last executing test programs: 2m44.34772867s ago: executing program 3 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x54}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) 2m44.269008962s ago: executing program 3 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 2m44.182767574s ago: executing program 3 (id=1006): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000400), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) sched_rr_get_interval(0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f0000000080)='\x00', 0x2c0, &(0x7f0000000100)={@align=0x1, {0x3ff, 0xd, 0x1, 0x800}}, 0x7fff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000200)=0xf}, {[0x4, 0x80000, 0x7, 0x40]}, 0xb, 0x18, &(0x7f0000000240)=""/24}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r6}}, 0x30) r7 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0), 0x10) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) r8 = socket$netlink(0x10, 0x3, 0x9) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x0, r9, 0x0, 0x0, 0x0, 0x40, 0x3}, 0x7, 0x7, 0xffffffffffffffff, 0x400, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000380)={0xa, 0x1, {0x0}, {0xee00}, 0x3, 0x93}) syz_open_procfs(r10, &(0x7f00000003c0)='net/ip_tables_targets\x00') sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000004c0)={0x0, @loopback, 0x4e24, 0x1, 'dh\x00', 0x5, 0x7, 0x4c}, 0x2c) 2m43.346469487s ago: executing program 3 (id=1011): r0 = socket(0xa, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x200000}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) listen(r0, 0x3) recvfrom$inet(r0, 0x0, 0x0, 0x40000021, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'team0\x00', 0x701}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x4, 0xa, 0x1, 0x4}, 0x10) syz_usb_connect(0x0, 0x10b, &(0x7f0000000180)=ANY=[@ANYBLOB="05010900b24b6a10e604030077010000000109021268941c0000000904000302ccd4280009050b02000000040009058a02", @ANYRES16], 0x0) syz_usb_connect(0x0, 0xf2, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000296fdcf084f1712521040010203010902e0000106e370130904dc02000e0100010a2401ff0729000201020b240406bea33c2d2031e80b240304020205000a0010092403040404010503052406000105240004000d240f0109000000810000070606241a04003c0c241b070008000b100008107c"], 0x0) 2m40.233319818s ago: executing program 3 (id=1029): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01072bbd7000ffdbdf25010000000c000600030000000300000008000300", @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r5 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) ioprio_set$pid(0x3, r6, 0x2004) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000d00)={0x0, 0xa, 0x5, "8613f44684"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x210889, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x20000000000, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, @name="113000007dfae5bc00"}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000000)=r8) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="40800000", @ANYRES16=r9, @ANYBLOB="01002cbd7010040000000500000008000b0000000000080009000200000008000c00a80a000006000100050000000c0010000000008000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2m37.703003398s ago: executing program 3 (id=1045): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2801003, &(0x7f00000002c0)={'trans=unix,', {[{@uname={'uname', 0x3d, '}'}}], [{@euid_gt={'euid>', 0xee00}}]}}) 2m22.699689523s ago: executing program 32 (id=1045): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2801003, &(0x7f00000002c0)={'trans=unix,', {[{@uname={'uname', 0x3d, '}'}}], [{@euid_gt={'euid>', 0xee00}}]}}) 4.970809896s ago: executing program 4 (id=2080): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) r1 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000880)={0x24, &(0x7f0000000740)={0x40, 0x7, 0x5c, {0x5c, 0xe, "002eb975edf3a1f8ed15c908d2e2ae22b61ab5919814ce29cebcb388d882bc25b43814f75855337b1520504cdc8a02c6bbbb44321374f924b91fd0a76b858a8f9502fb98e3102dbb85085f77b04e4d60da2c3d9317a9bdcac011"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000000800)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x2, "17"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0xde, 0x9, 0x1, {0x22, 0xc04}}}}, &(0x7f0000000b40)={0x2c, &(0x7f00000008c0)={0x0, 0x15, 0xc5, "bbe6a11532845864e59502dac0cd76a71b88fd53c0237235fb245ce7d46eb80544d1d295f7c37aeb5e6493917eba81288d60e0535b96077f063e247fb1395e0a6062974aa7d62d1e9d29f1a3a0ad1b9dc095c235553d16c373ca661854dac3e2ce8340de47c36bf6856f97e68495161442042d6c5de97dca9139a4a74ad0ca4a7e20c5ef8371a18426bf43b389cc5a481b96a205313399e1e09c85851e3670218f32d009199ef9f6c44959f7e383a9064cbfd9530bbab0f5ecb9d75c334cf0a2fd226583d2"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x61}, &(0x7f0000000a40)={0x20, 0x1, 0x84, "54566729203d7a8e7089b223cd8fe037f3379ccce96ddc9eac47a968083d69742a45bb568fd0a4e1f4cd349b357c09a657449b28e8d342a76e68e62631da2af591db53ef943728c6d8b1b346bf51923b1cbb9ad24cba01fda1afafe3f2089ecb3ec3f7ebb354660166183321c238e67e6034ed400a11bd1daaffd0f5127e00d7f83a9801"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xb}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_ep_read(r1, 0xff, 0x2e, &(0x7f0000000f00)=""/46) bind$phonet(r4, &(0x7f0000000080)={0x23, 0x1, 0x7, 0x1}, 0x10) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000200)={0x0, 0x18, 0x1, "ea"}, 0x0, 0x0}) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x3, 0x5}) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) syz_usb_control_io$uac2(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000140)={0x40, 0x8, 0x6c, {0x6c, 0x23, "78d0be0c111528bb99f459adfbc7ce5d2aec1f0c364ad1e3498bb0de3a30201d695649d3fc7665be57ed0703468cc6391e9015000059332f6143f6df6c26c5ef20dfc9982965d25f36cdd62c72e1969a54b1e43d268d91f2111d9b0b385d6f38dc92b9716c05cefb7c0b"}}, &(0x7f0000000b80)={0x0, 0x3, 0x90, @string={0x90, 0x3, "60f00af04978c7713797794fd89c6f8695eed678b42cd04a21b2307277873345f69d8616fca03382b3f849530ad81af62874bd0ed3a68e66072161fd0b2c6652ef637864dc487ea29e8998f489696eec3c93eeb4bc805a5eaab39ea87da2de9b99d6dd11e792a29c6a7e48bcf94a2287683ccf49b5b3bcb41c41f8911d956c2a2aadab021041b5fd3628e16b97dd"}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000c80)={0x40, 0x12, 0xb7, "d27c3d41b6b9dbcc35f16a2591d213b06643effe13a8a60fa15f5f6c7cd9ca8167734332ec36666c428625aae7d336dec636287bc8df46e6f72578e9610ea1372750687980f30fa5332752012fca9107fce7832fb3b83fdb3e3737da922d83d6b8b06e2281e5208f17ec1e96390f80023c521f774fffb6d9d191cf41a58617033642265c602ef924f2c9b3430a8034dbc6d2b228362ee46e3ab04b6e8e52f72b3411a7a4a991272e85272f533ef872e340f8f55914098a"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000dc0)={0x20, 0x81, 0x1, "86"}, &(0x7f0000000e00)={0x20, 0x82, 0x2, '%%'}, &(0x7f0000000e40)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000000e80)={0x20, 0x84, 0x1, "15"}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, "4a1af6"}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, '\b\x00', {0x1, 0x8, 0x5, 0x40}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"]) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D \r', @ANYRES64=r0], 0x38}}], 0x1, 0x46000) 4.732732819s ago: executing program 1 (id=2084): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a747275737465643a2030306d1229fed6d78ab1303030303030303036342000"], 0x32, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4120, 0x80000001, 0x1018}, 0x0) (async) r0 = gettid() gettid() (async, rerun: 32) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.304938208s ago: executing program 4 (id=2088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r1, &(0x7f0000000040), &(0x7f000009de80), 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='omfs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') read$FUSE(r5, &(0x7f0000000800)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r3, 0x4, 0xc, 0x101, 0xb, 0x3, 0x40, 0x10000, {r4, @in={{0x2, 0x1, @rand_addr=0x64010100}}, 0x2, 0x680, 0x7, 0x63, 0x400}}, &(0x7f00000003c0)=0xb0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x5, 0x5, {{0x10, 0x4, 0x2, 0x1e, 0x40, 0x69, 0x0, 0x8, 0x2f, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0xb, 0x91, [@broadcast, @remote]}, @end, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x8487}]}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x0, 0xb, "b3b5e1886bdf3cad2c"}]}]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x23) 3.299587415s ago: executing program 1 (id=2089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x0) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0xfffffffffffffdf7) (async) write$binfmt_aout(r1, &(0x7f0000002500)={{0x107, 0x1, 0xf8, 0x210, 0x257, 0x101, 0x14c, 0x25}, "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"}, 0xca1) 3.102599754s ago: executing program 1 (id=2092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c000780060004409bc42000060005401c02000008000640"], 0x64}, 0x1, 0x21c, 0x0, 0x20008000}, 0x0) 3.038582817s ago: executing program 1 (id=2096): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d5a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x9) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x7f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f00000008c0)={0xfffffffffffffeb2, &(0x7f0000000240)={0x40, 0x0, 0xb1, "69fe2d8964f8387f65ff9238abdfbeb432de43e840827a40bd72acbd28871de43765f2a93f08d714c565acb7a7e2292a61b487906aa3596d50a2f2673c99208a7484111e2b02abbe9677342a43916441ec20486ce3ec17d1bdf806f70b4e67d966ec11f560a6d0d92c1751dc7ba57f8deef16c1082cf388640b44a0e2b9f1ca98a40a951790bba0170660689228e9da8cb23030f367015e0e6346ae7f82743b7f1128b44a59835f657f76644d55278b437"}, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="b7b94358076743f1cf80e1005c3b3d157f71274094a34b30395ab8647cadfdaeb68e06f0da2dbede6eed3251c09a6f417474139b5f592f49fa1f0e80f7d7a7056edda6f9cabbb96482d126c61936cc3bc14122d6a4c5af13134d497600051db493a37ab0d3e0f27f39aacb23059deb77b5e50b2b3b2d82774aedab026c9eba52a0d5d18a5ddf4806ca89268d1ebf42852b84eea87dce", @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="d1537dc9c84b2003621578"]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0xc, 0xcf, {0xcf, 0x23, "f56c7b081f98b72603759c1e1e9cf4cace68d5960690285d4774aae450eb81b9fa88e0b313948f336602dc4a7fe4ad4c5c6f857f18b9cae05988c33d36e3b6a5dd27bc917797e785a5fec1fc19a33a931cdfc4f0725d3df1b82f0b8ee76f2a8b028efc20495172d54a530ae470b18dee19db482d0a48c526d5dc90c75054c055c24e5216a5c394e46a3874cb3317be5588bceec245c8117b869cac28d6c4ce2242768e8d2fa0fefcd46e62f2be19e7370f838a501ab73342aac74c5b66c61daa3005a8ccd19fef79be7051c81f"}}, &(0x7f0000000640)={0x0, 0x3, 0xf, @string={0xf, 0x3, "5419f88e7a15eb186601507902"}}}, &(0x7f0000000a00)={0x34, &(0x7f00000007c0)={0x40, 0xe, 0x42, "7b12a9c491aa6a00305c8098dfc02640b8a412336684dc6d7e182b8dd180123ea5c360b19d70faa23204c73db792e5af3c876b7b6a4eab7e59f0e5593d2bfcf8219b"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0x46, {0x44, "4272bc57522d7a7aff1ae75ec6295e842f03a255e624053272fad5ad0eb1d0157ae36c86b41f42da68fcc4bf1c63d42ced9bccc7f400bb86844289f23b49e6438f506f42"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x4}}) (async) syz_usb_control_io$printer(r2, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0xc, 0xcf, {0xcf, 0x23, "f56c7b081f98b72603759c1e1e9cf4cace68d5960690285d4774aae450eb81b9fa88e0b313948f336602dc4a7fe4ad4c5c6f857f18b9cae05988c33d36e3b6a5dd27bc917797e785a5fec1fc19a33a931cdfc4f0725d3df1b82f0b8ee76f2a8b028efc20495172d54a530ae470b18dee19db482d0a48c526d5dc90c75054c055c24e5216a5c394e46a3874cb3317be5588bceec245c8117b869cac28d6c4ce2242768e8d2fa0fefcd46e62f2be19e7370f838a501ab73342aac74c5b66c61daa3005a8ccd19fef79be7051c81f"}}, &(0x7f0000000640)={0x0, 0x3, 0xf, @string={0xf, 0x3, "5419f88e7a15eb186601507902"}}}, &(0x7f0000000a00)={0x34, &(0x7f00000007c0)={0x40, 0xe, 0x42, "7b12a9c491aa6a00305c8098dfc02640b8a412336684dc6d7e182b8dd180123ea5c360b19d70faa23204c73db792e5af3c876b7b6a4eab7e59f0e5593d2bfcf8219b"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0x46, {0x44, "4272bc57522d7a7aff1ae75ec6295e842f03a255e624053272fad5ad0eb1d0157ae36c86b41f42da68fcc4bf1c63d42ced9bccc7f400bb86844289f23b49e6438f506f42"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x4}}) 2.2118886s ago: executing program 2 (id=2100): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* rm'], 0x9) read$FUSE(r2, &(0x7f00000058c0)={0x2020}, 0x2020) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000000000000100000044000180060001000a00000008000b00736970000c00070000000000220000000800090064000200090006006e6f6e650000000008000800170000000800050001000000089ef7bd3d553b46f49b907e0ab9df91fbca43e1e7fef0ac08af54d47004a277fb0ab97db58f99ac7bfb088cffaaa1"], 0x58}}, 0x0) 1.8462921s ago: executing program 2 (id=2102): syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0102030109021b00020000000009046f0000aad823000904"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x8c, 0x2, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x600, 0x7c, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xb, 0x9, 0x9, 0x20, 0xfa}, 0x43, &(0x7f0000000300)={0x5, 0xf, 0x43, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x5, 0x0, 0x0, [0x0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x7, 0x51, 0xe, 0x8001, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x82, 0x2, 0x5, 0x959, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe87e0dccd08ce4c8, 0xee, 0x81, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x2, 0xfffa}]}, 0x3, [{0x7c, &(0x7f0000000400)=@string={0x7c, 0x3, "529d93b76991ad174ae1bb2c48e18223facc4f2ca4a43deca09c7fbcd73901d451fe8b9716e81a7fb154089e0e988c5fab4814ebb7ffd47e14e0b98da3c2ee563e8cbcdc57ed1a112c06c36107606cc13e8e43c030782c9e7856d48ff29e70e20755009ee233f9044bbd7e4f4a79e068e1d925fcf204f588f0fd"}}, {0x1c, &(0x7f0000000480)=@string={0x1c, 0x3, "d281a6216387fc128dee7cad0033f3b5d5d902933562d83e673c"}}, {0x23, &(0x7f00000004c0)=@string={0x23, 0x3, "b4704dcd73322e63f20234da533f471d916f0969cba627462901ec0d08b4bf3612"}}]}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181042, 0x148) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[], 0x310) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x2, r1, 'id1\x00'}) poll(&(0x7f00000001c0)=[{r0, 0x410}, {r1, 0x4004}, {r1, 0x6000}, {0xffffffffffffffff, 0x40}, {r0, 0x2000}, {r5, 0x8000}], 0x6, 0x8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x1, 0x0, 0x29) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)=ANY=[@ANYBLOB="20040000f30304002cbd7000fcdbdf2501000000020000002c000000030000007f00000001000000080000000000000000040000020000000100000001000000020000000000000004000000c5000000080000006c040000070000006d96cc78000000c005000000050000000c0000000000000004000000018000000000000009000000010000800b00000004000b0000000000000400000005000000630000000e00000004000000030000000200000046000000070000007d050000040000000c0000000100000001800000810000000e8e000017fd00004cb3000009000000ad000000c700000000000000020000000180000006000000ff7f00000600000004000000fdffffff01000000080000000800000004000000010000000700000000000000ff00000007000000350000000800000041570000080000000300000004000000010000007d00000000000003010000000400000000000080010000000000000001000000b4000000fdffffff01000080000000000100000000000020000000009f000000020000000a0000003d0000000300000003000000e4000000000800000300000098000000ffff000000000000070000000e000000070000001a0000000300000005000000800000008000000004000000300400000500000005000000fdffffff0600000006000000b900000004000000030000000800000000fffffff9ffffffffffffff0101000000000000ff07000005000000fdffffffc600000002000000020000000000000003000000000000000900000002000000040000000080040010000052ff0300000f000000020000000300000003000000fdffffff0900000009000000ffff00000d000000020000000800000002000000ff03000055f6e93f8001000008000000e88e000007000000000000000500000001000100ffffff7f03000000420000000100000086884b4b7fffffff08000000000000c008000000030000000d0000000002000080000000ff070000030000000000000000000080000000000300000005000000010000000000010002000000ff7f00000001000002000000090000003d770000ff01000002000000fa00000003000000e7000000010000000008000000000000d4ffffff0500000001000080001000000000002000002000020000000a000000ff7f0000ba000000020000000600000008000000080000000a9a00000000000009000000310000006e280000000400000b000000a00000000cffffff030000000300000008000000fdffffff000000000900000002000000f000000000100000020000000900000002000000c0650000ff000000ff01000000000048030000000800000010400000000100007c0000000100001501040000ffff00000600000004000000070000000400000001000000ffffffff08000000040000000800000000000100ffffffff00000000"], 0x420}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae80d404a4ecdad3b43f3adf8a6f04e804ff47b4628087005ee20d116b8549f2be9f1db09bb6ddef70515b3072b5cd44755f07f2741e56bc2d85e88e62f88d7c7f6a6b91e2651d22c76410d8c70c8f8372c465"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/125, 0x7d}], 0x2}, 0x2000) 1.810932997s ago: executing program 0 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x402c00, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000380)='ns/ipc\x00') r2 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x22}}], 0x18}, 0xc890) 1.653764773s ago: executing program 0 (id=2104): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="404c721cbc51cc6fd456f68779ba947ffd255129f7fd92ce175de011398c7ca421eb732ee5e9c190e6642cad3a087cf26e14e60d9701ae751a70703b98ce24e8b439a6dd46a429c0630ff45ac7afbda2d60f8d856fd45aa30248a9ed665c21ca3f4b94a6158b09134811edde9f494c0219d76dab70c38c1ff54a638ba5334290c25848bb1ee977ed5b6a9d1bb344776d66688930e15bbc1eb6f6a7ff6fe1bf8728e758fddd647e1403aa69f2e0d5c9da139d04668030cdffa8a23b24c8db0e"], 0x0) 1.534918012s ago: executing program 1 (id=2105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c000780060004409bc42000060005401c02000008000640"], 0x64}, 0x1, 0x300, 0x0, 0x20008000}, 0x0) 1.507650695s ago: executing program 1 (id=2106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000041000900000000000002", @ANYRES32=0x0], 0x20}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) socket$netlink(0x10, 0x3, 0x8000000004) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/wakeup_count', 0xea241, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2c, 0x3, 0x7) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES16=r0, @ANYBLOB='\a'], 0x0) 1.076128691s ago: executing program 2 (id=2107): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) 1.032456128s ago: executing program 4 (id=2108): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@int=0x800, 0x4) (async, rerun: 64) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="d2", 0x1}], 0x1}}], 0x1, 0x8080) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x2, [0x8, 0x0]}, 0xc) (async) fcntl$setpipe(r2, 0x407, 0x2) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x40, 0x107, 0xfffffffe, 0x10004, {0x1, 0x7c}, [@nested={0x4, 0x35}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f00000002c0)={0x3, 0x7f}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) (async) sendfile(r4, r0, 0x0, 0x10000a007) (async) r6 = syz_open_dev$radio(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f00000001c0)={0xfffffffe, 0x3, 0x3}) 970.879314ms ago: executing program 0 (id=2109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205000000dde2f7"], 0x0}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc000000000000000000000000000001080002"], 0x44}}, 0x0) 969.97693ms ago: executing program 2 (id=2110): read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680)=0x0) r4 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000026c0)={0x8, 0x6, {}, {0xffffffffffffffff}, 0x4, 0x4}) mount$9p_virtio(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x14000, &(0x7f0000002700)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r0}}], [{@uid_eq={'uid', 0x3d, r1}}, {@dont_hash}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@fowner_gt={'fowner>', r4}}, {@hash}, {@obj_role={'obj_role', 0x3d, '%{'}}, {@smackfstransmute}, {@euid_eq={'euid', 0x3d, r5}}]}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000002c40)={0x9, 0x80000001}) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) syz_usb_connect$uac2(0x2, 0xe8, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x3, 0x1, 0xf, 0xa0, 0xd8, {0x8, 0xb, 0x2, 0x1, 0x1, 0x8, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xca, 0x9, 0x1c, 0x20}, [@sample_rate={0x13, 0x24, 0xd, 0x3, 0x2, 0x4, [0x3, 0x1, 0x0, 0x2, 0x2, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x7, 0xc, 0x3, 0x4, 0x0, 0x8, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x81, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x8, 0x2, {0x8, 0x25, 0x1, 0x3, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x7, 0x8, "10ed", "68ed"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x6, 0x80, "7ee7512524338525"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x4, 0xa, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xc}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xe90, 0xf319, 0x1, "bcfd0ee768e1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x7a7, 0x9, 0x8, 0x4, {0x8, 0x25, 0x1, 0x3, 0x0, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0xb, 0x10, 0x20, 0x81}, 0x27, &(0x7f0000000180)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x5, 0x7, 0xad, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "e2d128de49c4d741a8ba3be603efbd3c"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3409}}, {0x49, &(0x7f00000002c0)=@string={0x49, 0x3, "4dc2a30d1298afcfb394e444c19335a714d93fc2705ef2fc82a4e5ac519fbd74863ff1b9e0ede6d8c39e8287d288095fc1f23bb0940b6de6606021c7822027d100d43a4bedbdd0"}}]}) 903.598149ms ago: executing program 4 (id=2111): quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) accept(r1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000306000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0xaacf, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0xe1, 0x22, 0x0, 0x0, 0x2}) 872.882276ms ago: executing program 4 (id=2112): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x8, 0x6, 0x5d) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000004c0)={r5, 0x10, "0948ca94a1cbe2a6c2b19c7f52685346"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r5, 0x460, 0x10, 0x8, 0x7fffffffffffffff}, &(0x7f0000000200)=0x18) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x12, 0xa01, 0x80000, 0x0, {0x7}}, 0x14}}, 0x0) io_pgetevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x64}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40004) 418.777781ms ago: executing program 0 (id=2113): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$loop(&(0x7f0000001100), 0x5, 0x0) lseek(r0, 0x1, 0x4) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0xa020}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x20}) fsmount(r1, 0x0, 0x20) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000800)={0x1}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="38c9", 0x2}], 0x1) 409.981638ms ago: executing program 2 (id=2114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c000780060004409bc42000060005401c02000008000640"], 0x64}, 0x1, 0x1c02, 0x0, 0x20008000}, 0x0) 371.248069ms ago: executing program 2 (id=2115): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2279, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x2, 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xb14a], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x6, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000400)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x8, 0x5, 0x3, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="500100003a00200025bd7000fedbdf253d018d80fe7a6d9366cf732e0ecd92a27cc4cb49b94975bd0ab0af523b21d6ddfe80dbf1b58e5a02127bfbbe369faa2516b5e863192c95b2d87c6bd0ca0b389a77aaf3cc1d1f553e60f1fde00931395dbdc6dc6d0d1ab12c39912c162643b80b11702f54f28b06b9fcf7b276f3d81648c00d398996823abbaa161d7bddfe152c0aa1199400ca96321d87394288e3b5b4d474b5dbcb4b6ee0ded6bdc79ab66b8148a4829f0cf55fd247f7df9c7506b514d9ae3e229c5dea934c6d7d788b9d8f81bb7e71df115e97b7098a771d268a94b2fad25a04016c2b930e5a02e96db4b4be89040030800400c780d28f7437f5efcae5ff7835508f80af453b5feea04f570a8e38cb07951ac30f3de04856f6ddb44e74fad77b0606eda266b93df24ed2e66f882bb7e953928227322d30f613a43b3450f6de43335e0d23662021a5ec4e7389359e18a6c004004f8004008f80000000a2d838ff062b04b0f21452d793e8444804a61a050d06f4372c3d2bf47330ccc000092808f53a70188e4952e4a1cd6a538c7694fa7e812e323c4e328021d351bee6c420ef8573b39d5023cda6b15ff95280c34126fe610bc0b5d4f49d98ba354bd455f94cf5b07df81fe55cfcb92954d2b8237eb718809baedb2f9e0ff1b79711d8f259b57df393833d0e3e626bb7"], 0x150}], 0x1, 0x0, 0x0, 0x40095}, 0x4890) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 329.121594ms ago: executing program 0 (id=2116): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) poll(&(0x7f0000000280)=[{r0, 0x2280}], 0x1, 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0xcce0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xca1a6e8e149c8d3c) 222.278976ms ago: executing program 0 (id=2117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r1, &(0x7f0000000040), &(0x7f000009de80), 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='omfs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') read$FUSE(r5, &(0x7f0000000800)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r3, 0x4, 0xc, 0x101, 0xb, 0x3, 0x40, 0x10000, {r4, @in={{0x2, 0x1, @rand_addr=0x64010100}}, 0x2, 0x680, 0x7, 0x63, 0x400}}, &(0x7f00000003c0)=0xb0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x5, 0x5, {{0x10, 0x4, 0x2, 0x1e, 0x40, 0x69, 0x0, 0x8, 0x2f, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0xb, 0x91, [@broadcast, @remote]}, @end, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x8487}]}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x0, 0xb, "b3b5e1886bdf3cad2c"}]}]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x23) 0s ago: executing program 4 (id=2118): r0 = mq_open(&(0x7f0000000240)='\x00', 0x80, 0x2, &(0x7f0000000280)={0x0, 0x2, 0x9}) mq_notify(r0, &(0x7f00000004c0)={0x0, 0x8, 0x0, @thr={&(0x7f0000000380)="3325f721c1a4732bd56907ed54406b5498e2bfdbf641ef52bd961b9822a7ab0e0f4ab0d13d261430bf5240c61fb34a87b377dd4014bcc17f6ea4c6b58fbe1913c9f23ed1ffb252989346cf43791a9c123027a0a9612d0e7efb74a5a061e3e1fe9d5a60caf4b7dc384e12c9bf63462053bc762535b024bbe5684eaceb624000733fa4b03f00e6175bc4d2ddfe1d23f803e0bf70dd6497511161c5f45504eb9e233ccf91f255ccb24c43aaa8de0609d80fcad5db2251aef761b7c8aecb08e2abeb208d567a7a5c36ae4596e08e484b5d9df701ff43bbc42808fc3a4ad1760445de3e079cff0bcfa84c4f1a4e", &(0x7f0000000480)="bec18a7b697b27f554ee1858126dc75e69601ec554e9b99a5fb22ff9dc81517fe46045dac61352d7cadab310"}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff0300000009058202"], 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='permprofile &&'], 0xff) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000180)={0x2f, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x5, 0x2dc494, 0x2165b8}) kernel console output (not intermixed with test programs): 327.497124][T15696] netlink: 'syz.0.1363': attribute type 10 has an invalid length. [ 327.616712][ T5886] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 327.766834][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 327.773628][ T5886] usb 5-1: config 8 has an invalid interface number: 234 but max is 0 [ 327.773782][ T5886] usb 5-1: config 8 has no interface number 0 [ 327.773828][ T5886] usb 5-1: config 8 interface 234 altsetting 1 bulk endpoint 0xD has invalid maxpacket 16 [ 327.773852][ T5886] usb 5-1: config 8 interface 234 has no altsetting 0 [ 327.779904][ T5886] usb 5-1: New USB device found, idVendor=1608, idProduct=021c, bcdDevice= 6.42 [ 327.779929][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.779947][ T5886] usb 5-1: Product: syz [ 327.779960][ T5886] usb 5-1: Manufacturer: syz [ 327.780021][ T5886] usb 5-1: SerialNumber: syz [ 327.795051][T15685] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 327.853319][T15696] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 327.920497][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.921567][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.994414][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.995680][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.852660][T15731] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1368'. [ 329.099773][T15740] sg_write: data in/out 214457/136 bytes for SCSI command 0x37-- guessing data in; [ 329.099773][T15740] program syz.1.1373 not setting count and/or reply_len properly [ 329.720479][T15753] overlayfs: empty lowerdir [ 330.022651][T15765] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20000 [ 330.378595][T15771] exfat: Deprecated parameter 'debug' [ 330.397776][T15771] exFAT-fs (nullb0): invalid boot record signature [ 330.397788][T15771] exFAT-fs (nullb0): failed to read boot sector [ 330.397794][T15771] exFAT-fs (nullb0): failed to recognize exfat type [ 330.445510][ T5886] io_ti 5-1:8.234: required endpoints missing [ 330.513847][ T5886] usb 5-1: USB disconnect, device number 14 [ 330.834430][T15802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.836248][T15802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.843104][T15802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.846299][T15802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.986677][ T5886] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 331.006714][ T5946] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 331.146371][ T5886] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.146398][ T5886] usb 5-1: config 0 has no interface number 0 [ 331.146532][ T5886] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 331.151104][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.181166][ T5946] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 331.198576][ T5946] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 331.198603][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.221598][ T5946] usb 2-1: config 0 descriptor?? [ 331.238475][ T5886] usb 5-1: config 0 descriptor?? [ 331.240374][ T5946] rndis_host 2-1:0.0: rndis: master #0/ffff888032851000 slave #1/0000000000000000 [ 331.275676][ T5886] usb 5-1: selecting invalid altsetting 1 [ 331.315270][ T5886] dvb_ttusb_budget: ttusb_init_controller: error [ 331.315287][ T5886] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 331.346325][T15816] openvswitch: netlink: IPv4 tun info is not correct [ 331.565205][ T5886] DVB: Unable to find symbol cx22700_attach() [ 331.610877][ T6428] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -110 [ 331.610907][ T6428] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 331.611514][ T6428] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -32 [ 331.611907][ T6428] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 331.674960][ T5886] DVB: Unable to find symbol tda10046_attach() [ 331.674970][ T5886] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 331.695529][ T5886] usb 5-1: USB disconnect, device number 15 [ 332.227432][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.228670][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.230444][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.231506][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.232742][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.234861][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.236031][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.275316][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.281448][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.285772][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.304113][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.304672][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.992945][T15869] sp0: Synchronizing with TNC [ 333.021883][T15874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.022356][T15874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.396689][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 333.568310][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.568358][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 333.571922][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.571950][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.571971][ T9] usb 5-1: Product: syz [ 333.571984][ T9] usb 5-1: Manufacturer: syz [ 333.571998][ T9] usb 5-1: SerialNumber: syz [ 333.694996][ T5886] usb 2-1: USB disconnect, device number 120 [ 333.833807][ T9] cdc_ncm 5-1:1.0: bind() failure [ 333.857863][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 333.857900][ T9] cdc_ncm 5-1:1.1: bind() failure [ 333.876707][ T9] usb 5-1: USB disconnect, device number 16 [ 334.206657][ T5929] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 334.291571][T15921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.292195][T15921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.295016][T15921] netlink: 'syz.2.1398': attribute type 1 has an invalid length. [ 334.295035][T15921] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1398'. [ 334.295058][T15921] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1398'. [ 334.295072][T15921] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1398'. [ 334.377485][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 334.378256][ T5929] usb 2-1: no configurations [ 334.378267][ T5929] usb 2-1: can't read configurations, error -22 [ 334.517342][ T5929] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 334.676678][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 334.677294][ T5929] usb 2-1: no configurations [ 334.677306][ T5929] usb 2-1: can't read configurations, error -22 [ 334.677609][ T5929] usb usb2-port1: attempt power cycle [ 335.026799][ T5929] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 335.065531][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 335.066201][ T5929] usb 2-1: no configurations [ 335.066211][ T5929] usb 2-1: can't read configurations, error -22 [ 335.089249][T15944] input: syz0 as /devices/virtual/input/input32 [ 335.243840][ T5929] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 335.262096][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 335.263758][ T5929] usb 2-1: no configurations [ 335.263773][ T5929] usb 2-1: can't read configurations, error -22 [ 335.264343][ T5929] usb usb2-port1: unable to enumerate USB device [ 335.522715][T15961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.523348][T15961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.935201][T15975] sit0: entered promiscuous mode [ 335.963895][T15975] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 335.963915][T15975] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1409'. [ 336.104458][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 336.645751][ T5886] IPVS: starting estimator thread 0... [ 336.727216][T16024] IPVS: using max 8 ests per chain, 19200 per kthread [ 336.936848][ T5886] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 337.086658][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 337.089068][ T5886] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 337.089094][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.102646][ T5886] usb 5-1: config 0 descriptor?? [ 337.117642][ T5886] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 337.192430][T16060] netlink: 'syz.1.1420': attribute type 83 has an invalid length. [ 337.329158][T16027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.330051][T16027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.334935][ T5886] gspca_vc032x: reg_r err -71 [ 337.334965][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.334977][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.334984][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.334994][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335003][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335013][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335022][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335031][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335039][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335048][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335056][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335065][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335073][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335081][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335090][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335098][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335106][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335113][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.335121][ T5886] gspca_vc032x: Unknown sensor... [ 337.335199][ T5886] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 337.469792][ T5946] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 337.533179][ T5886] usb 5-1: USB disconnect, device number 17 [ 337.646732][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 337.648891][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.648921][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.648943][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.648974][ T5946] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 337.648986][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.658798][ T5946] usb 2-1: config 0 descriptor?? [ 338.062820][T16098] netlink: 'syz.2.1425': attribute type 6 has an invalid length. [ 338.136218][ T5946] usbhid 2-1:0.0: can't add hid device: -71 [ 338.136331][ T5946] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 338.155888][ T5946] usb 2-1: USB disconnect, device number 125 [ 338.487064][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 338.488580][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 338.488600][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 338.952133][T16145] netlink: 'syz.0.1431': attribute type 39 has an invalid length. [ 339.286772][ T5818] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 339.420487][ T5818] usb 5-1: device descriptor read/64, error -71 [ 339.518806][T16179] 9p: Bad value for 'wfdno' [ 339.656748][ T5818] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 339.657383][ T37] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 339.789843][ T5818] usb 5-1: device descriptor read/64, error -71 [ 339.808031][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 339.809813][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.809843][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.809880][ T37] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 339.809903][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.867673][ T37] usb 2-1: config 0 descriptor?? [ 339.886497][ T37] usbhid 2-1:0.0: can't add hid device: -22 [ 339.892726][ T37] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 339.901582][ T5818] usb usb5-port1: attempt power cycle [ 340.075232][ T5946] usb 2-1: USB disconnect, device number 126 [ 340.236736][ T5818] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 340.257502][ T5818] usb 5-1: device descriptor read/8, error -71 [ 340.398065][T16224] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 340.496678][ T5818] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 340.518117][ T5818] usb 5-1: device descriptor read/8, error -71 [ 340.627014][ T5818] usb usb5-port1: unable to enumerate USB device [ 340.806677][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 340.806754][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 340.806766][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 341.914425][T16253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1449'. [ 342.091203][T16253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1449'. [ 342.183164][T16266] netlink: 'syz.0.1453': attribute type 21 has an invalid length. [ 342.218566][T16266] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 342.218585][T16266] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1453'. [ 343.535891][ T38] audit: type=1326 audit(1776343583.270:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.0.1458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602123c819 code=0x0 [ 344.246719][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 344.247114][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 344.247132][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 344.970360][T16327] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 344.970381][T16327] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 345.047323][ T9] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 345.629229][T16373] netlink: 'syz.1.1475': attribute type 4 has an invalid length. [ 345.629249][T16373] netlink: 'syz.1.1475': attribute type 4 has an invalid length. [ 346.140291][ T5946] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 346.144828][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.144858][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.144899][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.144922][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.283316][T16410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.286397][T16410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.318136][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 346.320718][ T5946] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 346.320742][ T5946] usb 2-1: config 0 has no interface number 0 [ 346.320787][ T5946] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 346.320865][ T5946] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 346.320888][ T5946] usb 2-1: config 0 interface 85 has no altsetting 0 [ 346.324600][ T5946] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 346.324627][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.324699][ T5946] usb 2-1: Product: syz [ 346.324714][ T5946] usb 2-1: Manufacturer: syz [ 346.324728][ T5946] usb 2-1: SerialNumber: syz [ 346.346241][ T5946] usb 2-1: config 0 descriptor?? [ 346.365162][ T9] usb 5-1: usb_control_msg returned -32 [ 346.365204][ T9] usbtmc 5-1:16.0: can't read capabilities [ 346.581377][ T5946] appletouch 2-1:0.85: Failed to read mode from device. [ 346.583053][ T5946] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 346.635005][T16389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.640535][T16389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.725842][T16424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.742205][T16424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.767863][ T6428] hid_parser_main: 530 callbacks suppressed [ 346.767884][ T6428] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 346.816208][ T6428] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.356319][ T5946] usb 2-1: USB disconnect, device number 127 [ 347.758861][T16466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1482'. [ 348.052639][T16476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.055952][T16476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.496790][ T37] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 348.647277][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 348.649948][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.649979][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.650015][ T37] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 348.650039][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.665862][ T37] usb 2-1: config 0 descriptor?? [ 348.686279][T16519] fuse: Unknown parameter 'roF`кdќЪѓЎяtmode?0000000000' [ 348.782565][T16521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.784384][T16521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.863534][ T5886] usb 5-1: USB disconnect, device number 22 [ 349.170602][ T37] ft260 0003:0403:6030.0030: unknown main item tag 0x0 [ 349.170646][ T37] ft260 0003:0403:6030.0030: unknown main item tag 0x0 [ 349.371532][ T37] ft260 0003:0403:6030.0030: chip code: 0000 0000 [ 349.696734][ T5946] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 349.777235][ T9] usb 2-1: USB disconnect, device number 2 [ 349.850859][ T5946] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 349.850885][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 349.853637][ T5946] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 349.853663][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.853683][ T5946] usb 5-1: Product: syz [ 349.853698][ T5946] usb 5-1: Manufacturer: syz [ 349.853712][ T5946] usb 5-1: SerialNumber: syz [ 349.907808][ T5946] usb 5-1: config 0 descriptor?? [ 350.122242][ T5946] mos7840 5-1:0.0: required endpoints missing [ 350.325633][ T5886] usb 5-1: USB disconnect, device number 23 [ 350.706673][ T5886] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 350.856652][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 350.861763][ T5886] usb 2-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 350.861812][ T5886] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 350.861838][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 350.864068][ T5886] usb 2-1: New USB device found, idVendor=16d0, idProduct=00b8, bcdDevice=de.8e [ 350.864096][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.864114][ T5886] usb 2-1: Product: syz [ 350.864129][ T5886] usb 2-1: Manufacturer: syz [ 350.864142][ T5886] usb 2-1: SerialNumber: syz [ 350.880260][ T5886] usb 2-1: config 0 descriptor?? [ 350.928129][T16584] tmpfs: Unknown parameter 'grpquotaюїDьБ6aCшТ’}иљѓQ'*“#Љ`]ЦIК<ЫбгіН)ƒƒŒ^ +тЛЛVRвbuфEyњr„iГ“ЮЎІVsіЇГлќSМ0PЁд}цЙlz УМTжйŽ§ЌЙn"Ћ)#z?ФК@юmЊсИп’ћфu [ 350.928129][T16584] ё›ЇdеHЪЙњ–VXK(АЄКЇ™‹Сq ЅŒ`цzСђйЅЪЎл‘eњЕ/lў ‹ЖХ‘дч'ы-Ь'D§?–AѓmФ:Šї#yaЕŠœ”і—ЙLЉPк7ЎЂЇяў(aБю~Є’яf†Ч.Œ€Yч[дЊcOЯХšеiй– [ 350.928129][T16584] ЧЃYAr!' [ 350.928267][T16583] tmpfs: Unknown parameter 'grpquotaюїDьБ6aCшТ’}иљѓQ'*“#Љ`]ЦIК<ЫбгіН)ƒƒŒ^ +тЛЛVRвbuфEyњr„iГ“ЮЎІVsіЇГлќSМ0PЁд}цЙlz УМTжйŽ§ЌЙn"Ћ)#z?ФК@юmЊсИп’ћфu [ 350.928267][T16583] ё›ЇdеHЪЙњ–VXK(АЄКЇ™‹Сq ЅŒ`цzСђйЅЪЎл‘eњЕ/lў ‹ЖХ‘дч'ы-Ь'D§?–AѓmФ:Šї#yaЕŠœ”і—ЙLЉPк7ЎЂЇяў(aБю~Є’яf†Ч.Œ€Yч[дЊcOЯХšеiй– [ 350.928267][T16583] ЧЃYAr!' [ 352.194844][T16633] loop8: detected capacity change from 0 to 7 [ 352.205741][T16633] Dev loop8: unable to read RDB block 7 [ 352.205778][T16633] loop8: AHDI p1 p2 p3 [ 352.205805][T16633] loop8: partition table partially beyond EOD, truncated [ 352.206252][ T10] usb 2-1: USB disconnect, device number 3 [ 352.210398][T16633] loop8: p1 start 1601398130 is beyond EOD, truncated [ 352.210419][T16633] loop8: p2 start 1702059890 is beyond EOD, truncated [ 352.289847][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 352.356879][T16645] netlink: 'syz.0.1502': attribute type 6 has an invalid length. [ 352.379238][T16633] Dev loop8: unable to read RDB block 7 [ 352.379256][T16633] loop8: AHDI p1 p2 p3 [ 352.379272][T16633] loop8: partition table partially beyond EOD, truncated [ 352.381076][T16633] loop8: p1 start 1601398130 is beyond EOD, truncated [ 352.381090][T16633] loop8: p2 start 1702059890 is beyond EOD, truncated [ 352.550557][T16660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.551206][T16660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.817802][T16673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'. [ 352.876722][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 352.961513][T16677] netlink: 'syz.1.1509': attribute type 4 has an invalid length. [ 353.050322][ T10] usb 5-1: config 2 has an invalid interface number: 43 but max is 0 [ 353.050356][ T10] usb 5-1: config 2 has no interface number 0 [ 353.050405][ T10] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 353.050419][ T10] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 353.050432][ T10] usb 5-1: config 2 interface 43 has no altsetting 0 [ 353.052485][ T10] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 353.052511][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.052523][ T10] usb 5-1: Product: syz [ 353.052530][ T10] usb 5-1: Manufacturer: syz [ 353.052538][ T10] usb 5-1: SerialNumber: syz [ 353.064959][T16668] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 353.065071][T16668] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 353.185657][T16685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.188161][T16685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.247568][ T37] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 353.289274][ T10] ums-usbat 5-1:2.43: USB Mass Storage device detected [ 353.309015][ T10] ums-usbat 5-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 353.389174][ T37] usb 2-1: device descriptor read/64, error -71 [ 353.418654][ T10] ums-usbat 5-1:2.43: probe with driver ums-usbat failed with error -5 [ 353.432653][ T10] usb 5-1: USB disconnect, device number 24 [ 353.555102][T16715] netlink: 'syz.0.1515': attribute type 6 has an invalid length. [ 353.560064][T16716] netlink: 'syz.0.1515': attribute type 6 has an invalid length. [ 353.626708][ T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 353.756749][ T37] usb 2-1: device descriptor read/64, error -71 [ 353.868277][ T37] usb usb2-port1: attempt power cycle [ 353.943910][T16727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.944974][T16727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.276877][ T37] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 354.298426][ T37] usb 2-1: device descriptor read/8, error -71 [ 354.536934][ T37] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 354.559681][ T37] usb 2-1: device descriptor read/8, error -71 [ 354.668999][ T37] usb usb2-port1: unable to enumerate USB device [ 354.840828][T16766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1525'. [ 355.451144][T16793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.454215][T16793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.454562][T16794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.455167][T16794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.593724][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 355.634053][T16804] pim6reg: entered allmulticast mode [ 355.639433][T16803] pim6reg: left allmulticast mode [ 355.907608][T16817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.156679][ T1243] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 356.288590][ T1243] usb 5-1: device descriptor read/64, error -71 [ 356.478383][T16841] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1537'. [ 356.526756][ T1243] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 356.656796][ T1243] usb 5-1: device descriptor read/64, error -71 [ 356.767419][ T1243] usb usb5-port1: attempt power cycle [ 357.106781][ T1243] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 357.142703][ T1243] usb 5-1: device descriptor read/8, error -71 [ 357.376794][ T1243] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 357.397218][ T1243] usb 5-1: device descriptor read/8, error -71 [ 357.507802][ T1243] usb usb5-port1: unable to enumerate USB device [ 359.095579][T16851] netlink: 'syz.0.1548': attribute type 19 has an invalid length. [ 359.095599][T16851] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1548'. [ 359.104298][T16854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.123443][T16854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.376899][ T6428] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 359.527043][ T6428] usb 5-1: Using ep0 maxpacket: 32 [ 359.529089][ T6428] usb 5-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 359.529131][ T6428] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 359.529156][ T6428] usb 5-1: config 0 interface 0 has no altsetting 0 [ 359.531186][ T6428] usb 5-1: New USB device found, idVendor=16d0, idProduct=00b8, bcdDevice=de.8e [ 359.531211][ T6428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.531229][ T6428] usb 5-1: Product: syz [ 359.531242][ T6428] usb 5-1: Manufacturer: syz [ 359.531255][ T6428] usb 5-1: SerialNumber: syz [ 359.564703][T16873] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 359.573898][ T6428] usb 5-1: config 0 descriptor?? [ 360.766686][ T6428] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 360.922735][ T6428] usb 2-1: unable to get BOS descriptor or descriptor too short [ 360.929063][ T6428] usb 2-1: config 8 has an invalid interface number: 178 but max is 2 [ 360.929087][ T6428] usb 2-1: config 8 has an invalid interface number: 112 but max is 2 [ 360.929107][ T6428] usb 2-1: config 8 has no interface number 1 [ 360.929122][ T6428] usb 2-1: config 8 has no interface number 2 [ 360.929172][ T6428] usb 2-1: too many endpoints for config 8 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 360.929207][ T6428] usb 2-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 360.929232][ T6428] usb 2-1: config 8 interface 178 has no altsetting 0 [ 360.929249][ T6428] usb 2-1: config 8 interface 112 has no altsetting 0 [ 360.934777][ T6428] usb 2-1: New USB device found, idVendor=05c6, idProduct=9201, bcdDevice=c5.50 [ 360.934804][ T6428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.934823][ T6428] usb 2-1: Product: syz [ 360.934837][ T6428] usb 2-1: Manufacturer: syz [ 360.934857][ T6428] usb 2-1: SerialNumber: syz [ 361.599696][ T6428] usb 2-1: selecting invalid altsetting 1 [ 361.600447][ T6428] usb 2-1: Could not set interface, error -22 [ 361.616040][ T6428] usb 2-1: USB disconnect, device number 8 [ 361.686295][ T37] usb 5-1: USB disconnect, device number 29 [ 362.014563][T16995] binder: 16994:16995 ioctl 541b 200000000000 returned -22 [ 362.137715][ T6428] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 362.266847][ T6428] usb 2-1: device descriptor read/64, error -71 [ 362.365806][T17008] netlink: 'syz.4.1559': attribute type 27 has an invalid length. [ 362.369534][T17003] loop5: detected capacity change from 0 to 7 [ 362.441820][T17003] Dev loop5: unable to read RDB block 7 [ 362.441863][T17003] loop5: unable to read partition table [ 362.442068][T17003] loop5: partition table beyond EOD, truncated [ 362.442096][T17003] loop_reread_partitions: partition scan of loop5 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 362.507927][ T6428] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 362.746750][ T6428] usb 2-1: device descriptor read/64, error -71 [ 362.857113][ T6428] usb usb2-port1: attempt power cycle [ 363.207212][ T6428] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 363.227540][ T6428] usb 2-1: device descriptor read/8, error -71 [ 363.229906][T17047] fuse: Bad value for 'fd' [ 363.466730][ T6428] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 363.487598][ T6428] usb 2-1: device descriptor read/8, error -71 [ 363.601168][ T6428] usb usb2-port1: unable to enumerate USB device [ 363.891825][T17065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.892430][T17065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.053908][T17070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.056093][T17070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.384780][T17093] kAFS: No cell specified [ 364.522124][T17097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1574'. [ 364.744452][T17106] openvswitch: netlink: Message has -2 unknown bytes. [ 365.052570][T17122] netlink: 'syz.4.1581': attribute type 10 has an invalid length. [ 365.052590][T17122] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1581'. [ 365.052645][T17122] bond0: entered promiscuous mode [ 365.052659][T17122] bond_slave_0: entered promiscuous mode [ 365.052863][T17122] bond_slave_1: entered promiscuous mode [ 365.058069][T17122] bridge0: port 3(bond0) entered blocking state [ 365.058274][T17122] bridge0: port 3(bond0) entered disabled state [ 365.058563][T17122] bond0: entered allmulticast mode [ 365.058579][T17122] bond_slave_0: entered allmulticast mode [ 365.058595][T17122] bond_slave_1: entered allmulticast mode [ 365.073447][T17122] bridge0: port 3(bond0) entered blocking state [ 365.080434][T17118] sctp: [Deprecated]: syz.2.1578 (pid 17118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.080434][T17118] Use struct sctp_sack_info instead [ 365.127967][T17122] bridge0: port 3(bond0) entered forwarding state [ 365.396758][ T5946] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 365.530670][T17149] ЊЊЊЊЊЊ: renamed from wg2 (while UP) [ 365.548977][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 365.549871][ T5946] usb 2-1: config 66 has an invalid interface number: 114 but max is 0 [ 365.549885][ T5946] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 365.549896][ T5946] usb 2-1: config 66 has no interface number 0 [ 365.549912][ T5946] usb 2-1: too many endpoints for config 66 interface 114 altsetting 115: 105, using maximum allowed: 30 [ 365.549937][ T5946] usb 2-1: config 66 interface 114 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 365.549952][ T5946] usb 2-1: config 66 interface 114 has no altsetting 0 [ 365.627608][ T5946] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 365.627637][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.627657][ T5946] usb 2-1: Product: syz [ 365.627673][ T5946] usb 2-1: Manufacturer: syz [ 365.627688][ T5946] usb 2-1: SerialNumber: syz [ 365.696322][T17154] netlink: 'syz.4.1588': attribute type 2 has an invalid length. [ 365.887098][ T5946] usb 2-1: USB disconnect, device number 13 [ 366.133364][T17178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.134600][T17178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.701446][T17205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.713597][T17205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.785505][T17205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.786190][T17205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.789880][T17205] autofs4:pid:17205:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 366.789908][T17205] autofs4:pid:17205:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 366.794763][T17205] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 366.794780][T17205] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1597'. [ 366.794795][T17205] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 366.794807][T17205] netlink: 638 bytes leftover after parsing attributes in process `syz.2.1597'. [ 366.794820][T17205] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1597'. [ 367.018528][T17222] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1598'. [ 367.074845][ T6428] libceph: connect (1)[c::]:6789 error -101 [ 367.075598][ T6428] libceph: mon0 (1)[c::]:6789 connect error [ 367.166687][ T5946] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 367.348036][ T6428] libceph: connect (1)[c::]:6789 error -101 [ 367.348226][ T6428] libceph: mon0 (1)[c::]:6789 connect error [ 367.349603][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.349626][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.350700][ T5946] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 367.350726][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.350745][ T5946] usb 2-1: SerialNumber: syz [ 367.473095][T17230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.475576][T17230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.626274][ T5946] usb 2-1: 0:2 : does not exist [ 367.644131][ T5946] usb 2-1: unit 253 not found! [ 367.706807][ T5946] usb 2-1: USB disconnect, device number 14 [ 367.777177][T17219] ceph: No mds server is up or the cluster is laggy [ 367.804857][T17255] loop8: detected capacity change from 0 to 7 [ 367.829908][T17255] Dev loop8: unable to read RDB block 7 [ 367.829935][T17255] loop8: AHDI p1 p2 p3 [ 367.829959][T17255] loop8: partition table partially beyond EOD, truncated [ 367.830224][T17255] loop8: p1 start 1601398130 is beyond EOD, truncated [ 367.830243][T17255] loop8: p2 start 1702059890 is beyond EOD, truncated [ 367.883978][ T6428] libceph: connect (1)[c::]:6789 error -101 [ 367.884126][ T6428] libceph: mon0 (1)[c::]:6789 connect error [ 367.947163][ T9534] udevd[9534]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.099778][T17274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.104163][T17274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.124007][T17274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.125824][T17274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.228409][T17285] binder: BINDER_SET_CONTEXT_MGR already set [ 368.228419][T17285] binder: 17283:17285 ioctl 4018620d 200000000480 returned -16 [ 368.228932][T17284] binder: 17283:17284 unknown command 0 [ 368.228947][T17284] binder: 17283:17284 ioctl c0306201 200000000080 returned -22 [ 368.727390][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 368.887075][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 368.900591][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 368.901706][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 368.901727][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.904214][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice= 0.40 [ 368.904239][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.904259][ T9] usb 5-1: Product: syz [ 368.904272][ T9] usb 5-1: Manufacturer: syz [ 368.904286][ T9] usb 5-1: SerialNumber: syz [ 368.975707][T17325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1616'. [ 369.082920][T17329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'. [ 369.152336][T17296] random: crng reseeded on system resumption [ 369.364341][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.519227][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 369.606889][ T9] usb 5-1: USB disconnect, device number 30 [ 369.670413][ T9534] udevd[9534]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.986899][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 370.034471][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 370.160807][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.160861][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.160883][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 170, using maximum allowed: 30 [ 370.160908][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 370.162512][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.162536][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 370.162547][ T9] usb 5-1: Product: syz [ 370.162555][ T9] usb 5-1: SerialNumber: syz [ 370.388503][T17391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.389095][T17391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.074573][T17420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1629'. [ 371.218147][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.218766][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.324922][ T9] cdc_ncm 5-1:1.0: bind() failure [ 371.340453][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 371.340488][ T9] cdc_ncm 5-1:1.1: bind() failure [ 371.340682][T17427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.342978][T17427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.420464][T17423] netlink: 'syz.2.1630': attribute type 28 has an invalid length. [ 371.631742][ T9] usb 5-1: USB disconnect, device number 31 [ 372.024778][ T38] audit: type=1326 audit(1776343611.760:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.0.1633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f602123c819 code=0x0 [ 372.527075][T17458] fuse: Bad value for 'rootmode' [ 372.671766][T17462] openvswitch: netlink: Message has 4 unknown bytes. [ 373.089494][T17479] netlink: 'syz.2.1641': attribute type 10 has an invalid length. [ 373.116440][T17479] netlink: 'syz.2.1641': attribute type 3 has an invalid length. [ 373.176705][ T5886] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 373.245989][ T38] audit: type=1400 audit(1776343612.970:14): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=17481 comm="syz.2.1642" [ 373.326979][ T5886] usb 5-1: device descriptor read/64, error -71 [ 373.501914][T17487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.514370][T17487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.567074][ T5886] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 373.696710][ T5886] usb 5-1: device descriptor read/64, error -71 [ 373.807804][ T5886] usb usb5-port1: attempt power cycle [ 374.116689][ T820] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 374.146709][ T5886] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 374.167264][ T5886] usb 5-1: device descriptor read/8, error -71 [ 374.268525][ T820] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.268576][ T820] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 374.268615][ T820] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.268637][ T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.274020][T17492] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 374.286985][ T820] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.415028][ T5886] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 374.427647][ T5886] usb 5-1: device descriptor read/8, error -71 [ 374.531880][ T9] usb 2-1: USB disconnect, device number 15 [ 374.537982][ T5886] usb usb5-port1: unable to enumerate USB device [ 375.088836][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 375.219864][T17545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.220447][T17545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.243032][ T9] usb 2-1: device descriptor read/64, error -71 [ 375.486703][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 375.618272][ T9] usb 2-1: device descriptor read/64, error -71 [ 375.727399][ T9] usb usb2-port1: attempt power cycle [ 376.066756][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 376.088458][ T9] usb 2-1: device descriptor read/8, error -71 [ 376.339084][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 376.357631][ T9] usb 2-1: device descriptor read/8, error -71 [ 376.467160][ T9] usb usb2-port1: unable to enumerate USB device [ 376.920957][T17577] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[17577] [ 376.924899][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'. [ 376.989848][T17585] netlink: 'syz.2.1660': attribute type 5 has an invalid length. [ 376.989883][T17585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'. [ 377.300145][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 377.336729][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 377.461745][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 377.468564][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.468597][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 377.468642][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 377.468677][ T9] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 377.468728][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 377.468755][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 377.501109][ T9] usb 5-1: string descriptor 0 read error: -22 [ 377.501239][ T9] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 377.501262][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.529013][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.532291][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.532323][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 170, using maximum allowed: 30 [ 377.532359][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 377.538619][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.538645][ T10] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 377.538664][ T10] usb 2-1: Product: syz [ 377.538678][ T10] usb 2-1: SerialNumber: syz [ 378.521046][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.527768][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.659402][T17584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.662158][T17584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.699530][ T9] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 378.702859][ T10] cdc_ncm 2-1:1.0: bind() failure [ 378.760103][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 378.784363][ T10] cdc_ncm 2-1:1.1: bind() failure [ 378.910345][ T9] usb 5-1: USB disconnect, device number 36 [ 378.956424][T17634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1669'. [ 378.956445][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'. [ 378.968994][ T10] usb 2-1: USB disconnect, device number 20 [ 379.052152][T17655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.052892][T17655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.548602][T17666] netlink: 642 bytes leftover after parsing attributes in process `syz.0.1675'. [ 379.665733][T17673] overlayfs: unescaped trailing colons in lowerdir mount option. [ 379.891744][T17685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.894585][T17685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.948923][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1679'. [ 379.949714][ T5886] IPVS: starting estimator thread 0... [ 379.949785][T17685] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.952110][T17688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.952688][T17688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.994415][T17695] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 380.058278][T17689] IPVS: using max 16 ests per chain, 38400 per kthread [ 380.132433][ T37] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 380.293836][ T37] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 380.293868][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.293887][ T37] usb 5-1: Product: syz [ 380.293902][ T37] usb 5-1: Manufacturer: syz [ 380.293916][ T37] usb 5-1: SerialNumber: syz [ 380.334907][ T37] usb 5-1: config 0 descriptor?? [ 380.523899][T17700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.524960][T17700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.606668][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 380.750527][ T37] usb 5-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85) [ 380.768897][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.768929][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.768970][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 380.768991][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.782352][ T9] usb 2-1: config 0 descriptor?? [ 380.957678][ T37] usb 5-1: failed to fetch extended address, random address set [ 380.957707][ T37] usb 5-1: atusb_probe: initialization failed, error = -524 [ 380.957890][ T37] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 381.010281][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.010316][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.010342][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.010407][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.010434][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.010460][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.010487][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.010514][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.010541][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.010567][ T9] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 381.011153][ T9] kye 0003:0458:0138.0031: collection stack underflow [ 381.011180][ T9] kye 0003:0458:0138.0031: item 0 0 0 12 parsing failed [ 381.012032][ T9] kye 0003:0458:0138.0031: parse failed [ 381.012101][ T9] kye 0003:0458:0138.0031: probe with driver kye failed with error -22 [ 381.159847][ T37] usb 5-1: USB disconnect, device number 37 [ 381.211275][ T9] usb 2-1: USB disconnect, device number 21 [ 381.380931][T17748] netlink: 'syz.0.1690': attribute type 2 has an invalid length. [ 381.380944][T17748] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 381.479517][T17748] : entered promiscuous mode [ 381.534745][T17757] ipvlan0: entered promiscuous mode [ 381.534762][T17757] ipvlan0: entered allmulticast mode [ 381.534769][T17757] veth0_vlan: entered allmulticast mode [ 381.712752][T17765] fuse: fd is not a fuse device [ 381.713160][T17765] fuse: fd is not a fuse device [ 381.713423][T17765] fuse: fd is not a fuse device [ 381.713688][T17765] fuse: fd is not a fuse device [ 381.714020][T17765] fuse: fd is not a fuse device [ 381.714349][T17765] fuse: fd is not a fuse device [ 381.714605][T17765] fuse: fd is not a fuse device [ 381.714881][T17765] fuse: fd is not a fuse device [ 381.715142][T17765] fuse: fd is not a fuse device [ 381.715402][T17765] fuse: fd is not a fuse device [ 381.715689][T17765] fuse: fd is not a fuse device [ 381.715951][T17765] fuse: fd is not a fuse device [ 381.716259][T17765] fuse: fd is not a fuse device [ 381.717761][T17765] fuse: fd is not a fuse device [ 381.718075][T17765] fuse: fd is not a fuse device [ 381.719118][T17765] fuse: fd is not a fuse device [ 381.720817][T17765] fuse: fd is not a fuse device [ 381.721088][T17765] fuse: fd is not a fuse device [ 381.721357][T17765] fuse: fd is not a fuse device [ 381.721611][T17765] fuse: fd is not a fuse device [ 381.723882][T17765] fuse: fd is not a fuse device [ 381.724146][T17765] fuse: fd is not a fuse device [ 381.725236][T17765] fuse: fd is not a fuse device [ 381.725538][T17765] fuse: fd is not a fuse device [ 381.725780][T17765] fuse: fd is not a fuse device [ 381.726031][T17765] fuse: fd is not a fuse device [ 381.726267][T17765] fuse: fd is not a fuse device [ 381.726939][T17765] fuse: fd is not a fuse device [ 381.727203][T17765] fuse: fd is not a fuse device [ 381.727449][T17765] fuse: fd is not a fuse device [ 381.727682][T17765] fuse: fd is not a fuse device [ 381.727927][T17765] fuse: fd is not a fuse device [ 381.728184][T17765] fuse: fd is not a fuse device [ 381.729427][T17765] fuse: fd is not a fuse device [ 381.729688][T17765] fuse: fd is not a fuse device [ 381.729980][T17765] fuse: fd is not a fuse device [ 381.730225][T17765] fuse: fd is not a fuse device [ 381.730518][T17765] fuse: fd is not a fuse device [ 381.731515][T17765] fuse: fd is not a fuse device [ 381.731762][T17765] fuse: fd is not a fuse device [ 381.732013][T17765] fuse: fd is not a fuse device [ 381.732280][T17765] fuse: fd is not a fuse device [ 381.732517][T17765] fuse: fd is not a fuse device [ 381.732757][T17765] fuse: fd is not a fuse device [ 381.733005][T17765] fuse: fd is not a fuse device [ 381.733246][T17765] fuse: fd is not a fuse device [ 381.733484][T17765] fuse: fd is not a fuse device [ 381.733739][T17765] fuse: fd is not a fuse device [ 381.734096][T17765] fuse: fd is not a fuse device [ 381.734344][T17765] fuse: fd is not a fuse device [ 381.734582][T17765] fuse: fd is not a fuse device [ 381.734868][T17765] fuse: fd is not a fuse device [ 381.735212][T17765] fuse: fd is not a fuse device [ 381.735468][T17765] fuse: fd is not a fuse device [ 381.735706][T17765] fuse: fd is not a fuse device [ 381.735963][T17765] fuse: fd is not a fuse device [ 381.736207][T17765] fuse: fd is not a fuse device [ 381.736473][T17765] fuse: fd is not a fuse device [ 381.736893][T17765] fuse: fd is not a fuse device [ 381.737165][T17765] fuse: fd is not a fuse device [ 381.737420][T17765] fuse: fd is not a fuse device [ 381.737680][T17765] fuse: fd is not a fuse device [ 381.737933][T17765] fuse: fd is not a fuse device [ 381.740043][T17765] fuse: fd is not a fuse device [ 381.740290][T17765] fuse: fd is not a fuse device [ 381.907359][T17773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.907954][T17773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.035338][T17785] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1700'. [ 382.068760][T17787] netlink: 'syz.0.1702': attribute type 5 has an invalid length. [ 382.068892][T17787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 382.902004][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 382.902025][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 382.902636][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 382.902653][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 382.905706][T17819] netlink: 'syz.4.1711': attribute type 83 has an invalid length. [ 383.010257][T17823] netlink: 'syz.1.1712': attribute type 5 has an invalid length. [ 383.010271][T17823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 383.180258][T17827] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 383.726739][ T6428] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 383.874380][T17855] comedi comedi2: Minor 20265 is invalid! [ 383.876647][ T6428] usb 5-1: Using ep0 maxpacket: 8 [ 383.887368][ T6428] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 383.887396][ T6428] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.887414][ T6428] usb 5-1: config 0 has no interface number 0 [ 383.887458][ T6428] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 383.887485][ T6428] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 383.887509][ T6428] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 383.887532][ T6428] usb 5-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.887552][ T6428] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 383.887574][ T6428] usb 5-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 383.890183][ T6428] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 383.890209][ T6428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.890228][ T6428] usb 5-1: Product: syz [ 383.890243][ T6428] usb 5-1: Manufacturer: syz [ 383.890258][ T6428] usb 5-1: SerialNumber: syz [ 383.939290][ T6428] usb 5-1: config 0 descriptor?? [ 383.940559][T17849] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 383.940779][T17849] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 384.158195][ T6428] usb 5-1: NFC: intf ffff888078dce000 id ffffffff8ed952e0 [ 384.368568][ T6428] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 384.388729][ T6428] usb 5-1: USB disconnect, device number 38 [ 384.406207][ T6428] usb 5-1: NFC: intf ffff888078dce000 [ 384.992138][ T5818] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 385.102302][T17910] tipc: Started in network mode [ 385.102332][T17910] tipc: Node identity 4, cluster identity 4711 [ 385.102344][T17910] tipc: Node number set to 4 [ 385.146594][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 385.148308][ T5818] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.148330][ T5818] usb 2-1: config 0 has no interface number 0 [ 385.148366][ T5818] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.148391][ T5818] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.148424][ T5818] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 385.148445][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.162976][ T5818] usb 2-1: config 0 descriptor?? [ 385.267088][ T5886] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 385.458717][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.458773][ T5886] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 385.458798][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.497316][ T5886] usb 5-1: config 0 descriptor?? [ 385.515563][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 385.632233][ T5818] holtek_mouse 0003:04D9:A081.0032: item fetching failed at offset 5/8 [ 385.632870][ T5818] holtek_mouse 0003:04D9:A081.0032: hid parse failed: -22 [ 385.632933][ T5818] holtek_mouse 0003:04D9:A081.0032: probe with driver holtek_mouse failed with error -22 [ 385.903582][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 385.905453][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 385.909494][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 385.922163][T17936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1732'. [ 385.933050][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 385.942276][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 385.943010][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 385.943846][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 385.944683][ T5886] pwc: recv_control_msg error -32 req 02 val 2100 [ 385.945337][ T5886] pwc: recv_control_msg error -32 req 04 val 1500 [ 385.946303][ T5886] pwc: recv_control_msg error -32 req 02 val 2500 [ 385.953790][ T5886] pwc: recv_control_msg error -32 req 02 val 2400 [ 385.983061][ T5886] pwc: recv_control_msg error -32 req 02 val 2600 [ 386.002816][ T5886] pwc: recv_control_msg error -32 req 02 val 2900 [ 386.003475][ T5886] pwc: recv_control_msg error -32 req 02 val 2800 [ 386.205697][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 386.224968][ T5886] pwc: Registered as video103. [ 386.235522][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 386.257304][ T5886] usb 5-1: USB disconnect, device number 39 [ 386.736672][T17962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.737848][T17962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.782975][T17970] netlink: 'syz.4.1738': attribute type 11 has an invalid length. [ 387.632316][ T5818] usb 2-1: USB disconnect, device number 22 [ 387.764489][T18010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.847294][ T5946] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 387.996630][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 387.998795][ T5946] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.998826][ T5946] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.000422][ T5946] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 388.000495][ T5946] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 388.000516][ T5946] usb 5-1: Product: syz [ 388.000531][ T5946] usb 5-1: Manufacturer: syz [ 388.011297][ T5946] hub 5-1:4.0: USB hub found [ 388.106747][ T5818] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 388.211305][ T5946] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 388.249906][ T5946] usb 5-1: USB disconnect, device number 40 [ 388.259428][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 388.263137][ T5818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 388.263176][ T5818] usb 2-1: too many endpoints for config 1 interface 0 altsetting 187: 187, using maximum allowed: 30 [ 388.263213][ T5818] usb 2-1: config 1 interface 0 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 388.263239][ T5818] usb 2-1: config 1 interface 0 has no altsetting 0 [ 388.299166][ T5818] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 388.299193][ T5818] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 388.299213][ T5818] usb 2-1: Product: syz [ 388.299228][ T5818] usb 2-1: Manufacturer: syz [ 388.299242][ T5818] usb 2-1: SerialNumber: syz [ 388.533222][ T5818] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 388.533247][ T5818] usb 2-1: Handspring Visor / Palm OS: port 42, is for unknown use [ 388.533266][ T5818] usb 2-1: Handspring Visor / Palm OS: port 0, is for Console use [ 388.533286][ T5818] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 388.613407][T18046] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1754'. [ 388.629675][T18046] bridge_slave_1: default FDB implementation only supports local addresses [ 388.633874][T18046] fuse: Bad value for 'fd' [ 388.836906][ T5818] usb 2-1: palm_os_3_probe - error -110 getting bytes available request [ 388.836986][ T5818] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 388.840041][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 388.840063][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 388.871046][ T5818] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 388.934213][ T5818] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 388.950609][T18057] xt_bpf: check failed: parse error [ 389.282509][ T6428] usb 2-1: USB disconnect, device number 23 [ 389.322473][ T6428] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 389.345907][ T6428] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 389.357020][ T6428] visor 2-1:1.0: device disconnected [ 389.796692][ T6428] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 389.946689][ T6428] usb 2-1: Using ep0 maxpacket: 32 [ 389.950436][ T6428] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 389.950459][ T6428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.950470][ T6428] usb 2-1: Product: syz [ 389.950478][ T6428] usb 2-1: Manufacturer: syz [ 389.950486][ T6428] usb 2-1: SerialNumber: syz [ 389.955987][ T6428] usb 2-1: config 0 descriptor?? [ 390.003036][ T6428] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 390.003126][ T6428] dvb-usb: bulk message failed: -22 (4/0) [ 390.003136][ T6428] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 390.003297][ T6428] dvb-usb: bulk message failed: -22 (5/0) [ 390.003313][ T6428] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 390.051496][ T6428] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 390.052147][ T6428] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 390.052199][ T6428] usb 2-1: media controller created [ 390.139521][ T6428] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.165437][T18090] ttusb2: i2c wr len=58 too high [ 390.175292][ T6428] usb 2-1: selecting invalid altsetting 3 [ 390.175311][ T6428] ttusb2: set interface to alts=3 failed [ 390.187069][T18120] ttusb2: i2c wr len=58 too high [ 390.244855][ T6428] DVB: Unable to find symbol tda10086_attach() [ 390.244865][ T6428] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 390.246290][ T6428] dvb-usb: bulk message failed: -22 (4/0) [ 390.246309][ T6428] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 390.246427][ T6428] dvb-usb: bulk message failed: -22 (5/0) [ 390.246442][ T6428] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 390.250933][ T6428] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 390.261931][ T6428] usb 2-1: USB disconnect, device number 24 [ 390.322043][ T6428] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 390.476680][ T5818] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 390.636747][ T5818] usb 5-1: Using ep0 maxpacket: 8 [ 390.639788][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.639819][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.639846][ T5818] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 390.639859][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.644184][ T5818] usb 5-1: config 0 descriptor?? [ 390.760068][T18147] program syz.1.1768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.996675][ T6428] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 391.073884][ T5818] hid_parser_main: 45 callbacks suppressed [ 391.073909][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x2 [ 391.073939][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x0 [ 391.073966][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x0 [ 391.073993][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x0 [ 391.074024][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x0 [ 391.074050][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x0 [ 391.074077][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x0 [ 391.074103][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x0 [ 391.074130][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x0 [ 391.074157][ T5818] sony 0003:054C:0268.0033: unknown main item tag 0x0 [ 391.147382][ T6428] usb 2-1: Using ep0 maxpacket: 32 [ 391.159131][ T6428] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 391.159156][ T6428] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.159175][ T6428] usb 2-1: config 0 has no interface number 0 [ 391.159216][ T6428] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.159238][ T6428] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.159264][ T6428] usb 2-1: config 0 interface 196 has no altsetting 0 [ 391.162853][ T6428] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 391.162880][ T6428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.162899][ T6428] usb 2-1: Product: syz [ 391.162913][ T6428] usb 2-1: Manufacturer: syz [ 391.162928][ T6428] usb 2-1: SerialNumber: syz [ 391.176480][T18159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1771'. [ 391.197636][T18160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1771'. [ 391.326295][ T6428] usb 2-1: config 0 descriptor?? [ 391.336335][ T5818] sony 0003:054C:0268.0033: hiddev0,hidraw0: USB HID vff.fc Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 391.336382][ T5818] sony 0003:054C:0268.0033: failed to claim input [ 391.406717][ T5818] usb 5-1: USB disconnect, device number 41 [ 391.464247][T18170] fido_id[18170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 391.572648][ T6428] ipheth 2-1:0.196: Unable to find endpoints [ 391.629079][ T6428] usb 2-1: USB disconnect, device number 25 [ 392.049642][T18211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.067549][T18211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.261356][ T6428] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 392.420709][ T6428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.420742][ T6428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.420779][ T6428] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 392.420804][ T6428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.430527][ T6428] usb 5-1: config 0 descriptor?? [ 392.577031][ T37] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 392.721215][ T37] usb 2-1: device descriptor read/64, error -71 [ 392.801890][T18242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1782'. [ 392.874851][ T6428] stadia 0003:18D1:9400.0034: item fetching failed at offset 1/5 [ 392.875574][ T6428] stadia 0003:18D1:9400.0034: parse failed [ 392.875644][ T6428] stadia 0003:18D1:9400.0034: probe with driver stadia failed with error -22 [ 392.962677][ T37] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 393.088654][ T5818] usb 5-1: USB disconnect, device number 42 [ 393.098515][ T37] usb 2-1: device descriptor read/64, error -71 [ 393.220856][ T37] usb usb2-port1: attempt power cycle [ 393.492317][T18291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.492898][T18291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.567096][ T37] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 393.590956][ T37] usb 2-1: device descriptor read/8, error -71 [ 393.826714][ T37] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 393.852882][ T37] usb 2-1: device descriptor read/8, error -71 [ 393.957069][ T37] usb usb2-port1: unable to enumerate USB device [ 394.026772][ T9] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 394.137238][T18314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.137827][T18314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.193310][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 394.194999][ T9] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.195026][ T9] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.195054][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 394.235497][ T9] usb 5-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.40 [ 394.235523][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.235535][ T9] usb 5-1: Product: б— [ 394.235543][ T9] usb 5-1: Manufacturer: сŒ [ 394.235551][ T9] usb 5-1: SerialNumber: щ‡†э™Ћб—ъЂžч’œьКф–œшГ™щ„НсŠ–фЗ›ыЁчАэ“ч›Œф‹с–“ы„€фœОу„ІйЛф™‘ю‰Гц‘‰хЏƒуГ“фЁАъ“ЊуƒюЁЅ [ 394.529749][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 394.529847][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 394.548022][ T9] usb 5-1: USB disconnect, device number 43 [ 395.219151][T18351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.222036][T18351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.279740][T18351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1800'. [ 395.320741][T18371] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 395.437200][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 395.598306][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.598344][ T9] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 395.598368][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.603172][ T9] usb 5-1: config 0 descriptor?? [ 395.720965][T18386] TCP: TCP_TX_DELAY enabled [ 395.858329][T18388] overlay: Unknown parameter 'smackfsfloor' [ 395.865676][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 395.865810][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 395.887051][ T9] usb 5-1: USB disconnect, device number 44 [ 396.070231][T18411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.070829][T18411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.103787][T18455] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1822'. [ 397.196730][T18460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.496682][ T6428] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 397.626684][ T6428] usb 2-1: device descriptor read/64, error -71 [ 397.886705][ T6428] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 398.016712][ T6428] usb 2-1: device descriptor read/64, error -71 [ 398.126880][ T6428] usb usb2-port1: attempt power cycle [ 398.426648][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 398.466685][ T6428] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 398.491798][ T6428] usb 2-1: device descriptor read/8, error -71 [ 398.576706][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 398.578504][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.578535][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.578559][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.578573][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 398.578593][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 398.578605][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.584418][ T9] usb 5-1: config 0 descriptor?? [ 398.736630][ T6428] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 398.757458][ T6428] usb 2-1: device descriptor read/8, error -71 [ 398.788861][T18470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.789543][T18470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.867194][ T6428] usb usb2-port1: unable to enumerate USB device [ 399.001453][ T9] hid_parser_main: 29 callbacks suppressed [ 399.001480][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x0 [ 399.001587][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x1 [ 399.001615][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x0 [ 399.001642][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x0 [ 399.001670][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x0 [ 399.001695][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x0 [ 399.001722][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x0 [ 399.001748][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x0 [ 399.001775][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x0 [ 399.001802][ T9] lg-g15 0003:046D:C22D.0035: unknown main item tag 0x0 [ 399.001979][ T9] lg-g15 0003:046D:C22D.0035: item fetching failed at offset 37/40 [ 399.002939][ T9] lg-g15 0003:046D:C22D.0035: probe with driver lg-g15 failed with error -22 [ 399.222725][T18470] syzkaller1: entered promiscuous mode [ 399.222756][T18470] syzkaller1: entered allmulticast mode [ 399.232738][T18470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.233284][T18470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.298432][ T6428] usb 5-1: USB disconnect, device number 45 [ 399.390322][T18499] netlink: 'syz.2.1828': attribute type 2 has an invalid length. [ 399.390335][T18499] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1828'. [ 399.438030][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'. [ 399.828450][T18515] tmpfs: Bad value for 'mpol' [ 399.974687][T18522] syzkaller0: entered promiscuous mode [ 399.974706][T18522] syzkaller0: entered allmulticast mode [ 400.549425][ T820] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 400.634138][T18562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.657101][T18562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.746688][ T820] usb 2-1: Using ep0 maxpacket: 16 [ 400.749116][ T820] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 22, changing to 8 [ 400.749147][ T820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 400.751551][ T820] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 400.751578][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.751645][ T820] usb 2-1: Product: syz [ 400.751660][ T820] usb 2-1: Manufacturer: syz [ 400.751676][ T820] usb 2-1: SerialNumber: syz [ 400.758236][ T38] audit: type=1326 audit(2000000017.510:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.758280][ T38] audit: type=1326 audit(2000000017.510:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.758320][ T38] audit: type=1326 audit(2000000017.510:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.758357][ T38] audit: type=1326 audit(2000000017.510:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.758395][ T38] audit: type=1326 audit(2000000017.510:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.758433][ T38] audit: type=1326 audit(2000000017.510:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.763159][ T38] audit: type=1326 audit(2000000017.510:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.763202][ T38] audit: type=1326 audit(2000000017.520:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.763239][ T38] audit: type=1326 audit(2000000017.520:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.763276][ T38] audit: type=1326 audit(2000000017.520:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81366c819 code=0x7fc00000 [ 400.770866][ T820] usb 2-1: config 0 descriptor?? [ 401.100802][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 401.166768][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 401.274029][ T820] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 401.337503][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 401.337533][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 401.343829][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 401.343854][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.343882][ T9] usb 5-1: Product: syz [ 401.343896][ T9] usb 5-1: Manufacturer: syz [ 401.343910][ T9] usb 5-1: SerialNumber: syz [ 401.408297][ T9] usb 5-1: config 0 descriptor?? [ 401.454160][T18589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.495715][ T820] imon:send_packet: packet tx failed (-71) [ 401.507938][ T820] imon 2-1:0.0: panel buttons/knobs setup failed [ 401.608054][ T820] rc_core: IR keymap rc-imon-pad not found [ 401.608072][ T820] Registered IR keymap rc-empty [ 401.608154][ T820] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 401.608172][ T820] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 401.609551][ T820] imon:send_packet: packet tx failed (-71) [ 401.626697][ T820] imon 2-1:0.0: remote input dev register failed [ 401.626851][ T820] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 401.630985][T18571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.631623][T18571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.657858][T18571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.660894][T18571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.904981][T18614] overlayfs: failed to clone upperpath [ 402.092900][ T9] usb 5-1: USB disconnect, device number 46 [ 402.474922][ T820] imon 2-1:0.0: unable to initialize intf0, err 0 [ 402.474942][ T820] imon:imon_probe: failed to initialize context! [ 402.474955][ T820] imon 2-1:0.0: unable to register, err -19 [ 402.490960][ T820] usb 2-1: USB disconnect, device number 34 [ 402.816657][ T820] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 402.906789][ T9] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 402.966685][ T820] usb 2-1: Using ep0 maxpacket: 16 [ 402.968854][ T820] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 22, changing to 8 [ 402.968887][ T820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 402.973092][ T820] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 402.973119][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.973140][ T820] usb 2-1: Product: syz [ 402.973156][ T820] usb 2-1: Manufacturer: syz [ 402.973182][ T820] usb 2-1: SerialNumber: syz [ 402.983826][ T820] usb 2-1: config 0 descriptor?? [ 403.063352][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 403.063381][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 403.063401][ T9] usb 5-1: config 220 has no interface number 2 [ 403.063475][ T9] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x5 has invalid maxpacket 64947, setting to 64 [ 403.063502][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 403.063529][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 403.063547][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 403.063564][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 403.091700][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 403.091730][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.091750][ T9] usb 5-1: Product: syz [ 403.091765][ T9] usb 5-1: Manufacturer: syz [ 403.091780][ T9] usb 5-1: SerialNumber: syz [ 403.470281][ T820] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input38 [ 403.921207][ T9] usb 5-1: selecting invalid altsetting 0 [ 403.945433][ T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 403.945468][ T9] uvcvideo 5-1:220.0: No valid video chain found. [ 403.989318][ T820] rc_core: IR keymap rc-imon-pad not found [ 403.989387][ T820] Registered IR keymap rc-empty [ 403.989466][ T820] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 403.989483][ T820] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 403.998486][ T9] usb 5-1: selecting invalid altsetting 0 [ 403.998522][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 404.057732][ T9] usb 5-1: USB disconnect, device number 47 [ 404.248018][ T820] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 404.295978][ T820] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 404.410621][ T820] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:35> initialized [ 405.347472][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 405.382718][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 405.398435][ T820] usb 2-1: USB disconnect, device number 35 [ 405.492712][T18779] netlink: 'syz.2.1873': attribute type 1 has an invalid length. [ 405.492733][T18779] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1873'. [ 405.492749][T18779] netlink: 'syz.2.1873': attribute type 1 has an invalid length. [ 405.492762][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1873'. [ 405.633330][T18786] binder: 18785:18786 ioctl c0306201 200000000280 returned -14 [ 405.752072][T18779] input: syz0 as /devices/virtual/input/input40 [ 406.145251][T18825] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 406.392223][T18834] netlink: 'syz.1.1884': attribute type 10 has an invalid length. [ 406.454534][T18835] netlink: 'syz.1.1884': attribute type 10 has an invalid length. [ 406.472134][T18834] team0: Port device dummy0 added [ 406.529048][T18835] team0: Port device dummy0 removed [ 406.532858][T18835] dummy0: entered promiscuous mode [ 406.533196][T18835] dummy0: entered allmulticast mode [ 406.560499][T18835] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 406.645801][T18840] delete_channel: no stack [ 406.660328][T18840] delete_channel: no stack [ 406.718541][T18837] pim6reg1: entered promiscuous mode [ 406.718566][T18837] pim6reg1: entered allmulticast mode [ 407.158484][T18853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.159145][T18853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.178444][T18856] 9p: Bad value for 'wfdno' [ 407.320163][T18850] "syz.1.1889" (18850) uses obsolete ecb(arc4) skcipher [ 407.321142][T18859] netlink: 'syz.4.1891': attribute type 1 has an invalid length. [ 407.321159][T18859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'. [ 407.404665][T18865] overlay: Bad value for 'uuid' [ 407.520697][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 407.520721][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 407.778179][ T5818] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 407.916641][ T5818] usb 2-1: device descriptor read/64, error -71 [ 408.148976][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 408.152452][ T38] kauditd_printk_skb: 848 callbacks suppressed [ 408.152468][ T38] audit: type=1800 audit(2000000024.910:873): pid=18903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1903" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 408.202617][ T5818] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 408.388139][ T5818] usb 2-1: device descriptor read/64, error -71 [ 408.497054][ T5818] usb usb2-port1: attempt power cycle [ 408.524508][T18914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.525085][T18914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.846810][ T5818] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 408.869145][ T5818] usb 2-1: device descriptor read/8, error -71 [ 408.911062][T18921] loop7: detected capacity change from 0 to 7 [ 408.950778][T18921] Dev loop7: unable to read RDB block 7 [ 408.950818][T18921] loop7: unable to read partition table [ 408.950996][T18921] loop7: partition table beyond EOD, truncated [ 408.953703][T18921] loop_reread_partitions: partition scan of loop7 (ўшЂЋxќ—Ÿбр0Б/:˜žАiЗћ) failed (rc=-5) [ 409.106649][ T5818] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 409.129646][ T5818] usb 2-1: device descriptor read/8, error -71 [ 409.236987][ T5818] usb usb2-port1: unable to enumerate USB device [ 409.724549][T18928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.725733][T18928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.750231][T18928] btrfs: Unknown parameter 'barrierџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџ [ 410.291923][T18946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.293023][T18946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.410393][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 411.146769][ T5818] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 411.300170][ T5818] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.301373][ T5818] usb 5-1: config 64 has an invalid interface number: 205 but max is 0 [ 411.301399][ T5818] usb 5-1: config 64 has no interface number 0 [ 411.301431][ T5818] usb 5-1: config 64 interface 205 has no altsetting 0 [ 411.303881][ T5818] usb 5-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=1f.ce [ 411.303908][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.303929][ T5818] usb 5-1: Product: syz [ 411.303944][ T5818] usb 5-1: Manufacturer: syz [ 411.303958][ T5818] usb 5-1: SerialNumber: syz [ 411.417294][ T1243] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 411.420447][T18976] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 411.420470][T18976] CIFS mount error: No usable UNC path provided in device string! [ 411.420470][T18976] [ 411.421458][T18976] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 411.431334][T18978] CIFS mount error: No usable UNC path provided in device string! [ 411.431334][T18978] [ 411.431350][T18978] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 411.567138][T18980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1918'. [ 411.621563][ T1243] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 411.621596][ T1243] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 411.621681][ T1243] usb 2-1: config 1 interface 0 has no altsetting 0 [ 411.663441][ T1243] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 411.663470][ T1243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.663490][ T1243] usb 2-1: Product: syz [ 411.663505][ T1243] usb 2-1: Manufacturer: syz [ 411.663521][ T1243] usb 2-1: SerialNumber: syz [ 411.664934][T18983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.672255][T18983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.702499][T18970] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 411.702827][T18970] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 411.921025][ T5818] mct_u232 5-1:64.205: MCT U232 converter detected [ 411.938245][ T5818] mct_u232 ttyUSB0: expected endpoint missing [ 411.956404][ T5818] usb 5-1: USB disconnect, device number 48 [ 411.964751][T18991] overlayfs: failed to resolve './cgroup': -2 [ 411.979323][ T5818] mct_u232 5-1:64.205: device disconnected [ 412.008520][T19004] netlink: 'syz.2.1920': attribute type 10 has an invalid length. [ 412.010544][T19004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.013283][T19004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.650027][ T37] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 412.796665][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 412.798476][ T37] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 412.798501][ T37] usb 5-1: config 254 has no interface number 0 [ 412.798546][ T37] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 412.798571][ T37] usb 5-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.798597][ T37] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.798623][ T37] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 412.798647][ T37] usb 5-1: config 254 interface 235 has no altsetting 0 [ 412.867315][ T37] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 412.867343][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.867363][ T37] usb 5-1: Product: syz [ 412.867378][ T37] usb 5-1: Manufacturer: syz [ 412.867393][ T37] usb 5-1: SerialNumber: syz [ 412.895176][T19017] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 413.032329][ T1243] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 413.085409][ T1243] usb 2-1: USB disconnect, device number 40 [ 413.103015][T19017] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 413.105011][ T37] usbtest 5-1:254.235: Linux gadget zero [ 413.105028][ T37] usbtest 5-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 413.309730][ T37] usb 5-1: USB disconnect, device number 49 [ 413.554762][T19064] netlink: 'syz.0.1929': attribute type 27 has an invalid length. [ 413.564594][T19065] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 413.564613][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 413.565895][T19064] tmpfs: Bad value for 'mpol' [ 413.701961][T19074] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1933'. [ 413.886805][ T5946] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 413.933138][T19081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.933833][T19081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.954743][T19081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.956769][T19081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.041174][T19081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.055875][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 414.055922][ T5946] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 414.055945][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.137911][ T5946] usb 2-1: config 0 descriptor?? [ 414.145637][ T5946] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 414.286771][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 414.355052][T19069] hugetlbfs: Bad value '‰Ды' for mount option 'size' [ 414.355052][T19069] [ 414.416457][T19106] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 414.416471][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 414.446704][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 414.449000][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.449032][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.449071][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 414.449095][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.455234][ T10] usb 5-1: config 0 descriptor?? [ 414.511751][ T10] hub 5-1:0.0: USB hub found [ 414.675847][ T10] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 414.694982][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 414.695090][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 414.741216][ T10] usb 5-1: USB disconnect, device number 50 [ 414.920751][T19131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.921503][T19131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.646094][T19166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.653452][T19166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.727031][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 416.670647][ T5946] usb 2-1: USB disconnect, device number 41 [ 417.289917][T19208] overlayfs: unescaped trailing colons in lowerdir mount option. [ 417.317720][ T1243] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 417.466703][ T1243] usb 2-1: Using ep0 maxpacket: 8 [ 417.472344][ T1243] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.472372][ T1243] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.472396][ T1243] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.472415][ T1243] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.472440][ T1243] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.472453][ T1243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.601708][T19220] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1968'. [ 417.754185][ T1243] usb 2-1: GET_CAPABILITIES returned 0 [ 417.754231][ T1243] usbtmc 2-1:16.0: can't read capabilities [ 417.802742][T19231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 417.950358][T19243] overlayfs: failed to resolve './cgroup': -2 [ 417.961445][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 417.983419][T19197] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000) [ 417.992028][ T5946] usb 2-1: USB disconnect, device number 42 [ 418.226032][T19265] mmap: syz.0.1977 (19265): VmData 37724160 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 418.336727][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 418.487460][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 418.490151][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.490180][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.490219][ T10] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 418.490243][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.500164][ T10] usb 5-1: config 0 descriptor?? [ 418.640469][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.641055][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.951735][T19256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.953675][T19256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.996673][ T1243] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 419.148512][ T1243] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 419.149850][ T1243] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 419.151150][ T1243] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 419.152626][ T1243] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 419.153955][ T1243] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 419.155250][ T1243] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 419.181524][ T1243] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 419.215222][ T1243] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 419.225217][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 419.225339][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 419.231127][ T1243] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 419.266336][ T1243] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 419.266366][ T1243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.266387][ T1243] usb 2-1: Product: syz [ 419.266402][ T1243] usb 2-1: Manufacturer: syz [ 419.266417][ T1243] usb 2-1: SerialNumber: syz [ 419.272330][ T10] usb 5-1: USB disconnect, device number 51 [ 419.323626][ T1243] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 419.432088][ T37] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 419.667478][T19312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1986'. [ 419.738365][T19316] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1987'. [ 419.745727][T19316] 0З: renamed from hsr0 (while UP) [ 419.803775][T19316] 0З: entered allmulticast mode [ 419.803868][T19316] hsr_slave_0: entered allmulticast mode [ 419.803887][T19316] hsr_slave_1: entered allmulticast mode [ 419.805027][T19316] A link change request failed with some changes committed already. Interface 70З may have been left with an inconsistent configuration, please check. [ 419.910803][T19321] VFS: Mount too revealing [ 420.044704][T19289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.046141][T19289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.217954][ T37] usb 2-1: Service connection timeout for: 257 [ 421.217977][ T37] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 421.243797][ T6428] usb 2-1: USB disconnect, device number 43 [ 421.273455][ T37] ath9k_htc: Failed to initialize the device [ 421.273698][ T6428] usb 2-1: ath9k_htc: USB layer deinitialized [ 421.280413][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 421.737310][ T6428] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 421.789334][T19381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2006'. [ 421.789354][T19381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2006'. [ 421.860949][T19383] sg_write: data in/out 808464396/252 bytes for SCSI command 0x30-- guessing data in; [ 421.860949][T19383] program syz.4.2007 not setting count and/or reply_len properly [ 421.892824][ T6428] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 421.892841][ T6428] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.892852][ T6428] usb 2-1: config 0 has no interfaces? [ 421.922621][ T6428] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 421.922647][ T6428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 421.922659][ T6428] usb 2-1: Product: syz [ 421.922678][ T6428] usb 2-1: Manufacturer: syz [ 421.922686][ T6428] usb 2-1: SerialNumber: syz [ 421.931535][ T6428] usb 2-1: config 0 descriptor?? [ 422.234420][T19404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2013'. [ 422.345061][ T38] audit: type=1326 audit(2000000039.100:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19411 comm="syz.2.2015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa81366c819 code=0x0 [ 422.672671][ T37] usb 2-1: USB disconnect, device number 44 [ 422.724271][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 423.228687][T19453] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2023'. [ 423.282955][T19457] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2023'. [ 423.319218][T19457] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2023'. [ 423.319268][T19457] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2023'. [ 423.488139][ T820] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 423.636648][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 423.639403][ T820] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 423.639429][ T820] usb 5-1: config 0 has no interface number 0 [ 423.639473][ T820] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 423.639499][ T820] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 423.639522][ T820] usb 5-1: config 0 interface 41 has no altsetting 0 [ 423.641793][ T820] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 423.641821][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.641843][ T820] usb 5-1: Product: syz [ 423.641859][ T820] usb 5-1: Manufacturer: syz [ 423.641873][ T820] usb 5-1: SerialNumber: syz [ 423.645959][T19476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.677760][T19476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.684003][T19476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.685509][T19476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.723162][ T820] usb 5-1: config 0 descriptor?? [ 423.734404][T19448] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 423.734513][T19448] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 423.939358][T19448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.941284][T19448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.942726][T19448] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 423.943070][T19448] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 424.090146][T19499] netlink: 536 bytes leftover after parsing attributes in process `syz.1.2033'. [ 424.090185][T19499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2033'. [ 424.220203][ T820] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 424.237577][ T820] usb 5-1: USB disconnect, device number 52 [ 424.305176][T19519] program syz.4.2036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.373923][T19525] blkio.reset_stats is deprecated [ 424.388638][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 424.561131][ T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 424.561162][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.595006][ T10] usb 2-1: config 0 descriptor?? [ 424.609263][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 425.082124][T19550] overlayfs: failed to resolve './file1': -2 [ 425.121653][T19550] overlayfs: failed to resolve './file1': -2 [ 425.197577][ T10] gspca_cpia1: usb_control_msg 05, error -71 [ 425.199517][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 425.199533][ T10] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 425.229484][ T10] usb 2-1: USB disconnect, device number 45 [ 425.238433][ T3874] Bluetooth: (null): Invalid header checksum [ 425.317524][ T3954] Bluetooth: (null): Invalid header checksum [ 425.429558][ T3890] Bluetooth: (null): Invalid header checksum [ 425.566630][ T37] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 425.719649][ T37] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 425.719677][ T37] usb 5-1: config 0 has no interface number 0 [ 425.719722][ T37] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 425.719749][ T37] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.727607][ T37] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 425.727634][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.727655][ T37] usb 5-1: Product: syz [ 425.727669][ T37] usb 5-1: Manufacturer: syz [ 425.727683][ T37] usb 5-1: SerialNumber: syz [ 425.762325][ T37] usb 5-1: config 0 descriptor?? [ 425.763045][T19564] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 425.779915][ T37] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 425.933353][ T37] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 426.064780][T19581] netlink: 'syz.0.2050': attribute type 21 has an invalid length. [ 426.128349][T19583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.128924][T19583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.190154][T19564] evm: overlay not supported [ 426.213084][ T37] usb 5-1: USB disconnect, device number 53 [ 426.249351][ T37] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 426.256091][ T37] cyberjack 5-1:0.69: device disconnected [ 426.281189][T19596] binder: 19594:19596 ioctl 6609 0 returned -22 [ 426.283303][T19596] binder_alloc: binder_alloc_mmap_handler: 19594 200000735000-200000736000 already mapped failed -16 [ 426.807084][ T37] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 426.841672][T19629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.842723][T19629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.968198][ T37] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 426.969243][ T37] usb 2-1: config index 0 descriptor too short (expected 65016, got 133) [ 426.969268][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.970430][ T37] usb 2-1: config index 1 descriptor too short (expected 65016, got 133) [ 426.970454][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.971461][ T37] usb 2-1: config index 2 descriptor too short (expected 65016, got 133) [ 426.971485][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.972481][ T37] usb 2-1: config index 3 descriptor too short (expected 65016, got 133) [ 426.972504][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.973557][ T37] usb 2-1: config index 4 descriptor too short (expected 65016, got 133) [ 426.973571][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.974570][ T37] usb 2-1: config index 5 descriptor too short (expected 65016, got 133) [ 426.974594][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.975603][ T37] usb 2-1: config index 6 descriptor too short (expected 65016, got 133) [ 426.975627][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.984936][ T37] usb 2-1: config index 7 descriptor too short (expected 65016, got 133) [ 426.984960][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.042238][ T37] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.042267][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.042288][ T37] usb 2-1: Product: syz [ 427.042302][ T37] usb 2-1: Manufacturer: syz [ 427.042317][ T37] usb 2-1: SerialNumber: syz [ 427.169541][ T37] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.188972][ T820] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 427.418666][T19619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.422016][T19619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.560360][ T10] usb 2-1: USB disconnect, device number 46 [ 427.658127][T19671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.658690][T19671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.242305][T19687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.244319][T19687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.248223][ T820] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 428.248395][ T820] ath9k_htc: Failed to initialize the device [ 428.277597][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 428.596662][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 428.716731][ T5946] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 428.758551][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.758600][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 428.760365][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.760392][ T10] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 428.760413][ T10] usb 2-1: Product: syz [ 428.760428][ T10] usb 2-1: SerialNumber: syz [ 428.871528][ T5946] usb 5-1: unable to get BOS descriptor or descriptor too short [ 428.873757][ T5946] usb 5-1: not running at top speed; connect to a high speed hub [ 428.875926][ T5946] usb 5-1: config 5 has an invalid descriptor of length 19, skipping remainder of the config [ 428.875951][ T5946] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 428.881093][ T5946] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=87.bd [ 428.881121][ T5946] usb 5-1: New USB device strings: Mfr=224, Product=1, SerialNumber=3 [ 428.881141][ T5946] usb 5-1: Product: syz [ 428.881204][ T5946] usb 5-1: Manufacturer: syz [ 428.881220][ T5946] usb 5-1: SerialNumber: syz [ 429.129297][ T5946] usb 5-1: USB disconnect, device number 54 [ 429.213522][ T10] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 429.213603][ T10] cdc_ncm 2-1:1.0: bind() failure [ 429.243537][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 429.243581][ T10] cdc_ncm 2-1:1.1: bind() failure [ 429.312907][T19729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.314067][T19729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.924961][ T10] usb 2-1: USB disconnect, device number 47 [ 429.951571][T19743] __nla_validate_parse: 3 callbacks suppressed [ 429.951587][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'. [ 429.988738][ T820] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 430.000603][ T38] audit: type=1326 audit(2000000046.760:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.000899][ T38] audit: type=1326 audit(2000000046.760:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.001174][ T38] audit: type=1326 audit(2000000046.760:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.001504][ T38] audit: type=1326 audit(2000000046.760:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.003024][ T38] audit: type=1326 audit(2000000046.760:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.003147][ T38] audit: type=1326 audit(2000000046.760:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.003273][ T38] audit: type=1326 audit(2000000046.760:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.003426][ T38] audit: type=1326 audit(2000000046.760:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.003613][ T38] audit: type=1326 audit(2000000046.760:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.003751][ T38] audit: type=1326 audit(2000000046.760:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19755 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f363b2fc819 code=0x7ffc0000 [ 430.233143][ T820] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 430.234639][ T820] usb 5-1: config index 0 descriptor too short (expected 65016, got 133) [ 430.234665][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.236286][ T820] usb 5-1: config index 1 descriptor too short (expected 65016, got 133) [ 430.236313][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.284766][ T820] usb 5-1: config index 2 descriptor too short (expected 65016, got 133) [ 430.284791][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.286181][ T820] usb 5-1: config index 3 descriptor too short (expected 65016, got 133) [ 430.286205][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.324868][ T820] usb 5-1: config index 4 descriptor too short (expected 65016, got 133) [ 430.324892][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.326098][ T820] usb 5-1: config index 5 descriptor too short (expected 65016, got 133) [ 430.326123][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.327885][ T820] usb 5-1: config index 6 descriptor too short (expected 65016, got 133) [ 430.327910][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.347855][T19761] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2085'. [ 430.355616][ T820] usb 5-1: config index 7 descriptor too short (expected 65016, got 133) [ 430.355643][ T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.411139][ T820] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 430.411166][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.411185][ T820] usb 5-1: Product: syz [ 430.411200][ T820] usb 5-1: Manufacturer: syz [ 430.411215][ T820] usb 5-1: SerialNumber: syz [ 430.457905][ T820] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 430.486293][ T1243] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 430.729303][T19773] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 430.758282][T19734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.761126][T19734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.894809][ T10] usb 5-1: USB disconnect, device number 55 [ 431.538732][T19788] 9pnet: p9_errstr2errno: server reported unknown error di0 [ 431.609069][ T1243] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 431.611374][ T1243] ath9k_htc: Failed to initialize the device [ 431.613684][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 431.946659][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 431.956680][ T6428] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 432.111058][ T6428] usb 2-1: config 1 interface 0 has no altsetting 0 [ 432.111054][ T10] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 432.111083][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.119149][ T10] usb 5-1: config 0 descriptor?? [ 432.132481][ T6428] usb 2-1: string descriptor 0 read error: -22 [ 432.132596][ T6428] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.40 [ 432.132627][ T6428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.184779][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 432.595695][ T6428] usbhid 2-1:1.0: can't add hid device: -32 [ 432.595811][ T6428] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 432.707669][T19820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.708628][T19820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.936156][T19848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.952064][T19848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.012360][T19852] netlink: 'syz.0.2103': attribute type 10 has an invalid length. [ 433.016366][T19848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.040226][T19848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.102686][ T10] gspca_cpia1: usb_control_msg 05, error -71 [ 433.103079][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 433.103093][ T10] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 433.104609][ T6428] usb 2-1: USB disconnect, device number 48 [ 433.151003][ T10] usb 5-1: USB disconnect, device number 56 [ 433.546617][ T6428] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 433.677235][ T6428] usb 2-1: device descriptor read/64, error -71 [ 433.680816][T19878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.770533][T19885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.772602][T19885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.782131][T19885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.782673][T19885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.924829][T19897] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2112'. [ 433.936738][ T6428] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 434.086764][ T6428] usb 2-1: device descriptor read/64, error -71 [ 434.196883][ T6428] usb usb2-port1: attempt power cycle [ 434.536718][ T6428] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 434.557224][ T6428] usb 2-1: device descriptor read/8, error -71 [ 434.796918][ T6428] usb 2-1: new full-speed USB device number[ 434.796918][ T6428] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 434.808091][ T39] INFO: task syz-executor:5834 blocked for more than 143 seconds. [ 434.808114][ T39] Tainted: G L syzkaller #0 [ 434.808126][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.808136][ T39] task:syz-executor state:D stack:21600 pid:5834 tgid:5834 ppid:1 task_flags:0x400140 flags:0x00080002 [ 434.808204][ T39] Call Trace: [ 434.808211][ T39] [ 434.808224][ T39] __schedule+0x169e/0x54f0 [ 434.808267][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 434.808296][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 434.808324][ T39] ? rt_spin_lock+0x1e0/0x400 [ 434.808347][ T39] ? __pfx___schedule+0x10/0x10 [ 434.808378][ T39] ? schedule+0x90/0x360 [ 434.808404][ T39] schedule+0x164/0x360 [ 434.808429][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 434.808462][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 434.808490][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 434.808515][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 434.808543][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 434.808570][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 434.808594][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 434.808615][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 434.808640][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 434.808665][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 434.808697][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 434.808728][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 434.808752][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 434.808776][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 434.808804][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 434.808832][ T39] deactivate_locked_super+0xbc/0x130 [ 434.808859][ T39] cleanup_mnt+0x437/0x4d0 [ 434.808885][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.808913][ T39] task_work_run+0x1d9/0x270 [ 434.808957][ T39] ? __pfx_task_work_run+0x10/0x10 [ 434.808990][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.809010][ T39] exit_to_user_mode_loop+0xed/0x480 [ 434.809033][ T39] ? rcu_is_watching+0x15/0xb0 [ 434.809060][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.809081][ T39] do_syscall_64+0x33e/0xf80 [ 434.809105][ T39] ? trace_irq_disable+0x3b/0x140 [ 434.809126][ T39] ? clear_bhb_loop+0x40/0x90 [ 434.809150][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.809174][ T39] RIP: 0033:0x7f909a62da57 [ 434.809198][ T39] RSP: 002b:00007fffa2db6f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 434.809217][ T39] RAX: 0000000000000000 RBX: 00007f909a6c2048 RCX: 00007f909a62da57 [ 434.809230][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa2db7050 [ 434.809243][ T39] RBP: 00007fffa2db7050 R08: 00007fffa2db8050 R09: 00000000ffffffff [ 434.809258][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa2db80e0 [ 434.809270][ T39] R13: 00007f909a6c2048 R14: 0000000000043817 R15: 00007fffa2db8120 [ 434.809300][ T39] [ 434.809360][ T39] [ 434.809360][ T39] Showing all locks held in the system: [ 434.809371][ T39] 4 locks held by pr/legacy/17: [ 434.809382][ T39] #0: ffffffff8e3ba3a0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 434.809473][ T39] #1: ffffffff8e2a1c98 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 434.809519][ T39] #2: ffffffff9a0291d8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90 [ 434.809569][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 434.809613][ T39] 1 lock held by khungtaskd/39: [ 434.809624][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 434.809682][ T39] 3 locks held by kworker/1:3/1243: [ 434.809693][ T39] #0: ffff88813ff5e938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 434.809736][ T39] #1: ffffc9000643fc40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 434.809781][ T39] #2: ffff888029efe210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 434.809838][ T39] 2 locks held by getty/5587: [ 434.809848][ T39] #0: ffff8880375350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 434.809894][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 434.809947][ T39] 1 lock held by syz-executor/5834: [ 434.809957][ T39] #0: ffff88801deb80d0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 434.810012][ T39] 5 locks held by kworker/1:6/6428: [ 434.810023][ T39] #0: ffff8880226b8938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 434.810066][ T39] #1: ffffc90006407c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 434.810109][ T39] #2: ffff888029d6e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 434.810152][ T39] #3: ffff888029d40658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 434.810201][ T39] #4: ffff888029ab3f58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 434.810249][ T39] 1 lock held by syz.2.2115/19913: [ 434.810259][ T39] #0: ffff88805eea00e8 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_memory_region+0x5e/0xb0 [ 434.810307][ T39] [ 434.810313][ T39] ============================================= [ 434.810313][ T39] [ 434.810326][ T39] NMI backtrace for cpu 1 [ 434.810348][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.810372][ T39] Tainted: [L]=SOFTLOCKUP [ 434.810379][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 434.810390][ T39] Call Trace: [ 434.810397][ T39] [ 434.810405][ T39] dump_stack_lvl+0xe8/0x150 [ 434.810427][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 434.810447][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 434.810468][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 434.810490][ T39] sys_info+0x135/0x170 [ 434.810516][ T39] watchdog+0xfd3/0x1030 [ 434.810544][ T39] ? watchdog+0x1c9/0x1030 [ 434.810569][ T39] kthread+0x388/0x470 [ 434.810592][ T39] ? __pfx_watchdog+0x10/0x10 [ 434.810611][ T39] ? __pfx_kthread+0x10/0x10 [ 434.810633][ T39] ret_from_fork+0x514/0xb70 [ 434.810655][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 434.810673][ T39] ? __switch_to+0xc79/0x1410 [ 434.810701][ T39] ? __pfx_kthread+0x10/0x10 [ 434.810724][ T39] ret_from_fork_asm+0x1a/0x30 [ 434.810760][ T39] [ 434.810768][ T39] Sending NMI from CPU 1 to CPUs 0: [ 434.810796][ C0] NMI backtrace for cpu 0 [ 434.810811][ C0] CPU: 0 UID: 0 PID: 3874 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.810833][ C0] Tainted: [L]=SOFTLOCKUP [ 434.810839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 434.810850][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 434.810873][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x132/0x260 [ 434.810895][ C0] Code: 4c 89 e6 e8 c0 62 00 00 85 c0 75 bc eb 79 48 c7 c7 30 54 29 8e 4c 89 fe e8 9b 4c 50 03 eb c2 85 c0 7e 64 83 bb d8 0b 00 00 00 <74> 5b 45 31 ff eb 13 49 ff c7 48 63 83 f0 0b 00 00 49 83 c6 28 49 [ 434.810911][ C0] RSP: 0018:ffffc9000fc1f7f0 EFLAGS: 00000002 [ 434.810924][ C0] RAX: 0000000000000002 RBX: ffff888034859ec0 RCX: ffffffff936c3140 [ 434.810937][ C0] RDX: 0000000000000002 RSI: ffff88803485aae0 RDI: ffff888034859ec0 [ 434.810948][ C0] RBP: 0000000000000001 R08: ffffffff8fcf17f7 R09: 1ffffffff1f9e2fe [ 434.810960][ C0] R10: dffffc0000000000 R11: fffffbfff1f9e2ff R12: ffff88803485ab08 [ 434.810972][ C0] R13: ffff8880b8640710 R14: ffff88803485aab8 R15: 0000000000000002 [ 434.810984][ C0] FS: 0000000000000000(0000) GS:ffff888125a68000(0000) knlGS:0000000000000000 [ 434.810997][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.811009][ C0] CR2: 000000110c2e05f5 CR3: 0000000037e40000 CR4: 00000000003526f0 [ 434.811023][ C0] Call Trace: [ 434.811030][ C0] [ 434.811038][ C0] trace_hardirqs_on+0x28/0x40 [ 434.811054][ C0] _raw_spin_unlock_irqrestore+0x30/0x80 [ 434.811075][ C0] rt_spin_trylock+0xd2/0x2b0 [ 434.811093][ C0] __kmalloc_node_track_caller_noprof+0x419/0x7e0 [ 434.811116][ C0] ? batadv_skb_head_push+0x169/0x200 [ 434.811139][ C0] pskb_expand_head+0x230/0x1390 [ 434.811159][ C0] ? __asan_memcpy+0x40/0x70 [ 434.811179][ C0] batadv_skb_head_push+0x169/0x200 [ 434.811200][ C0] batadv_send_skb_packet+0xc8/0x690 [ 434.811227][ C0] ? skb_clone+0x246/0x3a0 [ 434.811243][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x631/0x7e0 [ 434.811267][ C0] ? process_scheduled_works+0xa69/0x1910 [ 434.811284][ C0] process_scheduled_works+0xb68/0x1910 [ 434.811312][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 434.811330][ C0] ? assign_work+0x3d5/0x5e0 [ 434.811347][ C0] worker_thread+0xa90/0x1040 [ 434.811375][ C0] kthread+0x388/0x470 [ 434.811393][ C0] ? __pfx_worker_thread+0x10/0x10 [ 434.811408][ C0] ? __pfx_kthread+0x10/0x10 [ 434.811433][ C0] ret_from_fork+0x514/0xb70 [ 434.811450][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 434.811466][ C0] ? __switch_to+0xc79/0x1410 [ 434.811488][ C0] ? __pfx_kthread+0x10/0x10 [ 434.811508][ C0] ret_from_fork_asm+0x1a/0x30 [ 434.811532][ C0] [ 434.811880][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 434.811900][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.811926][ T39] Tainted: [L]=SOFTLOCKUP [ 434.811933][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 434.811944][ T39] Call Trace: [ 434.811952][ T39] [ 434.811960][ T39] vpanic+0x56c/0xa60 [ 434.811984][ T39] ? __pfx___schedule+0x10/0x10 [ 434.812007][ T39] ? __pfx_vpanic+0x10/0x10 [ 434.812037][ T39] panic+0xc5/0xd0 [ 434.812059][ T39] ? __pfx_panic+0x10/0x10 [ 434.812081][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 434.812112][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 434.812136][ T39] watchdog+0x102c/0x1030 [ 434.812163][ T39] ? watchdog+0x1c9/0x1030 [ 434.812193][ T39] kthread+0x388/0x470 [ 434.812217][ T39] ? __pfx_watchdog+0x10/0x10 [ 434.812236][ T39] ? __pfx_kthread+0x10/0x10 [ 434.812260][ T39] ret_from_fork+0x514/0xb70 [ 434.812282][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 434.812301][ T39] ? __switch_to+0xc79/0x1410 [ 434.812329][ T39] ? __pfx_kthread+0x10/0x10 [ 434.812354][ T39] ret_from_fork_asm+0x1a/0x30 [ 434.812389][ T39] [ 434.812715][ T39] Kernel Offset: disabled