last executing test programs: 14.160089427s ago: executing program 0 (id=1253): r0 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffff9, 0x0}) io_uring_enter(r0, 0x3516, 0xeb9, 0x4, 0x0, 0x0) 13.726226812s ago: executing program 0 (id=1256): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000680)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='\x00\x00', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x6, r7, r8, 0x8000, '\x00', 0x1, 0xc, 0x4, 0x6, {0x6, 0x6}, {0x20000000000004, 0x1}, {0x100000000, 0x9}, {0xe69e, 0xa04}, 0x4, 0x80000b, 0x4, 0x3}}}}) 11.957529095s ago: executing program 0 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000080)) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x20b00, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0}) 10.585932275s ago: executing program 0 (id=1268): syz_emit_ethernet(0x16, &(0x7f0000000000)={@random="a7dcf670d5d9", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@snap={0xaa, 0x1, "87", "b989d1", 0x886c}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xa}}, 0x1c}}, 0x0) write$sndseq(r2, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x8a}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x402) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000afea070e2886e19600000008000300", @ANYRESOCT=r4, @ANYRESHEX=r0], 0x40}}, 0x0) 9.400168961s ago: executing program 4 (id=1276): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.395214961s ago: executing program 0 (id=1277): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0xfffffc00) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a300000000008000440000000001400000011000100"/101], 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r3], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) poll(&(0x7f0000000200)=[{r2, 0x92}, {r1, 0x2300}], 0x2, 0x2371) 9.03750212s ago: executing program 4 (id=1280): socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) 8.343146907s ago: executing program 0 (id=1281): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x18, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x31) 8.04438362s ago: executing program 4 (id=1284): r0 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x26, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) 6.966489607s ago: executing program 4 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000500)='./file0\x00', 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.776059402s ago: executing program 2 (id=1290): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.775773963s ago: executing program 4 (id=1291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000802700034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c000140"], 0x188}}, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = eventfd(0x7ff) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1, 0x2}, {0x2, 0x0, 0x0, 0x4}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) tee(r0, r3, 0x8000000000000000, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) quotactl_fd$Q_GETFMT(r9, 0xd2eca6b1246a2af6, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0x40, 0x3, 0x0, 0x8, 0xfe, 0x6e, 0x2, 0x4, 0x3, 0x7, 0x4, 0x0, 0xfffffffe, 0x6, 0x6, 0x9c, 0x1, 0x0, '\x00', 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000200)={r10, r5, 0x0, 0x4, 0x10001, 0x33908c00, 0x9, 0x4, 0x3, 0x3, 0x5, 0xff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r6, r6], &(0x7f0000000580)}) setresgid(0x0, 0x0, 0xee01) write$eventfd(r2, &(0x7f0000000180)=0x57, 0x8) r11 = socket$kcm(0xa, 0x3, 0x11) fsetxattr(r1, &(0x7f00000000c0)=@random={'os2.', '/proc/thread-self\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x80108907, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x23, &(0x7f0000000080), 0x4) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r12, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x40, 0x6, 0x8, "b3c169eb503d2915"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r11, 0x8935, &(0x7f0000000040)={'ip_vti0\x00'}) 5.872668436s ago: executing program 2 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000080)) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x20b00, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0}) 4.816385601s ago: executing program 2 (id=1297): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8800, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000201, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0xeb9, 0x4, 0x0, 0x0) 4.20406056s ago: executing program 1 (id=1301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') pread64(r5, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) 3.495790457s ago: executing program 3 (id=1303): timer_create(0xe0eeceaf7065d110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) syz_open_pts(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.271791706s ago: executing program 4 (id=1304): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440)) r2 = socket(0x2a, 0x2, 0x0) socket(0x2, 0x5, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xc3, 0x1, 0x1, {0x22, 0x6c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x71, 0xa5, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) inotify_init1(0x80000) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x13) socket$netlink(0x10, 0x3, 0x400000000000004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) socket$tipc(0x1e, 0x2, 0x0) 3.271138896s ago: executing program 3 (id=1305): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0xfffffc00) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a300000000008000440000000001400000011000100"/101], 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r3], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) poll(&(0x7f0000000200)=[{r0, 0x100}, {r1, 0x2300}], 0x2, 0x2371) 3.040011394s ago: executing program 2 (id=1306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000a40)={0x18, 0xf, {0x5, @struct={0x7fffffff, 0x10}, 0x0, 0x9, 0x6, 0x100, 0x1, 0xfffffffffffffff7, 0x20, @usage=0xbf7, 0x5, 0x5, [0x80000001, 0x1, 0x3, 0x64, 0xdb, 0x80000000003]}, {0x7, @struct={0x2, 0x2}, 0x0, 0x6, 0x3, 0x800, 0xfc74000000000000, 0x6, 0x0, @struct={0x0, 0xc15e}, 0x80, 0xc879, [0x0, 0x6, 0x0, 0x2, 0x1, 0x5]}, {0xffff, @usage=0x8000000000000000, 0x0, 0x400000000000009, 0x9, 0x8001, 0x7, 0x7, 0x41, @struct={0x6}, 0x40ebe, 0x6, [0xff, 0x4bd, 0x2, 0x7fff, 0x3, 0x8000000000000001]}, {0x4000000000001, 0x7, 0x7fffffffffffffff}}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x12) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000140)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='sysv\x00', 0x200000, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x9) 2.510174177s ago: executing program 1 (id=1307): socket$inet(0x2, 0x1, 0x100) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x7ff, 0x4, 0x4000002, 0x88d7, 0x8d, 0x1007, 0x0, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0xff, 0x400002, 0x1]}) 1.932049963s ago: executing program 3 (id=1308): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) timerfd_create(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchdir(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x1}, {0x9, 0x1b}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) 1.325692562s ago: executing program 1 (id=1309): r0 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x26, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) 1.188384954s ago: executing program 3 (id=1310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @random="416cee93a4a6", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2}}}}}}, 0x0) 578.410913ms ago: executing program 3 (id=1311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x0, 0x0, 0x49, 0x0, "012fdd90c46483b13de94bc700022eb76eab66bf16657b7754ec9f3d5818a5bbd020fa3068af5bb2fffedeacfab26318efa2ec16f6a9bdcfe9c0a30eca37f5b9b23edc3aa8912ec22f0fb8afdb31449f"}, 0xd8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x1004, 0x804, 0x4, 0xc, 0x120000, 0xff, 0xffffffffffffffff, 0x9, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 408.119277ms ago: executing program 1 (id=1312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 298.326255ms ago: executing program 1 (id=1313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x48011) shutdown(r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) 297.238166ms ago: executing program 2 (id=1314): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 219.451462ms ago: executing program 3 (id=1315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) 202.174583ms ago: executing program 2 (id=1316): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000"], 0x0, 0x4e}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x23, 0x0, 0x6, 0x2, &(0x7f0000000640), 0x8, 0x0, 0x0, {0x1}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r5, &(0x7f0000002ec0), 0x0, 0x120, &(0x7f0000003040)) sendmsg$nl_route(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f01050000000900070008"], 0x0) 0s ago: executing program 1 (id=1317): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffff, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 16169][ T4604] usb 4-1: USB disconnect, device number 3 [ 93.946957][ T4604] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 109.437588][ T4293] Bluetooth: hci5: Frame reassembly failed (-84) [ 109.482669][ T4929] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 110.436410][ T4911] binder: 4910:4911 ioctl c018620c 200000000380 returned -1 [ 111.518722][ T4191] Bluetooth: hci5: command 0x1003 tx timeout [ 111.543912][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 111.981955][ T4248] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.221619][ T4248] usb 2-1: Using ep0 maxpacket: 32 [ 112.341948][ T4248] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 112.353554][ T4248] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 112.366375][ T4248] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 112.385372][ T4248] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 112.413301][ T4248] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.601694][ T4248] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 112.721645][ T4248] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 112.730204][ T4248] usb 2-1: Product: syz [ 112.735474][ T4248] usb 2-1: Manufacturer: syz [ 112.740651][ T4248] usb 2-1: SerialNumber: syz [ 112.753549][ T4248] usb 2-1: config 0 descriptor?? [ 112.813944][ T4248] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 112.829891][ T4248] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 113.190140][ T4248] usb 2-1: USB disconnect, device number 3 [ 113.208334][ T4982] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 113.225711][ T4248] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 113.621709][ T4191] Bluetooth: hci5: command 0x1001 tx timeout [ 113.636695][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 115.068625][ T5018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.174'. [ 115.357866][ T5017] syz.3.174 (5017) used greatest stack depth: 18472 bytes left [ 115.711918][ T4235] Bluetooth: hci5: command 0x1009 tx timeout [ 116.782915][ T5045] ubi31: attaching mtd0 [ 116.794543][ T5045] ubi31: scanning is finished [ 116.799553][ T5045] ubi31: empty MTD device detected [ 117.005625][ T5045] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 118.921633][ T4255] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 119.761837][ T4255] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 119.770154][ T4255] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 119.854518][ T4255] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 120.011863][ T4255] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 120.433699][ T4255] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.611208][ T4255] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 120.751878][ T4255] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 120.779619][ T4255] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.810883][ T4255] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 121.406223][ T4255] usb 4-1: string descriptor 0 read error: -22 [ 121.421957][ T4255] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 121.441489][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.572219][ T4255] adutux 4-1:168.0: interrupt endpoints not found [ 121.932553][ T4255] usb 4-1: USB disconnect, device number 4 [ 123.112681][ T5093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 123.321805][ T4604] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.851685][ T4604] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 125.859308][ T4604] usb 5-1: can't read configurations, error -71 [ 127.259593][ T5149] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 128.309239][ T5176] tmpfs: Unknown parameter 'usrquota' [ 128.331701][ T25] audit: type=1326 audit(1755067662.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5174 comm="syz.1.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28981eabe9 code=0x0 [ 128.353158][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.534217][ T5180] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 128.541004][ T5180] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 128.551014][ T5180] vhci_hcd vhci_hcd.0: Device attached [ 128.975010][ T4255] usb 36-1: SetAddress Request (2) to port 0 [ 128.982952][ T4255] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 129.163391][ T5181] vhci_hcd: connection reset by peer [ 129.178058][ T610] vhci_hcd: stop threads [ 129.185359][ T610] vhci_hcd: release socket [ 129.218467][ T610] vhci_hcd: disconnect device [ 129.311833][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 129.319941][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 130.697686][ T5205] overlayfs: missing 'workdir' [ 131.249068][ T4191] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 131.381771][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 131.395360][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 131.691850][ T4191] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 131.707408][ T4191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.734966][ T4191] usb 5-1: config 0 descriptor?? [ 131.803643][ T5229] tmpfs: Unknown parameter 'usrquota' [ 132.010480][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 132.540799][ T5237] device vlan2 entered promiscuous mode [ 132.548825][ T5237] device bond0 entered promiscuous mode [ 132.555455][ T5237] device bond_slave_0 entered promiscuous mode [ 132.564316][ T5237] device bond_slave_1 entered promiscuous mode [ 132.585625][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.591592][ T7] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 132.601043][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.951686][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.985590][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.071800][ T4191] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 133.091636][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 133.116387][ T4191] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 133.131557][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.140711][ T4191] asix: probe of 5-1:0.0 failed with error -71 [ 133.147247][ T7] usb 3-1: SerialNumber: syz [ 133.166343][ T4191] usb 5-1: USB disconnect, device number 5 [ 133.300107][ T7] cdc_ether 3-1:1.0: skipping garbage [ 133.328851][ T7] usb 3-1: bad CDC descriptors [ 133.337997][ T7] usb-storage 3-1:1.0: USB Mass Storage device detected [ 133.546222][ T4191] Bluetooth: hci5: command 0x1009 tx timeout [ 134.101824][ T4255] usb 36-1: device descriptor read/8, error -110 [ 134.591991][ T5249] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.612333][ T7] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 134.865490][ T21] usb 3-1: USB disconnect, device number 2 [ 134.909940][ T5259] ======================================================= [ 134.909940][ T5259] WARNING: The mand mount option has been deprecated and [ 134.909940][ T5259] and is ignored by this kernel. Remove the mand [ 134.909940][ T5259] option from the mount to silence this warning. [ 134.909940][ T5259] ======================================================= [ 134.944846][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.413996][ T4255] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 135.498296][ T4255] usb usb36-port1: attempt power cycle [ 135.662488][ T5262] overlayfs: missing 'lowerdir' [ 135.931810][ T4255] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 136.252338][ T4255] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 136.285067][ T4255] usb usb36-port1: unable to enumerate USB device [ 136.896741][ T5276] tmpfs: Unknown parameter 'usrquota' [ 139.355258][ T5300] affs: No valid root block on device nullb0 [ 139.405679][ T4604] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 140.069704][ T4604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 140.079828][ T4604] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.781835][ T4604] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 140.810136][ T4604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.821703][ T4604] usb 3-1: SerialNumber: syz [ 140.872618][ T4604] cdc_ether 3-1:1.0: skipping garbage [ 140.878160][ T4604] usb 3-1: bad CDC descriptors [ 140.896010][ T4604] usb-storage 3-1:1.0: USB Mass Storage device detected [ 140.954619][ T4604] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 141.665006][ T4604] usb 3-1: USB disconnect, device number 3 [ 141.682298][ T5320] netlink: 44 bytes leftover after parsing attributes in process `syz.0.252'. [ 141.695251][ T5320] netlink: 59 bytes leftover after parsing attributes in process `syz.0.252'. [ 142.428809][ T5331] tmpfs: Unknown parameter 'usrquota' [ 142.791670][ T4604] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.041588][ T4604] usb 2-1: Using ep0 maxpacket: 8 [ 143.321822][ T4604] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 143.341795][ T4604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.359336][ T4604] usb 2-1: Product: syz [ 143.369098][ T4604] usb 2-1: Manufacturer: syz [ 143.389387][ T4604] usb 2-1: SerialNumber: syz [ 143.443532][ T4604] usb 2-1: config 0 descriptor?? [ 143.516877][ T5343] netlink: 'syz.3.260': attribute type 10 has an invalid length. [ 143.621810][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.725224][ T4604] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 143.754986][ T5347] tipc: Enabling of bearer rejected, failed to enable media [ 143.776476][ T5347] device syzkaller0 entered promiscuous mode [ 144.359407][ T4604] usb write operation failed. (-71) [ 145.272558][ T4604] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.285530][ T4604] dvbdev: DVB: registering new adapter (Terratec H7) [ 145.292882][ T4604] usb 2-1: media controller created [ 145.321692][ T4604] usb read operation failed. (-71) [ 145.351668][ T4604] usb write operation failed. (-71) [ 145.363973][ T4604] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 145.384048][ T4604] usb 2-1: USB disconnect, device number 4 [ 145.981814][ T4604] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 146.521683][ T4604] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.539627][ T4604] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.681797][ T4604] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 146.711718][ T4604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.719838][ T4604] usb 2-1: SerialNumber: syz [ 146.802588][ T4604] cdc_ether 2-1:1.0: skipping garbage [ 146.809222][ T4604] usb 2-1: bad CDC descriptors [ 146.823927][ T4604] usb-storage 2-1:1.0: USB Mass Storage device detected [ 146.925433][ T4604] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 147.731411][ T5395] tipc: Enabling of bearer rejected, failed to enable media [ 147.761087][ T5395] device syzkaller0 entered promiscuous mode [ 147.980742][ T4291] usb 2-1: USB disconnect, device number 5 [ 149.172270][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.640290][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 150.201812][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 150.243779][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.284934][ T7] usb 3-1: Product: syz [ 150.305694][ T7] usb 3-1: Manufacturer: syz [ 150.310303][ T7] usb 3-1: SerialNumber: syz [ 150.328128][ T7] usb 3-1: config 0 descriptor?? [ 150.591659][ T7] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 150.692617][ T4255] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.061699][ T4255] usb 4-1: Using ep0 maxpacket: 32 [ 151.181785][ T7] usb write operation failed. (-71) [ 151.187208][ T4255] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 151.196003][ T4255] usb 4-1: config 0 has no interface number 0 [ 151.203285][ T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 151.214578][ T7] dvbdev: DVB: registering new adapter (Terratec H7) [ 151.222351][ T7] usb 3-1: media controller created [ 151.241843][ T7] usb read operation failed. (-71) [ 151.262019][ T7] usb write operation failed. (-71) [ 151.314415][ T7] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 151.335185][ T7] usb 3-1: USB disconnect, device number 5 [ 151.402252][ T4255] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 151.416974][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.425201][ T4255] usb 4-1: Product: syz [ 151.434296][ T4255] usb 4-1: Manufacturer: syz [ 151.441602][ T4255] usb 4-1: SerialNumber: syz [ 151.480444][ T4255] usb 4-1: config 0 descriptor?? [ 152.341729][ T4255] radio-si470x 4-1:0.35: this is not a si470x device. [ 152.415692][ T5436] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 152.425898][ T5436] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 152.438210][ T5436] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 152.621706][ T4255] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 152.673190][ T4255] usb 4-1: USB disconnect, device number 5 [ 153.641707][ T7] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 154.661839][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.802699][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.911844][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 154.924168][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.934869][ T7] usb 1-1: SerialNumber: syz [ 154.988405][ T7] cdc_ether 1-1:1.0: skipping garbage [ 154.994655][ T7] usb 1-1: bad CDC descriptors [ 155.022399][ T7] usb-storage 1-1:1.0: USB Mass Storage device detected [ 155.889021][ T7] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 155.998037][ T5477] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 156.027156][ T5477] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.179424][ T7] usb 1-1: USB disconnect, device number 5 [ 158.581845][ T4604] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.247940][ T5513] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.361748][ T4604] usb 3-1: Using ep0 maxpacket: 8 [ 159.369308][ T5510] netlink: 44 bytes leftover after parsing attributes in process `syz.1.307'. [ 159.378846][ T5510] netlink: 59 bytes leftover after parsing attributes in process `syz.1.307'. [ 159.492550][ T4604] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 159.506890][ T4604] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 159.529707][ T4604] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.586242][ T4604] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 159.649077][ T4604] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 159.690966][ T4604] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.747831][ T4604] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.781004][ T4604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.091713][ T4604] usb 3-1: GET_CAPABILITIES returned 0 [ 160.098387][ T4604] usbtmc 3-1:16.0: can't read capabilities [ 160.153128][ T5521] netlink: 'syz.0.310': attribute type 10 has an invalid length. [ 160.169458][ T5521] device dummy0 entered promiscuous mode [ 161.225223][ T4291] usb 3-1: USB disconnect, device number 6 [ 161.551672][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.201685][ T7] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.222104][ T7] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.910754][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.949963][ T7] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.984337][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.190749][ T7] usb 1-1: config 0 descriptor?? [ 164.431871][ T7] usb 1-1: can't set config #0, error -71 [ 164.940931][ T7] usb 1-1: USB disconnect, device number 6 [ 167.076564][ T5580] tipc: Started in network mode [ 167.081602][ T5580] tipc: Node identity fe6e0291de91, cluster identity 4711 [ 167.090612][ T5580] tipc: Enabled bearer , priority 0 [ 167.318692][ T5575] tipc: Disabling bearer [ 171.242569][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 171.264883][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 171.893510][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 171.904954][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 171.914004][ T5631] syz.3.342 uses obsolete (PF_INET,SOCK_PACKET) [ 177.417405][ T5677] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.857027][ T5701] tmpfs: Unknown parameter 'usrquota' [ 181.400822][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.806204][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 182.202373][ T5740] tmpfs: Unknown parameter 'usrquota' [ 182.391651][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 182.529516][ T13] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 182.542913][ T13] usb 3-1: config 0 has no interface number 0 [ 182.549044][ T13] usb 3-1: config 0 interface 25 has no altsetting 0 [ 182.742187][ T13] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice=b4.82 [ 182.772421][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.851104][ T13] usb 3-1: Product: syz [ 182.864971][ T13] usb 3-1: Manufacturer: syz [ 183.373116][ T13] usb 3-1: SerialNumber: syz [ 183.408782][ T13] usb 3-1: config 0 descriptor?? [ 183.823020][ T5763] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 183.823020][ T5763] program syz.0.377 not setting count and/or reply_len properly [ 184.146487][ T13] usb 3-1: bad CDC descriptors [ 184.160596][ T13] usb 3-1: bad CDC descriptors [ 184.372549][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 184.399618][ T13] cp210x 3-1:0.25: cp210x converter detected [ 184.433765][ T13] cp210x 3-1:0.25: failed to get vendor val 0x370b size 1: -71 [ 184.451599][ T13] cp210x 3-1:0.25: querying part number failed [ 184.471792][ T13] usb 3-1: cp210x converter now attached to ttyUSB0 [ 184.717352][ T13] usb 3-1: USB disconnect, device number 7 [ 184.778332][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.827826][ T13] cp210x 3-1:0.25: device disconnected [ 185.230942][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 185.281647][ T5781] device syzkaller0 entered promiscuous mode [ 185.541597][ T4289] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 186.744176][ T4289] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 186.766355][ T4289] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.931815][ T4289] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 187.951218][ T4289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 187.959426][ T4289] usb 2-1: SerialNumber: syz [ 188.015056][ T4289] cdc_ether 2-1:1.0: skipping garbage [ 188.028053][ T4289] usb 2-1: bad CDC descriptors [ 188.033999][ T4289] usb-storage 2-1:1.0: USB Mass Storage device detected [ 188.047888][ T4289] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 188.311047][ T5835] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 188.318161][ T5835] PKCS7: Only support pkcs7_signedData type [ 188.414017][ T5833] device syzkaller0 entered promiscuous mode [ 189.522029][ T5848] device syzkaller0 entered promiscuous mode [ 189.591845][ T4255] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 189.882007][ T4255] usb 4-1: Using ep0 maxpacket: 32 [ 189.981260][ T5840] udc-core: couldn't find an available UDC or it's busy [ 190.027887][ T5840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 190.538955][ T4545] usb 2-1: USB disconnect, device number 6 [ 194.025397][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.031878][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.895824][ T5893] device syzkaller0 entered promiscuous mode [ 195.001763][ T4255] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.137315][ T4255] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 195.209975][ T4255] usb 4-1: chopping to 0 config(s) [ 195.317476][ T4255] usb 4-1: can't read configurations, error -32 [ 195.501754][ T4255] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 195.966656][ T4255] usb 4-1: device descriptor read/64, error -32 [ 196.091895][ T4255] usb usb4-port1: attempt power cycle [ 196.719723][ T5915] device syzkaller0 entered promiscuous mode [ 196.807458][ T5918] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 196.807458][ T5918] program syz.4.422 not setting count and/or reply_len properly [ 197.232821][ T4255] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 197.321644][ T4255] usb 4-1: device descriptor read/8, error -32 [ 197.433451][ T5926] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 197.494673][ T5926] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 197.671886][ T4255] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.960839][ T5937] qnx6: unable to read the first superblock [ 198.051755][ T4255] usb 4-1: device not accepting address 9, error -71 [ 198.336692][ T4255] usb usb4-port1: unable to enumerate USB device [ 198.904458][ T4255] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 199.631737][ T4255] usb 4-1: Using ep0 maxpacket: 16 [ 200.385782][ T5958] device syzkaller0 entered promiscuous mode [ 200.622063][ T4255] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 200.637161][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.721640][ T4255] usb 4-1: Product: syz [ 200.762176][ T4255] usb 4-1: Manufacturer: syz [ 200.810581][ T4255] usb 4-1: SerialNumber: syz [ 200.853558][ T4255] usb 4-1: config 0 descriptor?? [ 201.521904][ T4255] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 201.538472][ T4255] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.561836][ T4255] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 201.570899][ T4255] usb 4-1: media controller created [ 201.623196][ T4255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.866914][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 201.995080][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 202.533969][ T5941] dtv5100: wlen = 0, aborting. [ 202.538924][ T4255] zl10353_read_register: readreg error (reg=127, ret==0) [ 202.561875][ T4255] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 202.616788][ T4255] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 202.689827][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 202.714029][ T4255] usb 4-1: USB disconnect, device number 10 [ 202.750090][ T4255] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 202.925258][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.935837][ T1108] usb 3-1: config 0 has no interfaces? [ 203.161899][ T4604] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.472042][ T4604] usb 2-1: Using ep0 maxpacket: 32 [ 203.621879][ T4604] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 203.759773][ T1108] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 203.806153][ T6003] device syzkaller0 entered promiscuous mode [ 203.812586][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.821569][ T1108] usb 3-1: Product: syz [ 203.822120][ T4604] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 203.825754][ T1108] usb 3-1: Manufacturer: syz [ 203.825770][ T1108] usb 3-1: SerialNumber: syz [ 203.847273][ T4604] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 203.871620][ T4604] usb 2-1: Product: syz [ 203.876139][ T4604] usb 2-1: Manufacturer: syz [ 203.881576][ T4604] usb 2-1: SerialNumber: syz [ 203.950192][ T4604] usb 2-1: config 0 descriptor?? [ 203.994650][ T5990] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 204.002987][ T1108] usb 3-1: config 0 descriptor?? [ 204.032856][ T4604] hub 2-1:0.0: bad descriptor, ignoring hub [ 204.049449][ T4604] hub: probe of 2-1:0.0 failed with error -5 [ 204.293520][ T4255] usb 3-1: USB disconnect, device number 8 [ 204.451473][ T4604] usb 2-1: USB disconnect, device number 7 [ 212.461301][ T6106] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaa [ 214.817930][ T6129] comedi comedi0: Minor 5 could not be opened [ 217.107149][ T6158] device syzkaller0 entered promiscuous mode [ 218.451988][ T6175] autofs4:pid:6175:autofs_fill_super: called with bogus options [ 218.469613][ T6177] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 218.961596][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 219.061685][ T4255] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 219.211690][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 219.401648][ T21] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 219.414909][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.436272][ T21] usb 2-1: config 0 has no interface number 0 [ 219.473909][ T21] usb 2-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.521878][ T4255] usb 5-1: unable to get BOS descriptor or descriptor too short [ 219.539443][ T4255] usb 5-1: no configurations [ 219.544650][ T4255] usb 5-1: can't read configurations, error -22 [ 219.661903][ T21] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 219.672976][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.681141][ T21] usb 2-1: Product: syz [ 219.696888][ T21] usb 2-1: Manufacturer: syz [ 219.707488][ T21] usb 2-1: SerialNumber: syz [ 220.582161][ T21] usb 2-1: config 0 descriptor?? [ 220.592500][ T6208] device syzkaller0 entered promiscuous mode [ 220.647113][ T21] plusb: probe of 2-1:0.231 failed with error -22 [ 220.733172][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 222.003560][ T4255] usb 2-1: USB disconnect, device number 8 [ 222.392139][ T6246] device syzkaller1 entered promiscuous mode [ 222.634718][ T6251] device syzkaller0 entered promiscuous mode [ 222.645273][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 225.531620][ T4248] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 225.587136][ T4255] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 225.784633][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 225.841821][ T4255] usb 3-1: Using ep0 maxpacket: 16 [ 225.962713][ T4255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.358790][ T4255] usb 3-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 226.378309][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.388320][ T4255] usb 3-1: config 0 descriptor?? [ 226.621794][ T4248] usb 1-1: Using ep0 maxpacket: 8 [ 226.689611][ T6306] device syzkaller0 entered promiscuous mode [ 226.761796][ T4248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.819044][ T4248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.830372][ T4248] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 226.906190][ T4248] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 227.053013][ T4255] apple 0003:05AC:021C.0001: unbalanced delimiter at end of report description [ 227.063621][ T4255] apple 0003:05AC:021C.0001: parse failed [ 227.069434][ T4255] apple: probe of 0003:05AC:021C.0001 failed with error -22 [ 227.080016][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.314754][ T4289] usb 3-1: USB disconnect, device number 9 [ 227.423301][ T4248] usb 1-1: config 0 descriptor?? [ 228.059652][ T6323] autofs4:pid:6323:autofs_fill_super: called with bogus options [ 228.280299][ T4248] logitech 0003:046D:C293.0002: nested delimiters [ 228.287196][ T4248] logitech 0003:046D:C293.0002: item 0 4 2 10 parsing failed [ 228.302120][ T4248] logitech 0003:046D:C293.0002: parse failed [ 228.309039][ T4248] logitech: probe of 0003:046D:C293.0002 failed with error -22 [ 228.699487][ T7] usb 1-1: USB disconnect, device number 7 [ 228.741796][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 229.536335][ T6336] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 229.544166][ T6336] netlink: 224 bytes leftover after parsing attributes in process `syz.1.551'. [ 232.310853][ T6368] autofs4:pid:6368:autofs_fill_super: called with bogus options [ 232.709471][ T4545] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 232.763842][ T6380] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 232.763842][ T6380] program syz.1.564 not setting count and/or reply_len properly [ 233.650647][ T4545] usb 5-1: Using ep0 maxpacket: 16 [ 234.121668][ T4545] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 234.130852][ T4545] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 234.192309][ T4545] usb 5-1: Product: syz [ 234.211667][ T4545] usb 5-1: Manufacturer: syz [ 234.216441][ T4545] usb 5-1: SerialNumber: syz [ 234.253301][ T4545] usb 5-1: config 0 descriptor?? [ 234.431816][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 234.711629][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 235.913933][ T13] usb 5-1: USB disconnect, device number 8 [ 236.042990][ T7] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 236.114093][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 236.492974][ T7] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 236.510830][ T7] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 236.524259][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.559361][ T6408] device syzkaller0 entered promiscuous mode [ 236.681759][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 236.731607][ T7] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 236.774629][ T7] usb 1-1: Product: syz [ 236.780727][ T6413] autofs4:pid:6413:autofs_fill_super: called with bogus options [ 236.788607][ T7] usb 1-1: Manufacturer: syz [ 236.793291][ T7] usb 1-1: SerialNumber: syz [ 236.802467][ T7] usb 1-1: config 0 descriptor?? [ 236.853111][ T7] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 237.050868][ T7] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 237.099338][ T7] usb 1-1: USB disconnect, device number 8 [ 237.111247][ T7] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 241.342297][ T6456] autofs4:pid:6456:autofs_fill_super: called with bogus options [ 241.447210][ T6458] tipc: Started in network mode [ 241.490129][ T6458] tipc: Node identity d2cb02edb425, cluster identity 4711 [ 241.504478][ T6458] tipc: Enabled bearer , priority 0 [ 241.773139][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 242.160973][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 242.876907][ T4545] tipc: Node number set to 1726874349 [ 242.887893][ T6458] tipc: Resetting bearer [ 242.960918][ T6457] tipc: Disabling bearer [ 243.217013][ T6472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.593'. [ 243.231585][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 244.780306][ T7] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 244.850057][ T6493] device wg1 entered promiscuous mode [ 245.132465][ T7] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 245.140881][ T7] usb 1-1: Product: syz [ 245.145304][ T7] usb 1-1: Manufacturer: syz [ 245.149897][ T7] usb 1-1: SerialNumber: syz [ 245.156660][ T7] usb 1-1: config 0 descriptor?? [ 245.252651][ T7] usb 1-1: can't set config #0, error -71 [ 245.259936][ T7] usb 1-1: USB disconnect, device number 9 [ 246.489780][ T6502] autofs4:pid:6502:autofs_fill_super: called with bogus options [ 249.261778][ T1108] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 250.411705][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 250.582711][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.981754][ T1108] usb 1-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 250.995579][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.006032][ T1108] usb 1-1: config 0 descriptor?? [ 253.235412][ T6548] autofs4:pid:6548:autofs_fill_super: called with bogus options [ 253.251718][ T1108] usbhid 1-1:0.0: can't add hid device: -71 [ 253.263612][ T1108] usbhid: probe of 1-1:0.0 failed with error -71 [ 253.279063][ T1108] usb 1-1: USB disconnect, device number 10 [ 255.551754][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.558065][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.976650][ T4234] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 257.013235][ T4234] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.574047][ T6606] autofs4:pid:6606:autofs_fill_super: called with bogus options [ 259.717861][ T6612] binder: 6611:6612 ioctl c0306201 0 returned -14 [ 260.225734][ T6627] overlayfs: failed to resolve './file1': -2 [ 261.088453][ T6624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.636'. [ 261.646019][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 264.765535][ T6664] autofs4:pid:6664:autofs_fill_super: called with bogus options [ 265.642410][ T6680] overlayfs: failed to resolve './file1': -2 [ 266.294341][ T4234] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.324935][ T4234] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 266.741698][ T4291] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 267.491668][ T4291] usb 4-1: Using ep0 maxpacket: 8 [ 267.612052][ T4291] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.712110][ T4291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.103163][ T4291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.157891][ T4291] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.175072][ T4291] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.187365][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.461737][ T4291] usb 4-1: GET_CAPABILITIES returned 0 [ 268.467246][ T4291] usbtmc 4-1:16.0: can't read capabilities [ 268.681633][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.691366][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.700434][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.709698][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.718769][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.727839][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.736989][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.746044][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.755310][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.764471][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.773986][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.783053][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.792109][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.801628][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.810691][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.819742][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 268.830062][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.699414][ T4291] usb 4-1: USB disconnect, device number 11 [ 269.767534][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.776111][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.325742][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.899528][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.591916][ T6697] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.601035][ T6697] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.610217][ T6697] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.619587][ T6697] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.732939][ T6705] tipc: Enabled bearer , priority 10 [ 271.854455][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 271.864711][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.662'. [ 272.723966][ T6728] tipc: Node number set to 553583249 [ 272.982328][ T6745] tipc: Enabled bearer , priority 0 [ 273.021377][ T6745] device syzkaller0 entered promiscuous mode [ 273.053056][ T6745] tipc: Resetting bearer [ 273.078461][ T6744] tipc: Resetting bearer [ 273.111026][ T6744] tipc: Disabling bearer [ 274.121720][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 274.371984][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 274.876658][ T7] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 274.891832][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.905078][ T7] usb 1-1: config 0 has no interface number 0 [ 275.216984][ T7] usb 1-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.252307][ T7] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 277.262164][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.274868][ T7] usb 1-1: config 0 descriptor?? [ 277.301673][ T7] usb 1-1: can't set config #0, error -71 [ 277.308797][ T7] usb 1-1: USB disconnect, device number 11 [ 281.165949][ T6807] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 281.490166][ T5468] Bluetooth: hci5: Frame reassembly failed (-84) [ 282.721695][ T4234] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 283.081689][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 283.247755][ T4234] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 283.288984][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.304126][ T4234] usb 5-1: config 0 has no interface number 0 [ 283.325296][ T4234] usb 5-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.541636][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 283.959899][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 285.234790][ T4234] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 285.255112][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.268965][ T4234] usb 5-1: Product: syz [ 285.297793][ T4234] usb 5-1: Manufacturer: syz [ 285.305775][ T4234] usb 5-1: SerialNumber: syz [ 285.337291][ T4234] usb 5-1: config 0 descriptor?? [ 285.371678][ T4234] usb 5-1: can't set config #0, error -71 [ 285.389796][ T4234] usb 5-1: USB disconnect, device number 9 [ 286.515002][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 286.521200][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 288.582129][ T4235] Bluetooth: hci5: command 0x1009 tx timeout [ 288.611755][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 288.901750][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 289.021844][ T7] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 289.038979][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.057470][ T7] usb 3-1: config 0 has no interface number 0 [ 289.068808][ T7] usb 3-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.241859][ T7] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 289.256473][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.265117][ T7] usb 3-1: Product: syz [ 289.269289][ T7] usb 3-1: Manufacturer: syz [ 289.280025][ T7] usb 3-1: SerialNumber: syz [ 289.299136][ T7] usb 3-1: config 0 descriptor?? [ 289.347037][ T7] plusb: probe of 3-1:0.231 failed with error -22 [ 290.337443][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 290.880818][ T3521] usb 3-1: USB disconnect, device number 10 [ 291.249860][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 292.558044][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.713'. [ 297.551714][ T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 297.812567][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 297.931825][ T21] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 298.065891][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 298.411447][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.529953][ T21] usb 5-1: config 0 has no interface number 0 [ 299.208171][ T21] usb 5-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.532224][ T21] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 300.013456][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.237668][ T21] usb 5-1: Product: syz [ 300.237823][ T21] usb 5-1: Manufacturer: syz [ 300.237973][ T21] usb 5-1: SerialNumber: syz [ 300.278190][ T21] usb 5-1: config 0 descriptor?? [ 300.292472][ T21] usb 5-1: can't set config #0, error -71 [ 300.295873][ T21] usb 5-1: USB disconnect, device number 10 [ 300.363428][ T6966] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 303.105556][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 303.112704][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 305.141723][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 305.158243][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 306.601752][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 307.101609][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 307.311704][ T4291] Bluetooth: hci5: command 0x1009 tx timeout [ 307.369193][ T21] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 307.608677][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.619624][ T21] usb 5-1: config 0 has no interface number 0 [ 307.626470][ T21] usb 5-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 307.953049][ T21] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 308.030886][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.048175][ T21] usb 5-1: Product: syz [ 308.070782][ T21] usb 5-1: Manufacturer: syz [ 308.085361][ T21] usb 5-1: SerialNumber: syz [ 308.109095][ T21] usb 5-1: config 0 descriptor?? [ 308.152801][ T21] plusb: probe of 5-1:0.231 failed with error -22 [ 308.257602][ T21] usb 5-1: USB disconnect, device number 11 [ 308.681700][ T21] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 308.991645][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 309.731679][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.747045][ T21] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 309.756941][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.767858][ T21] usb 5-1: config 0 descriptor?? [ 310.168732][ T7044] delete_channel: no stack [ 310.264847][ T21] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 310.272406][ T21] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 310.279740][ T21] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 310.287732][ T21] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 310.294897][ T21] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 310.304414][ T21] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 310.445850][ T4291] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 310.692395][ T4291] usb 1-1: Using ep0 maxpacket: 8 [ 310.709740][ T4235] usb 5-1: USB disconnect, device number 12 [ 311.571709][ T4291] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 311.589442][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.666546][ T4291] pvrusb2: Hardware description: Terratec Grabster AV400 [ 311.680178][ T4291] pvrusb2: ********** [ 311.687823][ T4291] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 311.699073][ T4291] pvrusb2: Important functionality might not be entirely working. [ 311.710946][ T4291] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 311.723997][ T4291] pvrusb2: ********** [ 311.963603][ T2421] pvrusb2: Invalid write control endpoint [ 312.028768][ T2421] pvrusb2: Invalid write control endpoint [ 312.037475][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 312.050534][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 312.059184][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 312.105469][ T2421] pvrusb2: Device being rendered inoperable [ 312.291758][ T7044] pvrusb2: Attempted to execute control transfer when device not ok [ 312.321738][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 312.329309][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 312.347557][ T4234] usb 1-1: USB disconnect, device number 12 [ 312.354323][ T2421] pvrusb2: Attached sub-driver cx25840 [ 312.371840][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 312.402333][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 313.351886][ T6728] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 313.500739][ T25] audit: type=1326 audit(1755067847.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 313.568541][ T7084] xt_hashlimit: max too large, truncated to 1048576 [ 313.644922][ T25] audit: type=1326 audit(1755067847.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 313.736382][ T25] audit: type=1326 audit(1755067847.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 314.707771][ T6728] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.715064][ T7090] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 314.717831][ T6728] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.897848][ T5465] Bluetooth: hci5: Frame reassembly failed (-84) [ 315.142389][ T6728] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 315.163430][ T6728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.207529][ T6728] usb 4-1: SerialNumber: syz [ 315.216438][ T25] audit: type=1326 audit(1755067847.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 315.271098][ T25] audit: type=1326 audit(1755067847.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 315.300133][ T6728] cdc_ether 4-1:1.0: skipping garbage [ 315.306788][ T6728] usb 4-1: bad CDC descriptors [ 315.312551][ T6728] usb-storage 4-1:1.0: USB Mass Storage device detected [ 315.320965][ T25] audit: type=1326 audit(1755067847.450:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1edddf4550 code=0x7ffc0000 [ 315.346011][ T25] audit: type=1326 audit(1755067847.450:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 315.417576][ T6728] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 316.950503][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.103222][ T4291] Bluetooth: hci5: command 0x1003 tx timeout [ 317.109303][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.119871][ T25] audit: type=1326 audit(1755067847.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 317.153190][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 317.683031][ T6728] usb 4-1: USB disconnect, device number 12 [ 317.882020][ T25] audit: type=1326 audit(1755067847.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 318.489642][ T25] audit: type=1326 audit(1755067847.450:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 318.540672][ T25] audit: type=1326 audit(1755067847.450:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 318.596442][ T25] audit: type=1326 audit(1755067847.450:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 318.644048][ T25] audit: type=1326 audit(1755067847.450:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 318.746620][ T25] audit: type=1326 audit(1755067847.450:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 319.235883][ T4262] Bluetooth: hci5: command 0x1001 tx timeout [ 319.246838][ T25] audit: type=1326 audit(1755067847.450:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 319.279274][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 319.360318][ T25] audit: type=1326 audit(1755067847.450:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 319.437536][ T7131] tipc: Enabled bearer , priority 0 [ 319.477413][ T7131] device syzkaller0 entered promiscuous mode [ 319.485120][ T25] audit: type=1326 audit(1755067847.450:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 319.639853][ T7131] tipc: Resetting bearer [ 319.659235][ T25] audit: type=1326 audit(1755067847.450:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 319.703426][ T7130] tipc: Resetting bearer [ 319.732577][ T7130] tipc: Disabling bearer [ 319.746795][ T25] audit: type=1326 audit(1755067847.450:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 319.811370][ T25] audit: type=1326 audit(1755067847.450:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 320.337350][ T7137] overlayfs: failed to resolve './file0': -2 [ 321.476414][ T6728] Bluetooth: hci5: command 0x1009 tx timeout [ 329.423596][ T4291] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 329.989284][ T7243] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 329.996700][ T7243] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 330.011704][ T7243] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 330.041321][ T7243] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 330.055221][ T7243] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 330.063096][ T7243] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 330.069915][ T7243] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 330.080948][ T7243] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 330.096590][ T7243] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 330.104805][ T7243] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 330.111388][ T7243] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 330.124839][ T7243] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 330.134087][ T7243] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 330.145763][ T7243] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 330.221692][ T4291] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.237608][ T4291] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.347680][ T1108] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 331.561719][ T4291] usb 2-1: string descriptor 0 read error: -71 [ 331.572676][ T4291] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.666971][ T4291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.711873][ T4291] usb 2-1: can't set config #1, error -71 [ 331.726135][ T4291] usb 2-1: USB disconnect, device number 9 [ 331.791908][ T1108] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 331.816224][ T1108] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.992446][ T1108] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 332.009569][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 332.387473][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 332.406825][ T1108] usb 5-1: SerialNumber: syz [ 332.577081][ T1108] cdc_ether 5-1:1.0: skipping garbage [ 332.605064][ T1108] usb 5-1: bad CDC descriptors [ 332.679767][ T1108] usb-storage 5-1:1.0: USB Mass Storage device detected [ 332.700437][ T1108] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 333.385584][ T21] usb 5-1: USB disconnect, device number 13 [ 335.037235][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 335.481938][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.555069][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.651671][ T1108] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 335.751888][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 335.767861][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 335.783743][ T21] usb 4-1: SerialNumber: syz [ 336.141739][ T1108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.194846][ T1108] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.252213][ T21] usb 4-1: skipping empty audio interface (v1) [ 336.416960][ T1108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 336.417215][ T21] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 336.461174][ T21] usb 4-1: USB disconnect, device number 13 [ 336.474960][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 336.497089][ T1108] usb 2-1: SerialNumber: syz [ 336.498488][ T7323] kvm: MWAIT instruction emulated as NOP! [ 336.567158][ T1108] cdc_ether 2-1:1.0: skipping garbage [ 336.585639][ T1108] usb 2-1: bad CDC descriptors [ 336.606326][ T1108] usb-storage 2-1:1.0: USB Mass Storage device detected [ 336.850925][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 337.217694][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.439796][ T1108] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 338.074047][ T3521] usb 2-1: USB disconnect, device number 10 [ 338.563049][ T7344] tipc: Started in network mode [ 338.568939][ T7344] tipc: Node identity 8e54168e472, cluster identity 4711 [ 338.737405][ T7344] tipc: Enabled bearer , priority 0 [ 338.775524][ T7344] device syzkaller0 entered promiscuous mode [ 338.819658][ T7344] tipc: Resetting bearer [ 338.845763][ T7339] tipc: Resetting bearer [ 338.870230][ T7339] tipc: Disabling bearer [ 339.965275][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 340.691604][ T4234] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 340.878367][ T7383] tipc: Started in network mode [ 340.883445][ T7383] tipc: Node identity 6eadbe42fed8, cluster identity 4711 [ 340.891346][ T7383] tipc: Enabled bearer , priority 0 [ 340.912585][ T7383] device syzkaller0 entered promiscuous mode [ 340.927709][ T7383] tipc: Resetting bearer [ 340.938311][ T7382] tipc: Resetting bearer [ 340.949747][ T7382] tipc: Disabling bearer [ 341.067205][ T4234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.080104][ T4234] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.194610][ T4234] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 341.208691][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 341.221985][ T4234] usb 3-1: SerialNumber: syz [ 341.276486][ T4234] usb 3-1: 0:2 : does not exist [ 341.444716][ T7253] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 341.625571][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 341.625581][ T25] audit: type=1326 audit(1755067875.570:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28981eabe9 code=0x7fc00000 [ 341.729692][ T4234] usb 3-1: USB disconnect, device number 11 [ 342.401808][ T7253] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 342.796035][ T610] Bluetooth: hci5: Frame reassembly failed (-84) [ 342.847927][ T610] Bluetooth: hci5: Frame reassembly failed (-84) [ 342.859674][ T7253] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.968799][ T7404] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 343.060778][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 343.757222][ T7253] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 343.766951][ T7253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 343.779137][ T7253] usb 1-1: SerialNumber: syz [ 343.832562][ T7253] cdc_ether 1-1:1.0: skipping garbage [ 343.840542][ T7253] usb 1-1: bad CDC descriptors [ 343.854507][ T7253] usb-storage 1-1:1.0: USB Mass Storage device detected [ 343.962136][ T7253] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 344.657378][ T7427] tipc: Enabled bearer , priority 0 [ 344.670253][ T7253] usb 1-1: USB disconnect, device number 13 [ 344.673841][ T7427] device syzkaller0 entered promiscuous mode [ 344.694179][ T7427] tipc: Resetting bearer [ 344.728364][ T7426] tipc: Resetting bearer [ 344.742157][ T3521] Bluetooth: hci5: command 0x1003 tx timeout [ 344.750284][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 344.781426][ T7426] tipc: Disabling bearer [ 345.697857][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 346.251868][ T4262] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 346.762896][ T4262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.788076][ T4262] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.799334][ T25] audit: type=1326 audit(1755067880.750:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.3.870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84f5a58be9 code=0x0 [ 346.908479][ T3521] Bluetooth: hci5: command 0x1001 tx timeout [ 346.917637][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 346.935200][ T7469] nvme_fabrics: missing parameter 'transport=%s' [ 346.947325][ T7469] nvme_fabrics: missing parameter 'nqn=%s' [ 346.992967][ T4262] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 347.005090][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 347.013641][ T4262] usb 3-1: SerialNumber: syz [ 347.508836][ T4262] cdc_ether 3-1:1.0: skipping garbage [ 347.514600][ T4262] usb 3-1: bad CDC descriptors [ 347.523860][ T4262] usb-storage 3-1:1.0: USB Mass Storage device detected [ 347.690795][ T4262] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 348.061114][ T7253] usb 3-1: USB disconnect, device number 12 [ 348.431716][ T4255] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 348.511759][ T4291] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 348.804100][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 348.991914][ T4604] Bluetooth: hci5: command 0x1009 tx timeout [ 349.379628][ T25] audit: type=1326 audit(1755067883.330:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 349.402448][ T4291] usb 1-1: Using ep0 maxpacket: 16 [ 349.438946][ T25] audit: type=1326 audit(1755067883.360:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 349.509344][ T4255] usb 4-1: config 0 has no interfaces? [ 349.541352][ T25] audit: type=1326 audit(1755067883.370:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 349.565122][ T25] audit: type=1326 audit(1755067883.370:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 349.673263][ T4291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.684791][ T4291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.694938][ T4291] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 349.704463][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.715459][ T4291] usb 1-1: config 0 descriptor?? [ 349.722002][ T25] audit: type=1326 audit(1755067883.370:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 349.744467][ T25] audit: type=1326 audit(1755067883.370:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 349.771252][ T25] audit: type=1326 audit(1755067883.370:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 349.794036][ T25] audit: type=1326 audit(1755067883.370:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 349.816540][ T25] audit: type=1326 audit(1755067883.370:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 349.841676][ T4604] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 349.851782][ T4255] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 349.875266][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.902067][ T4255] usb 4-1: Product: syz [ 349.912419][ T4255] usb 4-1: Manufacturer: syz [ 349.930652][ T4255] usb 4-1: SerialNumber: syz [ 349.960224][ T4255] usb 4-1: config 0 descriptor?? [ 350.121592][ T4604] usb 3-1: Using ep0 maxpacket: 32 [ 350.194315][ T4291] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 350.221424][ T4291] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 350.242973][ T7489] udc-core: couldn't find an available UDC or it's busy [ 350.247987][ T4291] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 350.257375][ T7489] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 350.258400][ T4291] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 350.265306][ T4604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.273132][ T4291] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 350.299076][ T4291] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 350.323184][ T4604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.361280][ T4604] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.374155][ T7489] block device autoloading is deprecated and will be removed. [ 350.374362][ T7492] netlink: 92 bytes leftover after parsing attributes in process `syz.3.874'. [ 350.401150][ T4604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.411817][ T4291] corsair 0003:1B1C:1B02.0006: Failed to get K90 initial state (error -71). [ 350.418807][ T4604] usb 3-1: config 0 descriptor?? [ 350.431842][ T4291] usb 1-1: USB disconnect, device number 14 [ 350.484408][ T4604] hub 3-1:0.0: USB hub found [ 350.521244][ T7509] fido_id[7509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 350.701878][ T4604] hub 3-1:0.0: 1 port detected [ 351.451916][ T4604] hub 3-1:0.0: activate --> -90 [ 351.533712][ T4291] usb 4-1: USB disconnect, device number 14 [ 351.732597][ T3521] usb 3-1: USB disconnect, device number 13 [ 351.752100][ T4604] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 352.511612][ T4291] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 352.871881][ T1108] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 352.931859][ T4291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.977919][ T4291] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.195490][ T4291] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 353.204985][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.221789][ T4291] usb 4-1: SerialNumber: syz [ 353.610565][ T4291] usb 4-1: 0:2 : does not exist [ 353.652032][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.120153][ T1108] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 354.151196][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.218997][ T1108] usb 5-1: config 0 descriptor?? [ 354.303766][ T1108] pwc: Askey VC010 type 2 USB webcam detected. [ 354.337885][ T7581] vcan0: tx drop: invalid sa for name 0x0000000000010000 [ 354.361042][ T3521] usb 4-1: USB disconnect, device number 15 [ 354.761670][ T1108] pwc: recv_control_msg error -32 req 02 val 2b00 [ 354.814395][ T1108] pwc: recv_control_msg error -32 req 02 val 2700 [ 354.871875][ T1108] pwc: recv_control_msg error -32 req 02 val 2c00 [ 354.921744][ T1108] pwc: recv_control_msg error -32 req 04 val 1000 [ 354.964920][ T1108] pwc: recv_control_msg error -32 req 04 val 1300 [ 355.021719][ T1108] pwc: recv_control_msg error -32 req 04 val 1400 [ 355.031604][ T4604] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 355.066508][ T1108] pwc: recv_control_msg error -32 req 02 val 2000 [ 355.071909][ T4262] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 355.291687][ T4604] usb 3-1: Using ep0 maxpacket: 8 [ 355.411872][ T4604] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 355.428130][ T4604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 355.451832][ T4262] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.682393][ T4262] usb 1-1: config 0 has no interface number 0 [ 355.693121][ T4604] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 355.703334][ T4604] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.703886][ T1108] pwc: recv_control_msg error -71 req 04 val 1500 [ 355.782108][ T1108] pwc: recv_control_msg error -71 req 02 val 2500 [ 355.811748][ T1108] pwc: recv_control_msg error -71 req 02 val 2400 [ 355.854369][ T1108] pwc: recv_control_msg error -71 req 02 val 2600 [ 355.911751][ T1108] pwc: recv_control_msg error -71 req 02 val 2900 [ 355.922312][ T4604] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 355.931586][ T4262] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 355.954488][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.966329][ T4604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.992168][ T4262] usb 1-1: Product: syz [ 355.998649][ T4604] usb 3-1: Product: syz [ 356.001650][ T1108] pwc: recv_control_msg error -71 req 02 val 2800 [ 356.012223][ T4262] usb 1-1: Manufacturer: syz [ 356.017132][ T4604] usb 3-1: Manufacturer: syz [ 356.031097][ T4262] usb 1-1: SerialNumber: syz [ 356.037370][ T4604] usb 3-1: SerialNumber: syz [ 356.051706][ T1108] pwc: recv_control_msg error -71 req 04 val 1100 [ 356.084488][ T1108] pwc: recv_control_msg error -71 req 04 val 1200 [ 356.091171][ T4262] usb 1-1: config 0 descriptor?? [ 356.101832][ T7593] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 356.142602][ T4604] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 356.160471][ T4604] usbtest 3-1:1.0: Linux user mode ISO test driver [ 356.169705][ T4604] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 356.223321][ T1108] pwc: Registered as video103. [ 356.241741][ T1108] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 356.307454][ T1108] usb 5-1: USB disconnect, device number 14 [ 356.359789][ T6728] usb 3-1: USB disconnect, device number 14 [ 356.858380][ T4262] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 356.920903][ T4262] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.956095][ T4262] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 356.980086][ T4262] usb 1-1: media controller created [ 357.102724][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.194818][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 358.111366][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 358.193744][ T7630] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 358.831781][ T4262] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 358.890574][ T5468] Bluetooth: hci5: Frame reassembly failed (-84) [ 358.929971][ T5468] Bluetooth: hci5: Frame reassembly failed (-84) [ 359.419539][ T4262] usb 1-1: USB disconnect, device number 15 [ 360.178323][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 360.987654][ T6728] Bluetooth: hci5: command 0x1003 tx timeout [ 360.997171][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 362.312202][ T7695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.319947][ T7695] IPv6: NLM_F_CREATE should be set when creating new route [ 362.446961][ T7710] netlink: 600 bytes leftover after parsing attributes in process `syz.4.939'. [ 362.678490][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 362.688028][ T1108] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 363.061876][ T6728] Bluetooth: hci5: command 0x1001 tx timeout [ 363.070467][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 363.152113][ T4262] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 363.472278][ T4262] usb 1-1: Using ep0 maxpacket: 32 [ 363.931730][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.947507][ T1108] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 363.957056][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.048144][ T4262] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 364.060119][ T4262] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.068394][ T1108] usb 2-1: config 0 descriptor?? [ 364.081640][ T4262] usb 1-1: config 0 has no interface number 0 [ 364.087850][ T4262] usb 1-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 364.123617][ T1108] pwc: Askey VC010 type 2 USB webcam detected. [ 364.256595][ T4262] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 364.271719][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.286304][ T4262] usb 1-1: Product: syz [ 364.379853][ T4262] usb 1-1: Manufacturer: syz [ 364.384839][ T4262] usb 1-1: SerialNumber: syz [ 364.400911][ T4262] usb 1-1: config 0 descriptor?? [ 364.442331][ T4262] plusb: probe of 1-1:0.231 failed with error -22 [ 364.541813][ T1108] pwc: recv_control_msg error -32 req 02 val 2b00 [ 364.581707][ T1108] pwc: recv_control_msg error -32 req 02 val 2700 [ 364.621706][ T1108] pwc: recv_control_msg error -32 req 02 val 2c00 [ 364.661673][ T1108] pwc: recv_control_msg error -32 req 04 val 1000 [ 364.701630][ T1108] pwc: recv_control_msg error -32 req 04 val 1300 [ 364.751687][ T1108] pwc: recv_control_msg error -32 req 04 val 1400 [ 364.795576][ T1108] pwc: recv_control_msg error -32 req 02 val 2000 [ 364.841653][ T1108] pwc: recv_control_msg error -32 req 02 val 2100 [ 365.096978][ T1108] pwc: recv_control_msg error -71 req 02 val 2500 [ 365.126644][ T1108] pwc: recv_control_msg error -71 req 02 val 2400 [ 365.141769][ T4262] Bluetooth: hci5: command 0x1009 tx timeout [ 365.319954][ T1108] pwc: recv_control_msg error -71 req 02 val 2600 [ 365.371861][ T1108] pwc: recv_control_msg error -71 req 02 val 2900 [ 365.392153][ T1108] pwc: recv_control_msg error -71 req 02 val 2800 [ 365.432273][ T1108] pwc: recv_control_msg error -71 req 04 val 1100 [ 365.462234][ T1108] pwc: recv_control_msg error -71 req 04 val 1200 [ 365.489951][ T1108] pwc: Registered as video103. [ 365.533434][ T1108] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 365.615371][ T1108] usb 2-1: USB disconnect, device number 11 [ 365.801959][ T4255] usb 1-1: USB disconnect, device number 16 [ 368.431664][ T6728] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 368.991797][ T6728] usb 3-1: Using ep0 maxpacket: 32 [ 369.111770][ T6728] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 369.130388][ T6728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.164714][ T6728] usb 3-1: config 0 has no interface number 0 [ 369.193411][ T6728] usb 3-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.412414][ T6728] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 369.424465][ T6728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.432963][ T6728] usb 3-1: Product: syz [ 369.437227][ T6728] usb 3-1: Manufacturer: syz [ 369.444709][ T6728] usb 3-1: SerialNumber: syz [ 369.451423][ T6728] usb 3-1: config 0 descriptor?? [ 369.492518][ T6728] plusb: probe of 3-1:0.231 failed with error -22 [ 371.011018][ T4262] usb 3-1: USB disconnect, device number 15 [ 371.471760][ T4262] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 371.722000][ T4262] usb 3-1: Using ep0 maxpacket: 32 [ 371.852346][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.871707][ T7253] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 371.883859][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.970981][ T4262] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 372.014173][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.052494][ T4262] usb 3-1: config 0 descriptor?? [ 372.113483][ T4262] hub 3-1:0.0: USB hub found [ 372.121688][ T7253] usb 5-1: Using ep0 maxpacket: 32 [ 372.241738][ T7253] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 372.331923][ T7253] usb 5-1: config 0 has no interface number 0 [ 372.338277][ T7253] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 372.349293][ T7253] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 372.360765][ T7253] usb 5-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 372.376534][ T7253] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.391930][ T4262] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 372.396519][ T7253] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.574871][ T7253] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 372.590976][ T7253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.619069][ T7253] usb 5-1: Product: syz [ 372.635792][ T7253] usb 5-1: Manufacturer: syz [ 372.649645][ T7253] usb 5-1: SerialNumber: syz [ 372.675713][ T7253] usb 5-1: config 0 descriptor?? [ 372.712061][ T7903] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 372.732716][ T7253] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 372.971674][ T4262] usbhid 3-1:0.0: can't add hid device: -71 [ 372.977782][ T4262] usbhid: probe of 3-1:0.0 failed with error -71 [ 373.024469][ T4262] usb 3-1: USB disconnect, device number 16 [ 373.130611][ T4255] usb 5-1: USB disconnect, device number 15 [ 373.194473][ T7962] netlink: 'syz.2.996': attribute type 2 has an invalid length. [ 373.611612][ T4255] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 373.851646][ T4255] usb 2-1: Using ep0 maxpacket: 32 [ 374.001821][ T4255] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 374.022043][ T4255] usb 2-1: config 0 has no interface number 0 [ 374.049313][ T4255] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 374.074671][ T4255] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 374.099480][ T4255] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 374.123775][ T4255] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 374.149478][ T4255] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 374.178073][ T4255] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.364480][ T4255] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 374.386084][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.410266][ T4255] usb 2-1: Product: syz [ 374.420953][ T4255] usb 2-1: Manufacturer: syz [ 374.459603][ T4255] usb 2-1: SerialNumber: syz [ 374.508664][ T4255] usb 2-1: config 0 descriptor?? [ 374.551967][ T7967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 374.559157][ T7967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 374.756951][ T4255] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 374.816499][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 374.917302][ T4255] usb 2-1: USB disconnect, device number 12 [ 375.290941][ T8003] netlink: set zone limit has 8 unknown bytes [ 377.541643][ T4255] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 377.801676][ T4255] usb 2-1: Using ep0 maxpacket: 8 [ 377.937141][ T4255] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 377.961605][ T4255] usb 2-1: config 0 has no interface number 0 [ 378.010177][ T4255] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 378.058800][ T4255] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 378.089008][ T8038] tipc: Enabled bearer , priority 0 [ 378.100644][ T4255] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 378.120106][ T8038] device syzkaller0 entered promiscuous mode [ 378.136502][ T4255] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 378.150090][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.174307][ T4255] usb 2-1: config 0 descriptor?? [ 378.182870][ T8038] tipc: Resetting bearer [ 378.213109][ T4255] ldusb 2-1:0.55: Interrupt in endpoint not found [ 378.251139][ T8036] tipc: Resetting bearer [ 378.270789][ T8036] tipc: Disabling bearer [ 378.291038][ T8050] device team_slave_0 entered promiscuous mode [ 378.297719][ T8050] device team_slave_1 entered promiscuous mode [ 378.304882][ T8050] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 378.316942][ T8050] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 378.344229][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.350586][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.452062][ T6728] usb 2-1: USB disconnect, device number 13 [ 378.649811][ T3521] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 379.584902][ T3521] usb 1-1: Using ep0 maxpacket: 32 [ 379.721837][ T3521] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 379.780184][ T3521] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.790854][ T3521] usb 1-1: config 0 has no interface number 0 [ 379.800973][ T3521] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 380.180306][ T7253] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 380.605511][ T3521] usb 1-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 380.811805][ T3521] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 380.821158][ T3521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.836922][ T7253] usb 2-1: Using ep0 maxpacket: 32 [ 380.841463][ T3521] usb 1-1: Product: syz [ 380.846601][ T3521] usb 1-1: Manufacturer: syz [ 380.851197][ T3521] usb 1-1: SerialNumber: syz [ 380.868416][ T3521] usb 1-1: config 0 descriptor?? [ 380.891900][ T8048] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 380.981859][ T7253] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 381.010661][ T7253] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.033668][ T7253] usb 2-1: config 0 has no interface number 0 [ 381.050008][ T7253] usb 2-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.391852][ T7253] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 381.401309][ T7253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.409818][ T7253] usb 2-1: Product: syz [ 381.415670][ T7253] usb 2-1: Manufacturer: syz [ 381.420462][ T7253] usb 2-1: SerialNumber: syz [ 381.436520][ T7253] usb 2-1: config 0 descriptor?? [ 381.441706][ T3521] usb 1-1: probing VID:PID(0424:012C) [ 381.448448][ T3521] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0B [ 381.461699][ T3521] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 381.483525][ T7253] plusb: probe of 2-1:0.231 failed with error -22 [ 381.553205][ T3521] vub300: probe of 1-1:0.133 failed with error -22 [ 381.587066][ T3521] usb 1-1: USB disconnect, device number 17 [ 381.958351][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 382.137672][ T8092] tipc: Enabled bearer , priority 0 [ 382.203029][ T8094] device syzkaller0 entered promiscuous mode [ 382.743816][ T4291] usb 2-1: USB disconnect, device number 14 [ 382.788851][ T8092] tipc: Resetting bearer [ 382.881904][ T8091] tipc: Resetting bearer [ 382.898783][ T8091] tipc: Disabling bearer [ 383.301692][ T3521] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 383.748618][ T3521] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.795336][ T3521] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 383.847099][ T3521] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 383.871575][ T3521] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 383.902631][ T3521] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 384.061792][ T3521] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.084244][ T3521] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.093192][ T3521] usb 2-1: Product: syz [ 384.097371][ T3521] usb 2-1: Manufacturer: syz [ 384.152612][ T3521] cdc_wdm 2-1:1.0: skipping garbage [ 384.157848][ T3521] cdc_wdm 2-1:1.0: skipping garbage [ 384.176054][ T3521] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 384.185797][ T3521] cdc_wdm 2-1:1.0: Unknown control protocol [ 384.671664][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 384.672367][ T3521] usb 2-1: USB disconnect, device number 15 [ 384.679874][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 384.690694][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 384.696906][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 384.705910][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.032428][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 386.273449][ T4604] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 386.522430][ T4604] usb 4-1: Using ep0 maxpacket: 32 [ 386.641804][ T4604] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 386.826916][ T4604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.859485][ T4604] usb 4-1: config 0 has no interface number 0 [ 386.866267][ T4604] usb 4-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 387.061824][ T4604] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 387.089428][ T4604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.148605][ T4604] usb 4-1: Product: syz [ 387.164218][ T4604] usb 4-1: Manufacturer: syz [ 387.186460][ T4604] usb 4-1: SerialNumber: syz [ 387.216567][ T4604] usb 4-1: config 0 descriptor?? [ 387.283309][ T4604] plusb: probe of 4-1:0.231 failed with error -22 [ 388.541293][ T4604] usb 4-1: USB disconnect, device number 16 [ 389.011916][ T4604] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 390.708031][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 390.751608][ T4604] usb 4-1: Using ep0 maxpacket: 32 [ 390.901801][ T4604] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 390.923295][ T4604] usb 4-1: config 0 has no interface number 0 [ 390.929845][ T4604] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 391.242006][ T4604] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 391.256728][ T4604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.287247][ T4604] usb 4-1: Product: syz [ 391.309501][ T4604] usb 4-1: Manufacturer: syz [ 391.318259][ T4604] usb 4-1: SerialNumber: syz [ 391.342726][ T4604] usb 4-1: config 0 descriptor?? [ 391.384090][ T4604] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 391.407819][ T4604] em28xx 4-1:0.132: Video interface 132 found: [ 391.431710][ T7253] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 391.771807][ T7253] usb 5-1: Using ep0 maxpacket: 8 [ 392.391935][ T4604] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 392.491706][ T7253] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 392.515371][ T7253] usb 5-1: config 0 interface 0 has no altsetting 0 [ 392.522259][ T1108] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 392.791778][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 392.852215][ T7253] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 392.879683][ T7253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.933349][ T7253] usb 5-1: Product: syz [ 392.937587][ T7253] usb 5-1: Manufacturer: syz [ 392.951993][ T1108] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 392.960322][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.052513][ T7253] usb 5-1: SerialNumber: syz [ 393.072092][ T1108] usb 2-1: config 0 has no interface number 0 [ 393.178588][ T7253] usb 5-1: config 0 descriptor?? [ 393.183867][ T1108] usb 2-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.191628][ T4604] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 393.846891][ T7253] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 393.854092][ T4604] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 393.964693][ T1108] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 393.971590][ T4604] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 393.984969][ T4604] em28xx 4-1:0.132: analog set to bulk mode. [ 394.006671][ T4604] usb 4-1: USB disconnect, device number 17 [ 394.016130][ T4234] em28xx 4-1:0.132: Registering V4L2 extension [ 394.023835][ T4604] em28xx 4-1:0.132: Disconnecting em28xx [ 394.032759][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.056879][ T1108] usb 2-1: Product: syz [ 394.061070][ T1108] usb 2-1: Manufacturer: syz [ 394.197638][ T1108] usb 2-1: SerialNumber: syz [ 394.239901][ T1108] usb 2-1: config 0 descriptor?? [ 394.324281][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 395.032607][ T1108] usb 2-1: can't set config #0, error -71 [ 395.040086][ T1108] usb 2-1: USB disconnect, device number 16 [ 395.387485][ T4234] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 395.400984][ T4234] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 396.061648][ T4234] em28xx 4-1:0.132: No AC97 audio processor [ 396.116881][ T4234] usb 4-1: Decoder not found [ 396.131626][ T4234] em28xx 4-1:0.132: failed to create media graph [ 396.141227][ T4234] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 396.201341][ T4234] em28xx 4-1:0.132: Remote control support is not available for this card. [ 396.221904][ T4604] em28xx 4-1:0.132: Closing input extension [ 396.358446][ T4604] em28xx 4-1:0.132: Freeing device [ 396.681750][ T7253] snd_usb_toneport 5-1:0.0: set_interface failed [ 396.694400][ T7253] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 396.720916][ T7253] snd_usb_toneport: probe of 5-1:0.0 failed with error -71 [ 396.780428][ T7253] usb 5-1: USB disconnect, device number 16 [ 396.813522][ T8260] tipc: Enabled bearer , priority 0 [ 396.845552][ T8260] device syzkaller0 entered promiscuous mode [ 396.894481][ T8260] tipc: Resetting bearer [ 396.907474][ T8259] tipc: Resetting bearer [ 396.938585][ T8259] tipc: Disabling bearer [ 397.081607][ T4255] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 397.108042][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 397.108066][ T25] audit: type=1326 audit(1755067931.064:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 397.158776][ T8262] can: request_module (can-proto-0) failed. [ 397.204443][ T25] audit: type=1326 audit(1755067931.064:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 397.281651][ T25] audit: type=1326 audit(1755067931.094:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 397.382515][ T25] audit: type=1326 audit(1755067931.094:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 397.411580][ T7253] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 397.435797][ T25] audit: type=1326 audit(1755067931.094:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1edddf5be9 code=0x7ffc0000 [ 397.553365][ T4255] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 397.561932][ T4255] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 397.572216][ T4255] usb 2-1: config 4 has no interface number 0 [ 397.578683][ T4255] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 398.361906][ T7253] usb 1-1: Using ep0 maxpacket: 16 [ 398.377042][ T4255] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 398.386610][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.405728][ T4255] usb 2-1: Product: syz [ 398.409916][ T4255] usb 2-1: Manufacturer: syz [ 398.446278][ T4255] usb 2-1: SerialNumber: syz [ 398.482035][ T7253] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.507908][ T7253] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.291898][ T4255] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 399.302736][ T4255] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 399.322062][ T4255] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 399.329049][ T4255] usb 2-1: media controller created [ 399.339853][ T4255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.376648][ T7253] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.402189][ T7253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.410205][ T7253] usb 1-1: Product: syz [ 399.451801][ T7253] usb 1-1: Manufacturer: syz [ 399.456658][ T7253] usb 1-1: SerialNumber: syz [ 399.466396][ T4255] DVB: Unable to find symbol dib7000p_attach() [ 399.473263][ T4255] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 399.536164][ T8294] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 399.622155][ T4255] rc_core: IR keymap rc-dib0700-rc5 not found [ 399.636756][ T4255] Registered IR keymap rc-empty [ 399.649652][ T4255] dvb-usb: could not initialize remote control. [ 399.658652][ T4255] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 399.701666][ T8300] tipc: Started in network mode [ 399.706925][ T8300] tipc: Node identity 5efcc84aa48a, cluster identity 4711 [ 399.714345][ T8300] tipc: Enabled bearer , priority 0 [ 399.726774][ T8300] device syzkaller0 entered promiscuous mode [ 399.736513][ T4255] usb 2-1: USB disconnect, device number 17 [ 399.747824][ T4255] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 399.774148][ T8300] tipc: Resetting bearer [ 399.781374][ T8299] tipc: Resetting bearer [ 399.795111][ T8299] tipc: Disabling bearer [ 399.801907][ T7253] usb 1-1: 0:2 : does not exist [ 399.856870][ T7253] usb 1-1: USB disconnect, device number 18 [ 400.904239][ T8323] overlayfs: failed to resolve './file0': -2 [ 401.267338][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 401.961714][ T21] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 402.281626][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 403.082112][ T21] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 403.091362][ T21] usb 1-1: config 0 has no interface number 0 [ 403.102783][ T21] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 403.592173][ T21] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 403.626533][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.646746][ T21] usb 1-1: Product: syz [ 403.650938][ T21] usb 1-1: Manufacturer: syz [ 403.673678][ T8377] overlayfs: failed to resolve './file0': -2 [ 403.695650][ T21] usb 1-1: SerialNumber: syz [ 403.718001][ T21] usb 1-1: config 0 descriptor?? [ 403.732801][ T8379] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 403.739347][ T8379] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 403.761869][ T8379] vhci_hcd vhci_hcd.0: Device attached [ 403.779015][ T8380] vhci_hcd: connection closed [ 403.789319][ T4553] vhci_hcd: stop threads [ 403.793936][ T21] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 403.808409][ T4553] vhci_hcd: release socket [ 403.821585][ T4553] vhci_hcd: disconnect device [ 403.838796][ T21] em28xx 1-1:0.132: Video interface 132 found: [ 404.901787][ T21] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 405.631569][ T21] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 405.639432][ T21] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 405.879137][ T8411] tipc: Enabled bearer , priority 0 [ 405.885953][ T21] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 405.896282][ T8411] device syzkaller0 entered promiscuous mode [ 405.902525][ T21] em28xx 1-1:0.132: analog set to bulk mode. [ 405.931449][ T21] usb 1-1: USB disconnect, device number 19 [ 405.958345][ T21] em28xx 1-1:0.132: Disconnecting em28xx [ 405.970115][ T3521] em28xx 1-1:0.132: Registering V4L2 extension [ 405.984171][ T8410] tipc: Resetting bearer [ 406.005511][ T8410] tipc: Disabling bearer [ 406.998064][ T8427] overlayfs: failed to resolve './file0': -2 [ 407.556274][ T3521] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 407.566215][ T3521] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 407.596263][ T3521] em28xx 1-1:0.132: No AC97 audio processor [ 407.627211][ T3521] usb 1-1: Decoder not found [ 407.636530][ T3521] em28xx 1-1:0.132: failed to create media graph [ 407.653469][ T3521] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 407.693589][ T3521] em28xx 1-1:0.132: Remote control support is not available for this card. [ 407.718818][ T21] em28xx 1-1:0.132: Closing input extension [ 407.738892][ T21] em28xx 1-1:0.132: Freeing device [ 408.881755][ T7253] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 409.902139][ T7253] usb 4-1: Using ep0 maxpacket: 32 [ 410.022007][ T7253] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 410.031145][ T7253] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.044369][ T7253] usb 4-1: config 0 has no interface number 0 [ 410.050937][ T7253] usb 4-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 410.242218][ T7253] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 410.501348][ T7253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.524755][ T7253] usb 4-1: Product: syz [ 410.529001][ T7253] usb 4-1: Manufacturer: syz [ 410.536035][ T7253] usb 4-1: SerialNumber: syz [ 410.542898][ T7253] usb 4-1: config 0 descriptor?? [ 410.592666][ T7253] plusb: probe of 4-1:0.231 failed with error -22 [ 411.165939][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1149'. [ 412.056935][ T4255] usb 4-1: USB disconnect, device number 18 [ 415.269626][ T8552] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 415.397605][ T8552] kvm: pic: non byte read [ 415.411620][ T8552] kvm: pic: level sensitive irq not supported [ 415.413895][ T8552] kvm: pic: non byte read [ 416.141691][ T7253] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 417.518239][ T8581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1169'. [ 417.538742][ T8581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1169'. [ 417.636847][ T7253] usb 2-1: Using ep0 maxpacket: 16 [ 418.631635][ T7253] usb 2-1: string descriptor 0 read error: -71 [ 418.638017][ T7253] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 418.901232][ T8597] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 418.982280][ T7253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.025826][ T7253] usb 2-1: config 0 descriptor?? [ 419.286074][ T7253] usb 2-1: can't set config #0, error -71 [ 419.330930][ T7253] usb 2-1: USB disconnect, device number 18 [ 420.901671][ T4604] Bluetooth: hci5: command 0x1003 tx timeout [ 420.909943][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 421.061590][ T7253] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 422.651607][ T7253] usb 4-1: Using ep0 maxpacket: 8 [ 422.771770][ T7253] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 422.779957][ T7253] usb 4-1: config 0 has no interface number 0 [ 422.992867][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 423.004441][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 423.761259][ T7253] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 423.770462][ T7253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.778846][ T7253] usb 4-1: Product: syz [ 423.875439][ T7253] usb 4-1: Manufacturer: syz [ 423.887367][ T7253] usb 4-1: SerialNumber: syz [ 423.901324][ T7253] usb 4-1: config 0 descriptor?? [ 423.931800][ T7253] usb 4-1: can't set config #0, error -71 [ 423.941802][ T7253] usb 4-1: USB disconnect, device number 19 [ 425.071625][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 426.651774][ T4289] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 426.901803][ T4289] usb 3-1: Using ep0 maxpacket: 16 [ 426.940262][ T8701] loop3: detected capacity change from 0 to 1 [ 426.972310][ T6971] Dev loop3: unable to read RDB block 1 [ 426.978326][ T6971] loop3: AHDI p2 p3 [ 426.986459][ T6971] loop3: partition table partially beyond EOD, truncated [ 427.008213][ T6971] loop3: p2 size 33554432 extends beyond EOD, truncated [ 427.036993][ T8701] Dev loop3: unable to read RDB block 1 [ 427.051797][ T4289] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 427.063877][ T4289] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 427.066893][ T8701] loop3: AHDI p2 p3 [ 427.080136][ T8701] loop3: partition table partially beyond EOD, truncated [ 427.100678][ T8701] loop3: p2 size 33554432 extends beyond EOD, truncated [ 427.102657][ T4289] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 427.136442][ T4289] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 427.211811][ T4289] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 427.229220][ T4289] usb 3-1: config 0 has no interface number 0 [ 427.241753][ T4289] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 427.246484][ T6971] udevd[6971]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 427.258434][ T4289] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 427.372041][ T6971] udevd[6971]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 427.393361][ T4289] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 427.546873][ T4289] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.561691][ T4289] usb 3-1: config 0 interface 125 has no altsetting 0 [ 427.570318][ T4289] usb 3-1: config 0 interface 125 has no altsetting 2 [ 427.751765][ T4289] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 427.767307][ T4289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.787120][ T4289] usb 3-1: Product: syz [ 427.792662][ T4289] usb 3-1: Manufacturer: syz [ 427.804824][ T4289] usb 3-1: SerialNumber: syz [ 427.817262][ T4289] usb 3-1: config 0 descriptor?? [ 427.865472][ T4289] usb 3-1: selecting invalid altsetting 2 [ 427.953468][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1211'. [ 428.612074][ T4604] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 428.871715][ T4604] usb 4-1: Using ep0 maxpacket: 8 [ 428.907943][ T4289] get_1284_register timeout [ 428.930493][ T4289] uss720: probe of 3-1:0.125 failed with error -5 [ 428.937105][ C1] usb 3-1: async_complete: urb error -104 [ 429.043058][ T4604] usb 4-1: unable to get BOS descriptor or descriptor too short [ 429.521801][ T4604] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 429.551893][ T4604] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 429.709941][ T4604] usb 4-1: config 1 interface 0 has no altsetting 0 [ 429.902930][ T4604] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 429.920542][ T4604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.932680][ T4604] usb 4-1: Product: syz [ 429.936960][ T4604] usb 4-1: Manufacturer: syz [ 429.936979][ T4604] usb 4-1: SerialNumber: syz [ 430.001743][ T8718] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 430.271818][ T21] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 430.304657][ T4604] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9 [ 430.341779][ T3547] bcm5974 4-1:1.0: could not read from device [ 430.359167][ T4604] usb 4-1: USB disconnect, device number 20 [ 430.371844][ T3547] bcm5974 4-1:1.0: could not read from device [ 430.380973][ T3547] bcm5974 4-1:1.0: could not read from device [ 430.469773][ T4262] usb 3-1: USB disconnect, device number 17 [ 430.661826][ T21] usb 2-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 430.681600][ T21] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.720055][ T21] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.803922][ T21] usb 2-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 430.870458][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 430.882047][ T21] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 430.897625][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.927366][ T21] usb 2-1: config 0 descriptor?? [ 431.027052][ T5465] Bluetooth: hci5: Frame reassembly failed (-84) [ 431.037244][ T8764] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 431.174834][ T8773] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 431.203623][ T8773] kvm: pic: non byte read [ 431.208249][ T8773] kvm: pic: level sensitive irq not supported [ 431.208292][ T8773] kvm: pic: non byte read [ 431.219291][ T8773] kvm: pic: level sensitive irq not supported [ 431.219368][ T8773] kvm: pic: non byte read [ 431.230246][ T8773] kvm: pic: level sensitive irq not supported [ 431.230289][ T8773] kvm: pic: non byte read [ 431.311673][ T4235] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 431.579732][ T4262] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 431.671750][ T4235] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 431.680060][ T4235] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 431.681735][ T21] usb 2-1: string descriptor 0 read error: -71 [ 431.690729][ T4235] usb 5-1: config 0 has no interface number 0 [ 431.712132][ T21] uclogic 0003:5543:004D.0007: failed retrieving string descriptor #200: -71 [ 431.721091][ T21] uclogic 0003:5543:004D.0007: failed retrieving pen parameters: -71 [ 431.729309][ T21] uclogic 0003:5543:004D.0007: failed probing pen v2 parameters: -71 [ 431.737734][ T21] uclogic 0003:5543:004D.0007: failed probing parameters: -71 [ 431.745280][ T21] uclogic: probe of 0003:5543:004D.0007 failed with error -71 [ 431.761276][ T21] usb 2-1: USB disconnect, device number 19 [ 431.861802][ T4235] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 431.870947][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.879188][ T4235] usb 5-1: Product: syz [ 431.883664][ T4235] usb 5-1: Manufacturer: syz [ 431.888255][ T4235] usb 5-1: SerialNumber: syz [ 431.894948][ T4235] usb 5-1: config 0 descriptor?? [ 431.941672][ T4604] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 431.971707][ T4262] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 431.981792][ T4262] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 432.151863][ T4262] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 432.161102][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.169307][ T4262] usb 1-1: Product: syz [ 432.173869][ T4262] usb 1-1: Manufacturer: syz [ 432.178599][ T4262] usb 1-1: SerialNumber: syz [ 432.202912][ T4262] usb 1-1: config 0 descriptor?? [ 432.222054][ T8777] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 432.239017][ T8777] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 432.257798][ T4262] usb 1-1: ucan: probing device on interface #0 [ 432.264226][ T4262] usb 1-1: ucan: invalid EP count (1) [ 432.270153][ T4262] usb 1-1: ucan: probe failed; try to update the device firmware [ 432.352063][ T4604] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 432.361637][ T4604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.385607][ T4604] usb 3-1: config 0 descriptor?? [ 432.481900][ T4235] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 432.488663][ T4235] usb 5-1: No valid video chain found. [ 432.518276][ T4235] usb 5-1: USB disconnect, device number 17 [ 432.951701][ T4291] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 433.061917][ T4262] Bluetooth: hci5: command 0x1003 tx timeout [ 433.068198][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 433.191751][ T4291] usb 2-1: Using ep0 maxpacket: 8 [ 433.321833][ T4291] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 433.330194][ T4291] usb 2-1: config 0 has no interface number 0 [ 433.501858][ T4604] pegasus: probe of 3-1:0.0 failed with error -71 [ 433.510897][ T4604] usb 3-1: USB disconnect, device number 18 [ 433.515855][ T4291] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 433.531646][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.539933][ T4291] usb 2-1: Product: syz [ 433.544496][ T4291] usb 2-1: Manufacturer: syz [ 433.549099][ T4291] usb 2-1: SerialNumber: syz [ 433.555214][ T4291] usb 2-1: config 0 descriptor?? [ 433.594911][ T4291] as10x_usb: device has been detected [ 433.600618][ T4291] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 433.617682][ T4291] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 433.678773][ T4291] as10x_usb: error during firmware upload part1 [ 433.685416][ T4291] Registered device PCTV Systems picoStick (74e) [ 433.877573][ T8791] tipc: Enabled bearer , priority 0 [ 433.891446][ T8791] device syzkaller0 entered promiscuous mode [ 433.910668][ T8791] tipc: Resetting bearer [ 433.917640][ T8789] tipc: Resetting bearer [ 433.929426][ T8789] tipc: Disabling bearer [ 434.142592][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'. [ 434.305587][ T4262] usb 1-1: USB disconnect, device number 20 [ 434.389445][ T4291] usb 2-1: USB disconnect, device number 20 [ 434.485742][ T4291] Unregistered device PCTV Systems picoStick (74e) [ 434.498281][ T4291] as10x_usb: device has been disconnected [ 434.712675][ T8809] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 434.752806][ T8809] kvm: pic: non byte read [ 434.767868][ T8809] kvm: pic: level sensitive irq not supported [ 434.768244][ T8809] kvm: pic: non byte read [ 434.804204][ T8809] kvm: pic: level sensitive irq not supported [ 434.804578][ T8809] kvm: pic: non byte read [ 434.832846][ T8809] kvm: pic: level sensitive irq not supported [ 434.833551][ T8809] kvm: pic: non byte read [ 435.646530][ T4262] Bluetooth: hci5: command 0x1001 tx timeout [ 435.652918][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 436.021766][ T4255] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 436.281730][ T4255] usb 2-1: Using ep0 maxpacket: 32 [ 436.349456][ T8835] netlink: 'syz.4.1247': attribute type 11 has an invalid length. [ 436.374144][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 436.402361][ T4255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.418188][ T4255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.437374][ T4255] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 436.451446][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.474369][ T4255] usb 2-1: config 0 descriptor?? [ 436.513542][ T4255] hub 2-1:0.0: USB hub found [ 436.631739][ T4262] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 436.741895][ T4255] hub 2-1:0.0: 1 port detected [ 436.881621][ T4262] usb 1-1: Using ep0 maxpacket: 8 [ 437.001719][ T4262] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 437.021589][ T4262] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 437.038724][ T4262] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 437.051159][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 437.066160][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 437.311762][ T4262] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 437.320823][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.332311][ T4262] usb 1-1: Product: syz [ 437.336480][ T4262] usb 1-1: Manufacturer: syz [ 437.341087][ T4262] usb 1-1: SerialNumber: syz [ 437.352946][ T4262] usb 1-1: config 0 descriptor?? [ 437.393650][ T4262] hub 1-1:0.0: bad descriptor, ignoring hub [ 437.399584][ T4262] hub: probe of 1-1:0.0 failed with error -5 [ 437.409256][ T4262] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 437.421683][ T4255] hub 2-1:0.0: activate --> -90 [ 437.596697][ T4262] usb 1-1: USB disconnect, device number 21 [ 437.629107][ T4255] usb 2-1: USB disconnect, device number 21 [ 437.635329][ T4291] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 437.702017][ T4604] Bluetooth: hci5: command 0x1009 tx timeout [ 439.784700][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.791082][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.979751][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 443.610624][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'. [ 444.349826][ T5461] Bluetooth: hci5: Frame reassembly failed (-84) [ 444.378811][ T8946] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 445.658646][ T8973] netlink: 'syz.4.1291': attribute type 3 has an invalid length. [ 445.709138][ T8973] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1291'. [ 446.131576][ T4255] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 446.381578][ T4255] usb 5-1: Using ep0 maxpacket: 32 [ 446.421727][ T4235] Bluetooth: hci5: command 0x1003 tx timeout [ 446.428948][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 447.894690][ T4255] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 447.904119][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.916320][ T4255] usb 5-1: Product: syz [ 447.920527][ T4255] usb 5-1: Manufacturer: syz [ 447.925402][ T4255] usb 5-1: SerialNumber: syz [ 447.935925][ T4255] usb 5-1: config 0 descriptor?? [ 448.192063][ T4255] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 448.208799][ T4255] b3 c1 69 eb 50 3d 29 15 [ 448.231566][ T4255] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 448.272584][ T9012] mmap: syz.1.1301 (9012) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 448.416114][ T4234] usb 5-1: USB disconnect, device number 18 [ 448.511619][ T4289] Bluetooth: hci5: command 0x1001 tx timeout [ 448.517841][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 448.764823][ T9014] netlink: 'syz.3.1302': attribute type 3 has an invalid length. [ 449.146998][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1304'. [ 449.481590][ T4255] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 449.731597][ T4255] usb 5-1: Using ep0 maxpacket: 8 [ 449.891695][ T4255] usb 5-1: unable to get BOS descriptor or descriptor too short [ 450.021879][ T4255] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 450.431215][ T4255] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 450.489164][ T4255] usb 5-1: config 1 interface 0 has no altsetting 0 [ 450.584064][ T4289] Bluetooth: hci5: command 0x1009 tx timeout [ 450.662207][ T4255] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 451.042393][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.055649][ T4255] usb 5-1: Product: syz [ 451.059848][ T4255] usb 5-1: Manufacturer: syz [ 451.066037][ T4255] usb 5-1: SerialNumber: syz [ 451.191890][ T9023] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 451.984423][ T4255] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11 [ 452.054240][ T3547] bcm5974 5-1:1.0: could not read from device [ 452.091646][ T3547] bcm5974 5-1:1.0: could not read from device [ 452.091701][ T4255] usb 5-1: USB disconnect, device number 19 [ 452.112419][ T3547] bcm5974 5-1:1.0: could not read from device [ 452.138828][ T3547] bcm5974 5-1:1.0: could not read from device [ 452.320514][ T9066] input: syz0 as /devices/virtual/input/input12 [ 452.353758][ T4289] [ 452.356107][ T4289] ====================================================== [ 452.363115][ T4289] WARNING: possible circular locking dependency detected [ 452.370137][ T4289] 5.15.189-syzkaller #0 Not tainted [ 452.375333][ T4289] ------------------------------------------------------ [ 452.382428][ T4289] kworker/1:7/4289 is trying to acquire lock: [ 452.388478][ T4289] ffff88807479cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 452.399510][ T4289] [ 452.399510][ T4289] but task is already holding lock: [ 452.406851][ T4289] ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 452.415877][ T4289] [ 452.415877][ T4289] which lock already depends on the new lock. [ 452.415877][ T4289] [ 452.426256][ T4289] [ 452.426256][ T4289] the existing dependency chain (in reverse order) is: [ 452.435252][ T4289] [ 452.435252][ T4289] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 452.443215][ T4289] __mutex_lock_common+0x1eb/0x2390 [ 452.448932][ T4289] mutex_lock_nested+0x17/0x20 [ 452.454554][ T4289] rfkill_register+0x33/0x8a0 [ 452.459736][ T4289] hci_register_dev+0x452/0x970 [ 452.465093][ T4289] vhci_create_device+0x32c/0x5c0 [ 452.470705][ T4289] vhci_write+0x391/0x450 [ 452.475535][ T4289] vfs_write+0x712/0xd00 [ 452.480281][ T4289] ksys_write+0x14d/0x250 [ 452.485105][ T4289] do_syscall_64+0x4c/0xa0 [ 452.490036][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 452.496515][ T4289] [ 452.496515][ T4289] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 452.504391][ T4289] __mutex_lock_common+0x1eb/0x2390 [ 452.510113][ T4289] mutex_lock_nested+0x17/0x20 [ 452.515375][ T4289] vhci_send_frame+0x88/0x100 [ 452.520639][ T4289] hci_send_frame+0x1a9/0x2e0 [ 452.525820][ T4289] hci_tx_work+0x9f9/0x1710 [ 452.530819][ T4289] process_one_work+0x863/0x1000 [ 452.536264][ T4289] worker_thread+0xaa8/0x12a0 [ 452.541465][ T4289] kthread+0x436/0x520 [ 452.546040][ T4289] ret_from_fork+0x1f/0x30 [ 452.550968][ T4289] [ 452.550968][ T4289] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 452.560155][ T4289] __flush_work+0xdd/0x1b0 [ 452.565083][ T4289] hci_dev_do_open+0xc58/0x1270 [ 452.570433][ T4289] hci_power_on+0x1c1/0x610 [ 452.575434][ T4289] process_one_work+0x863/0x1000 [ 452.580871][ T4289] worker_thread+0xaa8/0x12a0 [ 452.586044][ T4289] kthread+0x436/0x520 [ 452.590608][ T4289] ret_from_fork+0x1f/0x30 [ 452.595523][ T4289] [ 452.595523][ T4289] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 452.603140][ T4289] __mutex_lock_common+0x1eb/0x2390 [ 452.608850][ T4289] mutex_lock_nested+0x17/0x20 [ 452.614114][ T4289] bg_scan_update+0x44/0x3b0 [ 452.619203][ T4289] process_one_work+0x863/0x1000 [ 452.624639][ T4289] worker_thread+0xaa8/0x12a0 [ 452.629812][ T4289] kthread+0x436/0x520 [ 452.634378][ T4289] ret_from_fork+0x1f/0x30 [ 452.639300][ T4289] [ 452.639300][ T4289] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 452.649089][ T4289] __lock_acquire+0x2c33/0x7c60 [ 452.654453][ T4289] lock_acquire+0x197/0x3f0 [ 452.659456][ T4289] __flush_work+0xdd/0x1b0 [ 452.664370][ T4289] __cancel_work_timer+0x3ac/0x520 [ 452.670094][ T4289] hci_request_cancel_all+0xcc/0x300 [ 452.675920][ T4289] hci_dev_do_close+0x4e/0x1030 [ 452.681284][ T4289] hci_rfkill_set_block+0x10a/0x190 [ 452.686994][ T4289] rfkill_set_block+0x1c6/0x420 [ 452.692348][ T4289] rfkill_epo+0x75/0x170 [ 452.697115][ T4289] rfkill_op_handler+0x76/0x220 [ 452.702472][ T4289] process_one_work+0x863/0x1000 [ 452.707911][ T4289] worker_thread+0xaa8/0x12a0 [ 452.713089][ T4289] kthread+0x436/0x520 [ 452.717658][ T4289] ret_from_fork+0x1f/0x30 [ 452.722573][ T4289] [ 452.722573][ T4289] other info that might help us debug this: [ 452.722573][ T4289] [ 452.732779][ T4289] Chain exists of: [ 452.732779][ T4289] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 452.732779][ T4289] [ 452.748576][ T4289] Possible unsafe locking scenario: [ 452.748576][ T4289] [ 452.756019][ T4289] CPU0 CPU1 [ 452.761375][ T4289] ---- ---- [ 452.766892][ T4289] lock(rfkill_global_mutex); [ 452.771636][ T4289] lock(&data->open_mutex); [ 452.778725][ T4289] lock(rfkill_global_mutex); [ 452.785983][ T4289] lock((work_completion)(&hdev->bg_scan_update)); [ 452.792550][ T4289] [ 452.792550][ T4289] *** DEADLOCK *** [ 452.792550][ T4289] [ 452.800671][ T4289] 3 locks held by kworker/1:7/4289: [ 452.805844][ T4289] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 452.816175][ T4289] #1: ffffc900033afd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 452.826514][ T4289] #2: ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 452.835967][ T4289] [ 452.835967][ T4289] stack backtrace: [ 452.842007][ T4289] CPU: 1 PID: 4289 Comm: kworker/1:7 Not tainted 5.15.189-syzkaller #0 [ 452.850220][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.860260][ T4289] Workqueue: events rfkill_op_handler [ 452.865634][ T4289] Call Trace: [ 452.868907][ T4289] [ 452.871844][ T4289] dump_stack_lvl+0x168/0x230 [ 452.876598][ T4289] ? load_image+0x3b0/0x3b0 [ 452.881082][ T4289] ? show_regs_print_info+0x20/0x20 [ 452.886260][ T4289] ? print_circular_bug+0x12b/0x1a0 [ 452.891443][ T4289] check_noncircular+0x274/0x310 [ 452.896359][ T4289] ? add_chain_block+0x940/0x940 [ 452.901277][ T4289] ? lockdep_lock+0xdc/0x1e0 [ 452.905845][ T4289] ? __lock_acquire+0x12d9/0x7c60 [ 452.910848][ T4289] ? lockdep_lock+0x1e0/0x1e0 [ 452.915509][ T4289] ? mark_lock+0x94/0x320 [ 452.919817][ T4289] __lock_acquire+0x2c33/0x7c60 [ 452.924650][ T4289] ? verify_lock_unused+0x140/0x140 [ 452.929840][ T4289] ? verify_lock_unused+0x140/0x140 [ 452.935015][ T4289] ? ret_from_fork+0x1e/0x30 [ 452.939588][ T4289] lock_acquire+0x197/0x3f0 [ 452.944078][ T4289] ? __flush_work+0xc1/0x1b0 [ 452.948644][ T4289] ? __lock_acquire+0x7c60/0x7c60 [ 452.953665][ T4289] ? read_lock_is_recursive+0x10/0x10 [ 452.959018][ T4289] ? start_flush_work+0x776/0x820 [ 452.964023][ T4289] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 452.969916][ T4289] __flush_work+0xdd/0x1b0 [ 452.974309][ T4289] ? __flush_work+0xc1/0x1b0 [ 452.978875][ T4289] ? flush_work+0x20/0x20 [ 452.983179][ T4289] ? try_to_grab_pending+0xf3/0x7e0 [ 452.988351][ T4289] ? lockdep_hardirqs_off+0x70/0x100 [ 452.993611][ T4289] ? mark_lock+0x94/0x320 [ 452.997918][ T4289] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 453.003893][ T4289] ? lock_chain_count+0x20/0x20 [ 453.008723][ T4289] ? lockdep_hardirqs_off+0x70/0x100 [ 453.014070][ T4289] ? mark_lock+0x94/0x320 [ 453.018389][ T4289] ? __cancel_work_timer+0x331/0x520 [ 453.023737][ T4289] __cancel_work_timer+0x3ac/0x520 [ 453.028825][ T4289] ? cancel_work_sync+0x20/0x20 [ 453.033654][ T4289] ? __cancel_work+0x1f4/0x2d0 [ 453.038413][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 453.043599][ T4289] ? __cancel_work+0x26f/0x2d0 [ 453.048338][ T4289] ? cancel_work+0x20/0x20 [ 453.052732][ T4289] hci_request_cancel_all+0xcc/0x300 [ 453.057995][ T4289] hci_dev_do_close+0x4e/0x1030 [ 453.062822][ T4289] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 453.068695][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 453.073528][ T4289] hci_rfkill_set_block+0x10a/0x190 [ 453.078702][ T4289] ? rcu_lock_release+0x20/0x20 [ 453.083531][ T4289] rfkill_set_block+0x1c6/0x420 [ 453.088363][ T4289] rfkill_epo+0x75/0x170 [ 453.092583][ T4289] rfkill_op_handler+0x76/0x220 [ 453.097413][ T4289] process_one_work+0x863/0x1000 [ 453.102334][ T4289] ? worker_detach_from_pool+0x240/0x240 [ 453.107944][ T4289] ? lockdep_hardirqs_off+0x70/0x100 [ 453.113216][ T4289] ? _raw_spin_lock_irq+0xab/0xe0 [ 453.118221][ T4289] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 453.123573][ T4289] ? wq_worker_running+0x97/0x170 [ 453.128576][ T4289] worker_thread+0xaa8/0x12a0 [ 453.133237][ T4289] kthread+0x436/0x520 [ 453.137305][ T4289] ? rcu_lock_release+0x20/0x20 [ 453.142131][ T4289] ? kthread_blkcg+0xd0/0xd0 [ 453.146700][ T4289] ret_from_fork+0x1f/0x30 [ 453.151097][ T4289] [ 453.512459][ T13] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 453.801583][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 453.921746][ T13] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 453.929916][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.940920][ T13] usb 3-1: config 0 has no interface number 0 [ 453.947030][ T13] usb 3-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.111736][ T13] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 454.120786][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.128833][ T13] usb 3-1: Product: syz [ 454.133061][ T13] usb 3-1: Manufacturer: syz [ 454.137637][ T13] usb 3-1: SerialNumber: syz [ 454.143996][ T13] usb 3-1: config 0 descriptor?? [ 454.182790][ T13] plusb: probe of 3-1:0.231 failed with error -22 [ 455.422172][ T4289] usb 3-1: USB disconnect, device number 19