last executing test programs: 10m28.640128382s ago: executing program 1 (id=886): r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0xf0002030}) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r2, 0x40045201, &(0x7f0000000000)=ANY=[]) 10m28.559936181s ago: executing program 1 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0xe7030000}, 0x20000000) 10m28.55876252s ago: executing program 1 (id=888): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b00"], 0x10b8}, 0x0) 10m28.555360032s ago: executing program 1 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x2002c2, 0x2) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000000)={{0x4, 0x7}, {0x7, 0x7c}, 0x645f, 0x1, 0x1}) 10m28.523993977s ago: executing program 1 (id=890): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x400c55cb, &(0x7f0000000080)={{}, 'syz1\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d0009050303"], 0x0) 10m28.356139057s ago: executing program 1 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x20000000) (fail_nth: 87) 10m28.215578178s ago: executing program 32 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x20000000) (fail_nth: 87) 4m17.047991231s ago: executing program 0 (id=3112): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) fstatfs(r0, &(0x7f0000000d00)=""/4096) 4m16.990438291s ago: executing program 0 (id=3113): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f00000000c0)="ad") syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x12, 0x4, "3f424799"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8d}, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0xe0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m16.098736823s ago: executing program 0 (id=3117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) userfaultfd(0x801) 4m16.038426842s ago: executing program 0 (id=3119): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x2) dup3(r5, r7, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r10, 0x1, 0x62}, 0x14) clock_gettime(0x0, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000040)={{}, {r11, r12/1000+60000}}, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$HIDIOCSFLAG(r13, 0x4004480f, &(0x7f0000000180)=0x2) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x33) ioctl$KVM_CAP_DISABLE_QUIRKS2(r14, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x41}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 4m15.831779687s ago: executing program 0 (id=3122): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x29) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x2d]}}, {@quota}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 4m15.783140254s ago: executing program 0 (id=3123): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000480)=[@cpuid={0x14, 0x18, {0xff, 0xa}}, @in_dx={0x82, 0x20, {0x7b3d, 0x4}}, @uexit={0x0, 0x18, 0x800}, @wr_drn={0x6e, 0x20, {0x5, 0x2}}, @wrmsr={0x1e, 0x20, {0xa40, 0x4}}, @code={0xa, 0x62, {"c4a27924a10000000066baf80cb87a8a8885ef66bafc0c66b893d466ef430f21dbb8010000000f01c166baf80cb818213e81ef66bafc0cedc402899a2966b831008ed8400f32c482e198ce66b8e8008ed8"}}, @wr_crn={0x46, 0x20, {0x12, 0x9}}, @out_dx={0xaa, 0x28, {0xaba8, 0x3, 0x7}}, @out_dx={0xaa, 0x28, {0x1e6e, 0x0, 0x3}}, @code={0xa, 0x5f, {"b9eb0a0000b861010000ba000000000f306465440fa1420f79bf7cc8df7a66baf80cb8cee0788cef66bafc0c66eda9990000000f01c2b9bd0200000f320fc7af049a000067640f3266410fc7348f"}}, @wrmsr={0x1e, 0x20, {0x94a, 0x81}}, @code={0xa, 0x47, {"0f019fd693cbcd0fc77f008fa998973e0f01ca0f09673e64440f219df040830566ff1a5100470f32660f3882a16dd90000c4017d1103"}}, @rdmsr={0x32, 0x18, {0x24e}}, @cpuid={0x14, 0x18, {0x2, 0xa8c0}}, @wrmsr={0x1e, 0x20, {0x9f6, 0x100000001}}, @wr_drn={0x6e, 0x20, {0x6, 0xffffffff}}, @wrmsr={0x1e, 0x20, {0x9db}}, @cpuid={0x14, 0x18, {0x81, 0x6}}, @uexit={0x0, 0x18, 0x9}, @rdmsr={0x32, 0x18, {0xad0}}, @cpuid={0x14, 0x18, {0x1, 0xff}}, @wr_crn={0x46, 0x20, {0x8, 0x9}}], 0x338}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) readlinkat(r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000840)=""/185, 0xb9) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = gettid() clock_gettime(0x0, &(0x7f0000000100)) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffffffff]}, &(0x7f0000000180), 0x0, 0x8) tkill(r6, 0x11) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x25) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x2000, 0xe38, @private0}}}, 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r1, 0x0, 0x0) readlinkat(r11, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x480, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESOCT=r2, @ANYBLOB=',aname=a']) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="1203000300000010f003040040000102030109022400010140d0810904001001070102040905010240000740060905f09a32e8b1a69fc72f7aa92c58e18202200004fc0f"], &(0x7f00000007c0)={0xa, &(0x7f0000000240)={0x67, 0x6, 0x310, 0xf, 0x4, 0x6, 0x0, 0xff}, 0x119, &(0x7f0000000bc0)={0x5, 0xf, 0x119, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x8, 0x2}, @ptm_cap={0xffffffffffffffa3}, @generic={0x0, 0x10, 0x4, "69ad1764346349988ed20dfcef7069773b6b80878b38602c1a44b8f2c5d96ca66b3b27ab3feca4a86cbaa8b409e9697f6e63c1ebeed18b267ed84b386e140645ae270dbdfe628f1f642d955820ffb68caf4a2e714d9433fcbe6d1000b9c605496ba3c7d5ba71597d2c297035222c4457df7043558a1b9552fc7896653b9aa1efe98fa3aee7c7accc504d10213a7df528c2339db89c439de1af4fed38112cc06f4d911162c8c3584b30fbb61951f7d794f55b99f317876c514f1e7f6fb32217b5f60b01d8af71758ac7583453a64c"}, @generic={0xfc, 0x10, 0x2, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x5, 0x3}]}, 0x3a, [{0x0, &(0x7f0000000280)=@lang_id={0x0, 0x3, 0x426}}, {0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0003e9c375b8959bb8127e48b8302d9d49b40eea25eb7df623c25cd6afdcc7947b934947ac6b8fbf3e7321f1fd99e3a5303c44c939ed747a309f1733e6ccc0b4d44a3adaacd74fec934621a2c354f73caf9dc1ef54965f1fd7a112db7f0064e60774a8093db95f4d4ad7df8512ea4829928011ec81aa3b0c3858b73bd462f776161c949412a1ead317f195c98f884068b15d4429b5d6687ab628890ff2"]}]}) sendmsg$kcm(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="b6001c009c1400000000", 0xa}], 0x1}, 0xc00c) 4m0.494092599s ago: executing program 33 (id=3123): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000480)=[@cpuid={0x14, 0x18, {0xff, 0xa}}, @in_dx={0x82, 0x20, {0x7b3d, 0x4}}, @uexit={0x0, 0x18, 0x800}, @wr_drn={0x6e, 0x20, {0x5, 0x2}}, @wrmsr={0x1e, 0x20, {0xa40, 0x4}}, @code={0xa, 0x62, {"c4a27924a10000000066baf80cb87a8a8885ef66bafc0c66b893d466ef430f21dbb8010000000f01c166baf80cb818213e81ef66bafc0cedc402899a2966b831008ed8400f32c482e198ce66b8e8008ed8"}}, @wr_crn={0x46, 0x20, {0x12, 0x9}}, @out_dx={0xaa, 0x28, {0xaba8, 0x3, 0x7}}, @out_dx={0xaa, 0x28, {0x1e6e, 0x0, 0x3}}, @code={0xa, 0x5f, {"b9eb0a0000b861010000ba000000000f306465440fa1420f79bf7cc8df7a66baf80cb8cee0788cef66bafc0c66eda9990000000f01c2b9bd0200000f320fc7af049a000067640f3266410fc7348f"}}, @wrmsr={0x1e, 0x20, {0x94a, 0x81}}, @code={0xa, 0x47, {"0f019fd693cbcd0fc77f008fa998973e0f01ca0f09673e64440f219df040830566ff1a5100470f32660f3882a16dd90000c4017d1103"}}, @rdmsr={0x32, 0x18, {0x24e}}, @cpuid={0x14, 0x18, {0x2, 0xa8c0}}, @wrmsr={0x1e, 0x20, {0x9f6, 0x100000001}}, @wr_drn={0x6e, 0x20, {0x6, 0xffffffff}}, @wrmsr={0x1e, 0x20, {0x9db}}, @cpuid={0x14, 0x18, {0x81, 0x6}}, @uexit={0x0, 0x18, 0x9}, @rdmsr={0x32, 0x18, {0xad0}}, @cpuid={0x14, 0x18, {0x1, 0xff}}, @wr_crn={0x46, 0x20, {0x8, 0x9}}], 0x338}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) readlinkat(r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000840)=""/185, 0xb9) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = gettid() clock_gettime(0x0, &(0x7f0000000100)) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffffffff]}, &(0x7f0000000180), 0x0, 0x8) tkill(r6, 0x11) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x25) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x2000, 0xe38, @private0}}}, 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r1, 0x0, 0x0) readlinkat(r11, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x480, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESOCT=r2, @ANYBLOB=',aname=a']) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="1203000300000010f003040040000102030109022400010140d0810904001001070102040905010240000740060905f09a32e8b1a69fc72f7aa92c58e18202200004fc0f"], &(0x7f00000007c0)={0xa, &(0x7f0000000240)={0x67, 0x6, 0x310, 0xf, 0x4, 0x6, 0x0, 0xff}, 0x119, &(0x7f0000000bc0)={0x5, 0xf, 0x119, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x8, 0x2}, @ptm_cap={0xffffffffffffffa3}, @generic={0x0, 0x10, 0x4, "69ad1764346349988ed20dfcef7069773b6b80878b38602c1a44b8f2c5d96ca66b3b27ab3feca4a86cbaa8b409e9697f6e63c1ebeed18b267ed84b386e140645ae270dbdfe628f1f642d955820ffb68caf4a2e714d9433fcbe6d1000b9c605496ba3c7d5ba71597d2c297035222c4457df7043558a1b9552fc7896653b9aa1efe98fa3aee7c7accc504d10213a7df528c2339db89c439de1af4fed38112cc06f4d911162c8c3584b30fbb61951f7d794f55b99f317876c514f1e7f6fb32217b5f60b01d8af71758ac7583453a64c"}, @generic={0xfc, 0x10, 0x2, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x5, 0x3}]}, 0x3a, [{0x0, &(0x7f0000000280)=@lang_id={0x0, 0x3, 0x426}}, {0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0003e9c375b8959bb8127e48b8302d9d49b40eea25eb7df623c25cd6afdcc7947b934947ac6b8fbf3e7321f1fd99e3a5303c44c939ed747a309f1733e6ccc0b4d44a3adaacd74fec934621a2c354f73caf9dc1ef54965f1fd7a112db7f0064e60774a8093db95f4d4ad7df8512ea4829928011ec81aa3b0c3858b73bd462f776161c949412a1ead317f195c98f884068b15d4429b5d6687ab628890ff2"]}]}) sendmsg$kcm(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="b6001c009c1400000000", 0xa}], 0x1}, 0xc00c) 3m46.543044764s ago: executing program 2 (id=3297): prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000c00)="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", 0x1a1) 3m46.426481921s ago: executing program 2 (id=3300): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x37b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x25d11c32db5cec7f, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xca0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x40, 0x24, 0x37, {0x37, 0x7, "f66334b8502fcf6db2a4c664695d11742a0de43ffd8b4dcd835ad056b0f21df13a0e50f192fb38c1b6d06fdaae95c4ade1253ef2c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m45.706948351s ago: executing program 2 (id=3307): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 3m45.648825195s ago: executing program 2 (id=3308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3m45.546378912s ago: executing program 2 (id=3310): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m45.288116422s ago: executing program 2 (id=3313): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) close(r0) 3m30.116521485s ago: executing program 34 (id=3313): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) close(r0) 6.612248563s ago: executing program 3 (id=4964): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'vlan0\x00', 0x400}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000180)={0xfa19, 0x10, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0]}) 5.332128182s ago: executing program 3 (id=4969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x686694dfbd7d1305}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80d0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) 5.331278893s ago: executing program 3 (id=4970): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000140)={0x20, 0x2, 0xc5, {0xc5, 0x1, "dfb546917f96c5d686608919c7fea2da59afac0c285b206fc6081de485ce99e324053eb92d3399afa4d43e01316edca08c1be3a29ce5df3eaccd704c6b28d3d5dec548fdca3ca9b0f5765408fff8fb6aa20f84b0e5cabce2b24f85ff1ee7b1417a1793af633a10ad04c88687ee33ed8b3362cc81f942c7a07d35926f3c380957c89dfbfdc6a003790dac1d27202a942722831b4addc148fcbe5d184657868e07e01d8eaa90ea751b4503435320ce6b90e599b830c583f81b77ae6dff1c49e647139e07"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000040)={0x0, 0x22, 0x11, {[@local=@item_4={0x3, 0x2, 0x8, '9k[7'}, @local=@item_012={0x2, 0x2, 0x3, "a298"}, @global=@item_012={0x1, 0x1, 0x2, "8c"}, @global=@item_012={0x1, 0x1, 0xa, '{'}, @global=@item_4={0x3, 0x1, 0x5, "687bd210"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xfa, 0x1, {0x22, 0xc03}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x0, 0x55, "3612764f8f3bd85c3fe34d7c3200042136e8d0b5bdc2ccf22c839faa49d36d5ed2a295eee9c568b1205815863eeb8d04af950c84a7534daa37091c5a81907b37f61353113d9a06336d06a5e3fbc926b13633cebd59"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x93}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x1, 0xcb, "925f82908b5eea401d6d7182b6d40f0bea3bc73b21d1529dbf370a8c92f2f1c925f75f14932ac407f4f475a9d076eb659d7eebedd8248faeea93fed4d4513d59279fb485ff6d200055efb3b2006539bae06a31d486957e830f6e14c1e51b6b860bc971a1f5ef6c02aa7f227897774dc626f09195d5540c10e5367a16b99e6adcd959ca9a8d8541293dd0be0a7ec25ce18eeea1fbbc51bf6a81bb68e7aff86f8f40491cea7acb4f6b79adeb0cafb398ed4bc16d8f5a920667bb6468643721edaee1841eb061663dc79a3d76"}, &(0x7f00000004c0)={0x20, 0x3, 0x1}}) 4.976126625s ago: executing program 6 (id=4973): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x5460, &(0x7f0000000540)={'veth0_macvtap\x00', @link_local}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000002440)={0x2020}, 0x1e0c) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000003c0)={0x0, 0x3b, 0x5, {0x5, 0xd, "4d8188"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.779863663s ago: executing program 4 (id=4974): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f00000008c0)=0x5c) r2 = userfaultfd(0x801) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x1030}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x2, 0x8, 0x5, "c5320120", "f8091004"}}, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.640424888s ago: executing program 5 (id=4975): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 3.611525804s ago: executing program 5 (id=4976): syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001"], 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.492112116s ago: executing program 6 (id=4977): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) recvfrom(r1, &(0x7f0000000280)=""/228, 0xe4, 0x2000, 0x0, 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @raw8={"3ad5e4aa05fd1f1646e53f27"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x2}}], 0x70) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) rt_sigpending(&(0x7f0000000200), 0x8) ioctl$TCFLSH(r0, 0x400455c8, 0x8000000000000001) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x10000, 0x0, {0x0, 0x2, 0x7, 0x2, 0x80}, 0x4}) 2.350888293s ago: executing program 5 (id=4978): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0xffff, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000920000/0x2000)=nil, 0x2000, 0x13) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xaf}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x2400400c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x27) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x8403], [0x0, 0x100000], [0x0, 0xfffffffd]], '\x00', [{0x0, 0x7fff}, {}, {}, {}, {}, {0x0, 0x10}], '\x00', 0x7}) sendmsg$nl_netfilter(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffdf5, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r5], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$COMEDI_DEVINFO(0xffffffffffffffff, 0x80b06401, &(0x7f0000000440)) 2.32158122s ago: executing program 4 (id=4979): syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.244246118s ago: executing program 3 (id=4980): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'gre0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x9, 0x900}}) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000000)={0x2, 0xfffb, @remote}, 0x10) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x48844) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x3a, @multicast1, 0x4e24, 0x0, 'sh\x00', 0x30, 0x6, 0x62}, 0x2c) 2.207795179s ago: executing program 3 (id=4981): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001a"], 0x138}, 0x1, 0x0, 0x0, 0x48881}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x3}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x6) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0xffff0396, 0xb, 0x4}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.090742975s ago: executing program 3 (id=4982): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xb, 0x7}, {0xfff3, 0xc}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1c}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x6000c845}, 0x4008841) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @bcast, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @bcast, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000100)=ANY=[], 0x0) 2.032321558s ago: executing program 5 (id=4983): mkdir(&(0x7f0000000140)='./file1\x00', 0x392) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xfffffecc) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xffffffffffffffff, 0x6}) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xffffffffffffffff, 0x6}) r1 = socket$l2tp(0x2, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/68, &(0x7f00000000c0)=0x18) fchown(r0, 0xee01, 0x0) 1.857166091s ago: executing program 5 (id=4984): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002020000ff2505a1a440000102030109023b000101e7000c09c30e1a45953fa5a805240600b98f442d30f5256c0005240003000d240f01b1000000b4ff018009090582020002ad070709050002000481b230ccdb69a22aaa714cec9643a6b716e5ec333265850200"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x0, 0x0}, {0x2, &(0x7f0000000540)=@string={0x2}}, {0x0, 0x0}, {0x1f, &(0x7f0000000700)=@string={0x1f, 0x3, "0e406293ce12baeb6b7f6190ad28e66ec5971b5cb504b8de5751f6d25e"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40a}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xe9, &(0x7f00000008c0)=@string={0xe9, 0x3, "5968496309bd3717eeb8ce4f06ab08e5adf552dc691b4f6f8c9ae252e0e2c9fa557007c6c7369233db7356fc85d47bbfd2cfc44230068dd40d62d48d735089c37de1621aea1dfc80a6d0e51a492085f22efa74516ed2e8efb232b421d02928633fae8f001d3527083c5e56f44b41de3f24d3ed4aaf70b39bdcaf8cf73fe3ef2dcc6347de464efdf082a74323a6e030ec83ad4429d466f62bc438d988c0e91fdbb590e65cf33e69c89c62562c8b9d6c79c38e0543eb3751f1ba31467fd039581837051aec223dea03201a683f8276d743d19b931b84067b14f32ba4adb3d1cecf0714707c97f002"}}]}) (async) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.350458583s ago: executing program 6 (id=4985): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.303613243s ago: executing program 6 (id=4986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="5d0033008000e100ffffffffffff0802110000005050505050500000000000000000000064"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.25606739s ago: executing program 6 (id=4987): syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001"], 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.036636523s ago: executing program 4 (id=4988): syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) (async) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}]}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'caif0\x00', 0x4000}) (async) r4 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) recvmmsg$unix(r5, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x3, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a40)={0x1008, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3d0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x22c, 0xe, 0x0, 0x1, [{0xa5, 0x0, "2f6ea88762ad43056ba0a5e27e2346a827e651414753fd53dbd6bfc517a45f94237b8ec29d0bf209f6d61e4cb9f2dc06442c2dc077b0f2dcbd13ed5dba41f05d69dd0401046aa10b249ecfbcda700d4b5adc155808455c9426e0351e186ac53777dfc3dd170ac71bc284b418800e1550502a2b2423b43fc0949f3d590c50c288af1b00e78e55644c2b368fe929e287dcdd797b4e3bd301674cf55247f49774139a"}, {0x3d, 0x0, "b3726940265c88903d775f9ed6552ba8c2a290ba493013fd3864d611d6ee8f1d12a075759d0b0bd8330bc5703dcddfcdfcad20cf7f6db637d0"}, {0x13d, 0x0, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x114, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_BF={0x103, 0x2, "8edf95d0bd7df0fd291a57d8ec328262700ee907a4b964b9a4d561408fba4cd38649f7923d76e6ec8722f2d51cb291f5a6a917585ca65998986903bc943406b772f814354ab7616e723778bf48367c203b4959312203793ca87ad3965955f85d07c121d753b2bf6f2152c66d69c820e193ed11b588822be1c777a45a908621a19c9a1027623bc426c3ed57abe41b2a091e8db351bb966899f9107393124a5d17041035bc76a4febbd5805137eff494adf4dcdebe7326d6575a30fb78acc06ec13462e5536b604cf50a999f5256b7bad53913dcd340d0ca26ef419f90015c337f9808fda508c78f0e8dc55dbd1aeaf2d660b65aa363b70a827e95eca89a2717"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0x69, 0xb, "25b65ad92f41e06d18c2c51143c417d65f392307bc0790a80dece518057c2c9bfa52a4128bf490fe0de67d79f8968a2366d60150a50eaa28a0d94d9efa99f57c71648d40452f8a34cff79057433f4b217b52ba4bd2c029abbd8cd218e2292d56a95e3e0d2f"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "c5814e0f74c3"}]}, @NL80211_ATTR_NAN_FUNC={0xbf0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0xa5, 0xb, "446631b40f0c2e3b8bdf0d1ef4060a8a8317349b2d13324b7b5ffe94814e7f4c0d3ca5e598a331967842334a6dac0cf532b7ee7f001216b3839a5cb9182aa14e409af6c59189a3eaeec8900e6e6769f57544666f0a98b3ca16c0442061e65039089268c62f24e27f5666a6bb9d20f75d87d687199f32376dce1d55cdb49eceb2dcec2ed01187874a2b51b21c7ec5f17a7fd70b588d6748a056d42a6afde7965a22"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xb34, 0xd, 0x0, 0x1, [{0xb2d, 0x0, "7019ef1bca17a03bd28897623f426dc496455d4f8278c1f9818afc02f7d67733cd157ec9b4cee8f50035699564b82d0624bec462e34dfae56b16c8fa8bb8ee979e617040c8ee40b5d13977f5aec0bef66e0c8e7b5e409a1199d53eb7a09248124eb5fbc7e602cbc5376f6affb1a3fb769feb26b48d36c24f7ecec9b414590f081560caaa2540b61a551ad5953417b39ca49c0189e0abcb5dbf853d89dbf48db591d762bc02ce59aae4f50437e3d32aaec1be20b04b7e794cded983943caf85bff2e7ac6c882a70c4d42ca90f65f46b185b3ae2505e373e734296ef78509bebb95c38f6ca7042cc21c4d1966cc691e782f825906d5067708d4fe0c8c0d78c9eb467bdbcf17baf04aa5cc64f90af4d73f51489dcb42d0ddbb81132c1bb69fb49fd6da432436788f5ee957cdca11582cb0831dbfbfb43ad657219660c6ae50ac7d72ec5971201dee6ef62dd7b553bd0e779cc6e5900970c2e8cd74c8b31408081e7a22b9961934069c76842337cc5d0a3c95c11b157b7c6ccb6776b64aff53f08710486ae37661971b614ff1dd828d86117235dcbb129b93a9cde8b58740164185662ff19ad36df9018194a45085b49e8b12a371bc8eeb6de65d92080e44402c730b84c4138e5e7ab8d7e2955e393d130d43f3ef5e8126dc314f56ba5ec42b0611824506d993fde37508af61a89d40ab4155bab7990c035d455c4afbf5ffdd5004febee9bd4d3c071094019f68805f8ee8405a1c54e5942de298cdc1db6366aea94ed7211b23c47ad0ef07f00df1137b0e7cc1f801f7137997d75e0a82e54310190faab5ad2079c3accbababde0954f07ae6e89e8d3cfaec2878898b2998750775892bb892318384700146faecb74ae44172dff7a1bd9543aeb5165452b523c0370dfdbdb6626a0bccdece000c96822462c2fc9e8918560ffdccddcfaa99017700079939d939f6a6e0bd555800734bf5b8663f17b77edd0f129ed5701e59aa45b366626fe01cbb97c15d4432032874078671bdf00cf6ea736295c47dd6a3ca2d9463509e91a29c987192eca00d903f64d06b426da4d450a3bf7d5c780f57e61bf45edbd687c5f19e0b84bc9e6a2322783c10e0c9fe6534d0c4fe3c4ad32378bb8e06cb20e4e79ca06b35635eb82aba28246cfcfc26fe97abaefa5dff7507afcf00d20c2e9f0613e585d4e0c4c6fbf3cb4fab58a18ab3a78298aac837a946d33046f6b2a7a6382d4581e4dd82961e6fb468ce16e70b631f4f15832d62b18c6beacb1bb6043e2a4cf43cf672e065bae1d44344cdad61f138c12d533f84be5d32ffa75f1c7dbea706b5061ba4832357978903c6ed294359fcdf646586187c187b5a7feb2fd520eb857975a6c21d3c6b63d6eb847187db6c89870f38038f315728fb27dedc91667e8df5d4a297a2006439ebafca300ba13d3646566a4873f013e1c4db005ced3102dd52354411acfdb3e6613ea7c088656333d7eb9d9cbad2ba4f9583c0d504484cdfeda8b7938a84103685ff71f619a20bb3cdefb1efb222d330cbba7973c69014d21ca45e6bf69cb5b2e114cb89a52aa2635941d0d0e6b4a44bf8ba0e8515fec6bab816aa3a30c7f8c5bb809103178d4a661fde5fb6a8f5fccd19034fef220acfdde03e1d832b53c4f76a678d13c7fb41a3d4cb8af105c5a8cafae3fe0a7adddbb4e59cd8ff0d9e034dadd68fed99bab9932f3d9fa6ce1ba86f1d1177ebc3fad6ee6cd0bb5072cfb6fcccdd5fe2d182c63f242e9bfb24c2603b9ae4d93237fa45784655cd480015b38b8bce246d65b9cc7e7bc2a272423b11db39e339041935a7d426f3bbc248e73c19aa3b0a18046c1e01fff10ac43006a809a9c79107b0a5110af5253fdf9fe356c1d61731b0e1fb32c042837d357a2e4e3ddae9501087bc4ea43560dc61ed42624801370cd718aaf0c89189f0c66b4e72c1b74ff0a2116b1c406eedfe6f4b09d71c88199ac8837b33978fb652f51d5440b453b24bb1e7ff19ead14531be6ed3a024f175f04c0620a26b8cea8c0cf8330384083c63abb2de1f3729b9ac4fc7f1c9640a963caf952e755e4d806510a85461438494892793d1d80f25141b223cec7b5cc7db29167ae28a15f3f00e1e01ff2b91b7d8936410fbcfba6c1aa18c60dfa4448eefa286a4292316a5a99551f66d58a322dada922c1cb0718497772595a9d2aadef0c06247733277488c89c43e61629699855adf48ffe1978796c327f09b6a7ee53e4928e32d3e980a2d38cf10e70c41e9a4f3d32750793894e52b1f35de5829dda5295bc1b4f2850aafa94052013427130193ea182b88530de5abadc41f34e3f06f007907749ef43bfc7ab941f5597ca058feaf10d05b11403749dd792d9ad6b3c5a86563f3b2e7ca9334f3d142047bdf7ae9c6dc2b02cf0fdb4682a9adf5f4a8c3c608d6553178790a8a83047c4dc22e092b429e6bd93d74f7ba95d8a12a1cd425a790b4de47f7dd74cac41839b9946007ba5b214ac07a5401733971c6e695f934fc5b5f629fa475f71ba74209aa9f287cfa1d548fee18a37e98a2f009bb0689a2c8744ce5afefbf143e45413e08ffbd0e704fcd1e51af57f3ecfc93f55e2f63f9682c621f3f05b62391e7fa60d70563ce707123389584edd76548d4c47288000e02599ce3dee50b47576d5a57a9921d16a9329179992988b661f2379e2ade521d29a846363d785418a9dba46c28debb9166c12e288f84296bdc1a9c98b72f83d219e09a43909da4bd6cb40bc76b65c003e63011a297e84896f52236338a15a2dc520261dcf3944900a1a1c11c7fbd349975d763f2a5a0667779d59cdb98d5ebc8d1aecdc1f358e3c7ecc7ea19557dcf1fd78f9fdec9194d1f232997c86eab0a5043c07bc3a65d54d01e6b6c755afec26cd0af396e99c96e2246e3a91b7da535651c8f4bd9ee2b99088f30f7515d3fab02da5c5624e4c4f3da467b21cc9ac0dad614fb224734559f6611eeebbf9705f7f75d891831d99b2057bff2c79ea555e5164514aa464f3b2e83396ba63d779562ea903e765d65538c727cfd072cf27892dd78e0b5c3e0d1a6028aa0539a24b453acfc729837cdc51f1730aa771eeb0e1cf4ca59ee6cb089b1522aed01a8eaa0c477b53131038c3582cfdca28263e1490ae95fb7f514379297f1e757236a6a9d1736c66a2dea2ff189f4ae75c10600701c45127d5c02e6d1acd120bbcaf648392eda67e28f28e333902da555f584e0094377753b7342c683ac7202f47bac443e15e4172ffb7e82b628ab62b8196279f3b29875b7047ae712c3e8b54b6fe6dd9bbe50b7baeb15176323539e67d2216e216542a39f3aae2cc249be9e6ea4eb50fad885213635f2b18867129f83b5d255904af452acebb7e65f924c0f01fc623dddc2df23a9a4885ee2b9b72629655133f1483b6eed24163d2477bab7be2b102caf87031d35ff076348d5930f1ea5b1b998adcbd96e81c74d83f8a10f2b0b4e145ecc8d75ed8283e1ae61169b0fb17430faaed6d152251ff8878cda3d270a3bf5fe5fa42bf1218e3dc05909e41ef55e48bcba40df1ca06b62741a23d052e1e9d4bc11830640a5db87004d78fbcd548215dc1b38baf2262fc697e10ce1a11d50eab00d39a796ee1b3b1f2aa1a4493805b1f71a67f688fcef12dbb6da4d33d4891fae9d286fe9a9aa1b4d8a4dbe4226f8bcb9648fff858cee7dfb2b001b888137af3d313cc2337df3c769d16ce8362703865b4b1c55ad09dc401668758dfc0910c127fd2b939c1b85714471e93fa81d7a176342ef5e6f8382b3f7eb48f82d7ab290df042297c51208eb30febe35e97ac5d0f7859bfe4f8d236d02aee781fade3cb7b1800b44f1906b626deba893c6c9b0a3f96511a21033d1bf00219a72413d291993e54f1547af9a6374f9f9d74453fcb488dbd894d1c5126fe3d2d3aa47a91a02ac69b6b377447e20718b4ace4771dcf7f1a0dbdcf4ad666538526855fd664f22ea53d079fc05a2654957bdbf7d68b4ce87af272704c9b4804e75d3691876eca510e50ff82850029fbb4f2f876"}]}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x844}, 0x24044804) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xb3, 0x68, 0x9e, 0x40, 0x675, 0x1688, 0xd1c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0xf1, 0x0, 0x1, 0x67, 0x74, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}]}}]}}]}}, 0x0) 408.43141ms ago: executing program 4 (id=4989): socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x5, 0x800, 0x7f, 0x6, 0x3]}, &(0x7f00000000c0)=0x54) 408.102036ms ago: executing program 4 (id=4990): set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') pread64(r2, &(0x7f0000000140)=""/15, 0x63, 0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) syz_usb_connect(0x0, 0x4f, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xa3, 0xfa, 0x14, 0x40, 0x12d1, 0x1ac6, 0x5cfb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7f, 0x0, 0x3, 0xff, 0x3, 0x14, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x618, 0xd8, 0xff, 0x4, [@generic={0x9, 0x4, "4299d83e091515"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x83, 0x62, 0x82}}, {{0x9, 0x5, 0x12, 0x0, 0x20, 0x0, 0x0, 0xc, [@generic={0x7, 0xc3bb5a8edee221d1, "e6ea3588e4"}]}}]}}]}}]}}, 0x0) 319.424245ms ago: executing program 4 (id=4991): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "c428e4c47e162833da1d365a97f8ce8695fb3b6cd015a06ae700180a9835363f", "d1a316d0a02b136a7927e372ee720b73a53c5fad9264fb8966552367948139a6", "865d44e99aa34b3fa54d6e47670cccafb961636459133ab5e30fbcc30b838413", "680529e969986688e7b115c8e7d52f1e0697f976c1ac03a0dc661bf00863d1bd", "5fb854e085db122661d365714ddb293aa630fb100813bfd8602af9abb5d686d9", "ef776367d1348a5de963c8ff", 0x56, 0x1, 0x800, 0x5, 0x5}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="28e304488b1ff1db187270c4af76008f0ef0096e1040000000001823292e00"], 0x14}, 0x1, 0x0, 0x0, 0x20020000}, 0x40880) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x94, 0x7, 0xa8, 0x20, 0x5ac, 0x262, 0x6ac3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x7, 0x0, 0x5, [{{0x9, 0x4, 0x65, 0xfa, 0x0, 0x3, 0xe3, 0x2, 0xf7}}]}}]}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x400c001) syz_usb_connect(0x1, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010003b1fe9208151403005d65010203010902120001000000000904000000d3a53e004cc88f6a50f8cdf0e77fa000223e8481473cab8f6a89956d7eeb32cc8f240dfc43c05fa38c7138d3b63047720a2e08aad26e23f39eda72e8681a51272b30bcb6f3ae6f10c7d13692c8f3d8b05fc8f481bcf0edc5f42a4f1f9a75473a74e3d7ab5dc19ff6971b8a22242061a59c7c91012a799610bc535a907c7321f9a58e6b9063c70b80bcf6c8d81b7f8ea27da847223567d1566f0c32256013200203fbde6b219de033de390b7790300000000000000000"], &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f0f00010c"], 0x1, [{0x0, 0x0}]}) 24.016929ms ago: executing program 5 (id=4992): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="021704000000abe763"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x6, 0x7f, {0x7f, 0xa, "33bb6923e15e041e6ba69186133678713d61487a2fe24b72a7cef2eeecb526495f86bf8114b7d79a30f58bb7caebe43497110705e3521fad3dc6face31675f7c96e8d62ead2b04735e5cb2def0bd76f7d5c2c178cb38f0f9f8ce22d4d45a7022b286a94a0748c2c8dc4ed453926f4e1c430e2133cc2c2486ef4597db49"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0xd, 0xe2, "3b3f65737dea10bd9554fd45bee33091929d9cfd6b4355646f611a78a370f23622938c717da69420bb2771409617dcde26d918665b307d88b3bbd91e129fc9db1b2da651d94bddea8e827e1b056f46c612c5aab5a6c9128127756042f7f3dbebd1a0fa1d1f1b5485c0ecd52f454d628959098ad19d8bc820f60a0fe37fb3609e0c1b39311fdbe19253931ed68098c7131d2dc6bc6fcec813857c2ca6a2edb493f2fb1aae91c42669a79748c40a961692dd29e0b86648e11bbf78aabd61fb222eb975d1863a2beef4746569ad8ef0d5ff441ed5240153d3a25d752fa3993e1ba967fa"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x1, 0x2, 0x8001, 0x0, 0x40, 0x2, 0x3, 0x10b, 0xff, 0x1, 0x406, 0x1}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0xce9d}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x69, 0x17, 0x9d, 0x20, 0x1410, 0xb001, 0x81db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x10, 0x0, 0x9, [{{0x9, 0x4, 0xb8, 0xb7, 0x0, 0x2, 0x6, 0x0, 0xa}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000a40)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x102, @lang_id={0x0, 0x3, 0x42c}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c0001800600060086dd000064380280"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="0013fec9ec074c6612b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=4993): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x100) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x100) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) (async) kernel console output (not intermixed with test programs): USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 805.639927][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.650051][ T5991] usb 6-1: config 0 descriptor?? [ 805.735576][ T5946] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 805.866481][ T5946] usb 5-1: device descriptor read/64, error -71 [ 805.949280][ T5991] usb 6-1: USB disconnect, device number 78 [ 805.976083][ T5946] usb usb5-port1: attempt power cycle [ 806.239244][T20790] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4648'. [ 806.315596][ T5946] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 806.336267][ T5946] usb 5-1: device descriptor read/8, error -71 [ 806.575656][ T5946] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 806.595697][ T43] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 806.604104][ T5946] usb 5-1: device descriptor read/8, error -71 [ 806.715755][ T5946] usb usb5-port1: unable to enumerate USB device [ 806.735568][ T43] usb 7-1: device descriptor read/64, error -71 [ 806.985529][ T43] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 807.115584][ T43] usb 7-1: device descriptor read/64, error -71 [ 807.226970][ T43] usb usb7-port1: attempt power cycle [ 807.255618][ T5991] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 807.398015][T20814] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4657'. [ 807.420687][ T5991] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 807.432823][ T5991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.441851][ T5991] usb 6-1: Product: syz [ 807.448591][ T5991] usb 6-1: Manufacturer: syz [ 807.453213][ T5991] usb 6-1: SerialNumber: syz [ 807.565598][ T43] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 807.586284][ T43] usb 7-1: device descriptor read/8, error -71 [ 807.699774][ T5991] rtl8150 6-1:1.0: couldn't reset the device [ 807.706742][ T5991] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 807.721393][ T5991] usb 6-1: USB disconnect, device number 79 [ 807.825527][ T43] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 807.846125][ T43] usb 7-1: device descriptor read/8, error -71 [ 807.955922][ T43] usb usb7-port1: unable to enumerate USB device [ 808.505819][ T5991] usb 5-1: new low-speed USB device number 125 using dummy_hcd [ 808.537989][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 808.549192][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 808.561243][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 808.569405][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 808.577141][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 808.605625][ T10] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 808.697538][ T5991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.710211][ T5991] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 808.722062][ T5991] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 808.736482][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.742825][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.757724][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.776082][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.792907][ T5991] usb 5-1: config 0 descriptor?? [ 808.799443][ T10] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 808.815275][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 808.823498][T20828] chnl_net:caif_netlink_parms(): no params data found [ 808.855626][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.864456][ T10] usb 6-1: Product: syz [ 808.869082][ T10] usb 6-1: Manufacturer: syz [ 808.873698][ T10] usb 6-1: SerialNumber: syz [ 808.887194][ T10] cdc_mbim 6-1:1.0: skipping garbage [ 808.899899][T13723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.997172][T13723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.036476][T20828] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.043708][T20828] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.051325][T20828] bridge_slave_0: entered allmulticast mode [ 809.064027][T20828] bridge_slave_0: entered promiscuous mode [ 809.083692][T20827] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 809.095153][T13723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.109382][T20828] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.117673][T20828] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.124897][T20828] bridge_slave_1: entered allmulticast mode [ 809.132609][T20828] bridge_slave_1: entered promiscuous mode [ 809.182365][T13723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.247684][T20828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.263118][T20828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.301555][T20837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.310554][ T9] usb 5-1: USB disconnect, device number 125 [ 809.325045][T20837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.334406][T20837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.345410][T20837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.349850][T20828] team0: Port device team_slave_0 added [ 809.363925][T20837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.382360][T20837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.392968][T20837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.404420][T20837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.414525][T20837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.447680][T20837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.456218][T20828] team0: Port device team_slave_1 added [ 809.515247][T20828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.521121][T20838] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 809.523501][T20828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.557326][ T10] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 809.564181][ T10] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 809.566218][T20828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.574879][ T10] wwan wwan0: port wwan0mbim0 attached [ 809.628056][ T10] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, ca:9d:fa:fc:63:34 [ 809.635374][T20828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.648122][T20828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.675044][T20828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.709820][T13723] bridge_slave_1: left allmulticast mode [ 809.715823][T13723] bridge_slave_1: left promiscuous mode [ 809.721689][T13723] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.732882][T13723] bridge_slave_0: left allmulticast mode [ 809.739084][T13723] bridge_slave_0: left promiscuous mode [ 809.745000][T13723] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.817450][ T5898] usb 7-1: new low-speed USB device number 76 using dummy_hcd [ 809.958424][ T5898] usb 7-1: device descriptor read/64, error -71 [ 810.155550][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 810.174818][T13723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.187745][T13723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.195603][ T5898] usb 7-1: new low-speed USB device number 77 using dummy_hcd [ 810.206909][T13723] bond0 (unregistering): (slave team0): Releasing backup interface [ 810.216878][T13723] bond0 (unregistering): Released all slaves [ 810.274674][T20828] hsr_slave_0: entered promiscuous mode [ 810.281859][T20828] hsr_slave_1: entered promiscuous mode [ 810.288837][T20828] debugfs: 'hsr0' already exists in 'hsr' [ 810.300591][T20828] Cannot create hsr debugfs directory [ 810.316916][T13723] IPVS: stopping master sync thread 18440 ... [ 810.327599][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 810.335779][ T5898] usb 7-1: device descriptor read/64, error -71 [ 810.338490][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.373532][ T10] usb 5-1: config 0 descriptor?? [ 810.399201][ T10] cp210x 5-1:0.0: cp210x converter detected [ 810.459336][ T5898] usb usb7-port1: attempt power cycle [ 810.652799][T15386] Bluetooth: hci3: command tx timeout [ 810.732049][T13723] hsr_slave_0: left promiscuous mode [ 810.738736][T13723] hsr_slave_1: left promiscuous mode [ 810.745916][T13723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.753419][T13723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.772542][T13723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.780950][T13723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.806164][ T5898] usb 7-1: new low-speed USB device number 78 using dummy_hcd [ 810.826255][T13723] veth1_macvtap: left promiscuous mode [ 810.832021][T13723] veth0_macvtap: left promiscuous mode [ 810.837889][T13723] veth1_vlan: left promiscuous mode [ 810.843252][T13723] veth0_vlan: left promiscuous mode [ 810.849367][ T5898] usb 7-1: device descriptor read/8, error -71 [ 810.882207][T20859] xt_limit: Overflow, try lower: 604147548/4200216962 [ 810.901030][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 810.986514][T13723] pimreg (unregistering): left allmulticast mode [ 811.096344][ T5898] usb 7-1: new low-speed USB device number 79 using dummy_hcd [ 811.105729][T13723] team0 (unregistering): Port device macvlan1 removed [ 811.118204][ T5898] usb 7-1: device descriptor read/8, error -71 [ 811.129027][ T10] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 811.139695][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 811.153493][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 811.226340][ T5898] usb usb7-port1: unable to enumerate USB device [ 811.347375][ T5898] usb 6-1: USB disconnect, device number 80 [ 811.354556][ T5898] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 811.516555][T13723] team0 (unregistering): Port device team_slave_1 removed [ 811.565353][T13723] team0 (unregistering): Port device team_slave_0 removed [ 812.170927][ T5898] wwan wwan0: port wwan0mbim0 disconnected [ 812.444311][T13723] IPVS: stop unused estimator thread 0... [ 812.472980][T20828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 812.499651][ T5898] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 812.515360][T20828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 812.549219][T20828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 812.577565][T20828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 812.582624][T20871] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 812.591135][T20871] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 812.604202][T20871] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4668'. [ 812.710929][ T5898] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 812.726176][T15386] Bluetooth: hci3: command tx timeout [ 812.736567][ T5898] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 812.755616][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.775542][ T5898] usb 6-1: Product: syz [ 812.779744][ T5898] usb 6-1: Manufacturer: syz [ 812.784347][ T5898] usb 6-1: SerialNumber: syz [ 812.802448][ T5898] usb 6-1: config 0 descriptor?? [ 812.830419][T20884] netlink: zone id is out of range [ 812.839150][T20884] netlink: zone id is out of range [ 812.844370][T20884] netlink: zone id is out of range [ 812.852154][T20884] netlink: zone id is out of range [ 812.854533][T20828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.857403][T20884] netlink: zone id is out of range [ 812.857416][T20884] netlink: zone id is out of range [ 812.857423][T20884] netlink: zone id is out of range [ 812.857432][T20884] netlink: zone id is out of range [ 812.857440][T20884] netlink: zone id is out of range [ 812.857448][T20884] netlink: zone id is out of range [ 812.992705][T20828] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.000118][ T5898] usb 5-1: USB disconnect, device number 126 [ 813.017367][T20889] netlink: 696 bytes leftover after parsing attributes in process `syz.6.4671'. [ 813.020779][T13723] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.033642][T13723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.041653][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 813.063218][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.070474][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.079018][ T5898] cp210x 5-1:0.0: device disconnected [ 813.278740][ T10] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 813.381319][T20828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.446423][ T5898] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 813.446788][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 813.464859][T20828] veth0_vlan: entered promiscuous mode [ 813.474029][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.489192][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 813.505243][T20828] veth1_vlan: entered promiscuous mode [ 813.510918][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.535177][ T10] usb 7-1: config 0 descriptor?? [ 813.581221][T20828] veth0_macvtap: entered promiscuous mode [ 813.596805][T20828] veth1_macvtap: entered promiscuous mode [ 813.609406][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.623621][ T5898] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.624619][T20828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.643505][ T5898] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 813.654163][T20828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.662175][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.681288][T13727] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.683741][ T5898] usb 5-1: config 0 descriptor?? [ 813.693761][T13727] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.719339][T13727] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.753145][T13727] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.818346][T13725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.829559][T13725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.867100][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.877631][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.981749][ T10] mcp2221 0003:04D8:00DD.003D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 814.064738][ T981] usb 5-1: USB disconnect, device number 127 [ 814.403820][ T981] usb 6-1: USB disconnect, device number 81 [ 814.445069][ T5898] usb 7-1: USB disconnect, device number 80 [ 814.805699][T15386] Bluetooth: hci3: command tx timeout [ 814.845729][ T981] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 814.865776][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 814.978744][ T981] usb 6-1: device descriptor read/64, error -71 [ 815.028548][ T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 815.037093][ T10] usb 5-1: config 0 has no interface number 0 [ 815.043281][ T10] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 815.061557][ T10] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 815.073298][ T10] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 815.084757][ T10] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 815.100550][ T10] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 815.110534][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.119741][ T10] usb 5-1: Product: syz [ 815.123897][ T10] usb 5-1: Manufacturer: syz [ 815.129153][ T10] usb 5-1: SerialNumber: syz [ 815.137651][ T10] usb 5-1: config 0 descriptor?? [ 815.143371][T20928] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 815.235663][ T981] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 815.256265][ T5898] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 815.356799][T20928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.367384][ T981] usb 6-1: device descriptor read/64, error -71 [ 815.367719][T20928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.405642][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 815.413662][ T5898] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 815.422266][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.433188][ T5898] usb 4-1: config 0 has no interface number 0 [ 815.440715][ T5898] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 815.452215][ T5898] usb 4-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 815.464983][ T5898] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 815.475700][ T5898] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 815.486023][ T5898] usb 4-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.486148][ T981] usb usb6-port1: attempt power cycle [ 815.510159][ T5898] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 815.520017][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.528277][ T5898] usb 4-1: Product: syz [ 815.532460][ T5898] usb 4-1: Manufacturer: syz [ 815.537259][ T5898] usb 4-1: SerialNumber: syz [ 815.544149][ T5898] usb 4-1: config 0 descriptor?? [ 815.550040][T20937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 815.585315][T20928] netlink: 'syz.4.4676': attribute type 39 has an invalid length. [ 815.762933][T20937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.773565][T20937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.784235][T20937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.793117][T20937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.814297][ T5898] usb 4-1: probing VID:PID(0424:012C) [ 815.824553][ T5898] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 815.831727][ T5898] usb 4-1: vub300 testing BULK IN EndPoint(1) 88 [ 815.839133][ T5898] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 815.848998][ T5898] vub300 4-1:0.133: probe with driver vub300 failed with error -22 [ 815.856084][ T981] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 815.862687][ T5898] usb 4-1: USB disconnect, device number 45 [ 815.906133][ T981] usb 6-1: device descriptor read/8, error -71 [ 816.145608][ T981] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 816.166221][ T981] usb 6-1: device descriptor read/8, error -71 [ 816.185529][ T5946] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 816.275879][ T981] usb usb6-port1: unable to enumerate USB device [ 816.343021][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.354230][ T5946] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 816.363744][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.374841][ T5946] usb 7-1: config 0 descriptor?? [ 816.775527][T14361] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 816.815485][ T5946] lenovo 0003:17EF:6047.003E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 816.885924][T15386] Bluetooth: hci3: command tx timeout [ 816.937207][T14361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.947987][T14361] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 816.957178][T14361] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 816.966388][T14361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.977423][T14361] usb 4-1: config 0 descriptor?? [ 817.279548][T14361] usb 4-1: USB disconnect, device number 46 [ 817.688310][ T5946] lenovo 0003:17EF:6047.003E: Sensitivity setting failed: -71 [ 817.713831][ T5946] usb 7-1: USB disconnect, device number 81 [ 818.046428][ T43] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 818.176143][T14361] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 818.197530][ T43] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 818.206047][ T43] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 818.214927][ T43] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 818.227233][ T43] usb 6-1: config 220 has no interface number 2 [ 818.233561][ T43] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 818.249028][ T43] usb 6-1: config 220 interface 0 has no altsetting 0 [ 818.256410][ T43] usb 6-1: config 220 interface 76 has no altsetting 0 [ 818.263288][ T43] usb 6-1: config 220 interface 1 has no altsetting 0 [ 818.275232][ T43] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 818.287057][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.295078][ T43] usb 6-1: Product: syz [ 818.299549][ T43] usb 6-1: Manufacturer: syz [ 818.304241][ T43] usb 6-1: SerialNumber: syz [ 818.315548][T14361] usb 4-1: device descriptor read/64, error -71 [ 818.556902][ T43] usb 6-1: selecting invalid altsetting 0 [ 818.564628][ T43] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 818.572236][ T43] uvcvideo 6-1:220.0: No valid video chain found. [ 818.593406][T14361] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 818.607757][ T43] usb 6-1: selecting invalid altsetting 0 [ 818.613530][ T43] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 818.625092][ T43] usb 6-1: USB disconnect, device number 86 [ 818.725830][T14361] usb 4-1: device descriptor read/64, error -71 [ 818.835892][T14361] usb usb4-port1: attempt power cycle [ 818.905617][ T981] usb 7-1: new low-speed USB device number 82 using dummy_hcd [ 819.067048][ T981] usb 7-1: no configurations [ 819.071733][ T981] usb 7-1: can't read configurations, error -22 [ 819.176504][T14361] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 819.206974][T14361] usb 4-1: device descriptor read/8, error -71 [ 819.225567][ T981] usb 7-1: new low-speed USB device number 83 using dummy_hcd [ 819.397372][ T981] usb 7-1: no configurations [ 819.402327][ T981] usb 7-1: can't read configurations, error -22 [ 819.410811][ T981] usb usb7-port1: attempt power cycle [ 819.458103][T14361] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 819.496445][T14361] usb 4-1: device descriptor read/8, error -71 [ 819.606446][T14361] usb usb4-port1: unable to enumerate USB device [ 819.765809][ T981] usb 7-1: new low-speed USB device number 84 using dummy_hcd [ 819.787783][ T981] usb 7-1: no configurations [ 819.792437][ T981] usb 7-1: can't read configurations, error -22 [ 819.925699][ T981] usb 7-1: new low-speed USB device number 85 using dummy_hcd [ 819.947715][ T981] usb 7-1: no configurations [ 819.952371][ T981] usb 7-1: can't read configurations, error -22 [ 819.959319][ T981] usb usb7-port1: unable to enumerate USB device [ 820.895621][ T981] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 821.049417][ T981] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 821.064189][ T981] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 821.073851][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.082432][ T981] usb 6-1: Product: syz [ 821.087044][ T981] usb 6-1: Manufacturer: syz [ 821.091724][ T981] usb 6-1: SerialNumber: syz [ 821.103974][ T981] usb 6-1: config 0 descriptor?? [ 821.105381][T21009] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4702'. [ 821.355556][T14361] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 821.505536][T14361] usb 4-1: Using ep0 maxpacket: 16 [ 821.512883][T14361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.524108][T14361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.534425][T14361] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 821.547443][T14361] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 821.557923][T14361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.572671][T14361] usb 4-1: config 0 descriptor?? [ 821.736344][T21012] netlink: 'syz.6.4703': attribute type 1 has an invalid length. [ 821.744161][T21012] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4703'. [ 821.985517][T14361] hid_parser_main: 50 callbacks suppressed [ 821.985544][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 821.998696][T14361] microsoft 0003:045E:07DA.003F: ignoring exceeding usage max [ 822.009115][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 822.018533][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 822.025848][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 822.033077][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 822.040341][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 822.047601][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 822.054828][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 822.062182][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 822.070310][T14361] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 822.077650][T14361] microsoft 0003:045E:07DA.003F: unsupported Resolution Multiplier 0 [ 822.105838][ T981] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 822.188089][T14361] microsoft 0003:045E:07DA.003F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 822.199664][T14361] microsoft 0003:045E:07DA.003F: no inputs found [ 822.206278][T14361] microsoft 0003:045E:07DA.003F: could not initialize ff, continuing anyway [ 822.222512][T14361] usb 4-1: USB disconnect, device number 51 [ 822.246998][ T981] usb 7-1: device descriptor read/64, error -71 [ 822.270016][T21018] fido_id[21018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 822.485899][ T981] usb 7-1: new full-speed USB device number 87 using dummy_hcd [ 822.615646][ T981] usb 7-1: device descriptor read/64, error -71 [ 822.730354][ T981] usb usb7-port1: attempt power cycle [ 823.035580][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 823.075644][ T981] usb 7-1: new full-speed USB device number 88 using dummy_hcd [ 823.096397][ T981] usb 7-1: device descriptor read/8, error -71 [ 823.185546][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 823.192415][ T9] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 823.201804][ T9] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 823.210524][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 823.220212][ T9] usb 4-1: config 0 has no interface number 0 [ 823.227546][ T9] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 823.238766][ T9] usb 4-1: config 0 interface 104 has no altsetting 1 [ 823.248507][ T9] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 823.257712][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.265906][ T9] usb 4-1: Product: syz [ 823.270156][ T9] usb 4-1: Manufacturer: syz [ 823.274782][ T9] usb 4-1: SerialNumber: syz [ 823.282254][ T9] usb 4-1: config 0 descriptor?? [ 823.345608][ T981] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 823.366174][ T981] usb 7-1: device descriptor read/8, error -71 [ 823.475860][ T981] usb usb7-port1: unable to enumerate USB device [ 823.522791][ T9] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 823.533990][ T9] asix 4-1:0.104: probe with driver asix failed with error -71 [ 823.549531][ T9] usb 4-1: USB disconnect, device number 52 [ 823.673520][ T5898] usb 6-1: USB disconnect, device number 87 [ 824.025533][ T5898] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 824.200854][ T5898] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 824.210559][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.221578][ T5898] usb 6-1: config 0 descriptor?? [ 824.234377][ T5898] cp210x 6-1:0.0: cp210x converter detected [ 824.415613][ T5946] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 824.432231][ T5898] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 824.439964][ T5898] cp210x 6-1:0.0: querying part number failed [ 824.451377][ T5898] usb 6-1: cp210x converter now attached to ttyUSB0 [ 824.577048][ T5946] usb 4-1: no configurations [ 824.581681][ T5946] usb 4-1: can't read configurations, error -22 [ 824.639562][ T981] usb 6-1: USB disconnect, device number 88 [ 824.653596][ T981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 824.662807][ T981] cp210x 6-1:0.0: device disconnected [ 824.715596][ T5946] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 824.866261][ T5946] usb 4-1: no configurations [ 824.870919][ T5946] usb 4-1: can't read configurations, error -22 [ 824.878679][ T5946] usb usb4-port1: attempt power cycle [ 825.225689][ T5946] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 825.257915][ T5946] usb 4-1: no configurations [ 825.262551][ T5946] usb 4-1: can't read configurations, error -22 [ 825.295841][ T5898] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 825.395605][ T5946] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 825.417199][ T5946] usb 4-1: no configurations [ 825.421840][ T5946] usb 4-1: can't read configurations, error -22 [ 825.428291][ T5898] usb 7-1: device descriptor read/64, error -71 [ 825.434889][ T5946] usb usb4-port1: unable to enumerate USB device [ 825.475607][T14361] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 825.586232][T21046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4715'. [ 825.627316][T14361] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.637567][T14361] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 825.646740][T14361] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 825.657046][T14361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.665546][ T5898] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 825.676037][T14361] usb 6-1: config 0 descriptor?? [ 825.805578][ T5898] usb 7-1: device descriptor read/64, error -71 [ 825.915958][ T5898] usb usb7-port1: attempt power cycle [ 825.991754][T14361] usb 6-1: USB disconnect, device number 89 [ 826.255620][ T5898] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 826.276219][ T5898] usb 7-1: device descriptor read/8, error -71 [ 826.515597][ T5898] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 826.536172][ T5898] usb 7-1: device descriptor read/8, error -71 [ 826.649337][ T5898] usb usb7-port1: unable to enumerate USB device [ 827.005553][ T9] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 827.158407][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 827.167686][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 827.176146][ T9] usb 6-1: SerialNumber: syz [ 827.182956][ T9] usb 6-1: config 0 descriptor?? [ 827.625550][ T5898] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 827.692422][ T9] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0f [ 827.701018][ T9] hackrf 6-1:0.0: Could not detect board [ 827.707613][ T9] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 827.719785][ T9] usb 6-1: USB disconnect, device number 90 [ 827.780173][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 827.791388][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.801849][ T5898] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 827.810957][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.821649][ T5898] usb 4-1: config 0 descriptor?? [ 827.983721][T21069] netlink: 'syz.6.4724': attribute type 33 has an invalid length. [ 827.992242][T21069] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4724'. [ 828.238522][ T5898] cherry 0003:046A:0023.0040: item fetching failed at offset 5/7 [ 828.252395][ T5898] cherry 0003:046A:0023.0040: probe with driver cherry failed with error -22 [ 828.438932][T21067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.447818][T21067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.458125][ T5898] usb 4-1: USB disconnect, device number 57 [ 828.545641][ T9] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 828.695853][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 828.703502][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 828.714895][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 828.726059][ T9] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 828.739455][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 828.746219][ T9] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 828.755294][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.766197][ T9] usb 6-1: config 0 descriptor?? [ 828.905664][ T5991] usb 7-1: new low-speed USB device number 94 using dummy_hcd [ 828.949193][T21086] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4729'. [ 828.993316][T21076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.018413][ T9] hid_parser_main: 1 callbacks suppressed [ 829.018435][ T9] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 829.038868][T21076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.047511][ T9] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 829.056387][ T9] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 829.064876][ T9] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 829.075831][ T5991] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.087298][ T9] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 829.096468][ T5991] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 829.109667][ T5991] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 829.119810][ T9] hid-thrustmaster 0003:044F:B65D.0041: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 829.138426][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.158173][ T9] hid-thrustmaster 0003:044F:B65D.0041: Unexpected non-int endpoint [ 829.170641][T21095] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 829.188787][ T5991] usb 7-1: config 0 descriptor?? [ 829.201725][ C0] hid-thrustmaster 0003:044F:B65D.0041: URB to get model id failed with error -71 [ 829.212466][ T9] usb 6-1: USB disconnect, device number 91 [ 829.233053][T21095] EXT4-fs (loop3): unable to read superblock [ 829.324005][T21096] fido_id[21096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 829.463545][T21105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4735'. [ 829.541668][ T5946] usb 7-1: USB disconnect, device number 94 [ 829.586249][ T5898] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 829.745545][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 829.769029][ T5898] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 829.779250][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.787504][ T5898] usb 4-1: Product: syz [ 829.791802][ T5898] usb 4-1: Manufacturer: syz [ 829.797385][ T5898] usb 4-1: SerialNumber: syz [ 829.836636][ T5898] usb 4-1: config 0 descriptor?? [ 829.940503][T21117] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 829.947135][T21117] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 829.956025][T21117] vhci_hcd vhci_hcd.0: Device attached [ 829.962909][T21119] vhci_hcd: cannot find the pending unlink 0 [ 829.970777][T21119] vhci_hcd: connection closed [ 829.972438][ T12] vhci_hcd: stop threads [ 829.981539][ T12] vhci_hcd: release socket [ 829.986129][ T12] vhci_hcd: disconnect device [ 830.199647][ T5898] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 830.212566][ T5898] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 830.231893][ T5898] usb 4-1: USB disconnect, device number 58 [ 830.755531][T14361] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 830.895568][T14361] usb 6-1: device descriptor read/64, error -71 [ 831.132965][T21140] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4744'. [ 831.135893][T14361] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 831.287255][T14361] usb 6-1: device descriptor read/64, error -71 [ 831.406038][T14361] usb usb6-port1: attempt power cycle [ 831.425729][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 831.505574][ T5898] usb 7-1: new low-speed USB device number 95 using dummy_hcd [ 831.555548][ T9] usb 4-1: device descriptor read/64, error -71 [ 831.667210][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.677394][ T5898] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 831.686717][ T5898] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 831.696741][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.707264][ T5898] usb 7-1: config 0 descriptor?? [ 831.755617][T14361] usb 6-1: new low-speed USB device number 94 using dummy_hcd [ 831.776263][T14361] usb 6-1: device descriptor read/8, error -71 [ 831.795862][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 831.925702][ T9] usb 4-1: device descriptor read/64, error -71 [ 832.007443][ T981] usb 7-1: USB disconnect, device number 95 [ 832.036239][ T9] usb usb4-port1: attempt power cycle [ 832.037178][T14361] usb 6-1: new low-speed USB device number 95 using dummy_hcd [ 832.066148][T14361] usb 6-1: device descriptor read/8, error -71 [ 832.177596][T14361] usb usb6-port1: unable to enumerate USB device [ 832.385587][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 832.406549][ T9] usb 4-1: device descriptor read/8, error -71 [ 832.627381][T21155] ubifs: Unknown parameter 'IE6A$G>V;M(2H泧0tXꁑ>[:-՗Sz}߃ap'lyXvM' [ 832.645719][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 832.676515][ T9] usb 4-1: device descriptor read/8, error -71 [ 832.785903][ T9] usb usb4-port1: unable to enumerate USB device [ 833.199809][T21157] syzkaller1: entered promiscuous mode [ 833.205336][T21157] syzkaller1: entered allmulticast mode [ 833.220364][T21159] hugetlbfs: Unknown parameter '/dev/net/tun' [ 833.575604][ T5898] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 833.735539][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 833.744811][ T5898] usb 7-1: config 143 has no interfaces? [ 833.760571][ T5898] usb 7-1: New USB device found, idVendor=0bda, idProduct=8178, bcdDevice=be.48 [ 833.770252][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.778888][ T5898] usb 7-1: Product: syz [ 833.783213][ T5898] usb 7-1: Manufacturer: syz [ 833.788268][ T5898] usb 7-1: SerialNumber: syz [ 834.585573][ T5898] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 834.737269][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.747626][ T5898] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 834.756988][ T5898] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 834.766723][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.777085][ T5898] usb 4-1: config 0 descriptor?? [ 834.786747][T14361] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 834.949757][T14361] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 834.958883][T14361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.967154][T14361] usb 6-1: Product: syz [ 834.971918][T14361] usb 6-1: Manufacturer: syz [ 834.976728][T14361] usb 6-1: SerialNumber: syz [ 834.984946][T14361] usb 6-1: config 0 descriptor?? [ 835.096091][ T5946] usb 4-1: USB disconnect, device number 63 [ 835.201180][T14361] airspy 6-1:0.0: usb_control_msg() failed -32 request 09 [ 835.208811][T14361] airspy 6-1:0.0: Could not detect board [ 835.214551][T14361] airspy 6-1:0.0: probe with driver airspy failed with error -32 [ 835.607684][ T10] iguanair 5-1:0.255: failed to get version [ 835.623868][ T10] iguanair 5-1:0.255: probe with driver iguanair failed with error -110 [ 835.653437][ T10] usb 5-1: USB disconnect, device number 2 [ 835.693385][T21182] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4759'. [ 836.165661][T14361] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 836.215561][ T5946] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 836.335567][T14361] usb 4-1: Using ep0 maxpacket: 16 [ 836.345122][ T9] usb 7-1: USB disconnect, device number 96 [ 836.345636][T14361] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 836.374996][T14361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.385506][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 836.390841][T14361] usb 4-1: Product: syz [ 836.396853][T14361] usb 4-1: Manufacturer: syz [ 836.401686][T14361] usb 4-1: SerialNumber: syz [ 836.407487][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.421354][ T5946] usb 5-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 836.433036][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.441178][ T5946] usb 5-1: Product: syz [ 836.445666][ T5946] usb 5-1: Manufacturer: syz [ 836.450346][ T5946] usb 5-1: SerialNumber: syz [ 836.456928][T14361] r8152-cfgselector 4-1: Unknown version 0x0000 [ 836.463199][T14361] r8152-cfgselector 4-1: config 0 descriptor?? [ 836.470934][ T5946] usb 5-1: config 0 descriptor?? [ 836.479006][ T5946] hub 5-1:0.0: bad descriptor, ignoring hub [ 836.484929][ T5946] hub 5-1:0.0: probe with driver hub failed with error -5 [ 836.495659][ T5946] option 5-1:0.0: GSM modem (1-port) converter detected [ 836.705620][ T9] usb 7-1: new low-speed USB device number 97 using dummy_hcd [ 836.795684][ T10] usb 5-1: USB disconnect, device number 3 [ 836.803246][ T10] option 5-1:0.0: device disconnected [ 836.858191][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.868396][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 836.877411][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 836.887842][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.898652][ T9] usb 7-1: config 0 descriptor?? [ 836.975995][ T5946] r8152-cfgselector 4-1: USB disconnect, device number 64 [ 837.179417][ T5946] usb 7-1: USB disconnect, device number 97 [ 837.574545][T14361] usb 6-1: USB disconnect, device number 96 [ 837.745668][ T5946] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 837.895583][ T5946] usb 4-1: device descriptor read/64, error -71 [ 837.955840][ T10] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 838.105552][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 838.117032][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.128119][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.135604][ T5946] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 838.138288][ T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 838.157127][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.168525][ T10] usb 7-1: config 0 descriptor?? [ 838.205832][T14361] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 838.255548][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 838.261364][ T43] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 838.270859][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 838.278999][ T5946] usb 4-1: device descriptor read/64, error -71 [ 838.285630][ T43] usb 5-1: config 0 has no interface number 0 [ 838.293264][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 838.302028][ T43] usb 5-1: config 0 has no interface number 0 [ 838.309456][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 838.317530][ T43] usb 5-1: config 0 has no interface number 0 [ 838.324527][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 838.333050][ T43] usb 5-1: config 0 has no interface number 0 [ 838.340256][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 838.349194][ T43] usb 5-1: config 0 has no interface number 0 [ 838.356442][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 838.364446][ T43] usb 5-1: config 0 has no interface number 0 [ 838.372305][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 838.380606][ T43] usb 5-1: config 0 has no interface number 0 [ 838.387546][ T5946] usb usb4-port1: attempt power cycle [ 838.394247][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 838.403442][T14361] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 838.412736][ T43] usb 5-1: config 0 has no interface number 0 [ 838.418936][T14361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.427236][T14361] usb 6-1: Product: syz [ 838.431601][T14361] usb 6-1: Manufacturer: syz [ 838.436693][T14361] usb 6-1: SerialNumber: syz [ 838.442318][ T43] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 838.453278][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.462254][T14361] usb 6-1: config 0 descriptor?? [ 838.467475][ T43] usb 5-1: Product: syz [ 838.471690][ T43] usb 5-1: Manufacturer: syz [ 838.479544][ T43] usb 5-1: SerialNumber: syz [ 838.487018][ T43] usb 5-1: config 0 descriptor?? [ 838.497643][ T43] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 838.586533][ T10] cm6533_jd 0003:0D8C:0022.0042: unknown main item tag 0x0 [ 838.593991][ T10] cm6533_jd 0003:0D8C:0022.0042: unknown main item tag 0x0 [ 838.606407][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0042/input/input80 [ 838.640648][ T10] cm6533_jd 0003:0D8C:0022.0042: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 838.681728][T14361] airspy 6-1:0.0: usb_control_msg() failed -32 request 09 [ 838.697670][T14361] airspy 6-1:0.0: Could not detect board [ 838.703613][T14361] airspy 6-1:0.0: probe with driver airspy failed with error -32 [ 838.720599][T21227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.740761][T21227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.748693][ T5946] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 838.772258][ T43] etas_es58x 5-1:0.2: could not retrieve the product info string [ 838.781324][ T5946] usb 4-1: device descriptor read/8, error -71 [ 838.793609][T16025] usb 7-1: USB disconnect, device number 98 [ 838.826947][ T43] usb 5-1: USB disconnect, device number 4 [ 838.852005][ T43] etas_es58x 5-1:0.2: Disconnecting syz syz [ 839.035873][ T5946] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 839.068570][ T5946] usb 4-1: device descriptor read/8, error -71 [ 839.185814][ T5946] usb usb4-port1: unable to enumerate USB device [ 839.413986][T21262] Bluetooth: MGMT ver 1.23 [ 839.424453][T21262] netlink: 'syz.4.4781': attribute type 10 has an invalid length. [ 839.625780][ T10] usb 7-1: new low-speed USB device number 99 using dummy_hcd [ 839.787565][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.797748][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 839.806805][ T10] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 839.815915][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.825951][ T10] usb 7-1: config 0 descriptor?? [ 839.915550][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 840.087919][ T9] usb 5-1: config 0 interface 0 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.098769][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 840.107739][ T9] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 840.112318][ T5946] usb 7-1: USB disconnect, device number 99 [ 840.117015][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.138773][ T9] usb 5-1: config 0 descriptor?? [ 840.559805][ T9] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 840.567037][ T9] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 840.573922][ T9] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 840.581017][ T9] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 840.588353][ T9] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 840.597118][ T9] topre 0003:0853:0148.0043: hidraw0: USB HID va.00 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 840.685766][T21280] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4784'. [ 840.756403][T16025] usb 5-1: USB disconnect, device number 5 [ 840.976440][ T5946] usb 6-1: USB disconnect, device number 97 [ 841.006973][T21287] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4787'. [ 841.035574][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 841.185592][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 841.192175][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 841.201637][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.220293][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 841.243151][ T9] pvrusb2: ********** [ 841.247558][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 841.257760][ T9] pvrusb2: Important functionality might not be entirely working. [ 841.267116][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 841.285574][ T9] pvrusb2: ********** [ 841.304364][T21296] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4790'. [ 841.395536][ T5946] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 841.423748][ T2343] pvrusb2: Invalid write control endpoint [ 841.493260][ T2343] pvrusb2: Invalid write control endpoint [ 841.501135][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 841.512291][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 841.520642][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 841.539559][ T2343] pvrusb2: Device being rendered inoperable [ 841.551052][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 841.560901][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 841.573276][ T2343] pvrusb2: Attached sub-driver cx25840 [ 841.579862][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 841.590030][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 841.598505][ T5946] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 841.609300][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 841.617804][ T5946] usb 6-1: SerialNumber: syz [ 841.630609][ T5946] usb 6-1: config 0 descriptor?? [ 841.685647][T16025] usb 7-1: new low-speed USB device number 100 using dummy_hcd [ 841.805593][ T43] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 841.838160][T16025] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.848765][T16025] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 841.857844][T16025] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 841.867153][T16025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.871622][T21306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.877989][T16025] usb 7-1: config 0 descriptor?? [ 841.895692][T21306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.919113][ T5946] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0e [ 841.930243][ T5946] hackrf 6-1:0.0: Could not detect board [ 841.938151][ T5946] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 841.951614][ T5946] usb 6-1: USB disconnect, device number 98 [ 841.960546][T21310] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4796'. [ 841.985188][ T43] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 841.999625][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.013004][ T43] usb 5-1: Product: syz [ 842.017142][T21312] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4797'. [ 842.017869][ T43] usb 5-1: Manufacturer: syz [ 842.031689][ T43] usb 5-1: SerialNumber: syz [ 842.045385][ T43] usb 5-1: config 0 descriptor?? [ 842.072368][T21314] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4798'. [ 842.086958][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4798'. [ 842.208746][ T5898] usb 7-1: USB disconnect, device number 100 [ 842.254329][ T43] airspy 5-1:0.0: usb_control_msg() failed -32 request 09 [ 842.262073][ T43] airspy 5-1:0.0: Could not detect board [ 842.268874][ T43] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 842.405616][ T9] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 842.565664][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 842.575397][ T9] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.586742][ T9] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.596750][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 842.603366][ T9] usb 6-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 842.612474][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.622393][ T9] usb 6-1: config 0 descriptor?? [ 843.025539][ T43] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 843.165560][ T43] usb 7-1: device descriptor read/64, error -71 [ 843.239553][T21316] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4799'. [ 843.255638][ T9] usb 6-1: string descriptor 0 read error: -71 [ 843.268153][ T9] uclogic 0003:5543:0045.0044: failed retrieving string descriptor #200: -71 [ 843.277795][ T9] uclogic 0003:5543:0045.0044: failed retrieving pen parameters: -71 [ 843.288281][ T9] uclogic 0003:5543:0045.0044: failed probing pen v2 parameters: -71 [ 843.299088][ T9] uclogic 0003:5543:0045.0044: failed probing parameters: -71 [ 843.306759][ T9] uclogic 0003:5543:0045.0044: probe with driver uclogic failed with error -71 [ 843.324331][ T9] usb 6-1: USB disconnect, device number 99 [ 843.425590][ T43] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 843.565582][ T43] usb 7-1: device descriptor read/64, error -71 [ 843.686015][ T43] usb usb7-port1: attempt power cycle [ 843.739339][ T9] usb 4-1: USB disconnect, device number 69 [ 843.990500][T21332] unsupported nlmsg_type 40 [ 844.035766][ T43] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 844.066195][ T43] usb 7-1: device descriptor read/8, error -71 [ 844.195583][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 844.210299][T21336] 9pnet_fd: Insufficient options for proto=fd [ 844.325706][ T43] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 844.348188][ T43] usb 7-1: device descriptor read/8, error -71 [ 844.348693][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.364648][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 844.374105][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.385079][ T9] usb 4-1: config 0 descriptor?? [ 844.394609][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 844.459398][ T43] usb usb7-port1: unable to enumerate USB device [ 844.593010][ T43] usb 5-1: USB disconnect, device number 6 [ 844.635346][T21342] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4806'. [ 844.805153][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 844.947210][T21360] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4810'. [ 845.020559][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 845.040203][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 845.057421][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 845.074665][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 845.087738][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 845.103300][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 845.117989][ T43] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 845.125876][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 845.136245][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 845.145677][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 845.152706][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 845.160049][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 845.168299][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 845.175640][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 845.182856][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 845.192741][ T9] pwc: Registered as video103. [ 845.213076][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input81 [ 845.244996][ T9] usb 4-1: USB disconnect, device number 70 [ 845.288409][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.308323][ T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 845.331381][ T43] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 845.355778][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.355863][T16025] usb 6-1: new low-speed USB device number 100 using dummy_hcd [ 845.373553][ T43] usb 5-1: config 0 descriptor?? [ 845.527222][T16025] usb 6-1: too many configurations: 228, using maximum allowed: 8 [ 845.545583][T16025] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 845.565305][T16025] usb 6-1: can't read configurations, error -22 [ 845.705647][T16025] usb 6-1: new low-speed USB device number 101 using dummy_hcd [ 845.729665][ T10] usb 5-1: USB disconnect, device number 7 [ 845.866465][T16025] usb 6-1: too many configurations: 228, using maximum allowed: 8 [ 845.885797][T16025] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 845.894362][T16025] usb 6-1: can't read configurations, error -22 [ 845.901122][T16025] usb usb6-port1: attempt power cycle [ 845.935553][ T9] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 846.099845][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 846.109105][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.117242][ T9] usb 4-1: Product: syz [ 846.121401][ T9] usb 4-1: Manufacturer: syz [ 846.126100][ T9] usb 4-1: SerialNumber: syz [ 846.133653][ T9] usb 4-1: config 0 descriptor?? [ 846.165664][T15386] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 846.178466][T15386] Bluetooth: hci5: Injecting HCI hardware error event [ 846.188438][T15386] Bluetooth: hci5: hardware error 0x00 [ 846.245570][ T5991] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 846.253444][T16025] usb 6-1: new low-speed USB device number 102 using dummy_hcd [ 846.278172][T16025] usb 6-1: too many configurations: 228, using maximum allowed: 8 [ 846.290880][T16025] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 846.300538][T16025] usb 6-1: can't read configurations, error -22 [ 846.344237][ T9] airspy 4-1:0.0: usb_control_msg() failed -32 request 09 [ 846.354494][ T9] airspy 4-1:0.0: Could not detect board [ 846.360919][ T9] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 846.425583][ T5991] usb 7-1: Using ep0 maxpacket: 8 [ 846.435097][ T5991] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 846.436189][ T52] Bluetooth: hci1: unknown advertising packet type: 0x6f [ 846.445663][T16025] usb 6-1: new low-speed USB device number 103 using dummy_hcd [ 846.446022][ T52] Bluetooth: hci1: Malformed LE Event: 0x02 [ 846.453040][ T5991] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 846.474683][ T5991] usb 7-1: Product: syz [ 846.478915][ T5991] usb 7-1: Manufacturer: syz [ 846.483679][ T5991] usb 7-1: SerialNumber: syz [ 846.489855][T16025] usb 6-1: too many configurations: 228, using maximum allowed: 8 [ 846.498659][T16025] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 846.508970][ T5991] usb 7-1: config 0 descriptor?? [ 846.514096][T16025] usb 6-1: can't read configurations, error -22 [ 846.523869][ T5991] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 846.530769][T16025] usb usb6-port1: unable to enumerate USB device [ 846.925686][ T5991] gspca_zc3xx: reg_r err -71 [ 846.930607][ T5991] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 846.942176][ T5991] usb 7-1: USB disconnect, device number 105 [ 847.474132][T21407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4820'. [ 847.975571][ T5898] usb 7-1: new low-speed USB device number 106 using dummy_hcd [ 848.131385][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.141834][ T5898] usb 7-1: config 0 has no interfaces? [ 848.149610][ T5898] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 848.159919][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.170006][ T5898] usb 7-1: config 0 descriptor?? [ 848.245565][T15386] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 848.457543][ T5898] usb 7-1: USB disconnect, device number 106 [ 848.506282][ T5946] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 848.655549][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 848.662577][ T5946] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.675520][ T5946] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 848.684608][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.693708][ T5946] usb 6-1: Product: syz [ 848.697961][ T5946] usb 6-1: Manufacturer: syz [ 848.702560][ T5946] usb 6-1: SerialNumber: syz [ 848.716281][ T5946] usb 6-1: config 0 descriptor?? [ 848.723228][ T5946] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 848.730045][ T5991] usb 4-1: USB disconnect, device number 71 [ 848.923185][ T5946] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 848.930319][ T5946] quatech2 6-1:0.0: probe with driver quatech2 failed with error -8 [ 849.075884][ T5991] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 849.127012][ T9] usb 6-1: USB disconnect, device number 104 [ 849.245733][ T5991] usb 4-1: Using ep0 maxpacket: 8 [ 849.252188][ T5991] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 849.263635][ T5991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 849.273844][ T5991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 849.283892][ T5991] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.297611][ T5991] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 849.308414][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.355773][T16025] usb 7-1: new low-speed USB device number 107 using dummy_hcd [ 849.520883][ T5991] usb 4-1: GET_CAPABILITIES returned 0 [ 849.528867][ T5991] usbtmc 4-1:16.0: can't read capabilities [ 849.537719][T16025] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.549066][T16025] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 849.560369][T16025] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 849.569493][T16025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.579281][T16025] usb 7-1: config 0 descriptor?? [ 849.686691][ T5946] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 849.692928][T21434] netlink: 'syz.5.4830': attribute type 2 has an invalid length. [ 849.727241][ T5991] usb 4-1: USB disconnect, device number 72 [ 849.839334][ T5898] usb 7-1: USB disconnect, device number 107 [ 849.850965][ T5946] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 849.875526][ T5946] usb 5-1: can't read configurations, error -71 [ 850.025714][ T9] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 850.179222][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 850.188360][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.196468][ T9] usb 6-1: Product: syz [ 850.200658][ T9] usb 6-1: Manufacturer: syz [ 850.205230][ T9] usb 6-1: SerialNumber: syz [ 850.212061][ T9] usb 6-1: config 0 descriptor?? [ 850.378892][T21444] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4834'. [ 850.518440][T21450] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4837'. [ 850.535584][ T5898] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 850.631176][ T9] airspy 6-1:0.0: usb_control_msg() failed -32 request 0a [ 850.639860][ T9] airspy 6-1:0.0: Could not detect board [ 850.646380][ T9] airspy 6-1:0.0: probe with driver airspy failed with error -32 [ 850.675546][ T5991] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 850.696797][ T5898] usb 4-1: config 0 has no interfaces? [ 850.702281][ T5898] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 850.712317][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.722586][ T5898] usb 4-1: config 0 descriptor?? [ 850.827249][ T5991] usb 7-1: config index 0 descriptor too short (expected 65069, got 45) [ 850.835754][ T5991] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 850.848633][ T5991] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.859389][ T5991] usb 7-1: config 0 has no interfaces? [ 850.864881][ T5991] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 850.874016][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.884430][ T5991] usb 7-1: config 0 descriptor?? [ 850.925584][ T5946] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 851.008598][ T5898] usb 4-1: USB disconnect, device number 73 [ 851.076849][ T5946] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 851.087093][ T5946] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 851.094699][ T5946] usb 5-1: can't read configurations, error -61 [ 851.103049][ T5946] usb usb5-port1: attempt power cycle [ 851.446038][ T5946] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 851.466492][ T5946] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 851.475811][ T5946] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 851.483372][ T5946] usb 5-1: can't read configurations, error -61 [ 851.539005][T21457] netlink: 'syz.3.4839': attribute type 12 has an invalid length. [ 851.547005][T21457] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.4839'. [ 851.627130][ T5946] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 851.647573][ T5946] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 851.658734][ T5946] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 851.667707][ T5946] usb 5-1: can't read configurations, error -61 [ 851.674301][ T5946] usb usb5-port1: unable to enumerate USB device [ 851.748824][T21462] block nbd3: Attempted send on invalid socket [ 851.757335][T21462] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 851.769338][T21462] gfs2: error -5 reading superblock [ 852.045527][ T5991] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 852.198394][ T5991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.208642][ T5991] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 852.217734][ T5991] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 852.227256][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.237233][ T5991] usb 4-1: config 0 descriptor?? [ 852.491855][ T5991] usb 4-1: USB disconnect, device number 74 [ 852.803927][ T5991] usb 6-1: USB disconnect, device number 105 [ 853.265745][T21485] overlayfs: missing 'lowerdir' [ 853.271513][T21485] overlayfs: missing 'lowerdir' [ 853.355577][ T5991] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 853.452435][ T5946] usb 7-1: USB disconnect, device number 108 [ 853.508172][ T5991] usb 4-1: config 0 has no interfaces? [ 853.513700][ T5991] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 853.523082][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.531503][ T981] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 853.542166][ T5991] usb 4-1: config 0 descriptor?? [ 853.716889][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 853.727820][ T981] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 853.739609][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 853.752623][ T981] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 853.762010][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.770137][ T981] usb 6-1: Product: syz [ 853.774396][ T981] usb 6-1: Manufacturer: syz [ 853.780058][ T981] usb 6-1: SerialNumber: syz [ 853.788397][ T981] usb 6-1: config 0 descriptor?? [ 853.796680][ T5946] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 853.806309][T21485] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 853.816218][T21485] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 853.825095][ T981] usb 6-1: ucan: probing device on interface #0 [ 853.838329][ T9] usb 4-1: USB disconnect, device number 75 [ 853.960531][ T5946] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 853.970387][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.980256][ T5946] usb 7-1: Product: syz [ 853.984432][ T5946] usb 7-1: Manufacturer: syz [ 853.985527][ T5991] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 853.990224][ T5946] usb 7-1: SerialNumber: syz [ 854.003506][ T5946] usb 7-1: config 0 descriptor?? [ 854.147305][ T5991] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 854.155620][ T5991] usb 5-1: config 0 has no interface number 0 [ 854.161965][ T5991] usb 5-1: config 0 interface 29 has no altsetting 0 [ 854.171218][ T5991] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 854.180405][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.188461][ T5991] usb 5-1: Product: syz [ 854.192665][ T5991] usb 5-1: Manufacturer: syz [ 854.197431][ T5991] usb 5-1: SerialNumber: syz [ 854.204475][ T5991] usb 5-1: config 0 descriptor?? [ 854.234212][ T981] usb 6-1: ucan: failed to retrieve device info [ 854.240695][ T981] usb 6-1: ucan: probe failed; try to update the device firmware [ 854.255373][ T981] usb 6-1: USB disconnect, device number 106 [ 854.414898][ T5991] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 854.415392][T21489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4852'. [ 854.437631][ T5946] airspy 7-1:0.0: usb_control_msg() failed -32 request 0a [ 854.448435][ T5946] airspy 7-1:0.0: Could not detect board [ 854.454192][ T5946] airspy 7-1:0.0: probe with driver airspy failed with error -32 [ 854.464472][ T5991] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 854.476028][ T5991] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 854.529685][ T5991] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 854.553970][ T5991] usb 5-1: USB disconnect, device number 12 [ 854.665543][T16025] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 854.768462][T21503] netlink: 'syz.5.4856': attribute type 21 has an invalid length. [ 854.817221][T16025] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 854.826424][T16025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.846118][T16025] usb 4-1: config 0 descriptor?? [ 854.855701][ T5991] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 854.867593][T16025] cp210x 4-1:0.0: cp210x converter detected [ 854.961846][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4858'. [ 855.017430][ T5991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.027947][ T5991] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 855.039205][ T5991] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 855.057543][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.070317][ T5991] usb 5-1: config 0 descriptor?? [ 855.078946][T16025] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 855.088205][T16025] cp210x 4-1:0.0: querying part number failed [ 855.103916][T16025] usb 4-1: cp210x converter now attached to ttyUSB0 [ 855.158829][T21516] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4860'. [ 855.281182][ T9] usb 4-1: USB disconnect, device number 76 [ 855.290404][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 855.300288][ T9] cp210x 4-1:0.0: device disconnected [ 855.357947][ T5991] usb 5-1: USB disconnect, device number 13 [ 855.435709][T16025] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 855.586761][T16025] usb 6-1: config 0 has no interfaces? [ 855.592396][T16025] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 855.601513][T16025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.612801][T16025] usb 6-1: config 0 descriptor?? [ 855.837178][T21524] syz.3.4862: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 855.862404][T21524] CPU: 0 UID: 0 PID: 21524 Comm: syz.3.4862 Not tainted syzkaller #0 PREEMPT(full) [ 855.862428][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 855.862440][T21524] Call Trace: [ 855.862449][T21524] [ 855.862456][T21524] dump_stack_lvl+0x189/0x250 [ 855.862483][T21524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.862501][T21524] ? __pfx__printk+0x10/0x10 [ 855.862525][T21524] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 855.862548][T21524] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 855.862573][T21524] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 855.862600][T21524] warn_alloc+0x214/0x310 [ 855.862629][T21524] ? __pfx_warn_alloc+0x10/0x10 [ 855.862660][T21524] ? __get_vm_area_node+0x28f/0x300 [ 855.862680][T21524] ? kvm_set_memslot+0x4e2/0x1310 [ 855.862706][T21524] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 855.862752][T21524] ? kvm_set_memslot+0x3e/0x1310 [ 855.862776][T21524] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 855.862808][T21524] ? kvm_set_memslot+0x4e2/0x1310 [ 855.862827][T21524] __vmalloc_noprof+0xb1/0xf0 [ 855.862846][T21524] ? kvm_set_memslot+0x4e2/0x1310 [ 855.862870][T21524] kvm_set_memslot+0x4e2/0x1310 [ 855.862889][T21524] ? kvm_check_memslot_overlap+0x301/0x380 [ 855.862917][T21524] kvm_set_memory_region+0x966/0xb90 [ 855.862955][T21524] kvm_vm_ioctl_set_memory_region+0x6f/0xd0 [ 855.862981][T21524] kvm_vm_ioctl+0x957/0xc60 [ 855.863007][T21524] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 855.863060][T21524] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 855.863085][T21524] ? do_vfs_ioctl+0xbe8/0x1430 [ 855.863104][T21524] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 855.863125][T21524] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 855.863143][T21524] ? css_rstat_updated+0x23a/0x4f0 [ 855.863170][T21524] ? __pfx_css_rstat_updated+0x10/0x10 [ 855.863219][T21524] ? __fget_files+0x2a/0x420 [ 855.863240][T21524] ? __fget_files+0x3a0/0x420 [ 855.863255][T21524] ? __fget_files+0x2a/0x420 [ 855.863274][T21524] ? bpf_lsm_file_ioctl+0x9/0x20 [ 855.863290][T21524] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 855.863312][T21524] __se_sys_ioctl+0xfc/0x170 [ 855.863335][T21524] do_syscall_64+0xfa/0xfa0 [ 855.863350][T21524] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.863373][T21524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.863395][T21524] ? clear_bhb_loop+0x60/0xb0 [ 855.863414][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.863430][T21524] RIP: 0033:0x7fd6f938eec9 [ 855.863446][T21524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.863459][T21524] RSP: 002b:00007fd6fa221038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.863478][T21524] RAX: ffffffffffffffda RBX: 00007fd6f95e6090 RCX: 00007fd6f938eec9 [ 855.863491][T21524] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 855.863502][T21524] RBP: 00007fd6f9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 855.863512][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.863522][T21524] R13: 00007fd6f95e6128 R14: 00007fd6f95e6090 R15: 00007ffeb0904188 [ 855.863552][T21524] [ 855.863569][T21524] Mem-Info: [ 856.020144][T21535] syzkaller1: entered promiscuous mode [ 856.026629][T21524] active_anon:22358 inactive_anon:1 isolated_anon:0 [ 856.026629][T21524] active_file:7426 inactive_file:50015 isolated_file:0 [ 856.026629][T21524] unevictable:768 dirty:35 writeback:0 [ 856.026629][T21524] slab_reclaimable:7282 slab_unreclaimable:105967 [ 856.026629][T21524] mapped:32739 shmem:16788 pagetables:1796 [ 856.026629][T21524] sec_pagetables:0 bounce:0 [ 856.026629][T21524] kernel_misc_reclaimable:0 [ 856.026629][T21524] free:1276419 free_pcp:16529 free_cma:0 [ 856.033850][ T5898] usb 6-1: USB disconnect, device number 107 [ 856.043062][T21524] Node 0 active_anon:89432kB inactive_anon:4kB active_file:29704kB inactive_file:168836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130904kB dirty:140kB writeback:0kB shmem:65616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13164kB pagetables:7036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 856.043118][T21524] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:31224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 856.043177][T21524] Node 0 DMA free:15232kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 856.043232][T21524] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 856.043274][T21524] Node 0 DMA32 free:1239220kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:89432kB inactive_anon:4kB active_file:29704kB inactive_file:168836kB unevictable:1536kB writepending:140kB zspages:0kB present:3129332kB managed:2549100kB mlocked:0kB bounce:0kB free_pcp:36228kB local_pcp:17864kB free_cma:0kB [ 856.043330][T21524] lowmem_reserve[]: 0 0 0 0 0 [ 856.043378][T21524] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.043428][T21524] lowmem_reserve[]: 0 0 0 0 0 [ 856.043468][T21524] Node 1 Normal free:3851224kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:31224kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:29472kB local_pcp:18560kB free_cma:0kB [ 856.043522][T21524] lowmem_reserve[]: 0 0 0 0 0 [ 856.043569][T21524] Node 0 [ 856.084107][T21535] syzkaller1: entered allmulticast mode [ 856.097529][T21536] netlink: 'syz.4.4864': attribute type 40 has an invalid length. [ 856.103090][T21524] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15232kB [ 856.482981][T21524] Node 0 DMA32: 2467*4kB (UME) 929*8kB (UME) 496*16kB (UME) 449*32kB (UME) 287*64kB (UME) 190*128kB (UME) 192*256kB (UME) 81*512kB (UME) 66*1024kB (UME) 19*2048kB (UME) 234*4096kB (UM) = 1237876kB [ 856.506458][T21524] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 856.519000][T21524] Node 1 Normal: 224*4kB (UM) 57*8kB (UME) 45*16kB (UME) 222*32kB (UME) 72*64kB (UE) 12*128kB (UME) 8*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 3*2048kB (UME) 933*4096kB (M) = 3851224kB [ 856.545200][ T5946] usb 7-1: USB disconnect, device number 109 [ 856.561710][T21524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 856.586463][T21524] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 856.607557][T21524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 856.633442][T21524] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 856.643422][T21524] 74226 total pagecache pages [ 856.650293][T21524] 1 pages in swap cache [ 856.654933][T21524] Free swap = 124992kB [ 856.659273][T21524] Total swap = 124996kB [ 856.663652][T21524] 2097051 pages RAM [ 856.670000][T21524] 0 pages HighMem/MovableOnly [ 856.674695][T21524] 428070 pages reserved [ 856.679898][T21524] 0 pages cma reserved [ 856.967422][ T5946] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 857.085575][ T5898] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 857.128394][ T5946] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 857.137257][ T5946] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 857.145805][ T5946] usb 5-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 857.156644][ T5946] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 857.165856][ T5946] usb 5-1: config 0 has no interface number 0 [ 857.171958][ T5946] usb 5-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 857.183750][ T5946] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 857.194141][ T43] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 857.201661][ T5946] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 857.212794][ T5946] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 857.222941][ T5946] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.236649][ T5946] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 857.246185][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.257764][ T5946] usb 5-1: config 0 descriptor?? [ 857.262856][ T5898] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 857.271198][ T5898] usb 7-1: config 0 has no interface number 1 [ 857.277431][ T5898] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 857.288904][ T5946] gspca_main: spca561-2.14.0 probing abcd:cdee [ 857.295771][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.307218][ T5898] usb 7-1: config 0 descriptor?? [ 857.317063][ T5898] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.324074][ T5898] usb 7-1: MIDIStreaming interface descriptor not found [ 857.387745][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.402205][ T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 857.413485][ T5898] gspca_main: spca561-2.14.0 probing abcd:cdee [ 857.420236][ T43] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 857.430129][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.443293][ T43] usb 4-1: config 0 descriptor?? [ 857.488464][T21544] netlink: 763 bytes leftover after parsing attributes in process `syz.4.4868'. [ 857.504182][ T5946] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 857.514613][ T5946] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.521950][ T5946] usb 5-1: MIDIStreaming interface descriptor not found [ 857.530183][ T5898] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 857.543592][ T5898] usb 7-1: USB disconnect, device number 110 [ 857.618103][ T5946] usb 5-1: USB disconnect, device number 14 [ 857.802206][ T5991] usb 4-1: USB disconnect, device number 77 [ 858.095943][ T43] usb 6-1: new low-speed USB device number 108 using dummy_hcd [ 858.247253][ T43] usb 6-1: config 0 has no interfaces? [ 858.252794][ T43] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 858.262027][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.272993][ T43] usb 6-1: config 0 descriptor?? [ 858.278091][ T5898] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 858.375897][ T5946] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 858.450514][ T5898] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 858.459655][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.468249][ T5898] usb 5-1: Product: syz [ 858.472413][ T5898] usb 5-1: Manufacturer: syz [ 858.477054][ T5898] usb 5-1: SerialNumber: syz [ 858.483546][ T5898] usb 5-1: config 0 descriptor?? [ 858.525672][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 858.532799][ T5946] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 858.545283][ T5946] usb 7-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 858.561457][ T5991] usb 6-1: USB disconnect, device number 108 [ 858.574433][ T5946] usb 7-1: config 0 interface 0 has no altsetting 0 [ 858.582185][ T5946] usb 7-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 858.591296][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.602363][ T5946] usb 7-1: config 0 descriptor?? [ 858.735646][T15386] Bluetooth: hci3: command tx timeout [ 858.894572][ T5898] airspy 5-1:0.0: usb_control_msg() failed -32 request 0a [ 858.902000][ T5898] airspy 5-1:0.0: Could not detect board [ 858.907932][ T5898] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 859.213906][ T5946] usbhid 7-1:0.0: can't add hid device: -71 [ 859.229641][ T5946] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 859.262403][ T5946] usb 7-1: USB disconnect, device number 111 [ 859.273079][T21588] netlink: 'syz.3.4881': attribute type 21 has an invalid length. [ 859.281638][T21588] netlink: 13562 bytes leftover after parsing attributes in process `syz.3.4881'. [ 859.301290][T21588] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4881'. [ 860.035844][ T5991] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 860.195564][ T5991] usb 7-1: Using ep0 maxpacket: 32 [ 860.204823][ T5991] usb 7-1: config 0 interface 0 has no altsetting 0 [ 860.214994][ T5991] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 860.226007][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.234008][ T5991] usb 7-1: Product: syz [ 860.238868][ T5991] usb 7-1: Manufacturer: syz [ 860.243742][ T5991] usb 7-1: SerialNumber: syz [ 860.253711][ T5991] usb 7-1: config 0 descriptor?? [ 860.335589][ T9] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 860.445530][T14361] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 860.463181][T21620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.472556][T21620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.481812][ T5991] gs_usb 7-1:0.0: Couldn't send data format (err=-71) [ 860.489805][ T5991] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 860.500368][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.513462][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 860.523735][ T5991] usb 7-1: USB disconnect, device number 112 [ 860.534764][ T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 860.545101][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.557155][ T9] usb 6-1: config 0 descriptor?? [ 860.606989][T14361] usb 4-1: config 0 has no interfaces? [ 860.612504][T14361] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 860.622779][T14361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.632756][T14361] usb 4-1: config 0 descriptor?? [ 860.812086][ T5991] usb 6-1: USB disconnect, device number 109 [ 860.889086][ T9] usb 4-1: USB disconnect, device number 78 [ 861.058670][T14361] usb 5-1: USB disconnect, device number 15 [ 861.129384][T21646] netlink: 'syz.6.4890': attribute type 1 has an invalid length. [ 861.446650][T14361] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 861.506929][ T5991] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 861.617249][T14361] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.628385][T14361] usb 5-1: config 0 interface 0 has no altsetting 0 [ 861.635009][T14361] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 861.645106][T14361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.654950][T14361] usb 5-1: config 0 descriptor?? [ 861.666408][ T5991] usb 7-1: Using ep0 maxpacket: 32 [ 861.673156][ T5991] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.683536][ T5991] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 861.685535][ T5898] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 861.697971][ T5991] usb 7-1: config 0 interface 0 has no altsetting 0 [ 861.712208][ T5991] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 861.722363][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.725525][ T5946] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 861.733321][ T5991] usb 7-1: config 0 descriptor?? [ 861.855597][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 861.863735][ T5898] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 861.879563][ T5898] usb 4-1: config 0 has no interface number 0 [ 861.888259][ T5898] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 861.898362][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 861.907923][ T5898] usb 4-1: Product: syz [ 861.917363][T14361] usbhid 5-1:0.0: can't add hid device: -71 [ 861.929239][ T5946] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 861.938537][ T5898] usb 4-1: Manufacturer: syz [ 861.944816][T14361] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 861.954880][ T5898] usb 4-1: config 0 descriptor?? [ 861.960308][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.972961][ T5946] usb 6-1: Product: syz [ 861.977660][ T5946] usb 6-1: Manufacturer: syz [ 861.982296][ T5946] usb 6-1: SerialNumber: syz [ 861.992683][T14361] usb 5-1: USB disconnect, device number 16 [ 862.000502][T21667] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 862.007662][ T5946] usb 6-1: config 0 descriptor?? [ 862.045700][T21667] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 862.064188][T21667] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 862.070912][T21667] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 862.078459][T21667] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 862.091289][T21667] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 862.098884][T21667] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 862.111496][T21667] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 862.118122][T21667] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 862.124398][T21667] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 862.132481][T21667] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 862.185907][T21669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 862.192231][T21669] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 862.199085][T21669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 862.212359][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4897'. [ 862.225576][T14361] usb 4-1: USB disconnect, device number 79 [ 862.384880][T21654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.400354][T21654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.420372][T21654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.429064][ T5946] airspy 6-1:0.0: usb_control_msg() failed -32 request 0a [ 862.436407][ T5946] airspy 6-1:0.0: Could not detect board [ 862.446223][T21654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.454977][ T5946] airspy 6-1:0.0: probe with driver airspy failed with error -32 [ 862.465656][T21654] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4894'. [ 862.470060][T21682] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 862.490399][ T5991] usbhid 7-1:0.0: can't add hid device: -71 [ 862.497669][ T5991] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 862.502435][T21682] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 862.509644][ T5991] usb 7-1: USB disconnect, device number 113 [ 862.521871][T21682] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 862.531149][T21682] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 862.539411][T21682] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 862.549430][T21682] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 862.558181][T21682] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 862.568669][T21682] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 862.577328][T21682] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 862.855674][ T981] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 863.009034][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.019558][ T981] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 863.030973][ T981] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 863.038257][ T5946] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 863.043113][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.060565][ T981] usb 5-1: config 0 descriptor?? [ 863.165266][T21695] syz.6.4907 (21695) used greatest stack depth: 17832 bytes left [ 863.207213][ T5946] usb 4-1: config 0 has no interfaces? [ 863.212730][ T5946] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 863.222352][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.233688][ T5946] usb 4-1: config 0 descriptor?? [ 863.321558][T14361] usb 5-1: USB disconnect, device number 17 [ 863.435605][ T981] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 863.492419][ T5991] usb 4-1: USB disconnect, device number 80 [ 863.595711][ T981] usb 7-1: Using ep0 maxpacket: 16 [ 863.603729][ T981] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.613051][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.621219][ T981] usb 7-1: Product: syz [ 863.625367][ T981] usb 7-1: Manufacturer: syz [ 863.630064][ T981] usb 7-1: SerialNumber: syz [ 863.843754][ T30] audit: type=1326 audit(5275786140.959:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 863.851899][T21698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.874033][ T30] audit: type=1326 audit(5275786140.959:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 863.900190][ T30] audit: type=1326 audit(5275786140.959:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 863.907438][T21698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.926646][ T30] audit: type=1326 audit(5275786140.959:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 863.955990][ T30] audit: type=1326 audit(5275786140.959:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 863.984542][ T30] audit: type=1326 audit(5275786140.959:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 864.000135][ T981] cdc_ncm 7-1:1.0: bind() failure [ 864.017333][T21710] CUSE: unknown device info "MzP{UҗEsZ$cw#/f}ٔb,Q[{Ʈ$ [ 864.017333][T21710] 4&I:#5o63ю.l%wC [ 864.017333][T21710] ?" [ 864.048779][ T981] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 864.061137][ T981] cdc_ncm 7-1:1.1: bind() failure [ 864.067652][T21710] CUSE: unknown device info "v2.7˂*5SEAy `?e`l6ݡQ0V84܎{c"K^vaO֐M 8f1\.dž6(3ifω11,kbz"NXj} ~wu/K9.rפ" [ 864.086051][ T30] audit: type=1326 audit(5275786140.959:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 864.086097][ T30] audit: type=1326 audit(5275786140.959:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 864.086135][ T30] audit: type=1326 audit(5275786140.959:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 864.086171][ T30] audit: type=1326 audit(5275786140.959:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21697 comm="syz.6.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f989f58eec9 code=0x7ffc0000 [ 864.193447][T21710] CUSE: DEVNAME unspecified [ 864.199367][ T981] usb 7-1: USB disconnect, device number 114 [ 864.267669][T15386] Bluetooth: hci3: command 0x0c1a tx timeout [ 864.268018][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 864.273724][T15386] Bluetooth: hci1: command 0x0c1a tx timeout [ 864.510520][T16025] usb 6-1: USB disconnect, device number 110 [ 864.590387][T21723] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4914'. [ 864.995560][T16025] usb 7-1: new low-speed USB device number 115 using dummy_hcd [ 865.071502][ T5946] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 865.146943][T16025] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.157766][T16025] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 865.167144][T16025] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 865.176354][T16025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.190818][T16025] usb 7-1: config 0 descriptor?? [ 865.227580][ T5946] usb 5-1: config 0 has no interfaces? [ 865.233141][ T5946] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 865.242862][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.253051][ T5946] usb 5-1: config 0 descriptor?? [ 865.305967][T14361] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 865.456867][T14361] usb 4-1: Using ep0 maxpacket: 16 [ 865.467444][T14361] usb 4-1: config 0 has an invalid interface number: 61 but max is 0 [ 865.480464][T16025] usb 7-1: USB disconnect, device number 115 [ 865.486200][T14361] usb 4-1: config 0 has no interface number 0 [ 865.495761][T14361] usb 4-1: config 0 interface 61 has no altsetting 0 [ 865.514987][T14361] usb 4-1: New USB device found, idVendor=07b8, idProduct=7610, bcdDevice=f6.39 [ 865.533936][T14361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.548917][T14361] usb 4-1: Product: syz [ 865.553850][T14361] usb 4-1: Manufacturer: syz [ 865.565639][T14361] usb 4-1: SerialNumber: syz [ 865.581015][T14361] usb 4-1: config 0 descriptor?? [ 865.625283][ T5946] usb 5-1: USB disconnect, device number 18 [ 865.875524][ T981] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 866.020396][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4926'. [ 866.030692][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 866.036447][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4926'. [ 866.037941][ T981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 866.055079][ T981] usb 6-1: config 1 interface 0 altsetting 126 bulk endpoint 0x1 has invalid maxpacket 16 [ 866.065584][ T981] usb 6-1: config 1 interface 0 altsetting 126 bulk endpoint 0x82 has invalid maxpacket 64 [ 866.078127][ T981] usb 6-1: config 1 interface 0 has no altsetting 0 [ 866.087572][ T981] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 866.096959][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.107284][ T981] usb 6-1: Product: syz [ 866.111467][ T981] usb 6-1: Manufacturer: syz [ 866.114042][T21765] overlay: filesystem on ./file1 not supported as upperdir [ 866.116543][ T981] usb 6-1: SerialNumber: syz [ 866.131597][T21765] overlay: filesystem on ./file1 not supported as upperdir [ 866.132347][T21761] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 866.146611][T21761] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 866.147341][T21765] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 866.170818][T21765] overlayfs: overlapping lowerdir path [ 866.259155][T21770] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4928'. [ 866.330957][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 866.332340][T15386] Bluetooth: hci3: command 0x0c1a tx timeout [ 866.337167][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 866.369184][T21761] validate_nla: 56 callbacks suppressed [ 866.369203][T21761] netlink: 'syz.5.4925': attribute type 1 has an invalid length. [ 866.383066][T21761] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4925'. [ 866.392818][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4925'. [ 866.410798][ T981] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 126 proto 2 vid 0x0525 pid 0xA4A8 [ 866.427313][ T981] usb 6-1: USB disconnect, device number 111 [ 866.441060][ T981] usblp0: removed [ 866.579978][T21770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.592945][T21770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.605010][T21770] bond0 (unregistering): Released all slaves [ 866.623343][T21774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4928'. [ 866.705892][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 866.875507][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 866.882369][ T9] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 866.890753][ T9] usb 5-1: config 0 has no interface number 0 [ 866.898962][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 866.908079][ T9] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 866.916106][ T9] usb 5-1: Product: syz [ 866.921130][ T9] usb 5-1: Manufacturer: syz [ 866.927534][ T9] usb 5-1: config 0 descriptor?? [ 866.957353][T14361] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 867.143526][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4931'. [ 867.145510][T14361] usb 7-1: Using ep0 maxpacket: 16 [ 867.160679][ T24] usb 5-1: USB disconnect, device number 19 [ 867.168127][T14361] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 867.178895][T14361] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.191558][T14361] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.204914][T14361] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 867.217930][T14361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.227575][T14361] usb 7-1: Product: syz [ 867.231739][T14361] usb 7-1: Manufacturer: syz [ 867.236658][T14361] usb 7-1: SerialNumber: syz [ 867.647338][T14361] usb 7-1: 0:2 : does not exist [ 867.935707][T16025] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 867.947095][T15386] block nbd0: Receive control failed (result -32) [ 868.107349][T16025] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.118188][T16025] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 868.127797][T16025] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 868.137027][T16025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.152210][ T5946] usb 4-1: USB disconnect, device number 81 [ 868.156571][T16025] usb 5-1: config 0 descriptor?? [ 868.267744][ T24] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 868.405730][T15386] Bluetooth: hci3: command 0x0c1a tx timeout [ 868.405760][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 868.418277][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 868.438795][ T24] usb 6-1: config 0 has no interfaces? [ 868.444570][ T24] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 868.453743][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.465003][ T24] usb 6-1: config 0 descriptor?? [ 868.472716][ T981] usb 5-1: USB disconnect, device number 20 [ 868.675547][T16025] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 868.729809][ T981] usb 6-1: USB disconnect, device number 112 [ 868.815560][T16025] usb 4-1: device descriptor read/64, error -71 [ 869.019629][ T24] usb 7-1: USB disconnect, device number 116 [ 869.056963][T16025] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 869.101046][T13727] Bluetooth: hci6: Frame reassembly failed (-84) [ 869.109747][T21810] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 869.117014][T13727] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 869.120208][T21810] program syz.6.4942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.124642][T13727] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 869.195867][T16025] usb 4-1: device descriptor read/64, error -71 [ 869.305961][T16025] usb usb4-port1: attempt power cycle [ 869.645523][T16025] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 869.666060][T16025] usb 4-1: device descriptor read/8, error -71 [ 869.695563][ T24] usb 6-1: new low-speed USB device number 113 using dummy_hcd [ 869.847679][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.858782][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 869.867846][ T24] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 869.876969][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.888982][ T24] usb 6-1: config 0 descriptor?? [ 869.907738][T16025] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 869.938820][T16025] usb 4-1: device descriptor read/8, error -71 [ 870.056829][T16025] usb usb4-port1: unable to enumerate USB device [ 870.170863][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.177333][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.186587][T16025] usb 6-1: USB disconnect, device number 113 [ 870.205759][ T24] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 870.356768][ T24] usb 5-1: config 0 has no interfaces? [ 870.362288][ T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 870.371418][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.381723][ T24] usb 5-1: config 0 descriptor?? [ 870.485584][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 870.649517][ T24] usb 5-1: USB disconnect, device number 21 [ 871.125555][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 871.125570][ T5183] Bluetooth: hci6: command 0x1003 tx timeout [ 871.735620][T14361] usb 6-1: new low-speed USB device number 114 using dummy_hcd [ 871.855708][T16025] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 871.896839][T14361] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.907042][T14361] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 871.916089][T14361] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 871.925133][T14361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.934919][T14361] usb 6-1: config 0 descriptor?? [ 872.007783][T16025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 872.018741][T16025] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 872.030272][T16025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 872.043685][T16025] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 872.052815][T16025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.060996][ T9] usb 7-1: new low-speed USB device number 117 using dummy_hcd [ 872.068680][T16025] usb 4-1: Product: syz [ 872.072872][T16025] usb 4-1: Manufacturer: syz [ 872.079987][T16025] usb 4-1: SerialNumber: syz [ 872.088969][T16025] usb 4-1: config 0 descriptor?? [ 872.095346][T21863] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 872.102898][T21863] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 872.113475][T16025] usb 4-1: ucan: probing device on interface #0 [ 872.218186][ T24] usb 6-1: USB disconnect, device number 114 [ 872.229928][ T9] usb 7-1: config 0 has no interfaces? [ 872.241229][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 872.248622][T21870] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 872.258002][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.263321][T13729] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 872.269810][ T9] usb 7-1: config 0 descriptor?? [ 872.281256][T13729] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 872.284990][T21870] program syz.4.4967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 872.296653][T13729] Bluetooth: hci6: Frame reassembly failed (-84) [ 872.313827][T16025] usb 4-1: ucan: could not read protocol version, ret=-71 [ 872.322599][T16025] usb 4-1: ucan: probe failed; try to update the device firmware [ 872.341615][T16025] usb 4-1: USB disconnect, device number 86 [ 872.548155][T16025] usb 7-1: USB disconnect, device number 117 [ 872.565552][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 872.838619][T21875] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.4969'. [ 872.995724][ T24] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 873.135622][ T5898] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 873.170250][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.180471][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 873.189622][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.206913][ T24] usb 6-1: config 0 descriptor?? [ 873.229109][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 873.305540][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 873.312510][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.324323][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.334145][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 873.340817][ T5898] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 873.349903][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.359925][ T5898] usb 4-1: config 0 descriptor?? [ 873.455534][ T5991] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 873.572721][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.580233][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.587044][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.593770][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.600560][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.607437][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.614143][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.615623][ T5991] usb 7-1: Using ep0 maxpacket: 8 [ 873.621289][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.629148][ T5991] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.633707][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.649404][ T5991] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.651370][ T5898] kye 0003:0458:0138.0045: unknown main item tag 0x0 [ 873.661690][ T5991] usb 7-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 873.676894][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 873.678003][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 873.687469][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.699352][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 873.701772][ T5991] usb 7-1: config 0 descriptor?? [ 873.711720][ T5898] kye 0003:0458:0138.0045: unexpected long global item [ 873.719474][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 873.727387][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 873.734465][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 873.741244][ T5898] kye 0003:0458:0138.0045: parse failed [ 873.747002][ T5898] kye 0003:0458:0138.0045: probe with driver kye failed with error -22 [ 873.756218][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 873.763400][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 873.780992][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 873.788233][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 873.795197][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 873.802299][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 873.809512][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 873.817000][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 873.824105][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 873.833807][ T24] pwc: Registered as video103. [ 873.840977][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input82 [ 874.038990][ T9] usb 6-1: USB disconnect, device number 115 [ 874.140145][ T5991] usbhid 7-1:0.0: can't add hid device: -71 [ 874.146599][ T5991] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 874.160852][ T5991] usb 7-1: USB disconnect, device number 118 [ 874.325656][ T5183] Bluetooth: hci6: command 0x1003 tx timeout [ 874.325696][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 874.685631][ T5991] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 874.699168][T21896] net_ratelimit: 3 callbacks suppressed [ 874.699179][T21896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 874.855626][ T9] usb 6-1: new low-speed USB device number 116 using dummy_hcd [ 874.866453][ T5991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.877586][ T5991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.887887][ T5991] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 874.900944][ T5991] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 874.911241][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.921967][ T5991] usb 5-1: config 0 descriptor?? [ 874.930268][ T5991] hub 5-1:0.0: USB hub found [ 875.008618][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.018956][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 875.027997][ T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 875.037109][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.047583][ T9] usb 6-1: config 0 descriptor?? [ 875.337921][ T5946] usb 6-1: USB disconnect, device number 116 [ 875.354845][ T5991] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 875.386912][ T5991] usb 5-1: USB disconnect, device number 22 [ 875.903879][ T5991] usb 4-1: USB disconnect, device number 87 [ 875.969220][T21902] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 876.195584][ T9] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 876.358238][ T9] usb 5-1: config 0 has no interfaces? [ 876.363763][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 876.374356][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.375516][ T5946] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 876.391611][ T9] usb 5-1: config 0 descriptor?? [ 876.545523][ T5946] usb 4-1: device descriptor read/64, error -71 [ 876.648845][ T24] usb 5-1: USB disconnect, device number 23 [ 876.697230][ T5898] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 876.785539][ T5946] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 876.805685][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 876.805710][ T5183] Bluetooth: hci6: command 0x1003 tx timeout [ 876.868901][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.881078][ T5898] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 876.893401][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.912086][ T5898] usb 6-1: config 0 descriptor?? [ 876.935657][ T5946] usb 4-1: device descriptor read/64, error -71 [ 877.057954][ T5946] usb usb4-port1: attempt power cycle [ 877.122098][ T5898] keytouch 0003:0926:3333.0046: fixing up Keytouch IEC report descriptor [ 877.137267][ T5898] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0046/input/input83 [ 877.196669][T16025] usb 7-1: new low-speed USB device number 119 using dummy_hcd [ 877.245081][ T5898] keytouch 0003:0926:3333.0046: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 877.357418][T16025] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.369815][T16025] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 877.379279][T16025] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 877.379306][T16025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.381720][T16025] usb 7-1: config 0 descriptor?? [ 877.405635][ T5946] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 877.436022][ T5946] usb 4-1: device descriptor read/8, error -71 [ 877.660805][T16025] usb 6-1: USB disconnect, device number 117 [ 877.680952][ T9] usb 7-1: USB disconnect, device number 119 [ 877.695745][ T5946] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 877.728806][ T5946] usb 4-1: device descriptor read/8, error -71 [ 877.836665][ T5946] usb usb4-port1: unable to enumerate USB device [ 878.155521][T16025] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 878.223708][T21940] ------------[ cut here ]------------ [ 878.230751][T21940] WARNING: mm/hugetlb.c:368 at hugetlb_vma_assert_locked+0x1dd/0x250, CPU#0: syz.6.4993/21940 [ 878.241344][T21940] Modules linked in: [ 878.246646][T21940] CPU: 0 UID: 0 PID: 21940 Comm: syz.6.4993 Not tainted syzkaller #0 PREEMPT(full) [ 878.256373][T21940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 878.266516][T21940] RIP: 0010:hugetlb_vma_assert_locked+0x1dd/0x250 [ 878.272917][T21940] Code: 2e e8 17 e8 a1 ff eb 0c e8 10 e8 a1 ff eb 05 e8 09 e8 a1 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f4 e7 a1 ff 90 <0f> 0b 90 eb e5 e8 e9 e7 a1 ff 90 0f 0b 90 eb da 48 c7 c1 70 0b e5 [ 878.293094][T21940] RSP: 0018:ffffc9000beb7388 EFLAGS: 00010293 [ 878.299713][T21940] RAX: ffffffff821e312c RBX: 0000000000000000 RCX: ffff88802f365ac0 [ 878.307731][T21940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 878.315736][T21940] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 878.323695][T21940] R10: dffffc0000000000 R11: fffff520017d6e74 R12: ffff888025554100 [ 878.331691][T21940] R13: 1ffff11006234634 R14: dffffc0000000000 R15: 0000000000000080 [ 878.339685][T21940] FS: 00007f98a03f16c0(0000) GS:ffff8881257a2000(0000) knlGS:0000000000000000 [ 878.348811][T21940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.355384][T21940] CR2: 00007f98a03cff98 CR3: 00000000527ac000 CR4: 00000000003526f0 [ 878.363428][T21940] Call Trace: [ 878.366735][T21940] [ 878.369652][T21940] huge_pmd_unshare+0x2c8/0x540 [ 878.374840][T21940] __unmap_hugepage_range+0x6e3/0x1aa0 [ 878.380327][T21940] unmap_hugepage_range+0x32e/0x410 [ 878.385557][T21940] ? __pfx_unmap_hugepage_range+0x10/0x10 [ 878.391725][T21940] ? down_write+0x162/0x1f0 [ 878.396656][T21940] ? vma_interval_tree_iter_first+0x20f/0x230 [ 878.402712][T21940] ? hugetlb_vma_trylock_write+0xe5/0x150 [ 878.408483][T21940] hugetlb_vmdelete_list+0x171/0x1c0 [ 878.413752][T21940] hugetlbfs_setattr+0x4d1/0x6d0 [ 878.418700][T21940] ? __pfx_hugetlbfs_setattr+0x10/0x10 [ 878.424163][T21940] notify_change+0xc1a/0xf40 [ 878.428774][T21940] do_truncate+0x1a4/0x220 [ 878.433178][T21940] ? __pfx_do_truncate+0x10/0x10 [ 878.438130][T21940] ? apparmor_file_truncate+0x23e/0x2d0 [ 878.443668][T21940] path_openat+0x306c/0x3830 [ 878.448310][T21940] ? __pfx_path_openat+0x10/0x10 [ 878.453245][T21940] do_filp_open+0x1fa/0x410 [ 878.457780][T21940] ? __lock_acquire+0xab9/0xd20 [ 878.462612][T21940] ? __pfx_do_filp_open+0x10/0x10 [ 878.467693][T21940] ? _raw_spin_unlock+0x28/0x50 [ 878.472530][T21940] ? alloc_fd+0x64c/0x6c0 [ 878.476883][T21940] do_sys_openat2+0x121/0x1c0 [ 878.481552][T21940] ? __se_sys_futex+0x36f/0x400 [ 878.486507][T21940] ? __pfx_do_sys_openat2+0x10/0x10 [ 878.492187][T21940] ? __pfx___se_sys_futex+0x10/0x10 [ 878.497787][T21940] __x64_sys_open+0x11e/0x150 [ 878.502465][T21940] do_syscall_64+0xfa/0xfa0 [ 878.506993][T21940] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.512180][T21940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.518272][T21940] ? clear_bhb_loop+0x60/0xb0 [ 878.522932][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.528854][T21940] RIP: 0033:0x7f989f58eec9 [ 878.533254][T21940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.552927][T21940] RSP: 002b:00007f98a03f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 878.561368][T21940] RAX: ffffffffffffffda RBX: 00007f989f7e5fa0 RCX: 00007f989f58eec9 [ 878.569399][T21940] RDX: 0000000000000100 RSI: 000000000014927e RDI: 0000200000000340 [ 878.577645][T21940] RBP: 00007f989f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 878.585656][T21940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.594058][T21940] R13: 00007f989f7e6038 R14: 00007f989f7e5fa0 R15: 00007ffdc943a958 [ 878.602460][T21940] [ 878.605568][T21940] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 878.612836][T21940] CPU: 0 UID: 0 PID: 21940 Comm: syz.6.4993 Not tainted syzkaller #0 PREEMPT(full) [ 878.622178][T21940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 878.632210][T21940] Call Trace: [ 878.635470][T21940] [ 878.638391][T21940] dump_stack_lvl+0x99/0x250 [ 878.642961][T21940] ? __asan_memcpy+0x40/0x70 [ 878.647535][T21940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.652710][T21940] ? __pfx__printk+0x10/0x10 [ 878.657288][T21940] vpanic+0x237/0x6d0 [ 878.661247][T21940] ? __pfx_vpanic+0x10/0x10 [ 878.665729][T21940] ? is_bpf_text_address+0x292/0x2b0 [ 878.671002][T21940] ? is_bpf_text_address+0x26/0x2b0 [ 878.676188][T21940] panic+0xb9/0xc0 [ 878.679896][T21940] ? __pfx_panic+0x10/0x10 [ 878.684303][T21940] __warn+0x334/0x4c0 [ 878.688261][T21940] ? hugetlb_vma_assert_locked+0x1dd/0x250 [ 878.694057][T21940] ? hugetlb_vma_assert_locked+0x1dd/0x250 [ 878.699860][T21940] report_bug+0x2be/0x4f0 [ 878.704174][T21940] ? hugetlb_vma_assert_locked+0x1dd/0x250 [ 878.709958][T21940] ? hugetlb_vma_assert_locked+0x1dd/0x250 [ 878.715744][T21940] ? hugetlb_vma_assert_locked+0x1df/0x250 [ 878.721533][T21940] handle_bug+0x84/0x160 [ 878.725756][T21940] exc_invalid_op+0x1a/0x50 [ 878.730242][T21940] asm_exc_invalid_op+0x1a/0x20 [ 878.735067][T21940] RIP: 0010:hugetlb_vma_assert_locked+0x1dd/0x250 [ 878.741459][T21940] Code: 2e e8 17 e8 a1 ff eb 0c e8 10 e8 a1 ff eb 05 e8 09 e8 a1 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f4 e7 a1 ff 90 <0f> 0b 90 eb e5 e8 e9 e7 a1 ff 90 0f 0b 90 eb da 48 c7 c1 70 0b e5 [ 878.761047][T21940] RSP: 0018:ffffc9000beb7388 EFLAGS: 00010293 [ 878.767099][T21940] RAX: ffffffff821e312c RBX: 0000000000000000 RCX: ffff88802f365ac0 [ 878.775051][T21940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 878.782998][T21940] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 878.790945][T21940] R10: dffffc0000000000 R11: fffff520017d6e74 R12: ffff888025554100 [ 878.798896][T21940] R13: 1ffff11006234634 R14: dffffc0000000000 R15: 0000000000000080 [ 878.806852][T21940] ? hugetlb_vma_assert_locked+0x1dc/0x250 [ 878.812644][T21940] ? hugetlb_vma_assert_locked+0x1dc/0x250 [ 878.818431][T21940] huge_pmd_unshare+0x2c8/0x540 [ 878.823265][T21940] __unmap_hugepage_range+0x6e3/0x1aa0 [ 878.828718][T21940] unmap_hugepage_range+0x32e/0x410 [ 878.833922][T21940] ? __pfx_unmap_hugepage_range+0x10/0x10 [ 878.839633][T21940] ? down_write+0x162/0x1f0 [ 878.844111][T21940] ? vma_interval_tree_iter_first+0x20f/0x230 [ 878.850165][T21940] ? hugetlb_vma_trylock_write+0xe5/0x150 [ 878.855872][T21940] hugetlb_vmdelete_list+0x171/0x1c0 [ 878.861144][T21940] hugetlbfs_setattr+0x4d1/0x6d0 [ 878.866070][T21940] ? __pfx_hugetlbfs_setattr+0x10/0x10 [ 878.871510][T21940] notify_change+0xc1a/0xf40 [ 878.876092][T21940] do_truncate+0x1a4/0x220 [ 878.880499][T21940] ? __pfx_do_truncate+0x10/0x10 [ 878.885418][T21940] ? apparmor_file_truncate+0x23e/0x2d0 [ 878.890969][T21940] path_openat+0x306c/0x3830 [ 878.895575][T21940] ? __pfx_path_openat+0x10/0x10 [ 878.900511][T21940] do_filp_open+0x1fa/0x410 [ 878.904992][T21940] ? __lock_acquire+0xab9/0xd20 [ 878.909823][T21940] ? __pfx_do_filp_open+0x10/0x10 [ 878.914841][T21940] ? _raw_spin_unlock+0x28/0x50 [ 878.919674][T21940] ? alloc_fd+0x64c/0x6c0 [ 878.923985][T21940] do_sys_openat2+0x121/0x1c0 [ 878.928641][T21940] ? __se_sys_futex+0x36f/0x400 [ 878.933474][T21940] ? __pfx_do_sys_openat2+0x10/0x10 [ 878.938652][T21940] ? __pfx___se_sys_futex+0x10/0x10 [ 878.943830][T21940] __x64_sys_open+0x11e/0x150 [ 878.948492][T21940] do_syscall_64+0xfa/0xfa0 [ 878.952979][T21940] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.958159][T21940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.964202][T21940] ? clear_bhb_loop+0x60/0xb0 [ 878.968898][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.974767][T21940] RIP: 0033:0x7f989f58eec9 [ 878.979161][T21940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.998741][T21940] RSP: 002b:00007f98a03f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 879.007138][T21940] RAX: ffffffffffffffda RBX: 00007f989f7e5fa0 RCX: 00007f989f58eec9 [ 879.015088][T21940] RDX: 0000000000000100 RSI: 000000000014927e RDI: 0000200000000340 [ 879.023038][T21940] RBP: 00007f989f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 879.030986][T21940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.038934][T21940] R13: 00007f989f7e6038 R14: 00007f989f7e5fa0 R15: 00007ffdc943a958 [ 879.046894][T21940] [ 879.050160][T21940] Kernel Offset: disabled [ 879.054468][T21940] Rebooting in 86400 seconds..