last executing test programs: 12m8.656514427s ago: executing program 2 (id=2426): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x4000000000000004) 12m8.506129897s ago: executing program 2 (id=2430): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000180)=0x10) 12m8.28079484s ago: executing program 2 (id=2436): semget(0x2, 0x6, 0x400) 12m8.133054848s ago: executing program 2 (id=2440): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 12m7.882063588s ago: executing program 2 (id=2444): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000140001032dbd7000fcdbdf250b"], 0x1c}}, 0x0) 12m6.789245673s ago: executing program 2 (id=2462): socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 12m6.467021438s ago: executing program 32 (id=2462): socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4m14.98867417s ago: executing program 4 (id=5432): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x40408d4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f0000001b00)="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", 0x120) 4m14.751076044s ago: executing program 4 (id=5434): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa101"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000bc0)={0x40, 0x7, 0xfe, {0xfe, 0xd, "1b40f0c38751841d5df47657ce34f7fe18ff40d6864c4d4dbfc4cc65229f8aa375aad2745ff29d8b166301ca7c755bf49388a4327307be005e4a3c68e6ad5e1b4413587a6cd6b50deeebf87504a7454d9d8d7ea623fb7951e0116161ceb9fa0b95b60b0911b77169282331c2944679fe1f7c76f9241b04a499d09b2bd816e1c12e7c455b2accf56c874368c520bb6c83ec530e1ff1eed3fcb28da377f01c1e07d828e8ab06967557a3d98c71691fefe7894740e6c6af050580878d35ed77242604d5c7826a37dd6e0de29508e44ccc1474271337209e22336e6d64d474624552a6e106e513ae73c4e5452135851648100ca9ec5913f84a0f2df4b05d"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x58}}, &(0x7f0000000280)={0x0, 0xf, 0x242, {0x5, 0xf, 0x242, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "65f6ad8c533e63c5a76947b789c87d51"}, @generic={0x87, 0x10, 0x4, "6c245e70b023bd67b8c505610100f5141fb3898dcad39284273956e4d3e5f1ba64d0845b1240e92a5fdd4f2803f77b1cdb416d13d275db8f16c601e8f6b57ff9a69fc37394f2a4e2e7eb478d538970be673954b78cf6cb542842d8a5f86f04a9b1750353e57ac6a7724648cb0d9c70c19e530ec746fb193e98854ddc3c8e11c8267e2296"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x5, 0x1000}, @generic={0xd7, 0x10, 0xb, "4013b991334a30e05829423130127eea9cc9802086264651a65ed9cfb861171115696f978e057f815fc5e692c4d9a8b9f3b9160ea5516313bce3cde5578ac1aacd273f332539b77f323e28c7e1c0d8e80ed42c71c437f1c0f672d61a18f59674b29c401db58a4248515e9c28ef54c2264479bb87e55ac6368840ec99cb0d2d31f3122666a328988844fe331a428e980fab2d80d9ede62ed34660ecf274a9756512ea741b669d134f36b67a4c5fc93e4d170a9c765647dde5186aed7289e3afb0ac207f6f869b4a96a557ba40119722616f2a8d1e"}, @generic={0xc4, 0x10, 0x0, "876837a3fa5414e48897e5bb80c62e1ca07229f4381ca2992e893c36f5dbd1af926ab95e14ab96899c469b83bcec780bb9a178ed09c5016e8ffeec5d17264de06daaf650ceeb6e891d8e407715194d58ec7d47a87d3518ee915742949bf4d9029f73042df897a17c0057f56c0168183c6a5a1a4402e6d1d2fc06b6907094ee3f20bdcfc60da5fc83fc3fa9e4d514f465df3bee8c58dcc6597e4603c838b60c37a3be5e746b0a365022a7e1f8521046b5349df782c44e7ec30f625a190e3d1e19a6"}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0xa, "c07333e7", "ee70d572"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x6, 0x4, 0x9, 0x1ff, 0x28}}}, &(0x7f0000000b00)={0x84, &(0x7f00000005c0)={0x40, 0xf, 0xa8, "e7a4767cae164611ed68cd0e467b167584c34965416df9a40e16a0a262dec4897328b55c7cb46a167b41ef3fc7160245342924c2bda10cfd041815e787c8b6148d5451a85e2012fb693f81ad9621b695adfc216312f9694036c662b8701e5ff7dc4072511e89804dff8443f98a633051e671c9be307151d04eb0a96f7ca48266ef357b72cd34989c059d6e4635f00c4c824a977cf3c96897062e5ec44d5fc8f9440b0ef3139a8b28"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf0]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0xb, 0x2, "4a1a"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000900)={0x40, 0x13, 0x6}, &(0x7f0000000940)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000980)={0x40, 0x19, 0x2}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m11.615286634s ago: executing program 4 (id=5447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r3, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m11.484591748s ago: executing program 4 (id=5448): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000980)=@IORING_OP_WRITEV={0x2, 0x1a, 0x6000, @fd=r0, 0x80000001, 0x0, 0x0, 0x0, 0x1, {0x5}}) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 4m11.40783657s ago: executing program 4 (id=5449): syz_emit_vhci(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d", 0x17}], 0x1, &(0x7f0000000940)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x28040854}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getpid() r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2cc, 0x2d, 0x100, 0x70bd2d, 0x0, {0x9}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x2b0, 0x74, 0x0, 0x1, [@typed={0x8, 0x158, 0x0, 0x0, @u32=0xfff}, @typed={0x8, 0x167, 0x0, 0x0, @uid=r5}, @nested={0x19a, 0x10, 0x0, 0x1, [@generic="6bf841b88ab652351511e18663d66ffcf5f68187b7e967a9b0e2425fba6d4d5ad2da57b2ce81a9db5bb8123de3384c003001c5748aa15ccbdb06aeeab1938212e40ad72624a1fe31cd57edc3a2063a5ddc63dcc2aef55dad9fcdff5b94e7bd4db3727c3f15b62b1cb8390c951da447966c4ca05b50cd82f4c51baa11b0a3d5171c6c6b838a68c1dda2ce6649cb276f57fc3bb2a700c15c7fd9", @generic="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"]}, @generic="db64ab0a9cb829da326c9f32abde29c04262ad0ed71686e81176172653a058b520cadbee162be68dbc972c3edb4523738d4784d3932158cf3a061cf9b5c3260e023eae01bf467e197ebc17b2f63ed71eff9ec7e1ca2197b910fbde46e07f5ed736965142ebc3163e8ba894e7561d8e58ad588f107003c48506891dd6", @typed={0x84, 0xa6, 0x0, 0x0, @binary="b3230014bd35a76b35e2595bee1e58fe4b813d4109a3250844733e51a47e440fa770b86b0ef569af30adcfb7841e97d2ab6da71fb048e79c59c4667ea11bbf56a6e3f40fa5b6b465cb2271c6be78ea7ed85354c36c46c8c184531e6e9bcb517568675aef3f48323d7c24795151856457d350fba7b2b0c6548d34d8638b1d1aa5"}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 4m11.246311217s ago: executing program 4 (id=5452): r0 = syz_open_dev$video4linux(&(0x7f0000000500), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc038563b, &(0x7f0000000140)={0x0, 0xfffffffd, 0x0, 0x1}) socket$inet6(0xa, 0x3, 0x3c) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106"], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0285628, &(0x7f0000000300)={0x1, 0x1}) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20005005) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b9", 0xbb}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 3m56.096596569s ago: executing program 33 (id=5452): r0 = syz_open_dev$video4linux(&(0x7f0000000500), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc038563b, &(0x7f0000000140)={0x0, 0xfffffffd, 0x0, 0x1}) socket$inet6(0xa, 0x3, 0x3c) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106"], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0285628, &(0x7f0000000300)={0x1, 0x1}) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20005005) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b9", 0xbb}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 4.608933729s ago: executing program 1 (id=6642): ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x5}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000080)="4d7cef9c330e", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x58, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000002e80)={0x9, 0x2, 0x10000, 0x80000000, 'syz0\x00', 0x9d02}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) 3.877558228s ago: executing program 0 (id=6647): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.506130182s ago: executing program 0 (id=6649): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x9b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x0, 0x16}, @fd, @fda={0x66646185, 0x8, 0x1, 0x2c}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 3.394196438s ago: executing program 0 (id=6651): userfaultfd(0x801) creat(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.811420297s ago: executing program 0 (id=6654): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c00000009000000000000000200080010000000d788000000000000030006000000000002004e20ac141400000000000000000002000100000000000000090000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x60, 0xb1, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="0000000000225c0a8e00158732a911c31e"], 0x7) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x89e0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001200)={0x2c, &(0x7f0000000100)={0x0, 0x3, 0x7c, {0x7c, 0xb, "ed2eda5ad07dc4c432c200efc59a2f27cab282b42fca67f0b8e58033cb9886e339bf3c714d187b747e784336b9f807b578d2cbf5f49c4c9304ac7a1ddaa153489f8df7293410264c111c1142014976c6232db202a8be73297014b219b79c1805adac59718fdbde8c04812a01ebe0cadb6bcc119f630000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.552696636s ago: executing program 3 (id=6656): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x3, 0x4) 2.42564498s ago: executing program 3 (id=6658): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x9, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x24, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104"], 0x1508}}, 0x10) 2.247951823s ago: executing program 3 (id=6659): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x9b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r3, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x0, 0x16}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x8, 0x1, 0x2c}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 2.182576241s ago: executing program 3 (id=6660): userfaultfd(0x801) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.881058044s ago: executing program 1 (id=6662): userfaultfd(0x801) creat(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.756537983s ago: executing program 3 (id=6663): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x6f5e, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0xffffffffffffffff, 0x7, 0xcd, @scatter={0x0, 0x0, 0x0}, &(0x7f00000005c0)="0db7f22ce6bf22", 0x0, 0xffff, 0x0, 0x3, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$inet6(0xa, 0x3, 0xfa) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000003c0)="104b3e34a1aaa2cd8e265c6529e3468a3ebc98f0fa0292b9018331e68d685114bbf7352c704fd36fa4ce6270f2b142999ea496d2d9000000000000002000d314082aeecb4b44813c", 0x48) 1.469621462s ago: executing program 5 (id=6666): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0xc8040, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x300}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) 1.405693159s ago: executing program 5 (id=6667): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10000}, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, r3, 0x9}}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000003, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xf, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x5, 0x4c74, 0x8, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x5, 0x8f, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x8, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e8, 0xc8, 0xf9, 0xe, 0x2bb, 0x2c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4, 0x5, 0x802f, 0xe, 0x312, 0x78, 0xea1, 0x4000, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x7, 0x4e0, 0xb, 0x4, 0xb, 0x4, 0x9, 0x8, 0x4, 0x6, 0x9, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x4, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0xef, 0x5, 0x8, 0x86, 0x3, 0x58000000, 0x3e7, 0xb, 0x2, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0xe2eb, 0x7ff, 0x12b, 0x3, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6e, 0xbb33, 0x7, 0xf, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x338c, 0x3000, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x3, 0x7ff, 0xfffff001, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x6, 0x8, 0x3, 0x226, 0x5, 0x40000040, 0x6, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x3, 0x5, 0x1, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x0) fchdir(r5) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) setsockopt(r0, 0x84, 0xd, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x8) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f00000014c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) 1.368573866s ago: executing program 1 (id=6668): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x9b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r3, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x0, 0x16}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x8, 0x1, 0x2c}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 1.287827959s ago: executing program 1 (id=6669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x169840, 0x40) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040880ff0000000000050002000008000f40fe00000e", 0x24) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x40, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)='gretap0\x00', 0x20c, 0x3, 0x6}) r5 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4, 0x2}, 0x3e) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) getsockopt$inet6_buf(r7, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) 1.152551264s ago: executing program 5 (id=6670): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.120796161s ago: executing program 0 (id=6671): userfaultfd(0x801) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.002824919s ago: executing program 1 (id=6672): syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d00020105e00409f7052400d4137bf1aae76c4e53897209c4fffff5"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000000900010073797a300000000044000000090a0104000000000000000c0dc400000000000040000000030900020073797a31000000000900010073797a3000000000080005400000000405000d402a000000140000001000010000000000000000000084004766f6ee99232327e69cbd708435fd461b2d4443a171522648e4ed7f3c7cf9142c38f5ca306569057022a85bb85c079cce0ad161968ad92133f1fe444a5c92a565292d7914e545f07995c1668a51512b78f2b97a0eb85a9da9a4c330236101e3cf146756217ab42b2eb322"], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040000) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@device_a, @device_b}, {@device_a, @device_b, 0x30, "bc3ba9bf2cdf0bdac11f9b3e28da1882950401ed0e893ab462363595234455eae7a05c2af5b9639ce07f7972dd5e1736"}, {}, {@broadcast, @broadcast, 0x3, "77c80f"}, {@device_a, @broadcast, 0x1b, "84176599d9ebe735b6a38bfb8153a573d8999fc40f8e7e276f28a4"}, {@broadcast, @broadcast, 0x3, "ecacb0"}, {@broadcast, @broadcast}, {@device_a, @device_a, 0x51, "deb7b2bed8aa271c1d3e04a41f1fc4b0144188439eb0b5920985811b84a31329ac39dd5aa1c6730a236a505134963b1a1a3d7e159c6324dbc0a41cef66ea42ba7effa83dfc38c039d600930fae7fd11f9f"}]}, 0x13c) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) lseek(r5, 0xe5, 0x3) bind$l2tp(r5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 652.539058ms ago: executing program 0 (id=6673): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) r3 = fcntl$dupfd(r1, 0x406, r1) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) 565.270052ms ago: executing program 5 (id=6674): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @remote}, {0x6, @broadcast}, 0x24, {0x2, 0x4e24, @multicast1}, 'veth1_to_bond\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @remote}, {0x6, @broadcast}, 0x24, {0x2, 0x4e24, @multicast1}, 'veth1_to_bond\x00'}) socket$packet(0x11, 0x2, 0x300) 323.769382ms ago: executing program 5 (id=6675): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) 144.60273ms ago: executing program 1 (id=6676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000240)={@val={0x3a00, 0x7}, @void, @eth={@empty, @random="8bc6002500", @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x1d) 79.043019ms ago: executing program 5 (id=6677): userfaultfd(0x801) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=6678): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): 5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.237483][ T5702] usb 6-1: Product: syz [ 1064.237548][ T5702] usb 6-1: Manufacturer: syz [ 1064.237563][ T5702] usb 6-1: SerialNumber: syz [ 1064.239514][ T822] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1064.251772][ T5702] usb 6-1: config 0 descriptor?? [ 1064.261568][ T5702] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1064.278583][T10361] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1064.310106][T10361] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1064.310349][T10361] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1064.314113][T10361] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.40 [ 1064.314142][T10361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.314311][T10361] usb 1-1: Product: syz [ 1064.314374][T10361] usb 1-1: Manufacturer: syz [ 1064.314389][T10361] usb 1-1: SerialNumber: syz [ 1064.388174][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 1064.389881][ T822] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 1064.389918][ T822] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1064.389972][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1064.389987][ T822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.390011][ T822] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1064.390023][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.395868][ T822] usb 4-1: config 0 descriptor?? [ 1064.485668][ T822] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input87 [ 1064.677470][T10361] usbhid 1-1:1.0: can't add hid device: -22 [ 1064.677546][T10361] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 1064.687044][T10361] usb 1-1: USB disconnect, device number 51 [ 1064.958347][ T822] usb 4-1: USB disconnect, device number 49 [ 1064.958516][ C1] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1065.579543][ T5702] gspca_sunplus: reg_w_riv err -71 [ 1066.039957][ T4940] usb 2-1: USB disconnect, device number 105 [ 1066.068695][T24176] FAULT_INJECTION: forcing a failure. [ 1066.068695][T24176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.068786][T24176] CPU: 0 UID: 0 PID: 24176 Comm: syz.3.6318 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1066.068814][T24176] Tainted: [L]=SOFTLOCKUP [ 1066.068821][T24176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.068830][T24176] Call Trace: [ 1066.068838][T24176] [ 1066.068845][T24176] dump_stack_lvl+0xe8/0x150 [ 1066.068873][T24176] should_fail_ex+0x46b/0x600 [ 1066.068906][T24176] _copy_to_user+0x31/0xb0 [ 1066.068930][T24176] simple_read_from_buffer+0xe1/0x170 [ 1066.068957][T24176] proc_fail_nth_read+0x1be/0x230 [ 1066.068983][T24176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1066.069008][T24176] ? rw_verify_area+0x2ac/0x4e0 [ 1066.069034][T24176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1066.069058][T24176] vfs_read+0x212/0xa80 [ 1066.069091][T24176] ? __pfx_vfs_read+0x10/0x10 [ 1066.069119][T24176] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1066.069146][T24176] ? lockdep_hardirqs_on+0x7a/0x110 [ 1066.069174][T24176] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1066.069200][T24176] ? mutex_lock_nested+0x152/0x1d0 [ 1066.069221][T24176] ? fdget_pos+0x252/0x320 [ 1066.069250][T24176] ksys_read+0x156/0x270 [ 1066.069279][T24176] ? __pfx_ksys_read+0x10/0x10 [ 1066.069311][T24176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.069333][T24176] do_syscall_64+0x174/0x580 [ 1066.069373][T24176] ? clear_bhb_loop+0x40/0x90 [ 1066.069397][T24176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.069416][T24176] RIP: 0033:0x7f8b8036d68e [ 1066.069434][T24176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1066.069451][T24176] RSP: 002b:00007f8b7e605fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1066.069470][T24176] RAX: ffffffffffffffda RBX: 00007f8b7e6066c0 RCX: 00007f8b8036d68e [ 1066.069483][T24176] RDX: 000000000000000f RSI: 00007f8b7e6060a0 RDI: 0000000000000007 [ 1066.069496][T24176] RBP: 00007f8b7e606090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.069507][T24176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.069518][T24176] R13: 00007f8b80626038 R14: 00007f8b80625fa0 R15: 00007ffff48dc458 [ 1066.069547][T24176] [ 1066.422914][T24185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6322'. [ 1066.424808][T24185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6322'. [ 1066.568184][ T5702] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1066.575135][ T5702] usb 6-1: USB disconnect, device number 51 [ 1066.668321][ T4940] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1066.822036][ T4940] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 1066.822063][ T4940] usb 2-1: config 0 has no interface number 0 [ 1066.822190][ T4940] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1066.825948][ T4940] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1066.825979][ T4940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.826000][ T4940] usb 2-1: Product: syz [ 1066.826015][ T4940] usb 2-1: Manufacturer: syz [ 1066.826030][ T4940] usb 2-1: SerialNumber: syz [ 1066.904461][ T4940] usb 2-1: config 0 descriptor?? [ 1066.905596][T24178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1066.967251][ T4940] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 5e:e6:c0:a7:68:ef [ 1067.360649][T24188] tipc: Started in network mode [ 1067.360669][T24188] tipc: Node identity 4, cluster identity 4711 [ 1067.360681][T24188] tipc: Node number set to 4 [ 1067.445680][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6332'. [ 1067.445759][T24197] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6332'. [ 1067.594380][T24202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.691742][T24202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.121219][ T5719] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1068.308201][ T5719] usb 1-1: device descriptor read/64, error -71 [ 1068.358607][T18472] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1068.430883][T21219] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1068.442520][ T7612] usb 2-1: USB disconnect, device number 106 [ 1068.447506][ T7612] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1068.532490][T18472] usb 6-1: Using ep0 maxpacket: 32 [ 1068.534731][T18472] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.534783][T18472] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1068.534811][T18472] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1068.534838][T18472] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1068.580278][ T5719] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1068.624107][T18472] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1068.624125][T18472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.624137][T18472] usb 6-1: Product: syz [ 1068.624144][T18472] usb 6-1: Manufacturer: syz [ 1068.624152][T18472] usb 6-1: SerialNumber: syz [ 1068.692524][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1068.711000][T21219] usb 4-1: Using ep0 maxpacket: 32 [ 1068.733864][T21219] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 1068.733894][T21219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.775740][T21219] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1068.775771][T21219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.775790][T21219] usb 4-1: Product: syz [ 1068.775805][T21219] usb 4-1: Manufacturer: syz [ 1068.775821][T21219] usb 4-1: SerialNumber: syz [ 1068.776068][ T5719] usb 1-1: device descriptor read/64, error -71 [ 1068.809495][T21219] usb 4-1: config 0 descriptor?? [ 1068.810072][T18472] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input88 [ 1068.847374][T21219] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1068.879821][ T5719] usb usb1-port1: attempt power cycle [ 1069.181609][T18472] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1069.181629][T18472] (id 0x00) [ 1069.279914][ T5719] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1069.299195][ T5719] usb 1-1: device descriptor read/8, error -71 [ 1069.310263][T18472] rc_core: IR keymap rc-imon-pad not found [ 1069.310280][T18472] Registered IR keymap rc-empty [ 1069.310411][T18472] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1069.310429][T18472] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1069.483076][T18472] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1069.550942][ T5719] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1069.568984][ T5719] usb 1-1: device descriptor read/8, error -71 [ 1069.670058][T18472] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input89 [ 1069.678851][ T5719] usb usb1-port1: unable to enumerate USB device [ 1069.742456][T18472] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:52> initialized [ 1069.873413][T24221] imon:vfd_write: invalid payload size [ 1069.875400][T21219] gspca_sunplus: reg_r err -32 [ 1070.438225][ T7612] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1070.591905][ T7612] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 1070.591934][ T7612] usb 2-1: config 128 has no interface number 0 [ 1070.591977][ T7612] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1070.591999][ T7612] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1070.592023][ T7612] usb 2-1: config 128 interface 148 has no altsetting 0 [ 1070.596881][ T7612] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1070.596908][ T7612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.596926][ T7612] usb 2-1: Product: syz [ 1070.596938][ T7612] usb 2-1: Manufacturer: syz [ 1070.596952][ T7612] usb 2-1: SerialNumber: syz [ 1070.886661][ T7612] usb 2-1: USB disconnect, device number 107 [ 1070.948177][T21219] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1070.984233][T21219] usb 4-1: USB disconnect, device number 50 [ 1071.066676][T24257] imon:display_open: display port is already open [ 1071.117884][T18472] usb 6-1: USB disconnect, device number 52 [ 1071.413276][T24292] binder_alloc: 24287: binder_alloc_buf, no vma [ 1071.633783][T24300] netlink: 'syz.3.6337': attribute type 12 has an invalid length. [ 1071.739497][ T38] audit: type=1400 audit(1071.532:4957): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24302 comm="syz.0.6339" [ 1072.120913][T18472] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1072.268153][T18472] usb 1-1: Using ep0 maxpacket: 32 [ 1072.278215][ T5702] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1072.278935][T18472] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1072.279046][T18472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.279068][T18472] usb 1-1: Product: syz [ 1072.279082][T18472] usb 1-1: Manufacturer: syz [ 1072.279096][T18472] usb 1-1: SerialNumber: syz [ 1072.286159][T18472] usb 1-1: config 0 descriptor?? [ 1072.429067][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 1072.431646][ T5702] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 1072.431673][ T5702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.449108][ T5702] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1072.449140][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.449160][ T5702] usb 2-1: Product: syz [ 1072.449175][ T5702] usb 2-1: Manufacturer: syz [ 1072.449189][ T5702] usb 2-1: SerialNumber: syz [ 1072.495634][ T5702] usb 2-1: config 0 descriptor?? [ 1072.532031][ T5702] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1072.743982][T18472] airspy 1-1:0.0: Board ID: 00 [ 1072.744004][T18472] airspy 1-1:0.0: Firmware version: v [ 1073.150151][T18472] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 1073.162438][T18472] airspy 1-1:0.0: Registered as swradio24 [ 1073.162463][T18472] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1073.184757][T18472] usb 1-1: USB disconnect, device number 56 [ 1073.388121][ T5719] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1073.551067][ T5719] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 1073.551097][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.551117][ T5719] usb 4-1: config 0 has no interface number 0 [ 1073.551162][ T5719] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1073.551188][ T5719] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1073.551215][ T5719] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1073.551238][ T5719] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1073.554532][ T5719] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1073.554562][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.554583][ T5719] usb 4-1: Product: syz [ 1073.554597][ T5719] usb 4-1: Manufacturer: syz [ 1073.554612][ T5719] usb 4-1: SerialNumber: syz [ 1073.565780][ T5702] gspca_sunplus: reg_r err -32 [ 1073.628286][ T5719] usb 4-1: config 0 descriptor?? [ 1073.680516][ T5719] symbolserial 4-1:0.175: symbol converter detected [ 1073.720991][ T5719] usb 4-1: symbol converter now attached to ttyUSB0 [ 1074.096230][T10361] usb 4-1: USB disconnect, device number 51 [ 1074.123724][T10361] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1074.125961][T10361] symbolserial 4-1:0.175: device disconnected [ 1074.538299][ T5702] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 1074.551210][ T5702] usb 2-1: USB disconnect, device number 108 [ 1074.644412][T24347] tipc: Started in network mode [ 1074.644426][T24347] tipc: Node identity 4, cluster identity 4711 [ 1074.644434][T24347] tipc: Node number set to 4 [ 1074.848171][ T5719] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1074.880082][ T4940] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1075.038137][ T4940] usb 6-1: Using ep0 maxpacket: 16 [ 1075.038480][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 1075.040732][ T5719] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 1075.040759][ T5719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.041482][ T4940] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1075.043100][ T5719] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1075.043119][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.043138][ T5719] usb 1-1: Product: syz [ 1075.043153][ T5719] usb 1-1: Manufacturer: syz [ 1075.043168][ T5719] usb 1-1: SerialNumber: syz [ 1075.043273][ T4940] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1075.043320][ T4940] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1075.043347][ T4940] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1075.048193][ T4940] usb 6-1: string descriptor 0 read error: -22 [ 1075.048341][ T4940] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1075.048363][ T4940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.341192][ T5719] usb 1-1: config 0 descriptor?? [ 1075.360291][ T5719] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1075.549973][ T4940] logitech 0003:046D:C623.002D: reserved main item tag 0xd [ 1075.550010][ T4940] logitech 0003:046D:C623.002D: unknown global tag 0xc [ 1075.550026][ T4940] logitech 0003:046D:C623.002D: item 0 0 1 12 parsing failed [ 1075.556885][ T4940] logitech 0003:046D:C623.002D: parse failed [ 1075.556994][ T4940] logitech 0003:046D:C623.002D: probe with driver logitech failed with error -22 [ 1075.669610][T24355] netlink: 'syz.1.6350': attribute type 2 has an invalid length. [ 1075.669632][T24355] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6350'. [ 1075.720738][T24344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.722860][T24344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.780825][T24344] netlink: 13572 bytes leftover after parsing attributes in process `syz.5.6347'. [ 1075.792455][ T4940] usb 6-1: USB disconnect, device number 53 [ 1075.869233][ T5719] gspca_sunplus: reg_r err -110 [ 1075.928248][ T37] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1076.086012][T24363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6353'. [ 1076.097420][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 1076.106399][ T37] usb 2-1: config 0 has an invalid descriptor of length 225, skipping remainder of the config [ 1076.106455][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1076.106478][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1076.106494][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1076.145536][ T37] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1076.145568][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1076.145588][ T37] usb 2-1: Product: syz [ 1076.145602][ T37] usb 2-1: Manufacturer: syz [ 1076.145617][ T37] usb 2-1: SerialNumber: syz [ 1076.173904][ T37] usb 2-1: config 0 descriptor?? [ 1076.187423][ T37] usb 2-1: no audio or video endpoints found [ 1076.468357][ T37] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1076.661296][ T37] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1076.661325][ T37] usb 4-1: config 0 has no interface number 0 [ 1076.681741][ T37] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1076.681772][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.681793][ T37] usb 4-1: Product: syz [ 1076.681807][ T37] usb 4-1: Manufacturer: syz [ 1076.681821][ T37] usb 4-1: SerialNumber: syz [ 1076.716325][ T37] usb 4-1: config 0 descriptor?? [ 1076.922633][ T37] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1076.945714][ T37] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1076.946058][ T37] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1076.946925][ T37] usb 4-1: media controller created [ 1076.958410][ T5719] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 1077.014215][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1077.424139][ T37] usb 4-1: USB disconnect, device number 52 [ 1077.448618][ T4940] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1077.598130][ T4940] usb 6-1: Using ep0 maxpacket: 8 [ 1077.600890][ T4940] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.600917][ T4940] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1077.603564][ T4940] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1077.603593][ T4940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.603604][ T4940] usb 6-1: Product: syz [ 1077.603612][ T4940] usb 6-1: Manufacturer: syz [ 1077.603620][ T4940] usb 6-1: SerialNumber: syz [ 1077.923356][ T4940] usb 6-1: 0:1 : does not exist [ 1077.923380][ T4940] usb 6-1: 0:2 : does not exist [ 1077.923457][ T4940] usb 6-1: unit 6 not found! [ 1078.007789][ T4940] usb 6-1: USB disconnect, device number 54 [ 1078.065457][T16629] udevd[16629]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.391381][ T4940] usb 1-1: USB disconnect, device number 57 [ 1078.828184][ T4940] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1078.979767][ T4940] usb 1-1: Using ep0 maxpacket: 32 [ 1078.979889][T10361] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1078.983615][ T4940] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1078.983643][ T4940] usb 1-1: config 0 has no interface number 0 [ 1078.983674][ T4940] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1078.985982][ T4940] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1078.986011][ T4940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.986028][ T4940] usb 1-1: Product: syz [ 1078.986060][ T4940] usb 1-1: Manufacturer: syz [ 1078.986068][ T4940] usb 1-1: SerialNumber: syz [ 1079.085590][ T4940] usb 1-1: config 0 descriptor?? [ 1079.139824][T10361] usb 4-1: Using ep0 maxpacket: 8 [ 1079.141890][T10361] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1079.141918][T10361] usb 4-1: config 179 has no interface number 0 [ 1079.141951][T10361] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1079.142003][T10361] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1079.142019][T10361] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1079.142032][T10361] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1079.142045][T10361] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1079.142070][T10361] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1079.142082][T10361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.172390][T24425] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1079.213347][T10361] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 1079.408268][T10361] usb 4-1: USB disconnect, device number 53 [ 1079.586218][ T4940] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1079.586275][ T4940] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1079.586293][ T4940] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1079.586384][ T4940] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1079.632476][ T4940] usb 1-1: USB disconnect, device number 58 [ 1079.736371][ T822] usb 2-1: USB disconnect, device number 109 [ 1079.827151][T24445] binder: 24444:24445 ioctl c0306201 200000000080 returned -14 [ 1079.837691][T24445] binder: 24444:24445 ioctl c0306201 2000000003c0 returned -14 [ 1079.961559][T24452] netlink: 'syz.1.6366': attribute type 10 has an invalid length. [ 1080.115582][T24457] netlink: 'syz.3.6368': attribute type 2 has an invalid length. [ 1080.115605][T24457] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6368'. [ 1080.173905][ T822] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1080.320727][ T822] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 1080.320755][ T822] usb 6-1: config 128 has no interface number 0 [ 1080.320800][ T822] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1080.320824][ T822] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1080.320860][ T822] usb 6-1: config 128 interface 148 has no altsetting 0 [ 1080.324327][ T822] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1080.324357][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.324377][ T822] usb 6-1: Product: syz [ 1080.324392][ T822] usb 6-1: Manufacturer: syz [ 1080.324406][ T822] usb 6-1: SerialNumber: syz [ 1080.599752][T10361] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1080.689887][ T38] audit: type=1800 audit(1080.462:4958): pid=24464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.6368" name="/tty1" dev="devtmpfs" ino=20 res=0 errno=0 [ 1080.701485][ T822] usb 6-1: USB disconnect, device number 55 [ 1080.772125][T10361] usb 1-1: Using ep0 maxpacket: 32 [ 1080.791898][T10361] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 1080.791928][T10361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.794563][T10361] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1080.794590][T10361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.794601][T10361] usb 1-1: Product: syz [ 1080.794609][T10361] usb 1-1: Manufacturer: syz [ 1080.794617][T10361] usb 1-1: SerialNumber: syz [ 1080.831777][T10361] usb 1-1: config 0 descriptor?? [ 1080.904136][T10361] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1081.712883][T10361] gspca_sunplus: reg_r err -32 [ 1081.930442][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6376'. [ 1081.930459][T24506] netlink: 'syz.3.6376': attribute type 3 has an invalid length. [ 1081.958173][ T822] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1082.099889][ T7612] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1082.141827][ T822] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1082.141856][ T822] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1082.141869][ T822] usb 2-1: config 0 has no interface number 0 [ 1082.144058][ T822] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1082.144083][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.144095][ T822] usb 2-1: Product: syz [ 1082.144102][ T822] usb 2-1: Manufacturer: syz [ 1082.144110][ T822] usb 2-1: SerialNumber: syz [ 1082.147926][ T822] usb 2-1: config 0 descriptor?? [ 1082.168180][ T5719] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1082.217330][ T822] hub 2-1:0.31: bad descriptor, ignoring hub [ 1082.217352][ T822] hub 2-1:0.31: probe with driver hub failed with error -5 [ 1082.248133][ T7612] usb 6-1: Using ep0 maxpacket: 8 [ 1082.252439][ T7612] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1082.252469][ T7612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.252490][ T7612] usb 6-1: Product: syz [ 1082.252504][ T7612] usb 6-1: Manufacturer: syz [ 1082.252519][ T7612] usb 6-1: SerialNumber: syz [ 1082.257693][ T7612] usb 6-1: config 0 descriptor?? [ 1082.320513][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.320541][ T5719] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1082.322589][ T5719] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1082.322620][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1082.322642][ T5719] usb 4-1: SerialNumber: syz [ 1082.375566][ T822] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1082.375648][ T822] uvcvideo 2-1:0.31: No valid video chain found. [ 1082.469091][ T822] usb 2-1: USB disconnect, device number 110 [ 1082.502132][ T7612] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1082.591008][ T5719] usb 4-1: 0:2 : does not exist [ 1082.635379][ T5719] usb 4-1: USB disconnect, device number 54 [ 1082.698301][T10361] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1082.708444][T16629] udevd[16629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1082.773267][T10361] usb 1-1: USB disconnect, device number 59 [ 1083.528206][ T4940] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1083.679015][ T4940] usb 1-1: Using ep0 maxpacket: 16 [ 1083.681953][ T4940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1083.683314][ T4940] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1083.683369][ T4940] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1083.683456][ T4940] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1083.687662][ T4940] usb 1-1: string descriptor 0 read error: -22 [ 1083.687799][ T4940] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1083.687824][ T4940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.038346][ T5702] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1084.178207][ T4940] logitech 0003:046D:C623.002E: reserved main item tag 0xd [ 1084.178248][ T4940] logitech 0003:046D:C623.002E: unknown global tag 0xc [ 1084.178265][ T4940] logitech 0003:046D:C623.002E: item 0 0 1 12 parsing failed [ 1084.179074][ T4940] logitech 0003:046D:C623.002E: parse failed [ 1084.179179][ T4940] logitech 0003:046D:C623.002E: probe with driver logitech failed with error -22 [ 1084.189222][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 1084.190210][ T5702] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1084.242912][ T5702] usb 4-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00 [ 1084.242944][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.248681][ T5702] usb 4-1: config 0 descriptor?? [ 1084.358254][T24502] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6375'. [ 1084.386509][ T7612] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1084.407320][ T7612] usb 6-1: USB disconnect, device number 56 [ 1084.418303][T24519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.430666][T24519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.441478][T24519] netlink: 13572 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1084.445968][ T4940] usb 1-1: USB disconnect, device number 60 [ 1084.693888][ T5702] hid-generic 0003:18D1:5050.002F: collection stack underflow [ 1084.693914][ T5702] hid-generic 0003:18D1:5050.002F: item 0 4 0 12 parsing failed [ 1084.694359][ T5702] hid-generic 0003:18D1:5050.002F: probe with driver hid-generic failed with error -22 [ 1084.798259][ T37] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1084.951216][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1084.951951][ T37] usb 2-1: not running at top speed; connect to a high speed hub [ 1084.952015][ T37] usb 2-1: too many configurations: 192, using maximum allowed: 8 [ 1084.996002][ T37] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=e0.1c [ 1084.996034][ T37] usb 2-1: New USB device strings: Mfr=136, Product=221, SerialNumber=47 [ 1084.996055][ T37] usb 2-1: Product: syz [ 1084.996067][ T37] usb 2-1: Manufacturer: syz [ 1084.996075][ T37] usb 2-1: SerialNumber: syz [ 1085.208753][ T5702] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1085.256605][ T37] usb 2-1: USB disconnect, device number 111 [ 1085.358149][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 1085.360389][ T5702] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 1085.360419][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.362902][ T5702] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1085.362932][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.362947][ T5702] usb 6-1: Product: syz [ 1085.362955][ T5702] usb 6-1: Manufacturer: syz [ 1085.362963][ T5702] usb 6-1: SerialNumber: syz [ 1085.367687][ T5702] usb 6-1: config 0 descriptor?? [ 1085.414475][ T5702] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1085.918609][T24549] comedi comedi0: unsupported base address 0xc [ 1085.932170][T24549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1086.078233][ T4940] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1086.168192][ T37] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1086.193756][ T5702] gspca_sunplus: reg_r err -32 [ 1086.228229][ T4940] usb 2-1: Using ep0 maxpacket: 8 [ 1086.232258][ T4940] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1086.232298][ T4940] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1086.232326][ T4940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1086.232386][ T4940] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1086.232400][ T4940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1086.232414][ T4940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1086.232428][ T4940] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1086.232443][ T4940] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1086.233480][ T4940] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1086.233517][ T4940] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1086.233556][ T4940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1086.233573][ T4940] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1086.233587][ T4940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1086.233601][ T4940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1086.233616][ T4940] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1086.233630][ T4940] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1086.234639][ T4940] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1086.234675][ T4940] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1086.234724][ T4940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1086.234743][ T4940] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1086.234757][ T4940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1086.234772][ T4940] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1086.234785][ T4940] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1086.234801][ T4940] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1086.239685][ T4940] usb 2-1: string descriptor 0 read error: -22 [ 1086.239842][ T4940] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1086.239866][ T4940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.274600][ T4940] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1086.328175][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 1086.333965][ T37] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 1086.333993][ T37] usb 1-1: config 0 has no interface number 0 [ 1086.334039][ T37] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1086.334065][ T37] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024 [ 1086.425763][ T37] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1086.425795][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.425816][ T37] usb 1-1: Product: syz [ 1086.425826][ T37] usb 1-1: Manufacturer: syz [ 1086.425834][ T37] usb 1-1: SerialNumber: syz [ 1086.624613][ T37] usb 1-1: config 0 descriptor?? [ 1086.625699][T24549] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1086.634111][ T5725] usb 2-1: USB disconnect, device number 112 [ 1086.783810][ T4940] usb 4-1: USB disconnect, device number 55 [ 1086.861959][ T37] usb 1-1: USB disconnect, device number 61 [ 1086.903508][T24556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6393'. [ 1086.954495][T24551] adutux: No device or device unplugged -19 [ 1087.168632][ T5702] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1087.176466][ T5702] usb 6-1: USB disconnect, device number 57 [ 1087.278359][ T4940] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1087.367806][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6395'. [ 1087.433961][ T4940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 1087.440961][ T4940] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1087.440993][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.441013][ T4940] usb 4-1: Product: syz [ 1087.441027][ T4940] usb 4-1: Manufacturer: syz [ 1087.441042][ T4940] usb 4-1: SerialNumber: syz [ 1087.446616][ T4940] usb 4-1: config 0 descriptor?? [ 1087.452151][T24558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1087.473965][ T4940] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input90 [ 1087.661496][T24569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.665786][T24569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.692754][T24569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.710014][T24569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.759136][ T5702] usb 4-1: USB disconnect, device number 56 [ 1087.759230][ C0] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 1087.894342][T24575] FAULT_INJECTION: forcing a failure. [ 1087.894342][T24575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.894366][T24575] CPU: 0 UID: 0 PID: 24575 Comm: syz.1.6399 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1087.894381][T24575] Tainted: [L]=SOFTLOCKUP [ 1087.894385][T24575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1087.894392][T24575] Call Trace: [ 1087.894397][T24575] [ 1087.894402][T24575] dump_stack_lvl+0xe8/0x150 [ 1087.894420][T24575] should_fail_ex+0x46b/0x600 [ 1087.894439][T24575] _copy_to_iter+0x404/0x17d0 [ 1087.894450][T24575] ? packet_seq_start+0x64/0x130 [ 1087.894468][T24575] ? __pfx__copy_to_iter+0x10/0x10 [ 1087.894479][T24575] ? traverse+0x544/0x580 [ 1087.894501][T24575] seq_read_iter+0x2ea/0xe20 [ 1087.894521][T24575] ? __asan_memset+0x22/0x50 [ 1087.894535][T24575] seq_read+0x36a/0x490 [ 1087.894549][T24575] ? kstrtoull+0x12f/0x1d0 [ 1087.894567][T24575] ? __pfx_seq_read+0x10/0x10 [ 1087.894587][T24575] ? apparmor_file_permission+0x1f4/0x300 [ 1087.894606][T24575] ? __pfx_seq_read+0x10/0x10 [ 1087.894630][T24575] proc_reg_read+0x1f6/0x2f0 [ 1087.894658][T24575] vfs_readv+0x597/0x850 [ 1087.894679][T24575] ? __pfx_proc_reg_read+0x10/0x10 [ 1087.894705][T24575] ? __pfx_vfs_readv+0x10/0x10 [ 1087.894735][T24575] ? __fget_files+0x2a/0x420 [ 1087.894751][T24575] ? __fget_files+0x3a6/0x420 [ 1087.894762][T24575] ? __fget_files+0x2a/0x420 [ 1087.894778][T24575] __x64_sys_preadv+0x1a2/0x2b0 [ 1087.894796][T24575] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1087.894816][T24575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.894827][T24575] do_syscall_64+0x174/0x580 [ 1087.894843][T24575] ? trace_irq_disable+0x3b/0x140 [ 1087.894856][T24575] ? clear_bhb_loop+0x40/0x90 [ 1087.894869][T24575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.894879][T24575] RIP: 0033:0x7f17dc3ece59 [ 1087.894890][T24575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.894903][T24575] RSP: 002b:00007f17da646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1087.894916][T24575] RAX: ffffffffffffffda RBX: 00007f17dc665fa0 RCX: 00007f17dc3ece59 [ 1087.894924][T24575] RDX: 0000000000000001 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 1087.894931][T24575] RBP: 00007f17da646090 R08: 0000000000000005 R09: 0000000000000000 [ 1087.894938][T24575] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1087.894954][T24575] R13: 00007f17dc666038 R14: 00007f17dc665fa0 R15: 00007ffea2276458 [ 1087.894970][T24575] [ 1088.638260][ T37] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1088.648224][ T5702] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1088.778323][ T5702] usb 4-1: device descriptor read/64, error -71 [ 1088.808231][ T7612] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 1088.809873][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 1088.818771][ T37] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 1088.818797][ T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.821298][ T37] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1088.821326][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.821345][ T37] usb 6-1: Product: syz [ 1088.821360][ T37] usb 6-1: Manufacturer: syz [ 1088.821374][ T37] usb 6-1: SerialNumber: syz [ 1088.832807][ T37] usb 6-1: config 0 descriptor?? [ 1088.844152][ T37] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1088.960240][ T7612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.960262][ T7612] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1088.960289][ T7612] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1088.960353][ T7612] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1088.960366][ T7612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.966815][T24595] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1088.977042][ T7612] hub 1-1:1.0: bad descriptor, ignoring hub [ 1088.977081][ T7612] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1088.982004][ T7612] cdc_wdm 1-1:1.0: skipping garbage [ 1088.982402][ T7612] cdc_wdm 1-1:1.0: skipping garbage [ 1089.018159][ T5702] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1089.032887][ T7612] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1089.032909][ T7612] cdc_wdm 1-1:1.0: Unknown control protocol [ 1089.188828][ T5702] usb 4-1: device descriptor read/64, error -71 [ 1089.244448][T24599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.245368][T24599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.279777][T24600] binder: 24597:24600 ioctl c0306201 200000000080 returned -14 [ 1089.283355][T24600] binder: 24597:24600 ioctl c0306201 2000000003c0 returned -14 [ 1089.300856][ T5702] usb usb4-port1: attempt power cycle [ 1089.616979][ C0] wdm_int_callback: 7262 callbacks suppressed [ 1089.617007][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.617025][ C0] wdm_int_callback: 7262 callbacks suppressed [ 1089.617042][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.618602][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.618618][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.618862][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.618890][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.619121][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.619141][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.619362][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.619380][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.619597][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.619616][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.619841][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.619872][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.620100][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.620120][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.620342][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.620361][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.620581][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1089.620600][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1089.638328][ T5702] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1089.659487][ T5702] usb 4-1: device descriptor read/8, error -71 [ 1089.698266][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1089.711927][ T7612] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1089.713092][ T37] gspca_sunplus: reg_r err -32 [ 1089.868896][ T7612] usb 2-1: Using ep0 maxpacket: 32 [ 1089.869541][ T7612] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 1089.870620][ T7612] usb 2-1: config index 0 descriptor too short (expected 259, got 27) [ 1089.870645][ T7612] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1089.870677][ T7612] usb 2-1: can't read configurations, error -22 [ 1089.977603][ T5702] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1090.004590][ T5702] usb 4-1: device descriptor read/8, error -71 [ 1090.008413][ T7612] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1090.096247][ T5725] usb 1-1: USB disconnect, device number 62 [ 1090.109847][ T5702] usb usb4-port1: unable to enumerate USB device [ 1090.168496][ T7612] usb 2-1: Using ep0 maxpacket: 32 [ 1090.169768][ T7612] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 1090.172231][ T7612] usb 2-1: config index 0 descriptor too short (expected 259, got 27) [ 1090.172257][ T7612] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1090.172285][ T7612] usb 2-1: can't read configurations, error -22 [ 1090.172622][ T7612] usb usb2-port1: attempt power cycle [ 1090.508250][ T7612] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1090.539784][ T7612] usb 2-1: Using ep0 maxpacket: 32 [ 1090.540435][ T7612] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 1090.541480][ T7612] usb 2-1: config index 0 descriptor too short (expected 259, got 27) [ 1090.541503][ T7612] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1090.541536][ T7612] usb 2-1: can't read configurations, error -22 [ 1090.600528][T24608] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1090.679007][ T7612] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1090.705591][ T7612] usb 2-1: Using ep0 maxpacket: 32 [ 1090.706246][ T7612] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 1090.707512][ T7612] usb 2-1: config index 0 descriptor too short (expected 259, got 27) [ 1090.707536][ T7612] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1090.707560][ T7612] usb 2-1: can't read configurations, error -22 [ 1090.707895][ T7612] usb usb2-port1: unable to enumerate USB device [ 1090.838353][ T37] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1090.845259][ T37] usb 6-1: USB disconnect, device number 58 [ 1091.775743][T24626] binder: 24625:24626 ioctl c0306201 200000000080 returned -14 [ 1091.776443][T24626] binder: 24625:24626 ioctl c0306201 2000000003c0 returned -14 [ 1091.999157][ T7612] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1092.179696][ T7612] usb 1-1: Using ep0 maxpacket: 16 [ 1092.184859][ T7612] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1092.186986][ T7612] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1092.187034][ T7612] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1092.187059][ T7612] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1092.239283][ T7612] usb 1-1: string descriptor 0 read error: -22 [ 1092.239417][ T7612] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1092.239440][ T7612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.704777][ T7612] logitech 0003:046D:C623.0030: reserved main item tag 0xd [ 1092.704815][ T7612] logitech 0003:046D:C623.0030: unknown global tag 0xc [ 1092.704831][ T7612] logitech 0003:046D:C623.0030: item 0 0 1 12 parsing failed [ 1092.706044][ T7612] logitech 0003:046D:C623.0030: parse failed [ 1092.706144][ T7612] logitech 0003:046D:C623.0030: probe with driver logitech failed with error -22 [ 1092.808189][ T37] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1092.891003][T24624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.891549][T24624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.893593][ T5725] usb 1-1: USB disconnect, device number 63 [ 1092.918162][ T5719] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1092.965569][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 1092.967360][ T37] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 1092.967386][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.999579][ T37] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1092.999612][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.999632][ T37] usb 4-1: Product: syz [ 1092.999655][ T37] usb 4-1: Manufacturer: syz [ 1092.999670][ T37] usb 4-1: SerialNumber: syz [ 1093.005329][ T37] usb 4-1: config 0 descriptor?? [ 1093.049457][ T37] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1093.098206][ T5719] usb 2-1: device descriptor read/64, error -71 [ 1093.360805][ T5719] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1093.538777][ T5719] usb 2-1: device descriptor read/64, error -71 [ 1093.539642][T24649] binder: 24648:24649 ioctl c0306201 200000000080 returned -14 [ 1093.541066][T24649] binder: 24648:24649 ioctl c0306201 2000000003c0 returned -14 [ 1093.672506][ T5719] usb usb2-port1: attempt power cycle [ 1093.802820][ T37] gspca_sunplus: reg_r err -32 [ 1094.048305][ T5719] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1094.070347][ T5719] usb 2-1: device descriptor read/8, error -71 [ 1094.308377][ T5719] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1094.329775][ T5719] usb 2-1: device descriptor read/8, error -71 [ 1094.438455][ T5719] usb usb2-port1: unable to enumerate USB device [ 1094.562966][T24667] netlink: 'syz.5.6431': attribute type 21 has an invalid length. [ 1094.562990][T24667] netlink: 'syz.5.6431': attribute type 30 has an invalid length. [ 1094.818280][ T37] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1094.841219][ T37] usb 4-1: USB disconnect, device number 61 [ 1095.102414][T24678] binder: 24677:24678 ioctl c0306201 200000000080 returned -14 [ 1095.112239][T24678] binder: 24677:24678 ioctl c0306201 2000000003c0 returned -14 [ 1095.318230][ T37] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1095.478267][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 1095.483382][ T37] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1095.498352][ T37] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1095.498402][ T37] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1095.498432][ T37] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1095.505897][ T37] usb 4-1: string descriptor 0 read error: -22 [ 1095.506043][ T37] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1095.506067][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.588209][ T5725] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1095.748142][ T5725] usb 6-1: Using ep0 maxpacket: 16 [ 1095.750250][ T5725] usb 6-1: config index 0 descriptor too short (expected 64967, got 165) [ 1095.750279][ T5725] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.750300][ T5725] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1095.754083][ T5725] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1095.754111][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.754131][ T5725] usb 6-1: Product: syz [ 1095.754147][ T5725] usb 6-1: Manufacturer: syz [ 1095.754161][ T5725] usb 6-1: SerialNumber: syz [ 1095.779569][ T5725] usb 6-1: 0:2 : does not exist [ 1095.981174][ T5725] usb 6-1: USB disconnect, device number 59 [ 1096.070936][ T37] logitech 0003:046D:C623.0031: reserved main item tag 0xd [ 1096.070977][ T37] logitech 0003:046D:C623.0031: unknown global tag 0xc [ 1096.070997][ T37] logitech 0003:046D:C623.0031: item 0 0 1 12 parsing failed [ 1096.071686][ T37] logitech 0003:046D:C623.0031: parse failed [ 1096.074583][ T37] logitech 0003:046D:C623.0031: probe with driver logitech failed with error -22 [ 1096.246436][T24676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.253102][T24676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.261819][ T5702] usb 4-1: USB disconnect, device number 62 [ 1096.625264][T24698] binder: 24697:24698 ioctl 4018620d 0 returned -22 [ 1096.866701][T24706] binder: 24705:24706 ioctl c0306201 200000000080 returned -14 [ 1096.955270][T24709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6444'. [ 1096.979261][ T37] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1097.128189][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 1097.132996][ T37] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 1097.133024][ T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.136279][ T37] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1097.136309][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.136330][ T37] usb 1-1: Product: syz [ 1097.136346][ T37] usb 1-1: Manufacturer: syz [ 1097.136361][ T37] usb 1-1: SerialNumber: syz [ 1097.203896][ T37] usb 1-1: config 0 descriptor?? [ 1097.219795][ T37] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1097.618250][ T4940] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1097.781302][ T4940] usb 2-1: Using ep0 maxpacket: 32 [ 1097.784063][ T4940] usb 2-1: no configurations [ 1097.784083][ T4940] usb 2-1: can't read configurations, error -22 [ 1097.817820][T24725] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1097.844835][T24725] /dev/nullb0: Can't open blockdev [ 1097.908233][ T4940] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1097.921261][T24726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.092623][ T37] gspca_sunplus: reg_r err -32 [ 1098.101583][ T4940] usb 2-1: Using ep0 maxpacket: 32 [ 1098.102502][ T4940] usb 2-1: no configurations [ 1098.102518][ T4940] usb 2-1: can't read configurations, error -22 [ 1098.103268][ T4940] usb usb2-port1: attempt power cycle [ 1098.442350][ T4940] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1098.458978][ T4940] usb 2-1: Using ep0 maxpacket: 32 [ 1098.459654][ T4940] usb 2-1: no configurations [ 1098.459670][ T4940] usb 2-1: can't read configurations, error -22 [ 1098.588114][ T4940] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1098.610475][ T4940] usb 2-1: Using ep0 maxpacket: 32 [ 1098.617327][ T4940] usb 2-1: no configurations [ 1098.617347][ T4940] usb 2-1: can't read configurations, error -22 [ 1098.618952][ T4940] usb usb2-port1: unable to enumerate USB device [ 1099.208559][ T37] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1099.223633][ T37] usb 1-1: USB disconnect, device number 64 [ 1100.052436][ T5725] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1100.178284][ T4940] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1100.201901][ T5725] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1100.201933][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1100.201944][ T5725] usb 4-1: Product: syz [ 1100.201952][ T5725] usb 4-1: SerialNumber: syz [ 1100.209304][ T5725] usb 4-1: config 0 descriptor?? [ 1100.219754][ T5725] hso 4-1:0.0: Not our interface [ 1100.331256][ T4940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1100.332585][ T4940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.332613][ T4940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1100.335174][ T4940] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1100.335204][ T4940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.335225][ T4940] usb 1-1: Product: syz [ 1100.335240][ T4940] usb 1-1: Manufacturer: syz [ 1100.335252][ T4940] usb 1-1: SerialNumber: syz [ 1100.452557][T24762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6463'. [ 1100.452579][T24762] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1100.455296][T21219] usb 4-1: USB disconnect, device number 63 [ 1100.613682][T24769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.615502][T24769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.919933][ T4940] usb 1-1: selecting invalid altsetting 1 [ 1100.920703][ T4940] usb 1-1: unit 3 not found! [ 1100.922559][ T4940] usb 1-1: cannot request logical cluster ID: 0 (err: -71) [ 1100.922574][ T4940] usb 1-1: invalid MIXER UNIT descriptor 6 [ 1100.948135][ T37] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1100.994691][ T4940] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1101.007448][ T4940] usb 1-1: USB disconnect, device number 65 [ 1101.041343][T16629] udevd[16629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1101.068690][T21219] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1101.098160][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 1101.109875][ T37] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 1101.109906][ T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.117692][ T37] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1101.117714][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.117725][ T37] usb 6-1: Product: syz [ 1101.117736][ T37] usb 6-1: Manufacturer: syz [ 1101.117743][ T37] usb 6-1: SerialNumber: syz [ 1101.168127][ T37] usb 6-1: config 0 descriptor?? [ 1101.177409][ T37] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1101.248240][T21219] usb 2-1: Using ep0 maxpacket: 8 [ 1101.260195][T21219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1101.260262][T21219] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1101.260276][T21219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.281329][T21219] usb 2-1: config 0 descriptor?? [ 1101.358207][T10361] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1101.510244][T10361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1101.510279][T10361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1101.512722][T10361] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1101.512760][T10361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.512780][T10361] usb 4-1: Product: syz [ 1101.512794][T10361] usb 4-1: Manufacturer: syz [ 1101.512809][T10361] usb 4-1: SerialNumber: syz [ 1101.517549][T10361] usb 4-1: config 0 descriptor?? [ 1101.524282][T24785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1101.524800][T24785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1101.586627][T24781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6470'. [ 1101.733818][T24785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.734892][T24785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.847246][T24788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.857225][T24788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.871125][T24785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1101.872998][T24785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1101.905292][ T37] gspca_sunplus: reg_r err -32 [ 1101.959754][T24781] binder: 24780:24781 ioctl 80205871 200000000200 returned -22 [ 1101.964338][T21219] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1102.167190][T21219] usb 2-1: USB disconnect, device number 125 [ 1102.167310][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1102.277247][T10361] Error reading MAC address [ 1102.303191][T10361] usb 4-1: USB disconnect, device number 64 [ 1102.608231][T21219] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1102.738228][T21219] usb 2-1: device descriptor read/64, error -71 [ 1102.798327][T10361] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1102.948194][T10361] usb 1-1: Using ep0 maxpacket: 16 [ 1102.948241][ T37] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1102.954288][T10361] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1102.954313][T10361] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.954332][T10361] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1102.958115][ T37] usb 6-1: USB disconnect, device number 60 [ 1102.958666][T10361] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1102.958707][T10361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.958726][T10361] usb 1-1: Product: syz [ 1102.958740][T10361] usb 1-1: Manufacturer: syz [ 1102.958755][T10361] usb 1-1: SerialNumber: syz [ 1102.978610][T21219] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1103.079979][T10361] usb 1-1: 0:2 : does not exist [ 1103.130652][T21219] usb 2-1: device descriptor read/64, error -71 [ 1103.240737][T21219] usb usb2-port1: attempt power cycle [ 1103.498234][ T37] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1103.528175][T18472] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1103.578233][T21219] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1103.599267][T21219] usb 2-1: device descriptor read/8, error -71 [ 1103.649399][ T37] usb 6-1: not running at top speed; connect to a high speed hub [ 1103.650463][ T37] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1103.652481][ T37] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1103.652507][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.652526][ T37] usb 6-1: Product: й [ 1103.652540][ T37] usb 6-1: Manufacturer: 鐋뮳㚵鰎ᡭȰ뭥쁞⎻宜⋖㰓줭胁ᜯ쏹ᬥᴂ꛳킾翍ᜰ鎊ᮋ鴯絿繋簦飵茬廴쀌䢗ꮫ쉯ꈝꋘ圪ײַ⧪攦僺꘸㱰汗ᝣ赒䃺ћ㞍媛﶑藅씟됳ꚮ᝼踆䴴㙛푯뚁祼懩뻢የᆩ◜髌枧鐮德쩘粲푃쿼梶⍌뺹憣篲칛 [ 1103.652570][ T37] usb 6-1: SerialNumber: ࠒ [ 1103.688193][T18472] usb 4-1: Using ep0 maxpacket: 32 [ 1103.694117][T18472] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.694379][T18472] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1103.694407][T18472] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.694449][T18472] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1103.699567][T18472] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1103.699596][T18472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.700297][T18472] usb 4-1: Product: syz [ 1103.700315][T18472] usb 4-1: Manufacturer: syz [ 1103.700330][T18472] usb 4-1: SerialNumber: syz [ 1103.766829][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1103.782540][T18472] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input91 [ 1103.854782][T21219] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1103.938280][T18472] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1103.938534][T18472] (id 0x00) [ 1103.964917][T10361] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1104.054502][T10361] usb 1-1: USB disconnect, device number 66 [ 1104.105724][T24800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.114434][T24800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.146911][T24800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.156933][T24800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.214795][T18472] rc_core: IR keymap rc-imon-pad not found [ 1104.214815][T18472] Registered IR keymap rc-empty [ 1104.214961][T18472] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1104.214980][T18472] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1104.215751][T18472] imon:send_packet: packet tx failed (-71) [ 1104.258322][T16536] udevd[16536]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1104.260545][T18472] imon 4-1:155.0: remote input dev register failed [ 1104.260690][T18472] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 1104.304372][T21219] usb 2-1: device descriptor read/8, error -71 [ 1104.363453][T24800] virt_wifi0 speed is unknown, defaulting to 1000 [ 1104.422718][T21219] usb usb2-port1: unable to enumerate USB device [ 1104.574001][T18472] imon 4-1:155.0: unable to initialize intf0, err 0 [ 1104.574017][T18472] imon:imon_probe: failed to initialize context! [ 1104.574024][T18472] imon 4-1:155.0: unable to register, err -19 [ 1104.581750][T18472] usb 4-1: USB disconnect, device number 65 [ 1104.718642][T21219] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1104.868255][T10361] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1104.891395][T21219] usb 2-1: Using ep0 maxpacket: 16 [ 1104.894510][T21219] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1104.895776][T21219] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1104.895822][T21219] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1104.895903][T21219] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1104.931574][T21219] usb 2-1: string descriptor 0 read error: -22 [ 1104.931787][T21219] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1104.931860][T21219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.040868][T10361] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 1105.040897][T10361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.040917][T10361] usb 1-1: config 0 has no interface number 0 [ 1105.040969][T10361] usb 1-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1105.040996][T10361] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1105.041022][T10361] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1105.041045][T10361] usb 1-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1105.043984][T10361] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1105.044014][T10361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.044036][T10361] usb 1-1: Product: syz [ 1105.044051][T10361] usb 1-1: Manufacturer: syz [ 1105.044066][T10361] usb 1-1: SerialNumber: syz [ 1105.155465][T10361] usb 1-1: config 0 descriptor?? [ 1105.176575][T10361] symbolserial 1-1:0.175: symbol converter detected [ 1105.194721][T10361] usb 1-1: symbol converter now attached to ttyUSB0 [ 1105.392610][ T5725] usb 1-1: USB disconnect, device number 67 [ 1105.427754][T21219] logitech 0003:046D:C623.0032: reserved main item tag 0xd [ 1105.429172][T21219] logitech 0003:046D:C623.0032: unknown global tag 0xc [ 1105.429192][T21219] logitech 0003:046D:C623.0032: item 0 0 1 12 parsing failed [ 1105.441752][T21219] logitech 0003:046D:C623.0032: parse failed [ 1105.441908][T21219] logitech 0003:046D:C623.0032: probe with driver logitech failed with error -22 [ 1105.481117][ T5725] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1105.482032][ T5725] symbolserial 1-1:0.175: device disconnected [ 1105.603595][T24807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.612098][T24807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.616682][T21219] usb 2-1: USB disconnect, device number 4 [ 1105.810811][ T5725] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1105.980467][ T5725] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 1105.980495][ T5725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.980515][ T5725] usb 1-1: config 0 has no interface number 0 [ 1105.980568][ T5725] usb 1-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1105.980594][ T5725] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1105.980620][ T5725] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1105.980642][ T5725] usb 1-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1105.984182][ T5725] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1105.984214][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.984235][ T5725] usb 1-1: Product: syz [ 1105.984249][ T5725] usb 1-1: Manufacturer: syz [ 1105.984264][ T5725] usb 1-1: SerialNumber: syz [ 1106.048760][ T5725] usb 1-1: config 0 descriptor?? [ 1106.104492][ T5725] symbolserial 1-1:0.175: symbol converter detected [ 1106.117258][ T5725] usb 1-1: symbol converter now attached to ttyUSB0 [ 1106.267842][ T4940] usb 1-1: USB disconnect, device number 68 [ 1106.290131][ T4940] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1106.297497][ T4940] symbolserial 1-1:0.175: device disconnected [ 1106.458259][ T5725] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1106.522940][ T37] cdc_ncm 6-1:1.0: bind() failure [ 1106.562770][ T37] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1106.562817][ T37] cdc_ncm 6-1:1.1: bind() failure [ 1106.594486][ T37] usb 6-1: USB disconnect, device number 61 [ 1106.619750][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 1106.623450][ T5725] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1106.623505][ T5725] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1106.623528][ T5725] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1106.623551][ T5725] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1106.623574][ T5725] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.623612][ T5725] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1106.623635][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.625287][T24827] binder: 24824:24827 ioctl c0306201 200000000080 returned -14 [ 1106.627911][T24827] binder: 24824:24827 ioctl c0306201 2000000003c0 returned -14 [ 1107.081216][ T37] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1107.258160][T21219] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1107.258292][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 1107.261003][ T37] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 1107.261031][ T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.263440][ T37] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1107.263469][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.263488][ T37] usb 6-1: Product: syz [ 1107.263496][ T37] usb 6-1: Manufacturer: syz [ 1107.263504][ T37] usb 6-1: SerialNumber: syz [ 1107.330831][ T37] usb 6-1: config 0 descriptor?? [ 1107.404617][ T37] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1107.483987][T21219] usb 2-1: Using ep0 maxpacket: 32 [ 1107.485950][T21219] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.485998][T21219] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1107.486060][T21219] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1107.486077][T21219] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1107.495947][T21219] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1107.495977][T21219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.495997][T21219] usb 2-1: Product: syz [ 1107.496011][T21219] usb 2-1: Manufacturer: syz [ 1107.496028][T21219] usb 2-1: SerialNumber: syz [ 1107.674455][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1107.860437][T21219] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input93 [ 1107.908420][ T37] gspca_sunplus: reg_r err -110 [ 1107.962418][T21219] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1107.962440][T21219] (id 0x00) [ 1108.168081][T21219] rc_core: IR keymap rc-imon-pad not found [ 1108.168102][T21219] Registered IR keymap rc-empty [ 1108.168172][T21219] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1108.168200][T21219] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1108.169545][T21219] imon:send_packet: packet tx failed (-71) [ 1108.206304][T21219] imon 2-1:155.0: remote input dev register failed [ 1108.206462][T21219] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 1108.331753][T18472] usb 4-1: USB disconnect, device number 66 [ 1108.492485][T21219] imon 2-1:155.0: unable to initialize intf0, err 0 [ 1108.492509][T21219] imon:imon_probe: failed to initialize context! [ 1108.492521][T21219] imon 2-1:155.0: unable to register, err -19 [ 1108.503758][T21219] usb 2-1: USB disconnect, device number 5 [ 1108.636486][T24857] binder: 24856:24857 ioctl c0306201 200000000080 returned -14 [ 1108.637852][T24857] binder: 24856:24857 ioctl c0306201 2000000003c0 returned -14 [ 1108.968184][ T37] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1108.978944][ T37] usb 6-1: USB disconnect, device number 62 [ 1109.021056][T24865] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1109.368310][ T37] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1109.518105][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 1109.525368][ T37] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1109.526982][ T37] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1109.527028][ T37] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1109.527055][ T37] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1109.528099][ T4940] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1109.581962][ T37] usb 6-1: string descriptor 0 read error: -22 [ 1109.582075][ T37] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1109.582089][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.698090][ T4940] usb 1-1: Using ep0 maxpacket: 32 [ 1109.705402][ T4940] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 1109.705432][ T4940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.730048][ T4940] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1109.730072][ T4940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.730093][ T4940] usb 1-1: Product: syz [ 1109.730107][ T4940] usb 1-1: Manufacturer: syz [ 1109.730122][ T4940] usb 1-1: SerialNumber: syz [ 1109.773075][ T4940] usb 1-1: config 0 descriptor?? [ 1109.794375][ T4940] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1110.065669][ T37] logitech 0003:046D:C623.0033: reserved main item tag 0xd [ 1110.065711][ T37] logitech 0003:046D:C623.0033: unknown global tag 0xc [ 1110.065730][ T37] logitech 0003:046D:C623.0033: item 0 0 1 12 parsing failed [ 1110.069157][ T37] logitech 0003:046D:C623.0033: parse failed [ 1110.069264][ T37] logitech 0003:046D:C623.0033: probe with driver logitech failed with error -22 [ 1110.257267][T24855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.267007][T24855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.286759][ T37] usb 6-1: USB disconnect, device number 63 [ 1110.658144][ T5719] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1110.818182][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 1110.825568][ T5719] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.825623][ T5719] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1110.825649][ T5719] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1110.825677][ T5719] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1110.833300][ T4940] gspca_sunplus: reg_r err -32 [ 1110.856619][ T5719] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1110.856650][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.856670][ T5719] usb 4-1: Product: syz [ 1110.856685][ T5719] usb 4-1: Manufacturer: syz [ 1110.856701][ T5719] usb 4-1: SerialNumber: syz [ 1110.928312][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1110.947116][ T5719] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input95 [ 1110.972820][T24885] binder: 24884:24885 ioctl c0306201 200000000080 returned -14 [ 1110.987496][T24885] binder: 24884:24885 ioctl c0306201 2000000003c0 returned -14 [ 1111.218096][ T5719] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1111.218117][ T5719] (id 0x00) [ 1111.571348][ T5719] rc_core: IR keymap rc-imon-pad not found [ 1111.571371][ T5719] Registered IR keymap rc-empty [ 1111.571454][ T5719] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1111.571472][ T5719] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1111.571827][ T5719] imon:send_packet: packet tx failed (-71) [ 1111.615603][ T5719] imon 4-1:155.0: remote input dev register failed [ 1111.615699][ T5719] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 1111.723045][ T5719] imon 4-1:155.0: unable to initialize intf0, err 0 [ 1111.723066][ T5719] imon:imon_probe: failed to initialize context! [ 1111.723079][ T5719] imon 4-1:155.0: unable to register, err -19 [ 1111.749741][ T5719] usb 4-1: USB disconnect, device number 67 [ 1111.809378][ T4940] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1111.821504][ T4940] usb 1-1: USB disconnect, device number 69 [ 1112.128231][T21219] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1112.278097][T21219] usb 6-1: Using ep0 maxpacket: 8 [ 1112.280933][T21219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1112.280983][T21219] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1112.281007][T21219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.324278][T21219] usb 6-1: config 0 descriptor?? [ 1112.542136][T24896] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6508'. [ 1112.972961][T24896] binder: 24891:24896 ioctl 80205871 200000000200 returned -22 [ 1112.992012][T21219] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1113.100070][T10361] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1113.189235][T18472] usb 6-1: USB disconnect, device number 64 [ 1113.189337][ C1] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1113.254563][T10361] usb 2-1: Using ep0 maxpacket: 16 [ 1113.802669][T24924] block device autoloading is deprecated and will be removed. [ 1113.808521][T10361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1113.908167][T10361] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1113.908230][T10361] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1113.908259][T10361] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1113.950594][T10361] usb 2-1: string descriptor 0 read error: -22 [ 1113.950747][T10361] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1113.950770][T10361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.038181][ T4940] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1114.188157][ T4940] usb 4-1: Using ep0 maxpacket: 32 [ 1114.193055][ T4940] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.193117][ T4940] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1114.193526][ T4940] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1114.193556][ T4940] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1114.209896][ T4940] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1114.209929][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.209998][ T4940] usb 4-1: Product: syz [ 1114.210014][ T4940] usb 4-1: Manufacturer: syz [ 1114.210029][ T4940] usb 4-1: SerialNumber: syz [ 1114.212739][ T5725] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1114.292167][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1114.343843][ T4940] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input98 [ 1114.348232][ T5725] usb 6-1: device descriptor read/64, error -71 [ 1114.402623][T10361] logitech 0003:046D:C623.0034: reserved main item tag 0xd [ 1114.402650][T10361] logitech 0003:046D:C623.0034: unknown global tag 0xc [ 1114.402659][T10361] logitech 0003:046D:C623.0034: item 0 0 1 12 parsing failed [ 1114.403183][T10361] logitech 0003:046D:C623.0034: parse failed [ 1114.403239][T10361] logitech 0003:046D:C623.0034: probe with driver logitech failed with error -22 [ 1114.498157][ T4940] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1114.498179][ T4940] (id 0x00) [ 1114.518275][ T5702] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1114.558358][ T4940] rc_core: IR keymap rc-imon-pad not found [ 1114.558372][ T4940] Registered IR keymap rc-empty [ 1114.558424][ T4940] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1114.558434][ T4940] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1114.588214][ T5725] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1114.612285][T24912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.612938][T24912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.616526][ T822] usb 2-1: USB disconnect, device number 6 [ 1114.678724][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 1114.680573][ T5702] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 1114.680606][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.683448][ T5702] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1114.683471][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.683482][ T5702] usb 1-1: Product: syz [ 1114.683490][ T5702] usb 1-1: Manufacturer: syz [ 1114.683779][ T5702] usb 1-1: SerialNumber: syz [ 1114.683955][ T4940] imon:send_packet: packet tx failed (-71) [ 1114.699919][ T4940] imon 4-1:155.0: remote input dev register failed [ 1114.700080][ T4940] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 1114.738132][ T5725] usb 6-1: device descriptor read/64, error -71 [ 1114.784617][ T5702] usb 1-1: config 0 descriptor?? [ 1114.798554][ T5702] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1114.848543][ T5725] usb usb6-port1: attempt power cycle [ 1114.871510][ T4940] imon 4-1:155.0: unable to initialize intf0, err 0 [ 1114.871524][ T4940] imon:imon_probe: failed to initialize context! [ 1114.871530][ T4940] imon 4-1:155.0: unable to register, err -19 [ 1114.883337][ T4940] usb 4-1: USB disconnect, device number 68 [ 1115.344424][ T5725] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 1115.478151][ T5725] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1115.505096][ T5725] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1115.505750][ T5725] usb 6-1: not running at top speed; connect to a high speed hub [ 1115.506938][ T5725] usb 6-1: config 8 has an invalid interface number: 43 but max is 0 [ 1115.507007][ T5725] usb 6-1: config 8 has no interface number 0 [ 1115.507033][ T5725] usb 6-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 1115.507050][ T5725] usb 6-1: config 8 interface 43 has no altsetting 0 [ 1115.568189][ T5725] usb 6-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 1115.568272][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.568294][ T5725] usb 6-1: Product: syz [ 1115.568309][ T5725] usb 6-1: Manufacturer: syz [ 1115.568322][ T5725] usb 6-1: SerialNumber: syz [ 1115.764990][ T5702] gspca_sunplus: reg_r err -32 [ 1115.784087][ T5725] ums-alauda 6-1:8.43: USB Mass Storage device detected [ 1115.805907][ T5725] scsi host1: usb-storage 6-1:8.43 [ 1115.822092][ T5725] usb 6-1: USB disconnect, device number 68 [ 1115.971626][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.971723][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.608345][ T5719] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1116.758408][ T5719] usb 6-1: Using ep0 maxpacket: 16 [ 1116.761422][ T5719] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1116.762582][ T5719] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1116.762688][ T5719] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1116.762721][ T5719] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1116.765727][ T5719] usb 6-1: string descriptor 0 read error: -22 [ 1116.765849][ T5719] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1116.765862][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.808196][ T5702] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1116.816601][ T5702] usb 1-1: USB disconnect, device number 70 [ 1116.988232][T18472] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1117.148130][T18472] usb 2-1: Using ep0 maxpacket: 32 [ 1117.171197][T18472] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.171252][T18472] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1117.171334][T18472] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1117.171362][T18472] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1117.198918][T18472] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1117.198949][T18472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.199017][T18472] usb 2-1: Product: syz [ 1117.199032][T18472] usb 2-1: Manufacturer: syz [ 1117.199047][T18472] usb 2-1: SerialNumber: syz [ 1117.245274][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1117.296468][ T5719] logitech 0003:046D:C623.0035: reserved main item tag 0xd [ 1117.296494][ T5719] logitech 0003:046D:C623.0035: unknown global tag 0xc [ 1117.296503][ T5719] logitech 0003:046D:C623.0035: item 0 0 1 12 parsing failed [ 1117.296909][ T5719] logitech 0003:046D:C623.0035: parse failed [ 1117.296965][ T5719] logitech 0003:046D:C623.0035: probe with driver logitech failed with error -22 [ 1117.315408][T18472] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input100 [ 1117.438148][T18472] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1117.438169][T18472] (id 0x00) [ 1117.506255][ T5702] usb 6-1: USB disconnect, device number 69 [ 1117.571172][T18472] rc_core: IR keymap rc-imon-pad not found [ 1117.571186][T18472] Registered IR keymap rc-empty [ 1117.571239][T18472] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1117.571250][T18472] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1117.621135][T18472] imon:send_packet: packet tx failed (-71) [ 1117.638863][T18472] imon 2-1:155.0: remote input dev register failed [ 1117.639020][T18472] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 1117.760919][T18472] imon 2-1:155.0: unable to initialize intf0, err 0 [ 1117.760935][T18472] imon:imon_probe: failed to initialize context! [ 1117.760942][T18472] imon 2-1:155.0: unable to register, err -19 [ 1117.767411][T18472] usb 2-1: USB disconnect, device number 7 [ 1117.878201][ T5725] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1118.032515][ T5725] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1118.032546][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.032568][ T5725] usb 1-1: Product: syz [ 1118.032582][ T5725] usb 1-1: Manufacturer: syz [ 1118.032592][ T5725] usb 1-1: SerialNumber: syz [ 1118.036851][ T5725] usb 1-1: config 0 descriptor?? [ 1118.254690][ T5725] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 1118.254718][ T5725] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1118.254753][ T5725] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 1118.327769][ T5725] usb 1-1: USB disconnect, device number 71 [ 1118.488210][ T5719] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1118.637679][T24997] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1118.637700][T24997] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1118.648123][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 1118.659445][ T5719] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1118.659474][ T5719] usb 2-1: config 2 has no interface number 0 [ 1118.659521][ T5719] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1118.662598][ T5719] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1118.662630][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.662651][ T5719] usb 2-1: Product: syz [ 1118.662665][ T5719] usb 2-1: Manufacturer: syz [ 1118.662680][ T5719] usb 2-1: SerialNumber: syz [ 1119.524146][ T5719] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 1119.529678][ T5719] usb 2-1: USB disconnect, device number 8 [ 1119.579694][ T37] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1119.738132][ T5725] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1119.748204][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 1119.750316][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1119.751440][ T37] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1119.751550][ T37] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1119.751579][ T37] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1119.754626][ T37] usb 1-1: string descriptor 0 read error: -22 [ 1119.754745][ T37] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1119.754759][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.898201][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 1119.900322][ T5725] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.900375][ T5725] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1119.900401][ T5725] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1119.900428][ T5725] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1119.902816][ T5725] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1119.902844][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.902865][ T5725] usb 4-1: Product: syz [ 1119.902880][ T5725] usb 4-1: Manufacturer: syz [ 1119.902895][ T5725] usb 4-1: SerialNumber: syz [ 1120.000744][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1120.004355][ T5725] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input102 [ 1120.168158][ T5725] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1120.168179][ T5725] (id 0x00) [ 1120.213853][ T37] usbhid 1-1:1.0: can't add hid device: -71 [ 1120.213940][ T37] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1120.243383][ T37] usb 1-1: USB disconnect, device number 72 [ 1120.269740][ T5725] rc_core: IR keymap rc-imon-pad not found [ 1120.269761][ T5725] Registered IR keymap rc-empty [ 1120.269840][ T5725] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1120.269858][ T5725] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1120.352341][ T5725] imon:send_packet: packet tx failed (-71) [ 1120.368590][ T5725] imon 4-1:155.0: remote input dev register failed [ 1120.368754][ T5725] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 1120.447428][T25024] 9pnet_fd: p9_fd_create_tcp (25024): problem connecting socket to 127.0.0.1 [ 1120.482245][ T5725] imon 4-1:155.0: unable to initialize intf0, err 0 [ 1120.482259][ T5725] imon:imon_probe: failed to initialize context! [ 1120.482266][ T5725] imon 4-1:155.0: unable to register, err -19 [ 1120.496461][ T5725] usb 4-1: USB disconnect, device number 69 [ 1120.904941][T25039] 9p: Bad value for 'rfdno' [ 1121.068479][ T5702] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1121.218197][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 1121.220778][ T5702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.223864][ T5702] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1121.223894][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.223914][ T5702] usb 2-1: Product: syz [ 1121.223929][ T5702] usb 2-1: Manufacturer: syz [ 1121.223943][ T5702] usb 2-1: SerialNumber: syz [ 1121.232390][ T5702] usb 2-1: config 0 descriptor?? [ 1121.241829][ T5702] cdc_ether 2-1:0.0: skipping garbage [ 1121.241852][ T5702] cdc_ether 2-1:0.0: missing cdc header descriptor [ 1121.243849][ T5702] usb 2-1: unsupported MDLM descriptors [ 1121.608155][ T5719] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1121.774729][ T5719] usb 6-1: Using ep0 maxpacket: 16 [ 1121.780505][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.780539][ T5719] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1121.780580][ T5719] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1121.780604][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.836445][ T5719] usb 6-1: config 0 descriptor?? [ 1122.105773][T25061] netlink: 'syz.0.6565': attribute type 10 has an invalid length. [ 1122.276165][ T5719] microsoft 0003:045E:07DA.0036: ignoring exceeding usage max [ 1122.333160][ T5719] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0036/input/input104 [ 1122.466747][ T5719] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1122.520021][ T5719] usb 6-1: USB disconnect, device number 70 [ 1122.560033][ T4940] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1122.575151][T25070] fido_id[25070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1122.708230][ T4940] usb 1-1: Using ep0 maxpacket: 16 [ 1122.712683][ T4940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1122.713839][ T4940] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1122.713892][ T4940] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1122.713920][ T4940] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1122.719111][ T4940] usb 1-1: string descriptor 0 read error: -22 [ 1122.719244][ T4940] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1122.719268][ T4940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.193080][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 1123.204818][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1123.204998][ T4940] usbhid 1-1:1.0: can't add hid device: -32 [ 1123.205113][ T4940] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 1123.213683][ T4940] usb 1-1: USB disconnect, device number 73 [ 1123.851799][ T5725] usb 2-1: USB disconnect, device number 9 [ 1123.918396][T25090] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 1124.016075][T25096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6574'. [ 1124.858717][ T4940] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1125.038184][ T4940] usb 1-1: Using ep0 maxpacket: 16 [ 1125.040710][ T4940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1125.041941][ T4940] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1125.041996][ T4940] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1125.042025][ T4940] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1125.046191][ T4940] usb 1-1: string descriptor 0 read error: -22 [ 1125.046301][ T4940] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1125.046314][ T4940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.168172][T21219] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1125.318484][T21219] usb 2-1: Using ep0 maxpacket: 8 [ 1125.321320][T21219] usb 2-1: config 0 has no interfaces? [ 1125.339377][T21219] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 1125.339410][T21219] usb 2-1: New USB device strings: Mfr=1, Product=1, SerialNumber=3 [ 1125.339439][T21219] usb 2-1: Product: syz [ 1125.339454][T21219] usb 2-1: Manufacturer: syz [ 1125.339469][T21219] usb 2-1: SerialNumber: syz [ 1125.384652][T21219] usb 2-1: config 0 descriptor?? [ 1125.485816][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1125.485981][ T4940] usbhid 1-1:1.0: can't add hid device: -32 [ 1125.486096][ T4940] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 1125.491852][ T4940] usb 1-1: USB disconnect, device number 74 [ 1125.607530][T21219] usb 2-1: USB disconnect, device number 10 [ 1125.968301][T18472] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1126.128152][T18472] usb 4-1: Using ep0 maxpacket: 16 [ 1126.156440][T18472] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1126.161632][T18472] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1126.175846][T18472] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 1126.175873][T18472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.175884][T18472] usb 4-1: Product: syz [ 1126.175892][T18472] usb 4-1: Manufacturer: syz [ 1126.175900][T18472] usb 4-1: SerialNumber: syz [ 1126.561175][T25135] program syz.3.6588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1126.647869][T18472] usbhid 4-1:1.0: can't add hid device: -71 [ 1126.655840][T18472] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1126.688339][T18472] usb 4-1: USB disconnect, device number 70 [ 1126.936221][T25143] comedi comedi3: comedi_config --init_data is deprecated [ 1127.268164][ T5725] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1127.418138][ T5725] usb 1-1: Using ep0 maxpacket: 32 [ 1127.420147][ T5725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.420174][ T5725] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1127.420221][ T5725] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1127.420235][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.424822][ T5725] usb 1-1: config 0 descriptor?? [ 1127.638179][T18472] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1127.768304][ T4940] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1127.800598][T18472] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1127.801746][T18472] usb 2-1: config 3 has an invalid interface number: 173 but max is 0 [ 1127.801773][T18472] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.801801][T18472] usb 2-1: config 3 has no interface number 0 [ 1127.801848][T18472] usb 2-1: config 3 interface 173 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1127.801871][T18472] usb 2-1: config 3 interface 173 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 1127.801898][T18472] usb 2-1: config 3 interface 173 has no altsetting 0 [ 1127.804077][T18472] usb 2-1: New USB device found, idVendor=0543, idProduct=1923, bcdDevice=d6.32 [ 1127.804105][T18472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.804125][T18472] usb 2-1: Product: syz [ 1127.804139][T18472] usb 2-1: Manufacturer: syz [ 1127.804153][T18472] usb 2-1: SerialNumber: syz [ 1127.918092][ T4940] usb 6-1: Using ep0 maxpacket: 16 [ 1127.921498][ T4940] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1127.922859][ T4940] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1127.922907][ T4940] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1127.922936][ T4940] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1127.926239][ T4940] usb 6-1: string descriptor 0 read error: -22 [ 1127.926388][ T4940] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1127.926413][ T4940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.052262][T25151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.053374][T25151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.093148][T18472] usb 2-1: USB disconnect, device number 11 [ 1128.592155][ T4940] usbhid 6-1:1.0: can't add hid device: -71 [ 1128.592242][ T4940] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1128.603808][ T4940] usb 6-1: USB disconnect, device number 71 [ 1128.926326][T25167] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 1129.016110][T25168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1130.058290][ T5725] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1130.072301][T18472] usb 1-1: USB disconnect, device number 75 [ 1130.237164][ T5725] usb 6-1: Using ep0 maxpacket: 32 [ 1130.252206][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.252239][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.252271][ T5725] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1130.252284][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.287506][ T5725] usb 6-1: config 0 descriptor?? [ 1130.438263][ T4940] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1130.448312][T10361] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1130.628162][T10361] usb 4-1: Using ep0 maxpacket: 8 [ 1130.628358][ T4940] usb 2-1: Using ep0 maxpacket: 16 [ 1130.631048][ T4940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.631998][T10361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1130.633917][T10361] usb 4-1: config 208 has an invalid interface number: 35 but max is 2 [ 1130.633939][T10361] usb 4-1: config 208 has an invalid interface number: 203 but max is 2 [ 1130.633951][T10361] usb 4-1: config 208 contains an unexpected descriptor of type 0x2, skipping [ 1130.633960][T10361] usb 4-1: config 208 has an invalid interface number: 16 but max is 2 [ 1130.633971][T10361] usb 4-1: config 208 contains an unexpected descriptor of type 0x2, skipping [ 1130.633982][T10361] usb 4-1: config 208 has no interface number 0 [ 1130.633992][T10361] usb 4-1: config 208 has no interface number 1 [ 1130.634000][T10361] usb 4-1: config 208 has no interface number 2 [ 1130.634113][T10361] usb 4-1: config 208 interface 35 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1130.634130][T10361] usb 4-1: config 208 interface 35 altsetting 1 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1130.634145][T10361] usb 4-1: config 208 interface 35 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 1130.634250][T10361] usb 4-1: config 208 interface 35 altsetting 1 endpoint 0x7 has invalid maxpacket 1608, setting to 64 [ 1130.634281][T10361] usb 4-1: config 208 interface 35 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1130.634353][T10361] usb 4-1: config 208 interface 35 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 1130.634563][ T4940] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1130.634584][ T4940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.634595][ T4940] usb 2-1: Product: syz [ 1130.634603][ T4940] usb 2-1: Manufacturer: syz [ 1130.634649][ T4940] usb 2-1: SerialNumber: syz [ 1130.634834][T10361] usb 4-1: config 208 interface 203 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1130.634857][T10361] usb 4-1: config 208 interface 203 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1130.634888][T10361] usb 4-1: config 208 interface 203 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 1130.634952][T10361] usb 4-1: config 208 interface 203 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1130.634965][T10361] usb 4-1: config 208 interface 203 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 1130.634978][T10361] usb 4-1: config 208 interface 203 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1130.634992][T10361] usb 4-1: config 208 interface 203 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1130.635012][T10361] usb 4-1: config 208 interface 16 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 1130.635025][T10361] usb 4-1: config 208 interface 16 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 1130.635037][T10361] usb 4-1: config 208 interface 16 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1130.635048][T10361] usb 4-1: config 208 interface 16 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1130.635060][T10361] usb 4-1: config 208 interface 16 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1130.635257][T10361] usb 4-1: config 208 interface 16 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1130.635270][T10361] usb 4-1: config 208 interface 16 altsetting 7 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1130.635283][T10361] usb 4-1: config 208 interface 16 altsetting 7 has a duplicate endpoint with address 0x8E, skipping [ 1130.635295][T10361] usb 4-1: config 208 interface 16 altsetting 7 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1130.635309][T10361] usb 4-1: config 208 interface 35 has no altsetting 0 [ 1130.635319][T10361] usb 4-1: config 208 interface 203 has no altsetting 0 [ 1130.635328][T10361] usb 4-1: config 208 interface 16 has no altsetting 0 [ 1130.643734][T10361] usb 4-1: Dual-Role OTG device on HNP port [ 1130.645162][T10361] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=8e.6d [ 1130.645191][T10361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.645211][T10361] usb 4-1: Product: syz [ 1130.645225][T10361] usb 4-1: Manufacturer: syz [ 1130.645780][T10361] usb 4-1: SerialNumber: syz [ 1130.671210][ T4940] usb 2-1: config 0 descriptor?? [ 1130.704945][T25193] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1130.926782][ T4940] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1130.926873][ T4940] imon 2-1:0.0: unable to initialize intf0, err -19 [ 1130.926891][ T4940] imon:imon_probe: failed to initialize context! [ 1130.926910][ T4940] imon 2-1:0.0: unable to register, err -19 [ 1131.125569][ T4940] usb 2-1: USB disconnect, device number 12 [ 1131.184998][ T5725] savu 0003:1E7D:2D5A.0037: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1131.213017][ T5725] usb 6-1: USB disconnect, device number 72 [ 1131.350085][T10361] usb 4-1: USB disconnect, device number 71 [ 1131.359860][T25202] fido_id[25202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1131.492208][ T4940] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1131.641822][ T4940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.662195][ T4940] usb 2-1: New USB device found, idVendor=2040, idProduct=7281, bcdDevice=1f.13 [ 1131.662227][ T4940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.662247][ T4940] usb 2-1: Product: syz [ 1131.662260][ T4940] usb 2-1: Manufacturer: syz [ 1131.662268][ T4940] usb 2-1: SerialNumber: syz [ 1131.697405][ T4940] usb 2-1: config 0 descriptor?? [ 1131.794176][T25210] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 1131.905992][T25212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6617'. [ 1131.924759][T25194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.925390][T25194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.497040][T25220] binder: 25219:25220 ioctl c0306201 2000000003c0 returned -14 [ 1132.499088][T18472] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1132.648164][T18472] usb 4-1: Using ep0 maxpacket: 8 [ 1132.652464][T18472] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1132.652546][T18472] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 1132.669644][T18472] usb 4-1: config 0 has no interfaces? [ 1132.682193][T18472] usb 4-1: config 0 has no interfaces? [ 1132.683815][T18472] usb 4-1: config 0 has no interfaces? [ 1132.685758][T18472] usb 4-1: config 0 has no interfaces? [ 1132.687560][T18472] usb 4-1: config 0 has no interfaces? [ 1132.719384][T18472] usb 4-1: config 0 has no interfaces? [ 1132.720818][T18472] usb 4-1: config 0 has no interfaces? [ 1132.722686][T18472] usb 4-1: config 0 has no interfaces? [ 1132.747716][T18472] usb 4-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59 [ 1132.747749][T18472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.747778][T18472] usb 4-1: Product: syz [ 1132.747793][T18472] usb 4-1: Manufacturer: syz [ 1132.747808][T18472] usb 4-1: SerialNumber: syz [ 1132.793705][T18472] usb 4-1: config 0 descriptor?? [ 1133.010362][ T5725] usb 4-1: USB disconnect, device number 72 [ 1133.112669][ T4940] au0828: au0828: Device initialization failed. [ 1133.112681][ T4940] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 1133.147851][ T4940] usb 2-1: USB disconnect, device number 13 [ 1133.558350][T25235] sg_write: data in/out 504197/136 bytes for SCSI command 0x0-- guessing data in; [ 1133.558350][T25235] program syz.0.6627 not setting count and/or reply_len properly [ 1133.608223][ T4940] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 1133.694917][T25238] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6628'. [ 1133.695941][T25238] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6628'. [ 1133.719494][T18472] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1133.775538][ T4940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 1133.775575][ T4940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1133.775622][ T4940] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1133.775656][ T4940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.825128][ T4940] usb 2-1: config 0 descriptor?? [ 1133.825901][T25230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1133.888800][T18472] usb 6-1: Using ep0 maxpacket: 16 [ 1133.892028][T18472] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.892054][T18472] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1133.894868][T18472] usb 6-1: string descriptor 0 read error: -71 [ 1133.895001][T18472] usb 6-1: New USB device found, idVendor=04e8, idProduct=a10f, bcdDevice= 4.48 [ 1133.895024][T18472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.916489][T18472] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1133.916516][T18472] usb 6-1: no configuration chosen from 1 choice [ 1133.922801][T18472] usb 6-1: USB disconnect, device number 73 [ 1133.948187][ T5719] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1134.078207][ T5719] usb 4-1: device descriptor read/64, error -71 [ 1134.186795][T25243] binder: BINDER_SET_CONTEXT_MGR already set [ 1134.186812][T25243] binder: 25242:25243 ioctl 4018620d 200000000040 returned -16 [ 1134.241231][T25230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.242039][T25230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.253326][T25230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.253933][T25230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.265440][T25230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.266058][T25230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.278789][ T4940] hid (null): bogus close delimiter [ 1134.305464][ T4940] hid_parser_main: 12 callbacks suppressed [ 1134.305759][ T4940] razer 0003:1532:010E.0038: unknown main item tag 0x2 [ 1134.305793][ T4940] razer 0003:1532:010E.0038: bogus close delimiter [ 1134.305807][ T4940] razer 0003:1532:010E.0038: item 0 0 2 10 parsing failed [ 1134.306557][ T4940] razer 0003:1532:010E.0038: probe with driver razer failed with error -22 [ 1134.318226][ T5719] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1134.377569][T25247] netlink: 'syz.0.6632': attribute type 1 has an invalid length. [ 1134.377582][T25247] netlink: 'syz.0.6632': attribute type 3 has an invalid length. [ 1134.377589][T25247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6632'. [ 1134.449781][ T5719] usb 4-1: device descriptor read/64, error -71 [ 1134.494514][ T4940] usb 2-1: USB disconnect, device number 14 [ 1134.559871][ T5719] usb usb4-port1: attempt power cycle [ 1134.763832][T21219] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1134.908138][T21219] usb 6-1: Using ep0 maxpacket: 16 [ 1134.911666][T21219] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1134.912836][T21219] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1134.912914][T21219] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1134.912943][T21219] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1134.917010][T21219] usb 6-1: string descriptor 0 read error: -22 [ 1134.917154][T21219] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1134.917178][T21219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.919126][ T5719] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1134.940201][ T5719] usb 4-1: device descriptor read/8, error -71 [ 1135.202104][ T5719] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1135.242326][ T5719] usb 4-1: device descriptor read/8, error -71 [ 1135.358796][ T5719] usb usb4-port1: unable to enumerate USB device [ 1135.565220][T21219] usbhid 6-1:1.0: can't add hid device: -71 [ 1135.565346][T21219] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1135.576099][T21219] usb 6-1: USB disconnect, device number 74 [ 1135.640104][T25264] binder: BINDER_SET_CONTEXT_MGR already set [ 1135.640120][T25264] binder: 25263:25264 ioctl 4018620d 200000000040 returned -16 [ 1136.050735][T10361] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1136.199525][T10361] usb 2-1: Using ep0 maxpacket: 8 [ 1136.204596][T10361] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 1136.204623][T10361] usb 2-1: config 0 has no interface number 0 [ 1136.204654][T10361] usb 2-1: too many endpoints for config 0 interface 253 altsetting 13: 94, using maximum allowed: 30 [ 1136.204689][T10361] usb 2-1: config 0 interface 253 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 94 [ 1136.204715][T10361] usb 2-1: config 0 interface 253 has no altsetting 0 [ 1136.214577][T10361] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1136.214608][T10361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.214630][T10361] usb 2-1: Product: syz [ 1136.214645][T10361] usb 2-1: Manufacturer: syz [ 1136.214660][T10361] usb 2-1: SerialNumber: syz [ 1136.307874][T10361] usb 2-1: config 0 descriptor?? [ 1136.548153][T10361] gspca_main: se401-2.14.0 probing 047d:5003 [ 1136.936052][T25291] binder: BINDER_SET_CONTEXT_MGR already set [ 1136.936070][T25291] binder: 25290:25291 ioctl 4018620d 200000000040 returned -16 [ 1137.188680][T10361] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 1137.890142][T21219] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1137.920690][T10361] usb 2-1: failed to restore interface 253 altsetting 13 (error=-71) [ 1137.977184][T10361] gspca_se401: read req failed req 0x06 error -19 [ 1137.990243][T10361] usb 2-1: USB disconnect, device number 15 [ 1138.046643][T25315] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.6658'. [ 1138.048387][T21219] usb 1-1: Using ep0 maxpacket: 16 [ 1138.063620][T21219] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1138.064869][T21219] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1138.064917][T21219] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1138.064946][T21219] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1138.078549][T21219] usb 1-1: string descriptor 0 read error: -22 [ 1138.078710][T21219] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1138.078733][T21219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.182320][T25318] binder: 25317:25318 ioctl c0306201 200000000080 returned -14 [ 1138.184494][T25318] binder: 25317:25318 ioctl c0306201 2000000003c0 returned -14 [ 1138.506504][T25324] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6661'. [ 1138.514406][T21219] logitech 0003:046D:C623.0039: reserved main item tag 0xd [ 1138.514443][T21219] logitech 0003:046D:C623.0039: unknown global tag 0xc [ 1138.514455][T21219] logitech 0003:046D:C623.0039: item 0 0 1 12 parsing failed [ 1138.517668][T21219] logitech 0003:046D:C623.0039: parse failed [ 1138.517761][T21219] logitech 0003:046D:C623.0039: probe with driver logitech failed with error -22 [ 1138.716292][ T5719] usb 1-1: USB disconnect, device number 76 [ 1138.949150][T21219] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1139.065949][T25340] binder: 25339:25340 ioctl c0306201 200000000080 returned -14 [ 1139.067735][T25340] binder: 25339:25340 ioctl c0306201 2000000003c0 returned -14 [ 1139.098150][T21219] usb 4-1: Using ep0 maxpacket: 32 [ 1139.105735][T21219] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.105786][T21219] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1139.105813][T21219] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1139.105904][T21219] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1139.110395][T21219] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1139.110425][T21219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.110446][T21219] usb 4-1: Product: syz [ 1139.110461][T21219] usb 4-1: Manufacturer: syz [ 1139.110475][T21219] usb 4-1: SerialNumber: syz [ 1139.167725][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1139.183332][T21219] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input105 [ 1139.400221][T21219] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1139.400235][T21219] (id 0x00) [ 1139.498442][T21219] rc_core: IR keymap rc-imon-pad not found [ 1139.498464][T21219] Registered IR keymap rc-empty [ 1139.498540][T21219] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1139.498558][T21219] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1139.573427][T25353] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6672'. [ 1139.590580][T21219] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1139.592939][T21219] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input106 [ 1139.597434][T21219] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:77> initialized [ 1139.645366][T25354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.773955][T25329] imon:vfd_write: invalid payload size [ 1139.778100][T21219] usb 4-1: USB disconnect, device number 77 [ 1139.826824][T25356] loop7: detected capacity change from 0 to 7 [ 1139.951378][T25359] dvmrp8: entered allmulticast mode [ 1140.295686][T25356] Dev loop7: unable to read RDB block 7 [ 1140.295725][T25356] loop7: unable to read partition table [ 1140.337887][T25356] loop7: partition table beyond EOD, truncated [ 1140.337928][T25356] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1140.485687][T25356] [ 1140.485699][T25356] ====================================================== [ 1140.485707][T25356] WARNING: possible circular locking dependency detected [ 1140.485722][T25356] syzkaller #0 Tainted: G L [ 1140.485733][T25356] ------------------------------------------------------ [ 1140.485741][T25356] syz.0.6673/25356 is trying to acquire lock: [ 1140.485752][T25356] ffff888076fd3138 ((wq_completion)loop7){+.+.}-{0:0}, at: touch_wq_lockdep_map+0xb5/0x180 [ 1140.485798][T25356] [ 1140.485798][T25356] but task is already holding lock: [ 1140.485805][T25356] ffff88802718f4c8 (&disk->open_mutex#4){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 1140.485856][T25356] [ 1140.485856][T25356] which lock already depends on the new lock. [ 1140.485856][T25356] [ 1140.485862][T25356] [ 1140.485862][T25356] the existing dependency chain (in reverse order) is: [ 1140.485870][T25356] [ 1140.485870][T25356] -> #7 (&disk->open_mutex#4){+.+.}-{4:4}: [ 1140.485898][T25356] mutex_lock_nested+0x5a/0x1d0 [ 1140.485918][T25356] __del_gendisk+0x127/0x980 [ 1140.485937][T25356] del_gendisk+0xe7/0x160 [ 1140.485954][T25356] loop_remove+0x42/0xc0 [ 1140.485976][T25356] loop_control_ioctl+0x4ba/0x5b0 [ 1140.485998][T25356] __se_sys_ioctl+0xff/0x170 [ 1140.486021][T25356] do_syscall_64+0x174/0x580 [ 1140.486047][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.486064][T25356] [ 1140.486064][T25356] -> #6 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1140.486089][T25356] down_read+0x97/0x200 [ 1140.486168][T25356] add_disk_fwnode+0xe7/0x480 [ 1140.486184][T25356] loop_add+0x86e/0xb50 [ 1140.486202][T25356] blk_request_module+0x27d/0x2a0 [ 1140.486219][T25356] blkdev_get_no_open+0x3f/0xe0 [ 1140.486242][T25356] blkdev_open+0x1f5/0x620 [ 1140.486257][T25356] do_dentry_open+0x83d/0x13e0 [ 1140.486275][T25356] vfs_open+0x3b/0x350 [ 1140.486295][T25356] path_openat+0x2eea/0x3960 [ 1140.486317][T25356] do_file_open+0x23e/0x4a0 [ 1140.486339][T25356] do_sys_openat2+0x115/0x200 [ 1140.486358][T25356] __x64_sys_creat+0x8f/0xc0 [ 1140.486376][T25356] do_syscall_64+0x174/0x580 [ 1140.486401][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.486419][T25356] [ 1140.486419][T25356] -> #5 (major_names_lock){+.+.}-{4:4}: [ 1140.486442][T25356] mutex_lock_nested+0x5a/0x1d0 [ 1140.486461][T25356] blk_request_module+0x35/0x2a0 [ 1140.486480][T25356] blkdev_get_no_open+0x3f/0xe0 [ 1140.486503][T25356] bdev_file_open_by_dev+0xa0/0x240 [ 1140.486528][T25356] swsusp_check+0x56/0x490 [ 1140.486547][T25356] software_resume+0x51/0x4c0 [ 1140.486572][T25356] resume_store+0x333/0x4f0 [ 1140.486586][T25356] kernfs_fop_write_iter+0x3b0/0x540 [ 1140.486610][T25356] aio_write+0x5df/0x880 [ 1140.486634][T25356] io_submit_one+0x7bb/0x14c0 [ 1140.486656][T25356] __se_sys_io_submit+0x195/0x340 [ 1140.486678][T25356] do_syscall_64+0x174/0x580 [ 1140.486702][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.486719][T25356] [ 1140.486719][T25356] -> #4 (system_transition_mutex){+.+.}-{4:4}: [ 1140.486743][T25356] mutex_lock_nested+0x5a/0x1d0 [ 1140.486761][T25356] lock_system_sleep+0x49/0x70 [ 1140.486779][T25356] resume_store+0x2ff/0x4f0 [ 1140.486794][T25356] kernfs_fop_write_iter+0x3b0/0x540 [ 1140.486818][T25356] aio_write+0x5df/0x880 [ 1140.486840][T25356] io_submit_one+0x7bb/0x14c0 [ 1140.486862][T25356] __se_sys_io_submit+0x195/0x340 [ 1140.486883][T25356] do_syscall_64+0x174/0x580 [ 1140.486907][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.486925][T25356] [ 1140.486925][T25356] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1140.486948][T25356] mutex_lock_nested+0x5a/0x1d0 [ 1140.486967][T25356] kernfs_seq_start+0x5c/0x420 [ 1140.486991][T25356] seq_read_iter+0x3f8/0xe20 [ 1140.487016][T25356] vfs_read+0x58b/0xa80 [ 1140.487037][T25356] ksys_read+0x156/0x270 [ 1140.487058][T25356] do_syscall_64+0x174/0x580 [ 1140.487082][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.487106][T25356] [ 1140.487106][T25356] -> #2 (&p->lock){+.+.}-{4:4}: [ 1140.487130][T25356] mutex_lock_nested+0x5a/0x1d0 [ 1140.487148][T25356] seq_read_iter+0xb8/0xe20 [ 1140.487172][T25356] lo_rw_aio+0xc80/0xf00 [ 1140.487195][T25356] loop_process_work+0x92a/0x11b0 [ 1140.487217][T25356] process_one_work+0x98b/0x1630 [ 1140.487241][T25356] worker_thread+0xb49/0x1140 [ 1140.487265][T25356] kthread+0x388/0x470 [ 1140.487282][T25356] ret_from_fork+0x514/0xb70 [ 1140.487302][T25356] ret_from_fork_asm+0x1a/0x30 [ 1140.487324][T25356] [ 1140.487324][T25356] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1140.487349][T25356] process_one_work+0x8d7/0x1630 [ 1140.487372][T25356] worker_thread+0xb49/0x1140 [ 1140.487395][T25356] kthread+0x388/0x470 [ 1140.487410][T25356] ret_from_fork+0x514/0xb70 [ 1140.487428][T25356] ret_from_fork_asm+0x1a/0x30 [ 1140.487449][T25356] [ 1140.487449][T25356] -> #0 ((wq_completion)loop7){+.+.}-{0:0}: [ 1140.487472][T25356] __lock_acquire+0x15a5/0x2d10 [ 1140.487492][T25356] lock_acquire+0x106/0x350 [ 1140.487510][T25356] touch_wq_lockdep_map+0xcb/0x180 [ 1140.487526][T25356] __flush_workqueue+0x14b/0x14f0 [ 1140.487541][T25356] drain_workqueue+0xd3/0x390 [ 1140.487555][T25356] lo_release+0x287/0x8f0 [ 1140.487578][T25356] bdev_release+0x541/0x660 [ 1140.487602][T25356] blkdev_release+0x15/0x20 [ 1140.487618][T25356] __fput+0x461/0xa70 [ 1140.487636][T25356] task_work_run+0x1d9/0x270 [ 1140.487654][T25356] do_exit+0x70f/0x22c0 [ 1140.487672][T25356] do_group_exit+0x21b/0x2d0 [ 1140.487690][T25356] get_signal+0x1284/0x1330 [ 1140.487713][T25356] arch_do_signal_or_restart+0xbc/0x840 [ 1140.487730][T25356] exit_to_user_mode_loop+0xa9/0x680 [ 1140.487751][T25356] do_syscall_64+0x353/0x580 [ 1140.487776][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.487793][T25356] [ 1140.487793][T25356] other info that might help us debug this: [ 1140.487793][T25356] [ 1140.487800][T25356] Chain exists of: [ 1140.487800][T25356] (wq_completion)loop7 --> &set->update_nr_hwq_lock --> &disk->open_mutex#4 [ 1140.487800][T25356] [ 1140.487833][T25356] Possible unsafe locking scenario: [ 1140.487833][T25356] [ 1140.487839][T25356] CPU0 CPU1 [ 1140.487845][T25356] ---- ---- [ 1140.487851][T25356] lock(&disk->open_mutex#4); [ 1140.487867][T25356] lock(&set->update_nr_hwq_lock); [ 1140.487881][T25356] lock(&disk->open_mutex#4); [ 1140.487898][T25356] lock((wq_completion)loop7); [ 1140.487911][T25356] [ 1140.487911][T25356] *** DEADLOCK *** [ 1140.487911][T25356] [ 1140.487917][T25356] 1 lock held by syz.0.6673/25356: [ 1140.487927][T25356] #0: ffff88802718f4c8 (&disk->open_mutex#4){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 1140.487977][T25356] [ 1140.487977][T25356] stack backtrace: [ 1140.487990][T25356] CPU: 0 UID: 0 PID: 25356 Comm: syz.0.6673 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1140.488013][T25356] Tainted: [L]=SOFTLOCKUP [ 1140.488021][T25356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1140.488031][T25356] Call Trace: [ 1140.488038][T25356] [ 1140.488046][T25356] dump_stack_lvl+0xe8/0x150 [ 1140.488064][T25356] print_circular_bug+0x2e1/0x300 [ 1140.488088][T25356] check_noncircular+0x12e/0x150 [ 1140.488124][T25356] __lock_acquire+0x15a5/0x2d10 [ 1140.488146][T25356] ? finish_task_switch+0x41f/0xbe0 [ 1140.488169][T25356] ? finish_task_switch+0x41f/0xbe0 [ 1140.488190][T25356] ? rcu_is_watching+0x15/0xb0 [ 1140.488214][T25356] ? trace_sched_exit_tp+0x3a/0x130 [ 1140.488236][T25356] ? __schedule+0x170f/0x5500 [ 1140.488261][T25356] ? touch_wq_lockdep_map+0xb5/0x180 [ 1140.488278][T25356] lock_acquire+0x106/0x350 [ 1140.488298][T25356] ? touch_wq_lockdep_map+0xb5/0x180 [ 1140.488320][T25356] ? touch_wq_lockdep_map+0xb5/0x180 [ 1140.488337][T25356] touch_wq_lockdep_map+0xcb/0x180 [ 1140.488353][T25356] ? touch_wq_lockdep_map+0xb5/0x180 [ 1140.488372][T25356] __flush_workqueue+0x14b/0x14f0 [ 1140.488389][T25356] ? do_raw_spin_lock+0x12b/0x2f0 [ 1140.488411][T25356] ? __pfx___flush_workqueue+0x10/0x10 [ 1140.488437][T25356] drain_workqueue+0xd3/0x390 [ 1140.488456][T25356] lo_release+0x287/0x8f0 [ 1140.488492][T25356] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1140.488519][T25356] ? __pfx_lo_release+0x10/0x10 [ 1140.488543][T25356] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1140.488565][T25356] ? reacquire_held_locks+0x104/0x190 [ 1140.488587][T25356] ? rt_spin_lock+0x1e0/0x400 [ 1140.488608][T25356] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1140.488630][T25356] ? rt_spin_unlock+0x14f/0x200 [ 1140.488652][T25356] ? rt_spin_unlock+0x160/0x200 [ 1140.488676][T25356] ? __pfx_lo_release+0x10/0x10 [ 1140.488699][T25356] bdev_release+0x541/0x660 [ 1140.488727][T25356] ? __pfx_blkdev_release+0x10/0x10 [ 1140.488745][T25356] blkdev_release+0x15/0x20 [ 1140.488762][T25356] __fput+0x461/0xa70 [ 1140.488786][T25356] task_work_run+0x1d9/0x270 [ 1140.488808][T25356] ? __pfx_task_work_run+0x10/0x10 [ 1140.488830][T25356] ? rt_spin_unlock+0x160/0x200 [ 1140.488853][T25356] do_exit+0x70f/0x22c0 [ 1140.488873][T25356] ? irqentry_exit+0x218/0x8b0 [ 1140.488895][T25356] ? __pfx_do_exit+0x10/0x10 [ 1140.488916][T25356] do_group_exit+0x21b/0x2d0 [ 1140.488929][T25356] get_signal+0x1284/0x1330 [ 1140.488947][T25356] arch_do_signal_or_restart+0xbc/0x840 [ 1140.488958][T25356] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1140.488972][T25356] exit_to_user_mode_loop+0xa9/0x680 [ 1140.488983][T25356] ? rcu_is_watching+0x15/0xb0 [ 1140.488996][T25356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.489007][T25356] do_syscall_64+0x353/0x580 [ 1140.489021][T25356] ? trace_irq_disable+0x3b/0x140 [ 1140.489033][T25356] ? clear_bhb_loop+0x40/0x90 [ 1140.489044][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.489054][T25356] RIP: 0033:0x7fe0c0c4ce59 [ 1140.489064][T25356] Code: Unable to access opcode bytes at 0x7fe0c0c4ce2f. [ 1140.489070][T25356] RSP: 002b:00007fe0bee9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1140.489081][T25356] RAX: 0000000000000000 RBX: 00007fe0c0ec5fa0 RCX: 00007fe0c0c4ce59 [ 1140.489089][T25356] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000004 [ 1140.489103][T25356] RBP: 00007fe0c0ce2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1140.489110][T25356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.489116][T25356] R13: 00007fe0c0ec6038 R14: 00007fe0c0ec5fa0 R15: 00007ffd33f96688 [ 1140.489127][T25356]