last executing test programs: 1m58.819384493s ago: executing program 0 (id=755): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x2, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}], "", ['\x00']}, 0x158) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x90, 0x0, 0x38, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7b}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x73, 0xc5, "8a5a05b6c599e3be61d663961ce663d05e27bcd06f2cc92802d877875f655a7bccc825fe6f180d9cb3a6fa7664fa4ab562a4278915a9d35babc4ae83a6036dd7e8004ccb60d99257b4d3d9e119ec54563ce305a97da7d5e079e40314447126170a7704c4fcb1ee69c1ec0d2b9a1837"}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004006d}, 0x800) 1m58.665772389s ago: executing program 0 (id=756): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'vxcan1\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x2}}) 1m58.546667833s ago: executing program 0 (id=757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000002000000010000000900010073797a310000000040000000030a01020000000000000000010000000908030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000400000000010900010073797a31"], 0xc4}}, 0x8800) 1m58.458721593s ago: executing program 0 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) fanotify_mark(r1, 0x1, 0x40000020, r0, &(0x7f00000000c0)='./file0\x00') pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="000200"}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x8, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe0fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x47f0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x1, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000580)={'syz1\x00', {0x9, 0x8, 0x5, 0x2}, 0x2c, [0x5, 0x5, 0x1, 0x9, 0x3, 0x0, 0x5, 0x0, 0x7, 0xa34, 0x6, 0x7fffffff, 0x8, 0x18, 0xc, 0x7fff, 0x9, 0x7, 0x21a, 0x9, 0x3, 0x7fffffff, 0x1, 0xa, 0x5, 0xfffffffe, 0x5, 0x7, 0x400, 0x0, 0x3, 0x800, 0x9, 0xffff, 0x2, 0x8, 0x6, 0x7fff, 0x8, 0xfffffffe, 0x0, 0x4, 0x9, 0x49, 0x7, 0x3, 0xfffffeab, 0x0, 0x2, 0x21, 0x6, 0x4, 0x5, 0x7fffffff, 0x8, 0xa, 0xc, 0x6, 0x7000, 0x200, 0x1, 0x4, 0x1, 0x1b0f], [0x0, 0x4, 0x20007fff, 0x7, 0x9, 0x6, 0x5, 0x10000, 0xa, 0x10, 0x2, 0x3, 0x8, 0x3, 0x8d8f, 0x8, 0x7, 0xff, 0x9, 0x8, 0x3, 0x10, 0x1, 0x800, 0x2, 0xb, 0xe, 0x401, 0x1, 0x6, 0x401, 0x8000, 0x2, 0x4, 0x1, 0x8, 0x2, 0x100, 0x1, 0x73, 0x8, 0x0, 0xe, 0x7, 0x5, 0x2, 0x1076, 0x3, 0x9, 0x6e37663b, 0x7, 0x7, 0x3, 0x8, 0x0, 0x6, 0x6, 0x8000, 0x0, 0x5, 0x7, 0xa, 0x1, 0x1], [0x7510e92a, 0x80000001, 0x8115, 0x0, 0x2, 0x5344, 0x3, 0x5, 0x4, 0x3, 0x401, 0x4, 0x3, 0x986, 0x0, 0x7f, 0xf, 0x5, 0x9, 0x3, 0x10000, 0x5, 0x0, 0x4, 0x3, 0x75, 0x31fa, 0x4, 0x17, 0x4, 0x4, 0x0, 0x4, 0x5, 0x4, 0x7, 0x7e79, 0xedd1, 0x8, 0x9, 0x3, 0x8, 0xffff, 0x3, 0x200000, 0x6, 0x6, 0xfffffff7, 0x1000, 0x9, 0x1, 0x2, 0x0, 0x3, 0x1ff, 0xff, 0xc, 0x0, 0x6, 0xff, 0x25, 0x81, 0xffff7fff, 0x64], [0x16, 0x1, 0x2, 0x8000, 0x4, 0x5, 0x9, 0xfff, 0x3, 0x9, 0x0, 0x38, 0x4, 0x4, 0x2, 0x103, 0xa80, 0x8, 0x6, 0x6, 0xaf, 0xfffffff9, 0xa1d, 0x1c, 0x0, 0x5, 0x17, 0x40, 0x2, 0x4, 0x7, 0x0, 0x5, 0x10, 0x2, 0x2e6, 0xfff, 0x8, 0x6, 0x400, 0x6, 0x9, 0xa70110d2, 0x9, 0xffffffff, 0x1, 0x80000001, 0x80000001, 0x1, 0x1e, 0x2, 0xff, 0x80, 0x8, 0x2, 0x3168, 0xa, 0x1, 0x7e, 0x8, 0x0, 0x5, 0xc4312da, 0x4]}, 0x45c) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000000)) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r8, 0x0, 0x4004) fsopen(&(0x7f0000000540)='rootfs\x00', 0x1) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x10001, r8}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x0, 0x5, 0x6}) 1m58.258788915s ago: executing program 0 (id=759): socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x3}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r0, {0x7}}, './file5\x00'}) write$UHID_CREATE2(r1, &(0x7f0000000cc0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x32, 0x8001, 0xfff, 0x10000000, 0xf6f5, 0x140, "838876d55042f4e236be92fdbe0e0495eb2bac423d70f74530d5253c89630fb0ef853b65030867481b412572eb85ac5fb59b"}}, 0x14a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x164) r5 = fanotify_init(0x2, 0x1000) fanotify_mark(r5, 0x541, 0x1000, r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) 1m57.918562255s ago: executing program 0 (id=760): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x4000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)={0x0, 0x4, [0x5]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fanotify_init(0x8, 0x400) rt_sigaction(0x13, &(0x7f0000000040)={0x0, 0x44000007, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000080)) write$binfmt_elf64(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4622000005"], 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)={0x34, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x4, 0x117}, @nested={0x4, 0x145}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 1m57.680724442s ago: executing program 32 (id=760): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x4000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)={0x0, 0x4, [0x5]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fanotify_init(0x8, 0x400) rt_sigaction(0x13, &(0x7f0000000040)={0x0, 0x44000007, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000080)) write$binfmt_elf64(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4622000005"], 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)={0x34, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x4, 0x117}, @nested={0x4, 0x145}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 6.546302907s ago: executing program 3 (id=1440): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '/dev/comedi3\x00'}], 0xa, "012bb77abc69ef5e33dd5052c3079da4fba3583073ae296d3e9f61667550521546a6a7d4f87e1066b34479a1358cc14e1b478c64a0221a226739df6cc0fe17142b0d1252d74fb72d0a9fc8532625742d95efb669a1d7a0e1d3811a1bb3d8a6424a5067cdca03a84b504183a661f621a28945276a8dc8de61823ef2ee371440f3b83ef81924f9f35108ffb9f9c4133be53cd0993757ec1937b0a95f1fe50d52714b2b4f18a37b52be9d"}, 0xc2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x106afc11c5ea039, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xffff, 0xfff, 0x3, 0x3, 0x400, 0x2, 0x1600, 0x1, 0x1e7, 0x9, 0xe1cb, 0x6, 0x4, 0x0, 0x4, 0x1, 0xfffffffe, 0x40b, 0xfffffff5, 0xffffead7, 0x3, 0x3c, 0xfffffffa, 0xffffff6a, 0x8000000, 0xdffffffa]}) 6.190568668s ago: executing program 3 (id=1443): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r2, &(0x7f0000000100)=""/67, 0x43) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 3.133470349s ago: executing program 3 (id=1457): socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x32, 0x1, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x3, 0x3, 0xb14]}, {0x0, @struct={0x7, 0x3}, 0x0, 0x2, 0x3ff, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x6a, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x901, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {0x7}}, './file5\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x4, 0xc, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000540)=ANY=[@ANYRES16=r0], 0x17c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r9, 0x402, 0x1a) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x164) r11 = fanotify_init(0x2, 0x1000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r13 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r13, &(0x7f0000000080)={0xa, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r13, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80) fanotify_mark(r11, 0x541, 0x1000, r10, 0x0) r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r14, 0xc08c5336, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00'}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 2.120431033s ago: executing program 3 (id=1460): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0xffffffffffffffd1, 0x100, 0x0, {}, {0x0, 0xc, 0x0, 0x8, 0x0, 0x0, "34460e34"}, 0x0, 0x1, {0x0}, 0x6}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfffffffd}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000040)='ubifs\x00', 0x218002, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' 7\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000046000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000c00900094040000000000000c0090000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x4000004) 2.02591439s ago: executing program 3 (id=1461): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a48000000060a0b040000000000000000020000001c00049041000000080001406c6f67000c00028008000640000000cc0900010073797a30000000000900020073797a2200000000140000001100010000000000000000000500000a"], 0x70}}, 0x40) 1.874520232s ago: executing program 3 (id=1463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='1'}]}]}, 0x24}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0600be001e9500000a000600ffffffffffff0000081797a8fb76091dedded6370dd557da9cbb6848d78cbaa2c8e44cd6197a12d6a6108ad48abc794912074f84f0ca71b61069ca2390dd5cb346a797c7c88319de199a1db0bd80af562a743122f6fa1f281f8852ffc8cae6"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x48000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000102f170105000000000001090224000100000000090400020103000300092100000001db4c238ad02d2203000905810300048100fc35c31fabea78417d8548d90dd21f3d03652d0b42a313abfcde7a131d192750b42970c688e8ec48fab15009030b8c4b3c315a88662376076be5828adea85d9881e5fb168d"], 0x0) (async) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000102f170105000000000001090224000100000000090400020103000300092100000001db4c238ad02d2203000905810300048100fc35c31fabea78417d8548d90dd21f3d03652d0b42a313abfcde7a131d192750b42970c688e8ec48fab15009030b8c4b3c315a88662376076be5828adea85d9881e5fb168d"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000100)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="400109", @ANYRESDEC=r4], 0x0, 0x0, 0x0}, 0x0) 1.588573199s ago: executing program 1 (id=1468): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000080)={0xffffffffffffffff, 0x60}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18f2b629d495e27635ffa90400000010ca45aec0c29ba9188edbaf4804e82200100044db23f9e797d89eb8f98a885e0ee8ee", @ANYRES16=r3, @ANYBLOB="010004000000000000000900000004000380"], 0x18}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x128, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002600000010000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.457303452s ago: executing program 1 (id=1469): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.443226948s ago: executing program 1 (id=1470): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000540)={0x5, 0x3, {0x5, @usage=0x6, 0x0, 0xe797, 0x101, 0xff, 0xffffffff, 0x4, 0x0, @struct={0xff, 0x1}, 0x1, 0x9, [0x100000000, 0x4bce, 0xfffffffffffffffd, 0x91, 0x8, 0x1ff]}, {0x9, @usage=0x3, 0x0, 0x8, 0x768, 0x80000000, 0x100000000, 0xfffffffffffffff9, 0xd0, @usage=0x7, 0x199, 0x7fff, [0xd, 0x1, 0x6, 0x2, 0x9, 0xc]}, {0x9, @struct={0x3, 0x5}, 0x0, 0xffff, 0x6, 0x8, 0x0, 0x81, 0x400, @usage=0xfffffffffffffc01, 0x9, 0xa, [0x3ff, 0x7974ed0a, 0x7, 0x4, 0xfb]}, {0x6, 0xffffffff, 0x7fffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, r1, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x3}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0xf, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x7}}, './file5\x00'}) write$UHID_CREATE2(r3, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001980ca4dbae81000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064000180ff0f000000000010f5f6000040010000838876d55042f4e236be92fdbe0e0495eb2bac423d70f74530d5253c89630fb0ef853b65030867481b412572eb85ac5fb59b83ed635f11f52f365cb9d1973a4ed21fb0c84363a0e816c359b36508e00e64ceec60f31bc8fa0f1028d5b7efb449ed5bb6e2"], 0x17c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101000) fcntl$notify(r5, 0x402, 0x1a) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000080)={0x6, 0x6}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x164) r7 = fanotify_init(0x2, 0x1000) fanotify_mark(r7, 0x541, 0x1000, r6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) 1.303452487s ago: executing program 1 (id=1471): r0 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed00"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000003"], 0x35) 1.126501797s ago: executing program 2 (id=1473): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.117245325s ago: executing program 2 (id=1474): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') preadv(r0, 0x0, 0x0, 0xc002a0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4627, 0xfdffdffd, @local, 0x7}, 0x1c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0xe703000000000000) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 901.974892ms ago: executing program 2 (id=1477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000420000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket(0x2a, 0x2, 0x5) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 856.161129ms ago: executing program 2 (id=1479): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000040)) epoll_create1(0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000040)) (async) 750.277436ms ago: executing program 2 (id=1481): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 738.303803ms ago: executing program 4 (id=1482): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 672.905377ms ago: executing program 1 (id=1483): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0x1, 0x1, "cc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 672.483615ms ago: executing program 2 (id=1484): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r1, 0x0, 0x70) r3 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000100)) timer_create(0x0, &(0x7f00000004c0)={0x0, 0x21, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x4]}, 0x8, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x90, r6, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x9}, {0x10, 0x5}, {0x7, 0x2}, {0x4}, {0x1, 0x5}, {0x53, 0x7}, {0x9, 0x4}, {0x7, 0x2}, {0x2}, {0xf8, 0x5}, {0xff, 0x3}, {0x7, 0x4}, {0xf6, 0x5}, {0x1, 0x1}], "2536709cb648a48c"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x0, 0x2}, {0x8, 0x7}], "827c602942e84bf5"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x6, 0x2}, {0x8a}, {0x4, 0x3}, {0x6, 0x1}, {0xd8}, {0x78, 0x5}, {0x0, 0x4}, {0x80, 0x2}, {0x4}, {0xfe, 0x4}, {0x1d, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x7, 0x7}, {0x8, 0x5}, {0x8}, {0x6, 0x6}], "561b51c7783e5e13"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "af25381586637a09"}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a00154001", 0x21}], 0x1}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000000)=0x1) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xfffd, 0xfff, 0x3, 0x3, 0x3ff, 0x2, 0x1600, 0x1, 0x1e7, 0x9, 0xe1cb, 0x6, 0x4, 0x0, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffff5, 0xffffead7, 0x3, 0x3c, 0xfffffffa, 0x4, 0x8000000, 0xdffffffa]}) 618.635691ms ago: executing program 4 (id=1485): ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8080) 573.741721ms ago: executing program 4 (id=1486): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2a00cda2, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000005c0)="79c3209e7155f1486d8a9694c721f02f88b28a4c5eb15e511cb7b3ddc5bd912c295e03214373846f1cedd6ef16fbe5137c3efc9d1f488273f6378cf51910db6b5c8d0dba124f9542d0a8490d2afc292aef58aa470f58de56d0c96984d603f30c4ae5bf13dd710054e98a00aced24af568fa7884dd291f5eba0e96060cd27ea016f507e1f62a10c9df257091495e9fdbcf3065a3054e22856c4547d0f20b8ca82f3cf2d9f6047e81d1a204cf84c36679da2fe83ef72a63edcfcfb86bf2ca930a314cb499f43bd7cb82f71b4cd3fd5e6ded3118f84d9cdd3768b54f8508d86d4", 0xdf}, {&(0x7f00000003c0)="f466e43b7f96f35a94fda4b8e7ae87a9b11c9232e7f3560bc482bd6fef76558a07852f8523e13c443fdf4d5a83fb119fe8e608742a40fd85a6f2034fea79f933b5b2ef9e7c2e3cbe6820e65cf37f41a38539b8fd285aef043c038ea24cb1d19d891971bdcc6c8739199df263c597f48c6d601ed7a84c29ef162e8223d616f8da0a2afeb20b17d38cbff9bb41dd2fd7", 0x8f}, {&(0x7f0000000240)="15de007dea0515d409dab58063bb88813b4fe2c7789ac8a85b07010000a33eb0d1010dc384fe6abe8c2ecc1d5d3bbe1d70f7300d3b076672128ce5c424a9605d4ea686706814f6b674513e6eec0d05b84124d7042c9e1df79a314d0958af644e02f29f", 0x63}, {&(0x7f00000004c0)="bcbfd7d70670777d2de1524d267b0f75bad482e2cf0473371871413c33bd9c264e7b8bb03d7fa418f570ae24f19fa3eca6dbdc7ac66a48a804a223d802c269891c01ce6f330293c6cf62ba4b7d3b45e0187be1a1513bee4e4473134a9d77e024b2bdcfc4c5af3bbe2aba", 0x6a}, {&(0x7f0000000000)="44ef4fa718d8f9d93afa143068d80c967e027ad9158be25ceb283602e0171ccf18d26c3ed447b78e1976fba5da53e5c719f7e393e962fc", 0x37}, {&(0x7f00000006c0)="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", 0xd8e}], 0x6) close(r0) 460.630968ms ago: executing program 4 (id=1487): socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x3}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r0, {0x7}}, './file5\x00'}) write$UHID_CREATE2(r1, &(0x7f0000000cc0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x64, 0x8001, 0xfff, 0x10000000, 0xf6f5, 0x140, "838876d55042f4e236be92fdbe0e0495eb2bac423d70f74530d5253c89630fb0ef853b65030867481b412572eb85ac5fb59b83ed635f11f52f365cb9d1973a4ed21fb0c84363a0e816c359b36508e00e64ceec60f31bc8fa0f1028d5b7efb449ed5bb6e2"}}, 0x17c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x164) r5 = fanotify_init(0x2, 0x1000) fanotify_mark(r5, 0x541, 0x1000, r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x200000000000000) 198.527535ms ago: executing program 4 (id=1488): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 162.405089ms ago: executing program 4 (id=1489): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e15da"], 0x18, 0x91}, 0x404c880) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x62cf5175) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000be6000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x7c, {"b805000000440f20c03509000000440f22c00f01c181038000c0fe0f01cf2e66410fda3fc4a1c961643de5f30faec6f30f09c744240200480000c7442406000000000f011c24c7442400db000000c744240209000000ff2c24b9800000c00f32c40212f5a3050000000f30"}}], 0x7c}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24004880) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="603b429ee6d5"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x2000fb) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000680)="80c8", 0x2}], 0x1) 0s ago: executing program 1 (id=1490): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): USB disconnect, device number 46 [ 226.980950][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 226.986787][ T43] usb 2-1: too many configurations: 144, using maximum allowed: 8 [ 226.996711][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 227.005844][ T43] usb 2-1: can't read configurations, error -61 [ 227.013184][ T43] usb usb2-port1: attempt power cycle [ 227.040275][ T8992] netlink: 44 bytes leftover after parsing attributes in process `syz.4.927'. [ 227.049356][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.927'. [ 227.331039][ T5911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 227.361087][ T43] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 227.391732][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 227.398204][ T43] usb 2-1: too many configurations: 144, using maximum allowed: 8 [ 227.409881][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 227.418152][ T43] usb 2-1: can't read configurations, error -61 [ 227.438975][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.449512][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.481104][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 227.488261][ T5911] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.500091][ T5911] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.511099][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.517723][ T5911] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 227.526819][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.538574][ T5911] usb 5-1: config 0 descriptor?? [ 227.551056][ T43] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 227.571629][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 227.577429][ T43] usb 2-1: too many configurations: 144, using maximum allowed: 8 [ 227.587493][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 227.595220][ T43] usb 2-1: can't read configurations, error -61 [ 227.602272][ T43] usb usb2-port1: unable to enumerate USB device [ 227.681058][ T5832] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 227.810948][ T5832] usb 4-1: device descriptor read/64, error -71 [ 227.958442][ T5911] glorious 0003:258A:0033.0012: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 228.061897][ T5832] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 228.169794][ T5911] usb 5-1: USB disconnect, device number 8 [ 228.201343][ T5832] usb 4-1: device descriptor read/64, error -71 [ 228.311233][ T5832] usb usb4-port1: attempt power cycle [ 228.651083][ T5832] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 228.671676][ T5832] usb 4-1: device descriptor read/8, error -71 [ 228.911417][ T5832] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 228.942599][ T5832] usb 4-1: device descriptor read/8, error -71 [ 229.061007][ T5832] usb usb4-port1: unable to enumerate USB device [ 229.166238][ T5832] kernel read not supported for file /vcs (pid: 5832 comm: kworker/0:3) [ 229.441284][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 229.600961][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 229.620280][ T9023] netlink: 44 bytes leftover after parsing attributes in process `syz.2.937'. [ 229.625683][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 229.629531][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.937'. [ 229.659266][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 229.681578][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 229.704471][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 229.726080][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.747377][ T9] usb 2-1: Product: syz [ 229.753457][ T9] usb 2-1: Manufacturer: syz [ 229.761014][ T9] usb 2-1: SerialNumber: syz [ 229.779483][ T9] usb 2-1: config 0 descriptor?? [ 229.799230][ T9015] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.834392][ T9] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 229.840525][ T9] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 229.853563][ T9] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 229.860021][ T9] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 229.872287][ T9] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 230.030574][ T798] usb 2-1: USB disconnect, device number 63 [ 230.040944][ T5911] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 230.052321][ T798] mcba_usb 2-1:0.0 can0: device disconnected [ 230.194672][ T5911] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 230.220910][ T5911] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 230.230024][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.268575][ T5911] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 230.527201][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.581319][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.816727][ T9056] netlink: 'syz.1.944': attribute type 4 has an invalid length. [ 230.901229][ T984] lo speed is unknown, defaulting to 1000 [ 230.907162][ T984] s9z0: Port: 1 Link DOWN [ 230.929211][ T9056] netlink: 'syz.1.944': attribute type 4 has an invalid length. [ 230.933762][ T9059] netlink: 44 bytes leftover after parsing attributes in process `syz.2.946'. [ 230.950404][ T43] lo speed is unknown, defaulting to 1000 [ 230.967552][ T9060] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 230.975851][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.946'. [ 230.987535][ T43] s9z0: Port: 1 Link ACTIVE [ 230.999991][ T5905] lo speed is unknown, defaulting to 1000 [ 231.017686][ T9060] hfsplus: unable to find HFS+ superblock [ 231.363300][ T5911] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 231.574825][ T5911] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 231.583979][ T9082] kvm: pic: single mode not supported [ 231.584235][ T9082] kvm: pic: non byte read [ 231.603254][ T5911] stv0680 5-1:4.0: last error: 132, command = 0x14 [ 231.623092][ T9082] kvm: pic: non byte read [ 231.628660][ T9082] kvm: pic: non byte read [ 231.641384][ T5911] usb 5-1: USB disconnect, device number 9 [ 231.641921][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 231.739694][ T9082] netlink: 72 bytes leftover after parsing attributes in process `syz.3.952'. [ 231.790273][ T9093] overlay: Unknown parameter 'subj_user' [ 232.169271][ T9110] netlink: 44 bytes leftover after parsing attributes in process `syz.1.957'. [ 232.208161][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.957'. [ 232.930978][ T5832] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 233.094212][ T5832] usb 4-1: config 5 has an invalid interface number: 66 but max is 2 [ 233.102497][ T5832] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 233.112694][ T5832] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 233.122439][ T5832] usb 4-1: config 5 has no interface number 0 [ 233.128577][ T5832] usb 4-1: config 5 interface 66 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 233.140045][ T798] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 233.147817][ T5832] usb 4-1: config 5 interface 66 altsetting 255 bulk endpoint 0xD has invalid maxpacket 1024 [ 233.158699][ T5832] usb 4-1: config 5 interface 66 altsetting 255 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 233.170937][ T5832] usb 4-1: config 5 interface 66 altsetting 255 has a duplicate endpoint with address 0x6, skipping [ 233.181972][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 233.189663][ T5832] usb 4-1: config 5 interface 66 has no altsetting 0 [ 233.198819][ T5832] usb 4-1: New USB device found, idVendor=03eb, idProduct=7613, bcdDevice=b3.1b [ 233.208100][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.216246][ T5832] usb 4-1: Product: Ѝ [ 233.220419][ T5832] usb 4-1: Manufacturer: И [ 233.225502][ T5832] usb 4-1: SerialNumber: и [ 233.233302][ T9130] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 233.302813][ T798] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 233.311857][ T798] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.322366][ T798] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.331516][ T798] usb 5-1: config 1 has no interface number 0 [ 233.337892][ T798] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 233.348678][ T798] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 233.362129][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 233.371519][ T9] usb 2-1: descriptor type invalid, skip [ 233.377492][ T798] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.386621][ T9] usb 2-1: descriptor type invalid, skip [ 233.392593][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.400654][ T798] usb 5-1: Product: syz [ 233.404924][ T9] usb 2-1: descriptor type invalid, skip [ 233.410596][ T9] usb 2-1: descriptor type invalid, skip [ 233.416317][ T798] usb 5-1: Manufacturer: syz [ 233.422494][ T798] usb 5-1: SerialNumber: syz [ 233.427806][ T9] usb 2-1: config 1 interface 0 altsetting 175 bulk endpoint 0x1 has invalid maxpacket 64 [ 233.439076][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 233.455956][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.468603][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.476982][ T9] usb 2-1: Product: syz [ 233.486127][ T9] usb 2-1: Manufacturer: syz [ 233.492289][ T5832] usb 4-1: USB disconnect, device number 51 [ 233.500347][ T9] usb 2-1: SerialNumber: syz [ 233.514779][ T9137] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 233.669977][ T798] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 233.684329][ T798] usb 5-1: USB disconnect, device number 10 [ 233.735048][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.744283][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.756641][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.766361][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.788461][ T9] usb 2-1: USB disconnect, device number 64 [ 234.478536][ T9151] netlink: 44 bytes leftover after parsing attributes in process `syz.1.969'. [ 234.487710][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.969'. [ 234.826000][ T9168] fuse: Unknown parameter '' [ 235.121779][ T9167] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 235.129558][ T9167] netlink: 228 bytes leftover after parsing attributes in process `syz.3.972'. [ 235.306572][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 235.471541][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 235.532187][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 235.784887][ T9202] netlink: 44 bytes leftover after parsing attributes in process `syz.3.980'. [ 235.799824][ T9202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.980'. [ 236.072521][ T798] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.241223][ T5832] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 236.271448][ T798] usb 5-1: Using ep0 maxpacket: 8 [ 236.283536][ T798] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 236.306829][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.315164][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 236.315271][ T798] usb 5-1: Product: syz [ 236.328426][ T798] usb 5-1: Manufacturer: syz [ 236.344078][ T798] usb 5-1: SerialNumber: syz [ 236.357058][ T798] usb 5-1: config 0 descriptor?? [ 236.371392][ T798] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 236.432051][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 236.443918][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.463253][ T5832] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 236.491885][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.521392][ T5832] usb 4-1: config 0 descriptor?? [ 236.584213][ T9234] netlink: 156 bytes leftover after parsing attributes in process `syz.1.988'. [ 236.685867][ T5835] block nbd0: Receive control failed (result -32) [ 236.930722][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.939855][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.030933][ T43] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 237.157424][ T5832] hid-led 0003:1D34:000A.0013: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 237.189694][ T5832] hid-led 0003:1D34:000A.0013: Dream Cheeky Webmail Notifier initialized [ 237.201003][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 237.219715][ T43] usb 2-1: config 40 has an invalid interface number: 140 but max is 0 [ 237.235207][ T43] usb 2-1: config 40 has no interface number 0 [ 237.243055][ T43] usb 2-1: config 40 interface 140 has no altsetting 0 [ 237.253418][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b200, bcdDevice=c7.df [ 237.264311][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.272655][ T43] usb 2-1: Product: syz [ 237.276973][ T43] usb 2-1: Manufacturer: syz [ 237.283642][ T43] usb 2-1: SerialNumber: syz [ 237.355998][ T5832] usb 4-1: USB disconnect, device number 52 [ 237.494995][ T43] dvb-usb: found a 'Hauppauge ATSC MiniCard (B200)' in warm state. [ 237.505118][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.515747][ T43] dvbdev: DVB: registering new adapter (Hauppauge ATSC MiniCard (B200)) [ 237.524228][ T43] usb 2-1: media controller created [ 237.537749][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.698505][ T9240] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 237.841012][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 237.841318][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 238.093534][ T9198] netlink: 112 bytes leftover after parsing attributes in process `syz.4.979'. [ 238.151261][ T5832] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 238.305307][ T5832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.317434][ T5832] usb 4-1: not running at top speed; connect to a high speed hub [ 238.326857][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.341108][ T5832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.351642][ T9253] netlink: 44 bytes leftover after parsing attributes in process `syz.1.992'. [ 238.363019][ T5832] usb 4-1: string descriptor 0 read error: -22 [ 238.369340][ T5832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.378697][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.404439][ T5832] usb 4-1: 0:2 : does not exist [ 238.816670][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.826428][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.143885][ T5885] usb 5-1: USB disconnect, device number 11 [ 240.058323][ T5832] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 240.074792][ T5832] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 240.115229][ T5832] usb 4-1: USB disconnect, device number 53 [ 240.979527][ T9319] mmap: syz.1.1011 (9319) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 241.014325][ T9324] __nla_validate_parse: 3 callbacks suppressed [ 241.014343][ T9324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1013'. [ 241.029854][ T9324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 241.485851][ T30] audit: type=1326 audit(1761591272.060:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.510602][ T9341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.533255][ T52] Bluetooth: hci2: link tx timeout [ 241.538961][ T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.550148][ T30] audit: type=1326 audit(1761591272.060:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.562972][ T9341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.578243][ T30] audit: type=1326 audit(1761591272.060:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.607453][ T30] audit: type=1326 audit(1761591272.060:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.630768][ T30] audit: type=1326 audit(1761591272.060:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.657505][ T30] audit: type=1326 audit(1761591272.060:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.685305][ T30] audit: type=1326 audit(1761591272.060:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.708149][ T30] audit: type=1326 audit(1761591272.060:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.731035][ T5885] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 241.742290][ T30] audit: type=1326 audit(1761591272.060:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.768761][ T30] audit: type=1326 audit(1761591272.060:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa50218efc9 code=0x7ffc0000 [ 241.827678][ T9349] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1024'. [ 241.838015][ T9349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1024'. [ 241.893578][ T5885] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 241.903995][ T5885] usb 4-1: config 0 has no interface number 0 [ 241.910149][ T5885] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 241.923915][ T5885] usb 4-1: config 0 interface 214 has no altsetting 0 [ 241.933720][ T5885] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 241.942838][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.951114][ T5885] usb 4-1: Product: syz [ 241.955320][ T5885] usb 4-1: Manufacturer: syz [ 241.959936][ T5885] usb 4-1: SerialNumber: syz [ 241.968893][ T5885] usb 4-1: config 0 descriptor?? [ 241.974943][ T9338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.121922][ T9356] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 242.128483][ T9356] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.136371][ T9356] vhci_hcd vhci_hcd.0: Device attached [ 242.186304][ T9338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.371202][ T5905] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 242.390931][ T5911] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 242.540968][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 242.548200][ T5911] usb 5-1: config 0 has no interfaces? [ 242.554504][ T5911] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 242.564699][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.577274][ T5911] usb 5-1: config 0 descriptor?? [ 242.736015][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.745345][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.798313][ T43] DVB: Unable to find symbol lgdt3305_attach() [ 242.802230][ T5832] usb 5-1: USB disconnect, device number 12 [ 242.805150][ T9357] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 242.820537][ T1104] vhci_hcd vhci_hcd.4: stop threads [ 242.826263][ T43] dvb-usb: no frontend was attached by 'Hauppauge ATSC MiniCard (B200)' [ 242.836764][ T1104] vhci_hcd vhci_hcd.4: release socket [ 242.842399][ T43] dvb-usb: Hauppauge ATSC MiniCard (B200) successfully initialized and connected. [ 242.842826][ T1104] vhci_hcd vhci_hcd.4: disconnect device [ 243.297201][ T9376] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1033'. [ 243.306812][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1033'. [ 243.327895][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 243.349465][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 243.381003][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 243.601039][ T5835] Bluetooth: hci2: command 0x0405 tx timeout [ 245.041198][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 245.211115][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 245.218075][ T9] usb 5-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 245.228443][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.241485][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 245.251643][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.262730][ T9] usb 5-1: config 0 descriptor?? [ 245.273320][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 245.412333][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 245.423713][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 245.435087][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 245.453297][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 245.464691][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 245.476211][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 245.487747][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 245.499863][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 245.511457][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 245.523770][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 245.535117][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 245.546406][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 245.559334][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 245.570772][ T5885] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 245.593310][ T5885] ax88179_178a 4-1:0.214 eth5: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 8a:66:5e:2c:09:7b [ 245.616023][ T5885] usb 4-1: USB disconnect, device number 54 [ 245.625596][ T5885] ax88179_178a 4-1:0.214 eth5: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 245.956844][ T9399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 245.963395][ T9399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.973591][ T9399] vhci_hcd vhci_hcd.0: Device attached [ 246.220979][ T5911] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 246.240947][ T5885] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 246.381044][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 246.388027][ T5911] usb 4-1: config 0 has no interfaces? [ 246.393590][ T5911] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 246.402785][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.413345][ T5911] usb 4-1: config 0 descriptor?? [ 246.560072][ T9403] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1044'. [ 246.569578][ T9403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1044'. [ 246.629236][ T9400] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 246.630315][ T5920] usb 4-1: USB disconnect, device number 55 [ 246.647128][ T78] vhci_hcd vhci_hcd.3: stop threads [ 246.664073][ T78] vhci_hcd vhci_hcd.3: release socket [ 246.676561][ T78] vhci_hcd vhci_hcd.3: disconnect device [ 246.686279][ T9407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.696013][ T9407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.420940][ T5911] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 247.510990][ T5905] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 247.571023][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 247.580334][ T5911] usb 4-1: config 0 has an invalid interface number: 201 but max is 0 [ 247.581880][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.589271][ T5911] usb 4-1: config 0 has no interface number 0 [ 247.605034][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.618848][ T5911] usb 4-1: config 0 interface 201 has no altsetting 0 [ 247.627932][ T5911] usb 4-1: New USB device found, idVendor=187f, idProduct=0600, bcdDevice=56.4f [ 247.637138][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.645437][ T5911] usb 4-1: Product: syz [ 247.649619][ T5911] usb 4-1: Manufacturer: syz [ 247.654321][ T5911] usb 4-1: SerialNumber: syz [ 247.664321][ T5911] usb 4-1: config 0 descriptor?? [ 247.672228][ T5911] smsusb:smsusb_probe: board id=18, interface number 201 [ 247.803682][ T5911] usb 5-1: USB disconnect, device number 13 [ 247.848674][ T9426] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1053'. [ 247.858004][ T9426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1053'. [ 247.879720][ T9] usb 4-1: USB disconnect, device number 56 [ 248.164408][ T9433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 248.171085][ T9433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.184611][ T9433] vhci_hcd vhci_hcd.0: Device attached [ 248.196938][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.208307][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.219637][ T9434] vhci_hcd: connection closed [ 248.221018][ T13] vhci_hcd vhci_hcd.1: stop threads [ 248.231537][ T13] vhci_hcd vhci_hcd.1: release socket [ 248.237084][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 248.660935][ T984] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 248.821049][ T984] usb 4-1: Using ep0 maxpacket: 32 [ 248.828097][ T984] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 248.838676][ T984] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 248.846474][ T984] usb 4-1: can't read configurations, error -61 [ 248.946028][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.958022][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.972663][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1061'. [ 248.991235][ T984] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 249.161016][ T984] usb 4-1: Using ep0 maxpacket: 32 [ 249.167375][ T984] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 249.178145][ T984] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 249.191993][ T984] usb 4-1: can't read configurations, error -61 [ 249.199111][ T984] usb usb4-port1: attempt power cycle [ 249.279482][ T9457] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1064'. [ 249.289270][ T9457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1064'. [ 249.561045][ T984] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 249.581063][ T5911] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 249.589439][ T984] usb 4-1: Using ep0 maxpacket: 32 [ 249.596091][ T984] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 249.605817][ T984] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 249.613806][ T984] usb 4-1: can't read configurations, error -61 [ 249.741026][ T984] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 249.749777][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 249.758080][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.769274][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.779192][ T5911] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 249.788875][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.799463][ T984] usb 4-1: Using ep0 maxpacket: 32 [ 249.805758][ T5911] usb 5-1: config 0 descriptor?? [ 249.812911][ T984] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 249.829931][ T984] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 249.845112][ T984] usb 4-1: can't read configurations, error -61 [ 249.852840][ T984] usb usb4-port1: unable to enumerate USB device [ 249.856495][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.870466][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.228495][ T5911] hid_parser_main: 129 callbacks suppressed [ 250.228519][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x2 [ 250.241886][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 250.248896][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 250.255981][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 250.263862][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 250.271439][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 250.278432][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 250.285700][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 250.292745][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 250.299730][ T5911] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 250.309442][ T5911] cherry 0003:046A:0027.0014: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0 [ 250.424592][ T9470] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 250.431147][ T9470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.439118][ T9470] vhci_hcd vhci_hcd.0: Device attached [ 250.443831][ T9459] program syz.4.1065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.454590][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.462766][ T5920] usb 5-1: USB disconnect, device number 14 [ 250.463822][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.479661][ T9471] vhci_hcd: connection closed [ 250.482359][ T78] vhci_hcd vhci_hcd.1: stop threads [ 250.494759][ T78] vhci_hcd vhci_hcd.1: release socket [ 250.500206][ T78] vhci_hcd vhci_hcd.1: disconnect device [ 251.149672][ T9488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1074'. [ 251.158831][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1074'. [ 251.215162][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 251.351054][ T5885] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 251.699979][ T9511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 251.706550][ T9511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 251.718751][ T9511] vhci_hcd vhci_hcd.0: Device attached [ 251.934039][ T9523] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1085'. [ 251.957125][ T9523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1085'. [ 251.967124][ T9] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 251.974696][ T5920] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 252.065498][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 252.151184][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 252.158620][ T5920] usb 5-1: config 0 has no interfaces? [ 252.165008][ T5920] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 252.175736][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.189169][ T5920] usb 5-1: config 0 descriptor?? [ 252.354748][ T5911] hid (null): invalid report_count 1349227518 [ 252.362446][ T5911] hid (null): unknown global tag 0xa8 [ 252.364372][ T9542] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1090'. [ 252.368057][ T5911] hid (null): global environment stack underflow [ 252.385502][ T5911] hid (null): unknown global tag 0xe9 [ 252.404173][ T5911] hid-generic 0000:20000000:0000.0015: invalid report_count 1349227518 [ 252.423087][ T9512] vhci_hcd: connection reset by peer [ 252.423745][ T116] usb 5-1: USB disconnect, device number 15 [ 252.439682][ T5911] hid-generic 0000:20000000:0000.0015: item 0 4 1 9 parsing failed [ 252.452715][ T13] vhci_hcd vhci_hcd.4: stop threads [ 252.463510][ T5911] hid-generic 0000:20000000:0000.0015: probe with driver hid-generic failed with error -22 [ 252.466274][ T13] vhci_hcd vhci_hcd.4: release socket [ 252.487006][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 252.964480][ T9553] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1095' resets device [ 253.149217][ T9555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1096'. [ 253.158403][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1096'. [ 253.210988][ T5911] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 253.340908][ T5911] usb 5-1: device descriptor read/64, error -71 [ 253.461024][ T5885] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 253.580973][ T5911] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 253.617044][ T5885] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 253.626612][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 253.635149][ T5885] usb 4-1: Product: syz [ 253.639368][ T5885] usb 4-1: Manufacturer: syz [ 253.645333][ T5885] usb 4-1: SerialNumber: syz [ 253.652249][ T5885] usb 4-1: config 0 descriptor?? [ 253.661562][ T5885] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 253.669366][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 253.678101][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.688389][ T5885] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 253.696467][ T5885] usb 4-1: media controller created [ 253.710576][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.711294][ T5911] usb 5-1: device descriptor read/64, error -71 [ 253.831634][ T5911] usb usb5-port1: attempt power cycle [ 254.028910][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 254.095775][ T5885] DVB: Unable to find symbol mt352_attach() [ 254.102132][ T5885] dvb-usb: bulk message failed: -22 (5/0) [ 254.108104][ T5885] zl10353_read_register: readreg error (reg=127, ret==-121) [ 254.115761][ T5885] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 254.190916][ T5885] rc_core: IR keymap rc-dvico-mce not found [ 254.196158][ T5911] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 254.204610][ T5885] Registered IR keymap rc-empty [ 254.206781][ T5885] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 254.223234][ T5885] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17 [ 254.231865][ T5911] usb 5-1: device descriptor read/8, error -71 [ 254.241427][ T5885] dvb-usb: schedule remote query interval to 100 msecs. [ 254.249089][ T5885] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 254.264266][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 254.264282][ T30] audit: type=1800 audit(1761591284.840:188): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1097" name="file1" dev="overlay" ino=1425 res=0 errno=0 [ 254.270371][ T9564] evm: overlay not supported [ 254.291115][ T5885] usb 4-1: USB disconnect, device number 61 [ 254.307479][ T30] audit: type=1800 audit(1761591284.840:189): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1097" name="file1" dev="overlay" ino=1425 res=0 errno=0 [ 254.384710][ T5885] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 254.470991][ T5911] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 254.491437][ T5911] usb 5-1: device descriptor read/8, error -71 [ 254.601193][ T5911] usb usb5-port1: unable to enumerate USB device [ 254.677900][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.686870][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.064791][ T9581] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 255.071365][ T9581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 255.080279][ T9581] vhci_hcd vhci_hcd.0: Device attached [ 255.089316][ T9582] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 255.097815][ T78] vhci_hcd vhci_hcd.3: stop threads [ 255.103234][ T78] vhci_hcd vhci_hcd.3: release socket [ 255.108634][ T78] vhci_hcd vhci_hcd.3: disconnect device [ 255.239345][ T9585] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1105'. [ 255.248519][ T9585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'. [ 255.936514][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.943141][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.008568][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 256.295121][ T9608] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1114'. [ 256.413710][ T9610] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 256.427133][ T9610] block device autoloading is deprecated and will be removed. [ 256.545145][ T9612] binder: BINDER_SET_CONTEXT_MGR already set [ 256.553009][ T9612] binder: 9611:9612 ioctl 4018620d 200000000100 returned -16 [ 256.565435][ T9612] binder: BINDER_SET_CONTEXT_MGR already set [ 256.571662][ T9612] binder: 9611:9612 ioctl 4018620d 2000000002c0 returned -16 [ 256.734862][ T9614] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 256.741450][ T9614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.761299][ T9614] vhci_hcd vhci_hcd.0: Device attached [ 256.808220][ T9615] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 256.833105][ T78] vhci_hcd vhci_hcd.1: stop threads [ 256.851559][ T78] vhci_hcd vhci_hcd.1: release socket [ 256.857356][ T78] vhci_hcd vhci_hcd.1: disconnect device [ 257.071269][ T5911] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 257.110974][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 257.170980][ T116] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 257.227760][ T5911] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 257.235989][ T5911] usb 4-1: config 0 has no interface number 0 [ 257.242371][ T5911] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 257.253758][ T5911] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 257.266985][ T5911] usb 4-1: config 0 interface 49 has no altsetting 0 [ 257.275850][ T5911] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 257.285018][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.293063][ T5911] usb 4-1: Product: syz [ 257.297243][ T5911] usb 4-1: Manufacturer: syz [ 257.301924][ T5911] usb 4-1: SerialNumber: syz [ 257.308766][ T5911] usb 4-1: config 0 descriptor?? [ 257.337629][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.348719][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.358970][ T116] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 257.368589][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.382106][ T9632] __nla_validate_parse: 1 callbacks suppressed [ 257.382124][ T9632] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1123'. [ 257.383183][ T116] usb 5-1: config 0 descriptor?? [ 257.388610][ T9632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1123'. [ 257.509654][ T9636] binder: BINDER_SET_CONTEXT_MGR already set [ 257.515977][ T9636] binder: 9635:9636 ioctl 4018620d 200000000100 returned -16 [ 257.529761][ T9636] binder: BINDER_SET_CONTEXT_MGR already set [ 257.536829][ T9636] binder: 9635:9636 ioctl 4018620d 2000000002c0 returned -16 [ 257.624964][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.636214][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.821549][ T116] hid_parser_main: 48 callbacks suppressed [ 257.821597][ T116] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 257.834896][ T116] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 257.843163][ T116] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 257.850340][ T116] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 257.857840][ T116] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 257.864977][ T116] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 257.872262][ T116] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 257.884626][ T116] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 258.115008][ T116] cp2112 0003:10C4:EA90.0016: error requesting version [ 258.125334][ T116] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -5 [ 258.499146][ T9659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1132'. [ 258.508308][ T9659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'. [ 258.682278][ T9663] binder: BINDER_SET_CONTEXT_MGR already set [ 258.688343][ T9663] binder: 9662:9663 ioctl 4018620d 200000000100 returned -16 [ 258.700451][ T9663] binder: BINDER_SET_CONTEXT_MGR already set [ 258.706682][ T9663] binder: 9662:9663 ioctl 4018620d 2000000002c0 returned -16 [ 259.845060][ T5911] usb 4-1: USB disconnect, device number 62 [ 259.941170][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x27 [ 259.947818][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x27 [ 259.977434][ T116] usb 5-1: USB disconnect, device number 20 [ 260.441644][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 260.614557][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 260.624073][ T9] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 260.632394][ T9] usb 5-1: config 6 has no interface number 0 [ 260.642193][ T9] usb 5-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 260.660563][ T9] usb 5-1: config 6 interface 200 has no altsetting 0 [ 260.673387][ T9] usb 5-1: string descriptor 0 read error: -22 [ 260.679943][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 260.689331][ T9] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 260.725754][ T9] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 260.832620][ T9685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1141'. [ 260.841998][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1141'. [ 260.941670][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.966851][ T9] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 260.975352][ T9689] team_slave_0: entered promiscuous mode [ 260.981453][ T9689] team_slave_1: entered promiscuous mode [ 260.981485][ T9] usb 5-1: media controller created [ 261.009974][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.074980][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 261.112263][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 261.120181][ T9] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 261.168840][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 261.205183][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 261.219308][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 261.248107][ T9] usb 5-1: USB disconnect, device number 21 [ 261.272354][ T9681] team_slave_0: left promiscuous mode [ 261.278046][ T9681] team_slave_1: left promiscuous mode [ 261.306596][ T9693] lo speed is unknown, defaulting to 1000 [ 261.355557][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 261.736277][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.749051][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.790917][ T9] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 261.942891][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.951070][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.961029][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.962661][ T9] usb 5-1: config 0 has no interface number 0 [ 261.971957][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.978031][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.993003][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.002131][ T9701] block nbd1: shutting down sockets [ 262.013611][ T9] usb 5-1: config 0 descriptor?? [ 262.028997][ T9] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 262.203805][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 262.252203][ T116] usb 5-1: USB disconnect, device number 22 [ 262.530960][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 262.682687][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 262.692396][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.712127][ T9] usb 4-1: config 0 descriptor?? [ 262.724384][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 263.549529][ T9734] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1157'. [ 263.565562][ T9734] capability: warning: `syz.1.1157' uses deprecated v2 capabilities in a way that may be insecure [ 263.733712][ T9] usb 4-1: USB disconnect, device number 63 [ 264.089135][ T9744] binder: 9743:9744 ioctl 40046205 0 returned -22 [ 264.273146][ T9747] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 264.301788][ T9747] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 264.320502][ T9747] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 264.346842][ T9747] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 264.406475][ T9747] (syz.2.1161,9747,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 264.444728][ T9747] (syz.2.1161,9747,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 264.540908][ T116] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 264.708126][ T116] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.734552][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.763834][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 264.804333][ T116] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 264.827002][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.853186][ T116] usb 5-1: Product: syz [ 264.863013][ T116] usb 5-1: Manufacturer: syz [ 264.876724][ T116] usb 5-1: SerialNumber: syz [ 264.897858][ T116] usb 5-1: config 0 descriptor?? [ 264.916877][ T9749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.940753][ T116] hub 5-1:0.0: USB hub found [ 265.025700][ T9764] netlink: 'syz.3.1167': attribute type 27 has an invalid length. [ 265.072697][ T9766] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1168'. [ 265.107404][ T9767] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1168'. [ 265.156392][ T116] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 265.174061][ T116] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.267192][ T116] usb 5-1: USB disconnect, device number 23 [ 265.358192][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.436768][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.473072][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.488064][ T9775] lo speed is unknown, defaulting to 1000 [ 266.283157][ T9796] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1178'. [ 266.530544][ T9806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.541305][ T9806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.559334][ T9806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.570261][ T9806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.640913][ T798] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 266.851826][ T798] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 266.861296][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.869333][ T798] usb 4-1: Product: syz [ 266.873643][ T798] usb 4-1: Manufacturer: syz [ 266.878260][ T798] usb 4-1: SerialNumber: syz [ 266.886177][ T798] usb 4-1: config 0 descriptor?? [ 267.095879][ T798] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 267.107547][ T798] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 267.119909][ T798] usb 4-1: USB disconnect, device number 64 [ 267.662765][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.672699][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.741015][ T798] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 267.890940][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 267.902699][ T798] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 267.911174][ T798] usb 5-1: config 0 has no interface number 0 [ 267.917291][ T798] usb 5-1: config 0 interface 183 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 267.927431][ T798] usb 5-1: config 0 interface 183 has no altsetting 0 [ 267.934882][ T798] usb 5-1: string descriptor 0 read error: -22 [ 267.941292][ T798] usb 5-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=cd.69 [ 267.950365][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.962879][ T798] usb 5-1: config 0 descriptor?? [ 267.968767][ T9817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.986715][ T798] gspca_main: tv8532-2.14.0 probing 0923:010f [ 268.042640][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.053225][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.062802][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.074844][ T9] usb 4-1: config 0 descriptor?? [ 268.087048][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 268.486885][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 268.495632][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 268.503870][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 268.511386][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 268.519342][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 268.527106][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 268.535696][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 268.537158][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.552956][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.563780][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.574969][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.584311][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 268.594644][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 268.604754][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 268.626749][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 268.650904][ T5911] usb 5-1: USB disconnect, device number 24 [ 268.845557][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 269.055850][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 269.071308][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 269.084970][ T9] pwc: Registered as video103. [ 269.106020][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 269.130179][ T9] usb 4-1: USB disconnect, device number 65 [ 269.311981][ T9835] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1190'. [ 269.313034][ T9830] syzkaller1: entered allmulticast mode [ 269.651054][ T5911] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 269.810927][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 269.817740][ T5911] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 269.827433][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.842738][ T5911] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 270.641018][ T9848] comedi comedi0: Minor -3 is invalid! [ 270.692141][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.701231][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.041078][ T1154] wlan1: Trigger new scan to find an IBSS to join [ 271.049968][ T5911] gspca_nw80x: reg_w err -71 [ 271.056743][ T5911] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 271.067201][ T5911] usb 5-1: USB disconnect, device number 25 [ 271.324319][ T9859] netlink: 'syz.1.1198': attribute type 6 has an invalid length. [ 271.334891][ T9858] netlink: 'syz.1.1198': attribute type 6 has an invalid length. [ 271.344822][ T9859] netlink: 'syz.1.1198': attribute type 6 has an invalid length. [ 271.360779][ T9858] fuse: Bad value for 'rootmode' [ 271.369788][ T9859] binder: BINDER_SET_CONTEXT_MGR already set [ 271.376228][ T9859] binder: 9857:9859 ioctl 4018620d 200000000100 returned -16 [ 271.385566][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 271.392266][ T9858] binder: 9857:9858 ioctl 4018620d 2000000002c0 returned -16 [ 271.737565][ T9870] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1204'. [ 271.747485][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1204'. [ 272.036616][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.047447][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.058609][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.067525][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.511013][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 272.575600][ T9894] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1213'. [ 272.585647][ T9894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1213'. [ 272.673285][ T9] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 272.699173][ T9] usb 4-1: config 0 has no interface number 0 [ 272.703621][ T9896] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 272.709598][ T9] usb 4-1: config 0 interface 183 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 272.711827][ T9896] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 272.721243][ T9896] vhci_hcd vhci_hcd.0: Device attached [ 272.736226][ T9] usb 4-1: config 0 interface 183 has no altsetting 0 [ 272.754382][ T9900] vhci_hcd: connection closed [ 272.754676][ T49] vhci_hcd vhci_hcd.2: stop threads [ 272.766064][ T9] usb 4-1: string descriptor 0 read error: -22 [ 272.773529][ T49] vhci_hcd vhci_hcd.2: release socket [ 272.779230][ T9] usb 4-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=cd.69 [ 272.794419][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 272.800314][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.816219][ T9] usb 4-1: config 0 descriptor?? [ 272.822554][ T9890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.833894][ T9] gspca_main: tv8532-2.14.0 probing 0923:010f [ 272.997871][ T9913] program syz.1.1219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.011534][ T5920] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 273.191270][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 273.198265][ T5920] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 273.210991][ T5920] usb 5-1: config 0 has no interfaces? [ 273.215014][ T9921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.219002][ T5920] usb 5-1: config 0 has no interfaces? [ 273.228645][ T9921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.236831][ T5920] usb 5-1: config 0 has no interfaces? [ 273.246356][ T5920] usb 5-1: config 0 has no interfaces? [ 273.255859][ T5920] usb 5-1: config 0 has no interfaces? [ 273.262845][ T5920] usb 5-1: config 0 has no interfaces? [ 273.269526][ T5920] usb 5-1: config 0 has no interfaces? [ 273.276360][ T5920] usb 5-1: config 0 has no interfaces? [ 273.520236][ T9930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1224'. [ 273.535490][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1224'. [ 273.674626][ T9934] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 274.081220][ T1104] wlan1: Trigger new scan to find an IBSS to join [ 274.087858][ T1154] wlan1: Trigger new scan to find an IBSS to join [ 274.705918][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.718063][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.317720][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.326948][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.330994][ T9950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.343721][ T9950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.776538][ T5920] usb 5-1: string descriptor 0 read error: -71 [ 275.791007][ T5920] usb 5-1: New USB device found, idVendor=1708, idProduct=000e, bcdDevice=ad.b1 [ 275.800119][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70 [ 275.815804][ T5920] usb 5-1: config 0 descriptor?? [ 275.821447][ T5920] usb 5-1: can't set config #0, error -71 [ 275.844191][ T5920] usb 5-1: USB disconnect, device number 26 [ 275.934961][ T9956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.945407][ T9956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.171019][ T5920] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 276.323786][ T5920] usb 5-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 276.334191][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 276.349645][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.358791][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.366874][ T5920] usb 5-1: Product: syz [ 276.371311][ T5920] usb 5-1: Manufacturer: syz [ 276.376560][ T5920] usb 5-1: SerialNumber: syz [ 276.591679][ T52] Bluetooth: hci2: unexpected event for opcode 0x080b [ 276.603086][ T5920] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 276.619333][ T5920] usb 5-1: USB disconnect, device number 27 [ 277.019608][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.028903][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.100935][ T5920] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 277.122619][ T49] wlan1: Trigger new scan to find an IBSS to join [ 277.129294][ T49] wlan1: Trigger new scan to find an IBSS to join [ 277.252818][ T5920] usb 5-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 277.263557][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 277.279032][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.288331][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.297250][ T5920] usb 5-1: Product: syz [ 277.301532][ T5920] usb 5-1: Manufacturer: syz [ 277.306164][ T5920] usb 5-1: SerialNumber: syz [ 277.459770][ T9982] FAULT_INJECTION: forcing a failure. [ 277.459770][ T9982] name failslab, interval 1, probability 0, space 0, times 0 [ 277.474141][ T9982] CPU: 1 UID: 0 PID: 9982 Comm: syz.2.1244 Not tainted syzkaller #0 PREEMPT(full) [ 277.474171][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.474191][ T9982] Call Trace: [ 277.474206][ T9982] [ 277.474215][ T9982] dump_stack_lvl+0x189/0x250 [ 277.474245][ T9982] ? __pfx____ratelimit+0x10/0x10 [ 277.474271][ T9982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.474296][ T9982] ? __pfx__printk+0x10/0x10 [ 277.474331][ T9982] ? __pfx___might_resched+0x10/0x10 [ 277.474357][ T9982] should_fail_ex+0x414/0x560 [ 277.474390][ T9982] should_failslab+0xa8/0x100 [ 277.474414][ T9982] __kmalloc_noprof+0xdf/0x800 [ 277.474441][ T9982] ? kfree+0x4d/0x6d0 [ 277.474465][ T9982] ? tomoyo_encode+0x511/0x550 [ 277.474488][ T9982] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 277.474521][ T9982] tomoyo_realpath_from_path+0xe3/0x5d0 [ 277.474563][ T9982] tomoyo_path2_perm+0x288/0x680 [ 277.474585][ T9982] ? tomoyo_path2_perm+0x235/0x680 [ 277.474608][ T9982] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 277.474644][ T9982] ? percpu_ref_get_many+0x19/0x140 [ 277.474709][ T9982] tomoyo_path_rename+0x141/0x190 [ 277.474742][ T9982] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 277.474778][ T9982] ? simple_lookup+0x12c/0x1c0 [ 277.474802][ T9982] security_path_rename+0x250/0x490 [ 277.474835][ T9982] do_renameat2+0x52b/0xa50 [ 277.474878][ T9982] ? __pfx_do_renameat2+0x10/0x10 [ 277.474914][ T9982] ? strncpy_from_user+0x150/0x290 [ 277.474945][ T9982] ? getname_flags+0x1e5/0x540 [ 277.474979][ T9982] __x64_sys_renameat2+0xce/0xe0 [ 277.475008][ T9982] do_syscall_64+0xfa/0xfa0 [ 277.475034][ T9982] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.475061][ T9982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.475081][ T9982] ? clear_bhb_loop+0x60/0xb0 [ 277.475107][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.475126][ T9982] RIP: 0033:0x7f1e26f8efc9 [ 277.475148][ T9982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.475165][ T9982] RSP: 002b:00007f1e27da6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 277.475188][ T9982] RAX: ffffffffffffffda RBX: 00007f1e271e5fa0 RCX: 00007f1e26f8efc9 [ 277.475209][ T9982] RDX: ffffffffffffff9c RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 277.475224][ T9982] RBP: 00007f1e27da6090 R08: 0000000000000000 R09: 0000000000000000 [ 277.475238][ T9982] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001 [ 277.475251][ T9982] R13: 00007f1e271e6038 R14: 00007f1e271e5fa0 R15: 00007ffda6710378 [ 277.475287][ T9982] [ 277.475321][ T9982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.524727][ T5920] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 277.764134][ T5920] usb 5-1: USB disconnect, device number 28 [ 277.789278][ T798] usb 4-1: USB disconnect, device number 66 [ 278.131137][ T49] wlan1: Creating new IBSS network, BSSID e6:b4:16:63:60:97 [ 278.306889][T10005] FAULT_INJECTION: forcing a failure. [ 278.306889][T10005] name failslab, interval 1, probability 0, space 0, times 0 [ 278.323116][T10005] CPU: 0 UID: 0 PID: 10005 Comm: syz.1.1255 Not tainted syzkaller #0 PREEMPT(full) [ 278.323146][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.323160][T10005] Call Trace: [ 278.323169][T10005] [ 278.323178][T10005] dump_stack_lvl+0x189/0x250 [ 278.323210][T10005] ? __pfx____ratelimit+0x10/0x10 [ 278.323238][T10005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.323263][T10005] ? __pfx__printk+0x10/0x10 [ 278.323294][T10005] ? __pfx___might_resched+0x10/0x10 [ 278.323314][T10005] ? fs_reclaim_acquire+0x7d/0x100 [ 278.323359][T10005] should_fail_ex+0x414/0x560 [ 278.323395][T10005] should_failslab+0xa8/0x100 [ 278.323419][T10005] __kmalloc_noprof+0xdf/0x800 [ 278.323449][T10005] ? tomoyo_encode+0x28b/0x550 [ 278.323482][T10005] tomoyo_encode+0x28b/0x550 [ 278.323516][T10005] tomoyo_realpath_from_path+0x58d/0x5d0 [ 278.323560][T10005] tomoyo_path2_perm+0x288/0x680 [ 278.323583][T10005] ? tomoyo_path2_perm+0x235/0x680 [ 278.323607][T10005] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 278.323644][T10005] ? percpu_ref_get_many+0x19/0x140 [ 278.323711][T10005] tomoyo_path_rename+0x141/0x190 [ 278.323746][T10005] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 278.323783][T10005] ? simple_lookup+0x12c/0x1c0 [ 278.323808][T10005] security_path_rename+0x250/0x490 [ 278.323842][T10005] do_renameat2+0x52b/0xa50 [ 278.323886][T10005] ? __pfx_do_renameat2+0x10/0x10 [ 278.323923][T10005] ? strncpy_from_user+0x150/0x290 [ 278.323956][T10005] ? getname_flags+0x1e5/0x540 [ 278.323990][T10005] __x64_sys_renameat2+0xce/0xe0 [ 278.324019][T10005] do_syscall_64+0xfa/0xfa0 [ 278.324047][T10005] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.324074][T10005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.324096][T10005] ? clear_bhb_loop+0x60/0xb0 [ 278.324121][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.324142][T10005] RIP: 0033:0x7fa50218efc9 [ 278.324161][T10005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.324180][T10005] RSP: 002b:00007fa502f7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 278.324202][T10005] RAX: ffffffffffffffda RBX: 00007fa5023e5fa0 RCX: 00007fa50218efc9 [ 278.324218][T10005] RDX: ffffffffffffff9c RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 278.324234][T10005] RBP: 00007fa502f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 278.324247][T10005] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001 [ 278.324261][T10005] R13: 00007fa5023e6038 R14: 00007fa5023e5fa0 R15: 00007ffd68010a58 [ 278.324297][T10005] [ 278.324324][T10005] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.430933][ T5911] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 278.660963][ T116] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 278.762905][ T5911] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 278.771826][ T5911] usb 5-1: config 0 has no interface number 0 [ 278.784999][ T5911] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 278.800872][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=43, SerialNumber=97 [ 278.809174][ T5911] usb 5-1: Product: syz [ 278.815858][ T5911] usb 5-1: SerialNumber: syz [ 278.829240][ T116] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 278.839111][ T116] usb 4-1: config 0 has no interface number 0 [ 278.846385][ T5911] usb 5-1: config 0 descriptor?? [ 278.852262][ T116] usb 4-1: config 0 interface 183 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 278.862842][ T116] usb 4-1: config 0 interface 183 has no altsetting 0 [ 278.873189][ T116] usb 4-1: string descriptor 0 read error: -22 [ 278.879507][ T116] usb 4-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=cd.69 [ 278.892147][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.917754][ T116] usb 4-1: config 0 descriptor?? [ 278.928193][T10000] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 278.951628][ T116] gspca_main: tv8532-2.14.0 probing 0923:010f [ 279.044179][T10019] tipc: Started in network mode [ 279.049288][T10019] tipc: Node identity 728fd902a3d6, cluster identity 4711 [ 279.057346][T10019] tipc: Enabled bearer , priority 0 [ 279.066019][T10019] syzkaller0: entered promiscuous mode [ 279.071618][T10019] syzkaller0: entered allmulticast mode [ 279.075353][ T798] usb 5-1: USB disconnect, device number 29 [ 279.084681][T10019] tipc: Resetting bearer [ 279.107543][T10019] tipc: Disabling bearer [ 279.300068][ T116] usb 4-1: USB disconnect, device number 67 [ 280.081550][ T12] wlan1: Trigger new scan to find an IBSS to join [ 280.149891][ T52] Bluetooth: Frame is too long (len 22, expected len 4) [ 280.262216][T10054] binder: BINDER_SET_CONTEXT_MGR already set [ 280.270156][T10054] binder: 10052:10054 ioctl 4018620d 2000000002c0 returned -16 [ 280.982170][ T12] wlan1: Creating new IBSS network, BSSID 06:b4:15:2e:8e:b9 [ 281.041002][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 281.303318][T10067] fuse: Bad value for 'fd' [ 281.384220][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 281.411035][ T5920] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 281.524512][ T5895] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 281.541772][ T5895] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 281.553952][ T5895] usb 3-1: USB disconnect, device number 36 [ 281.571606][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 281.582162][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.594544][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.605618][ T5920] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 281.616410][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.626730][ T5920] usb 4-1: config 0 descriptor?? [ 281.860950][ T5895] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 282.010994][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 282.017848][ T5895] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 282.026191][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.036198][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.046270][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 282.047917][ T5920] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 282.059470][ T5920] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 282.066032][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 282.082315][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.095646][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.096450][ T5920] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 282.105485][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.122136][ T5920] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 282.129364][ T5920] corsair 0003:1B1C:1B02.0017: unknown main item tag 0x0 [ 282.141651][ T5895] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 282.143583][ T5920] corsair 0003:1B1C:1B02.0017: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 282.183578][ T5920] corsair 0003:1B1C:1B02.0017: Failed to get K90 initial state (error -32). [ 282.405430][ T5920] usb 3-1: USB disconnect, device number 37 [ 282.587596][T10082] binder: BINDER_SET_CONTEXT_MGR already set [ 282.598982][T10082] binder: 10081:10082 ioctl 4018620d 2000000002c0 returned -16 [ 282.620968][ T5920] usb 4-1: USB disconnect, device number 68 [ 282.779792][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.789008][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.011113][ T5920] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 283.160920][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 283.167696][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 283.179707][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 283.188885][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.196974][ T5920] usb 4-1: Product: syz [ 283.201317][ T798] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 283.209072][ T5920] usb 4-1: Manufacturer: syz [ 283.213928][ T5920] usb 4-1: SerialNumber: syz [ 283.220991][ T5920] usb 4-1: config 0 descriptor?? [ 283.229298][ T5920] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 283.240148][ T5920] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 283.371059][ T798] usb 3-1: Using ep0 maxpacket: 32 [ 283.378569][ T798] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 283.391250][ T798] usb 3-1: config 0 has no interface number 0 [ 283.397495][ T798] usb 3-1: config 0 interface 12 has no altsetting 0 [ 283.407164][ T798] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 283.416829][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.425036][ T798] usb 3-1: Product: syz [ 283.434666][ T798] usb 3-1: Manufacturer: syz [ 283.440587][ T798] usb 3-1: SerialNumber: syz [ 283.448997][ T798] usb 3-1: config 0 descriptor?? [ 283.496898][T10096] fuse: Bad value for 'fd' [ 283.565822][T10101] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1292'. [ 283.569513][T10098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.585951][T10098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.596580][T10098] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 283.822905][ T5895] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 283.835614][ T5920] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 283.982622][ T5895] usb 5-1: config 5 has an invalid interface number: 233 but max is 1 [ 283.991458][ T5895] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 284.001677][ T5895] usb 5-1: config 5 has no interface number 1 [ 284.007807][ T5895] usb 5-1: config 5 interface 233 has no altsetting 0 [ 284.019638][ T5895] usb 5-1: string descriptor 0 read error: -71 [ 284.028172][ T5895] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0085, bcdDevice=96.e8 [ 284.037343][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.051082][ T5895] usb 5-1: can't set config #5, error -71 [ 284.072022][ T5895] usb 5-1: USB disconnect, device number 30 [ 284.343978][T10105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.353087][T10105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.453964][ T5920] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 284.464973][ T5920] em28xx 4-1:0.0: board has no eeprom [ 284.531062][ T5920] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 284.539020][ T5920] em28xx 4-1:0.0: dvb set to bulk mode. [ 284.544884][ T9] em28xx 4-1:0.0: Binding DVB extension [ 284.571285][ T5920] usb 4-1: USB disconnect, device number 69 [ 284.583844][ T5920] em28xx 4-1:0.0: Disconnecting em28xx [ 284.637122][ T9] em28xx 4-1:0.0: Registering input extension [ 284.660531][ T5920] em28xx 4-1:0.0: Closing input extension [ 284.683570][ T5920] em28xx 4-1:0.0: Freeing device [ 284.738294][T10110] openvswitch: netlink: Flow key attr not present in new flow. [ 284.916308][T10114] binder: BINDER_SET_CONTEXT_MGR already set [ 284.922895][T10114] binder: 10113:10114 ioctl 4018620d 200000000100 returned -16 [ 284.932812][T10114] binder: BINDER_SET_CONTEXT_MGR already set [ 284.938851][T10114] binder: 10113:10114 ioctl 4018620d 2000000002c0 returned -16 [ 285.030987][ T5920] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 285.191208][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 285.199338][ T5920] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 285.208730][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.225717][ T5920] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 285.278031][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.287925][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.302840][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 285.460926][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 285.468380][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.477951][ T9] usb 4-1: config 7 has an invalid interface number: 58 but max is 0 [ 285.486194][ T9] usb 4-1: config 7 has no interface number 0 [ 285.493545][ T9] usb 4-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 285.504936][ T9] usb 4-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.517914][ T9] usb 4-1: config 7 interface 58 has no altsetting 0 [ 285.527585][ T9] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 285.536975][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.545067][ T9] usb 4-1: Product: syz [ 285.549290][ T9] usb 4-1: Manufacturer: syz [ 285.554080][ T9] usb 4-1: SerialNumber: syz [ 285.781408][ T9] usb 4-1: USB disconnect, device number 70 [ 286.153952][ T798] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 286.164783][ T798] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 286.173351][ T798] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 286.182548][ T798] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 286.202338][ T798] usb 3-1: USB disconnect, device number 38 [ 286.313261][T10139] netlink: 'syz.1.1305': attribute type 21 has an invalid length. [ 286.325713][T10139] netlink: 'syz.1.1305': attribute type 22 has an invalid length. [ 286.435529][ T5920] gspca_nw80x: reg_w err -71 [ 286.448709][ T5920] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 286.467671][ T5920] usb 5-1: USB disconnect, device number 31 [ 286.494946][T10145] binder: BINDER_SET_CONTEXT_MGR already set [ 286.503123][T10145] binder: 10144:10145 ioctl 4018620d 200000000100 returned -16 [ 286.515183][T10145] binder: BINDER_SET_CONTEXT_MGR already set [ 286.522513][T10145] binder: 10144:10145 ioctl 4018620d 2000000002c0 returned -16 [ 286.590931][ T116] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 286.761805][ T116] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 286.770062][ T116] usb 4-1: config 0 has no interface number 0 [ 286.777382][ T116] usb 4-1: config 0 interface 183 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 286.787305][ T116] usb 4-1: config 0 interface 183 has no altsetting 0 [ 286.794837][ T116] usb 4-1: string descriptor 0 read error: -22 [ 286.801291][ T116] usb 4-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=cd.69 [ 286.810367][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.821956][ T116] usb 4-1: config 0 descriptor?? [ 286.827643][T10141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 286.839048][ T116] gspca_main: tv8532-2.14.0 probing 0923:010f [ 286.992661][ T5920] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 287.078778][ T116] usb 4-1: USB disconnect, device number 71 [ 287.150958][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 287.162339][ T5920] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 287.182683][ T5920] usb 3-1: config 0 has no interface number 0 [ 287.188869][ T5920] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.214670][ T5920] usb 3-1: config 0 interface 85 has no altsetting 0 [ 287.226168][ T5920] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 287.237526][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.245945][ T5920] usb 3-1: Product: syz [ 287.250237][ T5920] usb 3-1: Manufacturer: syz [ 287.255552][ T5920] usb 3-1: SerialNumber: syz [ 287.265820][ T5920] usb 3-1: config 0 descriptor?? [ 287.301914][T10159] input: syz1 as /devices/virtual/input/input23 [ 287.433798][T10161] lo speed is unknown, defaulting to 1000 [ 287.474935][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.501565][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.510742][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.521809][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.548896][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.590964][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.623043][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.653962][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.665152][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.673622][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.691885][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.722403][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.788442][ T5920] appletouch 3-1:0.85: Failed to request geyser raw mode [ 287.806202][ T5920] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 287.862730][ T5920] usb 3-1: USB disconnect, device number 39 [ 287.981039][ T116] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 288.068293][T10181] netlink: 'syz.2.1322': attribute type 21 has an invalid length. [ 288.091089][T10181] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1322'. [ 288.109284][T10181] netlink: 'syz.2.1322': attribute type 6 has an invalid length. [ 288.121152][T10181] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1322'. [ 288.162080][ T116] usb 5-1: no configurations [ 288.166913][ T116] usb 5-1: can't read configurations, error -22 [ 288.310988][ T116] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 288.462257][ T116] usb 5-1: no configurations [ 288.466982][ T116] usb 5-1: can't read configurations, error -22 [ 288.473660][ T116] usb usb5-port1: attempt power cycle [ 288.492009][ T5920] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 288.653306][ T5920] usb 3-1: config 3 has an invalid interface number: 113 but max is 1 [ 288.663050][ T5920] usb 3-1: config 3 has an invalid interface number: 225 but max is 1 [ 288.671385][ T5920] usb 3-1: config 3 has no interface number 0 [ 288.677586][ T5920] usb 3-1: config 3 has no interface number 1 [ 288.683807][ T5920] usb 3-1: config 3 interface 113 has no altsetting 0 [ 288.690644][ T5920] usb 3-1: config 3 interface 225 has no altsetting 0 [ 288.701495][ T5920] usb 3-1: string descriptor 0 read error: -22 [ 288.707832][ T5920] usb 3-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=11.9b [ 288.717028][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 288.812380][ T116] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 288.853487][ T116] usb 5-1: no configurations [ 288.857508][T10191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.868261][ T116] usb 5-1: can't read configurations, error -22 [ 288.873961][T10191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.900147][T10191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 288.912303][T10191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.921333][T10191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.002206][ T116] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 289.040333][ T116] usb 5-1: no configurations [ 289.050150][ T116] usb 5-1: can't read configurations, error -22 [ 289.059380][ T116] usb usb5-port1: unable to enumerate USB device [ 289.371788][ T5920] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 289.546566][ T5920] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 289.555232][ T5920] usb 4-1: config 0 has no interface number 0 [ 289.562708][ T5920] usb 4-1: config 0 interface 183 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 289.572956][ T5920] usb 4-1: config 0 interface 183 has no altsetting 0 [ 289.577294][T10200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.580604][ T5920] usb 4-1: string descriptor 0 read error: -22 [ 289.590374][T10200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.603355][ T5920] usb 4-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=cd.69 [ 289.615003][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.626170][ T5920] usb 4-1: config 0 descriptor?? [ 289.632153][T10196] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 289.643283][ T5920] gspca_main: tv8532-2.14.0 probing 0923:010f [ 289.878875][ T5920] usb 4-1: USB disconnect, device number 72 [ 290.203707][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.212646][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.660980][ T116] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 290.788618][T10210] lo speed is unknown, defaulting to 1000 [ 290.824275][ T116] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 290.840933][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.849011][ T116] usb 4-1: Product: syz [ 290.853284][ T116] usb 4-1: Manufacturer: syz [ 290.857928][ T116] usb 4-1: SerialNumber: syz [ 290.873964][ T116] usb 4-1: config 0 descriptor?? [ 291.079679][ T9] usb 3-1: USB disconnect, device number 40 [ 291.086105][ T116] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.721402][ T116] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 291.755991][ T116] usb 4-1: USB disconnect, device number 73 [ 291.853271][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 291.863055][T10228] bridge_slave_1: left allmulticast mode [ 291.868916][T10228] bridge_slave_1: left promiscuous mode [ 291.877404][T10228] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.893261][T10228] bridge_slave_0: left allmulticast mode [ 291.899236][T10228] bridge_slave_0: left promiscuous mode [ 291.907306][T10228] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.928339][T10231] netlink: 'syz.3.1338': attribute type 10 has an invalid length. [ 291.995599][T10232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.006299][T10231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.032386][T10231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.062177][T10231] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 292.105736][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 292.193815][T10236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1341'. [ 292.205182][T10236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1341'. [ 292.470949][ T5920] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 292.590941][ T5911] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 292.600979][ T116] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 292.622838][ T5920] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.634105][ T5920] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.644993][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 292.651776][ T5920] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 292.662131][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.672939][ T5920] usb 4-1: config 0 descriptor?? [ 292.740916][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 292.747979][ T5911] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 292.759941][ T116] usb 3-1: Using ep0 maxpacket: 16 [ 292.765278][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.776929][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.786879][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 292.799997][ T5911] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 292.809443][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.819714][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 292.831515][ T5911] usb 5-1: config 0 descriptor?? [ 292.845998][ T116] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.855560][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.864518][ T116] usb 3-1: Product: syz [ 292.868755][ T116] usb 3-1: Manufacturer: syz [ 292.873501][ T116] usb 3-1: SerialNumber: syz [ 292.886585][ T116] usb 3-1: config 0 descriptor?? [ 292.896073][ T116] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.905676][ T116] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 293.098034][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.108683][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.197231][ T5920] uclogic 0003:145F:0212.0018: interface is invalid, ignoring [ 293.273959][T10245] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.342872][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 293.360129][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 293.385218][ T5911] usb 5-1: USB disconnect, device number 36 [ 293.466037][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 293.500489][ T5895] usb 4-1: USB disconnect, device number 74 [ 293.512866][ T116] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 293.584508][T10259] binder: BINDER_SET_CONTEXT_MGR already set [ 293.590575][T10259] binder: 10258:10259 ioctl 4018620d 2000000002c0 returned -16 [ 293.667861][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.676742][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.737234][T10268] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1352'. [ 293.746445][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1352'. [ 293.846660][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1354'. [ 293.930256][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 294.059724][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.068840][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.142234][ T116] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 294.157175][ T116] em28xx 3-1:0.0: board has no eeprom [ 294.167869][T10282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1357'. [ 294.177309][T10282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1357'. [ 294.221142][ T116] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 294.229309][ T116] em28xx 3-1:0.0: dvb set to bulk mode. [ 294.235267][ T5895] em28xx 3-1:0.0: Binding DVB extension [ 294.251013][ T116] usb 3-1: USB disconnect, device number 41 [ 294.278565][ T116] em28xx 3-1:0.0: Disconnecting em28xx [ 294.319723][ T5895] em28xx 3-1:0.0: Registering input extension [ 294.328909][ T116] em28xx 3-1:0.0: Closing input extension [ 294.346638][ T116] em28xx 3-1:0.0: Freeing device [ 294.472871][T10289] fuse: Bad value for 'fd' [ 294.530853][T10291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1361'. [ 294.541348][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1361'. [ 294.930261][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1370'. [ 295.045368][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.059755][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.332517][ T798] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 295.450974][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 295.493741][ T798] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 295.501824][ T798] usb 5-1: can't read configurations, error -22 [ 295.611159][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 295.618607][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 295.622044][T10340] netlink: 'syz.1.1379': attribute type 29 has an invalid length. [ 295.638838][T10340] netlink: 'syz.1.1379': attribute type 29 has an invalid length. [ 295.645699][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.648752][T10340] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1379'. [ 295.656746][ T798] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 295.672707][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.681218][ T9] usb 3-1: Product: syz [ 295.685628][ T9] usb 3-1: Manufacturer: syz [ 295.690569][ T9] usb 3-1: SerialNumber: syz [ 295.700752][ T9] usb 3-1: config 0 descriptor?? [ 295.711020][T10340] unsupported nla_type 58 [ 295.711287][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 295.725364][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 295.853589][ T798] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 295.861819][ T798] usb 5-1: can't read configurations, error -22 [ 295.868967][ T798] usb usb5-port1: attempt power cycle [ 296.211013][ T798] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 296.260328][ T798] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 296.270013][ T798] usb 5-1: can't read configurations, error -22 [ 296.313691][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 296.400989][ T798] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 296.420504][T10350] fuse: Bad value for 'fd' [ 296.429458][ T798] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 296.438193][ T798] usb 5-1: can't read configurations, error -22 [ 296.448867][ T798] usb usb5-port1: unable to enumerate USB device [ 296.496933][T10352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.506241][T10352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.600985][ T116] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 296.751342][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 296.758457][ T116] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 296.766697][ T116] usb 4-1: config 0 has no interface number 0 [ 296.772958][ T116] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 296.786703][ T116] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 296.795979][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.805560][ T116] usb 4-1: Product: syz [ 296.809789][ T116] usb 4-1: Manufacturer: syz [ 296.814500][ T116] usb 4-1: SerialNumber: syz [ 296.821884][ T116] usb 4-1: config 0 descriptor?? [ 296.832776][ T116] smsc95xx v2.0.0 [ 296.836525][ T116] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 296.847120][ T116] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 297.064820][T10355] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1385'. [ 297.074241][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1385'. [ 297.133337][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 297.142617][ T9] em28xx 3-1:0.0: board has no eeprom [ 297.211002][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 297.219047][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 297.226879][ T5920] em28xx 3-1:0.0: Binding DVB extension [ 297.242056][ T9] usb 3-1: USB disconnect, device number 42 [ 297.261752][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 297.309477][ T5920] em28xx 3-1:0.0: Registering input extension [ 297.317095][T10360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.323000][ T9] em28xx 3-1:0.0: Closing input extension [ 297.327992][T10360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.350064][ T9] em28xx 3-1:0.0: Freeing device [ 297.830628][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1389'. [ 297.926759][ T30] audit: type=1800 audit(1761591328.500:190): pid=10370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1390" name="bus" dev="overlay" ino=2078 res=0 errno=0 [ 298.143700][T10370] lo speed is unknown, defaulting to 1000 [ 298.561048][ T5895] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 298.630945][ T116] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 298.724585][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.735145][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 298.747042][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 298.765624][ T116] usb 5-1: device descriptor read/64, error -71 [ 298.772052][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 298.783295][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.819405][ T5895] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 298.828961][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.837081][ T5895] usb 3-1: Product: syz [ 298.852207][ T5895] usb 3-1: Manufacturer: syz [ 298.856875][ T5895] usb 3-1: SerialNumber: syz [ 298.890682][ T5895] usb 3-1: config 0 descriptor?? [ 298.922407][T10387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 299.024818][ T5895] rc_core: IR keymap rc-xbox-dvd not found [ 299.033179][ T116] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 299.041105][ T5895] Registered IR keymap rc-empty [ 299.048603][ T5895] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 299.059971][ T5895] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 299.171553][ T116] usb 5-1: device descriptor read/64, error -71 [ 299.231897][T10400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.241536][T10400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.281597][ T116] usb usb5-port1: attempt power cycle [ 299.374739][ T9] usb 4-1: USB disconnect, device number 75 [ 299.620955][ T116] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 299.641793][ T116] usb 5-1: device descriptor read/8, error -71 [ 299.803763][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 299.862409][T10408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.871379][T10408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.901445][ T116] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 299.932878][ T116] usb 5-1: device descriptor read/8, error -71 [ 299.960942][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 299.968171][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 299.980590][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 299.990754][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.998968][ T9] usb 4-1: Product: syz [ 300.004157][ T9] usb 4-1: Manufacturer: syz [ 300.008825][ T9] usb 4-1: SerialNumber: syz [ 300.016315][ T9] usb 4-1: config 0 descriptor?? [ 300.029293][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 300.038700][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 300.051428][ T116] usb usb5-port1: unable to enumerate USB device [ 300.630719][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 300.903078][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 301.286775][ T798] usb 3-1: USB disconnect, device number 43 [ 301.286939][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 301.417838][T10430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.427085][T10430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.451008][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 301.459128][ T9] em28xx 4-1:0.0: board has no eeprom [ 301.531477][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 301.539422][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 301.546409][ T5885] em28xx 4-1:0.0: Binding DVB extension [ 301.558963][ T9] usb 4-1: USB disconnect, device number 76 [ 301.573979][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 301.590886][ T5920] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 301.617948][ T5885] em28xx 4-1:0.0: Registering input extension [ 301.624486][ T9] em28xx 4-1:0.0: Closing input extension [ 301.636723][ T9] em28xx 4-1:0.0: Freeing device [ 301.671814][ T798] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 301.752632][ T5920] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 301.762101][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.773623][ T5920] usb 5-1: config 0 descriptor?? [ 301.782305][ T5920] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 301.821933][ T798] usb 3-1: not running at top speed; connect to a high speed hub [ 301.831485][ T798] usb 3-1: config 127 has an invalid interface number: 100 but max is 0 [ 301.839999][ T798] usb 3-1: config 127 has an invalid descriptor of length 131, skipping remainder of the config [ 301.851930][ T798] usb 3-1: config 127 has no interface number 0 [ 301.858271][ T798] usb 3-1: config 127 interface 100 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.872731][ T798] usb 3-1: config 127 interface 100 has no altsetting 0 [ 301.882461][ T798] usb 3-1: New USB device found, idVendor=19d2, idProduct=0118, bcdDevice=f1.5a [ 301.891624][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.899651][ T798] usb 3-1: Product: syz [ 301.904105][ T798] usb 3-1: Manufacturer: syz [ 301.908749][ T798] usb 3-1: SerialNumber: syz [ 301.989859][ T5920] gp8psk: usb in 128 operation failed. [ 302.013923][T10434] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1408'. [ 302.023493][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1408'. [ 302.133523][ T798] option 3-1:127.100: GSM modem (1-port) converter detected [ 302.152869][ T798] usb 3-1: USB disconnect, device number 44 [ 302.159353][T10441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 302.163732][ T798] option 3-1:127.100: device disconnected [ 302.165911][T10441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 302.174703][T10441] vhci_hcd vhci_hcd.0: Device attached [ 302.197667][T10441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.208601][ T5920] gp8psk: usb in 146 operation failed. [ 302.209410][T10441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.216999][ T5920] gp8psk: failed to get FW version [ 302.229929][T10442] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 302.231663][ T5920] gp8psk: FPGA Version = 6 [ 302.241466][ T78] vhci_hcd vhci_hcd.1: stop threads [ 302.241489][ T78] vhci_hcd vhci_hcd.1: release socket [ 302.241511][ T78] vhci_hcd vhci_hcd.1: disconnect device [ 302.320948][ T5895] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 302.433689][T10426] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1405'. [ 302.445892][ T5920] gp8psk: usb in 138 operation failed. [ 302.452681][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 302.462674][ T5920] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 302.471472][ T5920] usb 5-1: media controller created [ 302.475927][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 302.487928][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 302.495414][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.508881][ T5895] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 302.518401][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.532392][ T5895] usb 4-1: Product: syz [ 302.533977][ T5920] gp8psk_fe: Frontend attached [ 302.536602][ T5895] usb 4-1: Manufacturer: syz [ 302.544147][ T5920] usb 5-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 302.553276][ T5895] usb 4-1: SerialNumber: syz [ 302.556835][ T5920] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 302.568548][ T5895] usb 4-1: config 0 descriptor?? [ 302.621970][ T5920] gp8psk: usb in 138 operation failed. [ 302.627508][ T5920] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 302.637332][ T5920] gp8psk: found Genpix USB device pID = 203 (hex) [ 302.657678][ T5920] usb 5-1: USB disconnect, device number 45 [ 302.826005][ T5920] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 302.836912][ T5895] usb 4-1: USB disconnect, device number 77 [ 302.899143][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.077777][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.092558][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.113757][ T30] audit: type=1326 audit(1761591333.690:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.1.1418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa50218efc9 code=0x0 [ 303.271305][ T5920] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 303.347205][T10464] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 303.353764][T10464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 303.362897][T10464] vhci_hcd vhci_hcd.0: Device attached [ 303.421925][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 303.429100][ T5920] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 303.438373][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.454224][ T5920] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 303.470919][ T5885] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 303.600911][ T5895] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 303.620932][ T116] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 303.620958][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 303.623509][ T5885] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 303.642820][ T5885] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 303.653677][ T5885] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 303.669477][ T5885] usb 5-1: config 0 interface 0 has no altsetting 1 [ 303.677484][ T5885] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 303.686689][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.694786][ T5885] usb 5-1: SerialNumber: syz [ 303.702002][ T5885] usb 5-1: config 0 descriptor?? [ 303.713399][ T5885] usb-storage 5-1:0.0: USB Mass Storage device detected [ 303.724902][ T5885] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 303.772984][ T116] usb 4-1: Using ep0 maxpacket: 16 [ 303.779199][ T116] usb 4-1: no configurations [ 303.784884][ T116] usb 4-1: can't read configurations, error -22 [ 303.914345][ T5911] usb 5-1: USB disconnect, device number 46 [ 303.923873][ T116] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 304.080971][ T116] usb 4-1: Using ep0 maxpacket: 16 [ 304.086982][ T116] usb 4-1: no configurations [ 304.092440][ T116] usb 4-1: can't read configurations, error -22 [ 304.099154][ T116] usb usb4-port1: attempt power cycle [ 304.278944][ T5920] gspca_nw80x: reg_r err -32 [ 304.283986][ T5920] nw80x 3-1:3.0: probe with driver nw80x failed with error -32 [ 304.440964][ T116] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 304.474282][ T116] usb 4-1: Using ep0 maxpacket: 16 [ 304.480478][ T116] usb 4-1: no configurations [ 304.494570][ T116] usb 4-1: can't read configurations, error -22 [ 304.631111][ T116] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 304.671540][ T116] usb 4-1: Using ep0 maxpacket: 16 [ 304.677562][ T116] usb 4-1: no configurations [ 304.683609][ T116] usb 4-1: can't read configurations, error -22 [ 304.690711][ T116] usb usb4-port1: unable to enumerate USB device [ 305.121008][ T1154] wlan1: Trigger new scan to find an IBSS to join [ 305.362253][ T5885] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 305.510953][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 305.517859][ T5885] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 305.527200][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.537663][ T5885] usb 5-1: config 0 descriptor?? [ 305.546457][ T5885] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 306.038670][ T116] usb 3-1: USB disconnect, device number 45 [ 306.521868][T10465] vhci_hcd: connection reset by peer [ 306.528697][ T49] vhci_hcd vhci_hcd.3: stop threads [ 306.534284][ T49] vhci_hcd vhci_hcd.3: release socket [ 306.541876][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 306.720727][T10521] tipc: Started in network mode [ 306.727543][T10521] tipc: Node identity 4, cluster identity 4711 [ 306.736851][T10521] tipc: Node number set to 4 [ 306.826417][T10523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.835799][T10523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.905269][ T30] audit: type=1400 audit(1761591337.480:192): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10524 comm="syz.2.1441" [ 306.937810][ T30] audit: type=1800 audit(1761591337.510:193): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1441" name="file1" dev="overlay" ino=1726 res=0 errno=0 [ 307.211159][ T5920] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 307.260969][ T116] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 307.381034][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 307.390169][ T5920] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 307.399052][ T5920] usb 3-1: config 0 has no interface number 0 [ 307.411160][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 307.411444][ T5920] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 307.426582][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.428592][ T116] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 307.435535][ T5920] usb 3-1: Product: syz [ 307.450765][ T5920] usb 3-1: Manufacturer: syz [ 307.455812][ T5920] usb 3-1: SerialNumber: syz [ 307.465880][ T116] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 307.475612][ T116] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 307.477800][ T5920] usb 3-1: config 0 descriptor?? [ 307.484300][ T116] usb 4-1: Product: syz [ 307.501719][ T116] usb 4-1: Manufacturer: syz [ 307.510177][T10535] netlink: 'syz.1.1444': attribute type 29 has an invalid length. [ 307.519002][T10536] netlink: 'syz.1.1444': attribute type 29 has an invalid length. [ 307.527610][T10535] netlink: 'syz.1.1444': attribute type 29 has an invalid length. [ 307.543805][ T116] usb 4-1: SerialNumber: syz [ 307.547034][ T116] usb 4-1: config 0 descriptor?? [ 307.555697][T10533] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 307.639476][T10538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1445'. [ 307.696159][ T5920] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 307.711954][ T5920] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 307.724491][ T5920] uvcvideo 3-1:0.31: Failed to create links for entity 5 [ 307.731756][ T5920] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 307.753321][ T5920] usb 3-1: USB disconnect, device number 46 [ 307.895411][ T30] audit: type=1326 audit(1761591338.470:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.3.1443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e4ad8efc9 code=0x0 [ 307.969974][T10544] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 307.976567][T10544] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 307.985627][T10544] vhci_hcd vhci_hcd.0: Device attached [ 308.006078][T10544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.019766][T10544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.029435][T10545] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 308.037653][ T36] vhci_hcd vhci_hcd.1: stop threads [ 308.043163][ T36] vhci_hcd vhci_hcd.1: release socket [ 308.048602][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 308.081180][ T1154] wlan1: Trigger new scan to find an IBSS to join [ 308.220971][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 308.555194][ T5885] gspca_sonixj: reg_w err -71 [ 308.566815][ T5885] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 308.583590][ T5885] usb 5-1: USB disconnect, device number 47 [ 308.620750][T10557] netlink: 'syz.1.1450': attribute type 27 has an invalid length. [ 308.693556][T10559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.706600][T10559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.717605][ T5895] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 308.730198][T10559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.741338][T10559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.370958][ T43] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 309.417732][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.430437][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.456248][T10568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.466973][T10568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.520982][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 309.528195][ T43] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 309.537662][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.558612][ T43] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 309.691069][ T116] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 309.853411][ T116] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 309.862729][ T116] usb 3-1: config 0 has no interface number 0 [ 309.868984][ T116] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 309.880016][ T116] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 309.891142][ T116] usb 3-1: config 0 interface 230 has no altsetting 0 [ 309.901286][ T116] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 309.910450][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.918619][ T116] usb 3-1: Product: syz [ 309.923017][ T116] usb 3-1: Manufacturer: syz [ 309.927662][ T116] usb 3-1: SerialNumber: syz [ 309.936265][ T116] usb 3-1: config 0 descriptor?? [ 309.942418][T10567] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 309.950500][T10567] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 309.963623][ T116] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 309.970958][ T43] gspca_nw80x: reg_r err -32 [ 309.975650][ T43] nw80x 5-1:3.0: probe with driver nw80x failed with error -32 [ 309.986963][ T116] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 310.043222][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.058670][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.061125][ T5885] usb 4-1: USB disconnect, device number 82 [ 310.079375][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.094493][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.115162][T10572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.156081][T10574] pimreg: entered allmulticast mode [ 310.193989][ T116] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 310.201165][T10574] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 310.211179][ T116] usb 3-1: USB disconnect, device number 47 [ 310.214038][T10574] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 310.226441][T10574] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 310.685463][T10579] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 310.692148][T10579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 310.700937][T10579] vhci_hcd vhci_hcd.0: Device attached [ 310.711558][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.726758][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.754237][T10580] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 310.761921][ T49] vhci_hcd vhci_hcd.1: stop threads [ 310.767455][ T49] vhci_hcd vhci_hcd.1: release socket [ 310.773528][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 310.982406][ T116] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 310.993099][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.041105][ T1154] wlan1: Trigger new scan to find an IBSS to join [ 311.142161][T10585] Invalid source name [ 311.152842][ T116] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 311.161211][ T116] usb 3-1: config 0 has no interface number 0 [ 311.167352][ T116] usb 3-1: config 0 interface 183 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 311.178566][ T116] usb 3-1: config 0 interface 183 has no altsetting 0 [ 311.187731][ T116] usb 3-1: string descriptor 0 read error: -22 [ 311.198208][ T116] usb 3-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=cd.69 [ 311.208479][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.219651][ T116] usb 3-1: config 0 descriptor?? [ 311.229479][T10583] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 311.240473][T10587] tipc: Started in network mode [ 311.245761][T10587] tipc: Node identity 4, cluster identity 4711 [ 311.250037][ T116] gspca_main: tv8532-2.14.0 probing 0923:010f [ 311.252732][T10587] tipc: Node number set to 4 [ 311.359075][T10591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.369555][T10591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.480347][ T116] usb 3-1: USB disconnect, device number 48 [ 311.590883][ T43] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 311.660335][T10603] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 311.668412][T10603] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1468'. [ 311.684557][T10603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1468'. [ 311.753106][ T43] usb 4-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 311.765353][ T43] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.779807][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 311.787285][ T43] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 311.797941][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.812352][ T43] usb 4-1: config 0 descriptor?? [ 311.824565][ T43] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 311.939784][T10609] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 311.946420][T10609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 311.954865][T10609] vhci_hcd vhci_hcd.0: Device attached [ 311.968980][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.983339][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.009600][T10610] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 312.022039][ T78] vhci_hcd vhci_hcd.1: stop threads [ 312.027326][ T78] vhci_hcd vhci_hcd.1: release socket [ 312.033792][ T78] vhci_hcd vhci_hcd.1: disconnect device [ 312.154839][ T5920] usb 5-1: USB disconnect, device number 48 [ 312.619577][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.634641][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.941896][T10649] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1484'. [ 313.041120][ T1154] wlan1: Trigger new scan to find an IBSS to join [ 313.324794][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.337740][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.353845][T10661] ------------[ cut here ]------------ [ 313.359391][T10661] usb 2-1: BOGUS control dir, pipe 80004180 doesn't match bRequestType c0 [ 313.382803][T10661] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x114d/0x1910, CPU#0: syz.1.1490/10661 [ 313.393421][T10661] Modules linked in: [ 313.397647][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.1.1490 Not tainted syzkaller #0 PREEMPT(full) [ 313.407234][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.417467][T10661] RIP: 0010:usb_submit_urb+0x114d/0x1910 [ 313.423229][T10661] Code: df 0f b6 44 05 00 84 c0 0f 85 4b 06 00 00 45 0f b6 45 00 48 c7 c7 a0 31 33 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 44 5c 81 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 313.443929][T10661] RSP: 0018:ffffc9000b20f820 EFLAGS: 00010246 [ 313.450060][T10661] RAX: 834fe47f79ebc000 RBX: ffff8880280d4200 RCX: 0000000000080000 [ 313.458709][T10661] RDX: ffffc9000b86a000 RSI: 00000000000037d3 RDI: 00000000000037d4 [ 313.467032][T10661] RBP: 1ffff110054c6508 R08: 0000000000000003 R09: 0000000000000004 [ 313.475177][T10661] R10: dffffc0000000000 R11: fffffbfff1c3a6c8 R12: ffff88807d600100 [ 313.483301][T10661] R13: ffff88802a632840 R14: 0000000080004180 R15: ffff888063a89ca0 [ 313.491387][T10661] FS: 00007fa502f7a6c0(0000) GS:ffff8881258a6000(0000) knlGS:0000000000000000 [ 313.500365][T10661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.507070][T10661] CR2: 0000200000be6010 CR3: 0000000029c34000 CR4: 00000000003526f0 [ 313.515149][T10661] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000698 [ 313.523630][T10661] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 313.531701][T10661] Call Trace: [ 313.535015][T10661] [ 313.538036][T10661] usb_start_wait_urb+0x115/0x4f0 [ 313.543176][T10661] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 313.549534][T10661] usb_control_msg+0x232/0x3e0 [ 313.554944][T10661] dib0700_i2c_xfer+0x4fc/0xf70 [ 313.559875][T10661] __i2c_transfer+0x874/0x21a0 [ 313.564811][T10661] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.570067][T10661] ? __pfx___i2c_transfer+0x10/0x10 [ 313.575429][T10661] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 313.580889][T10661] ? i2c_transfer+0x120/0x3a0 [ 313.585613][T10661] i2c_transfer+0x25b/0x3a0 [ 313.590206][T10661] ? __pfx_i2c_transfer+0x10/0x10 [ 313.595338][T10661] ? _copy_from_user+0x94/0xb0 [ 313.600162][T10661] i2cdev_ioctl_rdwr+0x460/0x740 [ 313.605290][T10661] i2cdev_ioctl+0x64b/0x820 [ 313.609838][T10661] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 313.614951][T10661] ? __fget_files+0x3a0/0x420 [ 313.619675][T10661] ? __fget_files+0x2a/0x420 [ 313.624415][T10661] ? bpf_lsm_file_ioctl+0x9/0x20 [ 313.629396][T10661] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 313.634501][T10661] __se_sys_ioctl+0xfc/0x170 [ 313.639170][T10661] do_syscall_64+0xfa/0xfa0 [ 313.643759][T10661] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.649731][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.656481][T10661] ? clear_bhb_loop+0x60/0xb0 [ 313.661365][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.667310][T10661] RIP: 0033:0x7fa50218efc9 [ 313.671835][T10661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.691617][T10661] RSP: 002b:00007fa502f7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.700089][T10661] RAX: ffffffffffffffda RBX: 00007fa5023e5fa0 RCX: 00007fa50218efc9 [ 313.708192][T10661] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004 [ 313.716291][T10661] RBP: 00007fa502211f91 R08: 0000000000000000 R09: 0000000000000000 [ 313.724529][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.732586][T10661] R13: 00007fa5023e6038 R14: 00007fa5023e5fa0 R15: 00007ffd68010a58 [ 313.740671][T10661] [ 313.743811][T10661] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 313.751131][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.1.1490 Not tainted syzkaller #0 PREEMPT(full) [ 313.760543][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.770610][T10661] Call Trace: [ 313.773900][T10661] [ 313.776838][T10661] dump_stack_lvl+0x99/0x250 [ 313.781443][T10661] ? __asan_memcpy+0x40/0x70 [ 313.786048][T10661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.791260][T10661] ? __pfx__printk+0x10/0x10 [ 313.795877][T10661] vpanic+0x237/0x6d0 [ 313.799865][T10661] ? __pfx_vpanic+0x10/0x10 [ 313.804374][T10661] ? is_bpf_text_address+0x292/0x2b0 [ 313.809671][T10661] ? is_bpf_text_address+0x26/0x2b0 [ 313.814880][T10661] panic+0xb9/0xc0 [ 313.818605][T10661] ? __pfx_panic+0x10/0x10 [ 313.823048][T10661] __warn+0x334/0x4c0 [ 313.827034][T10661] ? usb_submit_urb+0x114d/0x1910 [ 313.832075][T10661] ? usb_submit_urb+0x114d/0x1910 [ 313.837116][T10661] report_bug+0x2be/0x4f0 [ 313.841459][T10661] ? usb_submit_urb+0x114d/0x1910 [ 313.846503][T10661] ? usb_submit_urb+0x114d/0x1910 [ 313.851550][T10661] ? usb_submit_urb+0x114f/0x1910 [ 313.856607][T10661] handle_bug+0x84/0x160 [ 313.860874][T10661] exc_invalid_op+0x1a/0x50 [ 313.865393][T10661] asm_exc_invalid_op+0x1a/0x20 [ 313.870252][T10661] RIP: 0010:usb_submit_urb+0x114d/0x1910 [ 313.875903][T10661] Code: df 0f b6 44 05 00 84 c0 0f 85 4b 06 00 00 45 0f b6 45 00 48 c7 c7 a0 31 33 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 44 5c 81 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 313.895518][T10661] RSP: 0018:ffffc9000b20f820 EFLAGS: 00010246 [ 313.901602][T10661] RAX: 834fe47f79ebc000 RBX: ffff8880280d4200 RCX: 0000000000080000 [ 313.909582][T10661] RDX: ffffc9000b86a000 RSI: 00000000000037d3 RDI: 00000000000037d4 [ 313.917559][T10661] RBP: 1ffff110054c6508 R08: 0000000000000003 R09: 0000000000000004 [ 313.925541][T10661] R10: dffffc0000000000 R11: fffffbfff1c3a6c8 R12: ffff88807d600100 [ 313.933520][T10661] R13: ffff88802a632840 R14: 0000000080004180 R15: ffff888063a89ca0 [ 313.941524][T10661] usb_start_wait_urb+0x115/0x4f0 [ 313.946568][T10661] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 313.952135][T10661] usb_control_msg+0x232/0x3e0 [ 313.956947][T10661] dib0700_i2c_xfer+0x4fc/0xf70 [ 313.961836][T10661] __i2c_transfer+0x874/0x21a0 [ 313.966621][T10661] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.971849][T10661] ? __pfx___i2c_transfer+0x10/0x10 [ 313.977069][T10661] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 313.982458][T10661] ? i2c_transfer+0x120/0x3a0 [ 313.987160][T10661] i2c_transfer+0x25b/0x3a0 [ 313.991793][T10661] ? __pfx_i2c_transfer+0x10/0x10 [ 313.996829][T10661] ? _copy_from_user+0x94/0xb0 [ 314.001612][T10661] i2cdev_ioctl_rdwr+0x460/0x740 [ 314.006567][T10661] i2cdev_ioctl+0x64b/0x820 [ 314.011080][T10661] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 314.016142][T10661] ? __fget_files+0x3a0/0x420 [ 314.020836][T10661] ? __fget_files+0x2a/0x420 [ 314.025444][T10661] ? bpf_lsm_file_ioctl+0x9/0x20 [ 314.030388][T10661] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 314.035429][T10661] __se_sys_ioctl+0xfc/0x170 [ 314.040028][T10661] do_syscall_64+0xfa/0xfa0 [ 314.044547][T10661] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.049758][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.055831][T10661] ? clear_bhb_loop+0x60/0xb0 [ 314.060525][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.066433][T10661] RIP: 0033:0x7fa50218efc9 [ 314.070867][T10661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.090487][T10661] RSP: 002b:00007fa502f7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.098914][T10661] RAX: ffffffffffffffda RBX: 00007fa5023e5fa0 RCX: 00007fa50218efc9 [ 314.106896][T10661] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004 [ 314.114882][T10661] RBP: 00007fa502211f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.122861][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.130842][T10661] R13: 00007fa5023e6038 R14: 00007fa5023e5fa0 R15: 00007ffd68010a58 [ 314.138837][T10661] [ 314.142203][T10661] Kernel Offset: disabled [ 314.146533][T10661] Rebooting in 86400 seconds..