last executing test programs: 4m47.685450293s ago: executing program 1 (id=409): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0xa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7, 0xf7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221c"], 0x0}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xe0, {0xe0, 0x4, "0946b5be4627b223e1694f2bf30dc4d6364ead2ecbb52289ff27b6500316f0383770351b74f7bee507b4fb43e77e8aa0cd4c9a0c15c4dac8ebfbc81ef4fa3c66fca29c3051c36ef060abec365963dfafb9a98710042cb8b0e81b484e4496888913d233ba6921fe8919ffa072baea954c823d16efe5767a50581c233537130077d2c076bc8a3e6a7ad31f0e7f3f8a2d90472fd76631d9e2e984e54fcdada948fc93aa2ff490aa91d90063ca87fa33d5ccdcc45316476ce29905a405ec1e08f005e8fec1d50ff7ac6fa14233f4f68f4f7bb8503ef9ee14962527cb6d4af199"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x5, 0x80, "be747fe5165f4e07d630e1e4535d7c24fb29ef6a845093377f557455ec116364f4b468ef79d714e97e56a7398f85028a68ff2bdbace619078d8fd7825f596d46da14a5bd5556149e57c3b1a62a30e9505796a6003deb5e4fce8586c6d054245c26ec621945cc1b81d4a353f1982640271f2ab2486266cc1b7c32c168d0e3102c"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x81, 0x2, "6b06"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "d2a8f8"}, &(0x7f0000000400)={0x20, 0x83, 0x1, '\r'}, &(0x7f0000000440)={0x20, 0x84, 0x3, "914df1"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "2b54e4"}}) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x24000100) socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x3}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xb, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m45.927984847s ago: executing program 1 (id=415): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) name_to_handle_at(r2, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r5 = dup(r4) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x0, 0x100000001, 0x1, 0x0, 0xfffffffe, 0x3}}, 0x40) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0xffffe000) (async) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000070601080000000000000000010000050800066000000009050001", @ANYBLOB="0b6899f21c2f22394dca17b61c9e3659e66ff3f81963f85155881c2ed775ae3401dd33a995d6867ea0f21df8cbaf4402ac8dea295b2584359278c1809b0315947ba8f06da85ce5432cadf200c2a9b14e449550d38692c2857d56e9ce2c624d353df64966894ddda3f9da403ef75d579e7ba1ee862c3011ebc50e4d38cd393fd2e3962b5245a398a18cf6cb4088b6717c95ceb6ff0838b9d5415241064af1f104a77dd19be0839e0b54dea3996568f0e7da8d38036c987cb499e68febd9dd3e948ea04b380fc0a4a50811ca9527c93800c742f8d36e", @ANYRES64=r3, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={0x22}) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004040) 4m45.797967897s ago: executing program 1 (id=417): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4000) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x42) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x42) ioctl$BTRFS_IOC_BALANCE(r1, 0x8008b705, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x8008b705, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r1, @ANYBLOB="dc706bb6b0a9cffb06da1f4f251cdface0e99564dc7a0f2cabcd45e5572533528f39e450c674eb9992c3413580010e759fc49f69c24dcde990faa13a20a4d9b1cc1ce43d6edc2bc38cf1d5796d37a113999057290f88ec6ae7607d27e572f282f49e6d01b5c19f3279595a2e9128e586e172f916da4cf36e258d46e607f8b17e278d84f5fdc6a58b89b02939817a2679310b9e2431ccfa01d186ce566b6256f48f97caf4e31b700bea32707afca31d6ff5fceece3066aae4d96f137dd4d4", @ANYBLOB="05e6a775fe64eb613059f2642a77548df4f135971d6466dc25fae7a1f3e306fd6e2ac5661fc47453e7c43c0157a1f26cf0357cf84bb757705b6a8c704c8bf14f728e3465effd085c5549a7294b910e0c78729e24b2a8d276cbc49460808f681bc053f856acb5ca586a0baf9f9388baa9402966a31976e3cc668c716d24efce547fce9559e3c96dee6666f4a078507e22d86898bb7928f7ab7f7675acce16e3daaa803da08d852e1730256665cb944fd3e3be52d90e7bc9bc153911437d77990a378181336971673d77f3e8b041843c112fdb0bd7c0a597", @ANYBLOB="20b2ae84afd20a5aa59bdf9379cda014ebafcef6b9a9db1c65c72d532c019de886861d4ed4662ec726f8deb4b6461e9deb0bc20aebcd0e072be27ed1848411272179ba27e39c33631ca4dbab2e869d8ce0f04e8647ed5f527864e8193b3f2869eb7c5c25620a873a93107c3d48e8250e9fc0bd34f50646458fc316d2532cd0d1a7a7dc02e64dad8f8e3604d947fc5faf516b12c67f394b9b449e7bd375180457f63e1823d1b94f4e6b33d54c3e5ceb4e7d2fd6185582ff7c5bc734f1404ea3328b3d44372cef8e8f19428b752fd1cace9b928b7bf7cd700f5db7afb931fb5d157d8c99", @ANYRESHEX=r0], 0x0) 4m42.777303469s ago: executing program 1 (id=427): socket$igmp6(0xa, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022400010000600009040080020300000009210604000122050009058103200009080726eebfb915f94ae3fbe4bca2277ec3193f54702029809b38f3c4d2c9f7af58b210e9691f2325bf59dd78dc2d3df27da73ca9dabb14c22bc411acbf36d416dc9229c030bc0df94b28ad24cb27511af7c8ed4a563e926c37049d0e9a90267ab692e58f202d0812927f0518bd3e31bacfc9a82653c855b5acd4d631615fbe65ca43dd0e9c42d03bd4b5433909805bdb771a8e423e4491f61fd45005"], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408043, 0x6a) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m41.326288105s ago: executing program 1 (id=431): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x7) write$binfmt_format(0xffffffffffffffff, &(0x7f0000002380)='-1\x00', 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000002540), 0x4) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000008000000000000000000"], 0x610) syz_usb_connect(0x6, 0x369, &(0x7f0000000e80)={{0x12, 0x1, 0x250, 0x7e, 0x80, 0xab, 0xff, 0x6cd, 0x103, 0x7136, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x357, 0x1, 0x88, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0xf7, 0x2, 0xf, 0x25, 0x34, 0x80, 0xf8, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x2, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0xe, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x1}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x2, 0xb, 0xe, [@generic={0x7a, 0xc, "f425aedf2d79d66996ade2935813b5978b37a23a4f1e026c012f6cd51a41aedb79a93cc5fa84f853701bfe596702d05d444abfd4dbb2048febbb6bd6d1923052572db3bc2db3da34f0c781087409683a10486becf137650323bbaf427066437f343ec787adc319abc6da29c3c6f0bb8e47540108e57dc211"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x4, 0x0, 0x7f, [@generic={0xb0, 0x9, "9ce764a1cedc37278704988d5483872287e945797ad3d3ebdb3a19705f88ca845d734228e2aae958b369a73cac34f65ff3d281b2667aa655862c7ca61cb1072669b8cb4e9af28545247f7b55d2a18d54c42f70ecceb1993cf2e82554fb88b6623f8f46e54242b03d889fa921c69876de156a5c44d7614b4753c34f063823902d3a2d048982b2188235bb37578a83f7132699c6f66cddc0cde1772d2e45c9891ae6be4014b5b8b4f8db7e005dda3b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xa, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0x401}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x9, 0xf8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xa}]}}, {{0x9, 0x5, 0xb, 0x7, 0x3ff, 0x5, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8591}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x3, 0x4}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x3, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7f}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x4, 0x0, 0xe}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xd1, 0xff, 0x88, [@generic={0x6e, 0xb, "ecc0ef65e302bf37a8dc15e9d84b79fda093933d3e3b62c2e8230b87072dceffbe0feffa6f51d44efd6f4e881551abf28aae1b02164989bdda07246c04b6bdffeb214a85b5e07fee6569593ec0f20391fde6c064375af3859e11f1e4b14a0e57f49c05d627ba70944b9866db"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x5, 0x3, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x9}, @generic={0x34, 0x31, "52569d3f745fc2db7acedbb6e71a667d7c330f63cab6e6ad3cae136095413eea9e4606902e5e5f68b7a56e84d6842c409874"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x0, 0x0, [@generic={0x88, 0x30, "3debf82b64a043751099fdca188884b9a26692114889c1c3c3d329ed0131b2986e113d9c169df3644ddc0dc84465a2620b08e3a72cf0ab127abc1c181f10e7fb64f2b3607c08e7f69a213c4ef94129567f54f17d6d5daae73fd45a7948d7515f72f8370d88acba5386ee5f59db6a8ac1587b7685f05dda60a54f4c122a8f7f578da706f2eb2c"}, @generic={0x1d, 0x22, "e426e704c807caed5d0f68dcdcd72f055218c357a31b76c652cb19"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x0, 0x8, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x1000}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xc, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x800}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x7f, 0x4, 0x6}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x310, 0x4, 0x65, 0x91, 0x40, 0xda}, 0x1c, &(0x7f0000001240)=ANY=[@ANYBLOB="050f1c000214107abcc703100b00efff00"/28], 0x1, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x40b}}]}) readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001300)={{0x1, 0x0, 0x9, 0x7, 0xfffffffb, 0x3}, 0x108, [0x6, 0x6, 0xc, 0x8, 0x7, 0x9, 0x2, 0x10, 0x6, 0x5, 0x2, 0x561, 0x4, 0xffffffff, 0x1, 0x10, 0x80, 0x399, 0x1, 0x2, 0x83, 0xffff0000, 0xc9, 0xfffff801, 0x0, 0x9, 0x1, 0x8, 0x0, 0x6, 0xad8, 0xb8, 0x18ff, 0x7, 0xce4, 0x1000, 0x7, 0x5c, 0x5, 0xffff4dca, 0x5, 0x4, 0x5, 0x5d, 0x4, 0x30b6, 0xdb7e, 0x8000, 0x80, 0x30, 0x976, 0x400, 0x7fff, 0x3, 0xb, 0x81, 0x7fffffff, 0xb, 0x4, 0x9, 0x3, 0x8000, 0x6, 0x3, 0x9, 0x3ff, 0x0, 0x6, 0xfffffff9, 0x7, 0x7, 0x5, 0x3, 0x10000, 0x8, 0x9, 0x200, 0x4648, 0x81, 0x1, 0x1, 0x1, 0x9, 0x10001, 0xff, 0x10, 0x0, 0xfffffffd, 0x41, 0x5ea, 0x0, 0x3ff, 0x0, 0x9, 0x1, 0xff, 0x7, 0xba4, 0x2, 0x7fff, 0x40, 0x100, 0x1, 0xfffff47e, 0x0, 0x46, 0x3, 0x8, 0x2, 0xfffffffb, 0x1b, 0x5, 0x5, 0x0, 0x7, 0x3ff, 0x2, 0x8, 0x28624c10, 0x8, 0x80000001, 0x1, 0x8, 0xfffffffc, 0x8, 0x118, 0x5, 0xd74d, 0x9, 0x6, 0x8, 0x8fb, 0xfa9, 0x1000, 0x5, 0xfffffffb, 0x4, 0x80000001, 0x80000001, 0x5, 0xe, 0x0, 0x2, 0x8, 0x7, 0x10, 0x50, 0x2, 0xa8, 0x5, 0x0, 0x2, 0x8, 0x1a1f80e7, 0x7fffffff, 0x80000000, 0x8001, 0x8, 0x0, 0x3, 0x9, 0x0, 0xfffffffe, 0x7, 0x6, 0x5, 0x1, 0x3, 0xcc6, 0x3, 0xffffff55, 0x9, 0xfffffffc, 0x8, 0x4, 0xfffffff7, 0xa, 0x400, 0x2, 0x1200, 0x1, 0x1, 0x8, 0x3, 0xda06, 0xd1, 0x3, 0x2, 0x400, 0x6, 0x400, 0xff, 0x7, 0x40, 0x9, 0x8001, 0x4, 0xfffffff7, 0x0, 0x0, 0x7, 0x1, 0x3, 0x4, 0xd292, 0x3, 0x9, 0x1, 0x6, 0xff, 0x1e824792, 0xe, 0x3, 0x8, 0x120000, 0x6, 0x1, 0x334f9003, 0x401, 0x40, 0xffffffff, 0x8, 0x1, 0x1, 0x2, 0xc, 0x2, 0xfd5, 0x40, 0x4, 0x25545ad, 0x4, 0x604, 0xa, 0x5, 0x10, 0x80000001, 0x6, 0xfffffffd, 0x3, 0x2, 0x6c6, 0xcd, 0x39878, 0x2, 0xc, 0x7531ab95, 0x5, 0x7, 0xc, 0xc1c, 0xb4, 0x6, 0x388, 0x1, 0x9, 0x2, 0x2, 0x9, 0x2184, 0x1, 0xb06, 0xe, 0x8, 0x1, 0x7, 0x7, 0x5, 0x7f, 0x4, 0x4, 0x6f, 0x5, 0x1, 0x1, 0x9, 0xe911, 0x100, 0x80000001, 0x80000000, 0x800, 0x5, 0x3, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4, 0x92d7, 0x7fffffff, 0xc, 0x0, 0x414, 0x2, 0x5a8, 0x8, 0xe, 0x2, 0x59, 0x2, 0x5, 0x10001, 0x0, 0x7551, 0x1, 0x10, 0x5, 0x4, 0xf, 0x9, 0x6, 0x11, 0x2, 0x8, 0x5, 0x80, 0x9, 0x0, 0x2, 0xfffffeff, 0x0, 0x6, 0x95, 0x5, 0x7f, 0xb9, 0xc, 0x6, 0x6, 0x1, 0x7, 0xd42, 0xff, 0x5, 0x7, 0x14400000, 0x10001, 0x1, 0xfffffffa, 0x4, 0x3, 0x1, 0x400, 0x0, 0x8, 0xffff, 0x8, 0x6, 0x7, 0x1a4ec171, 0x100, 0xda, 0x949, 0x637, 0x7, 0x2, 0x9, 0x7, 0x8, 0x91, 0x7, 0xf0, 0x8, 0x9, 0x3, 0x7, 0x8, 0x0, 0xfffffffb, 0x8564, 0x8, 0x8, 0x80000001, 0x5, 0x10001, 0x8, 0x76a, 0x1b7, 0xffffffff, 0x4, 0x4, 0x1, 0x4, 0x3, 0x2, 0x3042df25, 0x33, 0xedd7, 0x2, 0x2, 0x1, 0xc525, 0x62, 0x3, 0x1, 0x3, 0x6, 0x10000, 0xc3, 0x5, 0x9, 0x7, 0x2, 0x9, 0xfffffff8, 0x5, 0x8a, 0x0, 0x10007ff, 0x8000, 0x8000, 0x0, 0x5929b32d, 0x8, 0x3, 0x2, 0x0, 0x8, 0xe1, 0xab, 0x73, 0xd58d, 0xd45, 0x1, 0x2, 0x4, 0x7, 0x10001, 0x7, 0xfffffffd, 0x2, 0xff, 0x1, 0x4e03, 0x3, 0x7, 0xfffffff9, 0x8, 0x77b, 0x3, 0x80000000, 0x4, 0x4, 0x4, 0x6, 0x8, 0x0, 0x9, 0xd, 0xd, 0x1, 0xfffffe00, 0x7f, 0x6, 0x10, 0x8, 0x0, 0xfffffffd, 0x8, 0xfffffffa, 0x6, 0x4, 0x7ff, 0x6, 0x10000, 0x2, 0xfffffff7, 0x16, 0x2, 0x8, 0x1, 0x2, 0x200, 0x4, 0x9, 0x0, 0x4, 0x6, 0x1, 0x2, 0x3, 0xfffffff7, 0x4, 0x10, 0xffffff01, 0xfffffffe, 0x80, 0x45cc, 0x0, 0x3, 0x9, 0x9, 0x0, 0x7fff, 0xa, 0x5, 0xfffffc00, 0xaa4c, 0x2, 0xff, 0x80000000, 0x1, 0x1ff, 0x3, 0x1, 0x7, 0x279a, 0x8, 0x80000000, 0x644, 0x5, 0x3, 0x1a, 0x2, 0x7f, 0x7, 0x9, 0x80000000, 0x24, 0x8, 0x7f, 0x2, 0xa, 0xff2, 0xfffff5ce, 0x8, 0x9, 0x80000000, 0x4, 0x6, 0x0, 0x401, 0x1750, 0x2, 0x7fffffff, 0xfffffff0, 0xa, 0x2, 0x7fff, 0x5, 0x4, 0x4, 0x9, 0xbc, 0x8, 0x5, 0x8, 0x1ce4, 0x9, 0x3, 0x1, 0x26, 0x2, 0x6000, 0x8, 0x100, 0xffffffff, 0x8, 0xd4, 0x5, 0x3, 0x81, 0xa9ca, 0x8000, 0x7ff, 0x0, 0x5, 0x1ff, 0x8, 0x401, 0x7ff, 0x1, 0x80, 0x9, 0x0, 0x3, 0x1, 0x7f, 0x5, 0x1000, 0x800000, 0x7, 0x800, 0x8, 0xb, 0x6, 0x80000001, 0x2, 0x3d, 0x3ff, 0x100, 0xd, 0xc64, 0x9, 0xe3a, 0x5, 0x8f1, 0x1, 0x8, 0x3abfc7c4, 0x5, 0x7b71, 0x35f2, 0x9, 0x2, 0x4, 0x9, 0x0, 0x6, 0x8, 0x9, 0x6c25, 0x7, 0x0, 0x5, 0x1, 0x8, 0x5, 0xb, 0x8, 0x0, 0x8, 0x2, 0xb, 0x6, 0x9, 0x7fff, 0x1, 0x3, 0xfffffffa, 0x5, 0x5, 0x5, 0x7f, 0x7ff, 0x3, 0x1ff, 0x9, 0x9, 0x4, 0x8, 0x4, 0x7f, 0x6, 0x9, 0x10000, 0x5, 0xb275, 0x4, 0x5, 0x10e, 0x6, 0x7, 0x80000000, 0x7, 0x0, 0x6, 0x9, 0x7, 0x0, 0x180, 0x6, 0x3, 0x2, 0x7, 0x5, 0x3, 0x80000000, 0x2, 0x7, 0x8, 0x6a13, 0x7, 0x2, 0x0, 0x9, 0x100, 0xff, 0x8, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x0, 0x7, 0x82db280e, 0x2, 0x9, 0x8, 0x1, 0x1, 0x7, 0x3, 0xfffffffa, 0xf12c, 0x8e0f, 0x5, 0x3, 0x7, 0x6, 0x8, 0x8, 0x4, 0xfffeffff, 0x6, 0xfffffff9, 0x6, 0x5, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0xa61, 0x5, 0x1, 0x1, 0x9, 0x11, 0xfffffffd, 0x8, 0x7, 0x7, 0x5, 0x8, 0x7, 0xbf, 0x100, 0xf, 0x30, 0x5, 0xffff2ce1, 0x9, 0x9ad0000, 0x7, 0x1, 0x8000, 0x81, 0x8, 0x8, 0xd0, 0x610, 0xb6, 0x0, 0x1ffcde22, 0x800, 0xbb5, 0x401, 0xe1, 0x4, 0x10001, 0x9c7, 0x2, 0x4, 0x2, 0x6, 0x7, 0x1, 0x6, 0x5, 0x8c36, 0x3, 0x10, 0x2, 0x80000000, 0x7, 0x9, 0x5462, 0xc1, 0x40, 0x7, 0xfffffffd, 0x7, 0x101, 0xad6b, 0x7, 0x1, 0x1ff, 0x0, 0x0, 0x2, 0x10001, 0x7, 0x4, 0x4, 0x2, 0x9, 0x724, 0x6a9, 0xe, 0x0, 0x9, 0x6, 0x1ff, 0x0, 0x2, 0x1, 0x5, 0x1, 0x5, 0x8, 0x1000, 0x6, 0x4, 0xe, 0xfffffd01, 0x8, 0x9, 0x7, 0xafd1, 0x401, 0x80, 0x1453f495, 0x1, 0x9, 0x0, 0x2, 0x7fffffff, 0x6, 0x8001, 0x5, 0x7, 0x9c, 0x8, 0x7, 0x8, 0x161, 0xa0, 0x833, 0x7fffffff, 0x1, 0x2, 0x216b, 0xb257, 0x1e12, 0x2, 0x9, 0x3, 0x1, 0x2e9, 0x3, 0x7, 0x8, 0x5, 0x1, 0x8, 0x0, 0x8, 0x7, 0xc, 0x4, 0x2, 0x5, 0x2, 0x4, 0xf44a, 0x2, 0x3fd3, 0x2, 0x0, 0x8, 0xd, 0x2, 0xfffffff1, 0x3, 0x7, 0x4, 0x0, 0xe, 0x9, 0x0, 0x4, 0x7a5, 0x6, 0x5, 0x0, 0xfffffffa, 0x100000, 0x1a, 0x9, 0x401, 0x1, 0x8, 0xfff, 0x8, 0x5, 0x7ff, 0x9, 0xe, 0x2, 0x9, 0xd78d, 0x100, 0x1, 0x7, 0x1, 0x1, 0x1, 0x6392, 0x7, 0x1, 0x3, 0x0, 0x1, 0x4, 0xa3, 0x4e69, 0x7, 0x3ecb, 0x1, 0x6, 0x0, 0xff, 0x0, 0x7b, 0xc1, 0x8, 0x800, 0x6, 0x8fc, 0x22, 0x1, 0x8, 0x5, 0x6, 0x5, 0x3, 0x8, 0xb, 0x80000000, 0xffffff81, 0x8, 0xe79, 0x80000001, 0x6, 0x6, 0x438, 0x7, 0x10000, 0x800, 0x1, 0x100, 0xffffff80, 0x1, 0x1, 0x8, 0x5, 0x3, 0x50, 0x6, 0xfc000000, 0xf000, 0x10d, 0x1, 0x3, 0x9, 0x1ff, 0xa8fa, 0x925, 0x8, 0x7, 0xfffffffb, 0xfffffffb, 0x0, 0xffffd89d, 0x859e, 0x6, 0x6de, 0x3, 0x7ff, 0x7e6, 0xc, 0x9d, 0x6, 0x5, 0x2, 0x40, 0x4, 0x7, 0x10000, 0x7, 0xbfc, 0x6fb37933, 0x4, 0x7, 0xfffffff9, 0x4, 0x7, 0x7f, 0xc9, 0x7, 0x6, 0x4, 0x10001, 0x9, 0x8, 0xc27, 0x2, 0x101, 0x10001, 0x6, 0xc8, 0x9, 0x1, 0x401, 0x8, 0x7ff, 0x8, 0x1, 0x7, 0x1, 0x1, 0x6, 0x7, 0xdc1, 0x2, 0x8, 0x8, 0xfffffff8, 0x42, 0x5, 0x3]}) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4, 0x67, 0x9b, 0x40, 0x733, 0x401, 0xad7d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xff, 0x0, 0x0, 0x1f, 0x50, 0x4}}]}}]}}, 0x0) socket$inet(0x2, 0x8000c, 0x5) 4m39.992447705s ago: executing program 1 (id=436): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000380)={0x54, r3, 0x1, 0x70bd2a, 0x5dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x4, @val={0x8c, 0x18, {0x69b, "7f0bb75200", @long="06b8ff5246a193536b462a42ecb33b95"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) socket(0x10, 0x5, 0x8) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x3) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xb7, 0xe4, 0x49, 0x20, 0x421, 0x128, 0x96c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x7, 0x20, 0x43, [{{0x9, 0x4, 0x36, 0xff, 0x1, 0x2, 0x2, 0xff, 0x60, [], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0xb2, 0x10, 0xef}}]}}]}}]}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000180)={'geneve1\x00', @multicast}) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r8 = dup(r5) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x90, @loopback, 0x8}}, 0x101, 0xf, 0x8, 0x17fa, 0x4}, &(0x7f0000000100)=0x98) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x0, 0x50, 0xe3, 0x5, 0x5, 0x40, 0x9b, 0x8d, 0x2, [0x7e80cb0e, 0xfffffdb0, 0x5, 0x6, 0x9, 0x7, 0x8, 0xfffffff6], [0x338f, 0x7fff, 0x8, 0x1, 0xd, 0x5]}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r9, 0x78dc6000) 4m24.850702357s ago: executing program 32 (id=436): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000380)={0x54, r3, 0x1, 0x70bd2a, 0x5dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x4, @val={0x8c, 0x18, {0x69b, "7f0bb75200", @long="06b8ff5246a193536b462a42ecb33b95"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) socket(0x10, 0x5, 0x8) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x3) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xb7, 0xe4, 0x49, 0x20, 0x421, 0x128, 0x96c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x7, 0x20, 0x43, [{{0x9, 0x4, 0x36, 0xff, 0x1, 0x2, 0x2, 0xff, 0x60, [], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0xb2, 0x10, 0xef}}]}}]}}]}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000180)={'geneve1\x00', @multicast}) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r8 = dup(r5) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x90, @loopback, 0x8}}, 0x101, 0xf, 0x8, 0x17fa, 0x4}, &(0x7f0000000100)=0x98) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x0, 0x50, 0xe3, 0x5, 0x5, 0x40, 0x9b, 0x8d, 0x2, [0x7e80cb0e, 0xfffffdb0, 0x5, 0x6, 0x9, 0x7, 0x8, 0xfffffff6], [0x338f, 0x7fff, 0x8, 0x1, 0xd, 0x5]}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r9, 0x78dc6000) 3m33.646027447s ago: executing program 0 (id=718): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7ce", 0x68}], 0x1}, 0x20004804) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x282}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x4, 0x10000, 0x10000004, 0x5, 0xcc7, 0x40000fff, 0xffffffff, 0x3, 0x100, 0x2, 0x1, 0x21, 0x1, 0x4, 0xe1cb, 0x0, 0x1a449, 0x7, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m33.5536853s ago: executing program 0 (id=720): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000280)={0x20, 0x14, 0x6, "230ed7564d3c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f00000001c0)={0x1c, &(0x7f0000000140)={0x0, 0x31, 0x1, "f8"}, 0x0, 0x0}) 3m32.968722033s ago: executing program 0 (id=721): r0 = socket$kcm(0x29, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$sock_proto_private(r0, 0x89e0, 0x0) 3m32.869728422s ago: executing program 0 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2000000, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m32.861851691s ago: executing program 0 (id=723): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3a}, @dev={0xac, 0x14, 0x14, 0x1d}, 0x18, 0x12}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r3 = gettid() r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="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", 0x2000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000000)={r6}) sendmmsg$unix(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000008c0)="166da1949ba0ee9ee511f385427169498f9565a1c4099287", 0x18}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="89282abd7000ffdbdf250100000008000200030000000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 3m32.560271627s ago: executing program 0 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2001}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0884123, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r5, 0x5, 0x4004, 0xffffffff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x80c4) 3m32.386074925s ago: executing program 33 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2001}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0884123, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r5, 0x5, 0x4004, 0xffffffff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x80c4) 5.936130927s ago: executing program 5 (id=1485): ptrace(0x10, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) 5.753698663s ago: executing program 2 (id=1487): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000180)={0xa3, 0x0, &(0x7f0000000140)}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xf) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000702, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm], 0x1) 5.738606523s ago: executing program 2 (id=1488): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa43, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x7, 0x6, 0xa, 0x2, 0x1b}}, 0x120) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00004000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 5.689427273s ago: executing program 4 (id=1489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000040)) mprotect(&(0x7f00001ad000/0x4000)=nil, 0x4000, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x88800, 0x12d) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) (async) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) setxattr$security_ima(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) r6 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) preadv2(r6, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x4, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x38, 0x3f7, 0x800, 0x70bd26, 0x25dfdbfc, {0x7, 0x16, './file0', './file0/../file0/file0'}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0xa68358294b78e5b4}, 0x4000099) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) (rerun: 64) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000300)=@v3={0x3000000, [{0x7f, 0x7ff}], r7}, 0x18, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.561670922s ago: executing program 2 (id=1490): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) (async) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') (async) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r2, r2, 0x0, 0xc) (async) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'macvtap0\x00'}}, 0x1e) 5.549986889s ago: executing program 4 (id=1491): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x10000000000da) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) syz_clone(0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 5.537716676s ago: executing program 2 (id=1492): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r1}) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r1}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) write(r5, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRESOCT=0x0, @ANYRES64=r5, @ANYRES8=r5], 0x0) 4.42171381s ago: executing program 4 (id=1493): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008ac053403000000000001090224e20000000001090400000103000300092105000201220500090581030002030004"], 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x10010, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="600b050000f0052bb1a7482c1bddbcc8dc7bcf631677dc6eb304a835064d936ddc67a88f1b91d4000000000000000000000000000000000000000000000011c55be861fafe365b5108f6936ad40d0ffb05f7ec909b493f65d33c5ba26fe56d628339f34082a7fa7115efdcad66161761b8b8f1b1be0fc2a0a353892c2a8b3da032d57cdbe3d6f2fedc0e459da533aa61c796f92274a75579af349ed5df93a7c1b850d7d857b16089a2e1534eac9800"/186], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x21f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x50, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x0, 0xe3, 0x1, {0x22, 0x7a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x8, 0x10}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xb, 0x7, 0x1, 0xff}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "e859b5dcd3abe16b5321d865e59f635f"}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0xc5, &(0x7f0000000240)=@string={0xc5, 0x3, "b1a5335d7e96c1d9d56f46571d7f12d479e8509dddfcae2027d1eb999be2fe765046c7c1a779aab1e2fcee38bbc45918275673a95d1fb4708d5febbcbc0abf86c8bf6fdfc3d4205eb65a29f17201fbd20b803ea76bba8b584d4713e960fff76f9eba9b5d07a2c9d7d243c09bdb899a2e871aeadd4940f7f52d1da6d8550d8247ec1f08f72c2254bbea6d45c22062773cd5b2000bf8b2b311b3012f1633275af5a900fbbc2c6fe43569f558393db202a587ce6eef6fee95bc355a679c9b40227e531df4"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x444}}]}) 2.865412009s ago: executing program 4 (id=1496): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="5065b49600c82ceace8961b94f89b9b82f16b24786e1b529a476c0bfcd267a", 0x1f}, {&(0x7f0000000480)="caaceff8b408ac209657bbb00f423a6520382791ae64deb772c8dec07f136a36e0b713c10c213b5142cb946366c65f6209955c17ba95ab08f77213d4d1a1442c3664eb5a990f3d64ff2d19faa440e89cd7190f09305dac4642", 0x59}], 0x2) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x2}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048800) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x5) accept4$unix(r8, 0x0, 0x0, 0x0) r10 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r10, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'ipvlan0\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0x3, [0x6, 0xcd3a, 0xb9]}}) ftruncate(r10, 0x51a9497) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x2000) 2.755465641s ago: executing program 4 (id=1497): socketpair(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) (async) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000fcdbdf250200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000040)=0x1, 0x4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x1380, 0x0) sendto(r1, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r7 = accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x80000) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x78c8, 0x700, 0x80, 0x4000000, {{0x11, 0x4, 0x1, 0x35, 0x44, 0x67, 0x0, 0x12, 0x7211b596d63681ed, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@rr={0x7, 0x23, 0x7f, [@rand_addr=0x64010102, @multicast1, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010101, @multicast2]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xa7, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendto$packet(r7, &(0x7f0000000480)="f53cb87a1f02d4545b2400bcb388425f0fce9704c37bc182df38b9927a195fdb737c683ee937b9e894d24273b99269d1c0d757cd0f4f702e73a05c1b3bb0bb3225d792147e075ba7e87a343e915e241e459a6326dd025ef9216b4143fe30700eeb0c6c6c510870f62d9dce56d8fc7805cb977af7c2dd1be9d4d6b6db0b6ae1add18602ff9439b82f162185846731b14db136cda6ea008d4722be1dd470ee75d76773425bbb", 0xa5, 0x48004, &(0x7f00000005c0)={0x11, 0x16, r8, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) (async) getsockname$packet(r7, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r9, 0x0, 0x12, 0x0, &(0x7f00000027c0)) (async) r10 = dup2(r0, r1) (async) shutdown(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xffffffffffffff78) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r11, r12}}, './file0\x00'}) socket$packet(0x11, 0x3, 0x300) 2.648874482s ago: executing program 5 (id=1498): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa43, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x7, 0x6, 0xa, 0x2, 0x1b}}, 0x120) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00194f00000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 2.40172448s ago: executing program 5 (id=1499): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000500)="b228712d5a061c3de7a0d9639b87e69eb4a02e", 0x13) 2.363575264s ago: executing program 5 (id=1500): fsopen(&(0x7f0000000200)='debugfs\x00', 0x1) semtimedop(0xffffffffffffffff, &(0x7f00000001c0)=[{0x4, 0xfffb, 0x1800}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) setreuid(0x0, 0xee01) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) move_mount(0xffffffffffffffff, 0x0, r2, &(0x7f0000000080)='./mnt\x00', 0x116) r3 = fspick(r2, &(0x7f0000000140)='./mnt\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='uid\xd9\xfa\x97\x02O\xda\x93\xfb\xa1U\xfc\xe0M\xe5!\xb5\xf3\xe4\xb1\x98\x11\xa9\x87\x0f@)X?\xcc*\xf9\xe7\x14\x7f_\xd1 \x10y:<\xc0\x8e\xba\x86\xac\xb6\x16]\x8d\x15\x86:{`\xd9e@\x01\x87[\xb36\xcd\xd4\x1f\xc4\xd6n3\xd7?\x03\xbf|Q\x88\xcd\n\xa1\x97\x8a\x99\xa7\xb8%VL\xd0\xe3\xcd\xa6|\v,\xeag8\xb3\xfe\xadd2\xa6\x84\xca\x8e29\x17\xe0B5~\xd6\xbb\xda\xe8\x05\xe3=Q\x93\xd6M\xe8)\x83khY\x16\xacy\xb0X\xba\xc4\xed\xd7\xf3\x8dW\x15\x8d$\xdc\x9b_\x92\xd8=\xf7n\x98T\x1e/\x00.MN\xcf\x9du\xc5\x94u\x00\x00\x00\x00', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount(&(0x7f0000000500)=@sg0, &(0x7f0000000280)='./mnt\x00', &(0x7f0000000240)='anon_inodefs\x00', 0x2000000, &(0x7f0000000300)='\x00') ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x10) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x4080, 0x0) r7 = socket$inet(0x2, 0x6accc61e049f0a36, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write$khugepaged_scan(r8, &(0x7f0000000480), 0x8) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000009c0)}}], 0x1, 0x480e0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000600)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="496e6a4167194ca5a225f383812b195b934f11a87585e3116a787139f63d65b7ea2a03f326e2a8c47270a2a598a963c9ef4594247853a04ef1acaffa405f7a1bb49a40d8b7bd5d6be9a4a752a31da9bc1219c7455fe700004087b771e4bca91b000000", 0x63, 0x8080, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f0000000100)=0xc8a6) 2.290134408s ago: executing program 5 (id=1501): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x1b, 0x5, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x7, 0xffffff81, 0xa}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x47ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x2e, 0x0, 0x0, 0x0, "4e4e488e419039dda425818c34de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2809cbc3da9bb3c86e0c5e53cff15d561c53fe9ae3a"}, 0x48}}, 0x811) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=r5, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x20008840) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x10001, 0x2, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, {[@ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x23, 0x57, [@multicast2, @broadcast, @remote, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xcf, 0x3, 0xc, [{@multicast1, 0x4}, {@loopback, 0x100}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xec, 0x0, 0x2, [0x3]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @loopback}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x8, 0x7, 0xa3, 0x80000001, {{0x1c, 0x4, 0x0, 0x5, 0x70, 0x66, 0x0, 0x9, 0x29, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x8, 0x1c, 0x0, 0x0, [0x4]}, @timestamp_prespec={0x44, 0x54, 0x8a, 0x3, 0x7, [{@empty}, {@rand_addr=0x64010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@loopback, 0x101}, {@multicast1, 0x800}, {@broadcast, 0x4}, {@rand_addr=0x7, 0x8}, {@loopback, 0x8}, {@rand_addr=0x64010102, 0x8}, {@empty, 0x4}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000004c0)={@broadcast, @broadcast, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x8008, 0x7, 0x9, 0x2, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}, {[@end, @lsrr={0x83, 0x13, 0xad, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x27}, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xa8, 0x3, 0x7, [{@multicast2, 0x3}, {@remote, 0x2}]}, @lsrr={0x83, 0xf, 0x4c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @timestamp_addr={0x44, 0x24, 0x7f, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x9}, {@loopback, 0xc}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0xa4, 0x81, 0x798, 0x40, @empty, @private0, 0x1, 0x40, 0x8001, 0x5}}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000700)={@remote, @remote, 0x0}, &(0x7f0000000740)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x7, 0x0, 0x4, 0x6, {{0x31, 0x4, 0x3, 0x9, 0xc4, 0x68, 0x0, 0x1, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x17, 0x7e, [@private=0xa010100, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast]}, @ssrr={0x89, 0xb, 0xfa, [@rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x36, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x16b9}, {@private=0xa010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x240000}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x50, 0x0, [{0x5, 0x4, "afb0"}, {0x5, 0x9, "896f6267fc8a2e"}, {0x1, 0xc, "5a3870dde90ef1a6ba0c"}, {0x0, 0x5, "71d0d6"}, {0x7, 0x3, "7f"}, {0xfbd375595e230178, 0x6, "1faeff33"}, {0x1, 0x11, "37c78a18987e81402cb7fa487f5703"}, {0x6, 0x6, "af433a20"}, {0x1, 0xc, "010fae371d26f6758db5"}]}, @timestamp_addr={0x44, 0x14, 0x19, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x2}]}, @rr={0x7, 0x7, 0x6b, [@private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1ac, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) 2.18532575s ago: executing program 2 (id=1502): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r10) sendmsg$TIPC_CMD_SET_LINK_PRI(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0xff, @bearer=@l2={'eth', 0x3a, 'hsr0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c00990000000000000000000800a0002609000008009f0005000000080026006c09"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf251200000008000300", @ANYRES32=r12, @ANYBLOB="0c00990a000000060000000600120003000000180013000960a4c8a04e0606488c8c866c1285b498309b050c004300010001000d00000005001900020000400600ed00b60400000c0043000d0000000500"/96], 0x7c}, 0x1, 0x0, 0x0, 0x4044094}, 0x400c000) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010027bd7007fedbdf253e0000000e0001008f657464657673696d0000000f0002006e657464657673696d3000001c008200736f7572636574000500830000000000000000000400"/82], 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) (async, rerun: 64) r14 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) bind$bt_hci(r14, &(0x7f0000000000)={0x27}, 0x62) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x5e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x23}}, 0x24008841) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) 2.078149888s ago: executing program 5 (id=1504): r0 = gettid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') close(r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000440)={0xffff8d91, 0x5}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4}) syz_open_dev$usbfs(&(0x7f0000000000), 0x80, 0x244000) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f00000001c0)={0x0, 0x0, 0x80000000}) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x543, 0xe621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x6b}}}}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}}}, 0xa) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="201107"], 0x0, 0x0, 0x0, 0x0}, 0x0) listen(r1, 0x5) accept(r1, 0x0, 0x0) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 1.827091132s ago: executing program 4 (id=1506): ptrace(0x10, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) 1.81608257s ago: executing program 3 (id=1507): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa43, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x7, 0x6, 0xa, 0x2, 0x1b}}, 0x120) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00007000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 1.553534938s ago: executing program 3 (id=1508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x58, &(0x7f0000000000)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0xfffeffff, @loopback, 0x6}, @in6={0xa, 0x4e23, 0x8001, @local, 0xf58}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e21, @multicast2}}, 0x9, 0xa}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x0, 0x8}, &(0x7f0000000280)=0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0xc000) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000480)={{r3}, 0x2, &(0x7f0000000440)=[0x6e, 0x101], 0x3, 0xd, 0x1}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=0x1000) (async) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000001540)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000002580)={0x28, 0x6, r6, 0x0, &(0x7f0000001580)="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", 0x1000, 0x1000}) ioctl$I2C_TENBIT(r5, 0x704, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000025c0)) (async) fsetxattr$security_evm(r5, &(0x7f0000002600), &(0x7f0000002640)=@v1={0x2, 'pr5'}, 0x4, 0x2) recvmmsg(r3, &(0x7f0000004c40)=[{{&(0x7f0000002680)=@ieee802154, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/161, 0xa1}, {&(0x7f00000037c0)=""/45, 0x2d}, {&(0x7f0000003800)=""/172, 0xac}, {&(0x7f00000038c0)=""/235, 0xeb}], 0x5}, 0xa000000}, {{&(0x7f0000003a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003ac0), 0x0, &(0x7f0000003b00)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004b00)=@can, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004b80)=""/6, 0x6}], 0x1, &(0x7f0000004c00)=""/38, 0x26}, 0x8}], 0x3, 0x10002, &(0x7f0000004d00)={0x0, 0x3938700}) getdents(r0, &(0x7f0000004d40)=""/217, 0xd9) (async) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000004f00)={0x0, &(0x7f0000004e40)=[@in_dx={0x82, 0x20, {0x60f3}}, @cpuid={0x14, 0x18, {0x1f3a6e94, 0xfffffff8}}, @in_dx={0x82, 0x20, {0xc5b, 0x1}}, @wrmsr={0x1e, 0x20, {0x20b, 0x5}}, @wr_drn={0x6e, 0x20, {0x1, 0x7}}], 0x98}) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, &(0x7f0000004f40)={{r3}, "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"}) read$sequencer(r5, &(0x7f0000005f40)=""/4096, 0x1000) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000006f40)={0x8, 0x28, [0x8, 0x8, 0xb, 0x1, 0x8, 0x5, 0x3, 0x5, 0x0, 0x4]}) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000006fc0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000007000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000007100)={&(0x7f0000006f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000070c0)={&(0x7f0000007040)={0x44, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x24) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000007240)={&(0x7f0000007140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007200)={&(0x7f0000007180)={0x4c, r9, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004084}, 0x4000001) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000007280)=0x1, 0x4) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000072c0)='/sys/kernel/hardlockup_count', 0x840c0, 0x88) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000007300), 0x4) ioctl$KDSETMODE(r11, 0x4b3a, 0x1) 1.476549301s ago: executing program 3 (id=1509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000009030000000000000000000700000a0900010073797a3000000000240002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, 0xfae}, 0x14) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.372999434s ago: executing program 3 (id=1510): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.065648741s ago: executing program 2 (id=1511): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0x30, {0x30, 0x4, "0946b5be4627b223e1694f2bf30dc4d6364ead2ecbb52289ff27b6500316f0383770351b74f7bee507b4fb43e77e"}}, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xb, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 82.601796ms ago: executing program 3 (id=1512): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (async) syz_io_uring_setup(0x6440, &(0x7f0000000500)={0x0, 0xd52b, 0x10100, 0x0, 0x20d}, &(0x7f0000000340), &(0x7f0000000140)) (async) r0 = syz_open_pts(0xffffffffffffffff, 0x48acc0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x28) 0s ago: executing program 3 (id=1513): setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000000)=0x6, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xfffffffffffffdbc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000003680)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109025c"], &(0x7f0000003bc0)={0x0, 0x0, 0x20, &(0x7f00000037c0)=ANY=[@ANYBLOB="040f"]}) syz_usb_disconnect(r1) kernel console output (not intermixed with test programs): r 79 using dummy_hcd [ 404.329093][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.336666][ T5887] usb 3-1: too many endpoints for config 0 interface 25 altsetting 49: 56, using maximum allowed: 30 [ 404.345555][ T983] usb 4-1: Product: syz [ 404.356586][ T5887] usb 3-1: config 0 interface 25 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 404.374317][ T5887] usb 3-1: config 0 interface 25 has no altsetting 0 [ 404.376660][ T983] usb 4-1: Manufacturer: syz [ 404.381124][ T5887] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 404.394820][ T983] usb 4-1: SerialNumber: syz [ 404.399656][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.409113][ T983] usb 4-1: config 0 descriptor?? [ 404.412306][ T5887] usb 3-1: config 0 descriptor?? [ 404.554343][ T1072] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 404.563597][ T1072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.572100][ T1072] usb 5-1: Product: syz [ 404.576461][ T1072] usb 5-1: Manufacturer: syz [ 404.581087][ T1072] usb 5-1: SerialNumber: syz [ 404.589375][ T1072] usb 5-1: config 0 descriptor?? [ 404.628161][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 404.644483][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.652627][ T9] usb 6-1: Product: ࠊ [ 404.657089][ T9] usb 6-1: Manufacturer: 뙣巧ឫ䂲㖴ꛇ⟽뒋봒툜媳⑤‚ꁳ莵鋥臤䊥칣㿯鷂㩙櫃⤂祣频ဤ想̤暆ཞ칃伥큻阔淏 [ 404.676744][ T5887] usb 3-1: string descriptor 0 read error: -71 [ 404.704482][ T5887] usb 3-1: USB disconnect, device number 26 [ 404.706296][T10566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.727612][ T9] usb 6-1: config 0 descriptor?? [ 404.751034][ T9] usb 6-1: can't set config #0, error -71 [ 404.773038][ T9] usb 6-1: USB disconnect, device number 60 [ 404.818896][ T1072] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 405.005493][T10571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.015075][T10571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.072319][ T1072] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 405.097663][ T1072] usb 5-1: USB disconnect, device number 79 [ 405.150484][T10581] can0: slcan on ptm0. [ 405.205046][T10579] can0 (unregistered): slcan off ptm0. [ 405.533209][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 405.629042][T10595] netlink: 'syz.5.1225': attribute type 16 has an invalid length. [ 405.694497][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 405.705191][ T9] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 405.715706][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 405.725192][ T9] usb 3-1: can't read configurations, error -22 [ 405.876168][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 406.003709][ T5894] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 406.046442][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 406.052456][ T9] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 406.061936][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 406.070484][ T9] usb 3-1: can't read configurations, error -22 [ 406.077137][ T9] usb usb3-port1: attempt power cycle [ 406.165397][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 406.175918][ T5894] usb 6-1: config 0 has an invalid interface number: 37 but max is 0 [ 406.184111][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.217543][ T5894] usb 6-1: config 0 has no interface number 0 [ 406.230844][ T5894] usb 6-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=50.d3 [ 406.260450][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.268538][ T5894] usb 6-1: Product: syz [ 406.281807][ T5894] usb 6-1: Manufacturer: syz [ 406.286486][ T5894] usb 6-1: SerialNumber: syz [ 406.306874][ T5894] usb 6-1: config 0 descriptor?? [ 406.326912][ T5894] cdc_acm 6-1:0.37: Zero length descriptor references [ 406.345921][ T5894] cdc_acm 6-1:0.37: probe with driver cdc_acm failed with error -22 [ 406.452883][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 406.477192][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 406.483361][ T9] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 406.493345][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 406.505348][ T9] usb 3-1: can't read configurations, error -22 [ 406.528054][ T5887] usb 6-1: USB disconnect, device number 61 [ 406.582673][ T1072] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 406.645382][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 406.667909][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 406.673782][ T9] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 406.683495][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 406.692075][ T9] usb 3-1: can't read configurations, error -22 [ 406.698958][ T9] usb usb3-port1: unable to enumerate USB device [ 406.754044][ T1072] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.765656][ T1072] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.775701][ T1072] usb 5-1: config 0 interface 0 has no altsetting 0 [ 406.782349][ T1072] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 406.791581][ T1072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.802357][ T1072] usb 5-1: config 0 descriptor?? [ 407.151547][ T983] mos7840 4-1:0.0: required endpoints missing [ 407.168891][ T983] usb 4-1: USB disconnect, device number 33 [ 407.456230][ T1072] usb 5-1: string descriptor 0 read error: -22 [ 407.532942][ T5894] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 407.629197][ T983] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 407.676323][ T1072] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0066/input/input45 [ 407.701326][ T5894] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 407.711447][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.720705][ T5894] usb 6-1: Product: syz [ 407.724909][ T5894] usb 6-1: Manufacturer: syz [ 407.730153][ T5894] usb 6-1: SerialNumber: syz [ 407.757683][ T1072] uclogic 0003:256C:006D.0066: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 407.800992][ T983] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 407.810269][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 407.821942][ T983] usb 4-1: SerialNumber: syz [ 407.852958][ T983] usb 4-1: config 0 descriptor?? [ 408.079409][T10610] netlink: 'syz.3.1231': attribute type 2 has an invalid length. [ 408.087283][T10610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1231'. [ 408.339004][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.352299][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.365733][ T983] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 408.373778][ T983] hackrf 4-1:0.0: Could not detect board [ 408.380054][ T983] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 408.391760][ T983] usb 4-1: USB disconnect, device number 34 [ 408.820685][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 408.832839][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 408.843387][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 408.854500][ T5894] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 408.867398][ T5894] usb 6-1: USB disconnect, device number 62 [ 408.905936][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 408.949914][T10616] netlink: 'syz.3.1233': attribute type 9 has an invalid length. [ 408.958151][T10616] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1233'. [ 409.011778][T10618] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1234'. [ 409.083490][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 409.090381][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 409.101509][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.112852][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.123803][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 409.139576][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 409.149009][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.160282][ T9] usb 3-1: config 0 descriptor?? [ 409.462302][T10622] netlink: 'syz.5.1236': attribute type 1 has an invalid length. [ 409.471670][T10622] netlink: 'syz.5.1236': attribute type 8 has an invalid length. [ 409.485356][T10622] netlink: 'syz.5.1236': attribute type 19 has an invalid length. [ 409.547895][ T5894] usb 5-1: USB disconnect, device number 80 [ 409.613909][ T9] redragon 0003:0C45:760B.0067: unknown main item tag 0x6 [ 409.641848][ T9] redragon 0003:0C45:760B.0067: item fetching failed at offset 7/133 [ 409.658960][ T9] redragon 0003:0C45:760B.0067: probe with driver redragon failed with error -22 [ 409.822049][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.838477][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.871077][ T5932] usb 3-1: USB disconnect, device number 31 [ 409.939468][ T983] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 410.024772][ T5894] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 410.112763][ T983] usb 6-1: unable to get BOS descriptor or descriptor too short [ 410.122416][ T983] usb 6-1: config 7 has an invalid interface number: 3 but max is 1 [ 410.130451][ T983] usb 6-1: config 7 has an invalid interface number: 232 but max is 1 [ 410.139444][ T983] usb 6-1: config 7 has no interface number 0 [ 410.146052][ T983] usb 6-1: config 7 has no interface number 1 [ 410.152193][ T983] usb 6-1: config 7 interface 3 has no altsetting 0 [ 410.159916][ T983] usb 6-1: config 7 interface 232 has no altsetting 0 [ 410.176823][ T983] usb 6-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=6f.b0 [ 410.186998][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.195030][ T983] usb 6-1: Product: syz [ 410.200464][ T983] usb 6-1: Manufacturer: syz [ 410.205177][ T983] usb 6-1: SerialNumber: syz [ 410.210747][ T5894] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 410.219091][ T5894] usb 5-1: config 1 has no interface number 0 [ 410.225234][ T5894] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 410.240770][ T5894] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 410.257940][ T5894] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 410.268893][ T5894] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.282735][ T5894] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 410.292101][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.300193][ T5894] usb 5-1: Product: syz [ 410.305789][ T5894] usb 5-1: Manufacturer: syz [ 410.310492][ T5894] usb 5-1: SerialNumber: syz [ 410.315281][ T5932] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 410.328742][T10628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 410.336674][T10628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 410.496973][ T983] usb 6-1: unknown number of interfaces: 2 [ 410.504613][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 410.517514][ T983] usb 6-1: USB disconnect, device number 63 [ 410.526329][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.539896][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.551277][ T5932] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 410.572302][T10628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 410.579957][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.588400][T10628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 410.612069][ T5932] usb 3-1: config 0 descriptor?? [ 410.637385][ T5932] hub 3-1:0.0: USB hub found [ 410.840405][ T5932] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 411.034662][ T5894] usb 5-1: Incompatible driver and firmware versions [ 411.122217][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.134642][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.202044][ T5932] usbhid 3-1:0.0: can't add hid device: -71 [ 411.211636][ T5932] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 411.278529][ T5932] usb 3-1: USB disconnect, device number 32 [ 411.353586][T10645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.360767][T10645] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 411.376877][T10645] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 411.564736][ T5894] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 411.639473][T10668] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1239'. [ 411.749439][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 411.764488][ T5894] usb 4-1: not running at top speed; connect to a high speed hub [ 411.773749][ T5894] usb 4-1: config 0 has an invalid interface number: 8 but max is 7 [ 411.786081][ T5894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 411.796245][ T5894] usb 4-1: config 0 has no interface number 0 [ 411.803578][ T5894] usb 4-1: config 0 interface 8 has no altsetting 0 [ 411.812721][ T5894] usb 4-1: New USB device found, idVendor=2eb8, idProduct=d021, bcdDevice=13.f8 [ 411.822262][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.830281][ T5894] usb 4-1: Product: syz [ 411.834976][ T5894] usb 4-1: Manufacturer: syz [ 411.839608][ T5894] usb 4-1: SerialNumber: syz [ 411.855006][ T5894] usb 4-1: config 0 descriptor?? [ 411.885278][ T5887] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 411.941377][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 412.035456][ T5887] usb 6-1: device descriptor read/64, error -71 [ 412.120574][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 412.143799][ T43] usb 3-1: config 0 has an invalid interface number: 145 but max is 1 [ 412.163481][ T5894] usb 4-1: USB disconnect, device number 35 [ 412.178521][ T43] usb 3-1: config 0 has an invalid interface number: 43 but max is 1 [ 412.194846][ T43] usb 3-1: config 0 has no interface number 0 [ 412.211364][ T43] usb 3-1: config 0 has no interface number 1 [ 412.224828][ T43] usb 3-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 412.237902][ T43] usb 3-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 412.249938][ T43] usb 3-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 412.262258][ T43] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 412.274614][ T43] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 412.289229][ T43] usb 3-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 412.292161][ T5887] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 412.303591][ T43] usb 3-1: config 0 interface 145 has no altsetting 0 [ 412.318185][ T43] usb 3-1: config 0 interface 43 has no altsetting 0 [ 412.327940][ T43] usb 3-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 412.337735][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.346759][ T43] usb 3-1: Product: syz [ 412.351373][ T43] usb 3-1: Manufacturer: syz [ 412.356421][ T43] usb 3-1: SerialNumber: syz [ 412.370814][ T43] usb 3-1: config 0 descriptor?? [ 412.452189][ T5887] usb 6-1: device descriptor read/64, error -71 [ 412.580644][ T5887] usb usb6-port1: attempt power cycle [ 412.595621][T10669] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1246'. [ 412.612189][ T43] keyspan_pda 3-1:0.145: required endpoints missing [ 412.635933][ T43] keyspan_pda 3-1:0.43: Keyspan PDA converter detected [ 412.663196][ T43] usb 3-1: Keyspan PDA converter now attached to ttyUSB0 [ 412.697422][ T43] usb 3-1: USB disconnect, device number 33 [ 412.726729][ T43] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 412.763156][ T43] keyspan_pda 3-1:0.43: device disconnected [ 412.946697][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 412.954416][ T5887] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 412.972999][ T1072] usb 5-1: USB disconnect, device number 81 [ 412.987888][ T5887] usb 6-1: device descriptor read/8, error -71 [ 413.125766][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 413.133375][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.144437][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 413.153714][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.164843][ T9] usb 4-1: config 0 descriptor?? [ 413.239878][T10710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.244577][ T5887] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 413.276192][ T5887] usb 6-1: device descriptor read/8, error -71 [ 413.375054][T10712] ubi31: attaching mtd0 [ 413.384708][ T1072] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 413.386979][T10712] ubi31: scanning is finished [ 413.397246][T10712] ubi31: empty MTD device detected [ 413.404680][ T5887] usb usb6-port1: unable to enumerate USB device [ 413.519357][T10712] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 413.616933][ T1072] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.631767][ T1072] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.652487][ T1072] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.673334][ T1072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.681641][ T1072] usb 5-1: Product: syz [ 413.686375][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 413.695547][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 413.707129][ T1072] usb 5-1: Manufacturer: syz [ 413.711783][ T1072] usb 5-1: SerialNumber: syz [ 413.719706][ T9] usb 4-1: USB disconnect, device number 36 [ 413.948297][T10708] syzkaller1: entered promiscuous mode [ 413.957132][T10708] syzkaller1: entered allmulticast mode [ 413.973908][ T1072] usb 5-1: 0:2 : does not exist [ 414.011788][ T1072] usb 5-1: USB disconnect, device number 82 [ 414.049675][T10246] udevd[10246]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.335276][T10731] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 414.451933][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 414.590877][ T9] usb 3-1: device descriptor read/64, error -71 [ 414.858188][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 414.888293][T10737] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 414.894943][T10737] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 414.901104][ T1072] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 414.907935][T10737] vhci_hcd vhci_hcd.0: Device attached [ 414.997201][ T9] usb 3-1: device descriptor read/64, error -71 [ 415.072407][ T1072] usb 5-1: Using ep0 maxpacket: 16 [ 415.078912][ T1072] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 415.087354][ T1072] usb 5-1: config 0 has no interface number 0 [ 415.093889][ T1072] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.104908][ T1072] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.115020][ T1072] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 415.116274][ T983] vhci_hcd: vhci_device speed not set [ 415.124207][ T9] usb usb3-port1: attempt power cycle [ 415.135857][ T1072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.156620][ T1072] usb 5-1: config 0 descriptor?? [ 415.189711][ T983] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 415.286162][ T43] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 415.383526][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.392612][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.469862][ T43] usb 6-1: config 0 has no interfaces? [ 415.475413][ T43] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 415.499749][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.510747][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 415.522633][ T43] usb 6-1: config 0 descriptor?? [ 415.544111][ T9] usb 3-1: device descriptor read/8, error -71 [ 415.681591][ T5894] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 415.759094][T10738] vhci_hcd: unknown pdu 1 [ 415.764094][ T1164] vhci_hcd: stop threads [ 415.769875][ T1164] vhci_hcd: release socket [ 415.774418][ T1164] vhci_hcd: disconnect device [ 415.776836][ T10] usb 6-1: USB disconnect, device number 68 [ 415.813146][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 415.832912][ T983] vhci_hcd: vhci_device speed not set [ 415.843111][ T9] usb 3-1: device descriptor read/8, error -71 [ 415.851819][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.852168][ T5894] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 415.861515][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.881169][ T5894] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 415.893508][ T5894] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.903760][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.912170][ T5894] usb 4-1: Product: syz [ 415.916390][ T5894] usb 4-1: Manufacturer: syz [ 415.921299][ T5894] usb 4-1: SerialNumber: syz [ 415.970663][ T9] usb usb3-port1: unable to enumerate USB device [ 416.364675][ T5894] usb 4-1: 0:2 : does not exist [ 416.627851][ T5894] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 416.673597][ T5894] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 416.689070][ T5894] usb 4-1: USB disconnect, device number 37 [ 416.767115][ T1072] uclogic 0003:28BD:0071.0068: failed retrieving string descriptor #100: -71 [ 416.804771][ T1072] uclogic 0003:28BD:0071.0068: failed retrieving pen parameters: -71 [ 416.816762][ T1072] uclogic 0003:28BD:0071.0068: pen probing failed: -71 [ 416.823663][ T1072] uclogic 0003:28BD:0071.0068: failed probing parameters: -71 [ 416.839945][ T1072] uclogic 0003:28BD:0071.0068: probe with driver uclogic failed with error -71 [ 416.858262][ T1072] usb 5-1: USB disconnect, device number 83 [ 416.881711][T10771] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 416.914331][ T43] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 416.932232][T10775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.941662][T10775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.061217][ T43] usb 6-1: device descriptor read/64, error -71 [ 417.232168][ T5894] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 417.318979][ T43] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 417.374940][ T5894] usb 4-1: device descriptor read/64, error -71 [ 417.456765][ T43] usb 6-1: device descriptor read/64, error -71 [ 417.575011][ T43] usb usb6-port1: attempt power cycle [ 417.627832][ T5894] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 417.667198][T10789] fuse: Bad value for 'fd' [ 417.677370][T10789] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1273'. [ 417.767180][ T5894] usb 4-1: device descriptor read/64, error -71 [ 417.800141][ T983] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 417.884964][ T5894] usb usb4-port1: attempt power cycle [ 417.937969][ T43] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 417.946433][ T5932] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 417.970901][ T43] usb 6-1: device descriptor read/8, error -71 [ 417.978024][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.989001][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.998986][ T983] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.012220][ T983] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.021359][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.032780][ T983] usb 3-1: config 0 descriptor?? [ 418.088090][ T5932] usb 5-1: device descriptor read/64, error -71 [ 418.226742][ T43] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 418.248227][ T5894] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 418.256280][ T43] usb 6-1: device descriptor read/8, error -71 [ 418.280939][ T5894] usb 4-1: device descriptor read/8, error -71 [ 418.345728][ T5932] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 418.377050][ T43] usb usb6-port1: unable to enumerate USB device [ 418.474050][ T983] plantronics 0003:047F:FFFF.0069: reserved main item tag 0xd [ 418.490480][ T983] plantronics 0003:047F:FFFF.0069: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 418.503022][ T5932] usb 5-1: device descriptor read/64, error -71 [ 418.536838][ T5894] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 418.560692][ T5894] usb 4-1: device descriptor read/8, error -71 [ 418.634189][ T5932] usb usb5-port1: attempt power cycle [ 418.676186][ T5894] usb usb4-port1: unable to enumerate USB device [ 418.754936][ T5894] usb 3-1: USB disconnect, device number 38 [ 418.996745][ T5932] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 419.018634][ T5932] usb 5-1: device descriptor read/8, error -71 [ 419.274719][ T5932] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 419.297565][ T5932] usb 5-1: device descriptor read/8, error -71 [ 419.414482][ T5932] usb usb5-port1: unable to enumerate USB device [ 419.595575][ T983] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 419.771258][ T983] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 419.780518][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.788980][ T983] usb 3-1: Product: syz [ 419.793495][ T983] usb 3-1: Manufacturer: syz [ 419.798299][ T983] usb 3-1: SerialNumber: syz [ 419.904505][T10796] syzkaller1: entered promiscuous mode [ 419.929503][ T12] Bluetooth: (null): Invalid header checksum [ 419.937088][T10796] syzkaller1: entered allmulticast mode [ 420.025705][ T7104] Bluetooth: (null): Invalid header checksum [ 420.200292][T10809] loop5: detected capacity change from 0 to 7 [ 420.220949][T10809] Dev loop5: unable to read RDB block 7 [ 420.226768][T10809] loop5: unable to read partition table [ 420.233083][T10809] loop5: partition table beyond EOD, truncated [ 420.239517][T10809] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 420.273898][T10812] netlink: 'syz.3.1278': attribute type 4 has an invalid length. [ 420.287436][T10812] netlink: 'syz.3.1278': attribute type 4 has an invalid length. [ 420.568710][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 420.729058][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 420.736430][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 420.745595][ T9] usb 4-1: config 1 has an invalid interface number: 172 but max is 0 [ 420.753848][ T9] usb 4-1: config 1 has no interface number 0 [ 420.759991][ T9] usb 4-1: config 1 interface 172 has no altsetting 0 [ 420.770832][ T9] usb 4-1: string descriptor 0 read error: -22 [ 420.777275][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=b0.f3 [ 420.788924][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.804147][ T9] peak_usb 4-1:1.172: probe with driver peak_usb failed with error 172 [ 421.023369][ T9] usb 4-1: USB disconnect, device number 42 [ 421.118040][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1274'. [ 421.193559][T10818] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 421.488397][ T5932] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 421.585396][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.597443][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.629643][ T983] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 421.662078][ T5932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.673177][ T983] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 421.680809][T10828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.691150][ T5932] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.700712][T10828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.701677][ T983] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 421.711694][T10828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.727369][ T5932] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 421.737426][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 421.747481][ T983] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 421.751546][T10828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.770941][ T5932] usb 5-1: SerialNumber: syz [ 421.794683][ T983] usb 3-1: USB disconnect, device number 39 [ 421.926743][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 422.027280][ T5932] usb 5-1: 0:2 : does not exist [ 422.032276][ T5932] usb 5-1: unit 5: unexpected type 0x03 [ 422.050168][ T5932] usb 5-1: USB disconnect, device number 88 [ 422.077545][T10246] udevd[10246]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.102033][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.114505][ T10] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 422.124925][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=162 [ 422.130194][ T983] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 422.136865][ T10] usb 4-1: SerialNumber: syz [ 422.148933][ T10] usb 4-1: config 0 descriptor?? [ 422.154212][ T1072] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 422.303000][ T983] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 422.311237][ T983] usb 3-1: config 1 has no interface number 0 [ 422.318117][ T983] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 422.328217][ T983] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.338376][ T1072] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.343154][ T983] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 422.349953][ T1072] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x2 has an invalid bInterval 217, changing to 11 [ 422.361220][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.372325][ T1072] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.377719][ T983] usb 3-1: Product: syz [ 422.385146][ T1072] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 422.388603][ T983] usb 3-1: Manufacturer: syz [ 422.388626][ T983] usb 3-1: SerialNumber: syz [ 422.392848][T10830] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 422.417444][ T1072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.428976][T10830] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 422.431242][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 422.442578][ T983] usb 3-1: Expected 3 endpoints, found: 2 [ 422.446299][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 422.461981][ T1072] usb 6-1: config 0 descriptor?? [ 422.470003][ T10] usb 4-1: USB disconnect, device number 43 [ 422.922923][ T1072] uclogic 0003:5543:0522.006A: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input0 [ 422.934034][ T43] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 423.041314][T10839] netlink: 'syz.2.1284': attribute type 4 has an invalid length. [ 423.103096][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 423.109866][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.121981][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.131863][ T43] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 423.141599][T10832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.142165][T10832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.151953][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.174029][ T43] usb 5-1: config 0 descriptor?? [ 423.196470][ T983] usb 6-1: USB disconnect, device number 73 [ 423.285065][ T1072] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 423.457718][ T1072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.469434][ T1072] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 423.479565][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.490511][ T1072] usb 4-1: config 0 descriptor?? [ 423.615320][ T43] holtek_mouse 0003:04D9:A081.006B: item fetching failed at offset 5/8 [ 423.624478][ T43] holtek_mouse 0003:04D9:A081.006B: hid parse failed: -22 [ 423.632820][ T43] holtek_mouse 0003:04D9:A081.006B: probe with driver holtek_mouse failed with error -22 [ 423.714141][ T1072] usbhid 4-1:0.0: can't add hid device: -71 [ 423.720457][ T1072] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 423.735596][ T1072] usb 4-1: USB disconnect, device number 44 [ 423.836924][ T10] usb 5-1: USB disconnect, device number 89 [ 424.161772][ T5887] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 424.183131][ T1072] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 424.322215][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 424.329885][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.339971][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.355442][ T5887] usb 6-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 424.364501][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.375608][ T1072] usb 4-1: Using ep0 maxpacket: 32 [ 424.381242][ T5887] usb 6-1: config 0 descriptor?? [ 424.389124][ T1072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.400773][ T1072] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 424.409989][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.429929][ T1072] usb 4-1: config 0 descriptor?? [ 424.447608][ T1072] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 424.461028][ T1072] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 424.886250][ T43] usb 4-1: USB disconnect, device number 45 [ 424.897221][ T43] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 424.918209][ T5887] waltop 0003:172F:0502.006C: unknown main item tag 0x0 [ 424.926632][ T5887] waltop 0003:172F:0502.006C: unknown main item tag 0x0 [ 424.933683][ T5887] waltop 0003:172F:0502.006C: unknown main item tag 0x0 [ 424.941203][ T5887] waltop 0003:172F:0502.006C: unknown main item tag 0x0 [ 424.949073][ T5887] waltop 0003:172F:0502.006C: unknown main item tag 0x0 [ 424.960156][ T5887] waltop 0003:172F:0502.006C: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.5-1/input0 [ 424.992196][ T983] usb 3-1: USB disconnect, device number 40 [ 425.148550][T10853] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1291'. [ 425.472164][T10859] fuse: Unknown parameter 'aler' [ 425.509471][ T983] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 425.556674][T10862] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 425.617119][T10865] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 425.630390][T10865] FAULT_INJECTION: forcing a failure. [ 425.630390][T10865] name failslab, interval 1, probability 0, space 0, times 1 [ 425.645665][T10865] CPU: 1 UID: 0 PID: 10865 Comm: syz.4.1294 Not tainted syzkaller #0 PREEMPT(full) [ 425.645685][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.645695][T10865] Call Trace: [ 425.645702][T10865] [ 425.645708][T10865] dump_stack_lvl+0x189/0x250 [ 425.645731][T10865] ? __pfx____ratelimit+0x10/0x10 [ 425.645748][T10865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.645769][T10865] ? __pfx__printk+0x10/0x10 [ 425.645786][T10865] ? __pfx___might_resched+0x10/0x10 [ 425.645806][T10865] ? fs_reclaim_acquire+0x7d/0x100 [ 425.645828][T10865] should_fail_ex+0x414/0x560 [ 425.645868][T10865] should_failslab+0xa8/0x100 [ 425.645895][T10865] __kmalloc_noprof+0xcb/0x7f0 [ 425.645915][T10865] ? tomoyo_encode+0x28b/0x550 [ 425.645938][T10865] tomoyo_encode+0x28b/0x550 [ 425.645960][T10865] tomoyo_realpath_from_path+0x58d/0x5d0 [ 425.645980][T10865] ? tomoyo_domain+0xd9/0x130 [ 425.646002][T10865] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 425.646029][T10865] tomoyo_path_number_perm+0x1e8/0x5a0 [ 425.646055][T10865] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 425.646107][T10865] ? __fget_files+0x2a/0x420 [ 425.646130][T10865] ? __fget_files+0x3a0/0x420 [ 425.646148][T10865] ? __fget_files+0x2a/0x420 [ 425.646170][T10865] security_file_ioctl+0xcb/0x2d0 [ 425.646195][T10865] __se_sys_ioctl+0x47/0x170 [ 425.646212][T10865] do_syscall_64+0xfa/0xfa0 [ 425.646230][T10865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.646244][T10865] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.646259][T10865] ? clear_bhb_loop+0x60/0xb0 [ 425.646277][T10865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.646292][T10865] RIP: 0033:0x7fac7098eec9 [ 425.646305][T10865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.646318][T10865] RSP: 002b:00007fac7176d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.646335][T10865] RAX: ffffffffffffffda RBX: 00007fac70be5fa0 RCX: 00007fac7098eec9 [ 425.646346][T10865] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 425.646355][T10865] RBP: 00007fac7176d090 R08: 0000000000000000 R09: 0000000000000000 [ 425.646365][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.646374][T10865] R13: 00007fac70be6038 R14: 00007fac70be5fa0 R15: 00007fffd9f5a568 [ 425.646398][T10865] [ 425.646447][T10865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.918426][ T983] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 425.927650][ T983] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 425.935786][ T983] usb 3-1: config 0 has no interface number 0 [ 425.944372][ T983] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 425.954508][ T983] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 425.963622][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.974047][ T983] usb 3-1: config 0 descriptor?? [ 425.980236][T10853] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 426.485100][ T983] usb 3-1: USB disconnect, device number 41 [ 426.813803][ T1072] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 426.931556][ T983] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 426.978714][ T1072] usb 5-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 426.988170][ T1072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.996273][ T1072] usb 5-1: Product: syz [ 427.000559][ T1072] usb 5-1: Manufacturer: syz [ 427.005186][ T1072] usb 5-1: SerialNumber: syz [ 427.023326][ T1072] r8152-cfgselector 5-1: Unknown version 0x0000 [ 427.029720][ T1072] r8152-cfgselector 5-1: config 0 descriptor?? [ 427.037950][ T1072] r8152 5-1:0.0: Expected endpoints are not found [ 427.072692][ T43] usb 6-1: USB disconnect, device number 74 [ 427.112785][ T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.141936][ T983] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 427.151740][ T983] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 427.161226][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.171870][ T983] usb 3-1: config 0 descriptor?? [ 427.180933][ T983] gspca_main: spca501-2.14.0 probing 0000:0000 [ 427.257293][ T5894] r8152-cfgselector 5-1: USB disconnect, device number 90 [ 427.367408][T10898] netlink: 'syz.5.1302': attribute type 7 has an invalid length. [ 427.377820][T10898] netlink: 'syz.5.1302': attribute type 5 has an invalid length. [ 427.386346][T10898] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1302'. [ 427.515714][T10899] MTD: Attempt to mount non-MTD device "./file0" [ 427.542705][T10899] ./file0: Can't open blockdev [ 427.596462][T10887] kvm: pic: non byte write [ 427.688249][T10909] bond0: (slave rose0): Enslaving as an active interface with an up link [ 427.723579][ T983] gspca_spca501: reg write: error -110 [ 427.730949][ T983] spca501 3-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 427.738089][ T983] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 427.819249][ T5887] usb 3-1: USB disconnect, device number 42 [ 428.038726][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1311'. [ 428.170811][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1314'. [ 428.193431][ T43] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 428.355993][ T43] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 428.364239][ T43] usb 5-1: config 0 has no interface number 0 [ 428.371164][ T43] usb 5-1: config 0 interface 29 has no altsetting 0 [ 428.375193][ T5887] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 428.381450][ T43] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 428.395183][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.403324][ T43] usb 5-1: Product: syz [ 428.407659][ T43] usb 5-1: Manufacturer: syz [ 428.412297][ T43] usb 5-1: SerialNumber: syz [ 428.425674][ T43] usb 5-1: config 0 descriptor?? [ 428.481142][T10935] syzkaller1: entered promiscuous mode [ 428.486785][T10935] syzkaller1: entered allmulticast mode [ 428.514139][ T5894] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 428.546327][ T5887] usb 4-1: Invalid ep0 maxpacket: 64 [ 428.658046][ T43] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 428.685220][ T5887] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 428.686604][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 428.699323][ T5894] usb 6-1: too many configurations: 33, using maximum allowed: 8 [ 428.709255][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.721573][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.733963][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.746158][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.759917][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.775503][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.788209][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.800384][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.811270][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 428.821062][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.841101][ T5894] usb 6-1: config 0 descriptor?? [ 428.850521][ T5894] hub 6-1:0.0: Invalid hub with more than one config or interface [ 428.858822][ T5894] hub 6-1:0.0: probe with driver hub failed with error -22 [ 428.867059][ T5887] usb 4-1: Invalid ep0 maxpacket: 64 [ 428.879312][ T5887] usb usb4-port1: attempt power cycle [ 428.885665][ T43] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 428.903040][ T43] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 429.001419][ T43] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 429.013837][ T43] usb 5-1: USB disconnect, device number 91 [ 429.076422][ T9] usb 6-1: USB disconnect, device number 75 [ 429.219914][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 429.252087][ T5887] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 429.274542][ T5887] usb 4-1: Invalid ep0 maxpacket: 64 [ 429.382871][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 429.391741][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 429.401889][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.412592][ T5887] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 429.421037][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.430650][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.439183][ T10] usb 3-1: Product: syz [ 429.443480][ T10] usb 3-1: Manufacturer: syz [ 429.448413][ T10] usb 3-1: SerialNumber: syz [ 429.453366][ T5887] usb 4-1: Invalid ep0 maxpacket: 64 [ 429.461088][ T5887] usb usb4-port1: unable to enumerate USB device [ 429.506536][T10953] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1321'. [ 429.613643][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1323'. [ 429.702801][ T10] usb 3-1: 0:2 : does not exist [ 429.732625][T10961] netlink: 'syz.4.1325': attribute type 41 has an invalid length. [ 429.744901][ T10] usb 3-1: USB disconnect, device number 43 [ 429.745933][T10961] netlink: 'syz.4.1325': attribute type 41 has an invalid length. [ 429.762386][T10961] netlink: 'syz.4.1325': attribute type 41 has an invalid length. [ 429.773097][T10962] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 429.778617][T10961] netlink: 'syz.4.1325': attribute type 41 has an invalid length. [ 429.779650][T10962] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 429.788816][T10961] netlink: 'syz.4.1325': attribute type 41 has an invalid length. [ 429.801828][T10962] vhci_hcd vhci_hcd.0: Device attached [ 429.806980][T10246] udevd[10246]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.813964][T10962] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 429.830747][T10962] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 429.844377][T10962] vhci_hcd vhci_hcd.0: Device attached [ 429.874485][T10966] vhci_hcd: connection closed [ 429.875878][T10963] vhci_hcd: connection closed [ 429.878018][ T61] vhci_hcd: stop threads [ 429.890813][ T61] vhci_hcd: release socket [ 429.896364][ T61] vhci_hcd: disconnect device [ 429.901412][ T61] vhci_hcd: stop threads [ 429.906135][ T61] vhci_hcd: release socket [ 429.910593][ T61] vhci_hcd: disconnect device [ 429.979251][ T5887] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 430.152061][ T5887] usb 6-1: config 0 has an invalid interface number: 252 but max is 0 [ 430.160299][ T5887] usb 6-1: config 0 has an invalid interface number: 54 but max is 0 [ 430.168836][ T5887] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 430.171682][ T43] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 430.177841][ T5887] usb 6-1: config 0 has no interface number 0 [ 430.191549][ T5887] usb 6-1: config 0 has no interface number 1 [ 430.198039][ T5887] usb 6-1: config 0 interface 252 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 430.212102][ T5887] usb 6-1: too many endpoints for config 0 interface 54 altsetting 148: 72, using maximum allowed: 30 [ 430.223289][ T5887] usb 6-1: config 0 interface 54 altsetting 148 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 430.234325][ T5887] usb 6-1: config 0 interface 54 altsetting 148 has a duplicate endpoint with address 0x6, skipping [ 430.245189][ T5887] usb 6-1: config 0 interface 54 altsetting 148 has an invalid descriptor for endpoint zero, skipping [ 430.256278][ T5887] usb 6-1: config 0 interface 54 altsetting 148 endpoint 0x9 has an invalid bInterval 253, changing to 7 [ 430.267586][ T5887] usb 6-1: config 0 interface 54 altsetting 148 has an invalid descriptor for endpoint zero, skipping [ 430.279155][ T5887] usb 6-1: config 0 interface 54 altsetting 148 has 7 endpoint descriptors, different from the interface descriptor's value: 72 [ 430.293037][ T5887] usb 6-1: config 0 interface 54 has no altsetting 0 [ 430.307815][ T5887] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0022, bcdDevice=ce.e1 [ 430.326466][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.331689][T10972] loop5: detected capacity change from 0 to 7 [ 430.337725][ T5887] usb 6-1: Product: syz [ 430.345781][ T5887] usb 6-1: Manufacturer: syz [ 430.349930][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.350398][ T5887] usb 6-1: SerialNumber: syz [ 430.365399][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.382386][T10972] Dev loop5: unable to read RDB block 7 [ 430.386505][ T5887] usb 6-1: config 0 descriptor?? [ 430.388286][ T43] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 430.397841][ T5887] kvaser_usb 6-1:0.252: error -ENODEV: Cannot get usb endpoint(s) [ 430.403180][T10972] loop5: unable to read partition table [ 430.416499][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.421215][T10972] loop5: partition table beyond EOD, truncated [ 430.430081][ T43] usb 5-1: config 0 descriptor?? [ 430.431937][T10972] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 430.618184][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.627286][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.644743][ T5887] kvaser_usb 6-1:0.54: error -ENODEV: Cannot get usb endpoint(s) [ 430.665813][ T5887] usb 6-1: USB disconnect, device number 76 [ 430.824022][ T9] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 430.890006][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.899379][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.908571][T10970] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 430.915442][T10970] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 430.922510][T10970] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 430.996937][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 431.005318][ T9] usb 3-1: config 1 has no interface number 0 [ 431.012028][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 431.021680][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 431.030823][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.038914][ T9] usb 3-1: Product: syz [ 431.043140][ T9] usb 3-1: Manufacturer: syz [ 431.047758][ T9] usb 3-1: SerialNumber: syz [ 431.254926][T10977] tmpfs: Bad value for 'mpol' [ 431.362151][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 431.379108][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 431.415049][ T43] usb 5-1: USB disconnect, device number 92 [ 431.661667][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 431.725618][T10992] 8021q: VLANs not supported on bond0 [ 431.740934][T10992] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1334'. [ 431.925562][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 431.942600][ T9] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 431.957956][T10975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1328'. [ 431.958946][ T9] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 432.083668][ T9] aqc111 3-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 432.118775][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 432.126059][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.143357][ T10] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 432.173838][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.193478][ T10] usb 4-1: Product: syz [ 432.197740][ T10] usb 4-1: Manufacturer: syz [ 432.202397][ T10] usb 4-1: SerialNumber: syz [ 432.225836][ T10] usb 4-1: config 0 descriptor?? [ 432.242651][ T10] usb 4-1: bad CDC descriptors [ 432.253803][ T10] usb 4-1: unsupported MDLM descriptors [ 432.279222][ T43] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 432.305458][ T5894] usb 3-1: USB disconnect, device number 44 [ 432.324462][ T5894] aqc111 3-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 432.428230][ T5894] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 432.437931][ T5894] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 432.452288][ T5894] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 432.458851][ T10] usb 4-1: USB disconnect, device number 50 [ 432.480456][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 432.501430][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 432.513143][ T43] usb 5-1: config 56 interface 0 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 432.528708][ T43] usb 5-1: config 56 interface 0 has no altsetting 0 [ 432.544884][ T43] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=96.21 [ 432.555304][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.564062][ T43] usb 5-1: Product: syz [ 432.569891][ T43] usb 5-1: Manufacturer: syz [ 432.574568][ T43] usb 5-1: SerialNumber: syz [ 432.591257][T10997] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 432.663866][ T983] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 432.822181][ T43] adutux 5-1:56.0: interrupt endpoints not found [ 432.849318][ T983] usb 6-1: no configurations [ 432.866486][ T983] usb 6-1: can't read configurations, error -22 [ 432.874541][ T43] usb 5-1: USB disconnect, device number 93 [ 433.016198][ T983] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 433.188173][ T983] usb 6-1: no configurations [ 433.195074][ T983] usb 6-1: can't read configurations, error -22 [ 433.227460][ T983] usb usb6-port1: attempt power cycle [ 433.369158][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 433.561626][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 433.568485][ T43] usb 3-1: config 0 has an invalid interface number: 250 but max is 2 [ 433.577160][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.588409][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 433.597758][ T983] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 433.605756][ T43] usb 3-1: config 0 has no interface number 0 [ 433.614407][ T43] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 433.623581][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.631760][ T43] usb 3-1: Product: syz [ 433.636012][ T43] usb 3-1: Manufacturer: syz [ 433.640939][ T43] usb 3-1: SerialNumber: syz [ 433.646096][ T983] usb 6-1: no configurations [ 433.652125][ T983] usb 6-1: can't read configurations, error -22 [ 433.659730][ T43] usb 3-1: config 0 descriptor?? [ 433.671354][ T43] uvcvideo 3-1:0.250: probe with driver uvcvideo failed with error -22 [ 433.722196][ T5894] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 433.754108][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 433.818752][ T983] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 433.840848][ T983] usb 6-1: no configurations [ 433.845481][ T983] usb 6-1: can't read configurations, error -22 [ 433.852408][ T983] usb usb6-port1: unable to enumerate USB device [ 433.885451][ T5894] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 433.888115][ T1072] usb 3-1: USB disconnect, device number 45 [ 433.903337][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.920430][ T5894] usb 5-1: config 0 descriptor?? [ 433.938552][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 433.949828][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.962268][ T10] usb 4-1: config 0 descriptor?? [ 433.973467][ T10] cp210x 4-1:0.0: cp210x converter detected [ 434.156856][ T5894] kaweth 5-1:0.0: Firmware present in device. [ 434.186044][T11049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.195219][T11049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.226583][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 434.246182][ T10] cp210x 4-1:0.0: querying part number failed [ 434.256405][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 434.273909][ T10] usb 4-1: USB disconnect, device number 51 [ 434.291949][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 434.304164][ T10] cp210x 4-1:0.0: device disconnected [ 434.365883][ T5894] kaweth 5-1:0.0: Statistics collection: 0 [ 434.372404][ T5894] kaweth 5-1:0.0: Multicast filter limit: 0 [ 434.378445][ T5894] kaweth 5-1:0.0: MTU: 0 [ 434.382724][ T5894] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 434.510813][T11055] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 434.620396][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 434.784152][ T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.795773][ T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.806062][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 434.812878][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 434.822030][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.832827][ T10] usb 4-1: config 0 descriptor?? [ 434.835699][ T983] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 434.887592][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.018280][ T983] usb 3-1: Using ep0 maxpacket: 32 [ 435.038531][ T5894] kaweth 5-1:0.0: kaweth interface created at eth9 [ 435.048705][ T983] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 435.058018][ T983] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 435.070714][ T983] usb 3-1: Product: syz [ 435.086052][ T983] usb 3-1: config 0 descriptor?? [ 435.237709][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.248453][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.263347][ T5960] usb 5-1: USB disconnect, device number 94 [ 435.317523][ T983] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 435.355904][ T983] usb 3-1: USB disconnect, device number 46 [ 435.513242][ T10] usb 4-1: string descriptor 0 read error: -22 [ 435.746711][ T10] uclogic 0003:256C:006D.006D: interface is invalid, ignoring [ 435.981493][T11085] netlink: 'syz.4.1350': attribute type 29 has an invalid length. [ 436.010270][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 436.342695][ T10] usb 6-1: new low-speed USB device number 81 using dummy_hcd [ 436.513249][ T5887] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 436.545249][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 436.662810][ T1072] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 436.673459][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 436.680968][ T5887] usb 3-1: unable to get BOS descriptor or descriptor too short [ 436.690120][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 436.701859][ T10] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 436.709488][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 436.721034][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 436.731273][ T5887] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 436.741217][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 436.751314][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 436.763175][ T5887] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 436.772794][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.780859][ T5887] usb 3-1: Product: syz [ 436.785060][ T5887] usb 3-1: Manufacturer: syz [ 436.789653][ T5887] usb 3-1: SerialNumber: syz [ 436.797193][ T5887] usb 3-1: config 0 descriptor?? [ 436.803955][T11097] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 436.815117][ T5887] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.833865][ T1072] usb 5-1: Using ep0 maxpacket: 32 [ 436.845244][ T1072] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.862591][ T1072] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 436.873304][ T1072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.892441][ T1072] usb 5-1: Product: syz [ 436.897511][ T1072] usb 5-1: Manufacturer: syz [ 436.902806][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 436.909008][ T10] usb usb6-port1: attempt power cycle [ 436.914448][ T1072] usb 5-1: SerialNumber: syz [ 436.936690][T10278] udevd[10278]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.955868][ T1072] usb 5-1: config 0 descriptor?? [ 436.964678][ T1072] usb 5-1: no audio or video endpoints found [ 437.032995][ T1072] usb 3-1: USB disconnect, device number 47 [ 437.184518][ T5887] usb 5-1: USB disconnect, device number 95 [ 437.283149][ T10] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 437.304897][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 437.454275][ T10] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 437.476152][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 437.481774][ T10] usb usb6-port1: unable to enumerate USB device [ 437.504810][ T10] usb 4-1: USB disconnect, device number 52 [ 437.586545][T11109] netlink: 'syz.3.1357': attribute type 1 has an invalid length. [ 437.594912][T11109] nbd: error processing sock list [ 437.761331][T11116] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 437.936569][ T983] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 438.053216][ T10] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 438.095813][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 438.103522][ T983] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 438.114828][ T983] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 438.128214][ T983] usb 3-1: config 0 interface 0 has no altsetting 0 [ 438.135188][ T983] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 438.144942][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.156101][ T983] usb 3-1: config 0 descriptor?? [ 438.216974][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 134, changing to 11 [ 438.233970][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26337, setting to 1024 [ 438.245254][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 438.254384][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.265113][ T10] usb 5-1: config 0 descriptor?? [ 438.271786][T11116] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 438.495554][ T10] ath6kl: Failed to submit usb control message: -71 [ 438.502330][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 438.510832][ T10] ath6kl: Unable to send get target info: -71 [ 438.528079][ T10] ath6kl: Failed to init ath6kl core: -71 [ 438.535666][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 438.559761][ T10] usb 5-1: USB disconnect, device number 96 [ 438.595227][ T983] usbhid 3-1:0.0: can't add hid device: -71 [ 438.604237][ T983] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 438.622221][ T983] usb 3-1: USB disconnect, device number 48 [ 439.185778][T11131] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1365'. [ 439.207946][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 439.347055][ T1072] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 439.368365][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 439.379680][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 439.387901][ T10] usb 4-1: config 0 has no interface number 0 [ 439.412022][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=79.9a [ 439.424168][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.432220][ T10] usb 4-1: Product: syz [ 439.437569][ T10] usb 4-1: Manufacturer: syz [ 439.442187][ T10] usb 4-1: SerialNumber: syz [ 439.449230][ T10] usb 4-1: config 0 descriptor?? [ 439.507718][ T5887] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 439.518716][ T1072] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.529940][ T1072] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.540392][ T1072] usb 5-1: config 0 interface 0 has no altsetting 0 [ 439.547093][ T1072] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 439.556223][ T1072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.567877][ T1072] usb 5-1: config 0 descriptor?? [ 439.669229][ T5894] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 439.681350][ T10] quatech2 4-1:0.188: Quatech 2nd gen USB to Serial Driver converter detected [ 439.690695][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 439.695925][ T10] usb 4-1: qt2_attach - failed to power on unit: -71 [ 439.703635][ T10] quatech2 4-1:0.188: probe with driver quatech2 failed with error -71 [ 439.713398][ T5887] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 439.725741][ T10] usb 4-1: USB disconnect, device number 53 [ 439.731964][ T5887] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 439.740166][ T5887] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 439.751116][ T5887] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 439.760002][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 439.772182][ T5887] usb 3-1: config 0 has no interface number 0 [ 439.778429][ T5887] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 439.789646][ T5887] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 439.799643][ T5887] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 439.810707][ T5887] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.823954][ T5887] usb 3-1: config 0 interface 125 has no altsetting 0 [ 439.830814][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.831004][ T5887] usb 3-1: config 0 interface 125 has no altsetting 2 [ 439.844005][ T5894] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 439.853040][ T5887] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 439.859002][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.868054][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.883752][ T5887] usb 3-1: Product: syz [ 439.887962][ T5887] usb 3-1: Manufacturer: syz [ 439.892628][ T5887] usb 3-1: SerialNumber: syz [ 439.899808][ T5894] usb 6-1: config 0 descriptor?? [ 439.906771][ T5887] usb 3-1: config 0 descriptor?? [ 439.926856][ T5887] usb 3-1: selecting invalid altsetting 2 [ 440.229319][ T1072] usb 5-1: string descriptor 0 read error: -22 [ 440.409040][ T5894] aquacomputer_d5next 0003:0C70:F00B.006F: unknown main item tag 0x0 [ 440.417388][ T5894] aquacomputer_d5next 0003:0C70:F00B.006F: unknown main item tag 0x0 [ 440.428411][ T5894] aquacomputer_d5next 0003:0C70:F00B.006F: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.5-1/input0 [ 440.444679][ T1072] uclogic 0003:256C:006D.006E: interface is invalid, ignoring [ 440.680021][ T10] usb 6-1: USB disconnect, device number 85 [ 440.988752][T11146] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1371'. [ 441.013311][ T5894] usb 3-1: USB disconnect, device number 49 [ 441.325564][ T43] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 441.498174][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 441.508153][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 441.519945][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39485, setting to 64 [ 441.533935][ T43] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 441.543179][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.551346][ T43] usb 4-1: Product: syz [ 441.555527][ T43] usb 4-1: Manufacturer: syz [ 441.560151][ T43] usb 4-1: SerialNumber: syz [ 441.573183][ T43] usb 4-1: config 0 descriptor?? [ 441.579259][T11148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 441.591309][ T43] radioshark2 4-1:0.0: Invalid radioSHARK2 device [ 441.597977][ T43] radioshark2 4-1:0.0: probe with driver radioshark2 failed with error -22 [ 441.804298][T11148] netlink: 'syz.3.1372': attribute type 27 has an invalid length. [ 441.861311][T11148] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.868808][T11148] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.901646][T11148] dummy0: left promiscuous mode [ 441.908283][T11148] dummy0: left allmulticast mode [ 441.911155][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 441.987302][T11148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.005068][T11148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.074714][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 442.081216][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 442.092172][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 442.100822][ T10] usb 3-1: can't read configurations, error -61 [ 442.187206][T11157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.227832][ T7104] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.246340][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 442.253955][ T1164] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.254030][ T1164] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.313434][ T983] usb 5-1: USB disconnect, device number 97 [ 442.426727][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 442.441100][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 442.458007][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 442.468276][ T10] usb 3-1: can't read configurations, error -61 [ 442.475654][ T10] usb usb3-port1: attempt power cycle [ 442.493054][ T5894] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 442.505455][T11163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1377'. [ 442.516477][T11163] netlink: 'syz.4.1377': attribute type 10 has an invalid length. [ 442.524778][T11163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.537772][T11163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.550317][T11163] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 442.673321][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 442.683554][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.694631][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.704390][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 442.717297][ T5894] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 442.727515][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.738565][ T5894] usb 6-1: config 0 descriptor?? [ 442.844711][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 442.866990][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 442.872960][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 442.882934][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 442.886630][ T983] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 442.890740][ T10] usb 3-1: can't read configurations, error -61 [ 443.036351][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 443.058536][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 443.064487][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 443.074962][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 443.082397][ T983] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 443.083686][ T10] usb 3-1: can't read configurations, error -61 [ 443.093418][ T983] usb 5-1: can't read configurations, error -61 [ 443.097991][ T10] usb usb3-port1: unable to enumerate USB device [ 443.183062][ T5894] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 443.191223][ T5894] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 443.198982][ T5894] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 443.206354][ T5894] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 443.213954][ T5894] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 443.221447][ T5894] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 443.229906][ T5894] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 443.237185][ T5894] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 443.250744][ T5894] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0070/input/input52 [ 443.262453][ T983] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 443.365419][ T5894] microsoft 0003:045E:07DA.0070: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 443.404704][ T5894] usb 6-1: USB disconnect, device number 86 [ 443.426362][ T983] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 443.445313][ T983] usb 5-1: can't read configurations, error -61 [ 443.463971][ T983] usb usb5-port1: attempt power cycle [ 443.477842][T11166] fido_id[11166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 443.838395][ T983] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 443.862245][ T983] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 443.869920][ T983] usb 5-1: can't read configurations, error -61 [ 444.014298][ T983] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 444.100084][ T983] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 444.118933][ T983] usb 5-1: can't read configurations, error -61 [ 444.129749][ T43] usb 4-1: USB disconnect, device number 54 [ 444.138478][ T983] usb usb5-port1: unable to enumerate USB device [ 444.693844][ T43] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 444.857033][ T43] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.868497][ T43] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.880060][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 444.897486][ T43] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 444.906584][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.937749][ T43] usb 6-1: config 0 descriptor?? [ 444.946110][ T983] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 445.025088][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 445.124152][ T983] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 445.136194][ T983] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 445.147439][ T983] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 445.157182][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.176215][T11184] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 445.191879][ T983] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 445.413274][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.440697][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.451402][ T5960] usb 4-1: USB disconnect, device number 55 [ 445.612200][ T43] usb 6-1: string descriptor 0 read error: -22 [ 445.698749][T11184] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1385'. [ 445.841429][ T43] uclogic 0003:256C:006D.0071: interface is invalid, ignoring [ 445.910287][T11199] netlink: 'syz.4.1389': attribute type 10 has an invalid length. [ 445.919861][T11199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1389'. [ 445.944749][T11199] team0: Port device geneve0 added [ 446.486090][T11215] netlink: 'syz.4.1395': attribute type 8 has an invalid length. [ 446.495317][T11215] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1395'. [ 446.608061][ T43] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 446.650829][ T5887] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 446.772341][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.782425][ T43] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 446.791696][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.800496][ T5960] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 446.810524][ T43] usb 3-1: config 0 descriptor?? [ 446.821933][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 446.831692][ T5887] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 446.841526][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.850059][ T5887] usb 4-1: Product: syz [ 446.855050][ T5887] usb 4-1: Manufacturer: syz [ 446.859712][ T5887] usb 4-1: SerialNumber: syz [ 446.868425][ T5887] usb 4-1: config 0 descriptor?? [ 446.971634][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 446.980768][ T5960] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.992004][ T5960] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.002164][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 447.010409][ T5960] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 447.019815][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.031976][ T5960] usb 5-1: config 0 descriptor?? [ 447.097208][ T5887] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 447.259023][ T43] zydacron 0003:13EC:0006.0072: item fetching failed at offset 4/5 [ 447.268580][ T43] zydacron 0003:13EC:0006.0072: parse failed [ 447.275588][ T43] zydacron 0003:13EC:0006.0072: probe with driver zydacron failed with error -22 [ 447.493213][T11219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.494599][ T5960] zeroplus 0003:0C12:0005.0073: collection stack underflow [ 447.502873][T11219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.519276][ T5960] zeroplus 0003:0C12:0005.0073: item 0 4 0 12 parsing failed [ 447.528009][ T5960] zeroplus 0003:0C12:0005.0073: parse failed [ 447.534191][ T5960] zeroplus 0003:0C12:0005.0073: probe with driver zeroplus failed with error -22 [ 447.655526][ T10] usb 3-1: USB disconnect, device number 54 [ 447.699050][ T5960] usb 6-1: USB disconnect, device number 87 [ 447.743211][ T43] usb 5-1: USB disconnect, device number 102 [ 448.105145][ T5960] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 448.137222][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 448.278070][ T5960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.289148][ T5960] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 448.299301][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.304807][ T10] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 448.316339][ T5960] usb 6-1: config 0 descriptor?? [ 448.317762][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.333395][ T10] usb 3-1: config 0 has no interface number 0 [ 448.340118][ T10] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 448.342529][ T5960] usb 6-1: bad CDC descriptors [ 448.355060][ T10] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.386945][ T10] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 448.396373][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.405751][ T10] usb 3-1: Product: syz [ 448.410069][ T10] usb 3-1: Manufacturer: syz [ 448.414707][ T10] usb 3-1: SerialNumber: syz [ 448.423922][ T10] usb 3-1: config 0 descriptor?? [ 448.469549][ T5887] usb write operation failed. (-71) [ 448.479020][ T5887] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 448.490873][ T5887] dvbdev: DVB: registering new adapter (Terratec H7) [ 448.499097][ T5887] usb 4-1: media controller created [ 448.507615][ T5887] usb read operation failed. (-71) [ 448.513415][ T5887] usb write operation failed. (-71) [ 448.524773][ T5887] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 448.538813][ T5887] usb 4-1: USB disconnect, device number 56 [ 448.556318][ T43] usb 6-1: USB disconnect, device number 88 [ 448.853804][ T9] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 448.869819][ T10] usb 3-1: USB disconnect, device number 55 [ 448.992765][ T9] usb 5-1: device descriptor read/64, error -71 [ 449.089031][ T5887] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 449.202899][T11239] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 449.251419][ T9] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 449.259140][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 449.279685][ T5887] usb 4-1: config 0 has an invalid interface number: 240 but max is 0 [ 449.288228][ T5887] usb 4-1: config 0 has no interface number 0 [ 449.295397][ T5887] usb 4-1: config 0 interface 240 has no altsetting 0 [ 449.304630][ T5887] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=13.1c [ 449.313867][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.321997][ T5887] usb 4-1: Product: syz [ 449.326375][ T5887] usb 4-1: Manufacturer: syz [ 449.330992][ T5887] usb 4-1: SerialNumber: syz [ 449.338618][ T5887] usb 4-1: config 0 descriptor?? [ 449.420475][ T9] usb 5-1: device descriptor read/64, error -71 [ 449.516903][ T43] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 449.549071][ T9] usb usb5-port1: attempt power cycle [ 449.559947][ T5887] speedtch 4-1:0.240: speedtch_bind: wrong device class 252 [ 449.567366][ T5887] speedtch 4-1:0.240: usbatm_usb_probe: bind failed: -19! [ 449.584384][ T5887] usb 4-1: USB disconnect, device number 57 [ 449.677938][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 449.694084][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.708175][ T43] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 449.717473][ T43] usb 6-1: config 1 has no interface number 1 [ 449.723872][ T43] usb 6-1: config 1 interface 2 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 449.737074][ T43] usb 6-1: config 1 interface 2 has no altsetting 0 [ 449.747194][ T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.756472][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.764871][ T43] usb 6-1: Product: 減㹾㉋먵Ⱨ躋쾑ꧦ脢딝鋭쵝Xꏚ呟籙淅惜ƣ⸐䫯쌌냺쬲﯍㦊喀斛馼ꥄƽꛕ漲쏣븭鉦꒩ໟ⬺菙怸萰ᡟꐄ⠖횫氅袡ʊ侑䟏ﭐᦧ콃牓뙝ϯ以᾽Ȼ퉝寅ࡆ䗭꟎薞泏꿧ힶ澹퇿秫饎긞㐭짦㛈跈ꔺ┑犪컁씋㆕䰧텍ဃ贓♟ﵹ祺푬Ꙍ测玦Ⲙ薱鲨栜 [ 449.795876][ T43] usb 6-1: Manufacturer: с [ 449.800761][ T43] usb 6-1: SerialNumber: ℙ窖Ꟊ앱轁괒殷밫䩐镳竐ᰖ텣쑋斒჈暑뷟㰂╝휀ピ吊䅀噔′쫯ᤑ꣔耾䁿摂䔥쑺ﾬꐻ┑哄쳿춖蕊ㄽ皣ꊸᵗ檕멒䡯胄宎풾ﯬ톭鉚脍䝹ȉ鈁탽⨐ܼ왞рᅌ煫뾰簍㤷݄硾࣯圭鎰Ⲿᶓڻዃᆝ敋봝ꑊ術䒨뀈쉤 [ 449.923082][ T9] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 449.959417][ T9] usb 5-1: device descriptor read/8, error -71 [ 450.211814][ T9] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 450.234889][ T9] usb 5-1: device descriptor read/8, error -71 [ 450.270522][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.281952][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.285051][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.298865][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.352786][ T9] usb usb5-port1: unable to enumerate USB device [ 450.392342][ T43] usb 6-1: USB disconnect, device number 89 [ 450.402937][T11255] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 450.415298][ T5887] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 450.591477][ T5887] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.603110][ T5887] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.613646][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 450.635414][ T5887] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 450.655561][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.686498][ T5887] usb 4-1: config 0 descriptor?? [ 451.163502][ C0] hrtimer: interrupt took 52544 ns [ 451.359207][ T5887] usb 4-1: string descriptor 0 read error: -22 [ 451.528134][ T1072] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 451.578728][ T5887] uclogic 0003:256C:006D.0074: interface is invalid, ignoring [ 451.709015][ T1072] usb 3-1: Using ep0 maxpacket: 32 [ 451.715252][ T1072] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 451.724827][ T1072] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 451.733006][ T1072] usb 3-1: config 0 has no interface number 0 [ 451.740278][ T1072] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 451.743871][T11280] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 451.748721][ T1072] usb 3-1: config 0 has no interface number 0 [ 451.763764][ T1072] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 451.783795][ T1072] usb 3-1: config 0 has no interface number 0 [ 451.796304][ T1072] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 451.807004][ T1072] usb 3-1: config 0 has no interface number 0 [ 451.815160][ T1072] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 451.824138][ T1072] usb 3-1: config 0 has no interface number 0 [ 451.834419][ T1072] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 451.843202][ T1072] usb 3-1: config 0 has no interface number 0 [ 451.851661][ T1072] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 451.861090][ T1072] usb 3-1: config 0 has no interface number 0 [ 451.868374][ T1072] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 451.876898][ T1072] usb 3-1: config 0 has no interface number 0 [ 451.888347][ T1072] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 451.898909][ T1072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.908789][ T1072] usb 3-1: Product: syz [ 451.914167][ T1072] usb 3-1: Manufacturer: syz [ 451.918839][ T1072] usb 3-1: SerialNumber: syz [ 451.929221][ T1072] usb 3-1: config 0 descriptor?? [ 451.936980][ T1072] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 452.132169][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 452.379199][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.405769][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.447223][T11276] random: crng reseeded on system resumption [ 453.418525][ T43] usb 4-1: USB disconnect, device number 58 [ 453.646186][ T983] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 453.820079][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.831545][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.846876][ T983] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 453.860914][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.868508][T11318] tmpfs: Unknown parameter 'q5' [ 453.874925][ T983] usb 6-1: config 0 descriptor?? [ 454.318552][T11311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.335195][ T983] usbhid 6-1:0.0: can't add hid device: -71 [ 454.343535][ T983] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 454.354650][ T43] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 454.365203][ T983] usb 6-1: USB disconnect, device number 90 [ 454.532376][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 454.539170][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.552391][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 454.564937][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 454.575962][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 454.585879][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 454.611263][ T43] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 454.618019][T11342] netlink: 'syz.4.1434': attribute type 11 has an invalid length. [ 454.620838][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 454.638126][ T43] usb 4-1: Product: syz [ 454.642488][ T43] usb 4-1: Manufacturer: syz [ 454.647658][ T43] usb 4-1: SerialNumber: syz [ 454.656021][ T43] usb 4-1: config 0 descriptor?? [ 454.879790][ T43] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 454.888086][ T43] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 455.078844][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 455.102776][ T43] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 455.110488][ T43] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 455.124639][ T43] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 455.252017][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.268988][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.281055][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 455.287789][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 455.297001][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.314817][ T24] usb 5-1: config 0 descriptor?? [ 455.320039][ T43] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 455.720188][ T9] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 455.786064][T11332] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 455.886537][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 455.895951][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.904257][ T9] usb 6-1: Product: syz [ 455.908566][ T9] usb 6-1: Manufacturer: syz [ 455.913337][ T9] usb 6-1: SerialNumber: syz [ 455.922320][ T9] usb 6-1: config 0 descriptor?? [ 455.940391][ T9] usb 6-1: interface 1 not found [ 455.977164][ T24] usb 5-1: string descriptor 0 read error: -22 [ 456.109058][ T43] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 456.118097][ T43] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 456.136546][ T43] usb 4-1: USB disconnect, device number 59 [ 456.155026][T11353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.165091][T11353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.177642][ T9] usb 6-1: USB disconnect, device number 91 [ 456.192396][ T24] uclogic 0003:256C:006D.0075: interface is invalid, ignoring [ 457.002369][ T43] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 457.179622][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 457.196703][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 457.217128][ T43] usb 4-1: config 10 has an invalid interface number: 50 but max is 0 [ 457.225443][ T43] usb 4-1: config 10 has no interface number 0 [ 457.234018][ T43] usb 4-1: config 10 interface 50 has no altsetting 0 [ 457.244886][ T43] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=43.2d [ 457.254753][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.263087][ T43] usb 4-1: Product: syz [ 457.267308][ T43] usb 4-1: Manufacturer: syz [ 457.272302][ T43] usb 4-1: SerialNumber: syz [ 457.510378][ T43] usbserial_generic 4-1:10.50: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 457.522008][ T43] usbserial_generic 4-1:10.50: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 457.530100][T11381] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 457.534142][ T43] usbserial_generic 4-1:10.50: device has no bulk endpoints [ 457.554783][ T43] usb 4-1: USB disconnect, device number 60 [ 457.574563][ T1072] etas_es58x 3-1:0.2: could not retrieve the product info string [ 457.641998][ T24] usb 3-1: USB disconnect, device number 56 [ 457.662005][ T24] etas_es58x 3-1:0.2: Disconnecting syz syz [ 458.038613][ T43] usb 5-1: USB disconnect, device number 107 [ 458.274979][ T24] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 458.378898][ T30] audit: type=1800 audit(5278962393.417:15): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1457" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 458.451485][ T24] usb 3-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 458.464248][ T24] usb 3-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 458.475617][ T24] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 458.488894][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 458.495759][ T43] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 458.504816][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.514201][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 458.522260][ T24] usb 3-1: SerialNumber: syz [ 458.531957][ T24] cdc_acm 3-1:1.0: invalid descriptor buffer length [ 458.539219][ T24] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 458.547501][ T24] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 458.554105][ T24] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 458.595791][ T983] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 458.670649][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 458.678371][ T43] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 458.686600][ T43] usb 5-1: config 0 has no interface number 0 [ 458.692790][ T43] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 458.703943][ T43] usb 5-1: config 0 interface 85 has no altsetting 0 [ 458.712869][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 458.713385][ T5887] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 458.722023][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.737816][ T43] usb 5-1: Product: syz [ 458.742147][ T43] usb 5-1: Manufacturer: syz [ 458.746921][ T43] usb 5-1: SerialNumber: syz [ 458.754464][ T43] usb 5-1: config 0 descriptor?? [ 458.762257][ T983] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 458.764732][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.775239][ T983] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 458.790683][ T983] usb 6-1: config 8 has no interface number 0 [ 458.796882][ T983] usb 6-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 458.809670][ T983] usb 6-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 458.813263][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.820690][ T983] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 458.833083][ T1072] usb 3-1: USB disconnect, device number 57 [ 458.839954][ T983] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 458.859605][ T983] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 458.869116][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.884647][ T983] usb 6-1: NFC: intf ffff888032e7c000 id ffffffff8eb144e0 [ 458.917086][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 458.924484][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 458.936856][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 458.946067][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.954666][ T5887] usb 4-1: Product: syz [ 458.958856][ T5887] usb 4-1: Manufacturer: syz [ 458.963831][ T5887] usb 4-1: SerialNumber: syz [ 458.971329][ T5887] usb 4-1: config 0 descriptor?? [ 458.980381][ T5887] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 458.989834][ T5887] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 459.459516][T11414] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1459'. [ 459.469673][T11414] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1459'. [ 459.487879][T11414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1459'. [ 459.616539][ T43] appletouch 5-1:0.85: Failed to request geyser raw mode [ 459.625471][ T43] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 459.625490][ T5887] em28xx 4-1:0.0: chip ID is em2860 [ 459.650744][ T43] usb 5-1: USB disconnect, device number 108 [ 459.669427][ T10] usb 6-1: USB disconnect, device number 92 [ 459.836394][ T1072] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 459.863058][T11423] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1462'. [ 459.873816][T11422] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1462'. [ 459.999182][ T1072] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 460.010741][ T1072] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 460.023170][ T1072] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 460.039748][ T1072] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 460.048985][ T1072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.058391][ T1072] usb 3-1: Product: syz [ 460.063152][ T1072] usb 3-1: Manufacturer: syz [ 460.067816][ T1072] usb 3-1: SerialNumber: syz [ 460.075530][ T1072] usb 3-1: config 0 descriptor?? [ 460.081396][T11416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.089269][T11416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 460.098755][ T1072] usb 3-1: ucan: probing device on interface #0 [ 460.274681][ T43] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 460.437644][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.448163][ T43] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 460.459047][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 460.468505][ T43] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 460.476877][ T43] usb 6-1: Manufacturer: syz [ 460.484656][ T43] usb 6-1: config 0 descriptor?? [ 460.497631][ T5887] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 460.507022][ T5887] em28xx 4-1:0.0: board has no eeprom [ 460.563559][ T983] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 460.584790][ T5887] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 460.592693][ T5887] em28xx 4-1:0.0: dvb set to bulk mode. [ 460.598488][ T10] em28xx 4-1:0.0: Binding DVB extension [ 460.611032][ T5887] usb 4-1: USB disconnect, device number 61 [ 460.636694][ T5887] em28xx 4-1:0.0: Disconnecting em28xx [ 460.686206][ T10] em28xx 4-1:0.0: Registering input extension [ 460.722796][ T9] usb 6-1: USB disconnect, device number 93 [ 460.742741][ T983] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.757697][ T1072] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 460.772836][ T983] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.789461][ T1072] usb 3-1: USB disconnect, device number 58 [ 460.796526][ T983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.805344][ T983] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 460.811349][ T10] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 460.814665][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.829828][ T10] Registered IR keymap rc-empty [ 460.838556][ T983] usb 5-1: config 0 descriptor?? [ 460.845123][ T10] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 460.865729][ T10] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input55 [ 460.879450][ T10] em28xx 4-1:0.0: Input extension successfully initialized [ 460.889085][ T5887] em28xx 4-1:0.0: Closing input extension [ 460.901415][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.908168][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.929765][ T5887] em28xx 4-1:0.0: Freeing device [ 461.047155][T11435] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 461.506176][ T983] usb 5-1: string descriptor 0 read error: -22 [ 461.721648][ T983] uclogic 0003:256C:006D.0076: interface is invalid, ignoring [ 461.882545][T11454] netlink: 'syz.5.1472': attribute type 4 has an invalid length. [ 461.888608][T11454] netlink: 'syz.5.1472': attribute type 4 has an invalid length. [ 461.888608][T11455] netlink: 'syz.5.1472': attribute type 4 has an invalid length. [ 461.964558][ T5960] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 462.137304][ T5960] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.147777][ T5960] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.158562][ T5960] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 462.167871][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 462.176426][ T5960] usb 4-1: SerialNumber: syz [ 462.189530][ T5960] usb 4-1: 0:2 : does not exist [ 462.545215][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.557353][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.619826][ T5960] usb 4-1: USB disconnect, device number 62 [ 462.809916][ T5887] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 462.983595][ T5887] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 462.992902][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.000900][ T5887] usb 3-1: Product: syz [ 463.005481][ T5887] usb 3-1: Manufacturer: syz [ 463.010205][ T5887] usb 3-1: SerialNumber: syz [ 463.151409][ T5960] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 463.238368][ T5887] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 463.250534][ T5887] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 463.261121][ T5887] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 463.274119][ T5887] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 463.287423][ T5887] usb 3-1: USB disconnect, device number 59 [ 463.313417][ T5960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.324262][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 463.336146][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 463.345901][ T5960] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 463.360212][ T5960] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 463.369587][ T5960] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 463.378055][ T5960] usb 6-1: Manufacturer: syz [ 463.385210][ T5960] usb 6-1: config 0 descriptor?? [ 463.461427][ T1072] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 463.531502][ T5887] usb 5-1: USB disconnect, device number 109 [ 463.623794][ T1072] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 463.639947][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.657016][ T1072] usb 4-1: config 0 descriptor?? [ 463.696674][ T5960] rc_core: IR keymap rc-hauppauge not found [ 463.702768][ T5960] Registered IR keymap rc-empty [ 463.711598][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 463.739596][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 463.762976][ T5960] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 463.778755][ T5960] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input56 [ 463.799849][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 463.835837][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 463.878857][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 463.903667][ T1072] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 463.921409][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 463.949902][T11480] random: crng reseeded on system resumption [ 463.956497][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 463.975409][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 464.030369][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 464.061000][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 464.091262][T11465] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1475'. [ 464.104019][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 464.124483][ T5960] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 464.137896][ T1072] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 464.147216][ T1072] [drm] Initialized udl on minor 2 [ 464.148324][ T5960] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 464.160872][ T5960] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 464.174826][T11483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1482'. [ 464.188970][ T5960] usb 6-1: USB disconnect, device number 94 [ 464.334437][ T1072] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 464.344281][ T1072] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 464.353621][ T5887] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 464.364409][ T1072] usb 4-1: USB disconnect, device number 63 [ 464.373576][ T5887] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 464.779396][T11489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.910408][T11494] netlink: 'syz.3.1486': attribute type 3 has an invalid length. [ 464.919307][T11494] netlink: 'syz.3.1486': attribute type 3 has an invalid length. [ 464.934305][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'. [ 464.945145][T11481] block nbd4: shutting down sockets [ 465.098460][ T1072] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 465.215289][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 465.263710][ T1072] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.283703][ T1072] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.294902][ T1072] usb 6-1: config 0 interface 0 has no altsetting 0 [ 465.301682][ T1072] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 465.312573][ T1072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.333755][ T1072] usb 6-1: config 0 descriptor?? [ 465.389593][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.402995][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.416042][ T43] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 465.428143][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.450227][ T43] usb 4-1: config 0 descriptor?? [ 465.527742][ T5960] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 465.675468][ T5960] usb 3-1: device descriptor read/64, error -71 [ 465.892165][ T43] hid_parser_main: 2 callbacks suppressed [ 465.892188][ T43] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0 [ 465.912036][ T43] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0 [ 465.919298][ T43] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0 [ 465.932274][ T43] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0 [ 465.939801][ T43] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0 [ 465.947840][ T5960] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 465.957413][ T43] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0 [ 465.966814][ T43] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0 [ 465.980535][ T43] cp2112 0003:10C4:EA90.0078: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 465.992408][ T1072] usb 6-1: string descriptor 0 read error: -22 [ 466.102846][ T5960] usb 3-1: device descriptor read/64, error -71 [ 466.119061][ T43] cp2112 0003:10C4:EA90.0078: Part Number: 0x00 Device Version: 0x00 [ 466.207762][ T1072] uclogic 0003:256C:006D.0077: interface is invalid, ignoring [ 466.232706][ T5960] usb usb3-port1: attempt power cycle [ 466.489332][ T43] cp2112 0003:10C4:EA90.0078: error requesting SMBus config [ 466.500893][ T43] cp2112 0003:10C4:EA90.0078: probe with driver cp2112 failed with error -71 [ 466.513964][ T43] usb 4-1: USB disconnect, device number 64 [ 466.594701][ T5960] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 466.605433][ T1072] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 466.616745][ T5960] usb 3-1: device descriptor read/8, error -71 [ 466.776481][ T1072] usb 5-1: Using ep0 maxpacket: 8 [ 466.783272][ T1072] usb 5-1: config index 0 descriptor too short (expected 57892, got 36) [ 466.791783][ T1072] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 466.800037][ T1072] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 466.809234][ T1072] usb 5-1: New USB device found, idVendor=05ac, idProduct=0334, bcdDevice= 0.00 [ 466.818323][ T1072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.829190][ T1072] usb 5-1: config 0 descriptor?? [ 466.872768][ T5960] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 466.894780][ T5960] usb 3-1: device descriptor read/8, error -71 [ 467.012725][ T5960] usb usb3-port1: unable to enumerate USB device [ 467.083608][T11525] kAFS: Can only specify source 'none' with -o dyn [ 467.095404][T11525] netlink: 6080 bytes leftover after parsing attributes in process `syz.3.1494'. [ 467.281293][T11528] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 467.283328][ T1072] usbhid 5-1:0.0: can't add hid device: -71 [ 467.297653][ T1072] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 467.314303][ T1072] usb 5-1: USB disconnect, device number 110 [ 467.546480][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 467.712007][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 467.721561][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.729967][ T43] usb 4-1: Product: syz [ 467.734278][ T43] usb 4-1: Manufacturer: syz [ 467.739242][ T43] usb 4-1: SerialNumber: syz [ 467.755077][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 467.775098][ T5960] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 467.945047][T11533] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1496'. [ 468.008648][ T1072] usb 4-1: USB disconnect, device number 65 [ 468.083369][ T43] usb 6-1: USB disconnect, device number 95 [ 468.374287][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 468.541286][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 468.554054][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.579970][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 468.590401][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.604581][ T9] usb 5-1: config 0 descriptor?? [ 468.714955][T11564] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1503'. [ 468.740267][T11564] 9pnet_fd: Insufficient options for proto=fd [ 468.832038][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 468.916383][ T983] usb 5-1: USB disconnect, device number 111 [ 468.938643][ T5960] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 468.945830][ T5960] ath9k_htc: Failed to initialize the device [ 468.960089][ T43] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 468.981186][ T1072] usb 4-1: ath9k_htc: USB layer deinitialized [ 468.990469][ T5887] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 469.142699][ T43] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 469.152129][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.161209][ T5887] usb 6-1: device descriptor read/64, error -71 [ 469.170238][ T43] usb 3-1: config 0 descriptor?? [ 469.179965][ T43] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 469.305532][T11585] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 469.314040][T11585] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1509'. [ 469.323759][T11585] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 469.331638][T11585] netlink: 'syz.3.1509': attribute type 2 has an invalid length. [ 469.353761][ T983] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 469.392872][ T43] gspca_cpia1: usb_control_msg 03, error -32 [ 469.401232][ T43] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 469.410463][ T43] gspca_cpia1: usb_control_msg 01, error -32 [ 469.417217][ T43] gspca_cpia1: usb_control_msg 01, error -32 [ 469.425785][ T43] gspca_cpia1: usb_control_msg 01, error -32 [ 469.433625][ T43] gspca_cpia1: usb_control_msg 01, error -32 [ 469.439327][ T5887] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 469.440946][ T43] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 469.515820][ T983] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.527027][ T983] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.537051][ T983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 469.543684][ T983] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 469.552970][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.563763][ T983] usb 5-1: config 0 descriptor?? [ 469.579472][ T5887] usb 6-1: device descriptor read/64, error -71 [ 469.634385][ T43] usb 3-1: USB disconnect, device number 64 [ 469.663858][ T1072] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 469.696349][ T5887] usb usb6-port1: attempt power cycle [ 469.714453][T11592] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 469.838622][ T1072] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.849027][ T1072] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.859266][ T1072] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 469.868464][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 469.876500][ T1072] usb 4-1: SerialNumber: syz [ 470.059508][ T5887] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 470.059533][ T43] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 470.081597][ T5887] usb 6-1: device descriptor read/8, error -71 [ 470.105531][ T1072] usb 4-1: 0:2 : does not exist [ 470.126498][ T1072] usb 4-1: USB disconnect, device number 66 [ 470.164108][T10246] udevd[10246]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.221279][ T983] usb 5-1: string descriptor 0 read error: -22 [ 470.244248][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.254725][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 470.265181][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.277992][ T43] usb 3-1: config 0 descriptor?? [ 470.289968][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 470.348358][ T5887] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 470.380936][ T5887] usb 6-1: device descriptor read/8, error -71 [ 470.452972][ T983] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0079/input/input57 [ 470.499459][ T5887] usb usb6-port1: unable to enumerate USB device [ 470.537019][ T983] uclogic 0003:256C:006D.0079: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 470.715719][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 470.725438][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 470.734384][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 470.742566][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 470.753068][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 470.761050][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 470.770002][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 470.777842][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 470.785946][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 470.794128][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 470.796524][T11598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1513'. [ 470.803033][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 471.036828][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 471.047219][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 471.058431][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 471.065628][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 471.078234][ T43] pwc: Registered as video103. [ 471.086281][ T5887] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 471.094929][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 471.122246][ T43] usb 3-1: USB disconnect, device number 65 [ 471.142326][ T43] [ 471.144730][ T43] ====================================================== [ 471.151776][ T43] WARNING: possible circular locking dependency detected [ 471.158826][ T43] syzkaller #0 Not tainted [ 471.163253][ T43] ------------------------------------------------------ [ 471.170275][ T43] kworker/1:1/43 is trying to acquire lock: [ 471.176167][ T43] ffff88801cab0220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 471.186712][ T43] [ 471.186712][ T43] but task is already holding lock: [ 471.194075][ T43] ffff88801cab0188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 471.204354][ T43] [ 471.204354][ T43] which lock already depends on the new lock. [ 471.204354][ T43] [ 471.214767][ T43] [ 471.214767][ T43] the existing dependency chain (in reverse order) is: [ 471.223782][ T43] [ 471.223782][ T43] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 471.231882][ T43] lock_acquire+0x120/0x360 [ 471.236932][ T43] down_write+0x96/0x1f0 [ 471.241718][ T43] kernfs_add_one+0x41/0x520 [ 471.246846][ T43] kernfs_create_dir_ns+0xde/0x130 [ 471.252507][ T43] internal_create_group+0x419/0x1110 [ 471.258407][ T43] cpuhp_invoke_callback+0x445/0x860 [ 471.264245][ T43] cpuhp_issue_call+0x430/0x7a0 [ 471.269648][ T43] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 471.276248][ T43] __cpuhp_setup_state+0x3f/0x60 [ 471.281722][ T43] do_one_initcall+0x236/0x820 [ 471.287010][ T43] do_initcall_level+0x104/0x190 [ 471.292476][ T43] do_initcalls+0x59/0xa0 [ 471.297330][ T43] kernel_init_freeable+0x334/0x4b0 [ 471.303056][ T43] kernel_init+0x1d/0x1d0 [ 471.307920][ T43] ret_from_fork+0x4bc/0x870 [ 471.313038][ T43] ret_from_fork_asm+0x1a/0x30 [ 471.318332][ T43] [ 471.318332][ T43] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 471.326177][ T43] [ 471.326177][ T43] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 471.333928][ T43] lock_acquire+0x120/0x360 [ 471.338969][ T43] cpus_read_lock+0x42/0x160 [ 471.344097][ T43] static_key_slow_inc+0x12/0x30 [ 471.349574][ T43] tcp_md5_do_add+0x21f/0x3a0 [ 471.354793][ T43] tcp_v4_parse_md5_keys+0x412/0x600 [ 471.360624][ T43] do_tcp_setsockopt+0x11dc/0x1f20 [ 471.366276][ T43] do_sock_setsockopt+0x17c/0x1b0 [ 471.371846][ T43] __x64_sys_setsockopt+0x13f/0x1b0 [ 471.377584][ T43] do_syscall_64+0xfa/0xfa0 [ 471.382621][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.389129][ T43] [ 471.389129][ T43] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 471.396789][ T43] lock_acquire+0x120/0x360 [ 471.401818][ T43] lock_sock_nested+0x48/0x100 [ 471.407135][ T43] inet_shutdown+0x6a/0x390 [ 471.412165][ T43] nbd_mark_nsock_dead+0x2e9/0x560 [ 471.417822][ T43] sock_shutdown+0x15e/0x260 [ 471.423057][ T43] nbd_config_put+0x342/0x790 [ 471.428281][ T43] nbd_release+0xfe/0x140 [ 471.433142][ T43] bdev_release+0x536/0x650 [ 471.438202][ T43] blkdev_release+0x15/0x20 [ 471.443247][ T43] __fput+0x44c/0xa70 [ 471.447769][ T43] task_work_run+0x1d4/0x260 [ 471.452895][ T43] exit_to_user_mode_loop+0xe9/0x130 [ 471.458711][ T43] do_syscall_64+0x2bd/0xfa0 [ 471.463837][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.470259][ T43] [ 471.470259][ T43] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 471.477928][ T43] lock_acquire+0x120/0x360 [ 471.482973][ T43] __mutex_lock+0x187/0x1350 [ 471.488103][ T43] nbd_queue_rq+0x257/0xf10 [ 471.493142][ T43] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 471.499220][ T43] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 471.506088][ T43] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 471.512599][ T43] blk_mq_run_hw_queue+0x348/0x4f0 [ 471.518237][ T43] blk_mq_dispatch_list+0xd0c/0xe00 [ 471.523967][ T43] blk_mq_flush_plug_list+0x469/0x550 [ 471.529873][ T43] __blk_flush_plug+0x3d3/0x4b0 [ 471.535254][ T43] __submit_bio+0x2d3/0x5a0 [ 471.540322][ T43] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 471.546494][ T43] block_read_full_folio+0x599/0x830 [ 471.552308][ T43] filemap_read_folio+0x117/0x380 [ 471.557891][ T43] do_read_cache_folio+0x350/0x590 [ 471.563554][ T43] read_part_sector+0xb6/0x2b0 [ 471.568845][ T43] adfspart_check_ICS+0xa4/0xa50 [ 471.574311][ T43] bdev_disk_changed+0x75f/0x14b0 [ 471.579873][ T43] blkdev_get_whole+0x380/0x510 [ 471.585263][ T43] bdev_open+0x31e/0xd30 [ 471.590045][ T43] blkdev_open+0x457/0x600 [ 471.595017][ T43] do_dentry_open+0x953/0x13f0 [ 471.600321][ T43] vfs_open+0x3b/0x340 [ 471.604924][ T43] path_openat+0x2ee5/0x3830 [ 471.610049][ T43] do_filp_open+0x1fa/0x410 [ 471.615094][ T43] do_sys_openat2+0x121/0x1c0 [ 471.620316][ T43] __x64_sys_openat+0x138/0x170 [ 471.625724][ T43] do_syscall_64+0xfa/0xfa0 [ 471.630765][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.637194][ T43] [ 471.637194][ T43] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 471.644430][ T43] lock_acquire+0x120/0x360 [ 471.649463][ T43] __mutex_lock+0x187/0x1350 [ 471.654599][ T43] nbd_queue_rq+0xc8/0xf10 [ 471.659551][ T43] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 471.665627][ T43] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 471.672487][ T43] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 471.679008][ T43] blk_mq_run_hw_queue+0x348/0x4f0 [ 471.684645][ T43] blk_mq_dispatch_list+0xd0c/0xe00 [ 471.690376][ T43] blk_mq_flush_plug_list+0x469/0x550 [ 471.696278][ T43] __blk_flush_plug+0x3d3/0x4b0 [ 471.701663][ T43] __submit_bio+0x2d3/0x5a0 [ 471.706728][ T43] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 471.712895][ T43] block_read_full_folio+0x599/0x830 [ 471.718709][ T43] filemap_read_folio+0x117/0x380 [ 471.724267][ T43] do_read_cache_folio+0x350/0x590 [ 471.729930][ T43] read_part_sector+0xb6/0x2b0 [ 471.735224][ T43] adfspart_check_ICS+0xa4/0xa50 [ 471.740688][ T43] bdev_disk_changed+0x75f/0x14b0 [ 471.746238][ T43] blkdev_get_whole+0x380/0x510 [ 471.751617][ T43] bdev_open+0x31e/0xd30 [ 471.756388][ T43] blkdev_open+0x457/0x600 [ 471.761336][ T43] do_dentry_open+0x953/0x13f0 [ 471.766638][ T43] vfs_open+0x3b/0x340 [ 471.771240][ T43] path_openat+0x2ee5/0x3830 [ 471.776387][ T43] do_filp_open+0x1fa/0x410 [ 471.781414][ T43] do_sys_openat2+0x121/0x1c0 [ 471.786825][ T43] __x64_sys_openat+0x138/0x170 [ 471.792225][ T43] do_syscall_64+0xfa/0xfa0 [ 471.797257][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.803680][ T43] [ 471.803680][ T43] -> #4 (set->srcu){.+.+}-{0:0}: [ 471.810816][ T43] lock_sync+0xba/0x160 [ 471.815525][ T43] __synchronize_srcu+0x96/0x3a0 [ 471.820998][ T43] elevator_switch+0x12b/0x640 [ 471.826314][ T43] elevator_change+0x315/0x4c0 [ 471.831615][ T43] elevator_set_default+0x186/0x260 [ 471.837342][ T43] blk_register_queue+0x34e/0x3f0 [ 471.842920][ T43] __add_disk+0x677/0xd50 [ 471.847794][ T43] add_disk_fwnode+0xfc/0x480 [ 471.853011][ T43] nbd_dev_add+0x717/0xae0 [ 471.857964][ T43] nbd_init+0x168/0x1f0 [ 471.862658][ T43] do_one_initcall+0x236/0x820 [ 471.867949][ T43] do_initcall_level+0x104/0x190 [ 471.873423][ T43] do_initcalls+0x59/0xa0 [ 471.878300][ T43] kernel_init_freeable+0x334/0x4b0 [ 471.884041][ T43] kernel_init+0x1d/0x1d0 [ 471.888912][ T43] ret_from_fork+0x4bc/0x870 [ 471.894032][ T43] ret_from_fork_asm+0x1a/0x30 [ 471.899330][ T43] [ 471.899330][ T43] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 471.907171][ T43] lock_acquire+0x120/0x360 [ 471.912203][ T43] __mutex_lock+0x187/0x1350 [ 471.917329][ T43] elevator_change+0x1e5/0x4c0 [ 471.922638][ T43] elevator_set_none+0x42/0xb0 [ 471.927935][ T43] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 471.934284][ T43] nbd_start_device+0x17f/0xb10 [ 471.939720][ T43] nbd_genl_connect+0x135b/0x18f0 [ 471.945291][ T43] genl_family_rcv_msg_doit+0x215/0x300 [ 471.951382][ T43] genl_rcv_msg+0x60e/0x790 [ 471.956421][ T43] netlink_rcv_skb+0x208/0x470 [ 471.961725][ T43] genl_rcv+0x28/0x40 [ 471.966238][ T43] netlink_unicast+0x82f/0x9e0 [ 471.971531][ T43] netlink_sendmsg+0x805/0xb30 [ 471.976829][ T43] __sock_sendmsg+0x21c/0x270 [ 471.982042][ T43] ____sys_sendmsg+0x505/0x830 [ 471.987333][ T43] ___sys_sendmsg+0x21f/0x2a0 [ 471.992544][ T43] __x64_sys_sendmsg+0x19b/0x260 [ 471.998011][ T43] do_syscall_64+0xfa/0xfa0 [ 472.003050][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.009471][ T43] [ 472.009471][ T43] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 472.018093][ T43] lock_acquire+0x120/0x360 [ 472.023137][ T43] blk_alloc_queue+0x538/0x620 [ 472.028429][ T43] __blk_mq_alloc_disk+0x15c/0x340 [ 472.034076][ T43] nbd_dev_add+0x46c/0xae0 [ 472.039027][ T43] nbd_init+0x168/0x1f0 [ 472.043718][ T43] do_one_initcall+0x236/0x820 [ 472.049017][ T43] do_initcall_level+0x104/0x190 [ 472.054484][ T43] do_initcalls+0x59/0xa0 [ 472.059345][ T43] kernel_init_freeable+0x334/0x4b0 [ 472.065080][ T43] kernel_init+0x1d/0x1d0 [ 472.069961][ T43] ret_from_fork+0x4bc/0x870 [ 472.075093][ T43] ret_from_fork_asm+0x1a/0x30 [ 472.080407][ T43] [ 472.080407][ T43] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 472.087641][ T43] lock_acquire+0x120/0x360 [ 472.092711][ T43] fs_reclaim_acquire+0x72/0x100 [ 472.098176][ T43] kmem_cache_alloc_noprof+0x45/0x6e0 [ 472.104080][ T43] __kernfs_iattrs+0xd9/0x320 [ 472.109282][ T43] kernfs_iop_setattr+0xea/0x3f0 [ 472.114844][ T43] notify_change+0xc1a/0xf40 [ 472.119977][ T43] do_truncate+0x1a4/0x220 [ 472.124919][ T43] path_openat+0x306c/0x3830 [ 472.130121][ T43] do_filp_open+0x1fa/0x410 [ 472.135150][ T43] do_sys_openat2+0x121/0x1c0 [ 472.140539][ T43] __x64_sys_openat+0x138/0x170 [ 472.145940][ T43] do_syscall_64+0xfa/0xfa0 [ 472.150975][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.157397][ T43] [ 472.157397][ T43] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 472.165926][ T43] validate_chain+0xb9b/0x2140 [ 472.171223][ T43] __lock_acquire+0xab9/0xd20 [ 472.176430][ T43] lock_acquire+0x120/0x360 [ 472.181468][ T43] down_write+0x96/0x1f0 [ 472.186238][ T43] kernfs_unlink_sibling+0x71/0x180 [ 472.191968][ T43] __kernfs_remove+0x353/0x570 [ 472.197264][ T43] kernfs_remove_by_name_ns+0xaf/0x130 [ 472.203251][ T43] sysfs_unmerge_group+0xd4/0x140 [ 472.208812][ T43] dpm_sysfs_remove+0x76/0xd0 [ 472.214022][ T43] device_del+0x251/0x8e0 [ 472.218903][ T43] device_unregister+0x20/0xc0 [ 472.224196][ T43] usb_pwc_disconnect+0xe2/0x160 [ 472.229664][ T43] usb_unbind_interface+0x26e/0x910 [ 472.235391][ T43] device_release_driver_internal+0x4d9/0x800 [ 472.241994][ T43] bus_remove_device+0x34d/0x410 [ 472.247480][ T43] device_del+0x511/0x8e0 [ 472.252455][ T43] usb_disable_device+0x3e9/0x8a0 [ 472.258017][ T43] usb_disconnect+0x330/0x950 [ 472.263224][ T43] hub_event+0x1cf5/0x4a20 [ 472.268175][ T43] process_scheduled_works+0xae1/0x17b0 [ 472.274256][ T43] worker_thread+0x8a0/0xda0 [ 472.279390][ T43] kthread+0x711/0x8a0 [ 472.283984][ T43] ret_from_fork+0x4bc/0x870 [ 472.289102][ T43] ret_from_fork_asm+0x1a/0x30 [ 472.294395][ T43] [ 472.294395][ T43] other info that might help us debug this: [ 472.294395][ T43] [ 472.304622][ T43] Chain exists of: [ 472.304622][ T43] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 472.304622][ T43] [ 472.319150][ T43] Possible unsafe locking scenario: [ 472.319150][ T43] [ 472.326602][ T43] CPU0 CPU1 [ 472.331966][ T43] ---- ---- [ 472.337331][ T43] lock(&root->kernfs_rwsem); [ 472.342110][ T43] lock(cpuhp_state_mutex); [ 472.349224][ T43] lock(&root->kernfs_rwsem); [ 472.356518][ T43] lock(&root->kernfs_iattr_rwsem); [ 472.361820][ T43] [ 472.361820][ T43] *** DEADLOCK *** [ 472.361820][ T43] [ 472.369976][ T43] 8 locks held by kworker/1:1/43: [ 472.374998][ T43] #0: ffff88801de84948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 472.386332][ T43] #1: ffffc90000b37ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 472.398184][ T43] #2: ffff888144f3b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 472.407078][ T43] #3: ffff88802fbeb198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 472.416243][ T43] #4: ffff88807c1e9160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 472.426792][ T43] #5: ffff8880303b0a90 (&pdev->vb_queue_lock){+.+.}-{4:4}, at: usb_pwc_disconnect+0x50/0x160 [ 472.437087][ T43] #6: ffff8880303b0a00 (&pdev->v4l2_lock){+.+.}-{4:4}, at: usb_pwc_disconnect+0x61/0x160 [ 472.447028][ T43] #7: ffff88801cab0188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 472.457750][ T43] [ 472.457750][ T43] stack backtrace: [ 472.463642][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 472.463665][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 472.463679][ T43] Workqueue: usb_hub_wq hub_event [ 472.463700][ T43] Call Trace: [ 472.463709][ T43] [ 472.463718][ T43] dump_stack_lvl+0x189/0x250 [ 472.463739][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.463757][ T43] ? __pfx__printk+0x10/0x10 [ 472.463774][ T43] ? print_lock_name+0xde/0x100 [ 472.463802][ T43] print_circular_bug+0x2ee/0x310 [ 472.463832][ T43] check_noncircular+0x134/0x160 [ 472.463861][ T43] validate_chain+0xb9b/0x2140 [ 472.463896][ T43] __lock_acquire+0xab9/0xd20 [ 472.463921][ T43] ? kernfs_unlink_sibling+0x71/0x180 [ 472.463943][ T43] lock_acquire+0x120/0x360 [ 472.463964][ T43] ? kernfs_unlink_sibling+0x71/0x180 [ 472.463991][ T43] down_write+0x96/0x1f0 [ 472.464016][ T43] ? kernfs_unlink_sibling+0x71/0x180 [ 472.464038][ T43] ? __pfx_down_write+0x10/0x10 [ 472.464061][ T43] ? kernfs_root+0x1c/0x230 [ 472.464078][ T43] ? kernfs_root+0x1c/0x230 [ 472.464096][ T43] ? kernfs_root+0x1ea/0x230 [ 472.464112][ T43] kernfs_unlink_sibling+0x71/0x180 [ 472.464136][ T43] __kernfs_remove+0x353/0x570 [ 472.464159][ T43] kernfs_remove_by_name_ns+0xaf/0x130 [ 472.464181][ T43] sysfs_unmerge_group+0xd4/0x140 [ 472.464201][ T43] dpm_sysfs_remove+0x76/0xd0 [ 472.464224][ T43] device_del+0x251/0x8e0 [ 472.464246][ T43] ? __pfx_device_del+0x10/0x10 [ 472.464264][ T43] ? kobject_put+0x43f/0x480 [ 472.464289][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 472.464314][ T43] device_unregister+0x20/0xc0 [ 472.464334][ T43] usb_pwc_disconnect+0xe2/0x160 [ 472.464365][ T43] usb_unbind_interface+0x26e/0x910 [ 472.464392][ T43] ? __pfx_usb_unbind_interface+0x10/0x10 [ 472.464416][ T43] device_release_driver_internal+0x4d9/0x800 [ 472.464445][ T43] bus_remove_device+0x34d/0x410 [ 472.464474][ T43] device_del+0x511/0x8e0 [ 472.464493][ T43] ? __pm_runtime_barrier+0x212/0x460 [ 472.464514][ T43] ? __pfx_device_del+0x10/0x10 [ 472.464537][ T43] ? __pfx___mutex_lock+0x10/0x10 [ 472.464562][ T43] usb_disable_device+0x3e9/0x8a0 [ 472.464582][ T43] usb_disconnect+0x330/0x950 [ 472.464611][ T43] hub_event+0x1cf5/0x4a20 [ 472.464638][ T43] ? do_raw_spin_lock+0x121/0x290 [ 472.464657][ T43] ? register_lock_class+0x51/0x320 [ 472.464685][ T43] ? __pfx_hub_event+0x10/0x10 [ 472.464702][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 472.464729][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.464747][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 472.464770][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 472.464794][ T43] process_scheduled_works+0xae1/0x17b0 [ 472.464829][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.464860][ T43] worker_thread+0x8a0/0xda0 [ 472.464893][ T43] kthread+0x711/0x8a0 [ 472.464911][ T43] ? __pfx_worker_thread+0x10/0x10 [ 472.464935][ T43] ? __pfx_kthread+0x10/0x10 [ 472.464953][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.464971][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.464990][ T43] ? __pfx_kthread+0x10/0x10 [ 472.465007][ T43] ret_from_fork+0x4bc/0x870 [ 472.465031][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 472.465056][ T43] ? __switch_to_asm+0x39/0x70 [ 472.465076][ T43] ? __switch_to_asm+0x33/0x70 [ 472.465095][ T43] ? __pfx_kthread+0x10/0x10 [ 472.465111][ T43] ret_from_fork_asm+0x1a/0x30 [ 472.465138][ T43] [ 472.840905][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 472.849860][ T5887] usb 4-1: not running at top speed; connect to a high speed hub [ 472.859234][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.870118][ T5887] usb 4-1: config 0 has no interfaces? [ 472.878346][ T5887] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.887903][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.896708][ T5887] usb 4-1: Product: syz [ 472.901076][ T5887] usb 4-1: Manufacturer: syz [ 472.906724][ T5887] usb 4-1: SerialNumber: syz [ 472.967408][ T1072] usb 5-1: USB disconnect, device number 112 [ 473.008982][ T5887] usb 4-1: config 0 descriptor?? [ 473.244497][ T1072] usb 4-1: USB disconnect, device number 67