last executing test programs: 1m58.29586048s ago: executing program 0 (id=187): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000008000000010000000900010073797a30000000002c000000030a01020000009b61342b0000000000010000000900010073797a30000000000900030073797a300000000000000000000100000008000b400000000028000480240001800b0001007470d8dc431e1e1e32bb726f7879000014000280080002400000001d080001400000000114000000110001000000"], 0xb8}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001000010028bd7000fedbdf25706362632866637279707429"], 0xe0}, 0x1, 0x0, 0x0, 0x48000}, 0x4040840) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r1, 0x4b30, 0x8000000000000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x1, 0x4, 0x103, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000740)=0x800, 0x5) 1m58.007838956s ago: executing program 0 (id=190): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) socket$inet6(0xa, 0x800, 0x4) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x105080, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xc7) r6 = dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) accept$netrom(r1, &(0x7f00000000c0)={{0x3, @null}, [@null, @rose, @default, @default, @bcast, @default, @null, @netrom]}, &(0x7f0000000000)=0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m57.303952648s ago: executing program 0 (id=194): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) (async) fsopen(&(0x7f0000000200)='rpc_pipefs\x00', 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rpc\x00') (async) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x600840, 0x0) fchdir(r2) (async) mount(&(0x7f00000001c0)=@filename='./file1\x00', &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) (async) syz_usb_connect(0x2, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f00000000c0)) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0x400000, 0x40401) (async) socket$kcm(0x10, 0x2, 0x4) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000002c0)={0x5, 0x3, 0x9, 0xe, 0x4}) (async) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, 0xffffffffffffff84}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5, 0x8}}, './file0\x00'}) 1m57.129061164s ago: executing program 0 (id=196): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) r1 = msgget(0x2, 0xe0) r2 = msgget(0x1, 0x8) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/153) syz_usb_control_io$hid(r0, 0x0, 0x0) msgsnd(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000dfc44f02d25a5235c062b31f6bd6dd5a28afffdda6eb0daa616ce087c8c14a6741cda3226127ae6a7b6cbff55f51a7d1666adc77ea6f44f1ae9df77a4b971fece25ac5097b5fd527368989b7024fe4f8a0202ee74f469177df7c834bb39d2db0faaa34b658a745e25a4d87d03427bc9de5b2c19370792e85e89d79e0062e8355dd428ce2010000009e6aff955ff793a79f4f36db90955e6d529294c44ff9283bc1069e569cf603b53e8e3b304f05d918a6e6ea5b8bd503d97e8209982570c3d4ecc6902a8a5df7e300be4e5bb57c08a5f2283629edd30939"], 0x9f, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = msgget(0x2, 0x80) msgrcv(r4, &(0x7f0000000040)={0x0, ""/43}, 0x33, 0x3, 0x2000) 1m55.359916446s ago: executing program 0 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x14, r2, 0x1, 0x400000}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x1300000, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x6}, {0x20, 0xfe, 0x2, 0xfffff034}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x99c379db69694ea9, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x2273b09762da05fc, 0xa, 0x77}, {@empty, 0x4e23, 0x2000, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acb804130800480f00000001f100421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1m54.888936045s ago: executing program 0 (id=205): mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x98) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0xa0400a, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000500)=""/113, 0x71}], 0x2, 0x33, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000fa7000/0x4000)=nil, 0x4000}, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x202, &(0x7f0000000000)={0x0}) 1m39.58447285s ago: executing program 32 (id=205): mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x98) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0xa0400a, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000500)=""/113, 0x71}], 0x2, 0x33, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000fa7000/0x4000)=nil, 0x4000}, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x202, &(0x7f0000000000)={0x0}) 7.844183276s ago: executing program 4 (id=845): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, &(0x7f0000000100)=0x7, 0x1, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 7.607883716s ago: executing program 4 (id=847): syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2014120000001b19fabda560da0781c2106a5bd2cb999f14"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r1 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x4000040}, 0x4000) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) 6.292015375s ago: executing program 4 (id=857): syz_usb_connect(0x1, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="120100009f22440102030109021b000100007d000904440201ff04780509050000000000000f"], 0x0) 4.374637647s ago: executing program 3 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x18, 0x0) fanotify_mark(r2, 0x105, 0x4800003a, r1, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x12000021) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x190) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40180, 0x0) prctl$PR_SET_SECCOMP(0x3a, 0x1, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000000)={0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r7, 0x4068aea3, &(0x7f0000000240)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8, 0xa8, @random="a1c5b373"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004010}, 0x200c804) 4.09200966s ago: executing program 3 (id=871): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)={0x20, 0x1d, 0x1, 0x0, 0x0, {0x8a, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) 4.056114774s ago: executing program 3 (id=872): syz_usb_connect(0x7, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/348], 0x0) 3.627413547s ago: executing program 1 (id=873): r0 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x2f) close(r3) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a31000000004c000000030a010100000000000000000a0000000a000700726f7574650000001400048008000240000000000800014010d8e8bd0900010073797a3100000000090003"], 0x94}}, 0x48804) socket$netlink(0x10, 0x3, 0x8) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x2f) (async) close(r3) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a31000000004c000000030a010100000000000000000a0000000a000700726f7574650000001400048008000240000000000800014010d8e8bd0900010073797a3100000000090003"], 0x94}}, 0x48804) (async) 3.519792226s ago: executing program 1 (id=874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x10}, 0x18) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0x1, 0x1, 0xa, 0x1ff, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x820000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000200", @ANYRES16, @ANYBLOB="01002cbd7000fddbdf250f000043996f25ac", @ANYRESOCT, @ANYBLOB="05002e0000000000", @ANYRESOCT=r1, @ANYRES8, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x5, r7, &(0x7f0000000080), 0x1000000000000000) ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000040)={0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40eb1000) 3.474056965s ago: executing program 3 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) mmap(&(0x7f00006ef000/0x3000)=nil, 0x3000, 0x2800002, 0xc3072, 0xffffffffffffffff, 0xdfd01000) get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x2, &(0x7f0000587000/0x1000)=nil, 0x5) ioperm(0xfff, 0x7, 0x9) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0x0, 0xb, 0xe0, 0x0, 0x2, 0x2, &(0x7f0000000000)='\r\n'}) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000f0840c088612a41f86360102030109021200fc95fd000009043b0700a3088305"], 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x9) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c030000", @ANYRES16=r7, @ANYBLOB="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"], 0x30c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000c80)={0x9, @sdr={0x0, 0xf69}}) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.462899203s ago: executing program 2 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100024650d310450c0a8047db010203010902120001000000000904"], 0x0) 3.239732306s ago: executing program 4 (id=877): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="34188800"], 0x20}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x20000) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/51) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000001380)={'hsr0\x00', 0x5}) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x41fec472531ebcab, 0xde) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x14, 0xc, "00f9737227af149989fc8dbe43ea6affffffffdc25f5ab60c9e6d680f985881a4c516bdd010f35000000b0000006000800000000000000005c9f00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c40000000000000600", [0xfffffffffffffce8, 0xa]}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x403, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x3265a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000600)={0x5eb, 0xc, 0x400, 0x7fff, 0x3}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x40015b0b, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"ad83cd3d", 0xfffa, 0x7, 0x5, 0x7, 0x4, "53e66fe29bbb9a888795a156dd2ed4", "55df2fb2", "21645190", "1e749577", ["c0a8c7c930df6fd62e6a70fa", "9f8681d61c7d3e0d9ec704b7", "2f90c99c0dd5c512700235a6", "4c88c5eeb20d96514db46aa5"]}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x4030408, 0x0, 0xb0ee, 0x100, 0x0, 0x0, 0x0, 0x10, 0x8}}, 0x50) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000700001"], 0x18}], 0x1}, 0x0) 2.83812156s ago: executing program 2 (id=878): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1024, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x5, 0x60, 0xd, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xc0, 0xc0, 0x6}}]}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x1, 0x974, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x78, 0x73, 0xef, 0xff, 0x411, 0x5e, 0x19a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x962, 0x3, 0x9, 0xee, 0x40, 0x47, [{{0x9, 0x4, 0xa5, 0x8, 0x1, 0xd8, 0xe7, 0x19, 0x96, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x4, 0x83, 0xf, "44390549b514b3"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x40, 0x2, 'j', "8e"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x3ff, 0xef, "4a38ca4446e6"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0x1, 0x8, "a3b0a1"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x80, 0x3, 0x6, 0x6, "2dcb73"}]}], [{{0x9, 0x5, 0x1, 0x4, 0x200, 0x0, 0x8, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xd7}, @generic={0xe4, 0xa, "de64a7622b579a591aa3130d3e8499e3c78b0752ec3a650ece5b8f0406a405b4fa52231e01ac41e3f8156ee416e8adbdb5db93886cf861842e3042de1a76142a60a7b70442eaa6ad8357567e52f8f1053459004745628bdbdb39567b2400f182b73fb4918ac8ac15ea84c4aa6d79068ff031d636c2aba0f65aed3bd34ce6aa054d8e1f2cfc1003f558148e8efab6baf5f56924208876ee8c490a58fc0a2a7258e4d9bf359c8e36688dafa58baede7b483c6c413324f3091154fe09e4ba53bb670bac3aaa70bd346a1621163f5a067b56fc34be6ac1127823fe87e9c0db2b6b1c4c4b"}]}}]}}, {{0x9, 0x4, 0xbb, 0x0, 0x2, 0xc, 0x15, 0x5d, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0xa0}, [@extension_unit={0xd, 0x24, 0x8, 0x5, 0x8, 0x7, "53c3cf980531"}]}], [{{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x92, 0x4, [@generic={0x2c, 0x4, "871a4ae21ad01accdc76821b9795523adf9d4c317c02dbd53330eb676ef6b6ec6fe92b6b3542362e8c65"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x1, 0x0, 0x5, [@generic={0x38, 0xf, "4b81006f3747a711a3e094898e445d46c03f2592367061a40eb4ee5e830e7441c40973fb9a50bab86f4ab425de7373fa64384aeafdaf"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xaa, 0x7}]}}]}}, {{0x9, 0x4, 0xd9, 0x7, 0x10, 0xe, 0x1, 0x0, 0x2, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x3, 0x92, 0xff, "bfa325a616eb852dcf"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x7, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x5}]}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0xfb, 0x1, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x8, 0x8, 0xe, [@generic={0xeb, 0x0, "aa2b9f68426bd82dd19c763389808ae26cdaef661cb3d250b659707f8d099c7ebbcee00a685e3842f76546c7fb2a50249e73232d7bee4853faa5d1d013665866a5a261b2c059a46a86d80929abeb4add9642afcda5e2537af581c1dfb734c8b8618151b7dc4dfd78562b1a5504e0530ddda0ff61556282cc7a2a91857ceb06874cb263795ab5c7e28da5217b735b0e2ab946bd55458ba825c193d901e540a2a48dca4cba8e49c1ddd3392895c79a916f55fe63f332ccdfc6b747606fcc5ddbcc386df3cd15b6c5784812cbb135aeb0d853480883274350ee0ccf6565380bbec7b0878eaeeab23bbe96"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xff51}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x4, 0x4, 0x3, [@generic={0xe2, 0xa, "b80ec9dbbb697fb90b6b68f8890680a2c0de7643f50c67e739154c9f8dc4a8cedf85c0d101b5841b42c00010bd305b063d1bb503e153c22eca5676c3ca992ab5209f0de0d4ce767e0b6aaef06453ea2dc968f05a145c42efc5affe9c8c230a8d9b7cf91394426b60ae74a3196cf5c8157a4b3dec36bbad2b26d673bfee11cc8a54fcc25b983c4bf8f1e8eec98cc0c27fc196da1157199d489c6e45afbc1338f3a17ab26bea82c82ba4e6fab60b9d16099f596c42558f26cc0c56d89038be601915698bf451d57f6a348eb1f608af08a2f2928fb99a012aaa3aac05aa3929d77c"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0x5, 0x7, [@generic={0x63, 0x11, "1b27e11e2a3c6e514d592221e2f7c238fffdf88710ed31127b6d03b726c6b8e01487d207afd7df17aaef938ab6a431c35b71fb8ad030537d2746816240f5f59a425dfb778b7f61960dc14ff19b36a0e8aa2097c241a865e4281e81411aad5aad56"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x3, 0x7f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb9, 0xa}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xa3, 0x1, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x9ce}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x7f, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x613}, @generic={0xbd, 0x21, "780fa3ce5011ab94299794ef9bdc824f8b1c2ffa89bb3aa2e7932674c907808e1bcf6af90595efeeafb186db0142fab4d14d21a888c2bc6d39249a67993fb8633846cd9bfb875268d61668a8ffbb4ef84f8e3b201cc76cd8b49a9194e9140a286554a9fab153290a74c2e0bcdbb0ad8a6575872f952eaf0aeb4fd3e0ff0da8619ffe16486631a0dad042b8ee48e428d23c3112b5734b9b42f2cb087b2e78cd675fb926fab13e50b87f56e45dd56a040d25ae43a61bde4903787eea"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x80, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x19, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0xc, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0xfd2}]}}, {{0x9, 0x5, 0x8, 0x8, 0x878, 0x4, 0xd, 0x8e, [@generic={0x85, 0xa, "09206876a03527a49a96e7f412b49459a3fd841591b283f7c84942885d615dddacb12930a28fad34f5ccee82f671778cf021fe73b6fd9f1d7f1c0ee480d0a5615a578c87ab4d8fd0506f9b1405b967631e8c5365cba4f0f087285d61a97c4420b4e3e6eb71e1a1ee9fc7191549abd3cbbd27f9bd33088e09f2a89415655257d8824e7d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xa, 0x4, 0x93, [@generic={0xa1, 0x30, "98ddc6fed457b52adc30d1edf9f987b36193c8e4a6325dd68540dae69ae515993524fa88e72eb6124a684b6c1d01b98d5a809af9686b44846b53095fe71326abfe3a0b99147aa3aafc97dfb2f62a69fc34e2ad5837adcffb7e9ae84f909a599bb4a59a41865f11a0f691709f20a93086d6a3c43b705be5f838e7dfd42b808b06b0c182fcc476ec698d69e85c48307d1e56580cd91f8bac6ff6c34438bf3947"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x30, 0xfff9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x28, 0x8, 0x1, [@generic={0xec, 0x21, "ccfa641b437c3d44d608305ad207fb1be4c24cc54c4278f545821b5b4686fa2cd89b4a6592196aad9e74f266ed34853ef148f315d487f1753b12a30b5daa4c5b3821bd400fc7685ee973f88090e10cab0dca31a1c6c36646875a3d69a4956892ba1c0bba06761a89314a38c59e265626589539b1c7baacf19988bc36d5d4f842c3d261806c13d20450c2db2c35e343f79fbecaad4d5113f01b72b40f8626648672d205612bfba688afc4506f485c4a5905692630acfacf05a33382789fdbe70b399c92c2b499d036341aa01ecc98bbbb3c165855d7204b059002acb16b59b4e502e914a492216a98ac5b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x10, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x16}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0xf, 0xba, 0x1, [@generic={0xd9, 0x8, "eae2b59ba006bee6e66fc884a4098e41afc633b85c7ec33bcad103df5f6f3fac1bc2db6b506a0cfd43eef9cd5fde2fdc0909456a1016fcad0d214f6cafb96ef4b5e5e13cf045cf6086918e8afed47294bf5b7af3c7339819a6825f93b9c83779a5659263ea491516fb9b3e3d39afeebe3e2363e488000849bdb9da8de1b6ad0ec80d43d3a6ce40afcd97f34285e4a3184e88ec1e960419e273d7cb9c943a552465e8ef30bc00aa2b4433107cfaab767289354ec2a7403c70968d7c231afbcbaa647ab780707a00b8c66e4ce73fd75d15337fd56bd59bac"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x8, 0x81, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5ac}, @generic={0x9e, 0xd, "870395eb4a4aa8836ad57004f25cf24370fc3286f4959cd8fefa44328b716705546195ed28598a75f3f938797a419c23b018af8aef14fb56d5aba101610a896cd2b22b57726be43cdae537f52fd5cf22e252b0a7919a37636b3ec792691b6c28f9aa71a45280a030a6d0f4ccfa7845997e6dba4b400f5cdf31b3394be6bf90c7efc44056fde6a26ceb8448b60598bb9cbf22e6c6f50ea8bb0f9334f8"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xb, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0x32}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x8, 0x9, 0x10, 0x10, 0x2}, 0x31, &(0x7f00000000c0)={0x5, 0xf, 0x31, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x9f, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x13, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x3, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa0, 0x3, 0x3, 0x1, 0x91}, @generic={0x6, 0x10, 0x1, "a1cdb8"}]}, 0x2, [{0xdc, &(0x7f0000000100)=@string={0xdc, 0x3, "742d6bc0f7dd766013af63f3baff6d776d3c74d7cbae9e856415244c37ee6dfa79089224f22bbc9f3699baf652a1c146ba6ccb7e2b2e2dff1de31b55c6c37a1a24a8cf189790c278c405afaabbeb292555a8aa9811b484198f0a370792a5ba9aa1f13c3d7ffebababa7ea64a8f7276bf60fb4a7df881abf427208506e0816f32724ef1542f9f6cb19b24601786cd3ac5049edf9e58263cf730da3b414ea0e21c646f50b3f289a06249407867f71e2ee5661b69077d2960b178d0eb7995be3420350e28d3407c40c07b4728a2c4bb5de6659e3e50e866d5973a79"}}, {0xbe, &(0x7f0000000200)=@string={0xbe, 0x3, "820e3a9c11070d0ae515314b380e50dec872b66c66c9fe791172286ec85a1e597c53b8337330ec84398a38737fe48d060cc1cb4f13a2b627b34583f601139a4c99a5dbd97b3c6a35c90aae5dbf96f1896e0e2b20d986f0eda30139b407744192b01d25ec1f04ca12eebec60da85cabc4a91d860f2d17cf9c297d1484289571b0fad2e0643cde9131863654922c0f7af1e085f417f5a9bafbd26fecafc9fd4e1c5255a928796ae2e95cbc69aea699b463b2d57ca6416ac71e7754ca41"}}]}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000100)={{@any, 0x4}, 0x8b9, 0xe70, 0x7f, 0x7fffffff, 0x2ef, 0x100, 0x2, 0x3}) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r4, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0xdcc00000, 0x6, '9P2000'}, 0x13) syz_usb_control_io$hid(r1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r6, 0x0, 0x17, 0x0, &(0x7f0000000980)) write$UHID_CREATE2(r5, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0095d1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.683193507s ago: executing program 1 (id=879): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x110, r0, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x4000010, r0, 0x6a55d000) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x808, 0x4) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000100)=[@wrmsr={0x1e, 0x20, {0x83d, 0x6}}, @code={0xa, 0x91, {"c4030178d90366baf80cb890327c89ef66bafc0cedb9800000c00f3235000400000f30c4c2359e6802470f0866baf80cb820dbde88ef66bafc0c66edb805000000b9790000000f01c1c7442400c1000000c74424022ebeae5eff1c24b96d020000b819000000ba000000000f30c7442400e9000000c744240285bc5a30ff1c24"}}, @cpuid={0x14, 0x18, {0x1ff, 0xb}}, @code={0xa, 0x83, {"f3460f1ef9430fc7fd460f01c30fc76e6667460f01ddc744240000300000c7442402faff0000c7442406000000000f011c240f6f81d879fa8266ba6100ec48b800100000000000000f23c00f21f83502000d000f23f8c744240090000000c7442402a9df0000c7442406000000000f011424"}}, @wrmsr={0x1e, 0x20, {0xa8b, 0x8}}, @wr_crn={0x46, 0x20, {0x8, 0x3}}, @wr_crn={0x46, 0x20, {0x3, 0x53}}, @wrmsr={0x1e, 0x20, {0xc0000081, 0x89}}, @wrmsr={0x1e, 0x20, {0xbb8}}, @wrmsr={0x1e, 0x20, {0xaf0, 0x8}}, @rdmsr={0x32, 0x18, {0x853}}, @code={0xa, 0x85, {"48b800500000000000000f23d00f21f8352000000f0f23f836660f380b48abb9800000c00f3235001000000f3043d9f2440f20c03508000000440f22c00f794100c4a19d68492165360f0bc744240000000000c74424022f000000c7442406000000000f011c24b805000000b99eec99370f01c1"}}, @cpuid={0x14, 0x18, {0x1, 0x8b}}, @wrmsr={0x1e, 0x20, {0x37f, 0x5}}, @code={0xa, 0x6a, {"c441fc109ba669abee2e0f01cb48b809000000000000000f23d80f21f835800000100f23f80f088f094801bb00000000400f01df019685cd117e66baf80cb8fe29fb81ef66bafc0c66b8a14766ef410f01dfb9fb0a00000f32"}}, @uexit={0x0, 0x18, 0x4000000000000000}, @code={0xa, 0x75, {"26450f01350000000026660f3806258ca4054b430f35c483e95f8200000000a5b9800000c00f3235008000000f300f213cb912020000b843ee0000ba000000000f30460f0087004000000f3248b800000000008000000f23d80f21f835800000e00f23f8"}}, @wrmsr={0x1e, 0x20, {0xbfe, 0xc}}, @wr_crn={0x46, 0x20, {0x4, 0x7fc}}, @code={0xa, 0x7c, {"b94e060000b800700000ba000000000f302e0f35c7442400bf000000c7442402380f0000c7442406000000000f011c2464430f01c8f20f5f07f30f09c7442400c9120000c744240200100000c7442406000000000f011c24f2ad66430f3a0c8a0080000034c4c2dddf4ac5"}}, @cpuid={0x14, 0x18, {0x4, 0x101}}, @cpuid={0x14, 0x18, {0xde0, 0x1}}, @rdmsr={0x32, 0x18, {0xae9}}, @wrmsr={0x1e, 0x20, {0x276, 0x80000000}}, @code={0xa, 0x4d, {"f2df2366b814008ec0f2430f0666b82b000f00d0b988020000b865f30000ba000000000f3036460f07450fc75d45410f3566470f01f8c48379682151"}}, @wr_crn={0x46, 0x20, {0x3, 0x7}}, @cpuid={0x14, 0x18, {0x7fffffff, 0xa}}, @wr_crn={0x46, 0x20, {0x3, 0xd2b}}, @cpuid={0x14, 0x18, {0x0, 0x4}}, @uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0x772}}, @wrmsr={0x1e, 0x20, {0x2f1, 0xfffffffffffffffd}}], 0x609}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000800)=[@textreal={0x8, &(0x7f0000000780)="0fc76c000f015904baf80c66b84886348666efbafc0c66ed0fc769e9baa000ecf30f0966b8008800000f23c00f21f86635020002000f23f864260f229066b8058200000f23c00f21f8663502000d000f23f8ba430066ed", 0x57}], 0x1, 0x20, &(0x7f0000000840)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0xffffffff}, @dstype3={0x7, 0xb}], 0x2) r3 = creat(&(0x7f0000000880)='./file0\x00', 0xcb) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f00000008c0)={0x6, 'veth1_to_bridge\x00', {0x6}, 0x3}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) mmap$dsp(&(0x7f0000fe9000/0x2000)=nil, 0x2000, 0x5, 0x4000010, r4, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000940)=0x1) connect$l2tp6(r2, &(0x7f0000000980)={0xa, 0x0, 0x0, @private0, 0x8000, 0x3}, 0x20) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000c00)={{}, {0xa}, 0x0, 0x0, 0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)="ce8fea98c6486ed07a690cf178825182928d070fceb8679213a065b0f066c924c349feafa6b33a31a797f89b15e386", 0x2f, 0x0, &(0x7f0000000a80)={0x2, 0xaf, {0x0, 0xc, 0x5c, "7582cf58da243d6e93bc73849e4c273fa438f832c084420c9103ce32d07eabea60c3b60feb9968b3dc6e9ddb5cd1c89b1f812f3804e61e4da1e396856dda6da6a80c5302f3e71474278e5fc5e720246e8cebd88b3bf0e44880113d13", 0x46, "05bd679d5d9eddf63d57d867605f6d4702b2a26acb9476b360e33013953d771d03c5730218646f74d2f787933039700e1f02d899dad11fc3f2ec1cec0773c64c1d24c35c6352"}, 0xa0, "b420ee7be4d22d3ddeabb05e2e8e82f9a73e7c4ca8f067e680c4814c27bad79387f8c58b4249b08451903adb012911c29810b9e18460a31781ecdfbc86934953827ac929cd322f7a63f90738fb1a149da440196e1758a06776d318479e96a5b164ee8ae9d4b108708dc00bc531a1f4fcbb214641db34b8efe28e9266be1d85cd75d0706d89f97ab08f2b437cb2a7f4179b5461afb068fe741a98fcabcb8009e0"}, 0x15b}) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000000c80)=0x653) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000d40)={0x0, 0x0, r3}) syncfs(r1) pipe2$watch_queue(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = socket(0x18, 0x1, 0x7) r7 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x2}, &(0x7f0000000e40)="c9212ec07d0a11983f48c9059147e2ffff75e401d2b26736b0b6464a5a1743da551d12afa0f1525bc82f2b130d6a01c169e35f24459154f925bca1158535555eb0ec", 0x42, r7) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000f40)={0x2, 0x9}) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000f80)) write$uinput_user_dev(r5, &(0x7f0000000fc0)={'syz1\x00', {0x1, 0x4, 0x1, 0x3}, 0x27, [0x4, 0xa2d, 0x2, 0x3, 0xe, 0x5, 0x7fffffff, 0x0, 0xa, 0x1, 0x2, 0x8, 0x8001, 0x7, 0x9, 0x5, 0x5, 0x5, 0x4, 0x10001, 0x7, 0x6, 0xfffffffa, 0x5, 0x5, 0x2, 0xfc000000, 0x4, 0x4, 0x7, 0x1, 0xc, 0x518bacd3, 0xff66, 0xfffffeff, 0x6, 0x8, 0xffff, 0xffffffff, 0x0, 0x5, 0x4, 0xc, 0x3b, 0x8, 0x80, 0xe32e, 0xf33, 0x8, 0x3, 0x3, 0x9, 0x5, 0xbc85, 0x800, 0x529d, 0xfffff26a, 0x7df5, 0x0, 0x2, 0x7ff, 0xc, 0x400, 0xb], [0x2, 0xffff, 0x0, 0xd, 0xd0000000, 0x4, 0x1, 0x7c8, 0x8000, 0x2e1, 0xc, 0x5, 0x7fffffff, 0x6, 0xfffffffe, 0xfd1, 0x3, 0x6, 0x5, 0x6, 0x9, 0x3, 0x3, 0xffffff00, 0xffffffff, 0x9, 0x7fffffff, 0x1, 0x8, 0x800, 0x9, 0x4, 0x80000000, 0x2, 0x941b, 0x90, 0x7, 0x7, 0x5, 0x80, 0x2, 0x1, 0x8, 0x1, 0x0, 0x9, 0x10, 0x3ff, 0x6, 0x5, 0xfffffffd, 0x8, 0xff, 0x8, 0x337e, 0x4, 0x800, 0x2, 0xe, 0x8000, 0xfffffffa, 0xd, 0x7ff, 0x6], [0x6, 0x9, 0x80, 0x1, 0x14000, 0x9, 0x6, 0x3, 0x3afd8748, 0x8001, 0x7f, 0x6, 0xff, 0x6, 0x7ff, 0x9, 0x8, 0x940, 0x41e, 0x7, 0x7fffffff, 0x800, 0x0, 0x0, 0xffffff01, 0x8, 0x216165f6, 0x7fffffff, 0x4, 0xe88, 0x7, 0x6, 0x2, 0x9, 0x962, 0x7, 0x5, 0x586c, 0x2b, 0x3, 0xfffffc01, 0x100, 0x583, 0x0, 0x2, 0x9, 0x2, 0x7fe, 0x6, 0x8, 0x5, 0x29, 0xb0c, 0x400, 0xe359, 0x101, 0x9, 0x6, 0x3, 0x86, 0x3, 0x64, 0x3, 0x6], [0xa2a4, 0x9, 0x2, 0x5, 0x0, 0x9, 0xfff, 0x5, 0x8, 0x7, 0xd9, 0x7, 0x3, 0x6, 0xffffffff, 0x1, 0xff, 0x6, 0x8, 0x6, 0x0, 0x4, 0x1, 0xf81, 0xa084, 0x1, 0x3, 0x7fffffff, 0x4, 0x6, 0x662, 0x7, 0x4, 0x6, 0x4, 0xfffffffb, 0x1, 0x0, 0x8000, 0x2, 0x5, 0x4, 0x8, 0xfffffff7, 0xfffffff8, 0xb04, 0x7, 0x7fff, 0x40, 0x6, 0x80000001, 0x4, 0xa, 0x3, 0x7ff, 0xc6, 0x1, 0x1, 0x1, 0x3, 0x5, 0xf4, 0x0, 0x2]}, 0x45c) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000001440)=0x1) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000001480)="b5c7b12d0aaba0a5f09389f01203b695ebdb673b3e6395bc0e861a4d2e33fd0bb5f1ffad32c68c1b77bacc8f8968a09258922891e1fd4152ef0ddf334e9be9fc868eab6a119a3bfa9780e368", 0x4c) 2.568155249s ago: executing program 1 (id=880): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xc8, &(0x7f0000000280)=@generic={0x5, 0x0, 0xc0, "879e0300", "2bc197dadf1adb3ae27ce25efe13f0c4744ac732b238fdb166a359671f7de1e5b8d50258952820100fcb65ec8183110b7fff1a7a9f7364110e273fecf2d07c250c05f7be88c46b8eb526db55535f81aae24baba7407d79f6e98a443b510e35bc783fe864b492c69168822be8d4870868d880d97e6c3777b105f630118887ffb8bdc6067a0a44834bc75daed96e1f1e5d398d7ebe1d75adcffd327ebc1955003708625d72100e82fa7e76cfcc92374d8d53036a318a39ad7c1f191e6943fe8a4f"}) 2.197099372s ago: executing program 2 (id=881): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0x7, 0x102, 0x1, {0x8, 0x90000000, 0x7, 0x80}}) 1.836449983s ago: executing program 2 (id=882): userfaultfd(0x80001) r0 = socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc4, 0xe4, 0x7, 0x40, 0x14aa, 0x22b, 0x5619, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x0, 0xb1, 0x94, 0xd9}}]}}]}}, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045017, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000002dc0)={0x8200020, "4a68b2df3cdf4e47e55b0cfee618c3df4505ec43511065af69f264574a6f0c0d29320843e843b968dcf30fad98f75a6341ad4720b237d465ef75ba44b3572569b346e103e055a726ed096a98943a278be110001000000000005a9854babb6df599710dc47d907ba93d30ba06134cd08371cbc2212e9a7174bf50a8171b043423"}) bind$tipc(r0, 0x0, 0x0) write(r2, 0x0, 0x0) 1.184180363s ago: executing program 2 (id=883): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4001af83, 0x0) 1.177345543s ago: executing program 2 (id=884): prctl$PR_GET_KEEPCAPS(0x7) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000340)={0x0, 0x4b68}) symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000040)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582"], 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) fallocate(r5, 0x2, 0x9, 0xffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000400)={0xffffffffffffffff, r4, 0x7ff, 0x71, &(0x7f00000002c0)="ee155e6e2ca0c58a6424a1e987c79b0bb2a512395360abc66747c0e33de1267744a7a317313eda3c4b34f2cb7d0241169c97cb7cc3fb68e4ee62d9ab78a507d5f371d5dbb5f6b9cf4b271904674d433beb9d6e6a0e5edcff9d0798edfa218f25b763ebd32f3ebb43aff60c126835423a01", 0x7f, 0x3, 0x0, 0xfffc, 0x80d, 0x2, 0x2, 'syz0\x00'}) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f00000001c0)='./file0/file0/..\x00', &(0x7f0000000200)='./file0/file0\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2, 0x100}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000004c0)={0x8, {{0xa, 0x0, 0x400000, @remote}}, {{0xa, 0x3, 0x0, @remote, 0x10001}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000000000000a00004000000003ff"], 0x90) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000000)={0xffff, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) 1.132113624s ago: executing program 1 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000000, 0x512, 0x9, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x80, 0xffc99a3b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007f, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x5, 0x1, 0x2}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x1, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000005010040"]) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async, rerun: 32) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (rerun: 32) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x20, 0x10}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x2}, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) (async) prctl$PR_SET_MM_EXE_FILE(0x59616d61, 0xd, 0xffffffffffffffff) (async) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r3], 0x0) 239.832636ms ago: executing program 3 (id=886): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, 0xffff, 0x4000, 0x0, 0x7fff, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}]}, 0x154}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x4, 0x2000, &(0x7f0000b2c000/0x2000)=nil}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x0, 0x2}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r4, 0x0, 0x20}, &(0x7f0000000380)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x8000) 165.955733ms ago: executing program 4 (id=887): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc02c5341, &(0x7f0000000200)={{}, {0x0, 0x4}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4005) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000001c0)='-{-#}$\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000006140)={0x2020}, 0xffffffbf) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000040)={0x11}) 134.327506ms ago: executing program 1 (id=888): futex(&(0x7f0000000500), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x25000000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) r1 = socket(0x10, 0x800, 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000401080008001d000000", 0x24) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10100, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) 43.98022ms ago: executing program 3 (id=889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x0, 0x0, 0x87}, 'syz1\x00', 0x4d}) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 64) ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={0x0}) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 4 (id=890): mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000000)='selinuxfs\x00', 0x1a0c000, 0x0) kernel console output (not intermixed with test programs): 619][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.968362][ T10] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 178.978029][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.986191][ T10] usb 5-1: Product: syz [ 178.990538][ T10] usb 5-1: Manufacturer: syz [ 178.995228][ T10] usb 5-1: SerialNumber: syz [ 179.003296][ T10] usb 5-1: config 0 descriptor?? [ 179.017381][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 179.029996][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.040648][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 179.050465][ T10] usb 5-1: media controller created [ 179.064049][ T5956] usb 2-1: config 13 has an invalid interface number: 6 but max is 0 [ 179.072727][ T5956] usb 2-1: config 13 has no interface number 0 [ 179.086711][ T5956] usb 2-1: config 13 interface 6 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 179.089118][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.098613][ T5956] usb 2-1: config 13 interface 6 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 179.119226][ T5956] usb 2-1: config 13 interface 6 altsetting 128 endpoint 0x7 has an invalid bInterval 252, changing to 4 [ 179.131767][ T5956] usb 2-1: config 13 interface 6 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 179.149842][ T5956] usb 2-1: config 13 interface 6 has no altsetting 0 [ 179.159482][ T5956] usb 2-1: New USB device found, idVendor=05c6, idProduct=9066, bcdDevice=6e.c8 [ 179.177013][ T10] DVB: Unable to find symbol tda10046_attach() [ 179.183600][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.183694][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 179.203280][ T5956] usb 2-1: Product: syz [ 179.204600][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 179.207481][ T5956] usb 2-1: Manufacturer: ࠇ [ 179.226834][ T5956] usb 2-1: SerialNumber: syz [ 179.285810][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.300267][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.445325][ T10] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 179.479391][ T10] usb 5-1: USB disconnect, device number 9 [ 179.555165][ T5956] usb 2-1: USB disconnect, device number 46 [ 179.993647][ T7718] netlink: 'syz.3.430': attribute type 16 has an invalid length. [ 180.024551][ T7720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.430'. [ 180.401581][ T30] audit: type=1326 audit(1757210712.301:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.1.436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa82638ebe9 code=0x0 [ 180.477740][ T5953] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 180.512715][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'. [ 180.637749][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 180.644651][ T5953] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 180.653037][ T5953] usb 4-1: config 0 has no interface number 0 [ 180.659324][ T5953] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.670995][ T5953] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.682755][ T5953] usb 4-1: config 0 interface 85 has no altsetting 0 [ 180.692210][ T5953] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 180.701507][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.709624][ T5953] usb 4-1: Product: syz [ 180.713813][ T5953] usb 4-1: Manufacturer: syz [ 180.719612][ T5953] usb 4-1: SerialNumber: syz [ 180.726734][ T5953] usb 4-1: config 0 descriptor?? [ 180.984280][ T5953] appletouch 4-1:0.85: Failed to read mode from device. [ 180.992048][ T5953] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 181.007016][ T5953] usb 4-1: USB disconnect, device number 54 [ 181.377190][ T30] audit: type=1800 audit(1757210713.271:4): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.442" name="bus" dev="tmpfs" ino=173 res=0 errno=0 [ 181.387164][ T7751] qnx6: unable to read the first superblock [ 181.603959][ T7759] netlink: 'syz.1.443': attribute type 21 has an invalid length. [ 181.640486][ T7759] netlink: 156 bytes leftover after parsing attributes in process `syz.1.443'. [ 181.672985][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 181.747151][ T7766] tmpfs: Unknown parameter 'r_blocks' [ 181.825533][ T7768] tmpfs: Bad value for 'mpol' [ 181.957774][ T5925] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 182.119701][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 182.119736][ T5925] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 182.119765][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 182.133628][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 182.133662][ T5925] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 182.133686][ T5925] usb 4-1: Manufacturer: syz [ 182.140318][ T5925] usb 4-1: config 0 descriptor?? [ 182.146861][ T5925] smsusb:smsusb_probe: board id=9, interface number 0 [ 182.148833][ T5925] smsusb:smsusb_probe: Device initialized with return code -19 [ 182.188855][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 182.388995][ T5934] usb 4-1: USB disconnect, device number 55 [ 182.441412][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.468379][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.757761][ T5925] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 182.927827][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 182.945225][ T5925] usb 5-1: config 3 has an invalid interface number: 214 but max is 1 [ 182.966364][ T5925] usb 5-1: config 3 has an invalid interface number: 79 but max is 1 [ 182.976578][ T5925] usb 5-1: config 3 has no interface number 0 [ 182.993643][ T5925] usb 5-1: config 3 has no interface number 1 [ 183.013990][ T5925] usb 5-1: config 3 interface 214 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 183.038292][ T5925] usb 5-1: config 3 interface 214 altsetting 16 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 183.067683][ T5925] usb 5-1: config 3 interface 214 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 183.093748][ T5925] usb 5-1: config 3 interface 79 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 183.110556][ T5925] usb 5-1: config 3 interface 214 has no altsetting 0 [ 183.117533][ T5925] usb 5-1: config 3 interface 79 has no altsetting 0 [ 183.124812][ T5925] usb 5-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=ad.9d [ 183.135705][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.259604][ T7808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.288645][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 183.351335][ T5925] usb 5-1: string descriptor 0 read error: -71 [ 183.380265][ T5925] sierra 5-1:3.214: Sierra USB modem converter detected [ 183.382645][ T7806] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.408591][ T5925] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 183.435847][ T5925] sierra 5-1:3.79: Sierra USB modem converter detected [ 183.495401][ T5925] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 183.556640][ T5925] usb 5-1: USB disconnect, device number 10 [ 183.572699][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.579816][ T5925] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 183.599089][ T5925] sierra 5-1:3.214: device disconnected [ 183.626197][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.650243][ T5925] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 183.678415][ T5925] sierra 5-1:3.79: device disconnected [ 183.825442][ T7822] binder: 7821:7822 unknown command 576 [ 183.840427][ T7822] binder: 7821:7822 ioctl c0306201 200000000480 returned -22 [ 183.849565][ T7822] binder: 7821:7822 ioctl c018620c 200000000000 returned -1 [ 183.948376][ T7827] comedi comedi0: dac02: I/O port conflict (0x4f27,8) [ 184.020513][ T5933] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.029623][ T5933] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.033529][ T7832] futex_wake_op: syz.3.469 tries to shift op by 32; fix this program [ 184.037488][ T5933] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.054274][ T7831] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.469'. [ 184.057495][ T5933] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.071680][ T5933] rtc rtc0: __rtc_set_alarm: err=-22 [ 184.107757][ T5956] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 184.219240][ T5925] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 184.259906][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 184.259944][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.259982][ T5956] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 184.260008][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.262946][ T5956] usb 2-1: config 0 descriptor?? [ 184.383218][ T5925] usb 5-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 184.383252][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.384814][ T5925] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.384874][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.384899][ T5925] usb 5-1: SerialNumber: syz [ 184.606547][ T5925] usb 5-1: 0:2 : does not exist [ 184.670471][ T5925] usb 5-1: USB disconnect, device number 11 [ 184.691909][ T5956] maltron 0003:058F:9410.000A: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.1-1/input0 [ 184.760989][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.827230][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.837223][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.927921][ T5953] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 185.078672][ T5953] usb 4-1: too many configurations: 230, using maximum allowed: 8 [ 185.088776][ T5953] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 185.096545][ T5953] usb 4-1: can't read configurations, error -61 [ 185.227883][ T5953] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 185.378914][ T5953] usb 4-1: too many configurations: 230, using maximum allowed: 8 [ 185.389862][ T5953] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 185.398921][ T5953] usb 4-1: can't read configurations, error -61 [ 185.405941][ T5953] usb usb4-port1: attempt power cycle [ 185.636474][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 185.653937][ T7874] netlink: 'syz.2.482': attribute type 10 has an invalid length. [ 185.673518][ T7874] veth0_vlan: left promiscuous mode [ 185.682736][ T7874] veth0_vlan: entered promiscuous mode [ 185.692838][ T7874] team0: Device veth0_vlan failed to register rx_handler [ 185.757730][ T5953] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 185.782523][ T5953] usb 4-1: too many configurations: 230, using maximum allowed: 8 [ 185.793863][ T5953] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 185.803921][ T5953] usb 4-1: can't read configurations, error -61 [ 185.940677][ T5953] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 185.969152][ T5953] usb 4-1: too many configurations: 230, using maximum allowed: 8 [ 185.979446][ T5953] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 185.990476][ T5953] usb 4-1: can't read configurations, error -61 [ 185.997825][ T5953] usb usb4-port1: unable to enumerate USB device [ 186.136274][ T7892] tipc: Started in network mode [ 186.145561][ T7892] tipc: Node identity 7f000001, cluster identity 4711 [ 186.157351][ T7892] tipc: Enabled bearer , priority 10 [ 186.197307][ T7897] netlink: 260 bytes leftover after parsing attributes in process `syz.4.487'. [ 186.648042][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.808781][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 186.833652][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 186.845915][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 186.855782][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.861095][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 186.869378][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.886778][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.905589][ T9] usb 5-1: config 1 has no interface number 0 [ 186.911119][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.915414][ T10] usb 2-1: USB disconnect, device number 47 [ 186.926083][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.933500][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.948862][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 186.960680][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.971192][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 186.981171][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.999001][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.011913][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.030697][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 187.075978][ T7921] mkiss: ax0: crc mode is auto. [ 187.156006][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.496'. [ 187.216542][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 187.270563][ T5925] tipc: Node number set to 2130706433 [ 187.457893][ T5956] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 187.617706][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 187.634048][ T10] usb 5-1: USB disconnect, device number 12 [ 187.634353][ T5956] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 187.662822][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.663693][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 187.684030][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.701899][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.717177][ T5956] usb 2-1: Product: syz [ 187.739785][ T5956] usb 2-1: Manufacturer: syz [ 187.746784][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.755625][ T5956] usb 2-1: SerialNumber: syz [ 187.760934][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.782957][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.783441][ T5956] usb 2-1: config 0 descriptor?? [ 187.805516][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.852446][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.867036][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.879184][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.890070][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.901734][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.911968][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.024485][ T7930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.497'. [ 188.062091][ T5953] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 188.243904][ T5956] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 188.247868][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 188.255028][ T5956] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 188.283631][ T5953] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 188.296421][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.305861][ T5953] usb 4-1: Product: syz [ 188.310404][ T5953] usb 4-1: Manufacturer: syz [ 188.315191][ T5953] usb 4-1: SerialNumber: syz [ 188.330045][ T5953] usb 4-1: config 0 descriptor?? [ 188.350178][ T5956] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 188.391435][ T5956] usb 2-1: USB disconnect, device number 48 [ 188.543677][ T5953] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 188.567979][ T5953] usb 4-1: USB disconnect, device number 60 [ 188.687462][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 188.963081][ T7961] cgroup: Invalid name [ 189.023438][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.046078][ T7961] tmpfs: Unknown parameter 'n}_inodes' [ 189.079138][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.403838][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.413020][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.632523][ T5956] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 189.767695][ T5956] usb 2-1: device descriptor read/64, error -71 [ 189.906004][ T7991] netlink: 'syz.3.513': attribute type 2 has an invalid length. [ 189.927917][ T7991] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 190.033375][ T5956] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 190.188151][ T5956] usb 2-1: device descriptor read/64, error -71 [ 190.308257][ T5956] usb usb2-port1: attempt power cycle [ 190.648200][ T5956] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 190.714442][ T5956] usb 2-1: device descriptor read/8, error -71 [ 190.821979][ T8006] loop6: detected capacity change from 0 to 524288000 [ 190.903768][ T8007] support for the xor transformation has been removed. [ 190.968067][ T5956] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 191.010821][ T5956] usb 2-1: device descriptor read/8, error -71 [ 191.119674][ T5956] usb usb2-port1: unable to enumerate USB device [ 192.158320][ T8025] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 192.165467][ T8025] /dev/nullb0: Can't open blockdev [ 192.165551][ T8026] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 192.198469][ T8026] /dev/nullb0: Can't open blockdev [ 192.340639][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.391274][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.445222][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.503692][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.558528][ T9] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 192.732931][ T9] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 192.742940][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.766103][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.789181][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.801020][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.819174][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.828138][ T5956] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 192.830096][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.868288][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.878972][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.899085][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.911137][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.929563][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.940128][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.958003][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.968701][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.989048][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.999859][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.019274][ T5956] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 193.020568][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.048990][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.057406][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.075810][ T5956] usb 2-1: Product: syz [ 193.077742][ T9] usb 5-1: Product: syz [ 193.084224][ T9] usb 5-1: Manufacturer: syz [ 193.085999][ T5956] usb 2-1: Manufacturer: syz [ 193.096289][ T5956] usb 2-1: SerialNumber: syz [ 193.097695][ T9] usb 5-1: SerialNumber: syz [ 193.117982][ T5956] usb 2-1: config 0 descriptor?? [ 193.154610][ T5956] gspca_main: kinect-2.14.0 probing 045e:02bf [ 193.252439][ T8003] syz.3.515 (8003): drop_caches: 1 [ 193.331355][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.348163][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.383955][ T5956] usb 2-1: USB disconnect, device number 53 [ 193.471801][ T8030] sctp: [Deprecated]: syz.4.523 (pid 8030) Use of int in max_burst socket option deprecated. [ 193.471801][ T8030] Use struct sctp_assoc_value instead [ 193.524974][ T8030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.559146][ T9] usb 5-1: USB disconnect, device number 13 [ 193.566806][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.593887][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.666645][ T8048] serio: Serial port ptm2 [ 194.142834][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 194.227793][ T5956] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 194.329139][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.345683][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.377747][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.386894][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 194.413263][ T9] usb 4-1: Product: syz [ 194.417854][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 194.432263][ T9] usb 4-1: Manufacturer: syz [ 194.433343][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.447459][ T9] usb 4-1: SerialNumber: syz [ 194.454428][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.472799][ T5956] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 194.487924][ T9] cdc_mbim 4-1:1.0: skipping garbage [ 194.487959][ T9] usb 4-1: selecting invalid altsetting 1 [ 194.504563][ T5956] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 194.586118][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.621569][ T5956] usb 2-1: config 0 descriptor?? [ 194.680321][ T9] cdc_mbim 4-1:1.0: bind() failure [ 194.714619][ T9] usb 4-1: USB disconnect, device number 61 [ 194.872313][ T5953] IPVS: starting estimator thread 0... [ 194.886028][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.924335][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.977725][ T8072] IPVS: using max 27 ests per chain, 64800 per kthread [ 195.244721][ T5956] usbhid 2-1:0.0: can't add hid device: -71 [ 195.256425][ T5956] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 195.322042][ T5956] usb 2-1: USB disconnect, device number 54 [ 195.587843][ T5933] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 195.740456][ T5933] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.749759][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.777771][ T5933] usb 4-1: config 0 descriptor?? [ 195.786239][ T5933] cp210x 4-1:0.0: cp210x converter detected [ 195.801545][ T5956] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 195.896982][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.908302][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.977708][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 195.984957][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.996997][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.007204][ T5956] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 196.016632][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.036019][ T5956] usb 5-1: config 0 descriptor?? [ 196.078273][ T5925] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 196.245865][ T8081] overlay: Unknown parameter 'obj_type' [ 196.252063][ T5933] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 196.259906][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 196.267505][ T5925] usb 2-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 196.276595][ T5925] usb 2-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 196.286230][ T5925] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 196.295417][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.482537][ T5933] usb 4-1: cp210x converter now attached to ttyUSB0 [ 196.516456][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.560306][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.575305][ T5925] usb 2-1: string descriptor 0 read error: -71 [ 196.599293][ T5925] usb 2-1: Found UVC 0.00 device (2833:0201) [ 196.607006][ T5925] usb 2-1: No valid video chain found. [ 196.617123][ T5925] usb 2-1: USB disconnect, device number 55 [ 196.679627][ T5956] usbhid 5-1:0.0: can't add hid device: -71 [ 196.697834][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 196.730229][ T5956] usb 5-1: USB disconnect, device number 14 [ 197.432142][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.449279][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.490649][ T8112] tmpfs: Bad value for 'mpol' [ 197.578730][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.581102][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.005108][ T8147] netlink: 'syz.2.557': attribute type 10 has an invalid length. [ 198.064572][ T8150] tipc: Started in network mode [ 198.069737][ T8150] tipc: Node identity 2, cluster identity 3142 [ 198.075924][ T8150] tipc: Node number set to 2 [ 198.083251][ T8150] tipc: Cannot configure node identity twice [ 198.259270][ T5953] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 198.388501][ T5956] usb 4-1: USB disconnect, device number 62 [ 198.403420][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.418028][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 198.437500][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 198.446231][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.457968][ T5953] usb 2-1: config 2 has an invalid interface number: 2 but max is 0 [ 198.487064][ T5953] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 198.498614][ T5956] cp210x 4-1:0.0: device disconnected [ 198.503623][ T5953] usb 2-1: config 2 has no interface number 0 [ 198.516215][ T5953] usb 2-1: config 2 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.559646][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 198.587689][ T5953] usb 2-1: New USB device found, idVendor=1bbb, idProduct=0203, bcdDevice=1c.35 [ 198.611812][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.891729][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.906298][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.922423][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.936134][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.012203][ T5933] usb 2-1: USB disconnect, device number 56 [ 199.304055][ T30] audit: type=1326 audit(1757210731.201:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.2.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0de1b8ebe9 code=0x0 [ 199.326158][ T5953] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 199.415189][ T8192] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 199.427322][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.436398][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.457963][ T5953] usb 4-1: device descriptor read/64, error -71 [ 199.614580][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.710320][ T5953] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 199.831439][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 199.867819][ T5953] usb 4-1: device descriptor read/64, error -71 [ 199.991287][ T5953] usb usb4-port1: attempt power cycle [ 200.107836][ T5956] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 200.270041][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.280293][ T5956] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 200.289512][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.300724][ T5956] usb 5-1: config 0 descriptor?? [ 200.338077][ T5953] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 200.359998][ T5953] usb 4-1: device descriptor read/8, error -71 [ 200.617773][ T5953] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 200.648940][ T5953] usb 4-1: device descriptor read/8, error -71 [ 200.759070][ T5953] usb usb4-port1: unable to enumerate USB device [ 200.817901][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 200.927199][ T5956] usbhid 5-1:0.0: can't add hid device: -71 [ 200.940887][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 200.954280][ T5956] usb 5-1: USB disconnect, device number 15 [ 200.967878][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 200.992011][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.002146][ T9] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 201.010820][ T9] usb 2-1: config 7 has no interface number 0 [ 201.016999][ T9] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 201.027006][ T9] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 201.037942][ T9] usb 2-1: config 7 interface 187 has no altsetting 0 [ 201.046780][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 201.056244][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.064340][ T9] usb 2-1: Product: syz [ 201.068999][ T9] usb 2-1: Manufacturer: syz [ 201.073637][ T9] usb 2-1: SerialNumber: syz [ 201.286288][ T8200] hub 9-0:1.0: USB hub found [ 201.294472][ T8200] hub 9-0:1.0: 1 port detected [ 201.353012][ T9] usb 2-1: Cannot retrieve CPort count: 0 [ 201.359697][ T9] usb 2-1: Cannot retrieve CPort count: -5 [ 201.365646][ T9] es2_ap_driver 2-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 201.543314][ T8203] netlink: 'syz.4.574': attribute type 10 has an invalid length. [ 201.560435][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.576194][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.592721][ T8203] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 201.621393][ T5925] usb 2-1: USB disconnect, device number 57 [ 201.692630][ T8208] xt_HMARK: proto mask must be zero with L3 mode [ 201.790199][ T8215] netlink: 'syz.4.578': attribute type 27 has an invalid length. [ 201.796335][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.577'. [ 201.807095][ T8217] tipc: Invalid UDP bearer configuration [ 201.807166][ T8217] tipc: Enabling of bearer rejected, failed to enable media [ 201.855281][ T8215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.147795][ T5925] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 202.227817][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 202.317944][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 202.328706][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.363140][ T5925] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 202.378714][ T9] usb 5-1: device descriptor read/64, error -71 [ 202.383525][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.394957][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 202.418095][ T5925] usb 2-1: SerialNumber: syz [ 202.619084][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 202.648077][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 202.659019][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.680305][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.694229][ T5953] usb 2-1: USB disconnect, device number 58 [ 202.807802][ T9] usb 5-1: device descriptor read/64, error -71 [ 202.836690][ T8256] Option ' ' to dns_resolver key: bad/missing value [ 202.897891][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 202.929829][ T9] usb usb5-port1: attempt power cycle [ 203.058041][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 203.064908][ T10] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 203.073846][ T10] usb 4-1: config 0 has no interface number 0 [ 203.080093][ T10] usb 4-1: config 0 interface 207 has no altsetting 0 [ 203.091463][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=ee.45 [ 203.101098][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.109323][ T10] usb 4-1: Product: syz [ 203.115883][ T10] usb 4-1: Manufacturer: syz [ 203.121684][ T10] usb 4-1: SerialNumber: syz [ 203.135126][ T10] usb 4-1: config 0 descriptor?? [ 203.144627][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 203.282207][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 203.312806][ T9] usb 5-1: device descriptor read/8, error -71 [ 203.360200][ T10] gspca_zc3xx: reg_w_i err -71 [ 203.365124][ T10] gspca_zc3xx 4-1:0.207: probe with driver gspca_zc3xx failed with error -71 [ 203.378139][ T10] usb 4-1: USB disconnect, device number 67 [ 203.571589][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.598733][ T9] usb 5-1: device descriptor read/8, error -71 [ 203.639292][ T5911] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 203.710376][ T9] usb usb5-port1: unable to enumerate USB device [ 203.777773][ T5911] usb 2-1: device descriptor read/64, error -71 [ 204.017887][ T5911] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 204.147797][ T5956] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 204.157839][ T5911] usb 2-1: device descriptor read/64, error -71 [ 204.200543][ T8275] GUP no longer grows the stack in syz.2.596 (8275): 200000005000-200000008000 (200000004000) [ 204.212313][ T8275] CPU: 1 UID: 0 PID: 8275 Comm: syz.2.596 Not tainted syzkaller #0 PREEMPT(full) [ 204.212335][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.212351][ T8275] Call Trace: [ 204.212358][ T8275] [ 204.212365][ T8275] dump_stack_lvl+0x189/0x250 [ 204.212389][ T8275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.212404][ T8275] ? __pfx__printk+0x10/0x10 [ 204.212426][ T8275] ? find_vma+0xe7/0x160 [ 204.212453][ T8275] __get_user_pages+0x24d0/0x2ce0 [ 204.212476][ T8275] ? __lock_acquire+0xab9/0xd20 [ 204.212514][ T8275] ? __gup_longterm_locked+0xc68/0x1660 [ 204.212535][ T8275] __gup_longterm_locked+0xde9/0x1660 [ 204.212564][ T8275] ? gup_fast_fallback+0x1b15/0x2240 [ 204.212582][ T8275] gup_fast_fallback+0x1cef/0x2240 [ 204.212612][ T8275] ? __schedule+0x17ae/0x4cc0 [ 204.212646][ T8275] ? __pfx_gup_fast_fallback+0x10/0x10 [ 204.212667][ T8275] ? __lock_acquire+0xab9/0xd20 [ 204.212684][ T8275] ? is_valid_gup_args+0x11f/0x200 [ 204.212711][ T8275] ? get_user_pages_fast+0x4d/0xb0 [ 204.212728][ T8275] get_futex_key+0x938/0x1660 [ 204.212763][ T8275] ? futex_unqueue+0x22/0x240 [ 204.212788][ T8275] ? __pfx_get_futex_key+0x10/0x10 [ 204.212808][ T8275] ? futex_unqueue+0x211/0x240 [ 204.212831][ T8275] ? __futex_wait+0x1d1/0x3e0 [ 204.212848][ T8275] ? __futex_wait+0x34f/0x3e0 [ 204.212871][ T8275] futex_requeue+0x21b/0x19a0 [ 204.212888][ T8275] ? __pfx___futex_wait+0x10/0x10 [ 204.212918][ T8275] ? __pfx_futex_requeue+0x10/0x10 [ 204.212933][ T8275] ? futex_private_hash_put+0x4b/0x280 [ 204.212963][ T8275] ? futex_wait+0x285/0x360 [ 204.212982][ T8275] ? __pfx_futex_wait+0x10/0x10 [ 204.213008][ T8275] ? file_init_path+0x3b/0x590 [ 204.213037][ T8275] do_futex+0x362/0x420 [ 204.213067][ T8275] ? __pfx_do_futex+0x10/0x10 [ 204.213099][ T8275] __se_sys_futex+0x36f/0x400 [ 204.213124][ T8275] ? fd_install+0x97/0x540 [ 204.213149][ T8275] ? __pfx___se_sys_futex+0x10/0x10 [ 204.213180][ T8275] ? __x64_sys_futex+0x21/0xf0 [ 204.213207][ T8275] do_syscall_64+0xfa/0xfa0 [ 204.213221][ T8275] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.213236][ T8275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.213251][ T8275] ? clear_bhb_loop+0x60/0xb0 [ 204.213271][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.213286][ T8275] RIP: 0033:0x7f0de1b8ebe9 [ 204.213306][ T8275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.213321][ T8275] RSP: 002b:00007f0de2a22038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 204.213341][ T8275] RAX: ffffffffffffffda RBX: 00007f0de1dc6090 RCX: 00007f0de1b8ebe9 [ 204.213353][ T8275] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000004000 [ 204.213363][ T8275] RBP: 00007f0de1c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 204.213373][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.213383][ T8275] R13: 00007f0de1dc6128 R14: 00007f0de1dc6090 R15: 00007ffdbab1f978 [ 204.213409][ T8275] [ 204.520138][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.534594][ T5911] usb usb2-port1: attempt power cycle [ 204.612915][ T5956] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 204.622199][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.630419][ T5956] usb 4-1: Product: syz [ 204.634679][ T5956] usb 4-1: Manufacturer: syz [ 204.640355][ T5956] usb 4-1: SerialNumber: syz [ 204.881286][ T5911] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 204.908352][ T5911] usb 2-1: device descriptor read/8, error -71 [ 205.049411][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.597'. [ 205.145512][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.155507][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.163747][ T5911] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 205.183629][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.194186][ T5911] usb 2-1: device descriptor read/8, error -71 [ 205.202321][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.268156][ T5956] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 205.298589][ T5956] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 205.320395][ T5911] usb usb2-port1: unable to enumerate USB device [ 205.325639][ T5956] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 205.349953][ T5956] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 205.647851][ T5953] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 205.800169][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.809430][ T5953] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 120 [ 205.818255][ T5953] usb 5-1: can't read configurations, error -22 [ 205.947698][ T5953] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 206.105412][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.121797][ T5953] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 120 [ 206.132655][ T5953] usb 5-1: can't read configurations, error -22 [ 206.142423][ T5953] usb usb5-port1: attempt power cycle [ 206.314040][ T30] audit: type=1326 audit(1757210738.211:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.2.608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=317 compat=0 ip=0x7f0de1b8ebe9 code=0x0 [ 206.382976][ T8314] Can't find ip_set type hash@ [ 206.471547][ T5956] usb 4-1: USB disconnect, device number 68 [ 206.502878][ T5953] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 206.553514][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.585415][ T5953] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 120 [ 206.615533][ T5953] usb 5-1: can't read configurations, error -22 [ 206.644278][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 206.669858][ T8327] nbd: illegal input index -1900544 [ 206.777759][ T5953] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 206.830740][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.851297][ T5953] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 120 [ 206.867752][ T5953] usb 5-1: can't read configurations, error -22 [ 206.883118][ T5953] usb usb5-port1: unable to enumerate USB device [ 206.895447][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.922755][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.447883][ T5925] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 207.587843][ T5925] usb 4-1: device descriptor read/64, error -71 [ 207.624807][ T8358] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.620'. [ 207.674435][ T8360] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 207.729581][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.738706][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.857818][ T5925] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 207.988193][ T5925] usb 4-1: device descriptor read/64, error -71 [ 208.098008][ T5925] usb usb4-port1: attempt power cycle [ 208.291719][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.300324][ T5956] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 208.300851][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.447695][ T5925] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 208.455520][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 208.460964][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 208.471405][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 208.482700][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 208.493108][ T5956] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.508668][ T5925] usb 4-1: device descriptor read/8, error -71 [ 208.517027][ T5956] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 208.526716][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.535123][ T5956] usb 2-1: Product: syz [ 208.539781][ T5956] usb 2-1: Manufacturer: syz [ 208.544428][ T5956] usb 2-1: SerialNumber: syz [ 208.767712][ T5925] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 208.777093][ T5956] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input19 [ 208.788966][ T5217] bcm5974 2-1:1.0: could not read from device [ 208.798630][ T5925] usb 4-1: device descriptor read/8, error -71 [ 208.804068][ T5217] bcm5974 2-1:1.0: could not read from device [ 208.814397][ T5956] usb 2-1: USB disconnect, device number 63 [ 208.828700][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 208.842510][ T5217] bcm5974 2-1:1.0: could not read from device [ 208.917417][ T5925] usb usb4-port1: unable to enumerate USB device [ 209.002757][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 209.016288][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.026190][ T9] usb 5-1: Product: syz [ 209.031432][ T9] usb 5-1: Manufacturer: syz [ 209.036309][ T9] usb 5-1: SerialNumber: syz [ 209.045503][ T9] usb 5-1: config 0 descriptor?? [ 209.048269][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.069484][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.083402][ T8377] vxcan0: tx address claim with different name [ 209.092361][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.102926][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.259329][ T9] hso 5-1:0.0: Failed to find BULK IN ep [ 209.269421][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 209.475507][ T5933] usb 5-1: USB disconnect, device number 24 [ 209.557920][ T5956] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 209.570655][ T8389] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 209.591918][ T8389] netlink: 'syz.4.631': attribute type 16 has an invalid length. [ 209.714727][ T8396] program syz.4.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.737508][ T5956] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 209.750269][ T5956] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 209.771146][ T5956] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 209.780699][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 209.789444][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.798054][ T5956] usb 2-1: Product: syz [ 209.802345][ T5956] usb 2-1: Manufacturer: syz [ 209.806981][ T5956] usb 2-1: SerialNumber: syz [ 209.824295][ T5956] usb 2-1: config 0 descriptor?? [ 209.833813][ T8381] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 209.845141][ T8381] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 209.967653][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 210.019624][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.031523][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.078949][ T8381] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.097908][ T8381] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.137819][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 210.145132][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.166064][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.193388][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.215633][ T5956] Error reading MAC address [ 210.235477][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.251684][ T5956] usb 2-1: USB disconnect, device number 64 [ 210.281005][ T9] usb 5-1: Product: syz [ 210.302831][ T9] usb 5-1: Manufacturer: syz [ 210.325611][ T9] usb 5-1: SerialNumber: syz [ 210.415710][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.441141][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.497869][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.543021][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.577974][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.608819][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.609331][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.623676][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.634993][ T8412] binder: 8411:8412 ioctl c0306201 200000000080 returned -14 [ 210.658795][ T9] usb 5-1: invalid UAC_HEADER (v1) [ 210.687654][ T5925] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 210.723458][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 210.747652][ T9] usb 5-1: USB disconnect, device number 25 [ 210.791374][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.847869][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 210.849927][ T5925] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 210.849960][ T5925] usb 4-1: config 0 has no interface number 0 [ 210.850007][ T5925] usb 4-1: config 0 interface 184 has no altsetting 0 [ 210.873975][ T5925] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 210.874017][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.874044][ T5925] usb 4-1: Product: syz [ 210.874063][ T5925] usb 4-1: Manufacturer: syz [ 210.874082][ T5925] usb 4-1: SerialNumber: syz [ 210.878220][ T5925] usb 4-1: config 0 descriptor?? [ 210.889467][ T5925] smsc75xx v1.0.0 [ 211.037830][ T5957] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 211.089960][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.100180][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.457693][ T5957] usb 2-1: device descriptor read/64, error -71 [ 211.467908][ T5953] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 211.538835][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 211.552434][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 211.566488][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 211.579814][ T5925] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 211.596434][ T5925] usb 4-1: USB disconnect, device number 73 [ 211.621960][ T5953] usb 5-1: device descriptor read/64, error -71 [ 211.653011][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.664164][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.707935][ T5957] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 211.756563][ T8434] tipc: Enabled bearer , priority 0 [ 211.864713][ T5957] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 211.867887][ T5953] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 211.874498][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.894622][ T5957] usb 2-1: config 0 descriptor?? [ 212.040616][ T8432] tipc: Disabling bearer [ 212.077748][ T5953] usb 5-1: device descriptor read/64, error -71 [ 212.120006][ T5957] kaweth 2-1:0.0: Firmware present in device. [ 212.190032][ T5953] usb usb5-port1: attempt power cycle [ 212.305066][ T5957] kaweth 2-1:0.0: Statistics collection: 0 [ 212.314005][ T5957] kaweth 2-1:0.0: Multicast filter limit: 0 [ 212.321566][ T5957] kaweth 2-1:0.0: MTU: 0 [ 212.326064][ T5957] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 212.332574][ T8441] random: crng reseeded on system resumption [ 212.510302][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.519567][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.529442][ T5953] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 212.562231][ T5953] usb 5-1: device descriptor read/8, error -71 [ 212.637967][ T5925] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 212.653794][ T8444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.664914][ T8444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.681949][ T8444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.691387][ T8444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.797764][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 212.805056][ T5925] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 212.808127][ T5953] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 212.813793][ T5925] usb 4-1: config 0 has no interface number 0 [ 212.827820][ T5925] usb 4-1: config 0 interface 32 altsetting 13 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 212.839401][ T5925] usb 4-1: config 0 interface 32 altsetting 13 endpoint 0x81 has invalid maxpacket 17801, setting to 1024 [ 212.850896][ T5925] usb 4-1: config 0 interface 32 has no altsetting 0 [ 212.857925][ T5925] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 212.858080][ T5953] usb 5-1: device descriptor read/8, error -71 [ 212.867128][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.886072][ T5925] usb 4-1: config 0 descriptor?? [ 212.892510][ T8442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 212.951440][ T5957] kaweth 2-1:0.0: kaweth interface created at eth1 [ 212.989473][ T5953] usb usb5-port1: unable to enumerate USB device [ 213.102091][ T8442] cgroup: No subsys list or none specified [ 213.134358][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.152038][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.188265][ T5957] usb 2-1: USB disconnect, device number 66 [ 213.294155][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 213.492896][ T30] audit: type=1800 audit(1757210745.391:7): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.650" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 213.499322][ T8460] vxcan1: entered promiscuous mode [ 213.529326][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.546304][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.566227][ T8460] vxcan1: entered allmulticast mode [ 213.753575][ T8469] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 213.761858][ T8469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.824804][ T8469] netlink: 'syz.2.652': attribute type 10 has an invalid length. [ 213.852190][ T8469] veth0_vlan: left promiscuous mode [ 213.870004][ T8469] veth0_vlan: entered promiscuous mode [ 213.894243][ T8469] team0: Device veth0_vlan failed to register rx_handler [ 213.958158][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 214.118934][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 214.142785][ T9] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 214.164028][ T9] usb 2-1: config 0 has no interface number 0 [ 214.186776][ T9] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 214.224972][ T9] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 214.268836][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.286335][ T9] usb 2-1: Product: syz [ 214.308021][ T9] usb 2-1: Manufacturer: syz [ 214.312716][ T9] usb 2-1: SerialNumber: syz [ 214.333468][ T9] usb 2-1: config 0 descriptor?? [ 214.420730][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 214.783753][ T9] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 214.837778][ T9] usb 2-1: USB disconnect, device number 67 [ 215.390679][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.418652][ T30] audit: type=1326 audit(1757210747.311:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96378ebe9 code=0x7fc00000 [ 215.454183][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.491395][ T30] audit: type=1326 audit(1757210747.311:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa96378ebe9 code=0x7fc00000 [ 215.533878][ T30] audit: type=1326 audit(1757210747.311:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96378ebe9 code=0x7fc00000 [ 215.583115][ T30] audit: type=1326 audit(1757210747.311:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96378ebe9 code=0x7fc00000 [ 215.605332][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.619313][ T30] audit: type=1326 audit(1757210747.311:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96378ebe9 code=0x7fc00000 [ 215.642077][ T30] audit: type=1326 audit(1757210747.311:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96378ebe9 code=0x7fc00000 [ 215.669762][ T30] audit: type=1326 audit(1757210747.311:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96378ebe9 code=0x7fc00000 [ 215.697308][ T30] audit: type=1326 audit(1757210747.311:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96378ebe9 code=0x7fc00000 [ 215.719481][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.725984][ T30] audit: type=1326 audit(1757210747.321:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96378ebe9 code=0x7fc00000 [ 215.817705][ T5933] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 215.958980][ T5933] usb 2-1: device descriptor read/64, error -71 [ 216.207722][ T5933] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 216.240575][ T8524] syzkaller1: entered promiscuous mode [ 216.246804][ T8524] syzkaller1: entered allmulticast mode [ 216.377708][ T5933] usb 2-1: device descriptor read/64, error -71 [ 216.397407][ T8530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.428357][ T8530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.488270][ T5933] usb usb2-port1: attempt power cycle [ 216.837679][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 216.852865][ T5933] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 216.878963][ T5933] usb 2-1: device descriptor read/8, error -71 [ 216.997713][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 217.009364][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.027910][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.047927][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.057186][ T8536] program syz.2.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.072455][ T10] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 217.083119][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.103137][ T10] usb 5-1: config 0 descriptor?? [ 217.131858][ T5933] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 217.192716][ T5933] usb 2-1: device descriptor read/8, error -71 [ 217.308291][ T5933] usb usb2-port1: unable to enumerate USB device [ 217.333208][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.342969][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.357897][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.365829][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.373703][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.382499][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.390288][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.400966][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.411273][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.420791][ T10] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 217.438476][ T10] hid-multitouch 0003:0457:07DA.000B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 217.522247][ T10] usb 5-1: USB disconnect, device number 30 [ 217.604090][ T8540] fido_id[8540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 217.786328][ T8555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.795446][ T8555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.806749][ T8555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.816159][ T8555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.826755][ T8555] 9pnet_fd: Insufficient options for proto=fd [ 218.338667][ T5925] usbhid 4-1:0.32: can't add hid device: -32 [ 218.344896][ T5925] usbhid 4-1:0.32: probe with driver usbhid failed with error -32 [ 218.373348][ T5956] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 218.377800][ T10] usb 4-1: USB disconnect, device number 74 [ 218.550158][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.558500][ T5956] usb 5-1: not running at top speed; connect to a high speed hub [ 218.567406][ T5956] usb 5-1: config 8 has an invalid interface number: 11 but max is 0 [ 218.575803][ T5956] usb 5-1: config 8 has no interface number 0 [ 218.582139][ T5956] usb 5-1: config 8 interface 11 has no altsetting 0 [ 218.591716][ T5956] usb 5-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff [ 218.601986][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.610218][ T5956] usb 5-1: Product: syz [ 218.614483][ T5956] usb 5-1: Manufacturer: syz [ 218.619301][ T5956] usb 5-1: SerialNumber: syz [ 218.768279][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 218.810685][ T8571] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 218.857389][ T5956] cdc_wdm 5-1:8.11: probe with driver cdc_wdm failed with error -22 [ 218.876358][ T5956] usb 5-1: USB disconnect, device number 31 [ 218.938692][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 218.945395][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.957629][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.969655][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.979302][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.987409][ T10] usb 4-1: Product: syz [ 218.991723][ T10] usb 4-1: Manufacturer: syz [ 218.996370][ T10] usb 4-1: SerialNumber: syz [ 219.218168][ T10] usb 4-1: 0:2 : does not exist [ 219.223231][ T10] usb 4-1: unit 9 not found! [ 219.231572][ T10] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 219.243324][ T10] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 219.255290][ T10] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 219.274550][ T10] usb 4-1: USB disconnect, device number 75 [ 219.302348][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.637788][ T5956] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 219.810262][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 219.821773][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.832128][ T5956] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 219.841387][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.852637][ T5956] usb 5-1: config 0 descriptor?? [ 219.937958][ T5925] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 220.071246][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.080404][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.103975][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.117122][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 220.128490][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.139834][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.152960][ T5925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.162305][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.177214][ T5925] usb 2-1: config 0 descriptor?? [ 220.185951][ T8575] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 220.334941][ T5956] lenovo 0003:17EF:60A3.000C: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 220.523868][ T10] usb 5-1: USB disconnect, device number 32 [ 220.843094][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.853309][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.871738][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 220.884649][ T8585] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 220.888610][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 220.906619][ T8585] batman_adv: batadv0: Adding interface: team0 [ 220.910675][ T5925] usb 2-1: USB disconnect, device number 72 [ 220.913713][ T8585] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.955795][ T8585] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 220.977291][ T8585] netlink: 14 bytes leftover after parsing attributes in process `syz.2.681'. [ 221.067837][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 221.217698][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 221.232516][ T10] usb 4-1: config 15 has an invalid interface number: 107 but max is 0 [ 221.247370][ T10] usb 4-1: config 15 has no interface number 0 [ 221.258176][ T10] usb 4-1: config 15 interface 107 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 221.271045][ T10] usb 4-1: config 15 interface 107 has no altsetting 0 [ 221.281713][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice= d.c3 [ 221.286944][ T8600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.291412][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.308018][ T8600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.318991][ T10] usb 4-1: Product: syz [ 221.324753][ T10] usb 4-1: Manufacturer: syz [ 221.329925][ T10] usb 4-1: SerialNumber: syz [ 221.554161][ T8582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.564261][ T8582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.577377][ T8616] netlink: 188 bytes leftover after parsing attributes in process `syz.1.688'. [ 221.588270][ T8616] netlink: 188 bytes leftover after parsing attributes in process `syz.1.688'. [ 221.617652][ T5925] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 221.649968][ T10] usb 4-1: USB disconnect, device number 76 [ 221.774157][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.784485][ T5925] usb 5-1: config 1 has an invalid interface number: 61 but max is 0 [ 221.797669][ T5925] usb 5-1: config 1 has no interface number 0 [ 221.804595][ T5925] usb 5-1: config 1 interface 61 has no altsetting 0 [ 221.819900][ T5925] usb 5-1: string descriptor 0 read error: -22 [ 221.826425][ T5925] usb 5-1: New USB device found, idVendor=12d1, idProduct=3605, bcdDevice=e4.b0 [ 221.840396][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.864709][ T5925] huawei_cdc_ncm 5-1:1.61: CDC Union missing and no IAD found [ 221.882355][ T5925] huawei_cdc_ncm 5-1:1.61: bind() failure [ 222.059603][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.076046][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.102331][ T5925] usb 5-1: USB disconnect, device number 33 [ 222.362743][ T8632] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 222.578178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 222.599063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.869756][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.878865][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.016321][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.032159][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.057763][ T5957] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 223.137729][ T5911] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 223.190688][ T5957] usb 5-1: device descriptor read/64, error -71 [ 223.247944][ T5925] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 223.270614][ T5911] usb 4-1: device descriptor read/64, error -71 [ 223.405393][ T5925] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 223.415067][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.431183][ T5957] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 223.439281][ T5925] usb 2-1: Product: syz [ 223.443841][ T5925] usb 2-1: Manufacturer: syz [ 223.451618][ T5925] usb 2-1: SerialNumber: syz [ 223.461120][ T5925] usb 2-1: config 0 descriptor?? [ 223.518174][ T5911] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 223.578082][ T5957] usb 5-1: device descriptor read/64, error -71 [ 223.671829][ T10] usb 2-1: USB disconnect, device number 73 [ 223.687857][ T5911] usb 4-1: device descriptor read/64, error -71 [ 223.688749][ T5957] usb usb5-port1: attempt power cycle [ 223.808130][ T5911] usb usb4-port1: attempt power cycle [ 224.048045][ T5957] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 224.063392][ T8676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.068359][ T5957] usb 5-1: device descriptor read/8, error -71 [ 224.078277][ T8676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.167680][ T5911] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 224.191091][ T5911] usb 4-1: device descriptor read/8, error -71 [ 224.319931][ T5957] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 224.348490][ T5957] usb 5-1: device descriptor read/8, error -71 [ 224.433456][ T8687] batadv_slave_1: entered promiscuous mode [ 224.458246][ T5911] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 224.468146][ T5957] usb usb5-port1: unable to enumerate USB device [ 224.479472][ T5911] usb 4-1: device descriptor read/8, error -71 [ 224.588264][ T5911] usb usb4-port1: unable to enumerate USB device [ 224.749382][ T5933] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 224.917864][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 224.926182][ T5933] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.936984][ T5933] usb 2-1: config 1 interface 0 altsetting 126 bulk endpoint 0x1 has invalid maxpacket 16 [ 224.947666][ T5933] usb 2-1: config 1 interface 0 altsetting 126 bulk endpoint 0x82 has invalid maxpacket 64 [ 224.958403][ T5933] usb 2-1: config 1 interface 0 has no altsetting 0 [ 224.969327][ T5933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 224.982691][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.993185][ T5933] usb 2-1: Product: syz [ 224.998932][ T5933] usb 2-1: Manufacturer: syz [ 225.004005][ T5933] usb 2-1: SerialNumber: syz [ 225.022424][ T8687] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 225.037637][ T8687] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 225.364845][ T8686] batadv_slave_1: left promiscuous mode [ 225.379828][ T5933] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 126 proto 2 vid 0x0525 pid 0xA4A8 [ 225.403264][ T5933] usb 2-1: USB disconnect, device number 74 [ 225.435219][ T5933] usblp0: removed [ 225.732702][ T8697] binder: 8696:8697 ioctl c0306201 2000000001c0 returned -14 [ 225.741547][ T8697] binder: 8696:8697 ioctl 8924 200000000000 returned -22 [ 225.802204][ T8697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.815813][ T8697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.101271][ T8710] netlink: 6 bytes leftover after parsing attributes in process `syz.4.720'. [ 226.117024][ T8710] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 226.167704][ T5933] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 226.308191][ T5911] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 226.343239][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 226.352067][ T5933] usb 4-1: not running at top speed; connect to a high speed hub [ 226.362243][ T5933] usb 4-1: config 2 has an invalid interface number: 149 but max is 0 [ 226.372793][ T5933] usb 4-1: config 2 has no interface number 0 [ 226.379098][ T5933] usb 4-1: config 2 interface 149 has no altsetting 0 [ 226.389277][ T5933] usb 4-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=ba.47 [ 226.398833][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.406990][ T5933] usb 4-1: Product: syz [ 226.411823][ T5933] usb 4-1: Manufacturer: syz [ 226.416668][ T5933] usb 4-1: SerialNumber: syz [ 226.467792][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 226.475506][ T5911] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 226.484836][ T5911] usb 2-1: config 0 has no interface number 0 [ 226.493590][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.502430][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 226.512144][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.524747][ T5911] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 226.533993][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.542714][ T5911] usb 2-1: Product: syz [ 226.547082][ T5911] usb 2-1: Manufacturer: syz [ 226.551857][ T5911] usb 2-1: SerialNumber: syz [ 226.563382][ T5911] usb 2-1: config 0 descriptor?? [ 226.631152][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.640598][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.656564][ T5933] appledisplay 4-1:2.149: Could not find int-in endpoint [ 226.670149][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 226.670217][ T5933] usbhid 4-1:2.149: couldn't find an input interrupt endpoint [ 226.684010][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.698585][ T5933] usb 4-1: USB disconnect, device number 81 [ 226.708281][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1628, setting to 1024 [ 226.719795][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 226.736722][ T9] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 226.746486][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.764006][ T9] usb 5-1: config 0 descriptor?? [ 226.774493][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.775689][ T8722] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 226.788400][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.818446][ T5911] usbhid 2-1:0.78: couldn't find an input interrupt endpoint [ 226.837123][ T5911] usb 2-1: USB disconnect, device number 75 [ 227.404605][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.416427][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.431593][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.448855][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.465442][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.496733][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.501724][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.519747][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.564206][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 227.576838][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 227.610908][ T9] usb 5-1: USB disconnect, device number 38 [ 227.632222][ T5933] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 227.743070][ T8751] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.763677][ T8751] netlink: 256 bytes leftover after parsing attributes in process `syz.4.729'. [ 227.808861][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 227.820340][ T5933] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.834319][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 227.842240][ T5933] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 227.862800][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.890239][ T5933] usb 2-1: config 0 descriptor?? [ 228.277732][ T5957] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 228.326022][ T5933] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 228.437836][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 228.442054][ T5957] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 228.457084][ T5957] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 228.466817][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.492716][ T5957] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 228.587885][ T9] usb 4-1: device descriptor read/64, error -71 [ 228.690436][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.701707][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.718511][ T5933] usb 2-1: USB disconnect, device number 76 [ 228.837861][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 228.967767][ T9] usb 4-1: device descriptor read/64, error -71 [ 229.078256][ T9] usb usb4-port1: attempt power cycle [ 229.275474][ T8767] syzkaller1: entered allmulticast mode [ 229.418053][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 229.447125][ T8773] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1975152616 (3950305232 ns) > initial count (2545910224 ns). Using initial count to start timer. [ 229.458808][ T9] usb 4-1: device descriptor read/8, error -71 [ 229.473519][ T30] kauditd_printk_skb: 721 callbacks suppressed [ 229.473538][ T30] audit: type=1326 audit(1757210761.371:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.1.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa82638ebe9 code=0x0 [ 229.533527][ T8776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.542513][ T8776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.707802][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 229.728512][ T9] usb 4-1: device descriptor read/8, error -71 [ 229.841886][ T9] usb usb4-port1: unable to enumerate USB device [ 230.037822][ T5957] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 230.047024][ T5957] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 230.054507][ T5957] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 230.063203][ T5957] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 230.707741][ T5957] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 230.845563][ T8795] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.855303][ T8795] block device autoloading is deprecated and will be removed. [ 230.870022][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.886108][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.902313][ T5957] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 230.912801][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.927513][ T5957] usb 2-1: config 0 descriptor?? [ 230.956978][ T8797] netlink: 44 bytes leftover after parsing attributes in process `syz.2.746'. [ 230.967309][ T8797] netlink: 44 bytes leftover after parsing attributes in process `syz.2.746'. [ 231.085994][ T5925] usb 5-1: USB disconnect, device number 39 [ 231.150852][ T8801] evm: overlay not supported [ 231.156713][ T8801] netlink: 14 bytes leftover after parsing attributes in process `syz.4.748'. [ 231.364187][ T5957] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 231.383317][ T8801] hsr_slave_1 (unregistering): left promiscuous mode [ 231.471048][ T5957] cp2112 0003:10C4:EA90.000E: error requesting version [ 231.512985][ T5957] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 231.570071][ T5957] usb 2-1: USB disconnect, device number 77 [ 231.610835][ T8816] fido_id[8816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 231.787755][ T5925] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 231.821161][ T8823] binder: 8822:8823 ioctl ae41 0 returned -22 [ 231.950461][ T5925] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 231.960587][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.971855][ T5925] usb 4-1: config 0 descriptor?? [ 232.453858][ T8854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.466279][ T8854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.544864][ T8857] netlink: 104 bytes leftover after parsing attributes in process `syz.2.763'. [ 232.557340][ T8857] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.565039][ T8857] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.574507][ T8857] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.589810][ T8857] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 232.607489][ T8857] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 232.648682][ T5933] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 232.651858][ T8857] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.665790][ T8857] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.675339][ T8857] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.684073][ T8857] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.692570][ T8857] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.828494][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 232.839042][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.850556][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.861658][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.874866][ T5933] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.884088][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.896018][ T5933] usb 5-1: config 0 descriptor?? [ 232.928683][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'. [ 233.183576][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.206216][ T8818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.216195][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.230144][ T8818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.278651][ T5911] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 233.316457][ T5933] microsoft 0003:045E:07DA.000F: item 0 4 0 8 parsing failed [ 233.318231][ T8818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.328199][ T5933] microsoft 0003:045E:07DA.000F: parse failed [ 233.344648][ T5933] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22 [ 233.434956][ T8818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.439860][ T5911] usb 2-1: config 129 has an invalid interface number: 95 but max is 2 [ 233.457209][ T5911] usb 2-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 233.466932][ T5911] usb 2-1: config 129 has an invalid descriptor of length 1, skipping remainder of the config [ 233.481448][ T5911] usb 2-1: config 129 has 1 interface, different from the descriptor's value: 3 [ 233.490623][ T5911] usb 2-1: config 129 has no interface number 0 [ 233.497097][ T5911] usb 2-1: config 129 interface 95 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.514645][ T5911] usb 2-1: config 129 interface 95 has no altsetting 0 [ 233.520937][ T5933] usb 5-1: USB disconnect, device number 40 [ 233.524877][ T5911] usb 2-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=43.f0 [ 233.542206][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.550784][ T5911] usb 2-1: Product: 蘜⍚ዊ튓鈆禭韶㒥葡옛藿뀸㮘뿰㲀褴阗믿᧟䋸魚쓌眢䌦퍓ꦨ剅螩ൌ햘䱰剀셻쐰땯냼缫鐔ῡܧﵨ冯貌⹶졑ꓚ횧욈˒쁧㵨㊍䅾崆ᵒ痗ޏ√䤻낄⤷Ɂㇾ먶佻騏碇ཛྷ璃㫊 [ 233.583301][ T5911] usb 2-1: Manufacturer: И [ 233.589995][ T5911] usb 2-1: SerialNumber: 磖䓽釽⡎֙〸错麟욻规篂ꌒ瘋卅勢캹轜⾳ᕤ崢ᄝḌ푸艜㎵쐿퍈䷂귭ᶑﺚ詁흲프⻮肵ⴋ䖌쎡⍦ꬒ뫕쏒묈垱缞쿯ꠋ렫䇯镥쟌幨碸ᠽᐛ䍧㪒㬩菿앃姥疅㺘줂鉍콝妠䝠娸綯誜⺀焳炄潚⽬䁇푌힑㴧 [ 233.595396][ T8818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.617245][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.629554][ T5911] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 233.649437][ T5911] usb 2-1: no configuration chosen from 1 choice [ 233.719210][ T8818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.829686][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.856772][ T3589] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.867575][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.880801][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.885487][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.907351][ T3589] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.926103][ T5925] usb 4-1: Cannot set autoneg [ 233.931412][ T5925] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 233.946602][ T5925] usb 4-1: USB disconnect, device number 86 [ 234.090786][ T8874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.768'. [ 234.143087][ T8877] netlink: 68 bytes leftover after parsing attributes in process `syz.4.769'. [ 234.448105][ T5925] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 234.545897][ T8884] vivid-000: ================= START STATUS ================= [ 234.557710][ T8884] vivid-000: Test Pattern: 75% Colorbar [ 234.564873][ T8884] vivid-000: Fill Percentage of Frame: 100 [ 234.571668][ T8884] vivid-000: Horizontal Movement: No Movement [ 234.579226][ T8884] vivid-000: Vertical Movement: No Movement [ 234.585479][ T8884] vivid-000: OSD Text Mode: All [ 234.594664][ T8884] vivid-000: Show Border: false [ 234.601626][ T8884] vivid-000: Show Square: false [ 234.606536][ T8884] vivid-000: Sensor Flipped Horizontally: false [ 234.613267][ T5925] usb 5-1: device descriptor read/64, error -71 [ 234.620403][ T8884] vivid-000: Sensor Flipped Vertically: false [ 234.631326][ T8884] vivid-000: Insert SAV Code in Image: false [ 234.637415][ T8884] vivid-000: Insert EAV Code in Image: false [ 234.643984][ T8884] vivid-000: Insert Video Guard Band: false [ 234.651828][ T8884] vivid-000: Reduced Framerate: false [ 234.657436][ T8884] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 234.665217][ T8884] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 234.673404][ T8884] vivid-000: Enable Capture Cropping: true [ 234.679600][ T8884] vivid-000: Enable Capture Composing: true [ 234.685554][ T8884] vivid-000: Enable Capture Scaler: true [ 234.692306][ T8884] vivid-000: Timestamp Source: End of Frame [ 234.698847][ T8884] vivid-000: Colorspace: sRGB [ 234.704132][ T8884] vivid-000: Transfer Function: Default [ 234.710992][ T8884] vivid-000: Y'CbCr Encoding: Default [ 234.716466][ T8884] vivid-000: HSV Encoding: Hue 0-179 [ 234.722120][ T8884] vivid-000: Quantization: Default [ 234.727297][ T8884] vivid-000: Apply Alpha To Red Only: false [ 234.733684][ T8884] vivid-000: Standard Aspect Ratio: 4x3 [ 234.740313][ T8884] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 234.748379][ T8884] vivid-000: DV Timings: 640x480p59 inactive [ 234.754512][ T8884] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 234.762456][ T8884] vivid-000: Maximum EDID Blocks: 2 [ 234.767852][ T8884] vivid-000: Limited RGB Range (16-235): false [ 234.775686][ T8884] vivid-000: Rx RGB Quantization Range: Automatic [ 234.782431][ T8884] vivid-000: Power Present: 0x00000001 [ 234.788157][ T8884] tpg source WxH: 320x180 (R'G'B) [ 234.793209][ T8884] tpg field: 1 [ 234.796611][ T8884] tpg crop: (0,0)/320x180 [ 234.801265][ T8884] tpg compose: (0,0)/320x180 [ 234.805902][ T8884] tpg colorspace: 9 [ 234.810961][ T8884] tpg transfer function: 7/0 [ 234.815770][ T8884] tpg quantization: 1/0 [ 234.821133][ T8884] tpg RGB range: 0/2 [ 234.825089][ T8884] vivid-000: ================== END STATUS ================== [ 234.867736][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 234.879023][ T5925] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 234.917110][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 234.997717][ T9] usb 4-1: device descriptor read/64, error -71 [ 235.027976][ T5925] usb 5-1: device descriptor read/64, error -71 [ 235.073331][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.082284][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.138090][ T5925] usb usb5-port1: attempt power cycle [ 235.237803][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 235.380424][ T9] usb 4-1: device descriptor read/64, error -71 [ 235.487813][ T5925] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 235.488334][ T9] usb usb4-port1: attempt power cycle [ 235.509998][ T5925] usb 5-1: device descriptor read/8, error -71 [ 235.777918][ T5925] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 235.798516][ T5925] usb 5-1: device descriptor read/8, error -71 [ 235.837852][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 235.864068][ T9] usb 4-1: device descriptor read/8, error -71 [ 235.909424][ T5925] usb usb5-port1: unable to enumerate USB device [ 236.054449][ T5953] usb 2-1: USB disconnect, device number 78 [ 236.108769][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 236.120193][ T8907] syzkaller1: entered promiscuous mode [ 236.125828][ T8907] syzkaller1: entered allmulticast mode [ 236.132268][ T9] usb 4-1: device descriptor read/8, error -71 [ 236.248723][ T9] usb usb4-port1: unable to enumerate USB device [ 236.677306][ T8920] netlink: 48 bytes leftover after parsing attributes in process `syz.1.782'. [ 236.851927][ T8928] virt_wifi0 speed is unknown, defaulting to 1000 [ 237.046972][ T8936] netlink: 'syz.1.786': attribute type 21 has an invalid length. [ 237.055215][ T8936] netlink: 128 bytes leftover after parsing attributes in process `syz.1.786'. [ 237.325493][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.336629][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.349506][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.361179][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.477795][ T5925] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 237.631292][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.642461][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.653259][ T5925] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 237.657857][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 237.663574][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.680831][ T5925] usb 2-1: config 0 descriptor?? [ 237.817679][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 237.825409][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 237.834037][ T9] usb 5-1: config 0 has no interface number 0 [ 237.841107][ T9] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.854641][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 237.863821][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.872610][ T9] usb 5-1: Product: syz [ 237.876826][ T9] usb 5-1: Manufacturer: syz [ 237.881894][ T9] usb 5-1: SerialNumber: syz [ 237.890169][ T9] usb 5-1: config 0 descriptor?? [ 237.902607][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 237.916304][ T9] em28xx 5-1:0.132: Video interface 132 found: [ 237.969534][ T5911] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 238.118469][ T5925] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 238.139559][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.150158][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 238.240698][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.257703][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.265820][ T5911] usb 4-1: Product: syz [ 238.291013][ T5911] usb 4-1: Manufacturer: syz [ 238.295730][ T5911] usb 4-1: SerialNumber: syz [ 238.302883][ T5925] cp2112 0003:10C4:EA90.0010: Part Number: 0x00 Device Version: 0x00 [ 238.306682][ T9] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 238.546315][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.570321][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.593513][ T5911] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 238.633495][ T5911] usb 4-1: USB disconnect, device number 91 [ 238.952128][ T5925] cp2112 0003:10C4:EA90.0010: error setting SMBus config [ 238.983298][ T5925] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -71 [ 238.983326][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.983894][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.013592][ T5925] usb 2-1: USB disconnect, device number 79 [ 239.050852][ T9] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 239.066458][ T9] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 239.073580][ T9] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 239.107712][ T5911] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 239.137647][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 239.145739][ T9] em28xx 5-1:0.132: analog set to bulk mode. [ 239.153291][ T5953] em28xx 5-1:0.132: Registering V4L2 extension [ 239.168764][ T9] usb 5-1: USB disconnect, device number 45 [ 239.180619][ T9] em28xx 5-1:0.132: Disconnecting em28xx [ 239.257663][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 239.265324][ T5911] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 239.274251][ T5911] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 239.288625][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.298958][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.308974][ T5953] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 239.316796][ T5953] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 239.324219][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 239.334471][ T5953] em28xx 5-1:0.132: No AC97 audio processor [ 239.340616][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.356439][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.358418][ T5953] usb 5-1: Decoder not found [ 239.373244][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.383164][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.392359][ T5953] em28xx 5-1:0.132: failed to create media graph [ 239.399329][ T5953] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 239.421259][ T5953] em28xx 5-1:0.132: Remote control support is not available for this card. [ 239.430736][ T9] em28xx 5-1:0.132: Closing input extension [ 239.455508][ T9] em28xx 5-1:0.132: Freeing device [ 239.697686][ T5911] usb 4-1: usb_control_msg returned -71 [ 239.703538][ T5911] usbtmc 4-1:16.0: can't read capabilities [ 239.747993][ T5911] usbtmc 4-1:16.0: Failed to submit iin_urb [ 239.763662][ T5911] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 239.837248][ T5911] usb 4-1: USB disconnect, device number 92 [ 240.265358][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.280845][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.296793][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 240.297904][ T5957] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 240.311406][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.323425][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.489714][ T5957] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 240.507617][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.527699][ T5957] usb 4-1: config 0 descriptor?? [ 240.808444][ T5911] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 240.889771][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.901252][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.949137][ T5957] elecom 0003:056E:00E6.0011: unknown main item tag 0x0 [ 240.956959][ T5957] elecom 0003:056E:00E6.0011: item fetching failed at offset 3/5 [ 240.965529][ T5957] elecom 0003:056E:00E6.0011: probe with driver elecom failed with error -22 [ 240.978076][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 240.988307][ T5911] usb 2-1: config 51 has an invalid interface number: 123 but max is 0 [ 240.997503][ T5911] usb 2-1: config 51 has no interface number 0 [ 241.003961][ T5911] usb 2-1: config 51 interface 123 has no altsetting 0 [ 241.013796][ T5911] usb 2-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=64.81 [ 241.023486][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.032496][ T5911] usb 2-1: Product: syz [ 241.036917][ T5911] usb 2-1: Manufacturer: syz [ 241.041680][ T5911] usb 2-1: SerialNumber: syz [ 241.087951][ T5933] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 241.151770][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.163047][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.175220][ T5957] usb 4-1: USB disconnect, device number 93 [ 241.249635][ T5933] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.265556][ T5933] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 241.272787][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'. [ 241.276838][ T5933] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.294975][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.303955][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'. [ 241.312993][ T5933] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.314171][ T5933] usb 5-1: invalid MIDI out EP 0 [ 241.332945][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.348880][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.460673][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.472570][ T5933] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 241.520687][ T5933] usb 5-1: USB disconnect, device number 46 [ 241.560336][ T9017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.571303][ T9017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.712873][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.810'. [ 241.858650][ T9025] virt_wifi0 speed is unknown, defaulting to 1000 [ 241.898267][ T5911] usb 2-1: unsupported MDLM descriptors [ 241.906948][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.924493][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.929194][ T5911] usb 2-1: USB disconnect, device number 80 [ 242.122734][ T9039] binder: Unknown parameter '' [ 242.142493][ T9038] binder: Unknown parameter '' [ 242.298283][ T5953] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 242.488338][ T5953] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 242.504911][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.519735][ T5953] usb 4-1: Product: syz [ 242.524087][ T5953] usb 4-1: Manufacturer: syz [ 242.537499][ T5953] usb 4-1: SerialNumber: syz [ 242.552302][ T5953] usb 4-1: config 0 descriptor?? [ 242.592231][ T5953] usb 4-1: interface 1 not found [ 242.721281][ T9054] netlink: 68 bytes leftover after parsing attributes in process `syz.1.819'. [ 242.787095][ T5957] usb 4-1: USB disconnect, device number 94 [ 242.807768][ T5911] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 242.991811][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.006647][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.023887][ T5911] usb 5-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 243.034523][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.048935][ T5911] usb 5-1: config 0 descriptor?? [ 243.386994][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.402565][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.428254][ T9070] netlink: 'syz.2.825': attribute type 3 has an invalid length. [ 243.441964][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 243.468514][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 243.482503][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.486789][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.495120][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.519256][ T5911] usb 5-1: USB disconnect, device number 47 [ 244.051118][ T9090] nfs: Unknown parameter 'lock defcontext?staff_u' [ 244.121068][ T5911] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 244.130047][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.142935][ T9097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.156377][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.178213][ T9097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.199081][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.208280][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.307991][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 244.346216][ T5911] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 244.363026][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.376668][ T5911] usb 2-1: config 0 descriptor?? [ 244.653062][ T9] usb 2-1: USB disconnect, device number 81 [ 244.662124][ T5911] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 244.820155][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.823748][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.842579][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.850983][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.864469][ T5911] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 244.874961][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.894044][ T5911] usb 5-1: config 0 descriptor?? [ 245.310543][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 245.334330][ T9106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.350695][ T9106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.366374][ T5911] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 245.377384][ T5911] cp2112 0003:10C4:EA90.0012: item fetching failed at offset 3/7 [ 245.382493][ T5957] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 245.393225][ T5911] cp2112 0003:10C4:EA90.0012: parse failed [ 245.401543][ T5911] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -22 [ 245.515342][ T9125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.526952][ T9125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.590461][ T9] usb 5-1: USB disconnect, device number 48 [ 245.601905][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 245.636251][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.656141][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.693191][ T5957] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 245.712308][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.733192][ T5957] usb 4-1: config 0 descriptor?? [ 245.770233][ T9135] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 245.824364][ T9137] binder: 9136:9137 ioctl 4018f514 0 returned -22 [ 245.839710][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.849483][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.963233][ T5957] aquacomputer_d5next 0003:0C70:F0B6.0013: item fetching failed at offset 0/3 [ 245.973799][ T5957] aquacomputer_d5next 0003:0C70:F0B6.0013: probe with driver aquacomputer_d5next failed with error -22 [ 246.002990][ T5957] usb 4-1: USB disconnect, device number 95 [ 246.098318][ T43] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 246.116423][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.127865][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.149923][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 246.269818][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 246.282509][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 246.291832][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.299988][ T43] usb 5-1: Product: syz [ 246.304310][ T43] usb 5-1: Manufacturer: syz [ 246.311840][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 246.312821][ T43] usb 5-1: SerialNumber: syz [ 246.323532][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 246.338682][ T43] usb 5-1: config 0 descriptor?? [ 246.343107][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.361017][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 246.566323][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.591298][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.616136][ T43] usb 5-1: USB disconnect, device number 49 [ 246.701101][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.795516][ T9154] tmpfs: Bad value for 'mpol' [ 246.948124][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.961290][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.243485][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.858'. [ 247.369129][ T43] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 247.373213][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 247.392279][ T9] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 247.399868][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 247.406882][ T9176] ubi0: attaching mtd0 [ 247.417612][ T9] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 247.426987][ T9] usb 2-1: USB disconnect, device number 82 [ 247.441585][ T9176] ubi0: scanning is finished [ 247.446375][ T9176] ubi0: empty MTD device detected [ 247.518043][ T43] usb 5-1: device descriptor read/64, error -71 [ 247.573864][ T9176] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 247.777729][ T43] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 247.931060][ T43] usb 5-1: device descriptor read/64, error -71 [ 248.017639][ T5933] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 248.058343][ T43] usb usb5-port1: attempt power cycle [ 248.166678][ T9198] program syz.1.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.179629][ T9198] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 248.200578][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.211641][ T5933] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 248.222030][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.235776][ T5933] usb 4-1: config 0 descriptor?? [ 248.249427][ T5933] usb 4-1: bad CDC descriptors [ 248.408013][ T43] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 248.438514][ T43] usb 5-1: device descriptor read/8, error -71 [ 248.450976][ T9] usb 4-1: USB disconnect, device number 96 [ 248.547763][ T5933] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 248.687656][ T43] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 248.699355][ T5933] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.710579][ T5933] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.721395][ T43] usb 5-1: device descriptor read/8, error -71 [ 248.727811][ T5933] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.736902][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.748479][ T9200] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 248.767615][ T5933] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.848406][ T43] usb usb5-port1: unable to enumerate USB device [ 248.991526][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.018196][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.045168][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.056271][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.217851][ T5953] usb 2-1: USB disconnect, device number 83 [ 249.342850][ T9209] netlink: 'syz.3.871': attribute type 4 has an invalid length. [ 249.352718][ T9209] netlink: 17 bytes leftover after parsing attributes in process `syz.3.871'. [ 249.925641][ T30] audit: type=1326 audit(1757210781.821:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9217 comm="syz.1.874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa82638ebe9 code=0x0 [ 250.056151][ T9223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.067267][ T9223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.235295][ T9230] loop7: detected capacity change from 0 to 7 [ 250.267441][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.276987][ C1] buffer_io_error: 267 callbacks suppressed [ 250.277023][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.292978][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.302322][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.311422][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.320701][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.333997][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.343297][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.352759][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.362021][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.370380][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.379622][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.388004][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.397240][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.405266][ T5862] ldm_validate_partition_table(): Disk read failed. [ 250.418842][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.428175][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.436413][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.445927][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.454615][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.463845][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.472102][ T5862] Dev loop7: unable to read RDB block 0 [ 250.481284][ T5862] loop7: unable to read partition table [ 250.487384][ T5862] loop7: partition table beyond EOD, truncated [ 250.500145][ T9230] ldm_validate_partition_table(): Disk read failed. [ 250.512516][ T9230] Dev loop7: unable to read RDB block 0 [ 250.519359][ T9230] loop7: unable to read partition table [ 250.525435][ T9230] loop7: partition table beyond EOD, truncated [ 250.536576][ T9230] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 250.537642][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 250.643984][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.654994][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.670344][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.680725][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.694255][ T9234] Context (ID=0x4d6) not attached to queue pair (handle=0xffffffff:0x4) [ 250.703458][ T9] usb 5-1: device descriptor read/64, error -71 [ 250.787726][ T43] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 250.937755][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 250.947679][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 250.954387][ T43] usb 4-1: config 149 has too many interfaces: 252, using maximum allowed: 32 [ 250.963388][ T43] usb 4-1: config 149 has 1 interface, different from the descriptor's value: 252 [ 250.972940][ T43] usb 4-1: config 149 has no interface number 0 [ 250.979320][ T43] usb 4-1: config 149 interface 59 has no altsetting 0 [ 250.989415][ T43] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=36.86 [ 250.998569][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.006685][ T43] usb 4-1: Product: syz [ 251.012002][ T43] usb 4-1: Manufacturer: syz [ 251.016759][ T43] usb 4-1: SerialNumber: syz [ 251.067943][ T9] usb 5-1: device descriptor read/64, error -71 [ 251.117739][ T5911] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 251.178068][ T9] usb usb5-port1: attempt power cycle [ 251.279400][ T5911] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 251.289787][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.297949][ T5911] usb 2-1: Product: syz [ 251.302144][ T5911] usb 2-1: Manufacturer: syz [ 251.306772][ T5911] usb 2-1: SerialNumber: syz [ 251.319212][ T5911] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 251.377125][ T5953] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 251.393407][ T9241] block nbd2: Send control failed (result -32) [ 251.401101][ T9241] block nbd2: Request send failed, requeueing [ 251.412087][ T95] block nbd2: Dead connection, failed to find a fallback [ 251.420088][ T95] block nbd2: shutting down sockets [ 251.427094][ T9241] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 251.443436][ T9241] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 251.469973][ T9241] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 251.481664][ T9241] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 251.494737][ T9241] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 251.510463][ T9241] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 251.517869][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 251.524713][ T9241] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 251.545119][ T9241] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 251.555817][ T9241] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 251.559098][ T9] usb 5-1: device descriptor read/8, error -71 [ 251.648733][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.657907][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.674510][ T9245] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2682782694/2682782696 [ 251.788739][ T5933] usb 2-1: USB disconnect, device number 84 [ 251.807670][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 251.829496][ T9] usb 5-1: device descriptor read/8, error -71 [ 251.942016][ T9] usb usb5-port1: unable to enumerate USB device [ 252.372964][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.391584][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.408564][ T5953] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 252.416857][ T5953] ath9k_htc: Failed to initialize the device [ 252.429541][ T5933] usb 2-1: ath9k_htc: USB layer deinitialized [ 252.757759][ T5933] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 252.913293][ T5933] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 252.922748][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.930925][ T5933] usb 2-1: Product: syz [ 252.935296][ T5933] usb 2-1: Manufacturer: syz [ 252.940306][ T5933] usb 2-1: SerialNumber: syz [ 252.948530][ T5933] usb 2-1: config 0 descriptor?? [ 253.080446][ T43] mvusb_mdio 4-1:149.59: probe with driver mvusb_mdio failed with error -5 [ 253.096598][ T43] usb 4-1: USB disconnect, device number 97 [ 253.172220][ T5933] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 253.253671][ T5933] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 253.261610][ T9260] netlink: 'syz.3.886': attribute type 32 has an invalid length. [ 253.307695][ T5933] usb 2-1: USB disconnect, device number 85 [ 253.471056][ T9267] [ 253.473443][ T9267] ====================================================== [ 253.480490][ T9267] WARNING: possible circular locking dependency detected [ 253.487550][ T9267] syzkaller #0 Not tainted [ 253.492055][ T9267] ------------------------------------------------------ [ 253.499111][ T9267] syz.3.889/9267 is trying to acquire lock: [ 253.505026][ T9267] ffff88801b6ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x2fb/0x3e0 [ 253.515518][ T9267] [ 253.515518][ T9267] but task is already holding lock: [ 253.522983][ T9267] ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 253.532400][ T9267] [ 253.532400][ T9267] which lock already depends on the new lock. [ 253.532400][ T9267] [ 253.542920][ T9267] [ 253.542920][ T9267] the existing dependency chain (in reverse order) is: [ 253.551938][ T9267] [ 253.551938][ T9267] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 253.560026][ T9267] lock_acquire+0x120/0x360 [ 253.565058][ T9267] down_write+0x96/0x1f0 [ 253.569831][ T9267] kernfs_add_one+0x41/0x520 [ 253.574951][ T9267] kernfs_create_dir_ns+0xde/0x130 [ 253.580593][ T9267] internal_create_group+0x419/0x1110 [ 253.586581][ T9267] cpuhp_invoke_callback+0x442/0x860 [ 253.592513][ T9267] cpuhp_issue_call+0x430/0x7a0 [ 253.597896][ T9267] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 253.604496][ T9267] __cpuhp_setup_state+0x3f/0x60 [ 253.609964][ T9267] do_one_initcall+0x233/0x820 [ 253.615349][ T9267] do_initcall_level+0x104/0x190 [ 253.620836][ T9267] do_initcalls+0x59/0xa0 [ 253.625789][ T9267] kernel_init_freeable+0x334/0x4b0 [ 253.631518][ T9267] kernel_init+0x1d/0x1d0 [ 253.636377][ T9267] ret_from_fork+0x47c/0x820 [ 253.641498][ T9267] ret_from_fork_asm+0x1a/0x30 [ 253.646788][ T9267] [ 253.646788][ T9267] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 253.654613][ T9267] [ 253.654613][ T9267] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 253.662354][ T9267] lock_acquire+0x120/0x360 [ 253.667389][ T9267] cpus_read_lock+0x42/0x160 [ 253.672509][ T9267] static_key_slow_inc+0x12/0x30 [ 253.677993][ T9267] tcp_md5_do_add+0x21f/0x3a0 [ 253.683222][ T9267] tcp_v4_parse_md5_keys+0x412/0x600 [ 253.689049][ T9267] do_tcp_setsockopt+0x11dc/0x1f20 [ 253.694685][ T9267] do_sock_setsockopt+0x179/0x1b0 [ 253.700232][ T9267] __x64_sys_setsockopt+0x13f/0x1b0 [ 253.705956][ T9267] do_syscall_64+0xfa/0xfa0 [ 253.710981][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.717397][ T9267] [ 253.717397][ T9267] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 253.725137][ T9267] lock_acquire+0x120/0x360 [ 253.730182][ T9267] lock_sock_nested+0x48/0x100 [ 253.735500][ T9267] tcp_sendmsg+0x21/0x50 [ 253.740274][ T9267] __sock_sendmsg+0x19c/0x270 [ 253.745487][ T9267] sock_sendmsg+0x158/0x230 [ 253.750524][ T9267] __sock_xmit+0x1c1/0x470 [ 253.755464][ T9267] nbd_send_cmd+0x863/0x1ba0 [ 253.760581][ T9267] nbd_queue_rq+0xcdb/0xf10 [ 253.765607][ T9267] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 253.771690][ T9267] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 253.778556][ T9267] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 253.785073][ T9267] blk_mq_run_hw_queue+0x348/0x4f0 [ 253.790805][ T9267] blk_mq_dispatch_list+0xd0c/0xe00 [ 253.796547][ T9267] blk_mq_flush_plug_list+0x469/0x550 [ 253.802478][ T9267] __blk_flush_plug+0x3d3/0x4b0 [ 253.807868][ T9267] __submit_bio+0x2d3/0x5a0 [ 253.812895][ T9267] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 253.819060][ T9267] __bread_gfp+0x216/0x3c0 [ 253.824008][ T9267] udf_load_vrs+0x365/0xf20 [ 253.829046][ T9267] udf_fill_super+0x5ad/0x17a0 [ 253.834426][ T9267] get_tree_bdev_flags+0x40b/0x4d0 [ 253.840067][ T9267] vfs_get_tree+0x8f/0x2b0 [ 253.845010][ T9267] do_new_mount+0x302/0xa10 [ 253.850042][ T9267] __se_sys_mount+0x313/0x410 [ 253.855253][ T9267] do_syscall_64+0xfa/0xfa0 [ 253.860284][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.866708][ T9267] [ 253.866708][ T9267] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 253.874453][ T9267] lock_acquire+0x120/0x360 [ 253.879498][ T9267] __mutex_lock+0x187/0x1350 [ 253.884614][ T9267] nbd_queue_rq+0x257/0xf10 [ 253.889640][ T9267] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 253.895720][ T9267] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 253.902586][ T9267] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 253.909101][ T9267] blk_mq_run_hw_queue+0x348/0x4f0 [ 253.914765][ T9267] blk_mq_dispatch_list+0xd0c/0xe00 [ 253.920496][ T9267] blk_mq_flush_plug_list+0x469/0x550 [ 253.926423][ T9267] __blk_flush_plug+0x3d3/0x4b0 [ 253.931807][ T9267] __submit_bio+0x2d3/0x5a0 [ 253.936845][ T9267] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 253.943010][ T9267] block_read_full_folio+0x599/0x830 [ 253.948822][ T9267] filemap_read_folio+0x114/0x380 [ 253.954381][ T9267] do_read_cache_folio+0x350/0x590 [ 253.960036][ T9267] read_part_sector+0xb6/0x2b0 [ 253.965424][ T9267] adfspart_check_ICS+0xa4/0xa50 [ 253.970895][ T9267] bdev_disk_changed+0x75c/0x14b0 [ 253.976450][ T9267] blkdev_get_whole+0x380/0x510 [ 253.981836][ T9267] bdev_open+0x31e/0xd30 [ 253.986703][ T9267] blkdev_open+0x457/0x600 [ 253.991643][ T9267] do_dentry_open+0x950/0x13f0 [ 253.996944][ T9267] vfs_open+0x3b/0x340 [ 254.001547][ T9267] path_openat+0x2ee5/0x3830 [ 254.006752][ T9267] do_filp_open+0x1fa/0x410 [ 254.011790][ T9267] do_sys_openat2+0x121/0x1c0 [ 254.016996][ T9267] __x64_sys_openat+0x138/0x170 [ 254.022398][ T9267] do_syscall_64+0xfa/0xfa0 [ 254.027429][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.033848][ T9267] [ 254.033848][ T9267] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 254.041069][ T9267] lock_acquire+0x120/0x360 [ 254.046102][ T9267] __mutex_lock+0x187/0x1350 [ 254.051215][ T9267] nbd_queue_rq+0xc8/0xf10 [ 254.056175][ T9267] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 254.062254][ T9267] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 254.069252][ T9267] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 254.075771][ T9267] blk_mq_run_hw_queue+0x348/0x4f0 [ 254.081414][ T9267] blk_mq_dispatch_list+0xd0c/0xe00 [ 254.087166][ T9267] blk_mq_flush_plug_list+0x469/0x550 [ 254.093074][ T9267] __blk_flush_plug+0x3d3/0x4b0 [ 254.098477][ T9267] __submit_bio+0x2d3/0x5a0 [ 254.103518][ T9267] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 254.109686][ T9267] block_read_full_folio+0x599/0x830 [ 254.115497][ T9267] filemap_read_folio+0x114/0x380 [ 254.121074][ T9267] do_read_cache_folio+0x350/0x590 [ 254.126744][ T9267] read_part_sector+0xb6/0x2b0 [ 254.132055][ T9267] adfspart_check_ICS+0xa4/0xa50 [ 254.137547][ T9267] bdev_disk_changed+0x75c/0x14b0 [ 254.143109][ T9267] blkdev_get_whole+0x380/0x510 [ 254.148496][ T9267] bdev_open+0x31e/0xd30 [ 254.153275][ T9267] blkdev_open+0x457/0x600 [ 254.158217][ T9267] do_dentry_open+0x950/0x13f0 [ 254.163515][ T9267] vfs_open+0x3b/0x340 [ 254.168115][ T9267] path_openat+0x2ee5/0x3830 [ 254.173232][ T9267] do_filp_open+0x1fa/0x410 [ 254.178286][ T9267] do_sys_openat2+0x121/0x1c0 [ 254.183503][ T9267] __x64_sys_openat+0x138/0x170 [ 254.188880][ T9267] do_syscall_64+0xfa/0xfa0 [ 254.193908][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.200327][ T9267] [ 254.200327][ T9267] -> #4 (set->srcu){.+.+}-{0:0}: [ 254.207491][ T9267] lock_sync+0xba/0x160 [ 254.212269][ T9267] __synchronize_srcu+0x96/0x3a0 [ 254.217737][ T9267] elevator_switch+0x12b/0x640 [ 254.223033][ T9267] elevator_change+0x2d4/0x450 [ 254.228349][ T9267] elevator_set_default+0x186/0x260 [ 254.234078][ T9267] blk_register_queue+0x34e/0x3f0 [ 254.239630][ T9267] __add_disk+0x677/0xd50 [ 254.244485][ T9267] add_disk_fwnode+0xfc/0x480 [ 254.249689][ T9267] nbd_dev_add+0x717/0xae0 [ 254.254638][ T9267] nbd_init+0x168/0x1f0 [ 254.259326][ T9267] do_one_initcall+0x233/0x820 [ 254.264614][ T9267] do_initcall_level+0x104/0x190 [ 254.270092][ T9267] do_initcalls+0x59/0xa0 [ 254.274952][ T9267] kernel_init_freeable+0x334/0x4b0 [ 254.280693][ T9267] kernel_init+0x1d/0x1d0 [ 254.285560][ T9267] ret_from_fork+0x47c/0x820 [ 254.290691][ T9267] ret_from_fork_asm+0x1a/0x30 [ 254.296007][ T9267] [ 254.296007][ T9267] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 254.303850][ T9267] lock_acquire+0x120/0x360 [ 254.308887][ T9267] __mutex_lock+0x187/0x1350 [ 254.314004][ T9267] elevator_change+0x19b/0x450 [ 254.319315][ T9267] elevator_set_none+0x42/0xb0 [ 254.324630][ T9267] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 254.330974][ T9267] nbd_start_device+0x17f/0xb10 [ 254.336354][ T9267] nbd_genl_connect+0x135b/0x18f0 [ 254.341915][ T9267] genl_family_rcv_msg_doit+0x212/0x300 [ 254.347994][ T9267] genl_rcv_msg+0x60e/0x790 [ 254.353029][ T9267] netlink_rcv_skb+0x208/0x470 [ 254.358332][ T9267] genl_rcv+0x28/0x40 [ 254.362841][ T9267] netlink_unicast+0x82c/0x9e0 [ 254.368134][ T9267] netlink_sendmsg+0x805/0xb30 [ 254.373443][ T9267] __sock_sendmsg+0x219/0x270 [ 254.378663][ T9267] ____sys_sendmsg+0x505/0x830 [ 254.383952][ T9267] ___sys_sendmsg+0x21f/0x2a0 [ 254.389158][ T9267] __x64_sys_sendmsg+0x19b/0x260 [ 254.394623][ T9267] do_syscall_64+0xfa/0xfa0 [ 254.399652][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.406073][ T9267] [ 254.406073][ T9267] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 254.414810][ T9267] lock_acquire+0x120/0x360 [ 254.419858][ T9267] blk_alloc_queue+0x538/0x620 [ 254.425163][ T9267] __blk_mq_alloc_disk+0x15c/0x340 [ 254.430801][ T9267] nbd_dev_add+0x46c/0xae0 [ 254.435750][ T9267] nbd_init+0x168/0x1f0 [ 254.440433][ T9267] do_one_initcall+0x233/0x820 [ 254.445746][ T9267] do_initcall_level+0x104/0x190 [ 254.451217][ T9267] do_initcalls+0x59/0xa0 [ 254.456101][ T9267] kernel_init_freeable+0x334/0x4b0 [ 254.461862][ T9267] kernel_init+0x1d/0x1d0 [ 254.466817][ T9267] ret_from_fork+0x47c/0x820 [ 254.471939][ T9267] ret_from_fork_asm+0x1a/0x30 [ 254.477229][ T9267] [ 254.477229][ T9267] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 254.484466][ T9267] lock_acquire+0x120/0x360 [ 254.489514][ T9267] fs_reclaim_acquire+0x72/0x100 [ 254.494991][ T9267] kmem_cache_alloc_noprof+0x45/0x6e0 [ 254.500893][ T9267] __kernfs_iattrs+0xd9/0x320 [ 254.506099][ T9267] kernfs_iop_setattr+0xea/0x3f0 [ 254.511570][ T9267] notify_change+0xc1a/0xf40 [ 254.516687][ T9267] do_truncate+0x1a4/0x220 [ 254.521632][ T9267] path_openat+0x306c/0x3830 [ 254.526745][ T9267] do_filp_open+0x1fa/0x410 [ 254.531862][ T9267] do_sys_openat2+0x121/0x1c0 [ 254.537324][ T9267] __x64_sys_openat+0x138/0x170 [ 254.542705][ T9267] do_syscall_64+0xfa/0xfa0 [ 254.547733][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.554151][ T9267] [ 254.554151][ T9267] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 254.562704][ T9267] validate_chain+0xb9b/0x2140 [ 254.568006][ T9267] __lock_acquire+0xab9/0xd20 [ 254.573206][ T9267] lock_acquire+0x120/0x360 [ 254.578251][ T9267] down_write+0x96/0x1f0 [ 254.583020][ T9267] kernfs_link_sibling+0x2fb/0x3e0 [ 254.588656][ T9267] kernfs_add_one+0x1e0/0x520 [ 254.593855][ T9267] kernfs_create_dir_ns+0xde/0x130 [ 254.599497][ T9267] sysfs_create_dir_ns+0x123/0x280 [ 254.605146][ T9267] kobject_add_internal+0x59f/0xb40 [ 254.610872][ T9267] kobject_add+0x155/0x220 [ 254.615828][ T9267] device_add+0x408/0xb50 [ 254.620695][ T9267] input_register_device+0x9d3/0x1140 [ 254.627119][ T9267] uinput_create_device+0x422/0x670 [ 254.632853][ T9267] uinput_ioctl_handler+0x3f0/0x1570 [ 254.638674][ T9267] __se_sys_ioctl+0xf9/0x170 [ 254.643790][ T9267] do_syscall_64+0xfa/0xfa0 [ 254.648818][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.655238][ T9267] [ 254.655238][ T9267] other info that might help us debug this: [ 254.655238][ T9267] [ 254.665465][ T9267] Chain exists of: [ 254.665465][ T9267] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 254.665465][ T9267] [ 254.679912][ T9267] Possible unsafe locking scenario: [ 254.679912][ T9267] [ 254.687364][ T9267] CPU0 CPU1 [ 254.692751][ T9267] ---- ---- [ 254.698122][ T9267] lock(&root->kernfs_rwsem); [ 254.702903][ T9267] lock(cpuhp_state_mutex); [ 254.710045][ T9267] lock(&root->kernfs_rwsem); [ 254.717338][ T9267] lock(&root->kernfs_iattr_rwsem); [ 254.722631][ T9267] [ 254.722631][ T9267] *** DEADLOCK *** [ 254.722631][ T9267] [ 254.730785][ T9267] 2 locks held by syz.3.889/9267: [ 254.735810][ T9267] #0: ffff88802b592870 (&newdev->mutex){+.+.}-{4:4}, at: uinput_ioctl_handler+0xbf/0x1570 [ 254.745990][ T9267] #1: ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 254.755854][ T9267] [ 254.755854][ T9267] stack backtrace: [ 254.761750][ T9267] CPU: 0 UID: 0 PID: 9267 Comm: syz.3.889 Not tainted syzkaller #0 PREEMPT(full) [ 254.761771][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.761794][ T9267] Call Trace: [ 254.761803][ T9267] [ 254.761811][ T9267] dump_stack_lvl+0x189/0x250 [ 254.761830][ T9267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.761845][ T9267] ? __pfx__printk+0x10/0x10 [ 254.761871][ T9267] ? print_lock_name+0xde/0x100 [ 254.761896][ T9267] print_circular_bug+0x2ee/0x310 [ 254.761921][ T9267] check_noncircular+0x134/0x160 [ 254.761946][ T9267] validate_chain+0xb9b/0x2140 [ 254.761970][ T9267] ? lockdep_unlock+0x89/0x120 [ 254.761986][ T9267] ? validate_chain+0x897/0x2140 [ 254.762011][ T9267] __lock_acquire+0xab9/0xd20 [ 254.762033][ T9267] ? kernfs_link_sibling+0x2fb/0x3e0 [ 254.762049][ T9267] lock_acquire+0x120/0x360 [ 254.762066][ T9267] ? kernfs_link_sibling+0x2fb/0x3e0 [ 254.762089][ T9267] down_write+0x96/0x1f0 [ 254.762108][ T9267] ? kernfs_link_sibling+0x2fb/0x3e0 [ 254.762125][ T9267] ? __pfx_down_write+0x10/0x10 [ 254.762142][ T9267] ? kernfs_root+0x1c/0x230 [ 254.762156][ T9267] ? kernfs_root+0x1c/0x230 [ 254.762170][ T9267] ? kernfs_root+0x1c/0x230 [ 254.762185][ T9267] ? kernfs_root+0x1ea/0x230 [ 254.762205][ T9267] kernfs_link_sibling+0x2fb/0x3e0 [ 254.762227][ T9267] kernfs_add_one+0x1e0/0x520 [ 254.762245][ T9267] kernfs_create_dir_ns+0xde/0x130 [ 254.762265][ T9267] sysfs_create_dir_ns+0x123/0x280 [ 254.762293][ T9267] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 254.762319][ T9267] ? do_raw_spin_unlock+0x122/0x240 [ 254.762346][ T9267] kobject_add_internal+0x59f/0xb40 [ 254.762367][ T9267] kobject_add+0x155/0x220 [ 254.762385][ T9267] ? __pfx_kobject_add+0x10/0x10 [ 254.762403][ T9267] ? get_device_parent+0x366/0x3a0 [ 254.762425][ T9267] device_add+0x408/0xb50 [ 254.762445][ T9267] input_register_device+0x9d3/0x1140 [ 254.762467][ T9267] ? input_ff_create+0x235/0x300 [ 254.762483][ T9267] uinput_create_device+0x422/0x670 [ 254.762513][ T9267] uinput_ioctl_handler+0x3f0/0x1570 [ 254.762541][ T9267] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 254.762573][ T9267] ? __fget_files+0x2a/0x420 [ 254.762597][ T9267] ? bpf_lsm_file_ioctl+0x9/0x20 [ 254.762612][ T9267] ? __pfx_uinput_ioctl+0x10/0x10 [ 254.762636][ T9267] __se_sys_ioctl+0xf9/0x170 [ 254.762655][ T9267] do_syscall_64+0xfa/0xfa0 [ 254.762670][ T9267] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.762685][ T9267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.762701][ T9267] ? clear_bhb_loop+0x60/0xb0 [ 254.762720][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.762737][ T9267] RIP: 0033:0x7f9b64f8ebe9 [ 254.762752][ T9267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.762768][ T9267] RSP: 002b:00007f9b65e43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.762785][ T9267] RAX: ffffffffffffffda RBX: 00007f9b651c6090 RCX: 00007f9b64f8ebe9 [ 254.762798][ T9267] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 254.762808][ T9267] RBP: 00007f9b65011e19 R08: 0000000000000000 R09: 0000000000000000 [ 254.762819][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.762829][ T9267] R13: 00007f9b651c6128 R14: 00007f9b651c6090 R15: 00007ffee4ad03d8 [ 254.762848][ T9267] [ 255.131467][ T9267] input: syz1 as /devices/virtual/input/input25 [ 255.303416][ T30] audit: type=1326 audit(6048613086.195:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9249 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de1b8ebe9 code=0x7fc00000 [ 255.366659][ T5933] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 255.518520][ T5933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.530090][ T5933] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 255.539056][ T5933] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 255.548193][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.558867][ T5933] usb 2-1: config 0 descriptor?? [ 255.766789][ T5933] Bluetooth: Can't get state to change to load ram patch err [ 255.774249][ T5933] Bluetooth: Loading patch file failed [ 255.779803][ T5933] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 255.788800][ T5933] usb 2-1: USB disconnect, device number 86 [ 261.046586][ T1298] ieee802154 phy1 wpan1: encryption failed: -22