cbq={{0x8}, {0x448, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0xa, 0x7, 0x1, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xa, 0x2, 0xff, 0x19c9, 0x200000, 0x7, 0xfffffff8, 0x5, 0x0, 0x8, 0x13, 0xc00000, 0x7, 0x8, 0x7ff, 0x4, 0x8000, 0x9, 0xfffffff9, 0x7c7d, 0x5, 0x6, 0x1, 0x2, 0x101, 0x4, 0x1, 0x8, 0xf7, 0x3, 0x0, 0x32f, 0xe, 0x9, 0xfffffc01, 0x20000000, 0x7, 0x2, 0xe0, 0x900, 0x7, 0x0, 0x2, 0x800, 0x3, 0x4, 0x9, 0x0, 0x2, 0x80, 0x4, 0x3, 0x0, 0x149, 0x1, 0x80000001, 0x2, 0xfffffffc, 0x24000, 0xb, 0x2, 0xfb3, 0xfffffffe, 0x1, 0x80000000, 0xe, 0x3ff, 0xfffffffd, 0x4, 0x81, 0x8, 0x8, 0xff, 0x6, 0x235bdf1a, 0x5, 0xffffff81, 0xfffffffb, 0x99, 0x8, 0xe2d7, 0x2, 0x3, 0x9, 0x4, 0x80d8, 0x6, 0x40, 0x4, 0x1, 0x0, 0x5, 0x5, 0xb, 0x7, 0x2, 0x7fffffff, 0x7fff, 0xff, 0x1, 0x1, 0x97c3, 0x6, 0xc1, 0x3, 0x4, 0x7, 0xd3, 0x5, 0xafc, 0x5, 0xfffffffc, 0x9, 0x1, 0x3ff, 0x9b95, 0x400, 0x2, 0x80000000, 0x8, 0xad48, 0xffffffff, 0x2, 0x6, 0x100, 0xfc, 0x80000001, 0x8, 0x464d, 0xbcb, 0xfffffffb, 0xe, 0xe, 0x7, 0x7e4a, 0x1, 0x9, 0x2, 0xcb2, 0x7fff, 0x5, 0x81, 0x2, 0x5, 0x84, 0x3, 0x3, 0x3, 0xffff, 0x2, 0xe473, 0xa, 0xb48e5620, 0x2, 0x4, 0x6, 0x3, 0x7, 0xbb7, 0x4, 0x4, 0x0, 0xcad, 0x0, 0xfe05, 0xde6d, 0x0, 0x6, 0x8, 0x7, 0x2, 0x2, 0x7ff, 0xc6ec, 0x7, 0x6, 0x4, 0xfffffffd, 0xf, 0x2, 0x3, 0x4, 0x4, 0x4, 0xd, 0x4, 0x1, 0x6f, 0x3f, 0x2, 0x10000000, 0xb030, 0x101, 0x6, 0x7, 0x7, 0x4ea, 0x1, 0x7, 0xfffffff8, 0x3, 0x401, 0x7, 0x0, 0x8, 0x4, 0x8, 0x3, 0x1, 0x0, 0xfffffff9, 0xff, 0x0, 0x8, 0xb, 0x7fff, 0x8000, 0x9, 0x400, 0x7, 0x8, 0xf4, 0x6, 0x1651, 0x0, 0x5, 0x9, 0x1a1, 0x8, 0x3, 0xffffffff, 0x8, 0x8, 0x80000001, 0xba, 0x4, 0xf, 0x9, 0x7, 0x4, 0x7, 0x5, 0x3, 0x1000, 0xbcc, 0x0, 0x6, 0x80000000, 0x8, 0x4, 0x2, 0x80000001, 0x5, 0x6, 0x2, 0x7]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0x8}, 0x6, 0x81}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf7, 0x2, 0x3, 0x3, 0xfff8, 0xf1d7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x1, 0xfff1, 0x2a41, 0x7fff, 0xf42d}}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_HDR={0x8, 0x3, "19fb4de8"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x21}}}, @c_cbq={{0x8}, {0x86c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x7ff1}, 0x17f, 0x25}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xfe, 0x5, 0xf1, 0x2, 0x4, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x8001, 0x6, 0x8, 0x101, 0x1, 0x4, 0x5, 0x2, 0x40, 0x7fff, 0xac1, 0x706, 0x4, 0x74, 0x7, 0x8001, 0x2, 0x6, 0x8, 0x71, 0x2, 0xfb, 0x1, 0x7652, 0x7f4, 0xf9, 0x7, 0x5, 0x1, 0xbc, 0x5, 0x4, 0x8, 0x5, 0x8, 0x8c88, 0x3, 0x6, 0x9, 0x2, 0xfffffffe, 0x2, 0x2, 0xfffffff7, 0x2, 0x2, 0xbdd, 0x4, 0x3ff, 0xffffffff, 0xfffffffd, 0x9, 0xffff, 0xc, 0x10001, 0xffffff55, 0x3, 0x3, 0x10001, 0x101, 0x0, 0xffffffd2, 0x5, 0x7, 0x6, 0x2, 0xfffffffe, 0x9, 0xfff, 0x9, 0x5, 0x1, 0x200, 0x10001, 0x8001, 0x3, 0x1ff, 0x4, 0x7, 0x1000, 0x9, 0x9, 0xabb4, 0x4, 0x6, 0xb, 0x0, 0x800, 0x2, 0x80000000, 0x10001, 0x2, 0x7fff, 0x80000001, 0x3, 0x7, 0x3, 0x2, 0x9, 0x10001, 0x100, 0x7, 0x7, 0x4, 0x0, 0x8, 0x180, 0xfffffffb, 0x92, 0x8000, 0x4, 0x0, 0x10001, 0x7, 0x100, 0x7ff, 0x5, 0xa, 0x9, 0x4, 0x0, 0xa, 0x2, 0xfffffffd, 0x101, 0x0, 0x101, 0x3, 0x4, 0x0, 0xf61, 0x0, 0x4, 0x5, 0x4472, 0x8000, 0x10001, 0x3, 0x80000000, 0x4, 0x800, 0x7, 0xffffff30, 0x1, 0x2, 0x3, 0x31, 0x7e000000, 0x0, 0x2, 0x80, 0x7, 0x80000000, 0xe7, 0x5, 0x7, 0x80, 0x8, 0x2, 0x800, 0x32fff85d, 0x5, 0x8001, 0x75fd, 0x5, 0x4, 0x7, 0x58d, 0x3, 0x401, 0x4, 0x380, 0x80000000, 0x101, 0x294, 0x86, 0x5, 0x1, 0x1, 0x9, 0x9, 0xfffffffb, 0x1, 0xff, 0xffff, 0x0, 0x1, 0x1, 0x3, 0x400, 0x9, 0xfffffff8, 0x1000, 0xef, 0x8, 0xfffffff1, 0xda, 0x3, 0x5, 0x4, 0x80000000, 0xffffffff, 0x92, 0x584, 0x7, 0x4, 0x3, 0x0, 0x1, 0x0, 0x8, 0x5, 0x1, 0x8000000, 0x7, 0x3ff, 0x4, 0xffffffff, 0xce, 0x2, 0x9, 0x80000001, 0x1, 0x6, 0x4, 0xc85b, 0x8, 0x5, 0x3, 0x9, 0x5, 0x6, 0xfffff90b, 0x400, 0x44c8, 0x8001, 0xfffff582, 0x8, 0x4, 0xf97, 0x3, 0x9, 0x6, 0xffffffb4, 0x80000001, 0x1, 0x5, 0x0, 0x5d, 0x2, 0x0, 0x227b, 0x5, 0xba61, 0x2]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff1, 0xfff1}, 0xf6e, 0x384}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x23, 0x2, 0x8, 0x9, 0x0, 0x5, 0x0, 0x10}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7ff, 0x10001, 0x4, 0x2, 0xfff, 0xfff, 0x100, 0x1, 0xc0, 0x2, 0x646, 0xe, 0xf2, 0x6, 0xcae, 0xe00, 0xfffffff8, 0x0, 0x80000001, 0x7fffffff, 0x8, 0x1, 0xe, 0xba61, 0xf6e, 0x5, 0x8, 0x1, 0x1, 0xfffffffe, 0xffffff5a, 0x7, 0x2, 0x1, 0xffffffff, 0x5, 0x9, 0x9, 0x0, 0x3, 0x101, 0xfff, 0x1, 0x8, 0x2, 0x7a38e4b3, 0x1, 0x3, 0x4, 0x5, 0xc3, 0x401, 0xff, 0x5, 0x7, 0x1, 0x0, 0x6, 0xc, 0x6, 0x912, 0xbebd, 0xffffffff, 0x9, 0x7fffffff, 0xfffffff7, 0x0, 0xfffffff9, 0x1, 0x8, 0x80, 0x20, 0x942b, 0x5, 0x0, 0x0, 0x3, 0x1, 0x9, 0x40, 0x6, 0x6d1, 0x6, 0xa2, 0x4, 0x5, 0x7, 0x80, 0x4, 0x6, 0x0, 0x6, 0x79ae, 0x200, 0x6, 0x6, 0xe0, 0x7, 0x0, 0x8, 0x3, 0x5, 0x0, 0x5, 0x2, 0x0, 0xcc6d, 0xffff, 0x1ff, 0x6, 0x401, 0xa7d, 0xec0, 0x8, 0x8, 0xfffffff0, 0x1, 0x3ff, 0xff, 0x8, 0x41fc, 0x7, 0x9, 0xffffffff, 0x959c, 0x4, 0x81, 0x2, 0x1, 0xfffffff9, 0xe, 0x2, 0x1ff, 0x0, 0xffffdb4d, 0x4, 0x4000000, 0xa, 0x55, 0x40, 0x200, 0x8, 0xa3d7, 0xffffffff, 0x0, 0x4ec7, 0x8ac3, 0xfffffff9, 0x2, 0x4, 0x38000000, 0xc4, 0x9, 0x9, 0x6, 0x1, 0x92a1, 0x101, 0x5, 0x6, 0xffffff7f, 0xffffffff, 0xfffff9ee, 0x0, 0x401, 0x4, 0x4c, 0x5, 0x10000, 0x9, 0x2, 0x2, 0x400, 0x1000, 0x3, 0x4, 0x401, 0x0, 0x6, 0x3, 0x4, 0x4d, 0x3, 0xbbf, 0x0, 0x5, 0x0, 0xafb0, 0xe7, 0x8, 0x1, 0x5, 0x5, 0xcca, 0x62, 0xe, 0x2, 0x8, 0x1, 0x3ff, 0x4, 0x3, 0x9, 0xe6, 0x0, 0x3, 0x4, 0x1, 0x5, 0x6, 0xfffff800, 0xc, 0x43f, 0x5c43, 0x9, 0x2, 0x3, 0x8, 0x3, 0xad4, 0x8, 0x7, 0x799ead0f, 0xffffffff, 0xfffffff5, 0x3, 0xff, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0x8, 0xb5a, 0x1, 0x1, 0x24, 0x5, 0x9ef7, 0x1, 0x4, 0x2, 0x2, 0x6, 0xb9c, 0x800, 0x6, 0x8, 0xfffffffb, 0x109d, 0x9, 0x10, 0x2, 0x4, 0x3, 0x3]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2f, 0x2, 0x1, 0x5, 0x8, 0x5, 0x7, 0x2}}]}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x7}, 0x94d}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0x8}, 0x5, 0x2}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}, @c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xfc, 0x2, 0x4, 0x1, 0x9, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xd, 0x3, 0xe, 0x2, 0xa16, 0x8, 0x0, 0xe2d}}]}}, @c_cbq={{0x8}, {0xbc, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x40, 0x2, 0x4, 0xd5, 0x0, 0x10}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x3, 0x3, 0x2, 0x3, 0x18}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x6, 0x6, 0x7f, 0xe, 0xd4}}, @TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x2, 0x4, 0x1, 0x9, 0x7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x27, 0x1, 0x1e, 0xf8, 0x4, 0x200, 0x5, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3f, 0x0, 0xf, 0x0, 0xfffffff4, 0x100, 0x7, 0xb}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x21, 0x3, 0x0, 0x4, 0x1, 0x8, 0xee, 0xcaa0}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x7, 0x5, 0x3, 0xf3, 0x80000001}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x2, 0x8, 0x0, 0x3, 0x3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xfc, 0x2, 0x0, 0x4, 0x2, 0x4}}]}}, @c_cbq={{0x8}, {0x64, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0x10}, 0x10001, 0xe}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0xd}, 0x4, 0x6d}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8b, 0x0, 0x2, 0x9720, 0x0, 0x8}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x79, 0x2, 0xc6, 0x6, 0x3, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4}, 0x4, 0x7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x211a, 0x81, 0xe2, 0x2}}]}}]}, 0xebc}}, 0x4) clock_gettime(0x0, &(0x7f0000004d40)={0x0, 0x0}) mq_timedreceive(r9, &(0x7f0000004c80)=""/192, 0xc0, 0x1, &(0x7f0000004d80)={r21, r22+60000000}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000004dc0)={0x2}) sched_setscheduler(0x0, 0x6, &(0x7f0000004e00)=0x2a) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000004e40)={0x66ea44ca789685ac, 0x7, 0x3000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000004ec0)={@empty, 0x5a, r20}) 4.159829807s ago: executing program 3 (id=1953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002300)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x3, @remote, 0x20}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="cc", 0x1}], 0x1}}], 0x1, 0x4c840) 4.014869265s ago: executing program 2 (id=1954): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4000008, 0x1, 0x2, "69db20bb318a86a56fe262faed1e747738e061d82e00100500000200", 0x47504a4d}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000140), 0x0) readv(r2, &(0x7f0000002500)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 3.933341045s ago: executing program 3 (id=1955): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x82) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) 3.777033923s ago: executing program 2 (id=1956): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x5, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) 3.665803754s ago: executing program 2 (id=1957): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r1 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000440)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8949, &(0x7f0000000040)={'bond0\x00', 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 596.182391ms ago: executing program 1 (id=1972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xc4}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xc4}}, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c2402080001030000fffe000924060506020100000924030001030005490c240206"], 0x0) 369.161132ms ago: executing program 2 (id=1973): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee6901020310000904b807e495d1ca000905060200020d0006090582020002000110"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000001c0)=0x4, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x5, 0x0, &(0x7f0000000180)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc90ac21dc24e627958b0eae7e5d733e6e221"], 0x28}], 0x1}, 0x40) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000440)={0x20, 0x1, 0x7, "4aa5b24b0ccb63"}, 0x0, 0x0, 0x0, 0x0}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x0, 0x5, 0x3, 0x401, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x2, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = dup(0xffffffffffffffff) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) socket$inet6(0xa, 0x2, 0x0) write$FUSE_BMAP(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r6, 0x11a, 0x3, 0x0, 0x0) bind$isdn_base(r4, &(0x7f0000000000)={0x22, 0xe5, 0x6, 0xf9, 0xdf}, 0x6) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0xf, 0x49, {0x49, 0xa, "1415fabc0cf4741841bc5577ba4e36bd78d9543d19bb5e9b57ada9cac912ea51987fde8947289d0a29da4e08b95b6e12c23e63640abc887c54e455ccdf142bdc838b84e2ca0187"}}, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000140)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4, 0x3, 0x800, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0xeb, 0x37}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x0, 0xd, "f5859a59", "8f5b7aab"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x10, 0x7, 0x90, 0x9, 0x1, 0x7f}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x10, 0x2, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x9, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, "b29d"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xf344}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "d2f1"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xcb}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x5}}) 364.006005ms ago: executing program 4 (id=1974): r0 = msgget$private(0x0, 0x100) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) msgsnd(r0, &(0x7f0000000000)={0x1, "3eb33e6f9124a47655829c5ed88ba6588daa97c8f5cb2dcdb405db7a49a0da74defc27107a02193dfd81df573c86cb567a57063b08daa77ecfe14672459ae35f720074de4da40cc0fa2379cd2fbab5b5aa073379ecb74300847cba5df3d22e11ac5fc69547e8a61c13716ea5252f139c775e2716849a57b4f8e52e93a7"}, 0x85, 0x800) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) msgsnd(r0, &(0x7f0000003600)={0x1}, 0x8, 0x800) msgget$private(0x0, 0x100) (async) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) (async) msgsnd(r0, &(0x7f0000000000)={0x1, "3eb33e6f9124a47655829c5ed88ba6588daa97c8f5cb2dcdb405db7a49a0da74defc27107a02193dfd81df573c86cb567a57063b08daa77ecfe14672459ae35f720074de4da40cc0fa2379cd2fbab5b5aa073379ecb74300847cba5df3d22e11ac5fc69547e8a61c13716ea5252f139c775e2716849a57b4f8e52e93a7"}, 0x85, 0x800) (async) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) (async) msgsnd(r0, &(0x7f0000003600)={0x1}, 0x8, 0x800) (async) 184.749584ms ago: executing program 4 (id=1975): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r4, 0x5, 0x4000, 0xfffffffd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xc}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 84.856638ms ago: executing program 4 (id=1976): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000100)={0x20, 0x6, 0x6f, {0x6f, 0x6, "3f5095bf00c81568a2e13587876681475202fa9744fa4ae8bdf8f77aa5f1e6e7ad4f56e627049cc84fb6abbb6cd9a0634254500995583ceb9c160e0244ba22e229ab7e08165614096ea41a14236bf08bbd2d1b924642b732d5140aa93b8308fba68b176387281e2e6da5acaaad"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000440)={0x40, 0x10, 0xd8, "f93585676dbf021b7e718fe492247d3e526621cc86eabf2c58566f9e1aff7af12189779a51eef1b3410eeee70a6cdf3568dffe36b532d53f6a99211c74911f5642972f986f9470e2dcb3b3d119dbc8473d126f06689590df633cecfcc7cadd1f0d17ca0ebb69ac67b9dc6ce2310b6965ea2c14a6022e6a123b8f136c17d1d5a578a79a2c14474b06e484c74d0ac713c13ff41c7cf5bd080e9579a5fbc418ebb4032e3b00ea5bb88551f140dd639e30b20082d95c61ad50fd71ad71e9a52c3767f41d0d46e1ff843f7ec4a3d6727e7b7a210cacb6d66e851b"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xc0}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x8, 0x217b, 0x5, 0x3, 0x818, 0x0, 0x7, 0x5, 0x6, 0x9, 0x8}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0xffff}, &(0x7f00000006c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000700)={0x20, 0x87, 0x2}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, r3, 0xe9715da55d7fa39, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c851}, 0x40) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000880)={0x0, 0x1, 0x56, {0x56, 0xf, "0ba8ed68869651b52d99bdd84299b3ef3795917f54d0612cb404a2399ed4be84620f96816c39470387eacbe5c388ff088e5adb259bf45224213a034f4275eba37793da201f6ea759232a0a0add5d2b92fc6d4f6e"}}, &(0x7f00000009c0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "81c6f8304dc5af219853492496f692b2aeb90850388c2f9e2539860a143dd6ffd78f1c706cef3423b2244ae7f52603441b5955c9dbff379061f412e461dfa146cf92ed53bfda39a03ad149a72beac8cfcb66347fcf"}}}, &(0x7f0000000c80)={0x34, &(0x7f0000000a40)={0x40, 0x12, 0xba, "8ba3cd13c65c095a521eb3f02fcb5e6a62a03da9921ecb426a99fd23029d4b5176cb547466e79e8c2e6289a777d3d13f477ece8f34eade886c77d5046296ce4ee14d719a52264cc94bb559ef88414083519088dc705671cabaee71567e0e84095bf24213a411c00d2bd042c1156dc3f389430bb3f3ec420dcd369f0f866e210ce75955a7564b2689749530653401d4eed5681e3e32e08903e088b5fe86bd5f1606d1a83b4b9f13385d29d166556b20eda8293bb72a994dacf94c"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x6f}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b80)={0x20, 0x0, 0x4e, {0x4c, "515f43ba839fdc27377fb07317cea140a4fe3599bdc15519e1c6b43bbe9df5fd401a64f2380f6f50f2ef8d3a23142eab547be7397c3c50daac07e95574a89a488285ce4bb9fa6efd22488ee8"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000c40)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x40, 0x31, 0x5, "46c18a2860"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c0000000000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000dc0)={0x14, &(0x7f0000000cc0)={0x0, 0x4, 0x91, {0x91, 0x7, "714bd96b88c012346abeafaffd47a7f5c1c5a1e5867ede05cb5ff25588538f661c379c90d7535609938447cf7f09b0d67c5b8ecd1c88bb4e8076ae3728f04730b10b2c96125474cb4ae4ec104576930f5cb172d0962f29fb81be9a2e6d236103f333286dd252339a2149dbcef28a77da6b2b207b38599f859873e030928c2d8bfe1a5a0e598c7ce7c01a3a30ce1933"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000001080)={0x34, &(0x7f0000000e00)={0x20, 0x16, 0x58, "7ebed3e15113daf6444d38ee0fe7fe215fa3c89fb34574c3218a2d04aeebf25ee6b8313fbd16a110258d6c38c5a2e72e95f3858c8866dca60e8efbb3ae855884a6dad66adbed566b400cb49d054f907d271a61897e80dad7"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000f00)={0x20, 0x0, 0xdf, {0xdd, "4418950535b39d40173fa008909495c0590316804836c2b61c39702a4bf1cc28684ca8a7067f96e79507f27791009bb15089391807d3d819a6e044e7dd30b468143b658b79eea785dd6cde9122040034c3757cbc4c9871f37fc0b1e3a1c34ea70b6379237d508b3574abbf63db100b78bba588e0fbcd5979af29d62a9bb32aaa34ee5c63ceeea06cdd4d979d9730dbac5c48fd05b9421ac4aa008181d9557675c216f8018cbf2177556c933cff9046bb80482ec1a40d6ebc8175aa9a48ee9014d65ae757d614405e7ed3615a7b75403a5ed287b98bc6acb5705718a5ae"}}, &(0x7f0000001000)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000001040)={0x20, 0x0, 0x1, 0x9}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYBLOB="468cd1a1c582ed1a61eea98720", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRES64=r4, @ANYRES8=r5, @ANYRES16=r6], 0x254}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 1 (id=1977): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc0200000000fc010000000000000000000000000001000000000000000000000376fb2ba10a93db1fa20000000000000000002000"/73, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c000000fe8000000000000000000000000000bb02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000a000000000000000a00000000000000000000000004000000000000fcffffff000000000a0001062000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014006362636d6163286165732900"/316], 0x184}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = syz_io_uring_setup(0x3087, &(0x7f0000000540)={0x0, 0x7562, 0x13080, 0x3, 0x862f8, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d34b04e0e5f5acef1cd0b7847549b04fdc88d3aa6cf035d64af585d4e72fdc328f4ffeb7e57d99a9c1d931381e61f9637da96cb5038dc65f51ed71d4439966052a7f8af2ccd8b8aa70f4512ddd77478f1d986a88bbd69", @ANYRESHEX=r2, @ANYBLOB=',\x00']) close(r2) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): escriptor read/64, error -71 [ 366.493001][ T5936] usb 4-1: Invalid ep0 maxpacket: 64 [ 366.538735][ T44] usb usb5-port1: attempt power cycle [ 366.628542][ T5936] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 366.762288][T11155] fuse: Bad value for 'fd' [ 366.827266][ T5936] usb 4-1: Invalid ep0 maxpacket: 64 [ 366.850712][ T5936] usb usb4-port1: attempt power cycle [ 366.883627][T11163] netlink: 'syz.1.1513': attribute type 10 has an invalid length. [ 366.891907][ T44] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 366.920729][ T44] usb 5-1: device descriptor read/8, error -71 [ 367.042370][T11163] bond0: (slave team0): Releasing backup interface [ 367.060221][T11163] team0 (unregistering): Port device team_slave_0 removed [ 367.073256][T11163] team0 (unregistering): Port device team_slave_1 removed [ 367.087333][T11163] team0 (unregistering): Port device geneve1 removed [ 367.178594][ T44] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 367.198460][ T5936] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 367.215683][ T44] usb 5-1: device descriptor read/8, error -71 [ 367.229175][ T5936] usb 4-1: Invalid ep0 maxpacket: 64 [ 367.339887][ T44] usb usb5-port1: unable to enumerate USB device [ 367.361138][ T5936] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 367.389603][ T5936] usb 4-1: Invalid ep0 maxpacket: 64 [ 367.395596][ T5936] usb usb4-port1: unable to enumerate USB device [ 367.448879][ T5184] Bluetooth: hci4: command 0x0c1a tx timeout [ 367.455003][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.733613][T11175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.744245][T11175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.803186][T11177] openvswitch: netlink: Message has 4964 unknown bytes. [ 367.812245][T11177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.879949][T11179] tipc: Enabled bearer , priority 10 [ 368.501696][T11188] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 368.519470][T11188] XFS (loop1): SB validate failed with error -5. [ 369.234335][ T30] audit: type=1326 audit(2000000020.370:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.4.1527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2f818ec29 code=0x0 [ 369.530266][ T5184] Bluetooth: hci4: command 0x0c1a tx timeout [ 370.108494][ T44] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 370.302758][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 370.315785][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.358459][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.385580][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 370.408595][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.445376][ T44] usb 5-1: config 0 descriptor?? [ 370.473643][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.502116][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.533109][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.550265][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.904437][ T44] logitech 0003:046D:C20E.0015: rdesc size test failed for formula gp [ 370.930391][ T44] logitech 0003:046D:C20E.0015: unbalanced collection at end of report description [ 370.962339][ T44] logitech 0003:046D:C20E.0015: parse failed [ 370.969297][ T44] logitech 0003:046D:C20E.0015: probe with driver logitech failed with error -22 [ 371.104139][ T10] usb 5-1: USB disconnect, device number 62 [ 371.188447][ T5958] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 371.227684][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.239700][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.374509][T11268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.386356][T11268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.400912][ T5958] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 371.414635][ T5958] usb 4-1: can't read configurations, error -71 [ 371.608708][ T5184] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.751974][T11281] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1545'. [ 372.011516][ T980] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 372.028297][T11286] binder: 11285:11286 ioctl c0306201 200000000040 returned -14 [ 372.048058][T11284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.075617][T11286] binder: 11285:11286 ioctl d000943e 200000001000 returned -22 [ 372.087876][T11284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.145150][T11284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.154333][T11284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.210114][ T980] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 372.218194][ T980] usb 5-1: config 6 has no interface number 0 [ 372.248549][ T980] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 372.258275][ T980] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.300503][ T980] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 372.312366][ T980] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 372.380920][ T980] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 372.410629][ T980] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 372.429417][ T980] usb 5-1: Product: syz [ 372.433660][ T980] usb 5-1: Manufacturer: syz [ 372.438289][ T980] usb 5-1: SerialNumber: syz [ 372.490111][ T980] hso 5-1:6.2: Failed to find BULK IN ep [ 372.681646][T11281] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1545'. [ 372.760678][ T44] usb 5-1: USB disconnect, device number 63 [ 373.050963][T11304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.071057][T11304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.268497][ T5958] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 373.428411][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 373.442979][ T5958] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 373.455834][ T5958] usb 5-1: config 0 has no interface number 0 [ 373.478430][ T5958] usb 5-1: config 0 interface 184 has no altsetting 0 [ 373.498274][ T5958] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 373.508037][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.538449][ T5958] usb 5-1: Product: syz [ 373.542787][ T5958] usb 5-1: Manufacturer: syz [ 373.547445][ T5958] usb 5-1: SerialNumber: syz [ 373.590005][ T5958] usb 5-1: config 0 descriptor?? [ 373.615148][ T5958] smsc75xx v1.0.0 [ 373.860131][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.889034][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.821953][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -32 [ 374.858424][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 374.889865][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 374.909855][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 374.920227][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 374.937946][ T5958] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 374.949228][ T5958] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 374.962064][T11328] netlink: 'syz.3.1556': attribute type 3 has an invalid length. [ 374.981957][ T5958] usb 5-1: USB disconnect, device number 64 [ 375.041675][T11332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.063394][T11332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.117778][T11337] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1562'. [ 375.211453][T11342] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.1563'. [ 375.266305][T11344] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 375.443516][ T5184] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 375.457368][ T5184] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 375.546338][ T30] audit: type=1800 audit(2000000026.680:138): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1568" name="nullb0" dev="tmpfs" ino=3058 res=0 errno=0 [ 375.599585][ T5958] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 375.649294][T11359] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1569'. [ 375.665791][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 375.718602][ T980] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 375.781012][ T5958] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 375.798819][ T5958] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.829244][ T5958] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 375.879328][ T5958] usb 4-1: config 1 has no interface number 1 [ 375.893295][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 375.904482][ T980] usb 5-1: config 5 has an invalid interface number: 197 but max is 1 [ 375.916805][ T5958] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 375.938739][ T980] usb 5-1: config 5 has an invalid interface number: 174 but max is 1 [ 375.967556][ T980] usb 5-1: config 5 has no interface number 0 [ 375.975399][ T980] usb 5-1: config 5 has no interface number 1 [ 375.984750][ T980] usb 5-1: config 5 interface 197 has no altsetting 0 [ 375.992755][ T5958] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.002631][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.011611][ T980] usb 5-1: config 5 interface 174 has no altsetting 0 [ 376.019041][ T5958] usb 4-1: Product: syz [ 376.023245][ T5958] usb 4-1: Manufacturer: syz [ 376.027871][ T5958] usb 4-1: SerialNumber: syz [ 376.040720][ T980] usb 5-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=e5.59 [ 376.051227][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.069757][ T980] usb 5-1: Product: syz [ 376.074891][ T980] usb 5-1: Manufacturer: syz [ 376.080493][ T980] usb 5-1: SerialNumber: syz [ 376.290292][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.306068][ T980] usbhid 5-1:5.174: couldn't find an input interrupt endpoint [ 376.330818][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.333432][ T980] usb 5-1: USB disconnect, device number 65 [ 376.340525][T11371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.373914][T11371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.452501][ T5958] usb 4-1: USB disconnect, device number 42 [ 376.994738][ T5184] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 377.002083][ T5184] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 377.078110][T11385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.097109][T11385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.168570][ T5958] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 377.320225][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 377.337495][ T5958] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 377.356963][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.378482][ T5958] usb 5-1: config 0 descriptor?? [ 377.428721][ T5921] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 377.588970][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 377.606829][ T5921] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 377.618757][ T5921] usb 4-1: config 0 has no interface number 0 [ 377.627737][ T5921] usb 4-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 377.663850][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.680460][ T5921] usb 4-1: Product: syz [ 377.684737][ T5921] usb 4-1: Manufacturer: syz [ 377.689629][ T5921] usb 4-1: SerialNumber: syz [ 377.697913][ T5921] usb 4-1: config 0 descriptor?? [ 377.713559][ T5921] usb 4-1: bad CDC descriptors [ 377.768017][T10972] af_packet: tpacket_rcv: packet too big, clamped from 8306 to 3966. macoff=82 [ 377.800569][T11378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.819672][T11378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.871377][ T5958] usbhid 5-1:0.0: can't add hid device: -71 [ 377.877452][ T5958] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 377.896321][ T5958] usb 5-1: USB disconnect, device number 66 [ 377.909252][T11389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.948955][T11389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.978276][T11389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.007595][T11389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.035423][T11389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.085975][T11389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.132753][T11389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.145841][T11389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.161512][T11389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.179742][T11389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.207992][T11421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.231780][T11421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.668499][ T5958] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 378.820307][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.851189][ T5958] usb 5-1: Using ep0 maxpacket: 8 [ 378.863302][ T5958] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 378.898736][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.929704][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.942867][T11434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.958936][ T5958] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 378.979865][T11434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.999452][ T5958] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 379.020259][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.052096][ T5958] usb 5-1: config 0 descriptor?? [ 379.467587][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.481344][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.489713][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.496772][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.504275][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.512115][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.528652][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.558423][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.565379][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.577143][ T5184] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 379.584750][ T5184] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 379.599663][ T5958] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 379.650868][ T5958] acrux 0003:1A34:0802.0016: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 379.664667][T11448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.679254][ T5958] acrux 0003:1A34:0802.0016: no inputs found [ 379.681872][T11448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.696717][ T5958] acrux 0003:1A34:0802.0016: Failed to enable force feedback support, error: -19 [ 379.763667][T11448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.775742][ T5958] usb 5-1: USB disconnect, device number 67 [ 379.804937][T11448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.842111][T11448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.867258][T11449] fido_id[11449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 379.879331][T11448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.103666][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 380.208882][ T5921] usb 4-1: USB disconnect, device number 43 [ 380.510831][ T5921] usb 3-1: USB disconnect, device number 12 [ 380.835635][ T5184] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 380.842745][ T5184] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 381.218680][T11488] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1606'. [ 381.258886][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.271258][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.280190][T11488] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 381.287912][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.308636][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.321150][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.478427][ T5958] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 381.659546][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 381.702115][ T5958] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 381.746785][ T5958] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 381.796270][ T5184] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 381.803419][ T5184] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 381.808755][ T5958] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.828836][ T5958] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 381.845486][ T5958] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 381.863996][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.873240][ T5958] usb 5-1: Product: syz [ 381.876679][T11489] chnl_net:caif_netlink_parms(): no params data found [ 381.878296][ T5958] usb 5-1: Manufacturer: syz [ 381.889910][ T5958] usb 5-1: SerialNumber: syz [ 381.906606][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 381.937930][ T5958] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input33 [ 381.957733][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.976262][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.002992][T11510] xt_l2tp: invalid flags combination: 8 [ 382.129015][ T5958] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 382.137355][ T5958] (id 0x00) [ 382.242006][T11489] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.255969][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.306701][T11489] bridge_slave_0: entered allmulticast mode [ 382.320714][T11489] bridge_slave_0: entered promiscuous mode [ 382.340396][ T5958] rc_core: IR keymap rc-imon-pad not found [ 382.346791][ T5958] Registered IR keymap rc-empty [ 382.358975][ T5958] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 382.380261][T11489] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.387582][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.409272][ T5958] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 382.419133][T11489] bridge_slave_1: entered allmulticast mode [ 382.427128][T11489] bridge_slave_1: entered promiscuous mode [ 382.451272][ T5958] imon:send_packet: packet tx failed (-71) [ 382.468645][ T5958] imon 5-1:155.0: remote input dev register failed [ 382.479075][ T5958] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 382.564977][ T5958] imon 5-1:155.0: unable to initialize intf0, err 0 [ 382.598027][ T5958] imon:imon_probe: failed to initialize context! [ 382.624063][ T5958] imon 5-1:155.0: unable to register, err -19 [ 382.652008][ T5958] usb 5-1: USB disconnect, device number 68 [ 382.700941][T11489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.790612][T11489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.982589][T11536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.999864][T11536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.016826][T11489] team0: Port device team_slave_0 added [ 383.030920][T11489] team0: Port device team_slave_1 added [ 383.237391][T11489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.260410][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.286678][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.296616][T11489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.312911][T11489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.322383][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.350850][T11489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.371815][ T5184] Bluetooth: hci1: command tx timeout [ 383.420032][ T5958] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 383.590201][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 383.610589][ T5958] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.625504][T11489] hsr_slave_0: entered promiscuous mode [ 383.627976][ T5958] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 383.657452][T11489] hsr_slave_1: entered promiscuous mode [ 383.676304][T11489] debugfs: 'hsr0' already exists in 'hsr' [ 383.680291][ T5958] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.689401][ T5184] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 383.696275][ T5184] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 383.705631][T11489] Cannot create hsr debugfs directory [ 383.711987][ T5958] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 383.745455][ T5958] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 383.760815][ T5958] usb 5-1: Product: syz [ 383.765366][ T5958] usb 5-1: Manufacturer: syz [ 383.770175][ T5958] usb 5-1: SerialNumber: syz [ 383.786679][ T5958] usb 5-1: config 0 descriptor?? [ 384.202195][T11541] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1620'. [ 384.238240][ T5958] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 384.269774][ T5958] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 384.311744][ T5958] usb 5-1: USB disconnect, device number 69 [ 384.348023][T11561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.388965][T11561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.413893][T11489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.435926][T11561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.460523][T11561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.667412][T11489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.784413][T11489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.880288][T11574] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1627'. [ 384.968230][T11489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.992128][T11576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1627'. [ 385.150752][ T5184] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 385.160131][ T5184] Bluetooth: hci4: SCO packet for unknown connection handle 1 [ 385.332141][T11489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.373550][T11489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.403482][T11489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.430853][T11489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.448860][ T5184] Bluetooth: hci1: command tx timeout [ 385.676440][T11607] tc_dump_action: action bad kind [ 385.686820][T11607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.702676][T11607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.719423][ T44] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 385.765176][T11489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.798717][T11489] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.816094][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.823408][T10229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.831244][ T5958] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 385.851065][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.858401][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.889005][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 385.898828][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.914565][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.958055][ T44] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 385.969631][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.990038][ T5958] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 385.990150][ T44] usb 5-1: config 0 descriptor?? [ 386.020003][ T5958] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 386.027683][ T5958] usb 4-1: can't read configurations, error -61 [ 386.177126][ T5958] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 386.304898][T11489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.369274][ T5958] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 386.411041][T11615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.416633][ T5958] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 386.424464][T11615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.437834][ T5958] usb 4-1: can't read configurations, error -61 [ 386.459239][ T5958] usb usb4-port1: attempt power cycle [ 386.475056][T11489] veth0_vlan: entered promiscuous mode [ 386.503482][T11489] veth1_vlan: entered promiscuous mode [ 386.546293][T11489] veth0_macvtap: entered promiscuous mode [ 386.560852][T11489] veth1_macvtap: entered promiscuous mode [ 386.586987][T11489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.624414][T11489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.651498][ T1332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.673099][ T1332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.686874][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 386.699719][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 386.708013][ T1332] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.729891][ T44] usb 5-1: USB disconnect, device number 70 [ 386.738496][ T1332] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.820123][ T5958] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 386.852469][T10229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.861881][ T5958] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 386.877752][T10229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.888224][ T5958] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 386.908998][ T5958] usb 4-1: can't read configurations, error -61 [ 386.923170][T10230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.932947][T10230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.059085][ T5958] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 387.069499][T11619] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.083286][T11619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.094042][ T5958] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 387.110689][T11619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.120268][ T5958] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 387.127915][ T5958] usb 4-1: can't read configurations, error -61 [ 387.141316][ T5958] usb usb4-port1: unable to enumerate USB device [ 387.256334][ T5184] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 387.263466][ T5184] Bluetooth: hci4: SCO packet for unknown connection handle 1 [ 387.328562][ T44] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 387.512658][ T44] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 387.522191][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.528827][ T5184] Bluetooth: hci1: command tx timeout [ 387.538170][ T44] usb 3-1: config 0 descriptor?? [ 387.554982][ T44] gspca_main: spca508-2.14.0 probing 8086:0110 [ 387.770466][T11630] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 387.779827][T11630] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1642'. [ 387.794469][T11630] netlink: 'syz.1.1642': attribute type 10 has an invalid length. [ 387.914535][T11632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.926136][T11632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.957656][ T44] gspca_spca508: reg_read err -71 [ 387.978477][ T44] gspca_spca508: reg_read err -71 [ 387.984100][ T44] gspca_spca508: reg_read err -71 [ 387.991681][ T44] gspca_spca508: reg_read err -71 [ 387.997317][ T44] gspca_spca508: reg write: error -71 [ 388.003017][ T44] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 388.029998][ T44] usb 3-1: USB disconnect, device number 13 [ 388.295653][T11636] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 388.497276][T11642] netlink: 'syz.4.1646': attribute type 4 has an invalid length. [ 388.535378][T11642] netlink: 'syz.4.1646': attribute type 4 has an invalid length. [ 388.609750][ T5184] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 388.829966][T11654] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1652'. [ 389.063104][T11662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.071772][ T5921] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 389.082897][T11662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.249807][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 389.260070][ T5921] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 389.268470][ T5958] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 389.277159][ T5921] usb 4-1: config 0 has no interface number 0 [ 389.283558][ T5921] usb 4-1: config 0 interface 184 has no altsetting 0 [ 389.299343][ T5921] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 389.311324][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.323903][ T5921] usb 4-1: Product: syz [ 389.328150][ T5921] usb 4-1: Manufacturer: syz [ 389.333210][ T5921] usb 4-1: SerialNumber: syz [ 389.341174][ T5921] usb 4-1: config 0 descriptor?? [ 389.355250][ T5921] smsc75xx v1.0.0 [ 389.421413][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short [ 389.441115][ T5958] usb 3-1: not running at top speed; connect to a high speed hub [ 389.464817][ T5958] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 389.478447][ T5958] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 389.499253][ T5958] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 389.510100][ T5958] usb 3-1: config 129 has no interface number 0 [ 389.516406][ T5958] usb 3-1: config 129 has no interface number 1 [ 389.524797][ T5958] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 389.540662][ T5958] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 389.553119][ T5958] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 389.567668][ T5958] usb 3-1: config 129 interface 135 has no altsetting 0 [ 389.589870][ T5958] usb 3-1: config 129 interface 5 has no altsetting 0 [ 389.603338][ T5958] usb 3-1: string descriptor 0 read error: -22 [ 389.628558][ T5958] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 389.637733][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.718485][ T44] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 389.732230][ T5184] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 389.739213][ T5184] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 389.743084][ T5958] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 389.758799][ T5958] usb 3-1: MIDIStreaming interface descriptor not found [ 389.865718][ T44] usb 5-1: device descriptor read/64, error -71 [ 389.920307][T11658] netlink: 'syz.2.1654': attribute type 10 has an invalid length. [ 389.945813][T11658] team0: Port device macvlan1 added [ 389.957109][ T5958] usb 3-1: USB disconnect, device number 14 [ 389.972236][T11673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.015729][T11673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.052751][T11672] netlink: 'syz.1.1659': attribute type 39 has an invalid length. [ 390.168551][ T44] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 390.308830][ T44] usb 5-1: device descriptor read/64, error -71 [ 390.429800][ T44] usb usb5-port1: attempt power cycle [ 390.587471][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -61 [ 390.612821][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 390.782938][T11672] Process accounting resumed [ 390.785845][ T44] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 390.816285][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 390.848594][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 390.848853][T11686] netlink: 'syz.1.1663': attribute type 6 has an invalid length. [ 390.867058][ T44] usb 5-1: device descriptor read/8, error -71 [ 390.879289][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 390.911202][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 390.939561][ T5921] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 390.975509][ T5921] usb 4-1: USB disconnect, device number 48 [ 391.005990][T11689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.050033][T11689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.109335][ T44] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 391.134874][ T44] usb 5-1: device descriptor read/8, error -71 [ 391.250388][ T44] usb usb5-port1: unable to enumerate USB device [ 391.420787][ T5184] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 391.550407][T11705] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 391.588912][ T30] audit: type=1326 audit(2000000042.730:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.2.1669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5ba98ec29 code=0x0 [ 391.615933][T11706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.628119][T11706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.644625][T11707] netlink: 'syz.2.1669': attribute type 21 has an invalid length. [ 391.653168][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 391.756920][T11712] devpts: Bad value for 'max' [ 391.764429][ T5184] Bluetooth: hci0: Unable to find connection for big 0x00 [ 392.000886][T11717] [U]  [ 392.004124][T11717] [U] K{ [ 392.007205][T11717] [U] t 1ŠFfˊ`GJgo/mC [ 392.014206][T11717] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 392.029773][T11717] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 392.040294][T11717] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 392.075947][T11717] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 392.099506][T11717] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 392.110643][T11717] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 392.122226][T11717] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/< (04f2:b746) [ 412.210907][ T10] mcba_usb 5-1:0.0: probe with driver mcba_usb failed with error -90 [ 412.228990][ T9] uvcvideo 3-1:4.147: No valid video chain found. [ 412.311315][ T9] usb 5-1: USB disconnect, device number 83 [ 412.487489][ T10] usb 3-1: USB disconnect, device number 25 [ 412.718457][ T44] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 412.758792][T12100] syzkaller1: entered promiscuous mode [ 412.764485][T12100] syzkaller1: entered allmulticast mode [ 412.793573][T12100] binder: binder_mmap: 12099 200000001000-20000000b000 bad vm_flags failed -1 [ 412.804715][T12100] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1779'. [ 412.878742][T12100] hsr_slave_1 (unregistering): left promiscuous mode [ 412.927789][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 412.945154][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.953483][ T44] usb 4-1: Product: syz [ 412.960860][ T44] usb 4-1: Manufacturer: syz [ 412.965568][ T44] usb 4-1: SerialNumber: syz [ 413.260652][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1783'. [ 413.274131][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.283847][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.375365][ T24] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 413.541855][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 413.556704][T12119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.564041][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.576821][T12119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.587062][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 413.625961][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 413.639751][ T24] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 413.663035][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 413.682210][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.705904][ T44] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 413.710532][T12121] netlink: 'syz.2.1787': attribute type 22 has an invalid length. [ 413.717005][ T24] usb 5-1: config 0 descriptor?? [ 413.748273][ T44] usb 4-1: USB disconnect, device number 57 [ 413.772472][T12121] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1787'. [ 413.894035][T12126] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1788'. [ 413.904691][T12126] 0: renamed from hsr0 (while UP) [ 413.914258][T12126] 0: entered allmulticast mode [ 413.920414][T12126] hsr_slave_0: entered allmulticast mode [ 413.926363][T12126] hsr_slave_1: entered allmulticast mode [ 413.933535][T12126] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 413.952833][T12105] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1781'. [ 414.030198][ T24] uclogic 0003:2179:0077.0018: interface is invalid, ignoring [ 414.105021][T12126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1788'. [ 414.224043][ T24] usb 5-1: USB disconnect, device number 84 [ 414.564646][ T5936] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 414.589643][T12147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1792'. [ 414.599575][T12147] tipc: Started in network mode [ 414.604493][T12147] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 414.614810][T12147] tipc: Enabled bearer , priority 10 [ 414.625154][T12147] netlink: 'syz.1.1792': attribute type 10 has an invalid length. [ 414.748520][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 414.763885][ T5936] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 414.780571][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.796663][ T5936] usb 4-1: Product: syz [ 414.806647][ T5936] usb 4-1: Manufacturer: syz [ 414.818883][ T5936] usb 4-1: SerialNumber: syz [ 414.846176][ T5936] usb 4-1: config 0 descriptor?? [ 415.057033][ T5936] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 415.071052][ T5936] gspca_sunplus: reg_w_riv err -71 [ 415.083283][ T5936] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 415.124802][ T5936] usb 4-1: USB disconnect, device number 58 [ 415.442548][T12172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.459190][T12172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.483386][T12181] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 415.626417][T12186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.662493][T12186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.700172][T12192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1805'. [ 415.719467][T12193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.735637][ T10] tipc: Node number set to 15444650 [ 415.741251][T12193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.168733][ T5921] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 416.203351][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 416.299728][T12208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.332650][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 416.335592][T12208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.352937][ T5921] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 416.372306][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.406135][ T5921] usb 5-1: Product: syz [ 416.412321][ T5921] usb 5-1: Manufacturer: syz [ 416.427240][ T5921] usb 5-1: SerialNumber: syz [ 416.428571][ T5867] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 416.464899][ T5921] usb 5-1: config 0 descriptor?? [ 416.513216][T12210] netlink: 'syz.2.1813': attribute type 29 has an invalid length. [ 416.585414][ T44] IPVS: starting estimator thread 0... [ 416.693922][ T5921] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 416.702648][T12212] IPVS: using max 28 ests per chain, 67200 per kthread [ 417.449044][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 417.621189][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 417.648468][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.666025][ T10] usb 3-1: Product: syz [ 417.681893][ T10] usb 3-1: Manufacturer: syz [ 417.686579][ T10] usb 3-1: SerialNumber: syz [ 417.930682][ T5921] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 418.128091][T12223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1816'. [ 418.139500][T12223] netlink: 'syz.1.1816': attribute type 6 has an invalid length. [ 418.147380][T12223] netlink: 'syz.1.1816': attribute type 5 has an invalid length. [ 418.156415][T12223] netlink: 'syz.1.1816': attribute type 4 has an invalid length. [ 418.356396][T12228] vcan0: entered allmulticast mode [ 418.435409][T12230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.450390][T12230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.647440][ T5958] usb 5-1: USB disconnect, device number 85 [ 418.726005][T12233] random: crng reseeded on system resumption [ 418.960178][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 419.031741][T12240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1821'. [ 419.084846][T12246] netlink: 'syz.4.1820': attribute type 4 has an invalid length. [ 419.100998][T12246] netlink: 'syz.4.1820': attribute type 4 has an invalid length. [ 419.217184][T12251] netlink: zone id is out of range [ 419.235586][T12251] netlink: zone id is out of range [ 419.236063][T12252] 9pnet_fd: Insufficient options for proto=fd [ 419.265997][T12251] netlink: get zone limit has 4 unknown bytes [ 419.340255][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 419.373157][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 419.437575][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1825'. [ 419.460045][T12255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1825'. [ 419.542348][T12259] overlayfs: conflicting options: userxattr,metacopy=on [ 419.648061][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 419.670732][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 419.712933][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 419.763884][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 419.798816][ T10] usb 3-1: USB disconnect, device number 27 [ 419.838420][ T5958] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 419.935588][ T30] audit: type=1326 audit(2000000071.070:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.1.1831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa32e78ec29 code=0x0 [ 419.948450][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 420.009210][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 420.019753][ T5958] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 420.030331][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.041280][ T5958] usb 5-1: Product: syz [ 420.045607][ T5958] usb 5-1: Manufacturer: syz [ 420.051062][ T5958] usb 5-1: SerialNumber: syz [ 420.069578][ T5958] usb 5-1: config 0 descriptor?? [ 420.119598][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 420.128104][ T9] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 420.136804][ T10] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 420.147524][ T9] usb 4-1: config 0 has no interface number 0 [ 420.155114][ T9] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 420.165775][ T9] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 420.176989][ T9] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 420.199600][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 420.209050][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.217162][ T9] usb 4-1: Product: syz [ 420.223158][ T9] usb 4-1: Manufacturer: syz [ 420.227841][ T9] usb 4-1: SerialNumber: syz [ 420.244508][ T9] usb 4-1: config 0 descriptor?? [ 420.251024][T12266] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 420.261362][ T9] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 420.300562][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 7: 34, using maximum allowed: 30 [ 420.311754][ T10] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.323481][ T10] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 420.338034][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 420.358241][ T9] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 420.367113][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 420.381342][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.415300][ T10] usb 3-1: config 0 descriptor?? [ 420.483496][ T5958] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 420.497537][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.523148][ T5958] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 420.532307][ T5958] usb 5-1: media controller created [ 420.564697][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.690044][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.702672][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.786651][T12273] Process accounting paused [ 420.864680][ T10] wacom 0003:056A:0094.0019: Using device in hidraw-only mode [ 420.888038][T12282] netlink: 'syz.1.1832': attribute type 8 has an invalid length. [ 420.909909][ T10] wacom 0003:056A:0094.0019: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 421.041575][T12268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.060166][T12268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.106329][ T5921] usb 3-1: USB disconnect, device number 28 [ 421.119551][ T5958] zl10353_read_register: readreg error (reg=127, ret==0) [ 421.133652][ T5958] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 421.142107][ T5958] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 421.678258][T12287] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1834'. [ 421.775337][T12290] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1835'. [ 421.786186][T12289] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1835'. [ 422.055704][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.071076][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.132794][ T5921] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 422.298592][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 422.305717][ T5921] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 422.314635][ T5921] usb 3-1: config 0 has no interface number 0 [ 422.322802][ T5921] usb 3-1: config 0 interface 12 has no altsetting 0 [ 422.333085][ T5921] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 422.342694][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.351423][ T5921] usb 3-1: Product: syz [ 422.355775][ T5921] usb 3-1: Manufacturer: syz [ 422.361072][ T5921] usb 3-1: SerialNumber: syz [ 422.381644][ T5921] usb 3-1: config 0 descriptor?? [ 422.623981][ T5958] usb 5-1: USB disconnect, device number 86 [ 422.710408][ T5958] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 422.775369][ T5936] usb 4-1: USB disconnect, device number 59 [ 422.949559][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 422.995235][T12305] tmpfs: Bad value for 'mpol' [ 423.018826][ T5958] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 423.179020][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 423.203056][ T5958] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 423.222993][ T5921] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 423.233391][ T5958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.245048][ T5921] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 423.268418][ T5921] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 423.277286][ T5958] usb 5-1: config 0 has no interface number 0 [ 423.286412][ T5921] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 423.296059][ T5958] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.324058][ T5958] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 423.338804][ T5921] usb 3-1: USB disconnect, device number 29 [ 423.343700][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 423.365364][ T5958] usb 5-1: Product: syz [ 423.378512][ T980] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 423.412551][ T5958] usb 5-1: SerialNumber: syz [ 423.421162][ T5958] usb 5-1: config 0 descriptor?? [ 423.431913][ T5958] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 423.554218][T12319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1843'. [ 423.558372][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 423.571017][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.592858][ T980] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 423.601720][ T980] usb 4-1: config 0 has no interface number 0 [ 423.617725][ T980] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 423.633299][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.635734][T12304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.656866][ T10] usb 5-1: USB disconnect, device number 87 [ 423.664189][ T980] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 423.684946][ T980] usb 4-1: config 0 interface 41 has no altsetting 0 [ 423.698182][ T980] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 423.720640][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.729308][ T980] usb 4-1: Product: syz [ 423.754037][ T980] usb 4-1: Manufacturer: syz [ 423.775996][ T980] usb 4-1: SerialNumber: syz [ 423.821397][ T980] usb 4-1: config 0 descriptor?? [ 423.842314][T12312] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 423.851843][T12312] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 424.076383][T12309] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 424.084451][T12309] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 424.088891][ T5921] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 424.252998][ T5921] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 424.270386][ T5921] usb 3-1: config 0 has no interface number 0 [ 424.276880][ T5921] usb 3-1: config 0 interface 29 has no altsetting 0 [ 424.291055][ T5921] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 424.325328][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.333840][ T5921] usb 3-1: Product: syz [ 424.338060][ T5921] usb 3-1: Manufacturer: syz [ 424.344429][ T5921] usb 3-1: SerialNumber: syz [ 424.355308][ T5921] usb 3-1: config 0 descriptor?? [ 424.478962][ T44] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 424.500535][ T980] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 424.563879][ T5921] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v207 fw v188.0.0 (2 channels) [ 424.645984][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.656727][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.670068][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 424.688363][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.696763][ T44] usb 5-1: SerialNumber: syz [ 424.712065][ T44] usb 5-1: 0:2 : does not exist [ 424.782506][ T5921] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 424.790733][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.801362][ T5921] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 424.812598][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.821479][ T5921] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 424.891072][ T5921] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 424.982527][ T980] usb 3-1: USB disconnect, device number 30 [ 425.096294][ T44] usb 5-1: USB disconnect, device number 88 [ 425.221311][T12332] 9p: Unknown Cache mode or invalid value fs [ 425.348756][T12335] fuse: Bad value for 'user_id' [ 425.353774][T12335] fuse: Bad value for 'user_id' [ 425.638758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 425.647439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 425.656287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 425.728800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 426.835150][ T44] usb 4-1: USB disconnect, device number 60 [ 427.269045][ T5867] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 427.577934][T12360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.632029][T12360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.868714][ T5921] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 428.033490][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.069893][ T5921] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 428.098640][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.130407][ T5921] usb 3-1: config 0 descriptor?? [ 428.274412][T12368] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1857'. [ 428.468515][ T44] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 428.488565][ T5936] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 428.543604][ T5921] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 428.597773][ T5921] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001A/input/input37 [ 428.628569][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 428.641947][ T44] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 428.660563][ T5936] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 428.679609][ T44] usb 4-1: config 1 has no interface number 1 [ 428.686886][ T5936] usb 5-1: config 0 has no interface number 0 [ 428.698951][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 428.713000][ T44] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 428.735904][ T5936] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 428.795120][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.805368][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.813781][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.825836][ T5936] usb 5-1: Product: syz [ 428.842748][ T44] usb 4-1: Product:   [ 428.862518][ T5936] usb 5-1: Manufacturer: syz [ 428.867221][ T5936] usb 5-1: SerialNumber: syz [ 428.879744][ T44] usb 4-1: Manufacturer: 볗坝偃抓⊉ڙ跼듻쯟ޟ뿥槥ᔜᗃ냫⢯렸҆࿗괧嶂ែ쬔襻愌걆巊퇼妬述‾殞𢤄➰늭귄笂➸믕䵯伳늉ီ㩷鉃ύ銾⧱綾웒㢨㾻९瀐姘礪颂ﮗ昧例ᾐ┹廟愳鑢ᷮ긶᎜봆噳 [ 428.925224][ T5936] usb 5-1: config 0 descriptor?? [ 428.939211][ T44] usb 4-1: SerialNumber: ц [ 428.978046][ T5921] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 429.045056][ T5921] usb 3-1: USB disconnect, device number 31 [ 429.194232][T12363] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1855'. [ 429.208273][T12380] fido_id[12380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 429.455393][ T44] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 429.474847][ T44] usb 4-1: 2:1 : invalid channels 0 [ 429.550140][ T44] usb 4-1: USB disconnect, device number 61 [ 429.640255][ T5936] usb 5-1: Firmware: major: 138, minor: 2, hardware type: UNKNOWN (16) [ 429.839487][T12363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.848580][T12363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.861774][ T5936] usb 5-1: Firmware: build [ 429.970953][T12406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.980016][T12406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.989075][ T5867] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 430.061883][ T5921] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 430.111545][ T44] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 430.181049][ T5936] usb 5-1: failed to fetch extended address, random address set [ 430.200856][ T5936] usb 5-1: atusb_probe: initialization failed, error = -524 [ 430.214855][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 430.231458][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.242869][ T5936] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 430.259189][ T5921] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 430.274971][ T5936] usb 5-1: USB disconnect, device number 89 [ 430.285377][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 430.302803][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.314930][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.336230][ T5921] usb 3-1: config 0 descriptor?? [ 430.354436][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=0057, bcdDevice= 0.40 [ 430.367546][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.377854][ T44] usb 4-1: Product: syz [ 430.382660][ T44] usb 4-1: SerialNumber: syz [ 430.621669][ T44] usbhid 4-1:1.0: can't add hid device: -71 [ 430.638674][ T44] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 430.669095][ T44] usb 4-1: USB disconnect, device number 62 [ 430.973852][ T5921] usbhid 3-1:0.0: can't add hid device: -71 [ 430.981350][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 431.013635][ T5921] usb 3-1: USB disconnect, device number 32 [ 431.089938][ T980] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 431.115553][T12432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.153132][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.183044][T12432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.218900][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.252627][T12432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.269732][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 431.278142][T12432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.287500][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 431.334191][ T980] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 431.368453][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.407145][ T980] usb 5-1: Product: syz [ 431.417272][ T980] usb 5-1: Manufacturer: syz [ 431.434587][ T980] usb 5-1: SerialNumber: syz [ 431.462776][ T980] usb 5-1: config 0 descriptor?? [ 431.480693][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 431.482977][ T980] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 431.528828][ T980] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 431.794793][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.829784][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.999548][ T5958] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 432.081339][ T980] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 432.148629][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 432.169551][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 432.177613][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.189688][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.201198][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 432.214809][ T5958] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 432.239099][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.270127][ T5958] usb 3-1: config 0 descriptor?? [ 432.321112][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.332525][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.343088][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 432.353459][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.366850][ T10] usb 4-1: config 0 descriptor?? [ 432.466567][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.479380][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.495415][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.506477][ T980] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 432.515294][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.527548][ T980] em28xx 5-1:0.0: board has no eeprom [ 432.577182][T12461] kvm: user requested TSC rate below hardware speed [ 432.734179][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.745095][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.891434][T12452] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 432.898031][T12452] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 432.906960][T12452] vhci_hcd vhci_hcd.0: Device attached [ 432.915619][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.933206][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.945653][T12464] vhci_hcd: connection closed [ 432.947425][ T2913] vhci_hcd: stop threads [ 432.957468][ T5958] usbhid 3-1:0.0: can't add hid device: -71 [ 432.973324][ T5958] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 432.982237][ T2913] vhci_hcd: release socket [ 432.988606][ T2913] vhci_hcd: disconnect device [ 433.010171][ T5958] usb 3-1: USB disconnect, device number 33 [ 433.075150][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 433.090373][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 433.103709][ T10] usb 4-1: USB disconnect, device number 63 [ 433.334967][T12469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.351756][T12469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.531099][T12426] em28xx 5-1:0.0: reading from i2c device at 0x8 failed (error=-5) [ 433.609483][ T980] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 433.617381][ T980] em28xx 5-1:0.0: dvb set to bulk mode. [ 433.639743][ T5958] em28xx 5-1:0.0: Binding DVB extension [ 433.691803][ T5921] usb 5-1: USB disconnect, device number 90 [ 433.723858][ T5921] em28xx 5-1:0.0: Disconnecting em28xx [ 433.756432][T12474] pimreg: entered allmulticast mode [ 433.781932][T12474] pimreg: left allmulticast mode [ 433.816370][ T5958] em28xx 5-1:0.0: Registering input extension [ 433.823201][ T5921] em28xx 5-1:0.0: Closing input extension [ 433.860908][ T5921] em28xx 5-1:0.0: Freeing device [ 433.980420][T12474] tmpfs: Bad value for 'mpol' [ 434.040009][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.059367][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.093172][T12474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1878'. [ 434.102488][T12474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1878'. [ 434.167552][T12485] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1878'. [ 434.664452][ T980] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 434.787232][T12493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.811448][T12493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.832084][ T980] usb 5-1: config 185 has too many interfaces: 193, using maximum allowed: 32 [ 434.842096][ T980] usb 5-1: config 185 has an invalid descriptor of length 1, skipping remainder of the config [ 434.852692][ T980] usb 5-1: config 185 has 0 interfaces, different from the descriptor's value: 193 [ 434.867858][ T980] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 434.882245][ T980] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 434.908529][ T980] usb 5-1: Product: syz [ 434.938459][ T5958] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 435.102402][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.113809][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.138146][ T5958] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 435.155269][ T980] usb 5-1: USB disconnect, device number 91 [ 435.173714][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.193055][ T5958] usb 4-1: config 0 descriptor?? [ 435.391121][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 435.402623][T12499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1885'. [ 435.416139][ T5867] Bluetooth: hci0: Malformed Event: 0x02 [ 435.423289][ T5867] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 435.507801][T12501] netlink: 'syz.1.1886': attribute type 11 has an invalid length. [ 435.609100][ T5958] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 435.616352][ T5958] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 435.624339][ T5958] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 435.631800][ T5958] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 435.659912][ T5958] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 435.666985][ T5958] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 435.692234][ T5958] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 435.704910][ T5958] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 435.779896][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.808558][ T5958] cp2112 0003:10C4:EA90.001B: Part Number: 0x00 Device Version: 0x00 [ 435.819427][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.841885][T12506] nfs: Bad value for 'source' [ 436.011272][T12491] ntfs3(loop3): try to read out of volume at offset 0x0 [ 436.041034][ T5958] cp2112 0003:10C4:EA90.001B: error requesting SMBus config [ 436.060192][ T5958] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -5 [ 436.094971][T12518] netlink: 'syz.2.1892': attribute type 29 has an invalid length. [ 436.309595][ T5921] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 436.440776][T12530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.458488][ T5921] usb 5-1: device descriptor read/64, error -71 [ 436.598281][T12535] tipc: Enabling of bearer rejected, failed to enable media [ 436.628974][T12536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.659925][T12536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.708427][ T5921] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 436.838406][ T5921] usb 5-1: device descriptor read/64, error -71 [ 436.958917][ T5921] usb usb5-port1: attempt power cycle [ 437.308780][ T5921] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 437.341397][ T5921] usb 5-1: device descriptor read/8, error -71 [ 437.588445][ T5921] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 437.621661][ T5921] usb 5-1: device descriptor read/8, error -71 [ 437.738613][ T5936] usb 4-1: USB disconnect, device number 64 [ 437.748046][ T5921] usb usb5-port1: unable to enumerate USB device [ 437.855979][T12539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.909429][T12539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.928933][ T5921] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 437.960627][T12539] overlay: filesystem on ./bus is read-only [ 438.078625][ T5921] usb 5-1: device descriptor read/64, error -71 [ 438.178816][ T5936] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 438.308425][ T5936] usb 4-1: device descriptor read/64, error -71 [ 438.318686][ T5921] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 438.383002][T12547] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1900'. [ 438.459003][ T5921] usb 5-1: device descriptor read/64, error -71 [ 438.474396][T12549] : renamed from pim6reg1 [ 438.558817][ T5936] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 438.571610][ T5921] usb usb5-port1: attempt power cycle [ 438.607997][T12554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.636122][T12554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.659388][T12556] mac80211_hwsim hwsim15 : renamed from wlan1 (while UP) [ 438.708809][ T5936] usb 4-1: device descriptor read/64, error -71 [ 438.819184][ T5936] usb usb4-port1: attempt power cycle [ 438.919229][ T5921] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 438.949828][ T5921] usb 5-1: device descriptor read/8, error -71 [ 438.978454][ T5855] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 439.148434][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 439.159843][ T5855] usb 3-1: config 148 has an invalid interface number: 46 but max is 0 [ 439.178514][ T5936] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 439.198645][ T5855] usb 3-1: config 148 has no interface number 0 [ 439.205016][ T5855] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=30.8d [ 439.229761][ T5936] usb 4-1: device descriptor read/8, error -71 [ 439.238690][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.259071][ T5867] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 439.267449][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1906'. [ 439.578481][ T5936] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 439.599168][ T5936] usb 4-1: device descriptor read/8, error -71 [ 439.648088][ T5855] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 439.670693][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.682810][ T5855] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 439.691521][ T5855] usb 3-1: media controller created [ 439.708844][ T5936] usb usb4-port1: unable to enumerate USB device [ 439.715477][ T5921] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 439.744915][ T5921] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 439.760873][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.782900][ T5921] usb 5-1: config 0 descriptor?? [ 439.791191][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.899508][ T5855] DVB: Unable to find symbol dib7000p_attach() [ 439.905805][ T5855] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 440.008723][ T5855] rc_core: IR keymap rc-dib0700-rc5 not found [ 440.014926][ T5855] Registered IR keymap rc-empty [ 440.029195][ T5921] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 440.037225][ T5855] dvb-usb: could not initialize remote control. [ 440.058570][ T5855] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 440.082479][ T5855] usb 3-1: USB disconnect, device number 34 [ 440.163499][ T5855] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 440.230851][ T5921] [drm:udl_init] *ERROR* Selecting channel failed [ 440.257230][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.284351][ T5921] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 440.292744][ T5921] [drm] Initialized udl on minor 2 [ 440.300323][ T5921] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 440.311343][ T5921] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 440.320289][ T5936] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 440.333216][ T5921] usb 5-1: USB disconnect, device number 99 [ 440.339367][ T5936] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 440.455022][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 440.466390][T12574] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1910'. [ 440.481368][T12574] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.488712][T12574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.499531][T12574] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1910'. [ 440.760446][T12584] netlink: 'syz.1.1912': attribute type 1 has an invalid length. [ 440.769419][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 440.966234][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 440.987643][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.001201][T12590] tipc: Enabling not permitted [ 441.008035][T12590] tipc: Enabling of bearer rejected, failed to enable media [ 441.017620][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.338796][ T980] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 441.499713][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 441.518053][ T980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.559556][ T980] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 441.601878][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.622220][T12613] netlink: 'syz.4.1920': attribute type 13 has an invalid length. [ 441.639958][ T980] usb 4-1: config 0 descriptor?? [ 441.719717][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.737597][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.867284][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.878180][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.018465][ T5958] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 442.110758][ T980] steelseries 0003:1038:1410.001C: item fetching failed at offset 3/5 [ 442.122431][ T980] steelseries 0003:1038:1410.001C: parse failed [ 442.129440][ T980] steelseries 0003:1038:1410.001C: probe with driver steelseries failed with error -22 [ 442.198452][ T5958] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 442.210028][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.218196][ T5958] usb 3-1: Product: syz [ 442.223545][ T5958] usb 3-1: Manufacturer: syz [ 442.228464][ T5958] usb 3-1: SerialNumber: syz [ 442.241553][ T5958] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 442.262705][ T980] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 442.301177][ T5958] usb 4-1: USB disconnect, device number 69 [ 442.486449][ C0] usb 3-1: ath9k_htc: invalid pkt_len (bf53) [ 442.496511][T12629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.517597][T12629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.700073][ T5921] usb 3-1: USB disconnect, device number 35 [ 442.788611][ T5958] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 442.969542][ T5958] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 442.988464][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.996573][ T5958] usb 5-1: Product: syz [ 443.020228][ T5958] usb 5-1: Manufacturer: syz [ 443.024896][ T5958] usb 5-1: SerialNumber: syz [ 443.055309][ T5958] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 443.088585][T12637] netlink: 'syz.3.1927': attribute type 11 has an invalid length. [ 443.094775][T12462] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 443.399239][ T980] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 443.406494][ T980] ath9k_htc: Failed to initialize the device [ 443.428594][ T5921] usb 3-1: ath9k_htc: USB layer deinitialized [ 443.529891][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.555873][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.592105][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.622293][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.641847][T12631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.687996][ T30] audit: type=1800 audit(2000000094.810:143): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1933" name="bus" dev="tmpfs" ino=1998 res=0 errno=0 [ 443.880396][ T5921] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 443.900834][ T5855] usb 5-1: USB disconnect, device number 100 [ 444.048441][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 444.058480][ T5936] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 444.082362][ T5921] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 444.098789][ T5921] usb 3-1: config 0 has no interface number 0 [ 444.104971][ T5921] usb 3-1: config 0 interface 184 has no altsetting 0 [ 444.141984][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.152344][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.152828][ T5921] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 444.181193][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.190959][ T5921] usb 3-1: Product: syz [ 444.195210][ T5921] usb 3-1: Manufacturer: syz [ 444.199946][ T5921] usb 3-1: SerialNumber: syz [ 444.208148][ T5921] usb 3-1: config 0 descriptor?? [ 444.218487][ T5921] smsc75xx v1.0.0 [ 444.248818][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 444.256204][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.267499][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.298559][ T5936] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 444.307668][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.322055][ T5936] usb 4-1: config 0 descriptor?? [ 444.329355][T12462] usb 5-1: Service connection timeout for: 256 [ 444.336182][T12462] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 444.347891][T12462] ath9k_htc: Failed to initialize the device [ 444.355823][ T5855] usb 5-1: ath9k_htc: USB layer deinitialized [ 444.743908][ T5936] usbhid 4-1:0.0: can't add hid device: -71 [ 444.759370][ T5936] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 444.793062][ T5936] usb 4-1: USB disconnect, device number 70 [ 445.072870][ T5867] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 445.400288][ T10] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 445.517237][T12693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.526338][T12693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.569170][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 445.583641][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.597641][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.610967][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 445.620707][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.641806][ T10] usb 5-1: config 0 descriptor?? [ 446.060279][ T10] ft260 0003:0403:6030.001D: unknown main item tag 0x7 [ 446.251331][T12701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.262435][ T10] ft260 0003:0403:6030.001D: chip code: 6424 8183 [ 446.276213][T12701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.382507][T12711] syzkaller1: entered promiscuous mode [ 446.409881][T12711] syzkaller1: entered allmulticast mode [ 446.425960][ T5867] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 446.463194][ T10] ft260 0003:0403:6030.001D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 446.690078][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1951'. [ 446.821841][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 446.845036][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 446.866029][ T10] ft260 0003:0403:6030.001D: failed to retrieve status: -71 [ 446.884204][ T10] ft260 0003:0403:6030.001D: failed to reset I2C controller: -71 [ 446.894793][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 446.928252][ T10] usb 5-1: USB disconnect, device number 101 [ 446.948885][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 446.974253][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 446.975903][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1954'. [ 447.015082][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 447.029367][ T5921] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 447.054971][ T5921] usb 3-1: USB disconnect, device number 36 [ 447.141880][T12727] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 447.238668][T12462] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 447.412900][T12462] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 447.428487][T12462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.436551][T12462] usb 4-1: Product: syz [ 447.453730][T12462] usb 4-1: Manufacturer: syz [ 447.459076][T12462] usb 4-1: SerialNumber: syz [ 447.467796][T12462] usb 4-1: config 0 descriptor?? [ 447.479272][T12462] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 447.487452][T12462] usb 4-1: setting power ON [ 447.493572][T12462] dvb-usb: bulk message failed: -22 (2/0) [ 447.504486][T12462] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 447.520204][T12462] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 447.531227][T12462] dvb_usb_cxusb 4-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 447.541275][ T980] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 447.668747][ T5921] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 447.684949][T12462] usb 4-1: USB disconnect, device number 71 [ 447.710072][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 447.717787][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.728786][ T980] usb 3-1: config 14 has an invalid interface number: 120 but max is 0 [ 447.737944][ T980] usb 3-1: config 14 has no interface number 0 [ 447.744644][ T980] usb 3-1: config 14 interface 120 has no altsetting 0 [ 447.755161][ T980] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=22.cd [ 447.764490][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.798680][ T980] usb 3-1: Product: syz [ 447.802922][ T980] usb 3-1: Manufacturer: syz [ 447.807558][ T980] usb 3-1: SerialNumber: syz [ 447.808598][ T5921] usb 5-1: device descriptor read/64, error -71 [ 448.078828][ T5921] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 448.124372][T12732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.136684][T12732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.220134][ T5921] usb 5-1: device descriptor read/64, error -71 [ 448.259452][ T5867] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 448.338847][ T5921] usb usb5-port1: attempt power cycle [ 448.340443][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.367073][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.608460][ T5936] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 448.688454][ T5921] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 448.710116][ T5921] usb 5-1: device descriptor read/8, error -71 [ 448.778587][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 448.790033][ T5936] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 448.808784][ T5936] usb 4-1: config 0 has no interface number 0 [ 448.815936][ T5936] usb 4-1: config 0 interface 224 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.839776][ T5936] usb 4-1: config 0 interface 224 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 448.853991][ T5936] usb 4-1: config 0 interface 224 has no altsetting 0 [ 448.861084][ T5936] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 448.870283][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.889961][ T5936] usb 4-1: config 0 descriptor?? [ 448.969464][ T5921] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 448.989891][ T5921] usb 5-1: device descriptor read/8, error -71 [ 449.098770][ T5921] usb usb5-port1: unable to enumerate USB device [ 449.228230][T12752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1966'. [ 449.534477][ T5936] usb 4-1: USB disconnect, device number 72 [ 449.647934][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.663010][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.281845][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.307509][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.358557][ T5936] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 450.400355][ T980] ftdi_sio 3-1:14.120: FTDI USB Serial Device converter detected [ 450.424671][ T980] ftdi_sio ttyUSB0: unknown device type: 0x22cd [ 450.440975][ T980] usb 3-1: USB disconnect, device number 37 [ 450.490322][ T5936] usb 4-1: device descriptor read/64, error -71 [ 450.507314][ T980] ftdi_sio 3-1:14.120: device disconnected [ 450.758873][ T5936] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 450.838075][T12767] Process accounting resumed [ 450.878779][ T980] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 450.898567][ T5936] usb 4-1: device descriptor read/64, error -71 [ 450.945008][T12786] 9pnet_fd: Insufficient options for proto=fd [ 451.008489][ T10] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 451.009805][ T5936] usb usb4-port1: attempt power cycle [ 451.048999][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 451.055547][ T980] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 451.065674][ T980] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 451.073754][ T980] usb 3-1: can't read configurations, error -61 [ 451.129360][ T31] INFO: task kworker/0:3:5928 blocked for more than 143 seconds. [ 451.137151][ T31] Not tainted syzkaller #0 [ 451.145063][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.154516][ T31] task:kworker/0:3 state:D stack:21176 pid:5928 tgid:5928 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 451.166965][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 451.172169][ T31] Workqueue: usb_hub_wq hub_event [ 451.177275][ T31] Call Trace: [ 451.181859][ T31] [ 451.185458][ T31] __schedule+0x1798/0x4cc0 [ 451.190958][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 451.199764][ T31] ? worker_thread+0x8a0/0xda0 [ 451.204599][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 451.210239][ T980] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 451.218633][ T10] usb 5-1: config 0 has no interface number 0 [ 451.224792][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 451.235312][ T31] ? __lock_acquire+0xab9/0xd20 [ 451.241134][ T31] ? __pfx___schedule+0x10/0x10 [ 451.246080][ T31] ? schedule+0x91/0x360 [ 451.250888][ T31] schedule+0x165/0x360 [ 451.255404][ T31] schedule_timeout+0x9a/0x270 [ 451.262709][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 451.268678][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 451.277770][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.286297][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.292114][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.297390][ T31] ? wait_for_completion+0x267/0x5d0 [ 451.302851][ T10] usb 5-1: Product: syz [ 451.307080][ T10] usb 5-1: Manufacturer: syz [ 451.312752][ T31] wait_for_completion+0x2bf/0x5d0 [ 451.318898][ T10] usb 5-1: SerialNumber: syz [ 451.325419][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 451.332259][ T10] usb 5-1: config 0 descriptor?? [ 451.339369][ T31] i2c_del_adapter+0x581/0x6e0 [ 451.344258][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 451.351492][ T10] smsc75xx v1.0.0 [ 451.356530][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 451.358483][ T5936] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 451.362033][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 451.374430][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 451.389039][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 451.390496][ T5936] usb 4-1: device descriptor read/8, error -71 [ 451.394868][ T31] usb_probe_interface+0x668/0xc30 [ 451.406985][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 451.412824][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 451.419421][ T31] really_probe+0x26d/0x9e0 [ 451.424562][ T980] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 451.433100][ T31] __driver_probe_device+0x18c/0x2f0 [ 451.439006][ T31] driver_probe_device+0x4f/0x430 [ 451.444367][ T31] __device_attach_driver+0x2ce/0x530 [ 451.450951][ T31] bus_for_each_drv+0x251/0x2e0 [ 451.456165][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 451.456943][ T980] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 451.471429][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 451.477037][ T31] __device_attach+0x2b8/0x400 [ 451.482441][ T980] usb 3-1: can't read configurations, error -61 [ 451.489123][ T31] ? __pfx___device_attach+0x10/0x10 [ 451.494522][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 451.500263][ T980] usb usb3-port1: attempt power cycle [ 451.507746][ T31] bus_probe_device+0x185/0x260 [ 451.513198][ T31] device_add+0x7b6/0xb50 [ 451.517660][ T31] usb_set_configuration+0x1a87/0x20e0 [ 451.524407][ T31] usb_generic_driver_probe+0x8d/0x150 [ 451.530714][ T31] usb_probe_device+0x1c4/0x390 [ 451.535695][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 451.549438][ T31] really_probe+0x26d/0x9e0 [ 451.554199][ T31] __driver_probe_device+0x18c/0x2f0 [ 451.559992][ T31] driver_probe_device+0x4f/0x430 [ 451.565666][ T31] __device_attach_driver+0x2ce/0x530 [ 451.573667][ T31] bus_for_each_drv+0x251/0x2e0 [ 451.579085][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 451.585153][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 451.591224][ T31] __device_attach+0x2b8/0x400 [ 451.596175][ T31] ? __pfx___device_attach+0x10/0x10 [ 451.601823][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 451.607429][ T31] bus_probe_device+0x185/0x260 [ 451.614050][ T31] device_add+0x7b6/0xb50 [ 451.619070][ T31] usb_new_device+0xa39/0x16f0 [ 451.624803][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 451.630591][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.635975][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.641557][ T5936] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 451.649354][ T31] hub_event+0x2958/0x4a20 [ 451.654297][ T31] ? __pfx_hub_event+0x10/0x10 [ 451.660036][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 451.666014][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.671873][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 451.677756][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 451.679271][ T5936] usb 4-1: device descriptor read/8, error -71 [ 451.684361][ T31] process_scheduled_works+0xae1/0x17b0 [ 451.696189][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 451.702718][ T31] worker_thread+0x8a0/0xda0 [ 451.710367][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 451.716943][ T31] ? __kthread_parkme+0x7b/0x200 [ 451.723821][ T31] kthread+0x711/0x8a0 [ 451.728009][ T31] ? __pfx_worker_thread+0x10/0x10 [ 451.733833][ T31] ? __pfx_kthread+0x10/0x10 [ 451.740284][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.745594][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.751757][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 451.763231][ T31] ? __pfx_kthread+0x10/0x10 [ 451.767934][ T31] ret_from_fork+0x4bc/0x870 [ 451.774966][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 451.781404][ T31] ? __switch_to_asm+0x39/0x70 [ 451.786548][ T31] ? __switch_to_asm+0x33/0x70 [ 451.789163][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 451.791675][ T31] ? __pfx_kthread+0x10/0x10 [ 451.806033][ T31] ret_from_fork_asm+0x1a/0x30 [ 451.811529][ T5936] usb usb4-port1: unable to enumerate USB device [ 451.819199][ T31] [ 451.819674][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 451.822824][ T31] [ 451.822824][ T31] Showing all locks held in the system: [ 451.856476][ T980] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 451.880366][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 451.889509][ T31] 5 locks held by kworker/0:1/10: [ 451.901406][ T31] 1 lock held by khungtaskd/31: [ 451.909255][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 451.910889][ T31] #0: ffffffff8e53d260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 451.918753][ T980] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 451.924858][ T31] 8 locks held by kworker/0:2/980: [ 451.939517][ T31] 3 locks held by kworker/u8:5/1316: [ 451.945032][ T31] 2 locks held by getty/5622: [ 451.950134][ T31] #0: ffff8880347000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 451.960501][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 451.998609][ T31] 4 locks held by udevd/5873: [ 452.009842][ T31] #0: ffff888046519540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 452.034242][ T31] #1: ffff88807b887088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 452.060163][ T31] #2: ffff8880795e4a58 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 452.087892][ T31] #3: ffff88802f66a198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 452.113387][ T31] 5 locks held by kworker/0:3/5928: [ 452.119143][ T31] #0: ffff888022a92148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 452.131390][ T31] #1: ffffc90004907ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 452.143833][ T31] #2: ffff888145318198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 452.146932][ T980] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 452.153868][ T31] #3: ffff88802f66a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 452.171411][ T980] usb 3-1: can't read configurations, error -61 [ 452.171457][ T31] #4: ffff8880505e3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 452.189017][ T31] 2 locks held by kworker/u8:11/10229: [ 452.194554][ T31] #0: ffff888142eba148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 452.206509][ T31] #1: ffffc9000b267ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 452.221338][ T31] [ 452.223811][ T31] ============================================= [ 452.223811][ T31] [ 452.232937][ T31] NMI backtrace for cpu 0 [ 452.232966][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 452.232987][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.232998][ T31] Call Trace: [ 452.233006][ T31] [ 452.233013][ T31] dump_stack_lvl+0x189/0x250 [ 452.233037][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.233053][ T31] ? __pfx__printk+0x10/0x10 [ 452.233088][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 452.233120][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 452.233139][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.233172][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 452.233193][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 452.233216][ T31] watchdog+0xf60/0xfa0 [ 452.233238][ T31] ? watchdog+0x1e2/0xfa0 [ 452.233260][ T31] kthread+0x711/0x8a0 [ 452.233288][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.233306][ T31] ? __pfx_kthread+0x10/0x10 [ 452.233331][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.233355][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.233378][ T31] ? __pfx_kthread+0x10/0x10 [ 452.233404][ T31] ret_from_fork+0x4bc/0x870 [ 452.233426][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 452.233451][ T31] ? __switch_to_asm+0x39/0x70 [ 452.233469][ T31] ? __switch_to_asm+0x33/0x70 [ 452.233485][ T31] ? __pfx_kthread+0x10/0x10 [ 452.233511][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.233542][ T31] [ 452.233551][ T31] Sending NMI from CPU 0 to CPUs 1: [ 452.382597][ C1] NMI backtrace for cpu 1 [ 452.382629][ C1] CPU: 1 UID: 0 PID: 1316 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 452.382650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.382662][ C1] Workqueue: krdsd rds_shutdown_worker [ 452.382692][ C1] RIP: 0010:validate_chain+0x1e1/0x2140 [ 452.382717][ C1] Code: cc 48 ff cb f7 c1 00 60 00 00 74 c8 e9 8d 00 00 00 48 c7 c7 50 e0 40 8e 4c 89 fe e8 c9 7f 6e 03 48 8b 14 24 eb c9 48 8b 48 18 <4c> 39 f9 0f 84 b2 00 00 00 48 8b 40 08 48 85 c0 0f 84 c2 fe ff ff [ 452.382733][ C1] RSP: 0018:ffffc90003f3f478 EFLAGS: 00000046 [ 452.382747][ C1] RAX: ffffffff94070eb0 RBX: 000000000003b286 RCX: 68a7b09fae109032 [ 452.382760][ C1] RDX: 0000000000000000 RSI: ffff888027ede690 RDI: ffff888027eddac0 [ 452.382773][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff818a5319 [ 452.382784][ C1] R10: dffffc0000000000 R11: ffffed100f6bd844 R12: 0000000000000000 [ 452.382796][ C1] R13: ffff888027ede5f0 R14: ffff888027ede690 R15: 68a7b09fae109032 [ 452.382810][ C1] FS: 0000000000000000(0000) GS:ffff8881258a2000(0000) knlGS:0000000000000000 [ 452.382824][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.382843][ C1] CR2: 00007fd2f8fbcff0 CR3: 000000001e2bc000 CR4: 00000000003526f0 [ 452.382859][ C1] Call Trace: [ 452.382866][ C1] [ 452.382877][ C1] ? do_raw_spin_lock+0x121/0x290 [ 452.382908][ C1] ? __lock_acquire+0xab9/0xd20 [ 452.382928][ C1] __lock_acquire+0xab9/0xd20 [ 452.382950][ C1] ? __queue_work+0x809/0xfb0 [ 452.382971][ C1] lock_acquire+0x120/0x360 [ 452.382990][ C1] ? __queue_work+0x809/0xfb0 [ 452.383018][ C1] _raw_spin_lock+0x2e/0x40 [ 452.383041][ C1] ? __queue_work+0x809/0xfb0 [ 452.383063][ C1] __queue_work+0x809/0xfb0 [ 452.383087][ C1] ? __queue_work+0x102/0xfb0 [ 452.383111][ C1] queue_delayed_work_on+0x18b/0x280 [ 452.383137][ C1] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 452.383162][ C1] ? __lock_acquire+0xab9/0xd20 [ 452.383185][ C1] rds_queue_reconnect+0x748/0x870 [ 452.383202][ C1] ? rds_queue_reconnect+0x2af/0x870 [ 452.383221][ C1] ? __pfx_rds_queue_reconnect+0x10/0x10 [ 452.383241][ C1] ? rds_conn_shutdown+0x5c8/0x8c0 [ 452.383264][ C1] rds_conn_shutdown+0x7c5/0x8c0 [ 452.383285][ C1] ? rds_conn_shutdown+0x5c8/0x8c0 [ 452.383312][ C1] ? __pfx_rds_conn_shutdown+0x10/0x10 [ 452.383337][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 452.383361][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.383385][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 452.383405][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 452.383427][ C1] process_scheduled_works+0xae1/0x17b0 [ 452.383460][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 452.383488][ C1] worker_thread+0x8a0/0xda0 [ 452.383520][ C1] kthread+0x711/0x8a0 [ 452.383547][ C1] ? __pfx_worker_thread+0x10/0x10 [ 452.383568][ C1] ? __pfx_kthread+0x10/0x10 [ 452.383594][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.383617][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.383643][ C1] ? __pfx_kthread+0x10/0x10 [ 452.383668][ C1] ret_from_fork+0x4bc/0x870 [ 452.383690][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 452.383713][ C1] ? __switch_to_asm+0x39/0x70 [ 452.383732][ C1] ? __switch_to_asm+0x33/0x70 [ 452.383751][ C1] ? __pfx_kthread+0x10/0x10 [ 452.383775][ C1] ret_from_fork_asm+0x1a/0x30 [ 452.383814][ C1] [ 452.385402][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 452.721798][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 452.730923][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.741001][ T31] Call Trace: [ 452.744290][ T31] [ 452.747226][ T31] dump_stack_lvl+0x99/0x250 [ 452.751830][ T31] ? __asan_memcpy+0x40/0x70 [ 452.756429][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.761638][ T31] ? __pfx__printk+0x10/0x10 [ 452.766258][ T31] vpanic+0x237/0x6d0 [ 452.770253][ T31] ? __pfx_vpanic+0x10/0x10 [ 452.774764][ T31] ? preempt_schedule_common+0x83/0xd0 [ 452.780247][ T31] panic+0xb9/0xc0 [ 452.783979][ T31] ? __pfx_panic+0x10/0x10 [ 452.788436][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 452.793838][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 452.800010][ T31] watchdog+0xf9f/0xfa0 [ 452.804187][ T31] ? watchdog+0x1e2/0xfa0 [ 452.808537][ T31] kthread+0x711/0x8a0 [ 452.812628][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.817314][ T31] ? __pfx_kthread+0x10/0x10 [ 452.821919][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.827217][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.832425][ T31] ? __pfx_kthread+0x10/0x10 [ 452.837047][ T31] ret_from_fork+0x4bc/0x870 [ 452.841654][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 452.846804][ T31] ? __switch_to_asm+0x39/0x70 [ 452.851572][ T31] ? __switch_to_asm+0x33/0x70 [ 452.856349][ T31] ? __pfx_kthread+0x10/0x10 [ 452.860968][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.865752][ T31] [ 452.869110][ T31] Kernel Offset: disabled [ 452.873440][ T31] Rebooting in 86400 seconds..