last executing test programs: 2m23.060573711s ago: executing program 3 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf4000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, 0x0, 0x0) 2m21.333446944s ago: executing program 3 (id=1557): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) 2m11.051784674s ago: executing program 3 (id=1582): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x0, 0xb}, {0x1, 0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xad43, 0x2, 0x0, 0x10000, 0x2}, 0x100, 0x1, 0x1, 0x5, 0x1000, 0x12, 0xc, 0x1e, 0x7, 0x1, {0x9, 0x2, 0x1, 0x6, 0x4, 0xfd}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) 2m9.35781203s ago: executing program 3 (id=1586): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000100)) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r14, r13, 0x80000) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) syz_ublk_setup_queues(r10, r9, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r10, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r8, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 2m7.876038109s ago: executing program 3 (id=1590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf4000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000100), 0x0) 2m5.578180084s ago: executing program 3 (id=1593): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9f}}}, &(0x7f0000000300)=0x0) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r2, 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r9, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r10, 0x0, 0xb00) r11 = dup3(r8, r7, 0x80000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) syz_ublk_setup_queues(r5, r4, &(0x7f0000000540)={0x0, 0x3e0c, 0x0, 0x7, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2000, 0x0, 0x32d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x1002db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x42, 0x0, r11, 0xc0107526, 0x0, 0x20000700, 0x0, 0x0, {0x10}, 0x0, r3, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r12, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) 1m50.17343455s ago: executing program 32 (id=1593): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9f}}}, &(0x7f0000000300)=0x0) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r2, 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r9, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r10, 0x0, 0xb00) r11 = dup3(r8, r7, 0x80000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) syz_ublk_setup_queues(r5, r4, &(0x7f0000000540)={0x0, 0x3e0c, 0x0, 0x7, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2000, 0x0, 0x32d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x1002db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x42, 0x0, r11, 0xc0107526, 0x0, 0x20000700, 0x0, 0x0, {0x10}, 0x0, r3, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r12, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) 12.805077561s ago: executing program 1 (id=1800): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r13, r12, 0x80000) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) syz_ublk_setup_queues(r10, r9, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r10, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r8, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r14, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 11.606392575s ago: executing program 2 (id=1802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002a40)={"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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, 0x0, 0x0, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.565280971s ago: executing program 1 (id=1803): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10.081980462s ago: executing program 1 (id=1805): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x86, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416440c05114d2f87e5940c05ab840c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x94) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 9.805713945s ago: executing program 0 (id=1807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x80c4) r1 = fcntl$dupfd(r0, 0x406, r0) read$FUSE(r1, &(0x7f00000019c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x0) ptrace(0x8, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e21, 0x4, @loopback}, @ib={0x1b, 0x0, 0x9, {"0100"}}}}, 0x118) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0xd, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000000000004000000010000000000", @ANYRES32, @ANYBLOB="0000002300000000000000000000000000000000115a8faf179b964c8637698c025360a4a02639664a8e20581064627e9d4163ec6a67c1d4429f72b744af11fe5e556021c7abee805b8ef34467c2fc1771b043353e9e874e883bbe56f6a2a7d2d400010000c5c239df88308a558fd49373d025", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0x0) 8.573692309s ago: executing program 0 (id=1810): write(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 7.844087319s ago: executing program 1 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 7.704457211s ago: executing program 5 (id=1813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a48001280110001006272696467655f736c61766500000000300005800400180005001e00000000000500090001000000080025008000000006001f00060000000500010003000000140003006272696467655f736c6176655f30"], 0x7c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 6.245591979s ago: executing program 5 (id=1815): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6.058599746s ago: executing program 2 (id=1816): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 5.037823919s ago: executing program 5 (id=1818): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x180100, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './config/usb_gadget/g1/strings/0x409/serialnumber', [{}, {0x20, ':'}, {0x20, '\'\\'}, {0x20, '/dev/sequencer2\x00'}, {0x20, '})}'}], 0xa, "34734795562c88870f4a889b5170384a9b2d897f9d84c1aa0445f02b69ccd37d8d197cd7628fe92f28ba686f468ff4ec79441ce753f039243a8f48f2dd21102fd670723d7271b75ed28cf29b2d0ed9d1071c6c0ecf20f0b44a9f42b61bfcb97f509a7f4aab923afadad8bc027a7e0bb69679c0299fe212b7bda9e7b59c21ffd76db63139ead8b018c5d29b1141d7b73f16733cecf79435776d0597daaa243724966b8fc64dfac6ab7be12d65e11df7e0b8cca46c7b33ca58310d42d099ffe49ef7242da7b47ee0"}, 0x117) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x25042f2ad3610f7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000040)={0x20080522}, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) 4.816366481s ago: executing program 1 (id=1820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x80c4) r1 = fcntl$dupfd(r0, 0x406, r0) read$FUSE(r1, &(0x7f00000019c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x0) ptrace(0x8, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e21, 0x4, @loopback}, @ib={0x1b, 0x0, 0x9, {"0100"}}}}, 0x118) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0xd, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000000000004000000010000000000", @ANYRES32, @ANYBLOB="0000002300000000000000000000000000000000115a8faf179b964c8637698c025360a4a02639664a8e20581064627e9d4163ec6a67c1d4429f72b744af11fe5e556021c7abee805b8ef34467c2fc1771b043353e9e874e883bbe56f6a2a7d2d400010000c5c239df88308a558fd49373d025", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0x0) 4.447390665s ago: executing program 0 (id=1821): getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f0000000000)=0xffffffffffffff5b) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000000c0)) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 4.282330173s ago: executing program 2 (id=1822): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x86, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416440c05114d2f87e5940c05ab840c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x94) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 3.957334783s ago: executing program 4 (id=1823): socket$inet6_sctp(0xa, 0x5, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) writev(r0, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f00000001c0)) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000340)={0x4, 0x0, 0x3013, 0xff4f}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x800, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x7, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8, 0x200]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2, r4}, 0x14) 3.903796955s ago: executing program 5 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.739560166s ago: executing program 4 (id=1825): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a48001280110001006272696467655f736c61766500000000300005800400180005001e00000000000500090001000000080025008000000006001f00060000000500010003000000140003006272696467655f736c6176655f30"], 0x7c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 3.598335423s ago: executing program 4 (id=1826): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002a40)={"a623a338fa9b2e336200fa9a4d0c2872f6884e3f89472cf69be7bef9aa789437d43bc9c83098bf403ddf9c6d9d3c058a05f062171d20b13f7e912c58c1f864fe2c82d0bc512dc9f0327d51c94d6a8c2bd6939f72ae3c4cfbf4a2e5194717c03a2a0438025dea55576a9999293cf8f0dd3a659db55673e9c3c4fa2c523a80fed83d81c5000d430479de8caf8e9046847d62293f95a4a796d9e2c8242b06a322cdf7a00c06bd39c01d23e0e818a219c73fb684fa2f51980ba4029312808734ceabfb8648a96c9095d32b53163aec0437017c3c27e583f9615962378dddbadcd64a1bb0502d8a1fe3a73f6e6e9d0711f22428f7af6e5a64e91eb245d35badd79d9c7c1f9cfae34f6f8067e8a3c30b6e9476145f540b1dc8a3914478525057291b5b07f15ff44f1f6a38520e4529e511b9221f6924953b4d324103e988125831b10b9e74fcf17c288b48ee2c5f9bb7464d25952aeda5525e4b5fdfa9ff692cf633969ddf81b9db1437f82d41cfd49b013d272330241833266d10bb4b24da901784518cf3ca945a2e31e81ba7c62d54a0bc979c2aec72cb930a26eda052e54abda2154353cfb62f736e851e6bd5193f2b14a244ac18ddb7414e549b23b2f017dbd740a1b861b3eb3b757d82f52d5ba212bc9f1294c0a8df86b19be9546ba2c99085acc135e9c5508d3c8105a8031db874dd3432877f2194a09c4ea24926688f6e0befeb3f8fbc424e394c59a9dc3af51ec29dfc72b70b8f439f701974891343364e69f11799b9c6093d5b520e38020499af79a08a7380454fefac48611e997ba58e2f1638b106b740e357a7a6ec3e38064342f89486df4513dc83119858dcdfcf11f4493862e7408191ae5fd9434c7655682a1feb1f0b01080ad3dfec3a7a4c2f391263edf954b0f367aaf058b9c11696a28941ef0be8b50b6eaf7947008726b89fe9196ce63ea095833ca43e699f4fd7e979a8e2c67df27b6e632703841d3100663fa77daf75c70d98b8ed344ceee808b912a53e6eb726d5fe3a78af4768dca1eafa20d895cdece3ff8f2899e2fce94e0ee8d600ca8d6ce7671f492ad309c0db42d4d53f8d3d5a55bebf2f8b61c98257adc174e56fe1554ef23be06b29646fc4c9be23451b249c2516cbc42fae75177b38caa519fd1cb327639f92dfecf2dfdbe4ca29f1b8fea028f72e1bb7fe26ab6dc9b727c6a70c6aa05e969d7b019a16d6a2c062958f692fb493436cb55c634b744626539d4480afe412d527b22a9b7691b0701c7ee06e2b6b405ce22515208b0551587c878335a1e3356a94786b11f3c8a140fe3de0871041545cdcd8e3b7cd74de34140711399cecf462e6a3a89696836e87582a9ca2912a749ca4f7d8201e6f278970cc95e39c351d5404120fdd056d59450570d3c8e657bd19e23edc9b09993887240d4a6160f60aed307a7e2db98c6451"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, 0x0, 0x0, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.535858402s ago: executing program 5 (id=1827): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.512027198s ago: executing program 0 (id=1828): mount(0x0, 0x0, &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='oom_score_adj 1', 0x11) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e00030100420208030200012030000904"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f00000000c0)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x5}, &(0x7f0000000500)=[{}, {}, {}, {}, {}]) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000240)=0x6d) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5e}, "5944bffe7d59cc65a0d4e5b4d7ca048d4f017bc05c88465f8707dacc0beaae514798fcaf746a30eea2dff13695cb35cebfd8499c729400ef5fec89f40a52a0ff8a8968226a809d33f3b5181cd324a961cf4d2c344f53d8a95275129fe99e"}, 0x62) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 3.113402566s ago: executing program 2 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 3.100678858s ago: executing program 4 (id=1830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000700000000850000000c000000b700000000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0], &(0x7f0000000300), 0x10, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x4000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000740)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f00000008c0)={r3, 0x1, 0x2}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x70, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f00000004c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x2, 0x2c, 0x0, @void, @void, @void, @value=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000680)={0x84001, 0xd, 0x14}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r8, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r8, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000700)={'sit0\x00', &(0x7f00000006c0)={@remote, @multicast1, 0x5, 0x2}}) 2.044584245s ago: executing program 2 (id=1831): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r13, r12, 0x80000) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) syz_ublk_setup_queues(r10, r9, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r10, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r8, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r14, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 1.900843495s ago: executing program 4 (id=1832): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400"], 0xbc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) r3 = socket(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @remote, r6}, 0xc) 880.288082ms ago: executing program 1 (id=1833): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002000), 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 875.076448ms ago: executing program 4 (id=1834): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x180100, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './config/usb_gadget/g1/strings/0x409/serialnumber', [{}, {0x20, ':'}, {0x20, '\'\\'}, {0x20, '/dev/sequencer2\x00'}, {0x20, '})}'}], 0xa, "34734795562c88870f4a889b5170384a9b2d897f9d84c1aa0445f02b69ccd37d8d197cd7628fe92f28ba686f468ff4ec79441ce753f039243a8f48f2dd21102fd670723d7271b75ed28cf29b2d0ed9d1071c6c0ecf20f0b44a9f42b61bfcb97f509a7f4aab923afadad8bc027a7e0bb69679c0299fe212b7bda9e7b59c21ffd76db63139ead8b018c5d29b1141d7b73f16733cecf79435776d0597daaa243724966b8fc64dfac6ab7be12d65e11df7e0b8cca46c7b33ca58310d42d099ffe49ef7242da7b47ee0"}, 0x117) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x25042f2ad3610f7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000040)={0x20080522}, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) 855.292402ms ago: executing program 2 (id=1835): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000f00)=""/102400, 0x19000) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) copy_file_range(r4, &(0x7f0000000300)=0x4, r0, 0x0, 0xfffffffffffffffa, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x7664, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x3, 0x20002f7, 0x0, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 309.636669ms ago: executing program 0 (id=1836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a48001280110001006272696467655f736c61766500000000300005800400180005001e00000000000500090001000000080025008000000006001f00060000000500010003000000140003006272696467655f736c6176655f30"], 0x7c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 177.562069ms ago: executing program 5 (id=1837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4890) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 0s ago: executing program 0 (id=1838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) kernel console output (not intermixed with test programs): fig 0 descriptor?? [ 322.955834][ T7664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.189405][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 325.252724][ T5621] usb 2-1: USB disconnect, device number 13 [ 325.469891][ T7691] siw: device registration error -23 [ 325.567292][ T31] audit: type=1800 audit(1786363923.249:45): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.578" name="attr_allow_any_host" dev="configfs" ino=15141 res=0 errno=0 [ 325.624969][ T31] audit: type=1800 audit(1786363923.319:46): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.578" name="addr_adrfam" dev="configfs" ino=15142 res=0 errno=0 [ 325.645577][ T31] audit: type=1800 audit(1786363923.349:47): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.578" name="addr_trsvcid" dev="configfs" ino=15143 res=0 errno=0 [ 325.652766][ T7691] nvmet_rdma: malformed ip/port passed: :4421 [ 331.727283][ T7731] siw: device registration error -23 [ 331.739119][ T52] Process accounting resumed [ 331.744895][ T31] audit: type=1800 audit(1786363929.449:48): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.591" name="attr_allow_any_host" dev="configfs" ino=15609 res=0 errno=0 [ 331.770908][ T31] audit: type=1800 audit(1786363929.479:49): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.591" name="addr_adrfam" dev="configfs" ino=15610 res=0 errno=0 [ 331.815709][ T31] audit: type=1800 audit(1786363929.519:50): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.591" name="addr_trsvcid" dev="configfs" ino=15226 res=0 errno=0 [ 331.816941][ T7731] nvmet_rdma: malformed ip/port passed: :4421 [ 331.848537][ T5621] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 331.979226][ T5621] usb 4-1: device descriptor read/64, error -71 [ 332.015561][ T7735] pim6reg: entered allmulticast mode [ 332.016400][ T7735] pim6reg: left allmulticast mode [ 332.159516][ T5348] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 332.218512][ T5621] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 332.319240][ T5348] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 332.330005][ T5348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.343708][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.343753][ T5348] usb 2-1: Product: syz [ 332.343796][ T5348] usb 2-1: Manufacturer: syz [ 332.343816][ T5348] usb 2-1: SerialNumber: syz [ 332.348696][ T5621] usb 4-1: device descriptor read/64, error -71 [ 332.378800][ T5348] pl2303 2-1:1.0: required endpoints missing [ 332.461033][ T5621] usb usb4-port1: attempt power cycle [ 332.565008][ T5801] usb 2-1: USB disconnect, device number 14 [ 333.158564][ T5621] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 333.179424][ T5621] usb 4-1: device descriptor read/8, error -71 [ 333.626930][ T5621] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 333.728589][ T5621] usb 4-1: device descriptor read/8, error -71 [ 333.839155][ T5621] usb usb4-port1: unable to enumerate USB device [ 341.498973][ T7812] NILFS (loop3): device size too small [ 341.510295][ T7812] MTD: Couldn't look up './dev/mtdblock0': -2 [ 344.608530][ T31] audit: type=1800 audit(1786363942.089:51): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.621" name="file0" dev="overlay" ino=660 res=0 errno=0 [ 348.828604][ T31] audit: type=1800 audit(1786363946.449:52): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.634" name="file0" dev="overlay" ino=733 res=0 errno=0 [ 353.277732][ T7911] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 353.277905][ T7911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 353.278445][ T7911] vhci_hcd vhci_hcd.0: Device attached [ 353.687167][ T7911] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 353.687201][ T7911] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 353.757573][ T7911] vhci_hcd vhci_hcd.0: Device attached [ 353.861992][ T7907] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 353.862023][ T7907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 353.862243][ T7907] vhci_hcd vhci_hcd.0: Device attached [ 353.892905][ T7913] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 353.892935][ T7913] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 353.895027][ T7913] vhci_hcd vhci_hcd.0: Device attached [ 353.968509][ T5807] usb 39-2: new low-speed USB device number 2 using vhci_hcd [ 354.225647][ T5801] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 354.408165][ T5801] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 354.424133][ T5801] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 354.435117][ T5801] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 354.450740][ T5801] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 354.503749][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.512030][ T5801] usb 4-1: Product: syz [ 354.519928][ T5801] usb 4-1: Manufacturer: syz [ 354.526793][ T5801] usb 4-1: SerialNumber: syz [ 354.681762][ T5801] usb 4-1: config 0 descriptor?? [ 354.726475][ T7919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.746626][ T7919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.826281][ T5801] usb 4-1: ucan: probing device on interface #0 [ 355.273869][ T5801] usb 4-1: ucan: could not read protocol version, ret=26 [ 355.273918][ T5801] usb 4-1: ucan: probe failed; try to update the device firmware [ 355.408588][ T7932] netlink: 'syz.2.648': attribute type 4 has an invalid length. [ 355.556424][ T7916] vhci_hcd: connection closed [ 355.560833][ T5855] vhci_hcd vhci_hcd.3: stop threads [ 355.560906][ T5855] vhci_hcd vhci_hcd.3: release socket [ 355.562606][ T7915] vhci_hcd: connection closed [ 355.563513][ T5855] vhci_hcd vhci_hcd.3: disconnect device [ 355.563739][ T5855] vhci_hcd vhci_hcd.3: stop threads [ 355.563753][ T5855] vhci_hcd vhci_hcd.3: release socket [ 355.564041][ T7912] vhci_hcd: connection reset by peer [ 355.564236][ T5855] vhci_hcd vhci_hcd.3: disconnect device [ 355.564424][ T5855] vhci_hcd vhci_hcd.3: stop threads [ 355.564436][ T5855] vhci_hcd vhci_hcd.3: release socket [ 355.565437][ T5621] usb 4-1: USB disconnect, device number 9 [ 355.569474][ T5855] vhci_hcd vhci_hcd.3: disconnect device [ 355.588781][ T7908] vhci_hcd: connection closed [ 355.594548][ T51] vhci_hcd vhci_hcd.3: stop threads [ 355.594576][ T51] vhci_hcd vhci_hcd.3: release socket [ 355.594629][ T51] vhci_hcd vhci_hcd.3: disconnect device [ 355.978567][ T5801] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 356.123866][ T7940] NILFS (loop2): device size too small [ 356.132040][ T5801] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 356.150453][ T7940] MTD: Couldn't look up './dev/mtdblock0': -2 [ 356.157044][ T5801] usb 5-1: config 0 has no interfaces? [ 356.170820][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.170866][ T5801] usb 5-1: Product: syz [ 356.170898][ T5801] usb 5-1: Manufacturer: syz [ 356.170915][ T5801] usb 5-1: SerialNumber: syz [ 356.198266][ T5801] usb 5-1: config 0 descriptor?? [ 356.478890][ T5621] usb 5-1: USB disconnect, device number 12 [ 359.099097][ T5807] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 359.937113][ T31] audit: type=1800 audit(1786363957.639:53): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.662" name="attr_allow_any_host" dev="configfs" ino=16684 res=0 errno=0 [ 359.963521][ T31] audit: type=1800 audit(1786363957.669:54): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.662" name="addr_traddr" dev="configfs" ino=16172 res=0 errno=0 [ 359.992350][ T31] audit: type=1800 audit(1786363957.699:55): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.662" name="addr_trsvcid" dev="configfs" ino=16685 res=0 errno=0 [ 360.008731][ T7965] nvmet_rdma: malformed ip/port passed: :4421 [ 360.376220][ T7971] NILFS (loop1): device size too small [ 360.387369][ T7971] MTD: Couldn't look up './dev/mtdblock0': -2 [ 362.763805][ T7988] lo: entered allmulticast mode [ 363.042987][ T7985] lo: left allmulticast mode [ 364.523734][ T5807] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 364.635460][ T31] audit: type=1800 audit(1786363962.339:56): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.673" name="attr_allow_any_host" dev="configfs" ino=16789 res=0 errno=0 [ 364.648931][ T31] audit: type=1800 audit(1786363962.339:57): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.673" name="addr_traddr" dev="configfs" ino=16791 res=0 errno=0 [ 364.650560][ T31] audit: type=1800 audit(1786363962.339:58): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.673" name="addr_trsvcid" dev="configfs" ino=16792 res=0 errno=0 [ 364.655674][ T7999] nvmet_rdma: malformed ip/port passed: :4421 [ 364.712234][ T5807] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 364.715388][ T5807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 364.715416][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.731919][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.731949][ T5807] usb 4-1: Product: syz [ 364.731964][ T5807] usb 4-1: Manufacturer: syz [ 364.731978][ T5807] usb 4-1: SerialNumber: syz [ 364.745299][ T5807] usb 4-1: config 0 descriptor?? [ 364.746340][ T7993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 364.749747][ T5807] usb 4-1: ucan: probing device on interface #0 [ 364.749766][ T5807] usb 4-1: ucan: invalid EP count (1) [ 364.749780][ T5807] usb 4-1: ucan: probe failed; try to update the device firmware [ 365.053010][ T8008] netlink: 5 bytes leftover after parsing attributes in process `syz.4.675'. [ 365.053571][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'. [ 365.062357][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 365.120339][ T8005] usb usb9: usbfs: process 8005 (syz.0.674) did not claim interface 0 before use [ 366.296249][ T5807] usb 4-1: USB disconnect, device number 10 [ 366.594310][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 366.594352][ T8027] netlink: 212 bytes leftover after parsing attributes in process `syz.1.682'. [ 366.595912][ T8027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.682'. [ 366.632009][ T989] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 367.461715][ T989] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 367.478994][ T989] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.479085][ T989] usb 5-1: config 0 has no interface number 0 [ 367.554308][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.564204][ T989] usb 5-1: Product: syz [ 367.568721][ T989] usb 5-1: Manufacturer: syz [ 367.573792][ T989] usb 5-1: SerialNumber: syz [ 367.841456][ T989] usb 5-1: config 0 descriptor?? [ 367.861634][ T989] usb 5-1: selecting invalid altsetting 1 [ 367.861900][ T989] dvb_ttusb_budget: ttusb_init_controller: error [ 367.861990][ T989] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 368.067493][ T31] audit: type=1800 audit(1786363965.769:59): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.685" name="attr_allow_any_host" dev="configfs" ino=17415 res=0 errno=0 [ 368.674170][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.765625][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.784498][ T989] DVB: Unable to find symbol stv0299_attach() [ 368.903697][ T31] audit: type=1800 audit(1786363966.609:60): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.685" name="addr_traddr" dev="configfs" ino=17423 res=0 errno=0 [ 368.933498][ T8044] nvmet_rdma: malformed ip/port passed: :4421 [ 368.943090][ T31] audit: type=1800 audit(1786363966.639:61): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.685" name="addr_trsvcid" dev="configfs" ino=17424 res=0 errno=0 [ 369.004241][ T8023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.023116][ T8023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.075739][ T989] DVB: Unable to find symbol tda8083_attach() [ 369.082974][ T989] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 369.180443][ T989] usb 5-1: USB disconnect, device number 13 [ 369.768817][ T5807] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 369.921641][ T5807] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 369.922710][ T5807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 369.922737][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 369.922759][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 369.922777][ T5807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 369.938736][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.938763][ T5807] usb 4-1: Product: syz [ 369.938776][ T5807] usb 4-1: Manufacturer: syz [ 369.938789][ T5807] usb 4-1: SerialNumber: syz [ 369.950105][ T5807] usb 4-1: config 0 descriptor?? [ 369.952945][ T8064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 369.954589][ T5807] usb 4-1: ucan: probing device on interface #0 [ 369.954610][ T5807] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 369.954623][ T5807] usb 4-1: ucan: probe failed; try to update the device firmware [ 370.926978][ T5807] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 371.140474][ T5807] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 371.141660][ T5807] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 371.141684][ T5807] usb 5-1: config 220 has an invalid descriptor of length 110, skipping remainder of the config [ 371.141700][ T5807] usb 5-1: config 220 has no interface number 2 [ 371.141761][ T5807] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 371.141784][ T5807] usb 5-1: config 220 interface 0 has no altsetting 0 [ 371.141800][ T5807] usb 5-1: config 220 interface 76 has no altsetting 0 [ 371.141815][ T5807] usb 5-1: config 220 interface 1 has no altsetting 0 [ 371.144915][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.144938][ T5807] usb 5-1: Product: syz [ 371.144951][ T5807] usb 5-1: Manufacturer: syz [ 371.144964][ T5807] usb 5-1: SerialNumber: syz [ 372.200334][ T5807] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 372.200435][ T5807] uvcvideo 5-1:220.0: No valid video chain found. [ 372.200589][ T5807] usb 5-1: selecting invalid altsetting 0 [ 372.226221][ T5807] usb 5-1: selecting invalid altsetting 0 [ 372.226241][ T5807] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 372.228826][ T5807] usb 5-1: USB disconnect, device number 14 [ 372.604912][ T5810] usb 4-1: USB disconnect, device number 11 [ 373.030113][ T5807] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 373.505330][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 373.517729][ T5807] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 373.636778][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.636858][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.643422][ T5807] usb 5-1: config 0 descriptor?? [ 373.797923][ T5807] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 376.927776][ T5348] usb 5-1: USB disconnect, device number 15 [ 378.231934][ T8120] binder: 8115:8120 ioctl c018620c 200000000240 returned -22 [ 379.161296][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.161390][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.521054][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 381.647157][ T5810] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 382.698455][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 382.699210][ T5810] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 382.701746][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.701785][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.724118][ T5810] usb 2-1: config 0 descriptor?? [ 382.790570][ T5810] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 382.985804][ T8172] binder: 8169:8172 ioctl c018620c 200000000240 returned -22 [ 384.126178][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 384.159963][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 384.773285][ T5810] usb 2-1: USB disconnect, device number 15 [ 387.261856][ T8210] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 387.403968][ T8216] binder: 8213:8216 ioctl c018620c 200000000240 returned -22 [ 387.802618][ T8218] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 388.816343][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.734'. [ 390.555574][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.737'. [ 391.860072][ T8254] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 391.860207][ T8254] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 392.884381][ T8263] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 393.118477][ T5621] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 393.268543][ T5621] usb 4-1: Using ep0 maxpacket: 32 [ 393.269686][ T5621] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 393.271886][ T5621] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 393.275390][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 393.275437][ T5621] usb 4-1: Product: syz [ 393.275457][ T5621] usb 4-1: Manufacturer: syz [ 393.275476][ T5621] usb 4-1: SerialNumber: syz [ 393.284649][ T5621] usb 4-1: config 0 descriptor?? [ 393.285968][ T8259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.481584][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 396.073750][ T989] usb 4-1: USB disconnect, device number 12 [ 396.826190][ T8297] netlink: 92 bytes leftover after parsing attributes in process `syz.3.756'. [ 396.826276][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 397.280985][ T8304] capability: warning: `syz.0.758' uses 32-bit capabilities (legacy support in use) [ 399.678911][ T989] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 399.950704][ T989] usb 5-1: device descriptor read/64, error -71 [ 400.194913][ T989] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 400.338540][ T989] usb 5-1: device descriptor read/64, error -71 [ 400.450299][ T989] usb usb5-port1: attempt power cycle [ 400.544685][ T8333] syzkaller0: entered promiscuous mode [ 400.553007][ T8333] syzkaller0: entered allmulticast mode [ 400.800554][ T8344] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 400.800605][ T8344] netlink: 756 bytes leftover after parsing attributes in process `syz.2.768'. [ 400.822982][ T989] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 400.840894][ T989] usb 5-1: device descriptor read/8, error -71 [ 401.080073][ T989] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 401.099959][ T989] usb 5-1: device descriptor read/8, error -71 [ 401.208837][ T989] usb usb5-port1: unable to enumerate USB device [ 402.430846][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.775'. [ 402.440673][ T8366] netlink: 144 bytes leftover after parsing attributes in process `syz.1.775'. [ 402.980669][ T8378] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 404.720612][ T54] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 404.937492][ T8394] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 405.638698][ T5801] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 405.841160][ T5801] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 405.860286][ T5801] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 405.860395][ T5801] usb 4-1: config 220 has an invalid descriptor of length 110, skipping remainder of the config [ 405.860569][ T5801] usb 4-1: config 220 has no interface number 2 [ 405.860902][ T5801] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 405.860969][ T5801] usb 4-1: config 220 interface 0 has no altsetting 0 [ 405.861027][ T5801] usb 4-1: config 220 interface 76 has no altsetting 0 [ 405.861144][ T5801] usb 4-1: config 220 interface 1 has no altsetting 0 [ 405.906306][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.906358][ T5801] usb 4-1: Product: syz [ 405.906422][ T5801] usb 4-1: Manufacturer: syz [ 405.906487][ T5801] usb 4-1: SerialNumber: syz [ 407.222501][ T5801] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 407.230442][ T5801] uvcvideo 4-1:220.0: No valid video chain found. [ 407.237308][ T5801] usb 4-1: selecting invalid altsetting 0 [ 407.261689][ T5801] usb 4-1: selecting invalid altsetting 0 [ 407.267659][ T5801] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 407.284099][ T5801] usb 4-1: USB disconnect, device number 13 [ 407.370704][ T8411] syzkaller0: entered promiscuous mode [ 407.376457][ T8411] syzkaller0: entered allmulticast mode [ 407.458612][ T5621] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 407.582954][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.792'. [ 407.592596][ T8414] netlink: 144 bytes leftover after parsing attributes in process `syz.0.792'. [ 407.599908][ T5621] usb 5-1: device descriptor read/64, error -71 [ 407.828959][ T5621] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 407.970095][ T5621] usb 5-1: device descriptor read/64, error -71 [ 408.084040][ T5621] usb usb5-port1: attempt power cycle [ 408.158478][ T5801] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 408.308520][ T5801] usb 4-1: Using ep0 maxpacket: 16 [ 408.316064][ T5801] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 408.331543][ T5801] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 408.339380][ T5801] usb 4-1: can't read configurations, error -61 [ 408.423052][ T5621] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 408.445995][ T5621] usb 5-1: device descriptor read/8, error -71 [ 408.468631][ T5801] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 408.758925][ T5801] usb 4-1: Using ep0 maxpacket: 16 [ 408.880273][ T5801] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 408.891214][ T5801] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 408.891277][ T5801] usb 4-1: can't read configurations, error -61 [ 408.906696][ T5801] usb usb4-port1: attempt power cycle [ 408.938510][ T5621] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 408.959235][ T5621] usb 5-1: device descriptor read/8, error -71 [ 409.079714][ T5621] usb usb5-port1: unable to enumerate USB device [ 409.080845][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 409.338481][ T5801] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 409.401165][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 410.268557][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 410.324284][ T5801] usb 4-1: Using ep0 maxpacket: 16 [ 410.334637][ T5801] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 410.348968][ T5801] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 410.349024][ T5801] usb 4-1: can't read configurations, error -61 [ 412.589312][ T54] Bluetooth: hci4: link tx timeout [ 412.589354][ T54] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 414.237814][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 414.270596][ T5807] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 414.418524][ T5807] usb 4-1: device descriptor read/64, error -71 [ 414.693126][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 414.799111][ T5807] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 416.177787][ T5807] usb 4-1: device descriptor read/64, error -71 [ 416.281503][ T5807] usb usb4-port1: attempt power cycle [ 416.618721][ T5807] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 416.639489][ T5807] usb 4-1: device descriptor read/8, error -71 [ 416.943150][ T5807] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 417.372955][ T5807] usb 4-1: device descriptor read/8, error -71 [ 417.479404][ T5807] usb usb4-port1: unable to enumerate USB device [ 417.872543][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 417.888500][ T5807] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 419.329580][ T5807] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 419.330741][ T5807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 419.330767][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 419.330789][ T5807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 419.332761][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.332780][ T5807] usb 4-1: Product: syz [ 419.332793][ T5807] usb 4-1: Manufacturer: syz [ 419.332805][ T5807] usb 4-1: SerialNumber: syz [ 419.349771][ T5807] usb 4-1: config 0 descriptor?? [ 419.350707][ T8514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 419.350859][ T8514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 419.352498][ T5807] usb 4-1: ucan: probing device on interface #0 [ 419.571643][ T5807] usb 4-1: ucan: could not read protocol version, ret=-32 [ 419.571702][ T5807] usb 4-1: ucan: probe failed; try to update the device firmware [ 421.200227][ T5807] usb 4-1: USB disconnect, device number 22 [ 421.578703][ T5801] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 421.708658][ T5801] usb 3-1: device descriptor read/64, error -71 [ 421.948788][ T5801] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 422.098598][ T5801] usb 3-1: device descriptor read/64, error -71 [ 422.223192][ T5801] usb usb3-port1: attempt power cycle [ 422.568690][ T5801] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 422.600696][ T5801] usb 3-1: device descriptor read/8, error -71 [ 422.759066][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 422.858694][ T5801] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 422.879220][ T5801] usb 3-1: device descriptor read/8, error -71 [ 423.544730][ T5801] usb usb3-port1: unable to enumerate USB device [ 424.189521][ T5807] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 424.375877][ T5807] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 424.460101][ T8590] pim6reg: entered allmulticast mode [ 424.477745][ T8590] pim6reg: left allmulticast mode [ 424.515073][ T5807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 424.515182][ T5807] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 424.515284][ T5807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 424.671533][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.671694][ T5807] usb 5-1: Product: syz [ 424.671848][ T5807] usb 5-1: Manufacturer: syz [ 424.671950][ T5807] usb 5-1: SerialNumber: syz [ 424.946495][ T5807] usb 5-1: config 0 descriptor?? [ 425.003136][ T8577] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 425.006692][ T8577] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 425.139196][ T5807] usb 5-1: ucan: probing device on interface #0 [ 425.283450][ T5807] usb 5-1: ucan: could not read protocol version, ret=-32 [ 425.283489][ T5807] usb 5-1: ucan: probe failed; try to update the device firmware [ 426.986306][ T5807] usb 5-1: USB disconnect, device number 24 [ 427.163093][ T31] audit: type=1800 audit(1786364024.869:62): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.859" name="attr_allow_any_host" dev="configfs" ino=19128 res=0 errno=0 [ 427.187898][ T31] audit: type=1800 audit(1786364024.889:63): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.859" name="addr_traddr" dev="configfs" ino=19133 res=0 errno=0 [ 427.197314][ T31] audit: type=1800 audit(1786364024.899:64): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.859" name="addr_trsvcid" dev="configfs" ino=19134 res=0 errno=0 [ 427.227452][ T8623] nvmet_rdma: malformed ip/port passed: :4421 [ 427.390009][ T8628] netlink: 14 bytes leftover after parsing attributes in process `syz.1.858'. [ 427.458491][ T5807] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 427.689362][ T5807] usb 5-1: device descriptor read/64, error -71 [ 429.654979][ T5807] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 429.811572][ T5807] usb 5-1: device descriptor read/64, error -71 [ 429.920914][ T5807] usb usb5-port1: attempt power cycle [ 430.061749][ T8649] netlink: 5 bytes leftover after parsing attributes in process `syz.1.865'. [ 430.061799][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 430.061829][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 430.258712][ T5807] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 430.469691][ T5807] usb 5-1: device not accepting address 27, error -71 [ 431.379846][ T52] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 432.399074][ T52] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 432.428221][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 432.428275][ T52] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 432.428318][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 432.553103][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.553956][ T52] usb 2-1: Product: syz [ 432.553999][ T52] usb 2-1: Manufacturer: syz [ 432.554017][ T52] usb 2-1: SerialNumber: syz [ 432.987453][ T52] usb 2-1: config 0 descriptor?? [ 432.998958][ T8664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 432.999123][ T8664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 433.023728][ T52] usb 2-1: ucan: probing device on interface #0 [ 433.212972][ T52] usb 2-1: ucan: could not read protocol version, ret=0 [ 433.220234][ T52] usb 2-1: ucan: probe failed; try to update the device firmware [ 435.197481][ T5621] usb 2-1: USB disconnect, device number 16 [ 435.427709][ T8705] netlink: 5 bytes leftover after parsing attributes in process `syz.4.880'. [ 435.427757][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.880'. [ 435.427771][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 435.756527][ T8713] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 439.321296][ T8741] usb usb9: usbfs: process 8741 (syz.4.890) did not claim interface 0 before use [ 440.109621][ T8748] NILFS (loop4): device size too small [ 440.146830][ T8748] MTD: Couldn't look up './dev/mtdblock0': -2 [ 440.576105][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 440.604166][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.726269][ T8774] comedi comedi3: comedi_config --init_data is deprecated [ 446.277023][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 447.549649][ T5621] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 447.700181][ T5621] usb 4-1: Using ep0 maxpacket: 16 [ 447.701614][ T5621] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 447.702819][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.702844][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.702878][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.712484][ T5621] usb 4-1: config 0 descriptor?? [ 448.331185][ T5621] usbhid 4-1:0.0: can't add hid device: -71 [ 448.331303][ T5621] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 448.336792][ T5621] usb 4-1: USB disconnect, device number 23 [ 449.356269][ T8817] comedi comedi3: comedi_config --init_data is deprecated [ 449.921041][ T8827] netlink: 5 bytes leftover after parsing attributes in process `syz.0.918'. [ 449.931360][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.918'. [ 449.940971][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 450.099167][ T52] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 450.364457][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 450.373137][ T52] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 450.385159][ T52] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 450.385214][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.411486][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.411534][ T52] usb 2-1: Product: syz [ 450.411566][ T52] usb 2-1: Manufacturer: syz [ 450.411584][ T52] usb 2-1: SerialNumber: syz [ 451.696613][ T52] usb 2-1: USB disconnect, device number 17 [ 451.830591][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 455.701198][ T8869] netlink: 5 bytes leftover after parsing attributes in process `syz.1.931'. [ 455.701233][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'. [ 455.701254][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 459.816639][ T8892] NILFS (loop4): device size too small [ 459.850562][ T8892] MTD: Couldn't look up './dev/mtdblock0': -2 [ 460.876891][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 461.892762][ T8911] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 464.531479][ T8928] netlink: 5 bytes leftover after parsing attributes in process `syz.2.945'. [ 464.543555][ T8928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.945'. [ 464.553296][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 466.678593][ T52] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 466.899352][ T8940] NILFS (loop1): device size too small [ 466.990991][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 467.029117][ T52] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 467.075431][ T8940] MTD: Couldn't look up './dev/mtdblock0': -2 [ 467.176002][ T52] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.176050][ T52] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.327938][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.327989][ T52] usb 3-1: Product: syz [ 467.328030][ T52] usb 3-1: Manufacturer: syz [ 467.328050][ T52] usb 3-1: SerialNumber: syz [ 467.991484][ T8945] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 468.256298][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 469.082031][ T52] usb 3-1: USB disconnect, device number 22 [ 470.154099][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 475.968901][ T52] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 476.168512][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 476.169516][ T52] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 476.171150][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.171177][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.302486][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.302527][ T52] usb 5-1: Product: syz [ 476.302566][ T52] usb 5-1: Manufacturer: syz [ 476.302582][ T52] usb 5-1: SerialNumber: syz [ 476.812619][ T52] usb 5-1: USB disconnect, device number 29 [ 476.845263][ T5630] udevd[5630]: setting owner of /dev/bus/usb/005/029 to uid=0, gid=0 failed: No such file or directory [ 476.880874][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 477.081369][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'. [ 478.433306][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 478.470385][ T5807] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 478.618555][ T5807] usb 4-1: Using ep0 maxpacket: 8 [ 478.622783][ T5807] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 478.624344][ T5807] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.624366][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.624387][ T5807] usb 4-1: config 0 has no interface number 0 [ 478.624413][ T5807] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.624441][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.626245][ T5807] usb 4-1: config 0 descriptor?? [ 478.628501][ T5807] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 478.886086][ T5807] usb 4-1: USB disconnect, device number 24 [ 479.189895][ T52] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 479.248460][ T5621] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 479.339898][ T52] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 479.341884][ T52] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.341908][ T52] usb 5-1: config 0 has no interface number 0 [ 479.344749][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.344770][ T52] usb 5-1: Product: syz [ 479.344783][ T52] usb 5-1: Manufacturer: syz [ 479.344795][ T52] usb 5-1: SerialNumber: syz [ 479.355508][ T52] usb 5-1: config 0 descriptor?? [ 479.367855][ T52] usb 5-1: selecting invalid altsetting 1 [ 479.368020][ T52] dvb_ttusb_budget: ttusb_init_controller: error [ 479.368032][ T52] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 479.399470][ T5621] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 479.400625][ T5621] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.400673][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.417506][ T5621] usb 2-1: config 0 descriptor?? [ 479.430900][ T5621] pwc: Askey VC010 type 2 USB webcam detected. [ 479.493407][ T52] DVB: Unable to find symbol stv0299_attach() [ 479.717720][ T52] DVB: Unable to find symbol tda8083_attach() [ 479.717792][ T52] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 479.911974][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.927828][ T5621] pwc: recv_control_msg error -32 req 02 val 2b00 [ 479.958548][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.963264][ T5621] pwc: recv_control_msg error -32 req 02 val 2700 [ 479.964141][ T5621] pwc: recv_control_msg error -32 req 02 val 2c00 [ 479.964858][ T5621] pwc: recv_control_msg error -32 req 04 val 1000 [ 479.965548][ T5621] pwc: recv_control_msg error -32 req 04 val 1300 [ 479.976471][ T5621] pwc: recv_control_msg error -32 req 04 val 1400 [ 480.139429][ T9063] binder: 9060:9063 ioctl c018620c 200000000240 returned -22 [ 480.549881][ T5621] pwc: recv_control_msg error -71 req 02 val 2100 [ 480.550965][ T5621] pwc: recv_control_msg error -71 req 04 val 1500 [ 480.551399][ T5621] pwc: recv_control_msg error -71 req 02 val 2500 [ 480.551833][ T5621] pwc: recv_control_msg error -71 req 02 val 2400 [ 480.552248][ T5621] pwc: recv_control_msg error -71 req 02 val 2600 [ 480.552707][ T5621] pwc: recv_control_msg error -71 req 02 val 2900 [ 480.554000][ T5621] pwc: recv_control_msg error -71 req 02 val 2800 [ 480.554485][ T5621] pwc: recv_control_msg error -71 req 04 val 1100 [ 480.555823][ T5621] pwc: recv_control_msg error -71 req 04 val 1200 [ 480.599012][ T5621] pwc: Registered as video103. [ 480.603829][ T5621] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 480.607043][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.611224][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.637727][ T5621] usb 2-1: USB disconnect, device number 18 [ 481.295620][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 482.686705][ T989] usb 5-1: USB disconnect, device number 30 [ 483.612129][ T9100] binder: 9095:9100 ioctl c018620c 200000000240 returned -22 [ 484.577058][ T9109] pim6reg: entered allmulticast mode [ 484.589796][ T9111] pim6reg: left allmulticast mode [ 486.446882][ T5717] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 486.620465][ T5717] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 486.631089][ T5717] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.631136][ T5717] usb 2-1: config 0 has no interface number 0 [ 486.652703][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.652749][ T5717] usb 2-1: Product: syz [ 486.652781][ T5717] usb 2-1: Manufacturer: syz [ 486.652800][ T5717] usb 2-1: SerialNumber: syz [ 486.686396][ T5717] usb 2-1: config 0 descriptor?? [ 486.699561][ T5717] usb 2-1: selecting invalid altsetting 1 [ 486.709286][ T5717] dvb_ttusb_budget: ttusb_init_controller: error [ 486.716246][ T5717] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 486.876546][ T9127] tipc: Started in network mode [ 486.888627][ T9127] tipc: Node identity 36d9427e5958, cluster identity 4711 [ 486.895488][ T9127] tipc: Enabled bearer , priority 0 [ 486.967068][ T5717] DVB: Unable to find symbol stv0299_attach() [ 486.981811][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.982337][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.017525][ T5717] DVB: Unable to find symbol tda8083_attach() [ 487.017553][ T5717] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 487.189570][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.195699][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.396318][ T9143] binder: 9141:9143 ioctl c018620c 200000000240 returned -22 [ 487.890640][ T5807] tipc: Node number set to 1870742142 [ 488.844350][ T9157] pim6reg: entered allmulticast mode [ 488.852046][ T9158] pim6reg: left allmulticast mode [ 489.031228][ T9125] tipc: Disabling bearer [ 489.423139][ T5717] usb 2-1: USB disconnect, device number 19 [ 490.418491][ T5621] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 490.568498][ T5621] usb 4-1: Using ep0 maxpacket: 16 [ 490.574535][ T5621] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 490.585751][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.585786][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.585821][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.723916][ T5621] usb 4-1: config 0 descriptor?? [ 490.946035][ T5717] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 491.111579][ T5717] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 491.114065][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.114114][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.138014][ T5717] usb 2-1: config 0 descriptor?? [ 491.144445][ T5717] pwc: Askey VC010 type 2 USB webcam detected. [ 491.383527][ T5621] usbhid 4-1:0.0: can't add hid device: -71 [ 491.383660][ T5621] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 491.420227][ T5621] usb 4-1: USB disconnect, device number 25 [ 491.490700][ T9185] binder: 9182:9185 ioctl c018620c 200000000240 returned -22 [ 491.565722][ T5717] pwc: recv_control_msg error -32 req 02 val 2b00 [ 491.613935][ T5717] pwc: recv_control_msg error -32 req 02 val 2700 [ 491.627470][ T5717] pwc: recv_control_msg error -32 req 02 val 2c00 [ 491.667345][ T5717] pwc: recv_control_msg error -32 req 04 val 1000 [ 491.682587][ T5717] pwc: recv_control_msg error -32 req 04 val 1300 [ 491.685249][ T5717] pwc: recv_control_msg error -32 req 04 val 1400 [ 492.089922][ T5717] pwc: recv_control_msg error -71 req 02 val 2100 [ 492.092529][ T5717] pwc: recv_control_msg error -71 req 04 val 1500 [ 492.093122][ T5717] pwc: recv_control_msg error -71 req 02 val 2500 [ 492.095044][ T5717] pwc: recv_control_msg error -71 req 02 val 2400 [ 492.096426][ T5717] pwc: recv_control_msg error -71 req 02 val 2600 [ 492.098293][ T5717] pwc: recv_control_msg error -71 req 02 val 2900 [ 492.100369][ T5717] pwc: recv_control_msg error -71 req 02 val 2800 [ 492.104433][ T5717] pwc: recv_control_msg error -71 req 04 val 1100 [ 492.105660][ T5717] pwc: recv_control_msg error -71 req 04 val 1200 [ 492.136722][ T5717] pwc: Registered as video103. [ 492.140944][ T5717] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 492.156176][ T5717] usb 2-1: USB disconnect, device number 20 [ 492.872642][ T9195] tipc: Started in network mode [ 492.877758][ T9195] tipc: Node identity 92fe2fe2978f, cluster identity 4711 [ 492.887225][ T9195] tipc: Enabled bearer , priority 0 [ 492.895264][ T9194] syzkaller0: entered promiscuous mode [ 492.895309][ T9194] syzkaller0: entered allmulticast mode [ 493.018449][ T5807] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 493.249131][ T5807] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 493.252240][ T5807] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 493.252288][ T5807] usb 4-1: config 0 has no interface number 0 [ 493.340143][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.340237][ T5807] usb 4-1: Product: syz [ 493.340252][ T5807] usb 4-1: Manufacturer: syz [ 493.340263][ T5807] usb 4-1: SerialNumber: syz [ 493.541312][ T5807] usb 4-1: config 0 descriptor?? [ 493.676334][ T5807] usb 4-1: selecting invalid altsetting 1 [ 493.676520][ T5807] dvb_ttusb_budget: ttusb_init_controller: error [ 493.676534][ T5807] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 493.726035][ T9193] tipc: Disabling bearer [ 493.788832][ T5807] DVB: Unable to find symbol stv0299_attach() [ 493.917050][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.917586][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.982003][ T5807] DVB: Unable to find symbol tda8083_attach() [ 493.982046][ T5807] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 494.150546][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.160665][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.538437][ T52] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 494.698580][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 494.699987][ T52] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 494.701393][ T52] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.701414][ T52] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.713606][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.713631][ T52] usb 3-1: Product: syz [ 494.713645][ T52] usb 3-1: Manufacturer: syz [ 494.713658][ T52] usb 3-1: SerialNumber: syz [ 494.828497][ T5807] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 494.955861][ T52] usb 3-1: unit 5 not found! [ 494.955901][ T52] usb 3-1: unit 4 not found! [ 495.008882][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 495.011280][ T5807] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 495.012429][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.012455][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.012489][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.025089][ T5807] usb 2-1: config 0 descriptor?? [ 495.100463][ T52] usb 3-1: USB disconnect, device number 23 [ 495.177736][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 495.637336][ T5807] usbhid 2-1:0.0: can't add hid device: -71 [ 495.637455][ T5807] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 495.649219][ T5807] usb 2-1: USB disconnect, device number 21 [ 495.778105][ T989] usb 4-1: USB disconnect, device number 26 [ 497.844185][ T9252] tipc: Started in network mode [ 497.863833][ T9252] tipc: Node identity 861dd7e29f99, cluster identity 4711 [ 497.864979][ T9252] tipc: Enabled bearer , priority 0 [ 498.596215][ T9250] tipc: Disabling bearer [ 501.255845][ T31] audit: type=1800 audit(1786364098.959:65): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1060" name="zoned" dev="configfs" ino=22599 res=0 errno=0 [ 501.282155][ T31] audit: type=1800 audit(1786364098.989:66): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1060" name="memory_backed" dev="configfs" ino=22600 res=0 errno=0 [ 501.306524][ T31] audit: type=1800 audit(1786364099.019:67): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1060" name="zone_nr_conv" dev="configfs" ino=22601 res=0 errno=0 [ 501.342281][ T31] audit: type=1800 audit(1786364099.049:68): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1060" name="power" dev="configfs" ino=21817 res=0 errno=0 [ 501.445364][ T9276] null_blk: nullb1: using native zone append [ 501.761647][ T9276] null_blk: disk nullb1 created [ 502.041217][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.232606][ T9302] tipc: Enabled bearer , priority 0 [ 503.668442][ T989] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 503.738412][ T52] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 503.824242][ T989] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 503.834611][ T989] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 503.834657][ T989] usb 2-1: config 0 has no interface number 0 [ 503.837312][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.837334][ T989] usb 2-1: Product: syz [ 503.837347][ T989] usb 2-1: Manufacturer: syz [ 503.837360][ T989] usb 2-1: SerialNumber: syz [ 503.840578][ T989] usb 2-1: config 0 descriptor?? [ 503.844794][ T989] usb 2-1: selecting invalid altsetting 1 [ 503.844988][ T989] dvb_ttusb_budget: ttusb_init_controller: error [ 503.845000][ T989] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 503.874306][ T9300] tipc: Disabling bearer [ 504.039302][ T52] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 504.049585][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.049663][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.809182][ T52] usb 5-1: config 0 descriptor?? [ 504.832289][ T52] pwc: Askey VC010 type 2 USB webcam detected. [ 504.966038][ T989] DVB: Unable to find symbol stv0299_attach() [ 505.421624][ T52] pwc: recv_control_msg error -32 req 02 val 2b00 [ 505.430091][ T52] pwc: recv_control_msg error -32 req 02 val 2700 [ 505.453098][ T52] pwc: recv_control_msg error -32 req 02 val 2c00 [ 505.464289][ T52] pwc: recv_control_msg error -32 req 04 val 1000 [ 505.490330][ T52] pwc: recv_control_msg error -32 req 04 val 1300 [ 505.491215][ T52] pwc: recv_control_msg error -32 req 04 val 1400 [ 505.509817][ T989] DVB: Unable to find symbol tda8083_attach() [ 505.509857][ T989] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 505.529673][ T989] usb 2-1: USB disconnect, device number 22 [ 505.699960][ T52] pwc: recv_control_msg error -71 req 02 val 2100 [ 505.701989][ T52] pwc: recv_control_msg error -71 req 04 val 1500 [ 505.702414][ T52] pwc: recv_control_msg error -71 req 02 val 2500 [ 505.702823][ T52] pwc: recv_control_msg error -71 req 02 val 2400 [ 505.703244][ T52] pwc: recv_control_msg error -71 req 02 val 2600 [ 505.705195][ T52] pwc: recv_control_msg error -71 req 02 val 2900 [ 505.707135][ T52] pwc: recv_control_msg error -71 req 02 val 2800 [ 505.709109][ T52] pwc: recv_control_msg error -71 req 04 val 1100 [ 505.709909][ T52] pwc: recv_control_msg error -71 req 04 val 1200 [ 505.822337][ T52] pwc: Registered as video103. [ 505.824844][ T52] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 505.894845][ T52] usb 5-1: USB disconnect, device number 31 [ 506.448372][ T9338] binder: 9336:9338 ioctl c018620c 200000000240 returned -22 [ 506.945199][ T9350] tipc: Started in network mode [ 506.951954][ T9350] tipc: Node identity e69e49a799de, cluster identity 4711 [ 506.952148][ T9350] tipc: Enabled bearer , priority 0 [ 508.144936][ T5348] tipc: Node number set to 2134919591 [ 508.299779][ T989] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 508.508490][ T989] usb 2-1: Using ep0 maxpacket: 8 [ 508.514847][ T989] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 508.530106][ T989] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.539715][ T989] usb 2-1: config 0 has no interface number 0 [ 508.546718][ T989] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 508.557738][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.584539][ T989] usb 2-1: config 0 descriptor?? [ 508.612381][ T989] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 509.122242][ T989] usb 2-1: USB disconnect, device number 23 [ 510.131198][ T9349] tipc: Disabling bearer [ 510.197283][ T9377] pim6reg: entered allmulticast mode [ 510.224426][ T9378] pim6reg: left allmulticast mode [ 512.589951][ T52] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 512.738798][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 512.744635][ T52] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 512.803063][ T52] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 512.803574][ T52] usb 2-1: config 0 has no interface number 0 [ 512.806373][ T52] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 512.808066][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.229330][ T52] usb 2-1: config 0 descriptor?? [ 513.248945][ T52] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 513.254780][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 513.312894][ T9421] tipc: Enabled bearer , priority 0 [ 513.539088][ T5348] usb 2-1: USB disconnect, device number 24 [ 513.775344][ T9427] pim6reg: entered allmulticast mode [ 513.777134][ T9427] pim6reg: left allmulticast mode [ 514.644303][ T5348] tipc: Node number set to 428136418 [ 515.479694][ T9417] tipc: Disabling bearer [ 516.385319][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 516.778433][ T5621] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 517.013726][ T5621] usb 4-1: Using ep0 maxpacket: 8 [ 517.364925][ T5621] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 517.368467][ T5621] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.368501][ T5621] usb 4-1: config 0 has no interface number 0 [ 517.368546][ T5621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.368593][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.372934][ T5621] usb 4-1: config 0 descriptor?? [ 517.439193][ T5621] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 517.665665][ T5621] usb 4-1: USB disconnect, device number 27 [ 518.604385][ T9485] tipc: Enabled bearer , priority 0 [ 519.424848][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 520.030226][ T5621] tipc: Node number set to 91303906 [ 521.023592][ T9484] tipc: Disabling bearer [ 521.748438][ T5717] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 521.939550][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 522.355728][ T5717] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 522.390581][ T5717] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.402230][ T5717] usb 2-1: config 0 has no interface number 0 [ 522.408541][ T5717] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.421843][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.448348][ T5717] usb 2-1: config 0 descriptor?? [ 522.475745][ T5717] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 522.711082][ T5717] usb 2-1: USB disconnect, device number 25 [ 523.075988][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 527.399306][ T5717] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 527.487146][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 527.558415][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 527.564261][ T5717] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 527.574522][ T5717] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.586061][ T5717] usb 2-1: config 0 has no interface number 0 [ 527.592335][ T5717] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.592371][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.626016][ T5717] usb 2-1: config 0 descriptor?? [ 528.963733][ T5717] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 529.235875][ T52] usb 2-1: USB disconnect, device number 26 [ 531.728761][ T5717] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 532.318023][ T5717] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 532.350687][ T5717] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.395268][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.395317][ T5717] usb 4-1: Product: syz [ 532.395349][ T5717] usb 4-1: Manufacturer: syz [ 532.395369][ T5717] usb 4-1: SerialNumber: syz [ 532.460577][ T5717] pl2303 4-1:1.0: required endpoints missing [ 532.690418][ T5717] usb 4-1: USB disconnect, device number 28 [ 534.309706][ T9624] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1166'. [ 534.318819][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1166'. [ 534.327849][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 535.309728][ T52] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 535.536603][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 535.546722][ T52] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 535.547924][ T52] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.547947][ T52] usb 4-1: config 0 has no interface number 0 [ 535.547984][ T52] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.548022][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.554819][ T52] usb 4-1: config 0 descriptor?? [ 535.642227][ T52] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 535.872152][ T5717] usb 4-1: USB disconnect, device number 29 [ 541.797946][ T9671] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1182'. [ 541.797986][ T9671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 541.798013][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 542.592926][ T9679] comedi comedi3: comedi_config --init_data is deprecated [ 543.798418][ T52] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 543.983744][ T9692] netlink: 'syz.0.1189': attribute type 18 has an invalid length. [ 544.085539][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 544.091366][ T52] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 544.114826][ T52] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.114860][ T52] usb 2-1: config 0 has no interface number 0 [ 544.114920][ T52] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 544.114960][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.125143][ T52] usb 2-1: config 0 descriptor?? [ 544.182129][ T52] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 544.659685][ T989] usb 2-1: USB disconnect, device number 27 [ 547.450876][ T5717] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 547.703482][ T5717] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 547.718809][ T5717] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.769321][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 547.777542][ T5717] usb 5-1: Product: syz [ 547.782743][ T5717] usb 5-1: Manufacturer: syz [ 547.789684][ T5717] usb 5-1: SerialNumber: syz [ 548.601356][ T5717] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 549.300542][ T5717] usb 5-1: USB disconnect, device number 32 [ 549.678012][ T9727] comedi comedi3: comedi_config --init_data is deprecated [ 549.701811][ T5717] usblp0: removed [ 552.668679][ T5810] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 554.096597][ T5810] usb 5-1: Using ep0 maxpacket: 8 [ 554.098881][ T5810] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 554.101806][ T5810] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 554.101830][ T5810] usb 5-1: config 0 has no interface number 0 [ 554.101882][ T5810] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.101926][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.104816][ T5810] usb 5-1: config 0 descriptor?? [ 554.147893][ T5810] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 554.381343][ T5810] usb 5-1: USB disconnect, device number 33 [ 556.342861][ T9767] comedi comedi3: comedi_config --init_data is deprecated [ 559.530543][ T5621] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 559.688408][ T5621] usb 5-1: Using ep0 maxpacket: 8 [ 559.804333][ T5621] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 559.806314][ T5621] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 559.806338][ T5621] usb 5-1: config 0 has no interface number 0 [ 559.806375][ T5621] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.806414][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.871095][ T5621] usb 5-1: config 0 descriptor?? [ 559.925558][ T5621] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 560.632064][ T5810] usb 5-1: USB disconnect, device number 34 [ 561.737294][ T9809] comedi comedi3: comedi_config --init_data is deprecated [ 563.208653][ T5717] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 563.504131][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.578482][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 563.608920][ T5717] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 563.687206][ T5717] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 563.721044][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 563.729470][ T5717] usb 4-1: Product: syz [ 563.738616][ T5717] usb 4-1: Manufacturer: syz [ 563.743345][ T5717] usb 4-1: SerialNumber: syz [ 563.820945][ T5717] usb 4-1: config 0 descriptor?? [ 563.834642][ T9824] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.527868][ T5717] usb 4-1: USB disconnect, device number 30 [ 566.598415][ T5717] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 566.759732][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 566.770055][ T5717] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 566.780330][ T5717] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.780393][ T5717] usb 4-1: config 0 has no interface number 0 [ 566.780442][ T5717] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 566.780491][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.821395][ T5717] usb 4-1: config 0 descriptor?? [ 566.859704][ T5717] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 567.360139][ T5717] usb 4-1: USB disconnect, device number 31 [ 567.805035][ T31] audit: type=1800 audit(1786364165.509:69): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1237" name="zoned" dev="configfs" ino=24688 res=0 errno=0 [ 567.848250][ T31] audit: type=1800 audit(1786364165.549:70): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1237" name="memory_backed" dev="configfs" ino=24689 res=0 errno=0 [ 567.880720][ T31] audit: type=1800 audit(1786364165.589:71): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1237" name="zone_nr_conv" dev="configfs" ino=24690 res=0 errno=0 [ 567.903110][ T31] audit: type=1800 audit(1786364165.619:72): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1237" name="power" dev="configfs" ino=24691 res=0 errno=0 [ 568.320938][ T9858] comedi comedi3: comedi_config --init_data is deprecated [ 570.915953][ T9875] tipc: Enabled bearer , priority 0 [ 572.986051][ T9888] 9p: Bad value for 'wfdno' [ 573.983543][ T9874] tipc: Disabling bearer [ 574.890878][ T9896] comedi comedi3: comedi_config --init_data is deprecated [ 575.500021][ T5810] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 575.801697][ T5810] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 575.811734][ T5810] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 575.811774][ T5810] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.811826][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.828805][ T9898] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 576.212670][ T5810] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 576.224086][ T5810] usb 5-1: invalid MIDI in EP 0 [ 576.420387][ T9898] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 576.436837][ T51] IPVS: starting estimator thread 0... [ 576.559069][ T9906] IPVS: using max 30 ests per chain, 72000 per kthread [ 576.670003][ T5717] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 576.836787][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 576.843173][ T5717] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 576.844338][ T5717] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 576.878084][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 576.878131][ T5717] usb 4-1: Product: syz [ 576.878163][ T5717] usb 4-1: Manufacturer: syz [ 576.878182][ T5717] usb 4-1: SerialNumber: syz [ 576.909505][ T5717] usb 4-1: config 0 descriptor?? [ 576.920963][ T9905] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 577.040887][ T9910] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1254'. [ 577.049988][ T9910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1254'. [ 577.059568][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 577.327343][ T5810] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 577.397393][ T5810] usb 5-1: USB disconnect, device number 35 [ 580.620906][ T5801] usb 4-1: USB disconnect, device number 32 [ 582.952916][ T9937] tipc: Enabled bearer , priority 0 [ 584.828398][ T989] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 585.078536][ T989] usb 4-1: Using ep0 maxpacket: 32 [ 585.118233][ T989] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 585.162541][ T989] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 585.276185][ T989] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 585.276240][ T989] usb 4-1: Product: syz [ 585.276273][ T989] usb 4-1: Manufacturer: syz [ 585.276293][ T989] usb 4-1: SerialNumber: syz [ 585.666587][ T9936] tipc: Disabling bearer [ 587.800758][ T989] usb 4-1: config 0 descriptor?? [ 587.820770][ T989] usb 4-1: can't set config #0, error -71 [ 587.823437][ T989] usb 4-1: USB disconnect, device number 33 [ 589.831206][ T989] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 590.090409][ T989] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 590.099016][ T989] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.103355][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 590.103380][ T989] usb 5-1: Product: syz [ 590.103394][ T989] usb 5-1: Manufacturer: syz [ 590.103406][ T989] usb 5-1: SerialNumber: syz [ 590.380215][ T989] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 590.999007][ T9981] binder: 9976:9981 ioctl c018620c 200000000240 returned -22 [ 591.373978][ T52] usb 5-1: USB disconnect, device number 36 [ 591.382157][ T52] usblp0: removed [ 592.835336][ T31] audit: type=1800 audit(1786364190.539:73): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1277" name="attr_allow_any_host" dev="configfs" ino=25737 res=0 errno=0 [ 592.885674][ T31] audit: type=1800 audit(1786364190.589:74): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1277" name="addr_traddr" dev="configfs" ino=25740 res=0 errno=0 [ 592.912602][ T31] audit: type=1800 audit(1786364190.619:75): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1277" name="addr_trsvcid" dev="configfs" ino=25741 res=0 errno=0 [ 594.188539][ T52] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 594.348601][ T5810] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 594.362652][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 594.394347][ T52] usb 5-1: unable to get BOS descriptor or descriptor too short [ 594.394419][ T52] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 594.429619][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.429667][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.629521][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.629555][ T52] usb 5-1: Product: syz [ 594.629576][ T52] usb 5-1: Manufacturer: syz [ 594.629587][ T52] usb 5-1: SerialNumber: syz [ 594.671542][ T52] usb 5-1: interface 1 not found [ 594.698401][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 594.704067][ T5810] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 594.714449][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 594.726450][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 594.726480][ T5810] usb 2-1: Product: syz [ 594.726509][ T5810] usb 2-1: Manufacturer: syz [ 594.726529][ T5810] usb 2-1: SerialNumber: syz [ 594.758629][ T5810] usb 2-1: config 0 descriptor?? [ 594.771961][T10001] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 594.872714][ T31] audit: type=1800 audit(1786364192.579:76): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1280" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 595.039857][ T54] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 597.602776][ T5810] usb 5-1: USB disconnect, device number 37 [ 597.645659][ T5801] usb 2-1: USB disconnect, device number 28 [ 597.746250][T10012] netlink: 'syz.2.1283': attribute type 18 has an invalid length. [ 598.713327][ T43] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.757845][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.757935][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.757967][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.108438][ T52] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 600.634113][ T52] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 600.646585][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.646636][ T52] usb 3-1: Product: syz [ 600.646670][ T52] usb 3-1: Manufacturer: syz [ 600.646685][ T52] usb 3-1: SerialNumber: syz [ 600.669810][ T52] usb 3-1: config 0 descriptor?? [ 600.709128][ T31] audit: type=1800 audit(1786364198.419:77): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1290" name="attr_allow_any_host" dev="configfs" ino=25794 res=0 errno=0 [ 600.742455][ T31] audit: type=1800 audit(1786364198.449:78): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1290" name="addr_traddr" dev="configfs" ino=25795 res=0 errno=0 [ 600.771309][ T31] audit: type=1800 audit(1786364198.479:79): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1290" name="addr_trsvcid" dev="configfs" ino=25796 res=0 errno=0 [ 601.049899][ T54] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 601.232838][ T52] usb 3-1: Firmware: major: 212, minor: 0, hardware type: ATUSB (0) [ 601.453039][ T52] usb 3-1: failed to fetch extended address, random address set [ 601.849853][ T52] usb 3-1: USB disconnect, device number 24 [ 605.379727][ T31] audit: type=1800 audit(1786364203.089:80): pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1303" name="attr_allow_any_host" dev="configfs" ino=25852 res=0 errno=0 [ 605.428264][ T31] audit: type=1800 audit(1786364203.129:81): pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1303" name="addr_traddr" dev="configfs" ino=25853 res=0 errno=0 [ 605.434603][ T31] audit: type=1800 audit(1786364203.139:82): pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1303" name="addr_trsvcid" dev="configfs" ino=25854 res=0 errno=0 [ 609.062371][T10102] binder: 10096:10102 ioctl c0306201 200000000040 returned -14 [ 609.082795][T10102] ublk0: read batch cmd buffer failed [ 609.089231][T10102] ublk0: read batch cmd buffer failed [ 611.745752][ T989] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 611.869638][ T989] usb 2-1: device descriptor read/64, error -71 [ 612.122828][ T989] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 612.270556][ T989] usb 2-1: device descriptor read/64, error -71 [ 612.392167][ T989] usb usb2-port1: attempt power cycle [ 612.998522][ T989] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 613.029582][ T989] usb 2-1: device descriptor read/8, error -71 [ 613.268435][ T989] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 613.478391][ T989] usb 2-1: device not accepting address 32, error -71 [ 613.478756][ T989] usb usb2-port1: unable to enumerate USB device [ 613.808393][ T989] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 614.003513][ T989] usb 2-1: Using ep0 maxpacket: 32 [ 614.051814][ T989] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 614.328946][ T989] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 614.783690][ T989] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 614.783744][ T989] usb 2-1: Product: syz [ 614.783775][ T989] usb 2-1: Manufacturer: syz [ 614.783794][ T989] usb 2-1: SerialNumber: syz [ 616.103136][ T989] usb 2-1: config 0 descriptor?? [ 616.111420][T10137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 616.505779][ T989] usb 2-1: USB disconnect, device number 33 [ 616.694363][ T31] audit: type=1800 audit(1786364214.399:83): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1315" name="attr_allow_any_host" dev="configfs" ino=25322 res=0 errno=0 [ 616.723334][ T31] audit: type=1800 audit(1786364214.429:84): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1315" name="addr_traddr" dev="configfs" ino=25323 res=0 errno=0 [ 616.739136][ T31] audit: type=1800 audit(1786364214.429:85): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1315" name="addr_trsvcid" dev="configfs" ino=25324 res=0 errno=0 [ 618.438813][T10161] netlink: 6208 bytes leftover after parsing attributes in process `syz.1.1331'. [ 619.097561][ T31] audit: type=1800 audit(1786364216.799:86): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1336" name="attr_allow_any_host" dev="configfs" ino=26072 res=0 errno=0 [ 619.124495][ T31] audit: type=1800 audit(1786364216.829:87): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1336" name="addr_traddr" dev="configfs" ino=26073 res=0 errno=0 [ 619.149515][ T31] audit: type=1800 audit(1786364216.859:88): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1336" name="addr_trsvcid" dev="configfs" ino=26074 res=0 errno=0 [ 620.923186][T10170] netlink: zone id is out of range [ 620.923286][T10170] netlink: zone id is out of range [ 620.923414][T10170] netlink: zone id is out of range [ 622.853066][T10207] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 623.667517][T10201] kvm: pic: level sensitive irq not supported [ 623.673093][T10201] kvm: pic: non byte read [ 623.676758][T10201] kvm: pic: level sensitive irq not supported [ 623.677370][T10201] kvm: pic: non byte read [ 623.681835][T10201] kvm: pic: level sensitive irq not supported [ 623.682147][T10201] kvm: pic: non byte read [ 623.683431][T10201] kvm: pic: level sensitive irq not supported [ 623.684153][T10201] kvm: pic: non byte read [ 625.024608][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.320646][T10239] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1355'. [ 636.017508][T10327] tipc: Enabled bearer , priority 0 [ 636.028538][T10327] syzkaller0: entered promiscuous mode [ 636.034227][T10327] syzkaller0: entered allmulticast mode [ 636.068789][T10327] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 636.208099][T10327] tipc: Resetting bearer [ 636.412040][T10326] tipc: Resetting bearer [ 636.471087][T10340] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 636.540713][T10326] tipc: Disabling bearer [ 636.829071][T10347] pim6reg: entered allmulticast mode [ 636.834804][T10347] pim6reg: left allmulticast mode [ 636.942240][T10349] binder: 10348:10349 ioctl c018620c 200000000240 returned -22 [ 637.016627][T10352] ublk2: read batch cmd buffer failed [ 637.016762][T10352] ublk2: read batch cmd buffer failed [ 640.274591][T10375] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 640.311238][ T31] audit: type=1800 audit(1786364238.019:89): pid=10371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1397" name="zoned" dev="configfs" ino=27463 res=0 errno=0 [ 640.334026][ T31] audit: type=1800 audit(1786364238.039:90): pid=10371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1397" name="memory_backed" dev="configfs" ino=27464 res=0 errno=0 [ 640.361357][ T31] audit: type=1800 audit(1786364238.069:91): pid=10371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1397" name="zone_nr_conv" dev="configfs" ino=27465 res=0 errno=0 [ 640.384449][ T31] audit: type=1800 audit(1786364238.089:92): pid=10371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1397" name="power" dev="configfs" ino=27466 res=0 errno=0 [ 640.531679][T10381] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 640.551495][T10381] binder: 10377:10381 ioctl c0306201 0 returned -14 [ 640.635946][T10382] binder: 10377:10382 ioctl c0306201 200000000040 returned -22 [ 640.683485][T10381] gadgetfs: bound to dummy_udc driver [ 642.038508][T10364] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 642.448379][ T5810] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 642.600486][ T5810] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 642.602038][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.602070][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.602106][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.642012][ T5810] usb 4-1: config 0 descriptor?? [ 643.201281][T10405] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 643.549996][T10410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.612239][ T5810] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -71 [ 644.629100][ T5810] usb 4-1: USB disconnect, device number 34 [ 645.951455][T10431] tipc: Enabling of bearer rejected, failed to enable media [ 646.031390][ T31] audit: type=1800 audit(1786364243.739:93): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1418" name="zoned" dev="configfs" ino=28700 res=0 errno=0 [ 646.036454][ T31] audit: type=1800 audit(1786364243.739:94): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1418" name="memory_backed" dev="configfs" ino=28702 res=0 errno=0 [ 646.073961][ T31] audit: type=1800 audit(1786364243.789:95): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1418" name="zone_nr_conv" dev="configfs" ino=28703 res=0 errno=0 [ 646.107914][ T31] audit: type=1800 audit(1786364243.809:96): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1418" name="power" dev="configfs" ino=28704 res=0 errno=0 [ 646.392792][T10441] veth0: entered promiscuous mode [ 646.408240][T10440] veth0: left promiscuous mode [ 649.162031][T10447] NILFS (loop4): device size too small [ 649.174182][T10447] MTD: Couldn't look up './dev/mtdblock0': -2 [ 649.361315][T10461] tipc: Enabling of bearer rejected, failed to enable media [ 654.083050][T10484] veth0: entered promiscuous mode [ 654.085310][T10482] veth0: left promiscuous mode [ 658.949792][T10545] pim6reg: entered allmulticast mode [ 658.977310][T10547] pim6reg: left allmulticast mode [ 661.920570][ T31] audit: type=1800 audit(1786364259.629:97): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1469" name="zoned" dev="configfs" ino=28176 res=0 errno=0 [ 661.923892][ T31] audit: type=1800 audit(1786364259.629:98): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1469" name="memory_backed" dev="configfs" ino=28177 res=0 errno=0 [ 661.924811][ T31] audit: type=1800 audit(1786364259.629:99): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1469" name="zone_nr_conv" dev="configfs" ino=28178 res=0 errno=0 [ 661.927090][ T31] audit: type=1800 audit(1786364259.629:100): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1469" name="power" dev="configfs" ino=28179 res=0 errno=0 [ 662.698606][ T989] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 663.014202][ T989] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 663.046602][ T989] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.061542][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 663.061570][ T989] usb 5-1: Product: syz [ 663.061584][ T989] usb 5-1: Manufacturer: syz [ 663.061596][ T989] usb 5-1: SerialNumber: syz [ 663.335972][ T989] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 663.646991][ C1] usblp0: nonzero write bulk status received: -71 [ 663.659353][ T989] usb 5-1: USB disconnect, device number 38 [ 663.684681][ T989] usblp0: removed [ 664.568639][ T989] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 664.767334][ T989] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 664.808100][ T989] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 664.818524][ T989] usb 3-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 664.835011][ T989] usb 3-1: config 220 has no interface number 2 [ 664.843452][ T989] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 664.843537][ T989] usb 3-1: config 220 interface 0 has no altsetting 0 [ 664.843597][ T989] usb 3-1: config 220 interface 76 has no altsetting 0 [ 664.843656][ T989] usb 3-1: config 220 interface 1 has no altsetting 0 [ 664.936312][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.944842][ T989] usb 3-1: Product: syz [ 664.944962][ T989] usb 3-1: Manufacturer: syz [ 664.945017][ T989] usb 3-1: SerialNumber: syz [ 665.879979][ T989] usb 3-1: selecting invalid altsetting 0 [ 665.948501][ T989] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 665.957026][ T989] uvcvideo 3-1:220.0: No valid video chain found. [ 666.010934][ T989] usb 3-1: selecting invalid altsetting 0 [ 666.010994][ T989] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 666.028523][ T989] usb 3-1: USB disconnect, device number 25 [ 666.211413][T10634] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 666.237442][T10634] ublk3: read batch cmd buffer failed [ 666.238362][T10634] ublk3: read batch cmd buffer failed [ 666.356063][T10638] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 666.377797][T10638] binder: 10632:10638 ioctl c0306201 200000000040 returned -14 [ 669.865233][ T989] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 670.249112][ T989] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 670.249184][ T989] usb 2-1: no configurations [ 670.249198][ T989] usb 2-1: can't read configurations, error -22 [ 670.379317][T10661] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 670.379750][ T989] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 670.570875][ T989] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 670.591469][ T989] usb 2-1: no configurations [ 670.604791][ T989] usb 2-1: can't read configurations, error -22 [ 670.623386][ T989] usb usb2-port1: attempt power cycle [ 670.969219][ T989] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 671.026896][ T989] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 671.037000][ T989] usb 2-1: no configurations [ 671.044008][ T989] usb 2-1: can't read configurations, error -22 [ 671.178380][ T989] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 671.204589][ T989] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 671.204654][ T989] usb 2-1: no configurations [ 671.204699][ T989] usb 2-1: can't read configurations, error -22 [ 671.226703][ T989] usb usb2-port1: unable to enumerate USB device [ 672.627967][T10684] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 672.652622][T10684] binder: 10680:10684 ioctl c0306201 200000000040 returned -14 [ 672.670036][T10684] ublk5: read batch cmd buffer failed [ 672.676442][T10684] ublk5: read batch cmd buffer failed [ 673.179246][ T52] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 673.290173][T10696] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 673.324153][T10696] binder: 10693:10696 ioctl c0306201 0 returned -14 [ 673.374684][T10696] gadgetfs: bound to dummy_udc driver [ 673.377534][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 673.432908][ T52] usb 5-1: unable to get BOS descriptor or descriptor too short [ 673.433028][ T52] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 673.506195][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.519618][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 673.585260][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.593840][ T52] usb 5-1: Product: syz [ 673.593982][ T52] usb 5-1: Manufacturer: syz [ 673.605752][ T52] usb 5-1: SerialNumber: syz [ 674.282740][ T54] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 675.048819][ T52] usb 5-1: interface 1 not found [ 675.869607][ T5810] usb 5-1: USB disconnect, device number 39 [ 676.082228][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'. [ 677.711275][T10733] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 677.729814][T10733] binder: BINDER_SET_CONTEXT_MGR already set [ 677.729834][T10733] binder: 10730:10733 ioctl 4018620d 200000000100 returned -16 [ 677.737255][T10733] binder: 10730:10733 ioctl c0306201 200000000040 returned -14 [ 677.753847][T10733] ublk6: read batch cmd buffer failed [ 677.754547][T10733] ublk6: read batch cmd buffer failed [ 678.627763][T10739] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 678.637839][T10739] binder: 10736:10739 ioctl c0306201 0 returned -14 [ 678.687548][T10739] gadgetfs: bound to dummy_udc driver [ 679.668713][ T5810] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 679.829428][ T5810] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 679.842245][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.851942][ T5810] usb 5-1: Product: syz [ 679.856260][ T5810] usb 5-1: Manufacturer: syz [ 679.862694][ T5810] usb 5-1: SerialNumber: syz [ 679.940091][ T5810] usb 5-1: config 0 descriptor?? [ 681.116714][ T5810] usb 5-1: Firmware version (0.0) predates our first public release. [ 681.116762][ T5810] usb 5-1: Please update to version 0.2 or newer [ 682.411070][ T5810] usb 5-1: USB disconnect, device number 40 [ 683.123715][T10788] overlay: Unknown parameter '/' [ 683.201876][T10788] netlink: zone id is out of range [ 683.202324][T10788] netlink: zone id is out of range [ 683.312934][T10788] input: syz0 as /devices/virtual/input/input10 [ 686.362110][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.886588][ T989] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 687.789381][ T989] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 687.790762][ T989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.790808][ T989] usb 3-1: config 0 has no interfaces? [ 687.790846][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.801475][ T989] usb 3-1: config 0 descriptor?? [ 687.889869][T10819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.414819][T10826] syzkaller0: entered promiscuous mode [ 689.414888][T10826] syzkaller0: entered allmulticast mode [ 689.514807][T10828] tipc: Enabled bearer , priority 0 [ 689.515450][T10828] syzkaller0: entered promiscuous mode [ 689.515468][T10828] syzkaller0: entered allmulticast mode [ 689.534595][T10828] tipc: Resetting bearer [ 689.555679][T10827] tipc: Resetting bearer [ 689.619673][T10827] tipc: Disabling bearer [ 689.787648][T10832] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 689.816318][T10832] binder: 10829:10832 ioctl c0306201 200000000040 returned -14 [ 689.832929][T10832] ublk7: read batch cmd buffer failed [ 689.834144][T10832] ublk7: read batch cmd buffer failed [ 690.673376][ T5810] usb 3-1: USB disconnect, device number 26 [ 690.938091][T10843] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 690.981036][T10843] binder: 10840:10843 ioctl c0306201 200000000040 returned -22 [ 694.467706][T10876] syzkaller0: entered promiscuous mode [ 694.467760][T10876] syzkaller0: entered allmulticast mode [ 694.644812][T10885] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 694.703899][T10885] binder: BINDER_SET_CONTEXT_MGR already set [ 694.713621][T10885] binder: 10881:10885 ioctl 4018620d 200000000100 returned -16 [ 694.738539][T10885] binder: 10881:10885 ioctl c0306201 200000000040 returned -14 [ 694.755799][T10885] ublk9: read batch cmd buffer failed [ 694.762537][T10885] ublk9: read batch cmd buffer failed [ 697.305937][T10912] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 699.086419][T10923] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 699.110494][T10923] binder: 10921:10923 ioctl c0306201 0 returned -14 [ 699.158848][T10923] gadgetfs: bound to dummy_udc driver [ 699.186015][T10923] binder: 10921:10923 ioctl c0306201 200000000040 returned -22 [ 700.321507][T10932] NILFS (loop2): device size too small [ 701.222288][T10941] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 701.257260][T10941] binder: 10935:10941 ioctl c0306201 200000000040 returned -14 [ 701.386513][ T5810] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 701.576758][ T5810] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 701.626208][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.644713][ T5810] usb 4-1: config 0 has no interfaces? [ 701.644887][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.777173][ T5810] usb 4-1: config 0 descriptor?? [ 702.018823][T10940] syzkaller0: entered promiscuous mode [ 702.018861][T10940] syzkaller0: entered allmulticast mode [ 704.061476][T10965] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 704.079986][T10965] binder: 10963:10965 ioctl c0306201 0 returned -14 [ 704.119791][T10965] gadgetfs: bound to dummy_udc driver [ 704.158856][T10965] binder: 10963:10965 ioctl c0306201 200000000040 returned -22 [ 704.587768][ T5810] usb 4-1: USB disconnect, device number 35 [ 705.530466][T10978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.506515][T10984] syzkaller0: entered promiscuous mode [ 706.506565][T10984] syzkaller0: entered allmulticast mode [ 706.676400][T10988] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 706.693626][T10988] binder: 10981:10988 ioctl c0306201 200000000040 returned -14 [ 707.443008][T10989] NILFS (loop1): device size too small [ 708.852973][T10999] binder: BINDER_SET_CONTEXT_MGR already set [ 708.859717][T10999] binder: 10997:10999 ioctl 4018620d 200000000100 returned -16 [ 712.109770][T11025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.999772][T11032] syzkaller0: entered promiscuous mode [ 712.999825][T11032] syzkaller0: entered allmulticast mode [ 713.810775][T11034] NILFS (loop1): device size too small [ 714.519573][T11047] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 714.546832][T11047] binder: 11037:11047 ioctl c0306201 200000000040 returned -14 [ 718.185360][T11064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.651102][T11070] NILFS (loop1): device size too small [ 719.869473][T11072] syzkaller0: entered promiscuous mode [ 719.875260][T11072] syzkaller0: entered allmulticast mode [ 724.168375][T11099] kvm [11096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 724.168523][T11099] kvm [11096]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 725.288470][ T5810] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 725.448524][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 725.452069][ T5810] usb 3-1: unable to get BOS descriptor or descriptor too short [ 725.452119][ T5810] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 725.453107][ T5810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.453127][ T5810] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.460358][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.460382][ T5810] usb 3-1: Product: syz [ 725.460396][ T5810] usb 3-1: Manufacturer: syz [ 725.460409][ T5810] usb 3-1: SerialNumber: syz [ 725.491637][ T5810] usb 3-1: interface 1 not found [ 725.713673][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 725.966649][ T9724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 725.992037][ T9724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 726.000350][ T9724] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 726.012553][ T9724] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.023892][ T9724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 726.031225][ T5801] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 726.194357][ T5801] usb 5-1: Using ep0 maxpacket: 16 [ 726.197947][ T5801] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 726.218566][ T5801] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.218596][ T5801] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.239545][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 726.239578][ T5801] usb 5-1: SerialNumber: syz [ 726.272048][ T5801] usb 5-1: 0:2 : does not exist [ 726.564741][T11134] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 726.586473][T11134] binder: 11132:11134 ioctl c0306201 200000000040 returned -14 [ 728.680023][ T9724] Bluetooth: hci5: command tx timeout [ 728.701934][ T5801] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 728.716467][ T5801] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 728.789924][ T5810] usb 3-1: USB disconnect, device number 27 [ 728.965066][ T5801] usb 5-1: USB disconnect, device number 41 [ 729.141174][ T9907] udevd[9907]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 729.524827][T11151] comedi comedi3: comedi_config --init_data is deprecated [ 730.760000][ T9724] Bluetooth: hci5: command tx timeout [ 733.067239][ T9724] Bluetooth: hci5: command tx timeout [ 733.335458][T11180] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 733.353943][T11180] binder: BINDER_SET_CONTEXT_MGR already set [ 733.354044][T11180] binder: 11178:11180 ioctl 4018620d 200000000100 returned -16 [ 733.375794][T11180] binder: 11178:11180 ioctl c0306201 200000000040 returned -14 [ 734.468899][T11121] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.483373][T11121] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.483546][T11121] bridge_slave_0: entered allmulticast mode [ 734.495233][T11121] bridge_slave_0: entered promiscuous mode [ 734.511893][T11121] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.512030][T11121] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.512182][T11121] bridge_slave_1: entered allmulticast mode [ 734.519890][T11121] bridge_slave_1: entered promiscuous mode [ 735.081937][ T9724] Bluetooth: hci5: command tx timeout [ 735.804079][T11196] comedi comedi3: comedi_config --init_data is deprecated [ 737.844137][T11121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.865496][T11121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.358553][T11121] team0: Port device team_slave_0 added [ 738.533146][T11121] team0: Port device team_slave_1 added [ 738.651629][T11121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.653363][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.653391][T11121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.662014][T11121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.662032][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.662056][T11121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.847675][T11121] hsr_slave_0: entered promiscuous mode [ 738.849271][T11121] hsr_slave_1: entered promiscuous mode [ 738.857894][T11121] debugfs: 'hsr0' already exists in 'hsr' [ 738.857916][T11121] Cannot create hsr debugfs directory [ 740.638825][T11121] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 740.650854][T11121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 740.659217][T11121] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 740.670657][T11121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 740.678923][T11121] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 740.691382][T11121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 740.699629][T11121] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 740.714825][T11121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.798525][ T989] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 740.834623][T11121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.860580][T11121] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.896463][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.896610][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.917863][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.918000][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.949529][ T989] usb 2-1: Using ep0 maxpacket: 32 [ 740.954771][ T989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 740.954829][ T989] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 740.955823][ T989] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.955843][ T989] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.957798][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.957827][ T989] usb 2-1: Product: syz [ 740.957840][ T989] usb 2-1: Manufacturer: syz [ 740.957854][ T989] usb 2-1: SerialNumber: syz [ 740.989897][ T989] usb 2-1: interface 1 not found [ 744.230980][T11233] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 744.237702][ T989] usb 2-1: USB disconnect, device number 38 [ 744.280671][T11233] binder: 11229:11233 ioctl c0306201 200000000040 returned -14 [ 746.239013][T11241] comedi comedi3: comedi_config --init_data is deprecated [ 749.272971][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.162145][T11257] pim6reg: entered allmulticast mode [ 750.168726][T11257] pim6reg: left allmulticast mode [ 751.682867][T11121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.031770][ T5801] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 752.188500][ T5801] usb 2-1: Using ep0 maxpacket: 32 [ 752.196060][ T5801] usb 2-1: unable to get BOS descriptor or descriptor too short [ 752.204060][ T5801] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 752.214834][ T5801] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.225469][ T5801] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 752.237755][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.246038][ T5801] usb 2-1: Product: syz [ 752.250345][ T5801] usb 2-1: Manufacturer: syz [ 752.255071][ T5801] usb 2-1: SerialNumber: syz [ 752.280736][ T5801] usb 2-1: interface 1 not found [ 752.361240][T11121] veth0_vlan: entered promiscuous mode [ 752.395412][T11121] veth1_vlan: entered promiscuous mode [ 752.979154][T11121] veth0_macvtap: entered promiscuous mode [ 753.147426][T11121] veth1_macvtap: entered promiscuous mode [ 753.831945][T11121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.094380][T11121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.732984][ T8142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.193823][ T989] usb 2-1: USB disconnect, device number 39 [ 755.251898][ T8142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.252270][ T8142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.252437][ T8142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.566619][ T250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.566661][ T250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.127234][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.127308][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.709263][T11311] comedi comedi3: comedi_config --init_data is deprecated [ 759.887663][T11318] NILFS (loop5): device size too small [ 760.129262][ T25] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 760.291452][ T25] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 760.304454][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.304526][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 760.304565][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 760.351977][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 760.352100][ T25] usb 2-1: Product: syz [ 760.352134][ T25] usb 2-1: Manufacturer: syz [ 760.352154][ T25] usb 2-1: SerialNumber: syz [ 760.396674][ T25] usb 2-1: config 0 descriptor?? [ 760.415330][ T25] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 760.424396][ T25] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 760.434504][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 763.568699][T11292] usb 2-1: USB disconnect, device number 40 [ 764.439596][T11358] comedi comedi3: comedi_config --init_data is deprecated [ 765.248321][ T5807] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 765.402274][ T5807] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 765.413306][ T5807] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 765.413335][ T5807] usb 6-1: config 220 has an invalid descriptor of length 110, skipping remainder of the config [ 765.413387][ T5807] usb 6-1: config 220 has no interface number 2 [ 765.413506][ T5807] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 765.413535][ T5807] usb 6-1: config 220 interface 0 has no altsetting 0 [ 765.413554][ T5807] usb 6-1: config 220 interface 76 has no altsetting 0 [ 765.413573][ T5807] usb 6-1: config 220 interface 1 has no altsetting 0 [ 765.477376][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.477426][ T5807] usb 6-1: Product: syz [ 765.477463][ T5807] usb 6-1: Manufacturer: syz [ 765.477482][ T5807] usb 6-1: SerialNumber: syz [ 765.728593][ T5807] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 765.737235][ T5807] uvcvideo 6-1:220.0: No valid video chain found. [ 765.751049][ T5807] usb 6-1: selecting invalid altsetting 0 [ 766.182890][ T5807] usb 6-1: selecting invalid altsetting 0 [ 766.190833][ T5807] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 766.230114][ T5807] usb 6-1: USB disconnect, device number 2 [ 769.817749][T11391] tipc: Enabled bearer , priority 0 [ 769.819890][T11391] syzkaller0: entered promiscuous mode [ 769.819910][T11391] syzkaller0: entered allmulticast mode [ 769.910222][T11391] tipc: Resetting bearer [ 769.927238][T11390] tipc: Resetting bearer [ 770.009348][T11390] tipc: Disabling bearer [ 770.358373][ T5807] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 770.530604][ T5807] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 770.546090][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.557869][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 770.569129][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 770.593896][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 770.594002][ T5807] usb 3-1: Product: syz [ 770.605734][ T5807] usb 3-1: Manufacturer: syz [ 770.617472][ T5807] usb 3-1: SerialNumber: syz [ 771.346936][ T5807] usb 3-1: config 0 descriptor?? [ 771.375006][ T5807] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 771.383655][ T5807] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 771.393460][ T5807] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 771.628319][ T5801] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 771.666251][T11409] comedi comedi3: comedi_config --init_data is deprecated [ 771.780595][ T5801] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 771.796155][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.814404][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.897264][ T5801] usb 5-1: config 0 descriptor?? [ 772.005532][ T5801] pwc: Askey VC010 type 2 USB webcam detected. [ 772.493415][ T5801] pwc: recv_control_msg error -32 req 02 val 2b00 [ 772.495808][ T5801] pwc: recv_control_msg error -32 req 02 val 2700 [ 772.498050][ T5801] pwc: recv_control_msg error -32 req 02 val 2c00 [ 772.500372][ T5801] pwc: recv_control_msg error -32 req 04 val 1000 [ 772.504165][ T5801] pwc: recv_control_msg error -32 req 04 val 1300 [ 772.506370][ T5801] pwc: recv_control_msg error -32 req 04 val 1400 [ 772.510994][ T5801] pwc: recv_control_msg error -32 req 02 val 2000 [ 772.514652][ T5801] pwc: recv_control_msg error -32 req 02 val 2100 [ 772.515079][ T5801] pwc: recv_control_msg error -71 req 04 val 1500 [ 772.516822][ T5801] pwc: recv_control_msg error -71 req 02 val 2500 [ 772.517258][ T5801] pwc: recv_control_msg error -71 req 02 val 2400 [ 772.517673][ T5801] pwc: recv_control_msg error -71 req 02 val 2600 [ 772.518388][ T5801] pwc: recv_control_msg error -71 req 02 val 2900 [ 772.522215][ T5801] pwc: recv_control_msg error -71 req 02 val 2800 [ 772.524265][ T5801] pwc: recv_control_msg error -71 req 04 val 1100 [ 772.525159][ T5801] pwc: recv_control_msg error -71 req 04 val 1200 [ 772.592987][ T5801] pwc: Registered as video103. [ 772.603188][ T5801] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 772.637976][ T5801] usb 5-1: USB disconnect, device number 42 [ 774.067851][T11292] usb 3-1: USB disconnect, device number 28 [ 777.221355][T11431] MTD: Couldn't look up './dev/mtdblock0': -2 [ 777.223422][T11441] NILFS (loop4): device size too small [ 779.203270][T11461] comedi comedi3: comedi_config --init_data is deprecated [ 779.254589][T11451] tipc: Started in network mode [ 779.261039][T11451] tipc: Node identity f6cdf0dc75d3, cluster identity 4711 [ 779.287520][T11451] tipc: Enabled bearer , priority 0 [ 779.308571][T11457] syzkaller0: entered promiscuous mode [ 779.315632][T11457] syzkaller0: entered allmulticast mode [ 779.404646][T11451] tipc: Resetting bearer [ 779.751976][T11449] tipc: Resetting bearer [ 779.955949][T11449] tipc: Disabling bearer [ 780.478304][ T5807] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 780.661332][ T5807] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 780.665486][ T5807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.668180][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.457317][ T5807] usb 2-1: config 0 descriptor?? [ 781.480733][ T5807] pwc: Askey VC010 type 2 USB webcam detected. [ 782.269867][T11478] usb usb9: usbfs: process 11478 (syz.5.1719) did not claim interface 0 before use [ 782.359505][ T5807] pwc: recv_control_msg error -32 req 02 val 2b00 [ 782.664403][ T5807] pwc: recv_control_msg error -32 req 02 val 2700 [ 782.687079][ T5807] pwc: recv_control_msg error -32 req 02 val 2c00 [ 782.697259][ T5807] pwc: recv_control_msg error -32 req 04 val 1000 [ 782.704524][ T5807] pwc: recv_control_msg error -32 req 04 val 1300 [ 782.711783][ T5807] pwc: recv_control_msg error -32 req 04 val 1400 [ 782.719059][ T5807] pwc: recv_control_msg error -32 req 02 val 2000 [ 782.726300][ T5807] pwc: recv_control_msg error -32 req 02 val 2100 [ 782.733395][ T5807] pwc: recv_control_msg error -71 req 04 val 1500 [ 782.740452][ T5807] pwc: recv_control_msg error -71 req 02 val 2500 [ 782.747563][ T5807] pwc: recv_control_msg error -71 req 02 val 2400 [ 782.754685][ T5807] pwc: recv_control_msg error -71 req 02 val 2600 [ 782.761757][ T5807] pwc: recv_control_msg error -71 req 02 val 2900 [ 782.770444][ T5807] pwc: recv_control_msg error -71 req 02 val 2800 [ 782.777669][ T5807] pwc: recv_control_msg error -71 req 04 val 1100 [ 782.784754][ T5807] pwc: recv_control_msg error -71 req 04 val 1200 [ 782.797484][ T5807] pwc: Registered as video103. [ 782.804590][ T5807] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 782.864603][ T5807] usb 2-1: USB disconnect, device number 41 [ 783.091076][T11486] input: syz0 as /devices/virtual/input/input13 [ 785.149282][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.167899][T11486] batadv_slave_1: entered promiscuous mode [ 785.415972][T11503] comedi comedi3: comedi_config --init_data is deprecated [ 786.433261][T11511] tipc: Started in network mode [ 786.439943][T11511] tipc: Node identity b6cb7ea82e9a, cluster identity 4711 [ 786.449641][T11511] tipc: Enabled bearer , priority 0 [ 786.457803][T11511] syzkaller0: entered promiscuous mode [ 786.463957][T11511] syzkaller0: entered allmulticast mode [ 786.548183][T11511] tipc: Resetting bearer [ 786.584017][T11509] tipc: Resetting bearer [ 786.682270][T11509] tipc: Disabling bearer [ 788.622147][T11531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.214237][T11535] usb usb9: usbfs: process 11535 (syz.4.1731) did not claim interface 0 before use [ 790.545628][T11547] tipc: Enabled bearer , priority 0 [ 790.823176][T11549] comedi comedi3: comedi_config --init_data is deprecated [ 791.502502][T11556] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1740'. [ 793.286615][T11546] tipc: Disabling bearer [ 794.659060][T11585] comedi comedi3: comedi_config --init_data is deprecated [ 795.004885][T11588] netlink: 'syz.5.1752': attribute type 18 has an invalid length. [ 796.088500][T11092] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.097438][T11092] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.097499][T11092] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.097533][T11092] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.061245][T11629] comedi comedi3: comedi_config --init_data is deprecated [ 804.020851][T11641] syzkaller0: entered promiscuous mode [ 804.020898][T11641] syzkaller0: entered allmulticast mode [ 808.116626][T11657] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1774'. [ 809.242886][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.709628][T11672] comedi comedi3: comedi_config --init_data is deprecated [ 811.836693][T11680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1778'. [ 812.624002][T11682] syzkaller0: entered promiscuous mode [ 812.624055][T11682] syzkaller0: entered allmulticast mode [ 813.062344][T11292] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 813.293117][T11292] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 813.333374][T11292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.350486][T11292] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.367919][T11292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.475163][T11292] usb 2-1: config 0 descriptor?? [ 814.965442][T11699] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 814.982865][T11699] binder: 11696:11699 ioctl c0306201 200000000040 returned -14 [ 815.684489][T11702] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1787'. [ 815.782033][ T5801] usb 2-1: USB disconnect, device number 42 [ 818.296480][ T31] audit: type=1800 audit(1786364415.999:101): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1793" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 820.692289][T11729] comedi comedi3: comedi_config --init_data is deprecated [ 821.612735][T11731] binder: 11730:11731 ioctl c018620c 200000000240 returned -22 [ 823.053152][T11737] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1799'. [ 823.305504][T11742] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 823.321688][T11742] binder: 11738:11742 ioctl c0306201 200000000040 returned -22 [ 824.414519][T11748] syzkaller0: entered promiscuous mode [ 824.421967][T11748] syzkaller0: entered allmulticast mode [ 825.653017][T11756] capability: warning: `syz.0.1796' uses deprecated v2 capabilities in a way that may be insecure [ 825.986642][T11763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1806'. [ 825.986697][T11763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1806'. [ 827.826412][T11784] comedi comedi3: comedi_config --init_data is deprecated [ 828.120869][T11790] tipc: Enabled bearer , priority 0 [ 829.433211][T11801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.988382][T11293] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 830.144798][T11293] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 830.162613][T11293] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 830.172119][T11293] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 830.189518][T11293] usb 3-1: config 220 has no interface number 2 [ 830.197652][T11293] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 830.209139][T11293] usb 3-1: config 220 interface 0 has no altsetting 0 [ 830.209764][T11293] usb 3-1: config 220 interface 76 has no altsetting 0 [ 830.209835][T11293] usb 3-1: config 220 interface 1 has no altsetting 0 [ 830.390576][T11293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.400495][T11293] usb 3-1: Product: syz [ 830.400539][T11293] usb 3-1: Manufacturer: syz [ 830.400577][T11293] usb 3-1: SerialNumber: syz [ 830.785114][T11293] usb 3-1: selecting invalid altsetting 0 [ 830.826263][T11293] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 830.851640][T11293] uvcvideo 3-1:220.0: No valid video chain found. [ 830.871451][T11293] usb 3-1: selecting invalid altsetting 0 [ 830.877840][T11293] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 830.893842][T11293] usb 3-1: USB disconnect, device number 29 [ 831.094848][T11830] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 831.094880][T11830] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 831.094990][T11830] vhci_hcd vhci_hcd.0: Device attached [ 831.100295][T11832] vhci_hcd: connection closed [ 831.102208][ T5854] vhci_hcd vhci_hcd.4: stop threads [ 831.102235][ T5854] vhci_hcd vhci_hcd.4: release socket [ 831.102341][ T5854] vhci_hcd vhci_hcd.4: disconnect device [ 831.143785][T11789] tipc: Disabling bearer [ 831.854770][T11846] comedi comedi3: comedi_config --init_data is deprecated [ 833.947721][T11893] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 833.970878][T11893] binder: 11891:11893 ioctl c0306201 200000000040 returned -22 [ 834.780857][T11897] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1832'. [ 834.983511][ T31] audit: type=1800 audit(1786364432.689:102): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1833" name="memory_backed" dev="configfs" ino=33629 res=0 errno=0 [ 835.013102][ T31] audit: type=1800 audit(1786364432.719:103): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1833" name="zone_nr_conv" dev="configfs" ino=33630 res=0 errno=0 [ 835.038942][ T31] audit: type=1800 audit(1786364432.749:104): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1833" name="power" dev="configfs" ino=33631 res=0 errno=0 [ 835.245714][T11905] netlink: 'syz.2.1835': attribute type 18 has an invalid length. [ 836.01 ** replaying previous printk message ** [ 836.016259][T11904] ------------[ cut here ]------------ [ 836.016308][T11904] timer_delete_sync(&sdp->delay_work) [ 836.016342][T11904] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x3aa/0x890, CPU#0: syz.1.1833/11904 [ 836.043352][T11904] Modules linked in: [ 836.047612][T11904] CPU: 0 UID: 0 PID: 11904 Comm: syz.1.1833 Not tainted syzkaller #0 PREEMPT(full) [ 836.057120][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.067222][T11904] RIP: 0010:cleanup_srcu_struct+0x3aa/0x890 [ 836.073293][T11904] Code: b9 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 0e ff ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 836.093537][T11904] RSP: 0018:ffffc9000d68fa70 EFLAGS: 00010202 [ 836.099689][T11904] RAX: 0000000000000001 RBX: 0000607edad4f040 RCX: 0000000000000000 [ 836.107660][T11904] RDX: 0000000000000006 RSI: ffffffff8e253559 RDI: 00000000ffffffff [ 836.115668][T11904] RBP: ffffe8ffffc5b040 R08: ffffffff9058fb7f R09: 1ffffffff20b1f6f [ 836.123802][T11904] R10: dffffc0000000000 R11: fffffbfff20b1f70 R12: ffff88802e607800 [ 836.131804][T11904] R13: 0000000000000000 R14: ffffffff8e5237d0 R15: 1ffffffff1ca47de [ 836.139941][T11904] FS: 00007f6b648f16c0(0000) GS:ffff888124f0c000(0000) knlGS:0000000000000000 [ 836.149464][T11904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.156071][T11904] CR2: 00007f527e3c54e8 CR3: 000000003471a000 CR4: 00000000003526f0 [ 836.164878][T11904] Call Trace: [ 836.168454][T11904] [ 836.171502][T11904] blk_mq_free_tag_set+0x617/0x780 [ 836.176776][T11904] null_del_dev+0x280/0x380 [ 836.181732][T11904] nullb_device_power_store+0x21b/0x380 [ 836.187306][T11904] ? __pfx_nullb_device_power_store+0x10/0x10 [ 836.193703][T11904] ? down_read+0x2be/0x330 [ 836.198782][T11904] ? __pfx_nullb_device_power_store+0x10/0x10 [ 836.204865][T11904] configfs_write_iter+0x337/0x430 [ 836.210302][T11904] vfs_write+0x612/0xba0 [ 836.214586][T11904] ? __pfx_vfs_write+0x10/0x10 [ 836.219639][T11904] ? __fget_files+0x2a/0x420 [ 836.224262][T11904] ksys_write+0x150/0x270 [ 836.228865][T11904] ? __pfx_ksys_write+0x10/0x10 [ 836.233722][T11904] do_syscall_64+0x166/0x510 [ 836.238761][T11904] ? trace_irq_disable+0x3b/0x140 [ 836.243837][T11904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.250615][T11904] ? clear_bhb_loop+0x70/0xc0 [ 836.255362][T11904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.262203][T11904] RIP: 0033:0x7f6b6399e0d9 [ 836.266718][T11904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.287688][T11904] RSP: 002b:00007f6b648f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.296236][T11904] RAX: ffffffffffffffda RBX: 00007f6b63c25fa0 RCX: 00007f6b6399e0d9 [ 836.304245][T11904] RDX: 000000000000001e RSI: 0000200000000180 RDI: 0000000000000005 [ 836.312265][T11904] RBP: 00007f6b63a35024 R08: 0000000000000000 R09: 0000000000000000 [ 836.320269][T11904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.328401][T11904] R13: 00007f6b63c26038 R14: 00007f6b63c25fa0 R15: 00007ffdac3544a8 [ 836.336442][T11904] [ 836.339537][T11904] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 836.346831][T11904] CPU: 0 UID: 0 PID: 11904 Comm: syz.1.1833 Not tainted syzkaller #0 PREEMPT(full) [ 836.356310][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.366383][T11904] Call Trace: [ 836.369677][T11904] [ 836.372611][T11904] vpanic+0x56c/0xa60 [ 836.376831][T11904] ? __pfx__printk+0x10/0x10 [ 836.381436][T11904] ? __pfx_vpanic+0x10/0x10 [ 836.385961][T11904] ? is_bpf_text_address+0x292/0x2b0 [ 836.391356][T11904] ? is_bpf_text_address+0x26/0x2b0 [ 836.396578][T11904] panic+0xc5/0xd0 [ 836.400314][T11904] ? __pfx_panic+0x10/0x10 [ 836.405273][T11904] __warn+0x315/0x4c0 [ 836.409259][T11904] ? cleanup_srcu_struct+0x3aa/0x890 [ 836.414550][T11904] ? cleanup_srcu_struct+0x3aa/0x890 [ 836.419841][T11904] __report_bug+0x276/0x570 [ 836.424452][T11904] ? cleanup_srcu_struct+0x3aa/0x890 [ 836.429757][T11904] ? __pfx___report_bug+0x10/0x10 [ 836.434789][T11904] ? irqentry_exit+0x218/0x910 [ 836.439554][T11904] ? lockdep_hardirqs_on+0x7a/0x110 [ 836.444757][T11904] ? irqentry_exit+0x218/0x910 [ 836.449527][T11904] ? trace_irq_disable+0x3b/0x140 [ 836.454669][T11904] ? cleanup_srcu_struct+0x3aa/0x890 [ 836.459956][T11904] report_bug+0x16a/0x220 [ 836.464303][T11904] ? cleanup_srcu_struct+0x3aa/0x890 [ 836.469586][T11904] ? cleanup_srcu_struct+0x3ac/0x890 [ 836.474955][T11904] handle_bug+0x9c/0x200 [ 836.479202][T11904] exc_invalid_op+0x1a/0x50 [ 836.483719][T11904] asm_exc_invalid_op+0x1a/0x20 [ 836.488682][T11904] RIP: 0010:cleanup_srcu_struct+0x3aa/0x890 [ 836.494581][T11904] Code: b9 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 0e ff ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 836.514198][T11904] RSP: 0018:ffffc9000d68fa70 EFLAGS: 00010202 [ 836.520310][T11904] RAX: 0000000000000001 RBX: 0000607edad4f040 RCX: 0000000000000000 [ 836.528280][T11904] RDX: 0000000000000006 RSI: ffffffff8e253559 RDI: 00000000ffffffff [ 836.536293][T11904] RBP: ffffe8ffffc5b040 R08: ffffffff9058fb7f R09: 1ffffffff20b1f6f [ 836.544263][T11904] R10: dffffc0000000000 R11: fffffbfff20b1f70 R12: ffff88802e607800 [ 836.552233][T11904] R13: 0000000000000000 R14: ffffffff8e5237d0 R15: 1ffffffff1ca47de [ 836.560247][T11904] blk_mq_free_tag_set+0x617/0x780 [ 836.565369][T11904] null_del_dev+0x280/0x380 [ 836.569885][T11904] nullb_device_power_store+0x21b/0x380 [ 836.575458][T11904] ? __pfx_nullb_device_power_store+0x10/0x10 [ 836.581535][T11904] ? down_read+0x2be/0x330 [ 836.585972][T11904] ? __pfx_nullb_device_power_store+0x10/0x10 [ 836.592045][T11904] configfs_write_iter+0x337/0x430 [ 836.597167][T11904] vfs_write+0x612/0xba0 [ 836.601412][T11904] ? __pfx_vfs_write+0x10/0x10 [ 836.606179][T11904] ? __fget_files+0x2a/0x420 [ 836.610768][T11904] ksys_write+0x150/0x270 [ 836.615111][T11904] ? __pfx_ksys_write+0x10/0x10 [ 836.620051][T11904] do_syscall_64+0x166/0x510 [ 836.624641][T11904] ? trace_irq_disable+0x3b/0x140 [ 836.629661][T11904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.635721][T11904] ? clear_bhb_loop+0x70/0xc0 [ 836.640390][T11904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.646285][T11904] RIP: 0033:0x7f6b6399e0d9 [ 836.650712][T11904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.670326][T11904] RSP: 002b:00007f6b648f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.678740][T11904] RAX: ffffffffffffffda RBX: 00007f6b63c25fa0 RCX: 00007f6b6399e0d9 [ 836.686712][T11904] RDX: 000000000000001e RSI: 0000200000000180 RDI: 0000000000000005 [ 836.694699][T11904] RBP: 00007f6b63a35024 R08: 0000000000000000 R09: 0000000000000000 [ 836.702666][T11904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.710636][T11904] R13: 00007f6b63c26038 R14: 00007f6b63c25fa0 R15: 00007ffdac3544a8 [ 836.718623][T11904] [ 836.721910][T11904] Kernel Offset: disabled [ 836.726236][T11904] Rebooting in 86400 seconds..