last executing test programs: 1m29.757481314s ago: executing program 2 (id=688): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000010010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x60, 0x23, 0xed, {0xed, 0xe, "a12c5458e57e117c3e11a8f7e1a533204acc637217a6e0e6241a775ce89e9d6abde0b3ea4a04347af5e5e9b3677dcfb3338039f1c49afb4317b5bd1ea9149a7fae85d9b7aff8e30f1bdcf57b9111292b3bfdbae2b1c8a7232a5fb43c3013b028010927acf6646c25f0e78ab27befe7f75bb501ea9fe2c7b94dae428dcf51705c964d2029163a4ccdfbd6cad34156976a276589ab2300c36ada9c282d5a8671fab3482ae4739a7e7d5055e16465958255b4e9ee230dea60c4ddd9ef90943e56dbe2005c502c8ab0bafa81075e8bce10a16d06a87a855d90079601a1e0fb863c53a3096cf4906611125082e4"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x0, 0x6, 0x67, "73f997d4ebdd3c9ff74922ffd7d45db46cdee27ca3eb800f8c5aff839a32eef824cb73ce81cf2d2cf2110165c94b10aef8087936bb41275472191008e6d7c05b46c9ad4c59445bc4d4b5a85a6d910b126bb543d589faee6609254edce0f3860952e2adc809da17"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x5, 0x2, 0x3, 0x948, 0x1000, 0x1, 0xf4a, 0x5, 0x7, 0x9, 0x6, 0x1200}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x2d}, 0x0, 0x0, 0x0, 0x0}) 1m26.623557262s ago: executing program 2 (id=703): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24044090) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4049881) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x44099) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xe588}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4c045) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x109, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x4084) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x5) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x4044040) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004009}, 0x4042) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x84010010}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x90, r7, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0xde4}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x13a3f664d3b41653}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x10, 0x3e8, 0x1, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc1}, 0x40800) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x48, r10, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044800}, 0x20000080) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r6) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r11, 0x10, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000a0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008001) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001080)={0x2, 0x6, @status={[0x20000000400, 0xa0, 0xb, 0x9, 0x6, 0x7]}, [0x2a434c47, 0x9, 0x583, 0x4, 0x8000000000000000, 0xe5fd, 0x4, 0x11, 0x2, 0x2, 0x3, 0x1, 0x2, 0x12710869, 0x3, 0x3ff, 0x1, 0x1, 0x80000001, 0x1, 0xe, 0x8, 0xfffffffffffffff8, 0x100000001, 0x0, 0x9, 0x6, 0xe9c, 0x71d1e34e, 0xfff, 0x1, 0x9, 0x0, 0x0, 0x3, 0x3, 0x6, 0x2, 0x7, 0x5, 0x80000000, 0x80, 0x5, 0xfff, 0x5, 0x2, 0x5, 0xbf, 0x1, 0x1, 0x8, 0xffffffffffffffb8, 0x8, 0x8000000000000001, 0x9, 0x1, 0x8000000000000001, 0x0, 0x5, 0x7, 0x7fffffffffffffff, 0x40, 0x2, 0x917]}) r12 = open_tree(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x80000) ioctl$SNDCTL_TMR_START(r12, 0x5402) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 1m26.552637631s ago: executing program 2 (id=705): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, {0x3000, 0xffff1000, 0xd}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x1000, 0x1, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0xfd}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, 0x2}, {0xffff1000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0xddf8ffdb, 0x0, 0x8000000, 0x142030, 0xa, 0x0, 0x3000, [0x0, 0x0, 0x2]}) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000400), 0xe) (async) listen(r2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000400), 0xe) (async) listen(r3, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x5, 0x1, 0x1, {0xa, @pix={0x4, 0x5, 0x50313134, 0x0, 0x3, 0x3, 0x9, 0x1, 0x1, 0x3, 0x0, 0x1}}, 0x1}) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) (async) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) (async) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) listen(r4, 0x2) (async) recvmmsg(r4, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xf89}], 0x1, 0x40, &(0x7f0000001b40)={0x77359400}) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000001a40)={{0x12, 0x1, 0x300, 0x59, 0x6c, 0xd8, 0x20, 0xb95, 0x2791, 0x4be5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x7, 0xa0, 0x6, [{{0x9, 0x4, 0x6e, 0x0, 0x0, 0x2, 0x6, 0x0, 0x2}}]}}]}}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1m25.765024576s ago: executing program 2 (id=713): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000000)={0xdd48, 0x4, 0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x10800) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x48680) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r2) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x53}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x34}}, 0x10) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0xc0000000, 0x8, 0x1, 0x7, 0x3, 0xf, 0xa1}]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x2a0000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) fcntl$setpipe(r6, 0x407, 0x4) r8 = dup2(r1, r0) setsockopt(r2, 0x0, 0x80000001, &(0x7f0000000540)="bf89e8bd5ab65e9a9911cbb97db117b69ff7d1bf867e6efcabbd7169b5d09ddeb85d47cc6c7260219b18825d2525be58dcfd9028b4685abef9e10eced9bf85f019effdc0beb0", 0x46) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r8) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc8, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8ce426c9}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4cd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff3f13}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x804f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000840)={0x0, @private, @multicast2}, &(0x7f0000000880)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000009c0)={'erspan0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x10, 0x20, 0x7f, 0x8000, {{0x29, 0x4, 0x0, 0x30, 0xa4, 0x65, 0x0, 0x1, 0x29, 0x0, @local, @local, {[@noop, @ssrr={0x89, 0x1f, 0xb8, [@rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x1, 0x3, '2'}]}, @timestamp={0x44, 0x18, 0x64, 0x0, 0x1, [0xfb3, 0xb41, 0x9, 0x6, 0xf62]}, @lsrr={0x83, 0xb, 0x84, [@local, @empty]}, @cipso={0x86, 0x3f, 0x3, [{0x6, 0x6, "6cca9974"}, {0x5, 0x7, "b9a174eada"}, {0x5, 0xe, "6f222b6c41f6b1ad437764d0"}, {0x2, 0x7, "d905fa0f26"}, {0x1, 0xa, "97cbcadfd6a493e0"}, {0x1, 0xd, "234e97104cb73db052b5eb"}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000c40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x1f8, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "77934d3f765b204b27c2f6c05c7e1594cb636a98b6c9e8449a44a88bc3fec6ee4b0dc56d2a2c04eb8feda4c6548ae4637f384a0e6208b80a885071881a421198f24cb2f2cc3f28a3107d6777cba5342c9df761bee91fefc40e97330f82ccffd8a78594560476624fc5fdece74f1b00bfd57114a42e0fffcb7cb8e95954d79beb8bbec37384412334e24586364a69b47e1cf5184855fd3345"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb64b}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "e265774830bf6a706fb14c570d98c0503ff07ef55a09ad35cc3ef90bedaf4b67ec6d34ff5314cf428a4463456e4fc3d6371f2708664a3c4229583f87ed0c918a0328aa08"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40480c4}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'syztnl1\x00', r11, 0x29, 0x9, 0x0, 0x5, 0x72, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x792dfb4f4aeedb53, 0x8, 0x8, 0x6}}) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000d40), 0x2) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100250}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x108, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @loopback, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000f80)) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000fc0)=0x6) syz_open_dev$evdev(&(0x7f0000001000), 0x800, 0x141b00) pipe(&(0x7f0000001040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) 1m25.691706586s ago: executing program 2 (id=714): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000140)='./file0/file0\x00') setpgid(r1, r1) setpgid(0x0, r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fsync(r0) getxattr(&(0x7f0000000640)='./file0\x00', &(0x7f00000007c0)=@known='system.advise\x00', &(0x7f0000000800)=""/86, 0x56) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x0, 0x6}) r2 = syz_usb_connect(0x2, 0x285, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100144f8c240b007060010c6010203010902730201fc0880c30904"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x40, 0x15, 0xb9, "f9ec38b62f948e5a79a183f442db5178ff134bea1894480feade8349efbc45f4af5b19b97ea295a8b9d925fbdb7062fad6f762267164c170e8f924d12b15e951e0580e55c97260b3bbc488797b57ac0b76350230426db2fde950a9c55806d8e391082f34b3b08b660f24204ede4088998547561077164866e51badfe4d8a1842772f115dbfc137f2a138f1f9606d72aa0fa00a6bdaa7b2a73ccc7a1d8f63cd4a8bd5c11133276a45ba488479ee2d924a416b0cf8eafd6f2f7f"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x37}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3c}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x1000, 0x6, 0x3, 0x3, 0x7, 0x8000, 0x7, 0x1, 0x3, 0x0, 0x1, 0x8}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x101}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x3, 0xc4, &(0x7f0000000580)=ANY=[@ANYBLOB="12015002000000c56b1d01014008010203010902b20003010600090904000000010100000a240105007f02010209240303ff010506a00724080208008005240406000904010000010200000904010601010200000a240201060201a59aee0924020100731a54092402026c070004050d24020109040181c19c38888a0a240201040107097f67090501092000b03d0207250182010100090402000001020000090402010101020000090582098007250100c0ba03"], &(0x7f0000000780)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x3, 0x14, 0xd, 0xbf, 0x7f}, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="0622"], 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x402}}]}) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x180) (async) chdir(&(0x7f0000000140)='./file0/file0\x00') (async) setpgid(r1, r1) (async) setpgid(0x0, r1) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) fsync(r0) (async) getxattr(&(0x7f0000000640)='./file0\x00', &(0x7f00000007c0)=@known='system.advise\x00', &(0x7f0000000800)=""/86, 0x56) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x0, 0x6}) (async) syz_usb_connect(0x2, 0x285, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100144f8c240b007060010c6010203010902730201fc0880c30904"], 0x0) (async) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="00036d0000006d21d705cf0c452048fa8e8c69b496571c543889cea239b9e692cd7a252d5ec4720a0c6d7998c0fdfbb810714ccf05842eb7c56f3a8dc69114f4664d541537684ac52bcb04848f576f1a1201aceba66e5b8d4d8566057c2912088d48ecf683d033873e4f61918719c99d30c2f39c79a0fd0c30fa6a227393cf8d5117287b8887a7a1ecf390219c3f5e1d2dfb7bd040a7a5da5b3fff444a1fb787dfa9cf15527ce795f123c1fff18599d0a89446608de8c788f16e716a679faa044249eb5a506bc24b7a9feebcf19a47fb748efce18b8cec8885cd187316c8c31759676550283adf02f01495d45a20458f7f9f2ec0135b4959798be16418d929d75672c69122102b2a0397ef18cc1cf5750e4123546ab8c7d524ad8efea6d3b1c95f45779c7e6d4d92801c15"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x40, 0x15, 0xb9, "f9ec38b62f948e5a79a183f442db5178ff134bea1894480feade8349efbc45f4af5b19b97ea295a8b9d925fbdb7062fad6f762267164c170e8f924d12b15e951e0580e55c97260b3bbc488797b57ac0b76350230426db2fde950a9c55806d8e391082f34b3b08b660f24204ede4088998547561077164866e51badfe4d8a1842772f115dbfc137f2a138f1f9606d72aa0fa00a6bdaa7b2a73ccc7a1d8f63cd4a8bd5c11133276a45ba488479ee2d924a416b0cf8eafd6f2f7f"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x37}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3c}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x1000, 0x6, 0x3, 0x3, 0x7, 0x8000, 0x7, 0x1, 0x3, 0x0, 0x1, 0x8}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x101}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) (async) syz_usb_connect$uac1(0x3, 0xc4, &(0x7f0000000580)=ANY=[@ANYBLOB="12015002000000c56b1d01014008010203010902b20003010600090904000000010100000a240105007f02010209240303ff010506a00724080208008005240406000904010000010200000904010601010200000a240201060201a59aee0924020100731a54092402026c070004050d24020109040181c19c38888a0a240201040107097f67090501092000b03d0207250182010100090402000001020000090402010101020000090582098007250100c0ba03"], &(0x7f0000000780)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x3, 0x14, 0xd, 0xbf, 0x7f}, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="0622"], 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x402}}]}) (async) 1m25.365759282s ago: executing program 2 (id=717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00E'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x7f, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0xd000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x3, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x9, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m10.291214534s ago: executing program 32 (id=717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00E'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x7f, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0xd000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x3, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x9, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.145433131s ago: executing program 3 (id=1120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000080)={{0x0, @name="76e78599c0d71ce47eb0bc870bed16c4d32de7e6765bad96dcd326cbfce32027"}, 0x8, 0x1, 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="180000005500ff0700000000fddbdf2507"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x40) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) 10.027491972s ago: executing program 3 (id=1121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ip6erspan0\x00', 0x800}) (async) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e80)=""/152, 0x98}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x69}) bind$qrtr(r3, &(0x7f0000000180)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9e) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101afb4f2102505a096002b010203010902240001fe00c0000904eb02027f9c1f00090506c4caf93d779eaee9507282dc4414aa09b7fa8507141d25aeb5cdae6f0111cae330c78439fb88d592c23cb36857277551d9d1d0b5d65f7b78ce1c6cae559532b2"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_connect(0x0, 0xf0, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x20, 0x1f, 0x7e, 0x8, 0x257a, 0x1606, 0x36a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0xf1, 0x1, 0x3a, 0xf1, 0x39, 0x5, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "8e3b9b72"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfff, 0x4, 0x7}, {0x6, 0x24, 0x1a, 0x1, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x0, 0x401}, @country_functional={0xe, 0x24, 0x7, 0x1, 0xe6c, [0x7, 0xc, 0x5e5, 0x6]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @obex={0x5, 0x24, 0x15, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "ae"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x52b845f0, 0xb, 0x0, 0x1}, [@mdlm_detail={0x39, 0x24, 0x13, 0xcb, "0ad00fef07b03f3d739b8286a65253d17f2bcaa7ad0c42b030525c30322024c3a2d3c39bb21f6478c2142e9cf1db2c6ff8ad2412b7"}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x0, 0x4, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xdb, 0x22, 0xf8, 0x2}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0xf, 0xfc, 0x5}}]}}]}}]}}, 0x0) 6.897208307s ago: executing program 3 (id=1138): r0 = syz_init_net_socket$ax25(0x3, 0x0, 0xc3) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) bind$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000030c741401e0161bdf5efbfc29f504742f7c896a252ef09021200010000000009"], 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x43871, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000200)='\xa7q\x18\f\xb6%\xfd\xec\xfc\x14\xd4\fX\xa7\x00\xbfd\xff\x8f,\xe6OZ\x1b\xcc\rU\x00\x8at\xa37\ne\xa6\x83\x9b\x94nC\x82\xc0\x18\x89MR\xf7\xd24\x18E\x8d\xd3\xd4N~\xa9#\xdf\xf1\x01\xa8;\xa4\x7f\xa5V\x94\x15?\xb3\xa4\x0e\xd5\xad\xbc\xe3\x13K{\xd4\xf0{\xddx\xc6\x1c\xe0%\x1d\x81*T\xbe\nV\x82\xddd.\n/d\xe9\xb5\x064\x98\xee<']}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r3, 0x0) userfaultfd(0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000002440)='/dev/comedi1\x00', 0x101000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340bc"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') socket(0xa, 0x5, 0x400) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [{0x20, ';J\x12y\x12\x16\x00\x00\x00\x00\x00\x00\x00\x04\x99\x81\xc2\x1f\xceG7h\x8e\xac\rY^\xdcF\xaa\xd7x]\x8c'}, {0x20, ')%.-/'}, {0x20, '/dev/kvm\x00'}], 0xa, "add5811f584f3b830fd1d9a2fd0e810279e17dc0f90895fd52bd329202b32ac530681c20312cba4eb39152e0ffe63160ab5da80caf46c2880ecd0d4aa2ed9a82e6462e8407438d28cad2263bafe1aadf9edab19c612c418009572a3a0d7214e95226f9978fb117e7091ede51c72b95b157f3e802c379381d5239de6fa1e543707eb1152e2dc8c586efa18f8d4de9735deadd412b11ba0fb160c6c23a80be059a3d177da7314c693f2ceb2e52f39182aa774c9d4f2f9a69a322403eef619d05a2337999d1d5ba8e35921c6a9c52c170e3c77c1713e8b093a7835f54e8cb9b325fe0fbea"}, 0x121) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r7], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) preadv(r7, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 4.401002507s ago: executing program 4 (id=1156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0xc19, @remote, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x540c0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x24, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x0, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={0x20, r5, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x20}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d80), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) listen(r8, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r9, 0x0, 0x9, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0xfe, 0x8, "e714a5f102e7dcf8"}}}, 0x10) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4.257161053s ago: executing program 4 (id=1157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x2008, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000280)={0x4, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x200004, r4}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x0, 0x1, 0x3e, {0x3e, 0x3, "26600792bd5f60f88bd26d893d443eb87aa5ac3ae17c949fbf927aab7a2da8d84ffd1991760fd572c20d58fb1989b2576ab56808bb088037f580e008"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="00e0aeb0ae1236559c04"]}, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0xc, 0xf9, "742f5407c7d0b8f72e12feb88a3931bd495fbaaacfc937aa9c2737daf2d7cba0ce1fca0d55d83e471de7bfa6f8a19ebb02b20cf84d5f063040617e1feb31e4b99f110d49d142cbafb4689a96ee480d12ee7aabca8ef04df8d70425ca4117add80b7aee2f2cb58e47bab729e4f3ea02bc563ad86e40b12fb1d1886933f0851c8682d9bbf3e7042ec3a8c5e5d1c48a29a58fa27ca358c513f86dd2aa0ada9482894ade48e80611481a46d61df77ddf27f0ed5910abd4f1d5569f3673c2dcfcc2f672ba10a4bb4c5ba7199796dee07d5d84f7c08b06481af6832969a976c95284fd0ab9e4b7a3619198e36a41c3265537e6256212a118d14eebc1"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2a}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x49}, &(0x7f0000000400)={0xc0, 0x5, 0x1, "8e"}, &(0x7f0000000440)={0x40, 0x5, 0x2, "72da"}}) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 3.83108121s ago: executing program 3 (id=1160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0d650634928e5e0f7c616607a69d1254ef2d76f0", @ANYRES16=r1, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="080026006c09000009000700f4ae834f730000000a000600ffffffffffff00000800090001ac0f000500080000000000080035000000000004003400"], 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a400f0048203ff03007e00"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc, &(0x7f00000001c0)={[{0x5, 0x4e00, "68636bf5cd"}]}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x15) 2.353477053s ago: executing program 3 (id=1167): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) syz_usb_connect(0x0, 0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 2.144173606s ago: executing program 0 (id=1170): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) (async) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabh\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)r\xdc\x17\x99J\xaeE\xbdt\xe2L^2\xca\x8f\x1cZ\x84\xe3\xe6\x86iC\xcc\xa9\xbf\xeb\x92\r \xa86\x82\xc3\xa8\xf1\xb4\x0f\x9b\x88\x0f\xc8U\x99;\x9c\x17\xfc7\xdd\xd6\x8e%4\x17~\x9d\xe1\a\x00\x00\x00\xa5\x8fG\\\xd8\x80\x15\xcaw\x7f\xac\x063\xbaE\x11\xcc~Q\xcb/\x8bv\xf2B_\xc5\x8d\xb3\xdd\xbd\x1e\xde\x19\xb5\xc4\xcf%p\x89\xa2\xda\xc7', 0x2) r2 = fanotify_init(0x8, 0x1000) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) close(r3) (async) r4 = dup(r1) fanotify_mark(r2, 0x201, 0x48001038, r4, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x1, 0x8000000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000090601040000000000000000030000092700020073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) ftruncate(r4, 0x2) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r6, 0x0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x82, &(0x7f0000000340)={r9, 0xfffff7fd, 0xfffffff8, 0x8000d}, &(0x7f0000000480)=0x10) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7, @ANYRES64=r6, @ANYRES8=r8], 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 2.135684795s ago: executing program 0 (id=1171): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0x1008, "b546ba7bb959ebab028d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x4f, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockopt$ax25_int(r5, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000000)=0x4) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x1002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000002, 0xcb9, 0x8f], 0xeeee8000, 0x2010d3}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x54, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0xffffff59) 2.096093576s ago: executing program 4 (id=1172): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x80, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x5, 0x5}, {0x8, 0xf, 0x0, 0xf7}]}) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r2 = openat$drirender128(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000003c0)={0x0, 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:+ 00000000000000000525 '], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000a40)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6afe2ef6b196de1aaab99b60f44276ce4c9bd640b78c7fb5f66b7397692465"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x2, 0x3, 0x2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.968924184s ago: executing program 0 (id=1173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd7000044000000800030001000000080001000000000008003e000500000008004b0028"], 0x30}}, 0x8040) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x40032, 0xffffffffffffffff, 0x3fffe000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x2, r6, 0x29, r4}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x58, 0x6, 0xfff}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x8000, 0x8, 0xd, 0xea8, {{0x18, 0x4, 0x0, 0x38, 0x60, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @loopback, {[@timestamp={0x44, 0x14, 0xd5, 0x0, 0x1, [0x9, 0xd, 0x0, 0x5]}, @end, @end, @generic={0x134, 0x4, "8f8d"}, @generic={0x44, 0x9, "0ee765a80d535d"}, @end, @timestamp={0x44, 0x1c, 0x2a, 0x0, 0xb, [0x1, 0xfffffff7, 0x4, 0x200, 0x9, 0x7ff]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x15, [@multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x588, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x4, 0x3, 0x2}, {0x6, 0x9, 0x9, 0xeef}]}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x1}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x5, 0xd, 0x764d}]}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x970}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xebb555f}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r12}, {0xc8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x588}, 0x1, 0x0, 0x0, 0x40008140}, 0x4044000) 1.778383608s ago: executing program 1 (id=1175): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000001c0)) 1.651593042s ago: executing program 1 (id=1176): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x23ff, 0x12000) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000000000, 0x800000000000000]}) 1.587739754s ago: executing program 1 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a01040000e1ffffffffff090000050900020073797a32000000001c000480180001800d00010073796e70626f787900000000040002800900010073797a3100000000140000001100010000000000000000000e00000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x400480d}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) (async) close(0x3) 1.51590911s ago: executing program 1 (id=1178): ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1a, 0x101, 0xfffffffc, 0x84000, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r0, 0x2) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@rc={0x1f, @fixed}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x28) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r3, &(0x7f00000002c0)={0x3, 0x1, 0x3a, 0x7, 0x0, 0x6, 0x1, 0xfffffffffffff001, 0x65d}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e21, 0x8, @loopback, 0x8}}, 0x8, 0x101}, &(0x7f0000000400)=0x90) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x80) execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000700)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)=')#[)@/^\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='+-\x00', &(0x7f0000000640)='#-*\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\x00']}, &(0x7f0000000940)={[&(0x7f0000000780)='*{^\x06\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='&[\x00']}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000980), &(0x7f00000009c0)='./file1\x00', 0x8, 0x3) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000a00)=@filename='./file1\x00', 0xee00, &(0x7f0000000a40)={0x2, 0x8, 0x7fffffffffffffff, 0x80, 0xfffffffffffffffa, 0x48, 0x3, 0x10, 0x9}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000000b00)=@attr_other={0x0, 0x0, 0x6, &(0x7f0000000ac0)=0x5}) bind$vsock_stream(r5, &(0x7f0000000b40)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000b80)=0xea) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000bc0)=""/234) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000cc0)={0x832c1fb24597c774, 0x0, {[0xfffffffffffff800, 0x72d, 0x9, 0x7, 0xffffffffffffff36, 0x0, 0x2, 0x6]}}) sendmsg$nl_generic(r5, &(0x7f0000001e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000d80)={0x101c, 0x2b, 0x400, 0x70bd2d, 0x25dfdbfc, {0xd}, [@generic="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", @typed={0x7, 0x9d, 0x0, 0x0, @str='+-\x00'}]}, 0x101c}, 0x1, 0x0, 0x0, 0x8002}, 0x10) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) fchown(r6, r3, r4) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000001e40)={0xbc, 0x0, 0x6}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001ec0)={0x0, @aes128, 0x0, @desc4}) mount$binder(0x0, &(0x7f0000001f00)='./file1\x00', &(0x7f0000001f40), 0x40080, &(0x7f0000001f80)={[{@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x4}}, {}], [{@euid_lt={'euid<', r3}}, {@euid_lt={'euid<', r3}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'trusted.overlay.redirect\x00'}}, {@uid_eq={'uid', 0x3d, r3}}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fowner_gt={'fowner>', r3}}]}) timerfd_create(0x5, 0x400) listen(r5, 0x7fffffff) sendto(r5, &(0x7f0000002100)="43ccde0c25e6c57d0e5493c8206e9e3df75fb9377354a8e990f2cde08ecd716305a04a2e50fbd5e6afc8a85d3de0135d967e168b94944848ab96aaafe3585adc546e4615cbcd1b29baad8c267819d036b0f10eb4634bf522d0fce527811d0b1e7a01be6841979d91d9a7cd9730f8ab611cbb7fa44f66523f288efb8243d3d8158bc6139d799caac4ac542aa1845b78db1eac5acbce573324b1f09c6f126864c0387e48c7546c03ad5855ca77f8b9d0ea96c8d9db2c", 0xb5, 0x4000000, &(0x7f00000021c0)=@pppoe={0x18, 0x0, {0x4, @local, 'geneve0\x00'}}, 0x80) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000002240)=0x0) syz_open_procfs(r7, &(0x7f0000002280)='net/sco\x00') execve(&(0x7f00000022c0)='./file1\x00', &(0x7f0000002340)={[&(0x7f0000002300)='rootcontext']}, &(0x7f0000002400)={[&(0x7f0000002380)='\x00', &(0x7f00000023c0)='-^!@${\\\xa3-\\\'@.\x00']}) 1.388379572s ago: executing program 1 (id=1179): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000d40)={0xa, @pix_mp={0x4, 0x0, 0x34565348, 0x0, 0x0, [{0x4, 0x71}, {0x8}, {}, {}, {0x6}, {0x3}]}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000d40)={0xa, @pix_mp={0x4, 0x0, 0x34565348, 0x0, 0x0, [{0x4, 0x71}, {0x8}, {}, {}, {0x6}, {0x3}]}}) (async) 1.348810963s ago: executing program 1 (id=1180): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x300048c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x20, 0x9, 0xca, {0xca, 0x2, "8813327de334f3a5570d8b3e635ddeb3f77ba17d5bdd6cb3637725d68d385057c5c072c50b845f9c0949ba65c5284769e2c10cfc645e56e1c6960de7ba040a6a99a5d7386729186feedd0a04a6773b44eceb88c8cf296794ed6d90e53a8bc1e355a6a2f5c329b0fb2d916a928addb4bd4b864f0d6caf859f7fc6270ad11874ed8e0dca2c662663b038816b3189e966fe24f888999373616b57af45e8995f0b034d16521a1e6d22a33a0b37ecea92b3b5f8394cd0319d3167ac77efad43037304ad5a3d9cb845ae7d"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, &(0x7f0000000080)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x50, 0x60, 0x3, 0x2, "0d76ff5e", "c58b0c8a"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x7, 0xff, 0x9, 0x81, 0xffff}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x20, 0x7, 0xe, "806b087a6a379a47bd5ddfae5a66"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x400, 0x10}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "22ff"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="e118ef405690"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "00cf"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.232981155s ago: executing program 0 (id=1181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000003c0)=0x4) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000180)={0xa}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000280)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 941.584574ms ago: executing program 0 (id=1182): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000040)) 875.726467ms ago: executing program 3 (id=1183): bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x40, 0x0, 0x212, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffff01}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xfa3a6a4a69014c14}, 0x20040001) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='btrfs\x00', 0x208083, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) sendto$inet6(r1, &(0x7f0000000300)="a6e2", 0x2, 0x840, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r5}) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f0000000040)={0x3, 0x200, 0x6, 0xff, 0x6, 0xb}) 807.254683ms ago: executing program 0 (id=1184): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x48, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'\x00', {0x2, 0x0, @broadcast}}) socketpair(0x1f, 0x4, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = semget(0x1, 0x5, 0x6b4) semctl$GETPID(r3, 0x2, 0xb, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x1, 0x1000, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7800, 0x700, 0x400, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x1, 0x20, 0x80, 0x57, {{0x12, 0x4, 0x0, 0x2, 0x48, 0x65, 0x0, 0x2e, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp_addr={0x44, 0x14, 0x16, 0x1, 0x2, [{@broadcast, 0x526b}, {@remote, 0x7}]}, @timestamp_addr={0x44, 0x1c, 0xc5, 0x1, 0x7, [{@broadcast, 0x800}, {@multicast1, 0x3a1978f4}, {@private=0xa010100, 0x9}]}, @noop, @noop]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@remote, @empty, 0x0}, &(0x7f00000005c0)=0xc) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000600)={@multicast1, @broadcast, 0x0}, &(0x7f0000000640)=0xc) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05030500d3fc0300000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16, @ANYBLOB="00022dbd7000fbdbdf250f000000540001800800030007000000", @ANYRES32, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="54000180080001", @ANYRES32=r4, @ANYBLOB="080d8556ab403e", @ANYRES32=r5, @ANYBLOB="0800030002000000140002006e657470636930000000000000000000", @ANYRES32=r6, @ANYBLOB="140002006d616373", @ANYRES32=r9, @ANYBLOB, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x4044804}, 0x4880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x124, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x664}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000010}, 0x5) semop(r3, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x4, 0xb]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 284.201798ms ago: executing program 4 (id=1185): r0 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20882, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ppoll(&(0x7f0000000180)=[{r1, 0x7fd8d7ba93210521}, {0xffffffffffffffff, 0x100}, {}], 0x3, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) pipe2(0x0, 0x800) msgget(0x3, 0x710) msgget(0x2, 0x60c) msgget(0x1, 0x240) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000480)={0x4, 0x5, 0x8}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000640)=""/200, 0xc8, 0xfffffffffffffff9, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x40, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000600)=0x1c) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1, 0x7, 0x7}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r6, &(0x7f0000000580)={0xff, 0x2, 0x0, 0x6}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) flock(r7, 0xa) 178.09838ms ago: executing program 4 (id=1186): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioperm(0x3, 0x7, 0x7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './file1/file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x804418, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r3, &(0x7f0000000100)=""/80, 0x2f) getdents(r3, &(0x7f0000000200)=""/251, 0xfb) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xfff, 0x1, 0x81, 0x5, 0xffff, 0x4}, {0x6, 0xfffffff8, 0x4, 0xffffffffffffffff, 0x8, 0x7fff}], ['\x00', '\x00']}) 0s ago: executing program 4 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000300)="00cf1f22fa51353026f036bf8167df2f6ecbf10c3ae108996b1a20cfa94f1795b56841fc5d38fd8baff3d83dfa696f7f1f7cfa0849e9158480464001599096497b27cee4068a3f1574bf2d0dd536fd5a66071848bb9c254c19", 0x59) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000010b3edab559883d45e180001070000000000000000000000000c000200"], 0x20}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000010b3edab559883d45e180001070000000000000000000000000c000200"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/184, 0xbd}, {&(0x7f0000000080)=""/7, 0x4}, {&(0x7f0000000240)=""/158, 0xa6}, {&(0x7f0000000440)=""/140, 0xbb95c41fa0ac8ff1}], 0x4}, 0x5}], 0x400000000000143, 0x40010003, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 077][ T5992] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 255.348688][ T5992] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 255.356349][ T5992] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 255.364189][ T5992] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 255.374376][ T5992] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 255.382386][ T5992] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 255.391765][ T5992] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 255.399623][ T5992] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 255.407773][ T5992] hid-generic 0006:0004:0009.0016: unknown main item tag 0x0 [ 255.446484][ T5992] hid-generic 0006:0004:0009.0016: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 255.538927][ T8559] fido_id[8559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.584038][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 255.680796][ T8567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.689924][ T8567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.755800][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 256.157882][ T24] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 256.179947][ T24] usb 4-1: USB disconnect, device number 86 [ 256.299466][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.309279][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.319564][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.328510][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.338550][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.347450][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.405302][ T5878] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 256.457064][ T5892] usbhid 1-1:0.0: can't add hid device: -32 [ 256.463152][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 256.555254][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 256.561110][ T5878] usb 2-1: no configurations [ 256.566269][ T5878] usb 2-1: can't read configurations, error -22 [ 256.695364][ T5878] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 256.845406][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 256.851282][ T5878] usb 2-1: no configurations [ 256.856136][ T5878] usb 2-1: can't read configurations, error -22 [ 256.862650][ T5878] usb usb2-port1: attempt power cycle [ 256.918869][ T8577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.995283][ T5892] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 257.009468][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.018269][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.145298][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 257.152090][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.163322][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.176319][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.185522][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.200955][ T5892] usb 4-1: config 0 descriptor?? [ 257.215346][ T5878] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 257.235959][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 257.241911][ T5878] usb 2-1: no configurations [ 257.247069][ T5878] usb 2-1: can't read configurations, error -22 [ 257.376858][ T5878] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 257.406365][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 257.412223][ T5878] usb 2-1: no configurations [ 257.416947][ T5878] usb 2-1: can't read configurations, error -22 [ 257.423679][ T5878] usb usb2-port1: unable to enumerate USB device [ 257.624470][ T5892] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 257.639465][ T5892] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 257.651227][ T5892] microsoft 0003:045E:07DA.0017: usage index exceeded [ 257.658925][ T5892] microsoft 0003:045E:07DA.0017: item 0 0 2 2 parsing failed [ 257.667412][ T5892] microsoft 0003:045E:07DA.0017: parse failed [ 257.673697][ T5892] microsoft 0003:045E:07DA.0017: probe with driver microsoft failed with error -22 [ 257.753571][ T8585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.762472][ T8585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.820960][ T5878] usb 4-1: USB disconnect, device number 87 [ 258.581628][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.593336][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.612084][ T8604] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 259.147719][ T8609] program syz.0.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.179331][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.188876][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.575263][ T5892] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 259.725335][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 259.732941][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.748506][ T5892] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 259.758267][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.762233][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.776148][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.784868][ T5892] usb 2-1: config 0 descriptor?? [ 260.204076][ T5892] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 261.181978][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.195297][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.261066][ T5878] usb 2-1: USB disconnect, device number 93 [ 261.701580][ T8619] ufs: You didn't specify the type of your ufs filesystem [ 261.701580][ T8619] [ 261.701580][ T8619] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 261.701580][ T8619] [ 261.701580][ T8619] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 261.733649][ T8619] ufs: ufstype=old is supported read-only [ 261.968744][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.760'. [ 262.335275][ T800] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 262.485340][ T800] usb 2-1: Using ep0 maxpacket: 32 [ 262.492382][ T800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.503799][ T800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.513899][ T800] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 262.527088][ T800] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 262.536304][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.547305][ T800] usb 2-1: config 0 descriptor?? [ 262.608242][ T8628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.762'. [ 262.855495][ T5992] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 262.962932][ T800] usbhid 2-1:0.0: can't add hid device: -71 [ 262.970601][ T800] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 262.981295][ T800] usb 2-1: USB disconnect, device number 94 [ 262.995570][ T5992] usb 4-1: device descriptor read/64, error -71 [ 263.235356][ T5992] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 263.365327][ T5992] usb 4-1: device descriptor read/64, error -71 [ 263.376871][ T8630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.386254][ T8630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.475717][ T5992] usb usb4-port1: attempt power cycle [ 263.573806][ T8635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.736342][ T8644] sp0: Synchronizing with TNC [ 263.825479][ T5992] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 263.850125][ T5992] usb 4-1: device descriptor read/8, error -71 [ 264.014527][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.023648][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.105441][ T5992] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 264.126351][ T5992] usb 4-1: device descriptor read/8, error -71 [ 264.205399][ T800] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 264.235818][ T5992] usb usb4-port1: unable to enumerate USB device [ 264.355286][ T800] usb 2-1: Using ep0 maxpacket: 16 [ 264.361983][ T800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.372257][ T800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.383293][ T800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 264.393171][ T800] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 264.402943][ T800] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.420066][ T800] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 264.429312][ T800] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 264.437417][ T800] usb 2-1: Manufacturer: syz [ 264.444191][ T800] usb 2-1: config 0 descriptor?? [ 264.640861][ T8659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.705904][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.716605][ T800] rc_core: IR keymap rc-hauppauge not found [ 264.718964][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.724761][ T800] Registered IR keymap rc-empty [ 264.738198][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.765464][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.786604][ T800] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 264.800726][ T800] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input34 [ 264.816555][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.835404][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.857323][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.875426][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.895579][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.915335][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.935692][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.944925][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.954926][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.963248][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.973554][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.982764][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.985420][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.015620][ T800] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.037343][ T800] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 265.046842][ T800] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 265.129195][ T8653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.138249][ T8653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.164559][ T5878] usb 2-1: USB disconnect, device number 95 [ 265.566145][ T30] audit: type=1800 audit(1760913067.173:5): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.776" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 265.967360][ T8678] fuse: Unknown parameter './file0' [ 266.005403][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.779'. [ 266.014470][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.779'. [ 266.213876][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.236380][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.245107][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.255443][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.263334][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.295058][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.307148][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.317055][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.334292][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.344659][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.417834][ T5878] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 266.437122][ T8689] lo speed is unknown, defaulting to 1000 [ 266.577929][ T5878] usb 2-1: New USB device found, idVendor=0457, idProduct=ffff, bcdDevice= 0.00 [ 266.595345][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.618982][ T5878] usb 2-1: config 0 descriptor?? [ 266.625415][ T8699] : renamed from bond_slave_0 (while UP) [ 267.092818][ T8709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.788'. [ 267.136060][ T8712] netlink: 14 bytes leftover after parsing attributes in process `syz.0.789'. [ 267.421129][ T8712] bond0 (unregistering): (slave 30): Releasing backup interface [ 267.434344][ T8712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.448363][ T8712] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 267.460374][ T8712] veth1_vlan: left allmulticast mode [ 267.470104][ T8712] bond0 (unregistering): Released all slaves [ 267.534394][ T3024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.582292][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 267.635043][ T3024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.722576][ T3024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.831618][ T3024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.861792][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.872288][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.887423][ T8689] bridge_slave_0: entered allmulticast mode [ 267.899339][ T8689] bridge_slave_0: entered promiscuous mode [ 267.918142][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.931335][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.942362][ T8689] bridge_slave_1: entered allmulticast mode [ 267.953086][ T8689] bridge_slave_1: entered promiscuous mode [ 268.083030][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.121071][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.214219][ T8689] team0: Port device team_slave_0 added [ 268.222779][ T3024] bridge_slave_1: left allmulticast mode [ 268.230016][ T3024] bridge_slave_1: left promiscuous mode [ 268.240348][ T3024] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.254430][ T3024] bridge_slave_0: left allmulticast mode [ 268.261836][ T3024] bridge_slave_0: left promiscuous mode [ 268.269070][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.281758][ T8741] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 268.378892][ T5846] Bluetooth: hci4: command tx timeout [ 268.649286][ T800] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 268.806009][ T800] usb 4-1: Using ep0 maxpacket: 8 [ 268.827358][ T800] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 268.844219][ T800] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.854442][ T800] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.884938][ T800] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.907648][ T800] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.928242][ T800] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.937647][ T800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.999151][ T3024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.011919][ T3024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.036861][ T3024] bond0 (unregistering): Released all slaves [ 269.060099][ T8740] syzkaller1: entered promiscuous mode [ 269.068907][ T8740] syzkaller1: entered allmulticast mode [ 269.081535][ T8689] team0: Port device team_slave_1 added [ 269.183669][ T800] usb 4-1: usb_control_msg returned -32 [ 269.195503][ T800] usbtmc 4-1:16.0: can't read capabilities [ 269.240870][ T5878] usbhid 2-1:0.0: can't add hid device: -71 [ 269.257190][ T5878] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 269.297307][ T5878] usb 2-1: USB disconnect, device number 96 [ 269.308555][ T3024] tipc: Left network mode [ 269.327065][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.337938][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.375670][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.390763][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.400883][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.446382][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.717395][ T8689] hsr_slave_0: entered promiscuous mode [ 269.724326][ T8689] hsr_slave_1: entered promiscuous mode [ 269.733816][ T8689] debugfs: 'hsr0' already exists in 'hsr' [ 269.740246][ T8689] Cannot create hsr debugfs directory [ 269.779767][ T8756] dlm: Unknown command passed to DLM device : 0 [ 269.779767][ T8756] [ 269.898541][ T8761] tmpfs: Bad value for 'mpol' [ 270.007177][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.028120][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.049906][ T800] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 270.235373][ T800] usb 2-1: Using ep0 maxpacket: 8 [ 270.247906][ T800] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 270.271559][ T800] usb 2-1: config 0 has no interface number 0 [ 270.298206][ T800] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 270.325326][ T800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.333388][ T800] usb 2-1: Product: syz [ 270.370009][ T800] usb 2-1: Manufacturer: syz [ 270.374681][ T800] usb 2-1: SerialNumber: syz [ 270.431117][ T800] usb 2-1: config 0 descriptor?? [ 270.455405][ T5846] Bluetooth: hci4: command tx timeout [ 270.457490][ T800] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 270.485448][ T800] pctv452e: pctv452e_power_ctrl: 1 [ 270.485448][ T800] [ 270.492838][ T800] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 270.492838][ T800] [ 270.565375][ T800] dvb-usb: bulk message failed: -22 (5/0) [ 270.604359][ T800] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 270.615101][ T3024] hsr_slave_0: left promiscuous mode [ 270.626078][ T800] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 270.641649][ T3024] hsr_slave_1: left promiscuous mode [ 270.641672][ T800] usb 2-1: media controller created [ 270.654829][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.665429][ T800] dvb-usb: bulk message failed: -22 (8/0) [ 270.671217][ T800] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 270.672177][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.696154][ T800] dvb-usb: MAC address reading failed. [ 270.707287][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.724183][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.759068][ T800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.818497][ T3024] veth1_macvtap: left promiscuous mode [ 270.830370][ T3024] veth0_macvtap: left promiscuous mode [ 270.842080][ T3024] veth1_vlan: left promiscuous mode [ 270.852193][ T3024] veth0_vlan: left promiscuous mode [ 270.882743][ T800] DVB: Unable to find symbol stb0899_attach() [ 270.896188][ T800] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 271.046741][ T800] rc_core: IR keymap rc-tt-1500 not found [ 271.052749][ T800] Registered IR keymap rc-empty [ 271.065058][ T800] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 271.099049][ T800] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input35 [ 271.114619][ T800] dvb-usb: schedule remote query interval to 100 msecs. [ 271.122075][ T800] pctv452e: pctv452e_power_ctrl: 0 [ 271.122075][ T800] [ 271.129561][ T800] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 271.228500][ T800] dvb-usb: bulk message failed: -22 (4/0) [ 271.228547][ T800] dvb-usb: error -22 while querying for an remote control event. [ 271.260720][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.276475][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.339209][ T800] dvb-usb: bulk message failed: -22 (4/0) [ 271.345029][ T800] dvb-usb: error -22 while querying for an remote control event. [ 271.444691][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.458499][ T800] usb 4-1: USB disconnect, device number 92 [ 271.473673][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.493576][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 271.504251][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 271.639333][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 271.651397][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 271.779804][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 271.787190][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 271.862147][ T3024] team0 (unregistering): Port device team_slave_1 removed [ 271.910580][ T3024] team0 (unregistering): Port device team_slave_0 removed [ 271.918149][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 271.923919][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 272.045577][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 272.051384][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 272.130931][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.141307][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.150876][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.163691][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.175853][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 272.183307][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 272.189610][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.200413][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.212505][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.218624][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.311448][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 272.321780][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 272.427129][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.439474][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.449739][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 272.457326][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 272.482634][ T5885] lo speed is unknown, defaulting to 1000 [ 272.490077][ T5885] syz0: Port: 1 Link DOWN [ 272.526732][ T5885] usb 2-1: USB disconnect, device number 97 [ 272.536698][ T5846] Bluetooth: hci4: command tx timeout [ 272.659947][ T5885] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 272.660523][ T8689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.758838][ T8689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.824192][ T8689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.859298][ T8689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.231009][ T8689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.324347][ T8689] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.376830][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.384047][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.423087][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.430366][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.677865][ T8840] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 273.699551][ T8839] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 274.397806][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.615867][ T5846] Bluetooth: hci4: command tx timeout [ 274.625322][ T5885] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 274.811590][ T8881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.820413][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.820474][ T5885] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.820499][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.846879][ T5885] usb 2-1: config 0 descriptor?? [ 274.881718][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 274.895948][ T8881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.128465][ T8689] veth0_vlan: entered promiscuous mode [ 275.150161][ T8689] veth1_vlan: entered promiscuous mode [ 275.193645][ T8689] veth0_macvtap: entered promiscuous mode [ 275.207664][ T8689] veth1_macvtap: entered promiscuous mode [ 275.232157][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.253411][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.256421][ T800] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 275.278074][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 275.287835][ T3024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.299808][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 275.306842][ T3024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.318450][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.325906][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 275.332079][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.333701][ T3024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.358939][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 275.366024][ T3024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.376142][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 275.383546][ T5885] pwc: recv_control_msg error -32 req 04 val 1400 [ 275.419336][ T5885] pwc: recv_control_msg error -32 req 02 val 2000 [ 275.430042][ T800] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 275.446778][ T5885] pwc: recv_control_msg error -32 req 02 val 2100 [ 275.456485][ T800] usb 4-1: config 0 has no interface number 0 [ 275.485577][ T800] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.510025][ T800] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 275.530101][ T800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 275.541806][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.555812][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.563249][ T800] usb 4-1: Product: syz [ 275.569424][ T800] usb 4-1: Manufacturer: syz [ 275.574065][ T800] usb 4-1: SerialNumber: syz [ 275.596624][ T800] usb 4-1: config 0 descriptor?? [ 275.619682][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.631463][ T800] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 275.642740][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.665319][ T5885] pwc: recv_control_msg error -32 req 02 val 2500 [ 275.685744][ T5885] pwc: recv_control_msg error -32 req 02 val 2400 [ 275.902687][ T5885] pwc: recv_control_msg error -71 req 02 val 2900 [ 275.910277][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 275.925632][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 275.942200][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 275.962111][ T5885] pwc: Registered as video103. [ 276.001714][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 276.098179][ T5885] usb 2-1: USB disconnect, device number 98 [ 276.168708][ T5878] usb 4-1: USB disconnect, device number 93 [ 276.191421][ T5878] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 276.269261][ T5916] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 276.369647][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.402901][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.435303][ T5916] usb 5-1: device descriptor read/64, error -71 [ 276.904580][ T8952] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 276.924143][ T8952] tmpfs: Unknown parameter 'grpquota_blo/@' [ 277.025263][ T5892] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 277.066368][ T8955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.175672][ T5916] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 277.195355][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 277.210261][ T5892] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 277.218804][ T5892] usb 4-1: config 0 has no interface number 0 [ 277.235896][ T5892] usb 4-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 277.248770][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.271192][ T5892] usb 4-1: Product: syz [ 277.285267][ T5892] usb 4-1: Manufacturer: syz [ 277.290043][ T5892] usb 4-1: SerialNumber: syz [ 277.306261][ T5892] usb 4-1: config 0 descriptor?? [ 277.311323][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c89c00: rx timeout, send abort [ 277.336161][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 277.346575][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.357022][ T5916] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 277.366254][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.378144][ T5916] usb 5-1: config 0 descriptor?? [ 277.531092][ T5892] mos7840 4-1:0.186: required endpoints missing [ 277.744204][ T5892] usb 4-1: USB disconnect, device number 94 [ 277.801236][ T5916] hid_parser_main: 7 callbacks suppressed [ 277.801260][ T5916] wacom 0003:056A:0045.0019: unknown main item tag 0x0 [ 277.814094][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c89800: rx timeout, send abort [ 277.814167][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c89c00: abort rx timeout. Force session deactivation [ 277.839796][ T5916] wacom 0003:056A:0045.0019: unknown main item tag 0x0 [ 277.867599][ T5916] wacom 0003:056A:0045.0019: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 277.908692][ T5916] wacom 0003:056A:0045.0019: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.4-1/input0 [ 277.959420][ T5916] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0045.0019/input/input38 [ 278.092291][ T5916] usb 5-1: USB disconnect, device number 3 [ 278.314149][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c89800: abort rx timeout. Force session deactivation [ 278.515285][ T5878] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 278.625922][ T5885] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 278.697561][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 278.704777][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.717722][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.727577][ T5878] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.736689][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.747536][ T5878] usb 2-1: config 0 descriptor?? [ 278.757089][ T5878] hub 2-1:0.0: USB hub found [ 278.786891][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.797928][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.818475][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 278.827305][ T5885] usb 4-1: can't read configurations, error -71 [ 278.964540][ T5878] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 279.163606][ T9001] loop2: detected capacity change from 0 to 7 [ 279.207129][ T8322] Dev loop2: unable to read RDB block 7 [ 279.212822][ T8322] loop2: AHDI p1 p2 p3 [ 279.219364][ T8322] loop2: partition table partially beyond EOD, truncated [ 279.234872][ T5878] usbhid 2-1:0.0: can't add hid device: -71 [ 279.241110][ T5878] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 279.277410][ T8322] loop2: p1 start 1601398130 is beyond EOD, truncated [ 279.307314][ T8322] loop2: p2 start 1702059890 is beyond EOD, truncated [ 279.327000][ T5878] usb 2-1: USB disconnect, device number 99 [ 279.404085][ T9001] Dev loop2: unable to read RDB block 7 [ 279.445306][ T9001] loop2: AHDI p1 p2 p3 [ 279.457553][ T9001] loop2: partition table partially beyond EOD, truncated [ 279.503391][ T9001] loop2: p1 start 1601398130 is beyond EOD, truncated [ 279.539123][ T9001] loop2: p2 start 1702059890 is beyond EOD, truncated [ 279.716227][ T9016] program syz.1.850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.745099][ T9016] overlayfs: conflicting lowerdir path [ 279.814771][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.855757][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.026216][ T800] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 280.155241][ T5916] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 280.164266][ T800] usb 4-1: device descriptor read/64, error -71 [ 280.318981][ T5916] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.328369][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.336462][ T5916] usb 2-1: Product: syz [ 280.340661][ T5916] usb 2-1: Manufacturer: syz [ 280.345847][ T5916] usb 2-1: SerialNumber: syz [ 280.356219][ T5916] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.382267][ T5892] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.405852][ T800] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 280.521436][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.532185][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.545452][ T800] usb 4-1: device descriptor read/64, error -71 [ 280.658001][ T800] usb usb4-port1: attempt power cycle [ 280.999058][ T5885] usb 2-1: USB disconnect, device number 100 [ 281.006918][ T800] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 281.036009][ T800] usb 4-1: device descriptor read/8, error -71 [ 281.162188][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.176400][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.275266][ T800] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 281.297153][ T800] usb 4-1: device descriptor read/8, error -71 [ 281.405651][ T800] usb usb4-port1: unable to enumerate USB device [ 281.825250][ T5892] usb 2-1: Service connection timeout for: 257 [ 281.835251][ T5892] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 281.864516][ T5892] ath9k_htc: Failed to initialize the device [ 281.879463][ T5885] usb 2-1: ath9k_htc: USB layer deinitialized [ 281.967077][ T9047] netlink: 108 bytes leftover after parsing attributes in process `syz.0.863'. [ 282.000546][ T9049] input: syz0 as /devices/virtual/input/input41 [ 282.046241][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.863'. [ 282.074044][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.863'. [ 282.207793][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.248149][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.555246][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 282.715406][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 282.730194][ T5885] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 282.740356][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.748863][ T5885] usb 5-1: Product: syz [ 282.753134][ T5885] usb 5-1: Manufacturer: syz [ 282.758173][ T5885] usb 5-1: SerialNumber: syz [ 282.766167][ T5885] usb 5-1: config 0 descriptor?? [ 282.832876][ T9059] batadv_slave_1: entered promiscuous mode [ 283.174706][ T5885] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 283.185444][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.195680][ T5885] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 283.203677][ T5885] usb 5-1: media controller created [ 283.209503][ T799] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 283.233564][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.375268][ T799] usb 4-1: Using ep0 maxpacket: 16 [ 283.382611][ T799] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.394929][ T799] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.401645][ T799] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 283.410801][ T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.425925][ T799] usb 4-1: config 0 descriptor?? [ 283.432430][ T9054] afs: Unknown parameter 'cþˆ' [ 283.776484][ T5885] zl10353_read_register: readreg error (reg=127, ret==0) [ 283.783770][ T9052] dtv5100: wlen = 0, aborting. [ 283.789179][ T5885] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 283.797564][ T5885] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 283.825083][ T5885] usb 5-1: USB disconnect, device number 4 [ 283.881886][ T5885] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 283.961952][ T9059] comedi comedi3: rti802: a I/O base address must be specified [ 283.970967][ T9059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.980519][ T9059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.995833][ T799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 284.003321][ T799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 284.011674][ T799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 284.019453][ T799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 284.027890][ T799] nzxt-smart2 0003:1E71:2009.001A: unknown main item tag 0x0 [ 284.038136][ T799] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 284.055401][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 284.061653][ T5921] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 284.070265][ T5921] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 284.193103][ C1] usb 4-1: input irq status -75 received [ 284.353047][ T30] audit: type=1326 audit(1760913085.963:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.4.868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f563d98efc9 code=0x3fff0000 [ 284.400743][ T9059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.412595][ T9059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.045644][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.057248][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.504386][ T9073] netlink: 'syz.1.872': attribute type 5 has an invalid length. [ 285.755528][ T5921] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 285.839441][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.852879][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.917455][ T5921] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 285.926898][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.947995][ T5921] usb 2-1: config 0 descriptor?? [ 285.968339][ T5921] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 285.968370][ T9081] loop0: Can't mount, would change RO state [ 286.003861][ T5892] usb 4-1: USB disconnect, device number 101 [ 286.023427][ T9059] batadv_slave_1: left promiscuous mode [ 286.163463][ T5921] gp8psk: usb in 128 operation failed. [ 286.170224][ T5921] gp8psk: usb in 137 operation failed. [ 286.176085][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.188437][ T5921] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 286.197463][ T5921] usb 2-1: media controller created [ 286.218788][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.244157][ T5921] gp8psk_fe: Frontend attached [ 286.250094][ T5921] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 286.259168][ T5921] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 286.345405][ T800] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 286.505286][ T5892] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 286.513733][ T5921] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 286.525749][ T5921] gp8psk: found Genpix USB device pID = 203 (hex) [ 286.532748][ T800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.547921][ T800] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.558492][ T800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.571741][ T800] usb 5-1: config 0 descriptor?? [ 286.617495][ T9094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.628157][ T9094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.677557][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 286.689135][ T5892] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 286.698881][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.710479][ T5892] usb 4-1: config 0 descriptor?? [ 286.717074][ T9086] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 286.728604][ T9073] netlink: 'syz.1.872': attribute type 41 has an invalid length. [ 286.738788][ T5921] usb 2-1: USB disconnect, device number 101 [ 286.820244][ T5921] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 286.994668][ T800] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 287.008686][ T800] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001B/input/input42 [ 287.110801][ T800] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 287.134550][ T9086] netlink: 244 bytes leftover after parsing attributes in process `syz.3.877'. [ 287.209349][ C0] keyboard: can't emulate rawmode for keycode 240 [ 287.218532][ C0] keyboard: can't emulate rawmode for keycode 240 [ 287.228563][ C0] keyboard: can't emulate rawmode for keycode 240 [ 287.244348][ C0] keyboard: can't emulate rawmode for keycode 240 [ 287.250849][ C0] keyboard: can't emulate rawmode for keycode 240 [ 287.257371][ C0] keyboard: can't emulate rawmode for keycode 240 [ 287.263836][ C0] keyboard: can't emulate rawmode for keycode 240 [ 287.272535][ C0] keyboard: can't emulate rawmode for keycode 240 [ 287.279027][ C0] keyboard: can't emulate rawmode for keycode 240 [ 287.529347][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.538363][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.549466][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.558404][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.623057][ T799] usb 5-1: USB disconnect, device number 5 [ 287.638397][ T5885] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 287.797130][ T5885] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 287.805426][ T5885] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 287.821637][ T5885] usb 2-1: config 8 has no interface number 0 [ 287.827907][ T5885] usb 2-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 287.839800][ T5885] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.852426][ T5885] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 287.862285][ T5885] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 287.875453][ T5885] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 287.884533][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.899037][ T5885] usb 2-1: NFC: intf ffff888075cf7000 id ffffffff8eb250e0 [ 287.934215][ T5885] nfcmrvl 2-1:8.80: NFC: registered with nci successfully [ 288.103613][ T5921] usb 2-1: USB disconnect, device number 102 [ 288.112533][ T5921] usb 2-1: NFC: intf ffff888075cf7000 [ 288.585468][ T5921] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 288.766533][ T5921] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 288.815740][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.837078][ T5921] usb 5-1: config 0 descriptor?? [ 288.868118][ T9137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 289.211234][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 289.220346][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 289.232228][ T5892] usb 4-1: USB disconnect, device number 102 [ 289.425657][ T5878] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 289.742265][ T5921] usb 5-1: Cannot set autoneg [ 289.765403][ T5921] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 289.784135][ T5921] usb 5-1: USB disconnect, device number 6 [ 289.822538][ T5878] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 289.851657][ T5878] usb 2-1: config 0 has no interface number 0 [ 289.871952][ T5878] usb 2-1: config 0 interface 217 altsetting 16 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 289.905290][ T5878] usb 2-1: config 0 interface 217 has no altsetting 0 [ 289.927086][ T5878] usb 2-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=26.93 [ 289.939305][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.956224][ T5878] usb 2-1: Product: syz [ 289.965508][ T5878] usb 2-1: Manufacturer: syz [ 289.970156][ T5878] usb 2-1: SerialNumber: syz [ 289.998878][ T5878] usb 2-1: config 0 descriptor?? [ 290.016450][ T9149] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 290.241598][ T5878] em28xx 2-1:0.217: New device syz syz @ 12 Mbps (2040:651f, interface 217, class 217) [ 290.254127][ T5878] em28xx 2-1:0.217: Device initialization failed. [ 290.262914][ T5878] em28xx 2-1:0.217: Device must be connected to a high-speed USB 2.0 port. [ 290.279305][ T5878] usb 2-1: USB disconnect, device number 103 [ 290.472280][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 290.472300][ T30] audit: type=1326 audit(1760913092.083:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.4.890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f563d98efc9 code=0x0 [ 290.576915][ T30] audit: type=1326 audit(1760913092.193:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.4.890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f563d98efc9 code=0x0 [ 290.735572][ T9185] fuse: Unknown parameter 'çä†KÏÆêCúõ¾[^k·ú¾;ªü16¡bWè3NiL퀵ˆ¤ ^wûWs΄d:Þ›Ö4ÃÛƒ©ƒ8ïÉhÒ*7`/éûÓBHB*‡„#ÃBÒÚÌ1' [ 291.147250][ T5892] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 291.315459][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 291.327834][ T5892] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 291.339921][ T5892] usb 2-1: config 8 has no interface number 0 [ 291.349199][ T5892] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 291.361111][ T5892] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 291.374142][ T5892] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 291.387422][ T5892] usb 2-1: config 8 interface 206 has no altsetting 0 [ 291.395324][ T5878] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 291.408772][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 291.419188][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.427579][ T5892] usb 2-1: Product: syz [ 291.431877][ T5892] usb 2-1: Manufacturer: syz [ 291.439976][ T5892] usb 2-1: SerialNumber: syz [ 291.587185][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 291.596634][ T5878] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 291.604771][ T5878] usb 5-1: config 0 has no interface number 0 [ 291.611015][ T5878] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.622207][ T5878] usb 5-1: config 0 interface 85 has no altsetting 0 [ 291.637176][ T5878] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 291.665284][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.673338][ T5878] usb 5-1: Product: syz [ 291.677811][ T5878] usb 5-1: Manufacturer: syz [ 291.682511][ T5878] usb 5-1: SerialNumber: syz [ 291.696962][ T5878] usb 5-1: config 0 descriptor?? [ 291.985444][ T5878] appletouch 5-1:0.85: Failed to read mode from device. [ 291.995507][ T5878] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 292.042015][ T5878] usb 5-1: USB disconnect, device number 7 [ 292.765284][ T5878] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 292.927380][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.937683][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 292.946879][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.968281][ T5878] usb 5-1: config 0 descriptor?? [ 292.978783][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 293.381891][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 293.389607][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 293.398024][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 293.406278][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 293.418808][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 293.426119][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 293.433627][ T5878] pwc: recv_control_msg error -32 req 02 val 2000 [ 293.441803][ T5878] pwc: recv_control_msg error -32 req 02 val 2100 [ 293.656382][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 293.664783][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 293.675424][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 293.682353][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 293.689807][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 293.697005][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 293.703863][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 293.712379][ T5878] pwc: Registered as video103. [ 293.721256][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44 [ 293.738808][ T5878] usb 5-1: USB disconnect, device number 8 [ 293.892265][ T5892] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 293.919812][ T9212] netlink: 'syz.3.897': attribute type 4 has an invalid length. [ 293.937958][ T5892] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 293.954785][ T5892] usb 2-1: USB disconnect, device number 104 [ 293.985141][ T5892] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 294.004394][ T5892] garmin_gps 2-1:8.206: device disconnected [ 294.302627][ T9228] net_ratelimit: 13 callbacks suppressed [ 294.302642][ T9228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.319393][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 294.368932][ T30] audit: type=1326 audit(1760913095.983:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.4.902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f563d98efc9 code=0x0 [ 294.765469][ T9251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.907'. [ 294.817299][ T9253] netlink: 64 bytes leftover after parsing attributes in process `syz.3.908'. [ 295.155267][ T5885] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 295.315325][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 295.322015][ T5885] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 295.330336][ T5885] usb 5-1: config 0 has no interface number 0 [ 295.339151][ T5885] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 295.348335][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.356442][ T5885] usb 5-1: Product: syz [ 295.360622][ T5885] usb 5-1: Manufacturer: syz [ 295.366049][ T5885] usb 5-1: SerialNumber: syz [ 295.373033][ T5885] usb 5-1: config 0 descriptor?? [ 295.381119][ T5885] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 295.385284][ T5916] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 295.495266][ T799] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 295.525264][ T5916] usb 4-1: device descriptor read/64, error -71 [ 295.583985][ T5885] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 295.596877][ T5885] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 295.660228][ T799] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 295.672452][ T799] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 295.683306][ T799] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.692590][ T799] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 295.701754][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.709819][ T799] usb 2-1: Product: syz [ 295.714036][ T799] usb 2-1: Manufacturer: syz [ 295.718767][ T799] usb 2-1: SerialNumber: syz [ 295.727017][ T799] usb 2-1: config 0 descriptor?? [ 295.735458][ T799] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 295.743111][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 295.752889][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 295.760720][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 295.765315][ T5916] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 295.768592][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 295.790643][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 295.801468][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 295.810909][ T799] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 295.821040][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 295.828822][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 295.836528][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 295.844538][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 295.852335][ T799] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 295.861792][ T799] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 295.926297][ T5916] usb 4-1: device descriptor read/64, error -71 [ 295.944731][ T800] usb 2-1: USB disconnect, device number 105 [ 295.966657][ T800] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 295.982297][ T800] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 295.999126][ T800] keyspan 2-1:0.0: device disconnected [ 296.014992][ T9277] netlink: 666 bytes leftover after parsing attributes in process `syz.0.917'. [ 296.015067][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 296.032564][ T5892] usb 5-1: USB disconnect, device number 9 [ 296.042108][ T5916] usb usb4-port1: attempt power cycle [ 296.054023][ T5892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 296.083446][ T5892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 296.106077][ T5892] quatech2 5-1:0.51: device disconnected [ 296.141664][ T9279] 9pnet_fd: Insufficient options for proto=fd [ 296.204472][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.213460][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.385304][ T5916] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 296.405890][ T5916] usb 4-1: device descriptor read/8, error -71 [ 296.645771][ T5916] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 296.678646][ T5916] usb 4-1: device descriptor read/8, error -71 [ 296.805621][ T5916] usb usb4-port1: unable to enumerate USB device [ 296.838488][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.848271][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.856700][ T799] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 296.995276][ T5885] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 297.015644][ T799] usb 5-1: Using ep0 maxpacket: 32 [ 297.022543][ T799] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.034226][ T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 297.045459][ T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.056750][ T799] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 297.066054][ T799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.082761][ T799] usb 5-1: config 0 descriptor?? [ 297.088637][ T9285] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 297.099902][ T799] hub 5-1:0.0: USB hub found [ 297.155238][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 297.162392][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.172656][ T5885] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.191330][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.200186][ T5885] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 297.209517][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.217655][ T5885] usb 2-1: Product: syz [ 297.221880][ T5885] usb 2-1: Manufacturer: syz [ 297.227935][ T5885] usb 2-1: SerialNumber: syz [ 297.238230][ T5885] usb 2-1: config 0 descriptor?? [ 297.246267][ T5885] gs_usb 2-1:0.0: Required endpoints not found [ 297.298792][ T799] hub 5-1:0.0: 2 ports detected [ 297.524181][ T799] hub 5-1:0.0: set hub depth failed [ 297.551931][ T799] usb 5-1: USB disconnect, device number 10 [ 297.810854][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.825675][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.208399][ T9333] netlink: 'syz.3.937': attribute type 12 has an invalid length. [ 298.266610][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.280135][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.285104][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.293591][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.298073][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.314916][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.079954][ T9360] netlink: 348 bytes leftover after parsing attributes in process `syz.3.945'. [ 299.137105][ T5885] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 299.244279][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.253635][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.295474][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 299.303584][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 299.314825][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.315457][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.334478][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.338769][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.348586][ T5885] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 299.365491][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.367314][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.379549][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.388583][ T5885] usb 5-1: config 0 descriptor?? [ 299.402493][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.412712][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.422129][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.432086][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.441895][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.451280][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.460703][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.691645][ T9375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.776820][ T9375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.799396][ T5878] usb 2-1: USB disconnect, device number 106 [ 299.845074][ T5885] aquacomputer_d5next 0003:0C70:F003.001C: hidraw0: USB HID v0.09 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0 [ 299.923155][ T9375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.079898][ T9375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.118575][ T9388] xt_socket: unknown flags 0x50 [ 300.197595][ T2947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.217004][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.233928][ T2947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.257444][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.370741][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.386317][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.395757][ T5878] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 300.415299][ T5916] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 300.471697][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.481928][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.483720][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.500411][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.559862][ T5878] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 300.568149][ T5878] usb 4-1: config 0 has no interface number 0 [ 300.574370][ T5878] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.578823][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 300.588663][ T5878] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.594618][ T5916] usb 2-1: not running at top speed; connect to a high speed hub [ 300.603587][ T5878] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 300.613613][ T5916] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.620584][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.633788][ T5916] usb 2-1: config 1 interface 0 has no altsetting 0 [ 300.645588][ T5878] usb 4-1: config 0 descriptor?? [ 300.664772][ T5916] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 300.675042][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.683247][ T5916] usb 2-1: Product: syz [ 300.687956][ T5916] usb 2-1: Manufacturer: syz [ 300.692588][ T5916] usb 2-1: SerialNumber: syz [ 301.068136][ T5878] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 301.080439][ T5878] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 301.088711][ T5878] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 301.096329][ T5878] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 301.103212][ T5878] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 301.110799][ T5878] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 301.118998][ T5878] isku 0003:1E7D:319C.001D: unknown main item tag 0x0 [ 301.130386][ T5878] isku 0003:1E7D:319C.001D: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input16 [ 301.460099][ T5878] usb 4-1: USB disconnect, device number 107 [ 301.463094][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input45 [ 301.489151][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.501007][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.513856][ T5183] bcm5974 2-1:1.0: could not read from device [ 301.532776][ T5183] bcm5974 2-1:1.0: could not read from device [ 301.543092][ T5916] usb 2-1: USB disconnect, device number 107 [ 301.564714][ T5183] bcm5974 2-1:1.0: could not read from device [ 301.591648][ T5183] bcm5974 2-1:1.0: could not read from device [ 301.751503][ T9415] overlay: Bad value for 'redirect_dir' [ 301.910839][ T5878] usb 5-1: USB disconnect, device number 11 [ 302.010105][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 302.075423][ T5916] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 302.089719][ T9425] overlayfs: conflicting options: userxattr,metacopy=on [ 302.116404][ T9425] netlink: 'syz.4.963': attribute type 28 has an invalid length. [ 302.209994][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.219433][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.229685][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.235482][ T5916] usb 2-1: Invalid ep0 maxpacket: 64 [ 302.238608][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.259118][ T9437] netlink: 'syz.0.968': attribute type 3 has an invalid length. [ 302.267130][ T9437] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.968'. [ 302.365470][ T5916] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 302.515259][ T5916] usb 2-1: Invalid ep0 maxpacket: 64 [ 302.521147][ T5916] usb usb2-port1: attempt power cycle [ 302.867477][ T5916] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 302.896704][ T5916] usb 2-1: Invalid ep0 maxpacket: 64 [ 302.989517][ T9451] sctp: [Deprecated]: syz.0.973 (pid 9451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.989517][ T9451] Use struct sctp_sack_info instead [ 303.045323][ T5916] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 303.073434][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.083365][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.086414][ T5916] usb 2-1: Invalid ep0 maxpacket: 64 [ 303.098875][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.102673][ T5916] usb usb2-port1: unable to enumerate USB device [ 303.108727][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.865956][ T9466] netlink: 1096 bytes leftover after parsing attributes in process `syz.4.978'. [ 303.875448][ T9466] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 304.050303][ T9475] netlink: 116 bytes leftover after parsing attributes in process `syz.4.980'. [ 304.084092][ T9479] netlink: 'syz.3.982': attribute type 6 has an invalid length. [ 304.093683][ T9479] netlink: 168 bytes leftover after parsing attributes in process `syz.3.982'. [ 304.104051][ T9475] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 304.112665][ T9482] netlink: 'syz.0.983': attribute type 58 has an invalid length. [ 304.185564][ T9486] overlayfs: conflicting options: userxattr,metacopy=on [ 304.274657][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 304.332066][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.342231][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.517122][ T5878] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 304.675246][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 304.683009][ T5878] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 304.692050][ T5878] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 304.712060][ T5878] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 304.721553][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.732214][ T5878] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.742083][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 304.755342][ T5878] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 304.764505][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.778364][ T5878] usb 5-1: config 0 descriptor?? [ 304.825966][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.992'. [ 304.849232][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.858349][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.001776][ T5878] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 305.205196][ T799] usb 5-1: USB disconnect, device number 12 [ 305.216925][ T799] usblp0: removed [ 305.235411][ T5885] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 305.295260][ T5899] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 305.365392][ T5885] usb 2-1: device descriptor read/64, error -71 [ 305.447217][ T5899] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 305.455768][ T5899] usb 4-1: config 0 has no interface number 0 [ 305.461987][ T5899] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.477307][ T5899] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 305.494703][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.505625][ T5899] usb 4-1: Product: syz [ 305.509909][ T5899] usb 4-1: Manufacturer: syz [ 305.514531][ T5899] usb 4-1: SerialNumber: syz [ 305.524506][ T5899] usb 4-1: config 0 descriptor?? [ 305.541926][ T5899] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 305.574681][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.590921][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.615651][ T5885] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 305.818635][ T5899] usb 4-1: USB disconnect, device number 108 [ 305.837310][ T5899] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 305.879583][ T5885] usb 2-1: device descriptor read/64, error -71 [ 305.995614][ T5885] usb usb2-port1: attempt power cycle [ 306.298026][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.315774][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.413392][ T5885] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 306.445680][ T5885] usb 2-1: device descriptor read/8, error -71 [ 306.496767][ T9536] syzkaller1: entered promiscuous mode [ 306.502771][ T9536] syzkaller1: entered allmulticast mode [ 306.705521][ T5885] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 306.725853][ T5885] usb 2-1: device descriptor read/8, error -71 [ 306.765279][ T5899] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 306.835296][ T5892] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 306.835779][ T5885] usb usb2-port1: unable to enumerate USB device [ 306.915386][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 306.922101][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.933992][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.944032][ T5899] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 306.954167][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.967141][ T5899] usb 5-1: config 0 descriptor?? [ 306.985225][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 306.998300][ T5892] usb 4-1: config 0 has an invalid interface number: 145 but max is 1 [ 307.007070][ T5892] usb 4-1: config 0 has an invalid interface number: 43 but max is 1 [ 307.015957][ T5892] usb 4-1: config 0 has no interface number 0 [ 307.022366][ T5892] usb 4-1: config 0 has no interface number 1 [ 307.028887][ T5892] usb 4-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 307.035443][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.041271][ T5892] usb 4-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 307.052438][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.059800][ T5892] usb 4-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 307.078220][ T5892] usb 4-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 307.089843][ T5892] usb 4-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 307.101785][ T5892] usb 4-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 307.115902][ T5892] usb 4-1: config 0 interface 145 has no altsetting 0 [ 307.122763][ T5892] usb 4-1: config 0 interface 43 has no altsetting 0 [ 307.132892][ T5892] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 307.142615][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.151735][ T5892] usb 4-1: Product: syz [ 307.156176][ T5892] usb 4-1: Manufacturer: syz [ 307.160860][ T5892] usb 4-1: SerialNumber: syz [ 307.182606][ T5892] usb 4-1: config 0 descriptor?? [ 307.377638][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.386849][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.402626][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.412046][ T5892] keyspan_pda 4-1:0.145: required endpoints missing [ 307.415456][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.431466][ T5892] keyspan_pda 4-1:0.43: Keyspan PDA converter detected [ 307.453056][ T5892] usb 4-1: Keyspan PDA converter now attached to ttyUSB0 [ 307.473027][ T5899] usbhid 5-1:0.0: can't add hid device: -71 [ 307.480510][ T5899] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 307.490478][ T5892] usb 4-1: USB disconnect, device number 109 [ 307.513643][ T9549] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 307.517712][ T5899] usb 5-1: USB disconnect, device number 13 [ 307.533583][ T5892] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 307.548275][ T5892] keyspan_pda 4-1:0.43: device disconnected [ 307.855279][ T5899] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 308.025792][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 308.051415][ T5899] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 308.073169][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.089485][ T5899] usb 5-1: Product: syz [ 308.096235][ T5899] usb 5-1: Manufacturer: syz [ 308.100934][ T5899] usb 5-1: SerialNumber: syz [ 308.121710][ T5899] usb 5-1: config 0 descriptor?? [ 308.138160][ T5899] gspca_main: se401-2.14.0 probing 047d:5003 [ 308.315221][ T799] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 308.408775][ T9575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1014'. [ 308.478499][ T799] usb 2-1: config 82 has 0 interfaces, different from the descriptor's value: 14 [ 308.501304][ T799] usb 2-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice= 4.03 [ 308.514083][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.524127][ T9581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.533612][ T799] usb 2-1: Product: syz [ 308.540455][ T9581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.549017][ T799] usb 2-1: Manufacturer: syz [ 308.549386][ T5899] gspca_se401: ExtraFeatures: 114 [ 308.553655][ T799] usb 2-1: SerialNumber: syz [ 308.571646][ T5899] gspca_se401: Too many frame sizes [ 308.618375][ T9583] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1016'. [ 308.754311][ T9549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1005'. [ 308.763477][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 308.773192][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 308.791925][ T5885] usb 5-1: USB disconnect, device number 14 [ 308.965536][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.974573][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.039729][ T799] usb 2-1: USB disconnect, device number 116 [ 309.117212][ T9591] Unsupported ieee802154 address type: 0 [ 309.124564][ T9592] Unsupported ieee802154 address type: 0 [ 309.419361][ T9604] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 309.426149][ T9604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 309.440233][ T9604] vhci_hcd vhci_hcd.0: Device attached [ 309.467536][ T9607] vhci_hcd: connection closed [ 309.478158][ T12] vhci_hcd vhci_hcd.0: stop threads [ 309.500467][ T12] vhci_hcd vhci_hcd.0: release socket [ 309.508920][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 309.641848][ T9615] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.725274][ T5885] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 309.866292][ T5885] usb 5-1: device descriptor read/64, error -71 [ 309.925286][ T24] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 310.097444][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.109266][ T24] usb 2-1: config 7 has an invalid interface number: 3 but max is 1 [ 310.117971][ T5885] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 310.129912][ T24] usb 2-1: config 7 has an invalid interface number: 232 but max is 1 [ 310.145407][ T24] usb 2-1: config 7 has no interface number 0 [ 310.155265][ T24] usb 2-1: config 7 has no interface number 1 [ 310.165275][ T24] usb 2-1: config 7 interface 3 has no altsetting 0 [ 310.171947][ T24] usb 2-1: config 7 interface 232 has no altsetting 0 [ 310.186210][ T24] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=6f.b0 [ 310.195587][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.204207][ T24] usb 2-1: Product: syz [ 310.209085][ T24] usb 2-1: Manufacturer: syz [ 310.213733][ T24] usb 2-1: SerialNumber: syz [ 310.285414][ T5885] usb 5-1: device descriptor read/64, error -71 [ 310.395946][ T5885] usb usb5-port1: attempt power cycle [ 310.429630][ T9642] netlink: 'syz.3.1034': attribute type 46 has an invalid length. [ 310.437978][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1034'. [ 310.454967][ T24] usb 2-1: unknown number of interfaces: 2 [ 310.476505][ T24] usb 2-1: USB disconnect, device number 117 [ 310.532470][ T9647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1035'. [ 310.700593][ T9646] block nbd3: shutting down sockets [ 310.775250][ T5885] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 310.805917][ T5885] usb 5-1: device descriptor read/8, error -71 [ 310.885118][ T9661] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1038'. [ 310.896233][ T9661] trusted_key: encrypted_key: insufficient parameters specified [ 311.056363][ T5885] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 311.086309][ T5885] usb 5-1: device descriptor read/8, error -71 [ 311.126973][ T9671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.150232][ T9671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.205587][ T5885] usb usb5-port1: unable to enumerate USB device [ 311.709860][ T9695] netlink: 'syz.0.1051': attribute type 21 has an invalid length. [ 311.717883][ T5899] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 311.717929][ T9695] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1051'. [ 311.740496][ T9696] netlink: 'syz.0.1051': attribute type 21 has an invalid length. [ 311.748931][ T9696] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1051'. [ 311.818397][ T5916] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 311.838789][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.847687][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.878954][ T5899] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 311.888365][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 311.897468][ T5899] usb 4-1: Product: syz [ 311.901796][ T5899] usb 4-1: SerialNumber: syz [ 311.908805][ T5899] usb 4-1: config 0 descriptor?? [ 311.977059][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.987432][ T5916] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 311.996430][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 312.012241][ T5916] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 312.021408][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.029472][ T5916] usb 2-1: Product: syz [ 312.033674][ T5916] usb 2-1: Manufacturer: syz [ 312.038403][ T5916] usb 2-1: SerialNumber: syz [ 312.046596][ T5916] usb 2-1: config 0 descriptor?? [ 312.254717][ T5916] uvcvideo 2-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 312.262362][ T5916] uvcvideo 2-1:0.0: No valid video chain found. [ 312.277004][ T5916] usb 2-1: USB disconnect, device number 118 [ 312.885285][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 313.035266][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 313.045909][ T24] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 313.054389][ T24] usb 5-1: config 0 has no interface number 0 [ 313.070682][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 313.081092][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.089584][ T24] usb 5-1: Product: syz [ 313.093828][ T24] usb 5-1: Manufacturer: syz [ 313.100284][ T24] usb 5-1: SerialNumber: syz [ 313.108619][ T24] usb 5-1: config 0 descriptor?? [ 313.119429][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 313.165322][ T5885] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 313.325336][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 313.333406][ T5885] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 313.343608][ T5885] usb 2-1: config 0 has no interface number 0 [ 313.350280][ T5885] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.362341][ T5885] usb 2-1: config 0 interface 85 has no altsetting 0 [ 313.377163][ T5885] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 313.386690][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.394825][ T5885] usb 2-1: Product: syz [ 313.400027][ T5885] usb 2-1: Manufacturer: syz [ 313.404756][ T5885] usb 2-1: SerialNumber: syz [ 313.418641][ T5885] usb 2-1: config 0 descriptor?? [ 313.626844][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.636362][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.795558][ T24] usb 5-1: USB disconnect, device number 19 [ 314.343196][ T9735] __nla_validate_parse: 2 callbacks suppressed [ 314.343217][ T9735] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1065'. [ 314.344165][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.368613][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.432872][ T9739] 9pnet_fd: Insufficient options for proto=fd [ 314.448297][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.457905][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.511288][ T5899] ldusb 4-1:0.0: Interrupt in endpoint not found [ 314.538281][ T5899] usb 4-1: USB disconnect, device number 110 [ 314.885279][ T5878] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 314.907947][ T5899] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 315.038777][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.049109][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 315.058247][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.065248][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 315.070550][ T5878] usb 5-1: config 0 descriptor?? [ 315.077879][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.090340][ T5878] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 315.091050][ T5899] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 315.108133][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.116261][ T5899] usb 4-1: Product: syz [ 315.120464][ T5899] usb 4-1: Manufacturer: syz [ 315.125089][ T5899] usb 4-1: SerialNumber: syz [ 315.136291][ T5899] usb 4-1: config 0 descriptor?? [ 315.151280][ T5899] usb 4-1: bad CDC descriptors [ 315.157461][ T5899] usb 4-1: unsupported MDLM descriptors [ 315.273073][ T9752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.282963][ T9752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.352225][ T24] usb 4-1: USB disconnect, device number 111 [ 315.489114][ T9745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.498176][ T9745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.708050][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 315.939325][ T9760] tipc: Started in network mode [ 315.944269][ T9760] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 315.959587][ T5885] appletouch 2-1:0.85: Failed to request geyser raw mode [ 315.963093][ T9760] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 315.979955][ T9760] tipc: Enabled bearer , priority 10 [ 315.987960][ T5885] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 315.999583][ T9760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.021259][ T9760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.027250][ T5885] usb 2-1: USB disconnect, device number 119 [ 316.162795][ T9766] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1073'. [ 316.172302][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 316.173697][ T9765] netlink: set zone limit has 4 unknown bytes [ 316.325263][ T5892] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 316.475273][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 316.484531][ T5892] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 316.493900][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 316.496521][ T5885] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 316.502266][ T5892] usb 4-1: Product: syz [ 316.514119][ T5892] usb 4-1: Manufacturer: syz [ 316.518779][ T5892] usb 4-1: SerialNumber: syz [ 316.526196][ T5892] usb 4-1: config 0 descriptor?? [ 316.537966][ T5892] gspca_main: sq905-2.14.0 probing 2770:9120 [ 316.645440][ T5885] usb 2-1: device descriptor read/64, error -71 [ 316.681073][ T9773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.691507][ T9773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.885912][ T5885] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 316.905074][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.914124][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.017554][ T5885] usb 2-1: device descriptor read/64, error -71 [ 317.117299][ T5916] tipc: Node number set to 1 [ 317.126944][ T5885] usb usb2-port1: attempt power cycle [ 317.465425][ T5885] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 317.485986][ T5885] usb 2-1: device descriptor read/8, error -71 [ 317.541074][ T30] audit: type=1326 audit(1760913119.153:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9761 comm="syz.3.1071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f603438efc9 code=0x0 [ 317.593482][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1071'. [ 317.654874][ T5878] pwc: recv_control_msg error -71 req 02 val 2700 [ 317.662067][ T5878] pwc: recv_control_msg error -71 req 04 val 1700 [ 317.670309][ T5878] pwc: recv_control_msg error -71 req 02 val 2c00 [ 317.678187][ T5878] pwc: recv_control_msg error -71 req 04 val 1000 [ 317.687270][ T5878] pwc: recv_control_msg error -71 req 04 val 1300 [ 317.694204][ T5878] pwc: recv_control_msg error -71 req 04 val 1400 [ 317.714555][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 317.721607][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 317.728657][ T5878] pwc: recv_control_msg error -71 req 02 val 2200 [ 317.735295][ T5885] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 317.743812][ T5878] pwc: recv_control_msg error -71 req 06 val 0600 [ 317.751127][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 317.758192][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 317.765344][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 317.773363][ T5885] usb 2-1: device descriptor read/8, error -71 [ 317.780205][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 317.787958][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 317.795083][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 317.804677][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 317.811723][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 317.821940][ T5878] pwc: Registered as video103. [ 317.841501][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input47 [ 317.847447][ T5892] gspca_sq905: sq905_read_data: usb_control_msg failed (-110) [ 317.859840][ T5878] usb 5-1: USB disconnect, device number 20 [ 317.878831][ T5892] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 317.895900][ T5885] usb usb2-port1: unable to enumerate USB device [ 318.058310][ T9794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.068361][ T9794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.425259][ T5878] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.575315][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 318.582510][ T5878] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 318.590822][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.601065][ T5878] usb 5-1: config 0 has no interface number 0 [ 318.607262][ T5878] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 318.617454][ T5878] usb 5-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 318.629284][ T5878] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.639229][ T5878] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 318.649283][ T5878] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.665067][ T5878] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 318.674332][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.682497][ T5878] usb 5-1: Product: syz [ 318.686768][ T5878] usb 5-1: Manufacturer: syz [ 318.691395][ T5878] usb 5-1: SerialNumber: syz [ 318.699589][ T5878] usb 5-1: config 0 descriptor?? [ 318.705599][ T9796] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 318.917746][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.928128][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.937027][ T9799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1083'. [ 318.951602][ T5878] usb 5-1: probing VID:PID(0424:012C) [ 318.967433][ T5878] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 318.982106][ T5878] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 318.997515][ T5878] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 319.015335][ T24] usb 4-1: USB disconnect, device number 112 [ 319.024573][ T5878] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 319.042493][ T9805] netlink: 'syz.0.1084': attribute type 3 has an invalid length. [ 319.059390][ T5878] usb 5-1: USB disconnect, device number 21 [ 319.067859][ T9804] netlink: 'syz.0.1084': attribute type 3 has an invalid length. [ 319.102687][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 319.110138][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 319.415430][ T24] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 319.585892][ T24] usb 4-1: too many configurations: 237, using maximum allowed: 8 [ 319.607711][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 319.617573][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.627562][ T24] usb 4-1: Product: syz [ 319.631771][ T24] usb 4-1: Manufacturer: syz [ 319.644211][ T9824] vxcan1: entered allmulticast mode [ 319.649843][ T24] usb 4-1: SerialNumber: syz [ 319.686465][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 319.706512][ T5885] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.825358][ T5878] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 319.889154][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.898196][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.987907][ T5878] usb 5-1: unable to get BOS descriptor or descriptor too short [ 319.996649][ T5878] usb 5-1: not running at top speed; connect to a high speed hub [ 320.006215][ T5878] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 320.014578][ T5878] usb 5-1: config 129 has no interface number 0 [ 320.021014][ T5878] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 320.033113][ T5878] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 320.044711][ T5878] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.064836][ T5878] usb 5-1: config 129 interface 28 has no altsetting 0 [ 320.074413][ T5878] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 320.084480][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.092705][ T5878] usb 5-1: Product: syz [ 320.097008][ T5878] usb 5-1: Manufacturer: syz [ 320.101687][ T5878] usb 5-1: SerialNumber: syz [ 320.111372][ T9822] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 320.322212][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.338858][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.359325][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.370217][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.374516][ T5916] usb 4-1: USB disconnect, device number 113 [ 320.422510][ T5878] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 320.431762][ T5878] etas_es58x 5-1:129.28: could not retrieve the product info string [ 320.458740][ T9832] netlink: 'syz.3.1091': attribute type 4 has an invalid length. [ 320.476368][ T5878] usb 5-1: USB disconnect, device number 22 [ 320.485521][ T5878] etas_es58x 5-1:129.28: Disconnecting syz syz [ 320.741689][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 320.852446][ T9842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.188629][ T5885] usb 4-1: Service connection timeout for: 256 [ 321.199178][ T5885] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 321.208649][ T5885] ath9k_htc: Failed to initialize the device [ 321.215518][ T5916] usb 4-1: ath9k_htc: USB layer deinitialized [ 321.555277][ T5878] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 321.716465][ T5878] usb 5-1: Invalid ep0 maxpacket: 32 [ 321.858150][ T5878] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 322.015273][ T5878] usb 5-1: Invalid ep0 maxpacket: 32 [ 322.023493][ T5878] usb usb5-port1: attempt power cycle [ 322.362032][ T9878] binder: 9874:9878 ioctl 3b71 200000000040 returned -22 [ 322.376474][ T5878] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 322.396061][ T5878] usb 5-1: Invalid ep0 maxpacket: 32 [ 322.535907][ T5878] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 322.566119][ T5878] usb 5-1: Invalid ep0 maxpacket: 32 [ 322.572322][ T5878] usb usb5-port1: unable to enumerate USB device [ 322.621007][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.628117][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.661435][ T9885] syzkaller1: entered promiscuous mode [ 322.667040][ T9885] syzkaller1: entered allmulticast mode [ 322.835355][ T5899] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 322.924993][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.933865][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.185287][ T5899] usb 2-1: device descriptor read/64, error -71 [ 323.425275][ T5899] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 323.550922][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.562794][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.575867][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 323.586596][ T5899] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 323.596368][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.604442][ T5899] usb 2-1: Product: syz [ 323.609795][ T5899] usb 2-1: Manufacturer: syz [ 323.614439][ T5899] usb 2-1: SerialNumber: syz [ 323.624680][ T5899] r8152-cfgselector 2-1: Unknown version 0x0000 [ 323.625274][ T5878] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 323.636436][ T5899] r8152-cfgselector 2-1: config 0 descriptor?? [ 323.649685][ T5899] hub 2-1:0.0: bad descriptor, ignoring hub [ 323.656521][ T5899] hub 2-1:0.0: probe with driver hub failed with error -5 [ 323.745916][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 323.757088][ T9906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.765882][ T9906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.817451][ T5878] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.828586][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 323.835289][ T5878] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 323.844529][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.855504][ T5878] usb 4-1: config 0 descriptor?? [ 323.858787][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.870801][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.882986][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.892009][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.006329][ T5899] r8152-cfgselector 2-1: USB disconnect, device number 125 [ 324.282480][ T5878] playstation 0003:054C:05C4.001E: unknown main item tag 0x0 [ 324.310636][ T5878] playstation 0003:054C:05C4.001E: unknown main item tag 0x0 [ 324.337096][ T5878] playstation 0003:054C:05C4.001E: unknown main item tag 0x0 [ 324.362128][ T5878] playstation 0003:054C:05C4.001E: unknown main item tag 0x0 [ 324.370175][ T5878] playstation 0003:054C:05C4.001E: unknown main item tag 0x0 [ 324.377749][ T5878] playstation 0003:054C:05C4.001E: unknown main item tag 0x0 [ 324.385382][ T5878] playstation 0003:054C:05C4.001E: unknown main item tag 0x0 [ 324.407322][ T5878] playstation 0003:054C:05C4.001E: hidraw0: USB HID v40.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 324.490926][ T5878] playstation 0003:054C:05C4.001E: Failed to retrieve feature with reportID 18: -71 [ 324.526607][ T5878] playstation 0003:054C:05C4.001E: Failed to retrieve DualShock4 pairing info: -71 [ 324.551332][ T5878] playstation 0003:054C:05C4.001E: Failed to get MAC address from DualShock4 [ 324.562108][ T5878] playstation 0003:054C:05C4.001E: Failed to create dualshock4. [ 324.583097][ T5878] playstation 0003:054C:05C4.001E: probe with driver playstation failed with error -71 [ 324.613397][ T5878] usb 4-1: USB disconnect, device number 114 [ 324.646200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 324.955509][ T5878] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 325.131340][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 325.144970][ T5878] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 325.153243][ T5878] usb 4-1: can't read configurations, error -71 [ 325.225493][ T6290] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 325.377422][ T6290] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 325.386888][ T6290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.399494][ T6290] usb 2-1: config 0 descriptor?? [ 325.618193][ T6290] usb 2-1: Cannot read MAC address [ 325.631876][ T6290] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 325.662535][ T6290] usb 2-1: USB disconnect, device number 126 [ 326.285266][ T5878] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 326.435310][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 326.441963][ T5878] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 326.450675][ T5878] usb 4-1: config 254 has an invalid descriptor of length 174, skipping remainder of the config [ 326.461419][ T5878] usb 4-1: config 254 has no interface number 0 [ 326.467794][ T5878] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 63946, setting to 64 [ 326.479105][ T5878] usb 4-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.492313][ T5878] usb 4-1: config 254 interface 235 has no altsetting 0 [ 326.501504][ T5878] usb 4-1: New USB device found, idVendor=0525, idProduct=96a0, bcdDevice=2b.00 [ 326.510711][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.515392][ T5899] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 326.518867][ T5878] usb 4-1: Product: syz [ 326.530712][ T5878] usb 4-1: Manufacturer: syz [ 326.535522][ T5878] usb 4-1: SerialNumber: syz [ 326.677812][ T5899] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 326.692260][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.705861][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 326.717296][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 326.730377][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.749344][ T5899] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.759248][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.773681][ T5899] usb 5-1: config 0 descriptor?? [ 326.781292][ T9957] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 326.796482][ T9959] qrtr: Invalid version 43 [ 326.807813][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.818489][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.035269][ T5916] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 327.095536][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.105804][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.190606][ T5916] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 327.199821][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.208037][ T5916] usb 2-1: Product: syz [ 327.212237][ T5916] usb 2-1: Manufacturer: syz [ 327.218497][ T5916] usb 2-1: SerialNumber: syz [ 327.225085][ T5899] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 327.235280][ T5916] usb 2-1: config 0 descriptor?? [ 327.246568][ T5916] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 327.259041][ T5899] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 327.494406][ T5878] usb 5-1: USB disconnect, device number 27 [ 327.510667][ T9969] vivid-001: ================= START STATUS ================= [ 327.523546][ T9969] vivid-001: Radio HW Seek Mode: Bounded [ 327.539401][ T9969] vivid-001: Radio Programmable HW Seek: false [ 327.549247][ T9969] vivid-001: RDS Rx I/O Mode: Block I/O [ 327.555027][ T9969] vivid-001: Generate RBDS Instead of RDS: false [ 327.568792][ T9969] vivid-001: RDS Reception: true [ 327.574070][ T9969] vivid-001: RDS Program Type: 0 inactive [ 327.580749][ T9969] vivid-001: RDS PS Name: inactive [ 327.588728][ T9969] vivid-001: RDS Radio Text: inactive [ 327.588887][ T9969] vivid-001: RDS Traffic Announcement: false inactive [ 327.588915][ T9969] vivid-001: RDS Traffic Program: false inactive [ 327.588946][ T9969] vivid-001: RDS Music: false inactive [ 327.588975][ T9969] vivid-001: ================== END STATUS ================== [ 327.749823][ T9974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.759510][ T9974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.326500][ T5916] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 328.408599][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.411571][ T9985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.426153][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.487247][ T5916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 328.498433][ T5916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 328.511462][ T5916] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 328.521451][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.530908][ T5916] usb 5-1: Product: syz [ 328.536292][ T5916] usb 5-1: Manufacturer: syz [ 328.541055][ T5916] usb 5-1: SerialNumber: syz [ 328.550477][ T5916] usb 5-1: config 0 descriptor?? [ 328.556874][ T9979] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 328.564202][ T9979] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 328.579325][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.588278][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.805873][ T5916] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71 [ 328.832271][ T5916] usb 5-1: USB disconnect, device number 28 [ 328.900418][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.912525][ T5892] usb 4-1: USB disconnect, device number 117 [ 328.913224][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.948768][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.959657][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.305308][ T5892] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 329.466056][ T5892] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 329.476956][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 329.484881][ T5892] usb 4-1: can't read configurations, error -61 [ 329.635377][ T5892] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 329.806844][ T5892] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 329.821618][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 329.835460][ T5892] usb 4-1: can't read configurations, error -61 [ 329.851311][ T5899] usb 2-1: USB disconnect, device number 127 [ 329.858446][ T5892] usb usb4-port1: attempt power cycle [ 329.878594][T10026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.913735][T10026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.121568][T10042] netlink: 'syz.0.1148': attribute type 29 has an invalid length. [ 330.130677][T10042] netlink: 'syz.0.1148': attribute type 29 has an invalid length. [ 330.140484][T10042] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1148'. [ 330.205729][ T5892] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 330.217877][ T5878] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 330.246693][ T5892] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 330.277625][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 330.295750][ T5892] usb 4-1: can't read configurations, error -61 [ 330.380801][ T5878] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 330.390961][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.399416][ T5878] usb 5-1: Product: syz [ 330.403814][ T5878] usb 5-1: Manufacturer: syz [ 330.408830][ T5878] usb 5-1: SerialNumber: syz [ 330.455582][ T5892] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 330.486787][ T5892] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 330.497691][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 330.505503][ T5892] usb 4-1: can't read configurations, error -61 [ 330.512433][ T5892] usb usb4-port1: unable to enumerate USB device [ 330.565394][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 330.755308][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 330.764844][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.778723][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.791713][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 330.804515][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.823336][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.824358][ T24] usb 2-1: config 0 descriptor?? [ 330.840088][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.093919][ T5878] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 331.122940][ T5878] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 331.149462][ T5878] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 331.178759][ T5878] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 331.215632][ T5878] usb 5-1: USB disconnect, device number 29 [ 331.268805][ T24] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 331.282081][ T24] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 331.299716][ T24] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 331.316797][ T24] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 331.333934][ T24] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 331.338487][T10068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1155'. [ 331.352155][T10069] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1155'. [ 331.363513][ T24] savu 0003:1E7D:2D5A.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 331.463714][ T24] usb 2-1: USB disconnect, device number 2 [ 331.563806][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 331.895392][ T5899] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 332.066971][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.078322][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.092116][ T5899] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 332.106020][ T5899] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 332.114244][ T5899] usb 5-1: Manufacturer: syz [ 332.129519][ T5899] usb 5-1: config 0 descriptor?? [ 332.415347][ T5892] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 332.425499][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 332.577438][ T5892] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 332.585817][ T5892] usb 4-1: config 0 has an invalid descriptor of length 240, skipping remainder of the config [ 332.596551][ T5892] usb 4-1: config 0 has no interface number 0 [ 332.598051][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.602733][ T5892] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.614500][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.641688][ T5892] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 332.644228][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.652073][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.663842][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.663875][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.668364][ T24] usb 2-1: config 0 descriptor?? [ 332.673012][ T5892] usb 4-1: Product: syz [ 332.699668][ T5892] usb 4-1: Manufacturer: syz [ 332.704368][ T5892] usb 4-1: SerialNumber: syz [ 332.712983][ T5892] usb 4-1: config 0 descriptor?? [ 332.721942][ T5892] yurex 4-1:0.50: Could not find endpoints [ 332.808331][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.817412][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.929602][ T5892] usb 4-1: USB disconnect, device number 122 [ 333.110497][ T24] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xe [ 333.135238][ T24] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 333.159927][ T24] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 333.229338][ T5899] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #100: -71 [ 333.265348][ T5899] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71 [ 333.288161][ T5899] uclogic 0003:256C:006D.0021: failed probing pen v1 parameters: -71 [ 333.304556][ T5899] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 333.323719][ T5899] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71 [ 333.351529][ T5899] usb 5-1: USB disconnect, device number 30 [ 333.420407][ T5892] usb 2-1: USB disconnect, device number 3 [ 333.622438][T10111] futex_wake_op: syz.0.1169 tries to shift op by 144; fix this program [ 333.755288][ T5921] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 333.899252][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.910876][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.935252][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 333.947093][ T5921] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 333.965372][ T5921] usb 4-1: config 0 has no interface number 0 [ 333.971566][ T5921] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.004719][ T5921] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 334.017281][ T5921] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 334.028863][ T5921] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 334.039718][ T5921] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 334.056142][ T5921] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.065297][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 334.066285][ T5921] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.083924][ T5921] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25135, setting to 1024 [ 334.095321][ T5921] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 334.124083][ T5921] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.143006][ T5921] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 334.165204][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.173375][ T5921] usb 4-1: Product: syz [ 334.185212][ T5921] usb 4-1: Manufacturer: syz [ 334.189912][ T5921] usb 4-1: SerialNumber: syz [ 334.197792][ T5921] usb 4-1: config 0 descriptor?? [ 334.203693][T10104] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.211783][T10104] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.224942][ T5921] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 334.234626][ T5921] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 334.235264][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 334.250336][ T5921] scsi host1: microtekX6 [ 334.264617][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.300460][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.316642][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 334.327450][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.346436][ T24] usb 5-1: config 0 descriptor?? [ 334.432882][ T799] usb 4-1: USB disconnect, device number 123 [ 334.769176][ T24] apple 0003:05AC:024B.0023: unknown global tag 0xe [ 334.784204][ T24] apple 0003:05AC:024B.0023: item 0 1 1 14 parsing failed [ 334.792475][ T24] apple 0003:05AC:024B.0023: parse failed [ 334.795522][ T5921] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 334.798825][ T24] apple 0003:05AC:024B.0023: probe with driver apple failed with error -22 [ 334.965234][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 334.970935][T10120] netlink: 822 bytes leftover after parsing attributes in process `syz.4.1172'. [ 334.983278][ T799] usb 5-1: USB disconnect, device number 31 [ 334.992160][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.013604][ T5921] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 335.049441][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.076276][ T5921] usb 2-1: config 0 descriptor?? [ 335.208323][T10160] netlink: 'syz.0.1184': attribute type 21 has an invalid length. [ 335.216340][T10160] netlink: 14530 bytes leftover after parsing attributes in process `syz.0.1184'. [ 335.305287][ T24] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 335.457898][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.470083][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.479940][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.493003][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.502221][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.515750][ T24] usb 4-1: config 0 descriptor?? [ 335.910126][T10171] ------------[ cut here ]------------ [ 335.916188][T10171] kernfs: can not remove 'bind', no directory [ 335.922792][T10171] WARNING: fs/kernfs/dir.c:1707 at kernfs_remove_by_name_ns+0xd1/0x130, CPU#0: syz.4.1187/10171 [ 335.933775][T10171] Modules linked in: [ 335.938406][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.4.1187 Not tainted syzkaller #0 PREEMPT(full) [ 335.947914][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.958355][T10171] RIP: 0010:kernfs_remove_by_name_ns+0xd1/0x130 [ 335.964725][T10171] Code: 4c 89 f7 e8 c1 f2 ff ff 4c 89 f7 e8 69 9b ff ff 31 ed eb 2b e8 c0 b0 5e ff 90 48 c7 c7 00 6f 7c 8b 4c 89 f6 e8 f0 c3 21 ff 90 <0f> 0b 90 90 bd fe ff ff ff eb 12 e8 9f b0 5e ff bd fe ff ff ff 48 [ 335.984904][T10171] RSP: 0018:ffffc9000e687a38 EFLAGS: 00010246 [ 335.991086][T10171] RAX: 999af3c6b6028800 RBX: ffffffff8f3bd180 RCX: ffff888024b6dac0 [ 335.999215][T10171] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 336.007280][T10171] RBP: 1ffff11003dd0c56 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 336.015422][T10171] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000000 [ 336.023474][T10171] R13: dffffc0000000000 R14: ffffffff8be82940 R15: 0000000000000000 [ 336.031607][T10171] FS: 00007f563e82a6c0(0000) GS:ffff888125d1f000(0000) knlGS:0000000000000000 [ 336.040709][T10171] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.047672][T10171] CR2: 00007f563e808f98 CR3: 000000007c200000 CR4: 00000000003526f0 [ 336.056617][T10171] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 336.065614][T10171] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 336.073747][T10171] Call Trace: [ 336.077141][T10171] [ 336.080124][T10171] bus_remove_driver+0x198/0x2f0 [ 336.085182][T10171] comedi_device_detach_locked+0x178/0x750 [ 336.091079][T10171] comedi_unlocked_ioctl+0xcde/0x1020 [ 336.096657][T10171] ? kasan_quarantine_put+0xdd/0x220 [ 336.101524][ T24] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xe [ 336.102111][T10171] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 336.115667][T10171] ? __fget_files+0x2a/0x420 [ 336.120346][T10171] ? __fget_files+0x3a0/0x420 [ 336.125210][T10171] ? __fget_files+0x2a/0x420 [ 336.129770][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 336.129867][T10171] ? bpf_lsm_file_ioctl+0x9/0x20 [ 336.142334][T10171] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 336.148293][T10171] __se_sys_ioctl+0xfc/0x170 [ 336.151954][ T24] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 336.153013][T10171] do_syscall_64+0xfa/0xfa0 [ 336.170362][T10171] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.175678][T10171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.181833][T10171] ? clear_bhb_loop+0x60/0xb0 [ 336.186646][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.192623][T10171] RIP: 0033:0x7f563d98efc9 [ 336.197175][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.217136][T10171] RSP: 002b:00007f563e82a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.225749][T10171] RAX: ffffffffffffffda RBX: 00007f563dbe5fa0 RCX: 00007f563d98efc9 [ 336.233813][T10171] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 336.241908][T10171] RBP: 00007f563da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.250015][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.258100][T10171] R13: 00007f563dbe6038 R14: 00007f563dbe5fa0 R15: 00007fff5923b4e8 [ 336.266194][T10171] [ 336.269293][T10171] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 336.276600][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.4.1187 Not tainted syzkaller #0 PREEMPT(full) [ 336.286433][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.296520][T10171] Call Trace: [ 336.299832][T10171] [ 336.302865][T10171] dump_stack_lvl+0x99/0x250 [ 336.307477][T10171] ? __asan_memcpy+0x40/0x70 [ 336.312095][T10171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.317309][T10171] ? __pfx__printk+0x10/0x10 [ 336.321924][T10171] vpanic+0x237/0x6d0 [ 336.325923][T10171] ? __pfx_vpanic+0x10/0x10 [ 336.330439][T10171] ? is_bpf_text_address+0x26/0x2b0 [ 336.335663][T10171] panic+0xb9/0xc0 [ 336.339421][T10171] ? __pfx_panic+0x10/0x10 [ 336.343901][T10171] __warn+0x334/0x4c0 [ 336.348618][T10171] ? kernfs_remove_by_name_ns+0xd1/0x130 [ 336.354293][T10171] ? kernfs_remove_by_name_ns+0xd1/0x130 [ 336.360034][T10171] report_bug+0x2be/0x4f0 [ 336.364396][T10171] ? kernfs_remove_by_name_ns+0xd1/0x130 [ 336.370046][T10171] ? kernfs_remove_by_name_ns+0xd1/0x130 [ 336.375742][T10171] ? kernfs_remove_by_name_ns+0xd3/0x130 [ 336.381523][T10171] handle_bug+0x84/0x160 [ 336.385780][T10171] exc_invalid_op+0x1a/0x50 [ 336.390400][T10171] asm_exc_invalid_op+0x1a/0x20 [ 336.395258][T10171] RIP: 0010:kernfs_remove_by_name_ns+0xd1/0x130 [ 336.401530][T10171] Code: 4c 89 f7 e8 c1 f2 ff ff 4c 89 f7 e8 69 9b ff ff 31 ed eb 2b e8 c0 b0 5e ff 90 48 c7 c7 00 6f 7c 8b 4c 89 f6 e8 f0 c3 21 ff 90 <0f> 0b 90 90 bd fe ff ff ff eb 12 e8 9f b0 5e ff bd fe ff ff ff 48 [ 336.421347][T10171] RSP: 0018:ffffc9000e687a38 EFLAGS: 00010246 [ 336.427610][T10171] RAX: 999af3c6b6028800 RBX: ffffffff8f3bd180 RCX: ffff888024b6dac0 [ 336.435616][T10171] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 336.443623][T10171] RBP: 1ffff11003dd0c56 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 336.451697][T10171] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000000 [ 336.459796][T10171] R13: dffffc0000000000 R14: ffffffff8be82940 R15: 0000000000000000 [ 336.467892][T10171] ? kernfs_remove_by_name_ns+0xd0/0x130 [ 336.473548][T10171] bus_remove_driver+0x198/0x2f0 [ 336.478605][T10171] comedi_device_detach_locked+0x178/0x750 [ 336.484527][T10171] comedi_unlocked_ioctl+0xcde/0x1020 [ 336.489938][T10171] ? kasan_quarantine_put+0xdd/0x220 [ 336.495247][T10171] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 336.501117][T10171] ? __fget_files+0x2a/0x420 [ 336.505824][T10171] ? __fget_files+0x3a0/0x420 [ 336.510535][T10171] ? __fget_files+0x2a/0x420 [ 336.515146][T10171] ? bpf_lsm_file_ioctl+0x9/0x20 [ 336.520277][T10171] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 336.526097][T10171] __se_sys_ioctl+0xfc/0x170 [ 336.530710][T10171] do_syscall_64+0xfa/0xfa0 [ 336.535247][T10171] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.540496][T10171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.546641][T10171] ? clear_bhb_loop+0x60/0xb0 [ 336.551348][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.557258][T10171] RIP: 0033:0x7f563d98efc9 [ 336.561695][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.581317][T10171] RSP: 002b:00007f563e82a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.589837][T10171] RAX: ffffffffffffffda RBX: 00007f563dbe5fa0 RCX: 00007f563d98efc9 [ 336.597854][T10171] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 336.605844][T10171] RBP: 00007f563da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.613830][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.621809][T10171] R13: 00007f563dbe6038 R14: 00007f563dbe5fa0 R15: 00007fff5923b4e8 [ 336.629816][T10171] [ 336.633090][T10171] Kernel Offset: disabled [ 336.637421][T10171] Rebooting in 86400 seconds..