last executing test programs: 3m25.305096024s ago: executing program 0 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0x40045017, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) 3m25.147210514s ago: executing program 0 (id=1921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x1}, {@in=@dev, 0x0, 0x6c}, @in=@rand_addr=0x64010100, {}, {0x0, 0xfffffffffffffff0}, {}, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x5, 0x7fff}, [@etimer_thresh={0x8, 0xc, 0x6}]}, 0x100}}, 0x0) 3m25.126486429s ago: executing program 0 (id=1922): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001780)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x408, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0400001e00", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) 3m25.090162738s ago: executing program 0 (id=1923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @loopback, 0x7}}, 0x24) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3c8, 0x1f8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 3m24.996182428s ago: executing program 0 (id=1924): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000580)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@private=0xa0100fe, @broadcast, 0x0, 0xffffffff, 0x0, 0x10, {@mac=@remote, {[0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x2000, 0x0, 0xffff, 0x4, 'pimreg\x00', 'nr0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf000, 0x4}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffff00, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0x1fe, 0xff, 0xff]}}, {@mac=@random="e5a1091340a3", {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0xff81, 0x1, 0x0, 0xb1, 0x3, 'bond0\x00', 'ip6gre0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x5, 0xff03}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') r1 = syz_usb_connect(0x0, 0xb6, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffe88, 0x0}) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0xba, &(0x7f00000004c0)={0x0, 0x7ffd, 0x10}}) syz_usb_disconnect(r1) dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000580)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@private=0xa0100fe, @broadcast, 0x0, 0xffffffff, 0x0, 0x10, {@mac=@remote, {[0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x2000, 0x0, 0xffff, 0x4, 'pimreg\x00', 'nr0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf000, 0x4}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffff00, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0x1fe, 0xff, 0xff]}}, {@mac=@random="e5a1091340a3", {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0xff81, 0x1, 0x0, 0xb1, 0x3, 'bond0\x00', 'ip6gre0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x5, 0xff03}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') (async) syz_usb_connect(0x0, 0xb6, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffe88, 0x0}) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0xba, &(0x7f00000004c0)={0x0, 0x7ffd, 0x10}}) (async) syz_usb_disconnect(r1) (async) dup(r0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) 3m24.781471918s ago: executing program 0 (id=1925): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x22880, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, &(0x7f0000001080)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) fsopen(&(0x7f0000003380)='ocfs2_dlmfs\x00', 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224"], 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x800000a, 0x34) socket$inet_tcp(0x2, 0x1, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async) open(&(0x7f0000000280)='./file0\x00', 0x22880, 0x20) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x8) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, &(0x7f0000001080)) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) (async) fsopen(&(0x7f0000003380)='ocfs2_dlmfs\x00', 0x1) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224"], 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x800000a, 0x34) (async) 3m9.533444214s ago: executing program 32 (id=1925): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x22880, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, &(0x7f0000001080)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) fsopen(&(0x7f0000003380)='ocfs2_dlmfs\x00', 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224"], 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x800000a, 0x34) socket$inet_tcp(0x2, 0x1, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async) open(&(0x7f0000000280)='./file0\x00', 0x22880, 0x20) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x8) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, &(0x7f0000001080)) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) (async) fsopen(&(0x7f0000003380)='ocfs2_dlmfs\x00', 0x1) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224"], 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x800000a, 0x34) (async) 9.073070247s ago: executing program 4 (id=3171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000240)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="370a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000300)={0x20, 0x12, 0x28, "98656f6fc26267c31bea15058aa36b0bf2ba3d4305370a0ac682d3d2bd0b153df8d5c49bd03c919a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000400)={0x0, 0x8, 0x4f, "381de1b0afcbb53cab3e828ab971730c7538c153c203dff7944de87cd8358e80c6e549ec6d5f8489c4f0d8722c7a6d5903f789d015877642db1f64c518c814c6a5cd6355b096240effc6d30f8dd762"}, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000000fd7d00"]}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) 6.781706238s ago: executing program 4 (id=3183): syz_usb_connect(0x0, 0x56, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x5, 0xee, 0xfd, 0x10, 0x421, 0x42f, 0xa2ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x4, 0x3, 0x10, 0x60, "", [{{0x9, 0x4, 0x26, 0x7, 0x3, 0x2, 0x2, 0xff, 0x3, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x4285, 0x5}}], [{{0x9, 0x5, 0x6, 0x4, 0x400, 0x3, 0xfb, 0x4}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x8e, 0xe5, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x48, 0x40, 0x3, 0xd}}]}}]}}]}}, 0x0) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@upperdir, 0x5c}]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x80085502, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="3b6773add2485f53272c6717c01f934a9e70e0d40de2f5a97a2dfbbf5dbefa78933a628f210fc4", 0x27}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x3e, 0xbb, 0xaf, 0x10, 0x5ac, 0x12a8, 0xd4d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x5, 0x80, 0x73}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r4, 0x4, 0xdf, &(0x7f0000000040)=""/223) 6.69668185s ago: executing program 2 (id=3184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c0100001a0a010800001400000000000300000a090001"], 0x144}}, 0x4040000) 6.494630262s ago: executing program 2 (id=3186): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0xffff, 0x5, 0x4, 0x102, 0x803, "000000ffff20001b10000000000800", '\x00', "05030400", "0200", ['\x00', "6cf8ffff18f0f0ff00000100", "f0ffffffffebffff00000010", "fdffffffa240b82dc44d00"]}) 6.293522846s ago: executing program 2 (id=3189): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.557938219s ago: executing program 3 (id=3193): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000000)=""/78, 0x4e) (async) getdents(r1, &(0x7f0000000200)=""/251, 0xfb) (async) setns(r1, 0x2000000) (async) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32) r5 = gettid() (rerun: 32) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000dc0)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="001503000000c39242"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = gettid() r8 = epoll_create(0x8) kcmp$KCMP_EPOLL_TFD(r5, r7, 0x7, r4, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x5}) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2002060, 0x0) 5.247189854s ago: executing program 2 (id=3194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c0100001a0a010800002000000000000300000a090001"], 0x144}}, 0x4040000) 4.908639988s ago: executing program 2 (id=3195): socket$kcm(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000180"], 0xfdef) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = dup(r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) sendmsg$kcm(r1, &(0x7f0000003840)={&(0x7f0000000080)=@nfc={0x27, r7, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="74e5b303c158f26bf03759a42a01ac6927bb745026a2ded2e3fb6d335c256617077aa84e0821782c0c811300aaabbf95010e60e210205fee4e1a67644e", 0x3d}], 0x2, &(0x7f0000003800)=[{0x28, 0x108, 0xfffffffe, "81796809cd1d35f0de52d483e96d16c2ffa1a100e5367b"}], 0x28}, 0x48800) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000000780)="d73832d7ec19c6d2c94ff7eaaf0f6c999394e8bd328bc3f7858186dc05e9a1e506f4a6c883f4727e798d68dcc032ce91797ca97b15c693f633363a87c4e3ab7228e389969a5770a5dd300519c112b4f60b152bb0bf06554d53d79150446c1322d1e8f406670de043332dd98b474c83173bb4505db8200fbc22c95da607857d0c4159c43a9b8c77667860e213db951e51b69c37fe49995c49788ff44f52701ceefcd2f94c5fe740a3355e9e8ef9ba35f157e85d048e8fb8732a65b7e504ad3a74dbc098db23e1124c132c538429727a849143aae8e870a3d59e3efa956076ca242720a1626997e48a9ebe1947482e711ecb93d1cc4da220d15d9e2ebf3259d3472239b45c31919a78fc5dcdbae41562220406d017e0b5842d8fb9038e7da70195bae0e4bc9cb3acd6c169a439f55395ecbeb81de44c595e7cc41e90cd4287ebd6c890fc9f866b4a3b33fc9048cc336e023c38d18428ad766449d6c28e9e5f21f62d0d22cced5b26debf1e4d5248bac5c175869fd306ae4a675d3b08b9f4de47166c2acf09665dd7f644de35cef4e30b6f5879ff6b01a21636f4260c58be071ba610fb055d0a6c0ebf1d3c15779b32015bc4483cca1b091db3cdd39539297605be1b08be450d793dfbdce919c9f2d62fd054236e5015e7b097c717897cb02b18411204442ac1b191c286706abbb5c9f126bc512f4a751bec05931ba7bd65e910ac3458ba6e579049efe6e646b4025564c47ba8d4a5c232bb78b36f198960c69a1637b27db2de5a7b89f0eaeccdc6c7ded1507f17534babbd92c28ac617ecdc37a1be534e7a74d4eb3568be17c9a0029f52208ee89862beb6b458661b91814e23463b6e0fbe9def7f3fb440c1719e0bf9b48a15cb5558b053ab5f46fb523beaa0cbb51c4f23c7782dc4f5c517c8ebc270c19316a6e5d0f9530b2d7e65f9b19f563452e11099c37248f366fa3fce6b73fe26bb3cacc46460ba6297ae8d5ae3af55d344b84ea3d7fb4d50e1a75edd86ad8d40726b6676661d3560c53a8f214f70e37029195e09dc8c4d29f8aa2b6411ce7dcfdd49038dc31dfb09517bc0bc2bd2b7edf9b59d8e32b5bf226432a9a1779adb6794925d49fe100474549dcb4b613dca3f851483f786d57fcea406f342fcda4a2b5ae19a6622823019c7eb804c4490eb06f2f2e180eb30355b50dbd10e455efa03358f1f9b1c95a548d4967d4a23734ac18cd5ea1929fc37b212262100a6e470274c0c86f073221c0ff8b8cf3e18a0a0b3956ed1670804861415037ff0a6d1d75f84d3009b7c26f5f1e286935a4fd799395190b52d501b348607bdc7322d20a2936d2366384639d791ca2988de2d8d692b34de0999208a3e7981e501d515a971ca5ae38b54522263aa8ce96052bccdc4f96b4275ccd33d137a3efa0884055adf3bea298460acf2c2424f0503ea6c2c748ecae3a70efad1dd184567f25cef2c2e7c35357fb99850698df5f96bd3177d58f67052d76bc33c0be05d6e67be22900d1f63f36498de366d47e62e82a36e151c5c309e0b5c17b344b78a31a6361536b6a857213c569cd736c976f89937f8560a2f5beffe762c66848b2f1a4a7f9f8737c66a607aad4ce474ea212bb081c641fba8d9c9be654aefac0dfae5869506f772f133acc21d13c596499edb1a6bcddd7395b2d34d756f675b5daffa4f335dee29b9c7392817eb06d08ded224e49805066de027de10428c6798cd28b9a27e92742f340ff33614a73369dbf7d383dc0b67527e6a90653cd80e65970a4b14c152c8e580f112746c6264840f8a4f4ba245b8f311dfac247d3f4e6293c8fd36e5d6a5330cb76a80b6eb53475c7d2c2d60c4400723483d957b4e5a04a3453d7f180a5becb62d6c93e88f99cd11aed90b62f05013739c2fd40242c5f65f111929471ece4f9a6342ccf7912bc96324beed109cd23b05df5b06f0c5cf99afb209911d2d4bd9fc1b939fd8630dad929fb66abbc6ac7bddaed570083cbb319f0156eac5c116c558a742fe1e77b0874f87a31ca25f2fe64e3142dad4e4921e72570ea60cac7e0a825d26e690a15b030f32d4473a6a7b0b68eb253521422b9e3b40e23f52df178b2ea886d552644d57144a1cab3c78adbd76212673c66d1874ba03f6dde0e9715fafae7448279c371c9df03fe0124ae65e0e8c53e7762fbad4ffdc0d621dac6effc5584330981aa86b052c56d01fcc695870ed410c896ac2fb55ac8a8d7807d0f5b56c0d72b7a18902d3494a693bf449f290dd7a39c7b9c73dacc237295110e41ec60bd22a933e76eaf6bf4fbfec1e57aaedd4e4227a1572a02fd25a7defe374958e5ddae48bf76e9ee9467f3b18e2aca2ef29924fc399211384790b9883cca892bb03e853537f012994772b8ddc1786e9df396d047952b3293a69fb04600dc9a55851f6bca84841298dfbea7e2b6d4f63c9823489bd08ea0df4b3eade3fade6e1b1609609f37890cdb0f6490e936289a527ca8edb844d352cf57ca37d0ab397b0e8424307b01fc1a2627bbab3bbb822dc8cd475db4ead42021c32f365bf04e682d1910dc297d32889a724c09577240a4f17937885bcffa36593bedec57283eb9d68741365a3bcc49ef329205698df5a4f6045c13a5ab607100d1e6e1bcbf4d9cae3a351e69c2c4dd6c7fc0dd96f1a0405fe62305f59d1a11aa3e3e63586914164525855ab0dcd5ccf1d5bffcb323ffaa7edbbf35632e60c11e426b5873574cf62d05bbd7adf5d5632c26d747e88e3e01c2edad7faa61965604abda072ac9a67215d120654a5a51c164de9570b914248cf84b368f78267e1e0eb879cf79b67473b8f5d121cfccaa67cadbb1ea694dc29b48086d09e36beaa3fdf07d11ecfba37e24c6ac89d4334d474b4a88955cc2a99d5e23b1d17ec423e44096111b75029c2a529a3cb167c99a05144e07a2dd03a104f6df6c62f14c37163ca995413748eaf38e79e68cafa0a56c7afb06a0b3e204161be8ef7d9c2bc317ea2ea0701401a3ef9ede49df8c681d2a5103d0e7056b252e847379ac80647014da2c56e2b75ce09c96e41a2c87a024ca636fac3f5f1efe9c241a354ef05d0b8b27ba7e967c30335a003fb3eaaf7bbe8ef5b3e8fe17b8f6750404a857534969b02f4f986d58f7d02a62800f56b392cf46c1f8a6d8c81044545063144706a28454bf8a86736ff15d7c72d5f97e4eee106db275ac2b5ea481a266511acd5a62dde3af5a943a2734d7ed4c878ea341d37e84ea70a95bd265694172bb97f31e0065e1edeafbcf96395cff237e8e7c5602d6bcc3ff3df4d24af9d9c276e3d781f56a7a5053fceb9dbc71bc1a003f0c997a591225a1397f775fe33c6f37679ed182f274c34532d64bed5e139a3f196a7f9946e93ea5dadb2c962e6bbce63bfdc961883fee803a2cd753d352489550a22ab3ec0a862736ad55f701d116cd6c75fb81d67d06515b04689ed8d5246550908abca7fabeb9bfe72471d5295f5d52589610edbf5fdb94a5be6554a4b03923111a1726d530f02c2e5ef8383011858605f4cda37a84005bff41dd268a7ad5bec523dc6f762a7e8639976e9cdc58310b5dadafaf2eaf1ecd2082aa9bafa72129c7c330c50a0987a17dc866369adaf9063904d82a822fc577d32478d77e139220e24d70c2cac0825bb4e3bac6544a590e06a3d421e5753dcfb7aa46beb1cf9497b2a32c5d3455013d65395f58bac5870a2277841d5602a3b2267a1bdd07031bc13cd11fca3ebf4cda8f98f58abd364b11972ea37d867f4fc14fdec9c18106f897a2c763669d8ef522172f7857ca32b5f741ee61c929b31c686df640eb904bfc5a1b16a0ee51780cf10fe76db4f4be13e3edbb4dd491295e2ad4e8c7617407a93ddfc0b43a3ec230c39910e394d91829e6a3758a2c010286d3e48b3f95ce142cb10ea5189807ea313fbb1e40794ba4b024ae222e679630a815036acac99d1b0b1cbad96c3da5e1981ce5d878209fb450797d112ce1f559a1f4fa759991981bea50b9ccd41eeb7bd69e40e469cd27e227d92784d2c5815546f6cba64136382a44d85cf5b341d45a21682d5b2ce92403ea61f215810f0d8eea3b659a114da441532b4bf6f60808c6abfe858ce45c4fc29b0fe03d3700b829ba1b70c9f4f4ae3cc4c7679a055f4185bd43939ad7a284f7e9d0199831ddb7f18ae1c0d3a13571ca71c191bc4774efcbed9ce0ccd97c5ac7b39b2c9e0915b196abe33dfc45804e34d77e628601361236033a576a17331e5a42a7064149f328befc5c9aede336dc6e69cb10566295b228383328dc8c11ab9c80a1ac8f7c969f584636a859f6169eb0f540ae6bc9292550f08f3a7440f329fa6e63b3cac62b9d81763ddb4b2d1dd0d8d7619394370111e686d053f2adc9a21da2ef45876f4fa3ebd6d5df1d0af348fda0edfc03f449ef00db808d39431d8e6a35a1860ca5e2f1f22841ead7f6dc91462cb12522da8b1894306704cbd0ab289e488d3023207938ce3e7f22fe64626fe1e37d5d50ff02c03b846ffe2a8f493e084acb6a3cbcead47e5474eeda598972188f9c7445f66533b82ef01a202b5bfaf9d4943916da9e76927d1417fbaae1807689f06d4b6947d4fd713a7b328703b69a456ead050487b662f85319212b983916f2e56e6aa7e7811ee1148c1345ad689166abba72208c48cf91a52968c71d5ca8f69cb84d7dce0fac4a551d150debd4b194e3fbfb3f5b52847bc47801d6b4fbd2374e24670405edcd44104ebedf0636f9bf7ad71dc0390398b96a5b93887cddceceb0955e1f7739d42b92f320975598f8224f102b6b8a7a9716deeb5703e0399a87f07bf2494ac4890f0d1a63f89690e1bfa9c35104d0e5b9892add9d5c68c712ef025904410cf40e6c7e638ccc8c4596bb0a022f16815707324f153f61c87483e1a7c11e7e9045f6e781d01bc37d8c5c7a81b1f55403f41df4938a2b6dd09d4d241f8b301ee364229003a0fb57faa41c85692da44b21708f19e1037026353f7b62ad09b365450d73a68bedf0c3af9022e70b7e9f485fd80bffa1e72d48b678da53f86802e60f57366c717203e521e50f43223bc1632f65ba8f875263965c1fab30f76afd32529155bfd22f9034f40f3e793e8f6d5b2dc4ea29defd31f5bb759fc5cfd139b273613ccbe246e8a433185e707b3f11f5bed07f0ad4ebea3635068e38d0bada5591db6a2750532b4b2cdba8fe3aba411de7cb3ac7ea594780c86f6742523efb5316b76b8add1d8b66fe8669023489c954e4f7cbe34b9b6e7f1489e584b80ef77805813387bf89595df032a92567b366016f836d37d259c7f754c4b90e9fa48c816c982485f95e5ad7956ee6db5442aba957b1a3a2b301055ec7dc8799e2ba2ca70c5df5fe170c93b9653e8947cdeac59e39c361e89565477936c820bf5b5174057b1806fc19c2138942b04c6e8d0e42a15da2d54b836d1de466976e00b06ea408382dd6f50abad9664cf7651adefc6e85e9b58aa9d8f35a296e0b0223e8a83754dd4ba5feb5f242df5d4ddc4b8042f1c5fb43f3e1f54b0d0500db0ffb28c9bddf046a1bd527eaf9d50ae79b7134ccfa35a715562fa0522ae046ff13f622a2bf470bb40f4b15a9384eb7c22ee11970ff3457ae71d5e570a50844cd54199792a8418eb9235dd76c33c4180cac3494e37982f39d981272178d39978aba99a059fdb0c5f9927b5135515d88368363d1f1a85d6626224f6296bac39ea85de8345984b79d651d21063fcd91a35e97929c12d0aeff138f4514576d5b2de81f3008eb6855e32faae3b8b129c5069242a17051a578f9980c9a86452fe32790d56cf9bd2d26068032d8ec7fc51788821dd72d55b9c678c746b7f97be10fa5c85913239162b3925c5c1597c8b70ab990f20ea188f0962ce94b47e5e33bf95737a0d5b38329011c32af6454f8302eea101e3236e92ced44bffaa3278b8056f5b61792db32ff4cc7fdd4295e30871eef847851858ffdec0bf5deee49479ef4c45688feb353237396937a531bce15d920a33ed059a88767110dc4f748c1a368cba6457def6e380a5d5dc5e9659e62b9143f88f454e176e47c00c17dd499b61acdef79d5a2cc44be14d2b1ff6deefdb94908ab9171feae69af684969bd74bfe11b89e24fa1948bd630329b4ece6db55d8ed70e86e46fedd8d950677c3c80a97e89bfa0e145fdd312101e1d05f9e11cc5510d6b2aafa56684d8a922e6d9f1dd8cf3101c00925afcc6236ec55dc38c35474d2f0f26fde82f9b77f445f27bde42eed2da504e5f168d6cae33e56409f96d7daaa3a62ee3f52486a3f27e33d271dd97c65910cfa0dbf2651a1ab4055d00f1cd4d5ad0f58f49b7e80251a6ac1db959f52af2a861fabce4da38b1f394e18b26fb42a0a20940a5181fb789756f9e29d316b5309e679917888cd22ce3ece24296ae4f66187a4ae9a3e020b48d663b8f7ea8b82835aa97132981988c4bd6260de76ddcfbd19346a1019c6c85a7967013f641879e2242241a3f3c23d2c521d6f039d7eec7be76331a167e74c8440d665ca74ce84871aedfe220b2d16bccb9b28ede31b50c2272d2ee5a3939326d809cb4a5bb6eaff6a083335c04eaf5cb2826a78281ea8ba2b9126308fbdab2b3dab530e862306c601812663d12cb21d7fea3a5a34880157bc1a0058e8604bbce6ca939dc940e7f10a0eb101c2a06d6ca6ab297886519e4313e255aa26b2c60d2ae803f109695a66ef387f1fd4a455e673d75d5c413861d0049e9eb5211c483f9d9771c857d33e375558c69a6355266eec968cf58be26d462d550c604cd4bcccf0a7762988b6467f9f3ac49366bdef5deec97c3ae6e2d317abb3a94003476777a941ec402abc465fa84e66a15972fe6d9c36485ec16e4c56f7cebac82514ae7ca0ee27959057d3344ade46c2573dc3ab1aaacc815bc8c703dc58f56c69cb393e9a05269a8ab202ee2c43f17ac6f0bea31db6e996eefc31940689e319d0c6c345f889de5889e0bcddb434d9e3a382e750182476b8e763a3ef34487ff3e1763339e147e4d232c0821f6c1be73189ea422c0c84dc6ff2ea27aa9bf455295f4d428bca45c8f247c7635e4c3982120c5d9f2be953bb5865dc6a5cd6bdbb68d743e8a51e21cb8c396edd66b605f76570145a9e803d2e59a2f21d911594ab1f04927d099c03a46671e1737a303b1432b1fe700d12d0b682fe6e6355d883d643238bc85a1fba5f1b9d860d59374781e6f38e56a0b5b2044bf444c666e3a29ff89cc21a55678ec389ba147832c09937339557d2dd3ad517928a96c95ae8e96884d462869a1ed3a2a71cee4c21bd4d9b8d75f28ff6a0fae3ad685a7f2c1286640b319f5b381a2ee64dbf58ee55b6582dd6ec0de32553679d6bd7765c9430e5e631dae01728367deefb876bfabecd226a7b210832fed51a25c7ed8382a93c9af18ad52d012a25d7cf3816ddd981b2df2a2567fea9f51e24bdf110f0718eef726a11dfa788ccc74c62318b6ca26bee0d219c958961688f487bf0044ab69980b66eefd5cbc1315923caf79a8af3179fc6a67dbf720f23b4b58c3ab80024876c85d53ae587fbaaf526c1bffc58c5428e4793baf779723c317d1690540f5611f7c5fcb3033bcde438378a6c2f227c1bbfba4d035dc330f6ebf4844f7c275aa597dd0984084214d374a0fe9058c1065895bd8ccf32b3b065538b1e8989e005e7d5568d9ed4ed6a39488d3b0e59beba176a8937bd8e300ce76e627da7bc0bbfd624612052eb8a7a94038afd2db3baaaa76287b84d6f9e9b21d2f2ff4ab44e7fc717c29ed4466a46cd03fba4b089f071befd3e15c88b93c02ed11f6ebe245861e00b95f90aec2b44927eec8d47d1cdce25c3b9561d94c707a0e14df559a52f5be6a46e011302c8c352a0741abeb0965a22b567e7e8ca27e7ddc63583bdd1b2358f1be4eff5baf20dc9798db7d3f21b5e70c0eea7e19884a3e50ea07f379c56b5ac0039a06afed02e806dfcf9500f31761c27ff3b7cc75dda4e1166812d6e4cc381b06ac951a5dacccd0a905af630efa19ad0ac1fbb82885f37b43b23fcfecc16dedc7bf0a05b0b0dc02fb296ac1f97394d3f674d812d3b9e2ffb5cc93f4310259dba0a81c48f9885647631ec37cc343e807f5ba4b5aace57a5692b1d87b47d159380db1c8caff638aa05759a1c38f0702d04a35014c6d650e7b7e7a91d1af91c944551395757d6cbea5dc76d2e1702be2848397cd508df5097fa1c5854be2e620f1bb9eb20fdabef3e1ed0397cb59fee19191ed9322b35c7986cc63c0842433f96cdb6f2bd05db521da5856daa8bbb33e85e460a47f454f71bfe277ed8d473aa4de33b00879911517b2160e20a944eb293a931d645f46048add8d9ed0d9ab5caf6c286df0138889f2361ec5e1ba85164535856e888c3a4fe818296cb12f665770e20a5e705337e33445e75fb2055c41ea5267026e829cd373f4d3642faab75a921033c1a40cceb2fc65775b8f861cf3be548070ddf87b09f61690a81585f26d9d66d78efbd07cfa1dc5667bb7648cac5ab410d9a4f30505b9c25140f23fc3ee8558392322502310fa964e2e602dbc500871d7d1ec78764ce3a4ccb7f2929c6e8d299688c685f83636412f74a0c1f68c5c496d3f75acf98ddc2211e1afdcb3566f5dba7e32f9c61f2cb941186c5f8c4023cc4d37f7e50d60a233d143381f2fdab4f8e4740e67338f765f88b7f40a692a97e073948954e90b242c916ca8729e02566f1aa44d91eb7b2e921f398ad93f4e8805eba7f993910565558f5aa3fddddd07048484c938ac16e680f4a7acd3e54d637fcc8877f99e75331e4ddbd87770b601eeec6eb25c8485d953c3696522c2181d1104ea8d1ae9729312cd89317352550ec500158a3aa548d9a01b3f0c247f0b1aa728d246245570756078a64ba326fa9a22731bdf55a4e207b4ecbc01ebb358c17bcd1235f5090510af62e223912f162ca81af31ae500cc9346c38f33b5d6857583e3e2e3736a728dc8f307efe8924fc56afa35097410832d337cb2a43ee3b526b993bbcb9f5fd49aaa33d3e91bf0558479e0e2ad7551cc057fa9a324a84a115e3790b2c49b5c3d0f18240e02d7f08a1c527f26a46413dced1130293702718093e85dadc601ed6402fbf6dfbeaf0d39bb637417785748b3e0beab69035fb11c63eb6429040f871dd6c9f7e134f40e8a2b962fd502090eb628492c6d841c6399f0940b51cdf8600f6267f19442117f7185457ff5fd16a4dca9b2d8af44b689988a943389a1c48a8d60030ccd6f727cf0ed250698267e078ab55dc02aaba8e5114c0124e29e7b2818d6db191b67b9464568f43c721e03a7066a870af1683f85ee6bac19f7ec95eef7e323efd915262273ec4c11dfb25f6e8838f444ab6c7c95ed03d6449f290e7ac9467f736ef1682c680e60ddb50beeaf596ae9d99300a66bf9c75b4acc5b23c13570d2369b36c117d73af5c05637bcd2927e3f8cc5cff9644cd38991f5d29df2effffef3df05eb58e1de4d678fa68d20191d4413623f4aef3006099b6cfc86b7ebe6b202e48832396514485f7390379efd7d5e80eceb9e1ea56a9f2bb929eb1533e2b9b5d5e0231fb9090b3958e2b8738fa181a17c6d825f077771ed78888f1b0931380c7bac2294919c0e19fcc14ddb710e54aab9a055c0df6fbaad7d91c5f43aa8033898a21b5fe6ff396fd73f2201016b9a447e3e29d263576ddeca8c08763b1837113c65bb9494b36bc2a43292ddc897ff63fbfe95313c1b141e580408cfe3e9b09a8f4f93762f0f77f223f4cdf1827e333b7559a4c0eee4db7213ab15f4c008cdccfc2530bc97a1e14e64b25bf0557b346269510c478c5a1ed7a3caa22f605b72477cad61482ab7cebe9a6ae32020237bb1971de9a17f9b7109322e0661bbc45117fd7d309f73a9e6ec49e14e52bd6a9055278dd344979da4fa240fed74ad15a26c83c4db283af7e9c6cf1e3dc7034412e2edd852a3b2a266b8ff5acf1d768a98615f2c7bbb1a6bec8865d0d043fcc8dda110db5e3ef87c01371d0c486bb13b0636deadaedfec769f8faf87a07b1c84d571bdb505b54f7b0a8a3dcfa03263695d2e878fbd9a57a8d662dce030e41feef1e755f3ee531f28e6f46468bd203ecba4ccd26e7a861f6121ad45d70b928541a9db463834a4c231345a909f1ce6c75d984fa22e9fea29e2204d9117531b5e4713bf353cab1e2744bbd93bfaa153d4796b0d778f738033d86cfe8a03382a68549f1db4f8434f4c00fb6de8a9e4ad679f96eaa3004a51afdf78261521de5fcca59de417a4e92967cef4b3476da383c38fa02c8ce9a4aa7f8d5efb32e1e280f3eca2673c7c2828fcc488de996c102dc70237f1e8d93033810009f65f8c7ae93bba9efaa0a91cacc124075885eb87bb29aecac22a4214c45340dc74c855aa45e810bcf2217ccc54498ca258b99b9dd35dd63aab51e1d4bfbf5bb4636cf64330d4e50ada9c09efc412c8964fea6cfc3a1657fb6d93778880ef2e41e3b6b2442f2e92765e6d282f59f5da0f9f3f0acb463b897a417d62971aa4fca10b9ab3a01e5162a2178dcb00034296c1eada998d8f3496595024f0d03fd193065f0ccdd869ebd3dd660b0dc1b09c48f7c50292d31c1318ef2f6c476f735fc4f21e62b69b662b9bda0c4448c038358a528bd22a159e6899719a0a476081cb481d5966a35ef9fff7f10a7d993030059d6401c5d41142db65341e159ec552dfca8323487c8d315043b3cf0fd17ab0cef3093c2465ee36ae8cd19b77d0499056a810513ad33e4525ba04f14ffd87ac61f83b0084b5ca585b8b7c3fb6fda5074b33527177f763a0186fb82883a38587612513b4bd3b14b9ba6c46690617c50a30fe51fb1fbbaff802f4f90b48f2b680fcf0655feffe1df66a34c8540b1b071bd0956abf27df85e8cb11fa38f78318e796ae86dfdb3be50387af902aa74a6658ab19f99dca0b7dad7e257dae441343f068b8886ac8c9ed1635909fb0d48693e112bdf63c9c0e24595ebdf43667a0ec31a5931f82bd7f9c62c3c4ea7d3be432ea1b56d8e3a2264574e67c58a6d6b56688c58621595407f632736a05699af1196408729cee05fdff79977a83e81658ed1153da386bcd2c29f5d0e72d56cf5a232990471a1e5e03c5badb4b71e93f61f9b05e4a5c57bede5701d4c6e690daf3a70639bff36de16636be45fef2b9bbdf26a1cbd411ebdd87242aa25061a101b4d707876b1c724138254f745866e61323c3862e3757d7e7a776d9a7cdb6234d5cb60ac1d8652eb59a4406062727ead1d76f51a872ee245bc4b2e3be05bc4c1acb42d7424b11f2d51e6bbae991892c33970f78214168e30ac746940579921126cc93331eaa9b3e1c0cf91ca8abee0cd803e089bc225d3547685460e2d8ff7198ffbb902e469fb9365d9eeec466dc77493ce77580dc41b37c30b6790a3fcd7d97a7f5371ccce52e272c70e20550d111765ca2b5ad00379e81d919139187a9ef3085cc4cd545f99b2268935590abf3719e909358b4e2d2ec4874a12e544de67c31a0e2c4f97ca4c2fa1dd756f9c6d064290b24ada49dc1b942f2a91124791c08578031066c4ef7", 0x2000, &(0x7f0000005980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0], 0x0) 3.867976177s ago: executing program 4 (id=3198): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x10000000000000, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0x11, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000c40)=ANY=[@ANYBLOB="20068300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x20000084) userfaultfd(0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r8, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x80, 0x8) syz_usb_control_io$uac1(r7, 0x0, 0x0) 3.705945446s ago: executing program 3 (id=3199): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$netlink(0x10, 0x3, 0x15) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x15) (async) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) (async) 2.128813225s ago: executing program 3 (id=3204): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) r2 = timerfd_create(0x6, 0x100000) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x1}) (async) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000600)={@empty, 0x0}, &(0x7f0000000640)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="110725051e00000800030000000000000000a7dca3b7ba8236ffb483073485351c83dee5161376d7e7b2f0c35a8e9f5f3cba2b3a46e39faa76f2f0813584f118c5bae33acc05da6dbc088203131ef1d0739b9d729a00211db9e6b666ae10f86916481293ac068c", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80800) move_mount(0xffffffffffffff9c, 0x0, r12, 0x0, 0x146) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r11, @ANYBLOB="050427bd7000fcdbdf250100010008000100", @ANYRES32=r13, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) r14 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r14, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) writev(r14, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) getsockopt(0xffffffffffffffff, 0x30, 0x2, &(0x7f0000000840)=""/160, &(0x7f0000000ac0)=0xa0) getsockopt$inet_mreqn(r14, 0x0, 0x24, &(0x7f0000000680)={@remote, @private, 0x0}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000740)={@private2, 0x0}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x120, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000803}, 0x400008b1) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x120, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000803}, 0x400008b1) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) (async) r18 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_SCSI_RESET(r18, 0x2287, 0x1000000000000) (async) ioctl$SG_SCSI_RESET(r18, 0x2287, 0x1000000000000) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 1.710748561s ago: executing program 3 (id=3205): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x218, 0xf21f96ac, 0x64, 0x3f2, 0xc, "0000000000000000000000000000000000ffff", 0x0, 0xa}) 1.448156485s ago: executing program 3 (id=3207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x1}, {@in=@dev, 0x0, 0x6c}, @in=@rand_addr=0x64010100, {}, {}, {0x4000000}, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x5, 0x7fff}, [@etimer_thresh={0x8, 0xc, 0x6}]}, 0x100}}, 0x0) 1.377756184s ago: executing program 2 (id=3209): unshare(0x20040600) r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x154}) mmap(&(0x7f000068d000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000076f000/0x4000)=nil, 0x4000}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x20008155}, 0x404c014) close(r5) recvmsg(r6, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000002240)=ANY=[@ANYBLOB="12011003e820a110f0fff0ff3014010203010902240001030480050904c104024c1325090905080cff0307fa"], &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0}) 1.351153909s ago: executing program 4 (id=3210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000001101"], 0xfdef) 1.196919401s ago: executing program 3 (id=3211): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x2000) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 1.126962908s ago: executing program 4 (id=3212): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x1, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000000000)=0x780a, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="8b4ddcdc67c0f5c538d8ee8a9124496d5e76a99d3b45e9ea818b421e1bec1d7f59c8278d49c2fa5a", @ANYRES16=r6, @ANYRES64=r6, @ANYRES32=r6, @ANYRESDEC=r5], 0x23c}}, 0x40000000) 944.687473ms ago: executing program 4 (id=3213): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') (async) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) (async) socket$kcm(0x10, 0xd, 0x0) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800060007000200060007c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) (async, rerun: 32) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x8, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) umount2(&(0x7f0000000080)='./file0\x00', 0x2) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xd4, 0xa4, 0xe4, 0x40, 0x9e1, 0x5121, 0x9c5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfa, 0x4e, 0x80, 0xc7, "", [{{0x9, 0x4, 0x5, 0x0, 0x0, 0x47, 0x26, 0x56}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 772.602606ms ago: executing program 1 (id=3215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f00000002c0)={0x1, [{0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x8, 0x4da0, &(0x7f0000000100)=':'}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x0, 0x0, 0x80000006, 0x0}, {0x1, 0x0, 0x8, 0xfffffffffffffffd}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x5da2, 0x0}, {0x2, 0x8, 0xd1a5, &(0x7f0000000840)="d2"}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x818, 0x0}]}) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000440)={0x0, [{0x2, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x0, 0xd, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0xff, 0x0}, {0x3, 0x0, 0xfffffffb, 0x0}, {0x2, 0x0, 0x100, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0xbadb, 0x0}, {0x5, 0x0, 0x40005, 0x0}]}) (async) r5 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) (async) syz_usb_disconnect(r5) (async) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf2515000000140001800d0001007564703a8a2eac523a"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000d80)={0x274, r8, 0x8, 0xfffffff7, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdde2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff3f3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xeaa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffe}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "918105534dff7b46c93e463207c578f04c1603c937c256ee86"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3c0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4040}, 0x8051) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x28, r10, 0x1, 0x1, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}]}]}, 0x28}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000b80)={0x200, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x41}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb8e0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa5b6}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xed}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf207}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x14004054}, 0x800) (async) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000140)=ANY=[], 0x0) 462.02483ms ago: executing program 1 (id=3216): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x218, 0xf21f96ac, 0x64, 0x3f2, 0xc, "0000000000000000000000000000000000fdfd", 0x0, 0xa}) 313.018022ms ago: executing program 1 (id=3217): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000005980)=@bpq0, 0x10) 279.306516ms ago: executing program 1 (id=3218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2, 0x1, 0x6}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r2, 0x1, 0xfffffefd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x2}}]}, 0x54}}, 0x0) 113.535661ms ago: executing program 1 (id=3219): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x1}, {@in=@dev, 0x0, 0x6c}, @in=@rand_addr=0x64010100, {}, {}, {0x5000000}, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x5, 0x7fff}, [@etimer_thresh={0x8, 0xc, 0x6}]}, 0x100}}, 0x0) 0s ago: executing program 1 (id=3220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c0100001a0a010800006000000000000300000a090001"], 0x144}}, 0x4040000) kernel console output (not intermixed with test programs): 72][ T5938] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 493.489785][ T5938] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 493.511672][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.535515][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.561666][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.574717][ T5938] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 493.583972][ T5938] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 493.592095][ T5938] usb 2-1: Manufacturer: syz [ 493.599809][ T5938] usb 2-1: config 0 descriptor?? [ 493.605836][T13694] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 493.616322][ T5938] igorplugusb 2-1:0.0: endpoint incorrect [ 493.820502][ T5938] usb 3-1: USB disconnect, device number 125 [ 493.831596][ T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 493.903929][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.933775][T13699] loop5: detected capacity change from 0 to 7 [ 493.940566][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.950110][T13699] Dev loop5: unable to read RDB block 7 [ 493.957178][T13699] loop5: AHDI p1 p2 p3 [ 493.965781][T13699] loop5: partition table partially beyond EOD, truncated [ 493.976009][T13699] loop5: p1 start 1818582900 is beyond EOD, truncated [ 493.985732][T13699] loop5: p2 size 150995200 extends beyond EOD, truncated [ 493.993965][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2701'. [ 494.012581][ T24] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 494.041141][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.051727][T13694] bridge_slave_1: left allmulticast mode [ 494.058926][ T24] usb 4-1: config 0 has no interface number 0 [ 494.067333][T13694] bridge_slave_1: left promiscuous mode [ 494.073492][ T24] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 494.094690][ T24] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8E has invalid maxpacket 32729, setting to 64 [ 494.106213][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.113965][ T6128] udevd[6128]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 494.114653][ T24] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.162347][ T24] usb 4-1: config 0 interface 52 has no altsetting 0 [ 494.171338][T13694] bridge_slave_0: left allmulticast mode [ 494.178774][ T24] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 494.193441][T13694] bridge_slave_0: left promiscuous mode [ 494.199165][ T24] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 494.208913][ T993] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 494.223192][ T24] usb 4-1: Manufacturer: syz [ 494.230013][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.240997][ T24] usb 4-1: config 0 descriptor?? [ 494.258139][ T24] hub 4-1:0.52: bad descriptor, ignoring hub [ 494.270074][ T24] hub 4-1:0.52: probe with driver hub failed with error -5 [ 494.364077][ T993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.376858][ T993] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 494.391846][ T993] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=43.2f [ 494.409254][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.433493][ T993] usb 5-1: config 0 descriptor?? [ 494.449310][ T993] net1080 5-1:0.0: probe with driver net1080 failed with error -22 [ 494.488621][T11361] usb 2-1: USB disconnect, device number 100 [ 494.489904][ T24] usb 4-1: Can not set alternate setting to 1, error: -71 [ 494.518235][ T24] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 494.568567][ T24] usb 4-1: USB disconnect, device number 14 [ 494.650845][ T808] usb 5-1: USB disconnect, device number 65 [ 495.406401][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 495.452978][ T808] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 495.547024][T13725] netlink: 162312 bytes leftover after parsing attributes in process `syz.3.2714'. [ 495.754277][ T808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 495.767166][ T808] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 495.777438][ T808] usb 3-1: can't read configurations, error -71 [ 495.792199][T13734] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2716'. [ 495.825898][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 495.981386][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.997070][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.015075][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.026533][T13744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.046511][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.055731][T13744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.192936][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 496.373300][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.407494][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 496.436445][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.467626][ T24] usb 2-1: config 0 descriptor?? [ 496.690556][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 496.699495][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 496.714376][ T24] usb 2-1: USB disconnect, device number 101 [ 497.562573][ T5938] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 497.582047][T11361] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 497.724530][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 497.740358][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.752253][T11361] usb 2-1: Using ep0 maxpacket: 32 [ 497.757817][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.769173][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 497.781266][T11361] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 497.790166][T11361] usb 2-1: config 0 has no interface number 0 [ 497.796419][ T5938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 497.807006][T11361] usb 2-1: config 0 interface 184 has no altsetting 0 [ 497.814118][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.830569][T11361] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 497.839975][T11361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.848226][ T5938] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 497.860207][T11361] usb 2-1: Product: syz [ 497.866487][ T5938] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 497.874806][T11361] usb 2-1: Manufacturer: syz [ 497.879447][T11361] usb 2-1: SerialNumber: syz [ 497.885183][ T5938] usb 5-1: Manufacturer: syz [ 497.897280][ T5938] usb 5-1: config 0 descriptor?? [ 497.902380][T11361] usb 2-1: config 0 descriptor?? [ 497.981664][ T1226] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 498.134852][ T1226] usb 3-1: unable to get BOS descriptor or descriptor too short [ 498.144666][ T1226] usb 3-1: config 194 has an invalid interface number: 50 but max is 0 [ 498.153392][ T1226] usb 3-1: config 194 has no interface number 0 [ 498.162930][ T1226] usb 3-1: config 194 interface 50 has no altsetting 0 [ 498.174978][ T1226] usb 3-1: string descriptor 0 read error: -22 [ 498.181868][ T1226] usb 3-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=9d.87 [ 498.190950][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.221674][ T5938] rc_core: IR keymap rc-hauppauge not found [ 498.229795][ T5938] Registered IR keymap rc-empty [ 498.235572][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.271710][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.282004][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 498.292909][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 498.306365][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input65 [ 498.320116][T11361] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 498.332565][T11361] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 498.342529][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.349909][T11361] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 498.361170][T11361] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 498.370466][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.393285][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.417068][T11361] usb 3-1: USB disconnect, device number 2 [ 498.432679][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 498.433435][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.442129][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 498.457596][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.471638][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.481114][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.500957][ T24] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 498.514617][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.515990][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.538200][T13770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.551816][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.552077][T13770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.572288][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.580758][ T24] usb 4-1: config 0 descriptor?? [ 498.591798][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.622349][ T5938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.644223][ T5938] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 498.653520][ T5938] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 499.203875][ T24] usb 4-1: language id specifier not provided by device, defaulting to English [ 499.817941][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.828803][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.851073][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.867392][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.928676][ T24] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 499.940087][ T24] letsketch 0003:6161:4D15.002B: probe with driver letsketch failed with error -71 [ 499.984390][ T24] usb 4-1: USB disconnect, device number 15 [ 500.029033][T13806] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 500.386117][ T24] usb 5-1: USB disconnect, device number 66 [ 500.433238][ T808] usb 2-1: USB disconnect, device number 102 [ 500.518189][T13819] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2742'. [ 500.648165][T13825] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2744'. [ 500.719131][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'. [ 500.801595][T11361] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 500.869575][T13834] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2746'. [ 500.965484][T11361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.983428][T11361] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 501.009099][T11361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.040504][T11361] usb 4-1: config 0 descriptor?? [ 501.251630][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 501.341679][ T5938] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 501.431687][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 501.441619][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.453383][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.464348][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 501.474145][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 501.478942][T11361] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 501.491152][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.492417][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 501.492445][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 501.492468][ T24] usb 5-1: Manufacturer: syz [ 501.495711][ T24] usb 5-1: config 0 descriptor?? [ 501.547616][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.555392][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.555752][T11361] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002C/input/input66 [ 501.581303][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 501.598808][ T5938] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 501.618428][ T5938] usb 3-1: config 254 has no interface number 0 [ 501.632060][ T5938] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 501.644990][ T5938] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.657815][ T5938] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.671317][ T5938] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 501.693814][ T5938] usb 3-1: config 254 interface 235 has no altsetting 0 [ 501.720895][ T5938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 501.736663][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.766750][T11361] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 501.787249][ T5938] usb 3-1: Product: syz [ 501.796273][ T5938] usb 3-1: Manufacturer: syz [ 501.807883][ T5938] usb 3-1: SerialNumber: syz [ 501.831125][T13845] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 501.854221][ T24] rc_core: IR keymap rc-hauppauge not found [ 501.864454][ T24] Registered IR keymap rc-empty [ 501.875834][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.913865][T11361] usb 4-1: USB disconnect, device number 16 [ 501.921872][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.959027][T13852] fido_id[13852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 501.977478][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 502.013164][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input67 [ 502.060283][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.089106][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.103685][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.136683][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.158306][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.163013][T13845] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 502.189843][ T5938] usbtest 3-1:254.235: Linux gadget zero [ 502.202775][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.206958][ T5938] usbtest 3-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 502.223110][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.265774][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.291683][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.328825][T13859] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2753'. [ 502.338167][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.371872][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.401725][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.404347][ T5897] usb 3-1: USB disconnect, device number 3 [ 502.444875][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 502.480122][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 502.732059][ T5938] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 502.779647][T13867] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.2757'. [ 502.799887][T11361] libceph: connect (1)[c::]:6789 error -101 [ 502.806082][T11361] libceph: mon0 (1)[c::]:6789 connect error [ 502.814118][T11361] libceph: connect (1)[c::]:6789 error -101 [ 502.820966][T11361] libceph: mon0 (1)[c::]:6789 connect error [ 502.872423][ T5938] usb 2-1: device descriptor read/64, error -71 [ 502.951366][T13873] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2758'. [ 503.036675][T13877] veth1_virt_wifi: entered allmulticast mode [ 503.045915][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2758'. [ 503.069808][T13876] veth1_virt_wifi: left allmulticast mode [ 503.083635][T11361] libceph: connect (1)[c::]:6789 error -101 [ 503.089966][T11361] libceph: mon0 (1)[c::]:6789 connect error [ 503.121696][ T5938] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 503.255803][T13885] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2762'. [ 503.269004][ T5938] usb 2-1: device descriptor read/64, error -71 [ 503.384016][ T5938] usb usb2-port1: attempt power cycle [ 503.420303][T13888] dvmrp6: entered allmulticast mode [ 503.451727][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 503.602648][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 503.605827][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.620052][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.621825][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 503.638370][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 503.655045][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.664556][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.678846][ T24] usb 3-1: config 0 descriptor?? [ 503.727685][T11361] usb 5-1: USB disconnect, device number 67 [ 503.734102][ T5938] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 503.775829][ T5938] usb 2-1: device descriptor read/8, error -71 [ 504.042669][ T5938] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 504.082729][ T5938] usb 2-1: device descriptor read/8, error -71 [ 504.112607][ T24] plantronics 0003:047F:FFFF.002D: item fetching failed at offset 11/15 [ 504.126557][ T24] plantronics 0003:047F:FFFF.002D: parse failed [ 504.136134][ T24] plantronics 0003:047F:FFFF.002D: probe with driver plantronics failed with error -22 [ 504.212562][ T5938] usb usb2-port1: unable to enumerate USB device [ 504.309243][ T5877] usb 3-1: USB disconnect, device number 4 [ 504.511612][ T5938] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 504.663048][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.674139][ T5938] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 504.684507][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.696702][ T5938] usb 5-1: config 0 descriptor?? [ 504.908005][ T5938] usbhid 5-1:0.0: can't add hid device: -71 [ 504.924090][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 504.931335][ T5938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 504.942182][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 504.950598][ T5938] usb 5-1: USB disconnect, device number 68 [ 505.667459][T13905] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2770'. [ 505.707180][T13867] ceph: No mds server is up or the cluster is laggy [ 505.741904][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'. [ 506.186008][T13918] kAFS: No cell specified [ 506.224741][T13918] netlink: 'syz.3.2775': attribute type 1 has an invalid length. [ 506.232920][T13918] netlink: 'syz.3.2775': attribute type 1 has an invalid length. [ 506.241068][T13918] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.2775'. [ 506.356015][T13921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.733385][ T5877] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 506.892777][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 506.907847][ T5877] usb 4-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 506.943133][ T5877] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.970158][ T5877] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.d2 [ 506.989685][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.999036][ T5877] usb 4-1: Product: syz [ 507.016021][ T5877] usb 4-1: Manufacturer: syz [ 507.033036][ T5877] usb 4-1: SerialNumber: syz [ 507.053002][ T5877] usb 4-1: config 0 descriptor?? [ 507.057681][T13925] Invalid ELF header magic: != ELF [ 507.083574][T13927] overlayfs: failed to resolve './file1': -2 [ 507.197267][T13932] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2779'. [ 507.533983][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 507.668899][T13921] Set syz1 is full, maxelem 65536 reached [ 507.681649][ T24] usb 3-1: device descriptor read/64, error -71 [ 507.931619][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 508.072739][ T24] usb 3-1: device descriptor read/64, error -71 [ 508.192447][ T24] usb usb3-port1: attempt power cycle [ 508.493561][T13962] loop5: detected capacity change from 0 to 7 [ 508.501973][T13962] Dev loop5: unable to read RDB block 7 [ 508.509374][T13962] loop5: AHDI p1 p2 p3 [ 508.514274][T13962] loop5: partition table partially beyond EOD, truncated [ 508.521815][T13962] loop5: p1 start 1818582900 is beyond EOD, truncated [ 508.529144][T13962] loop5: p2 size 150995200 extends beyond EOD, truncated [ 508.541814][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 508.582324][ T24] usb 3-1: device descriptor read/8, error -71 [ 508.596132][ T6128] udevd[6128]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 508.672133][T13964] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2790'. [ 508.741131][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 508.821597][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 508.884235][ T24] usb 3-1: device descriptor read/8, error -71 [ 508.992700][ T24] usb usb3-port1: unable to enumerate USB device [ 509.031191][T13979] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2794'. [ 509.186052][T13984] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 509.359098][T13991] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2799'. [ 509.386841][ T5938] usb 4-1: USB disconnect, device number 17 [ 509.433841][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2799'. [ 509.646194][T13998] kvm: user requested TSC rate below hardware speed [ 510.070866][T14009] delete_channel: no stack [ 510.088073][T14009] delete_channel: no stack [ 510.106625][T14009] GUP no longer grows the stack in syz.1.2803 (14009): 200000007000-200000008000 (200000004000) [ 510.136710][T14009] CPU: 0 UID: 0 PID: 14009 Comm: syz.1.2803 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.136749][T14009] Tainted: [L]=SOFTLOCKUP [ 510.136757][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 510.136771][T14009] Call Trace: [ 510.136780][T14009] [ 510.136789][T14009] dump_stack_lvl+0xe8/0x150 [ 510.136827][T14009] fixup_user_fault+0x637/0x6f0 [ 510.136863][T14009] fault_in_user_writeable+0x71/0xd0 [ 510.136892][T14009] futex_lock_pi+0x814/0xb10 [ 510.136928][T14009] ? __pfx_futex_lock_pi+0x10/0x10 [ 510.136985][T14009] ? __pfx_futex_wake_mark+0x10/0x10 [ 510.137024][T14009] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 510.137062][T14009] do_futex+0x292/0x420 [ 510.137098][T14009] ? __pfx_do_futex+0x10/0x10 [ 510.137140][T14009] __se_sys_futex+0x3a8/0x450 [ 510.137178][T14009] ? __pfx___se_sys_futex+0x10/0x10 [ 510.137208][T14009] ? __pfx___se_sys_prctl+0x10/0x10 [ 510.137237][T14009] ? __x64_sys_futex+0x21/0xf0 [ 510.137266][T14009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.137288][T14009] do_syscall_64+0x15f/0xf80 [ 510.137313][T14009] ? trace_irq_disable+0x3b/0x140 [ 510.137337][T14009] ? clear_bhb_loop+0x40/0x90 [ 510.137363][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.137381][T14009] RIP: 0033:0x7ffb4359c819 [ 510.137400][T14009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.137417][T14009] RSP: 002b:00007ffb44425028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 510.137438][T14009] RAX: ffffffffffffffda RBX: 00007ffb43816090 RCX: 00007ffb4359c819 [ 510.137461][T14009] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 510.137474][T14009] RBP: 00007ffb43632c91 R08: 0000000000000000 R09: 0000000000000082 [ 510.137486][T14009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.137498][T14009] R13: 00007ffb43816128 R14: 00007ffb43816090 R15: 00007ffd511c71c8 [ 510.137530][T14009] [ 510.252787][T14013] siw: device registration error -23 [ 510.572254][ T5938] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 510.712015][ T5938] usb 5-1: device descriptor read/64, error -71 [ 510.781600][ T5897] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 510.941626][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 510.955356][ T5897] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 510.973423][ T5897] usb 3-1: New USB device found, idVendor=0499, idProduct=5004, bcdDevice= 0.40 [ 510.982765][ T5938] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 510.990879][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.000558][ T5897] usb 3-1: Product: ― [ 511.005802][ T5897] usb 3-1: Manufacturer: 檼ꖗ책괥璗扎鮉䳉肮貪鹮⨩ᥚ盄홱톣횧ᷳ鯟伩➷㆖݄ꅇꑆ凄边ᜦ뢪괲䫇馊㦭톌뼾뙔䕞⽄נּﱅ偠셂๫鶇搫ష幎꼻Ụ林纄ﭘᡅꤍンெ咷骤/鏄姨ﯕ럯쫚仑⋞ꄍ껬韝鯁왙訍욼Ҟ扡ᐶ쑠俖빚謌⟯䷎䭐螅펄랫뒊垇垊몆݄ǫ [ 511.035980][ T5897] usb 3-1: SerialNumber: 㐊 [ 511.121644][ T5938] usb 5-1: device descriptor read/64, error -71 [ 511.232283][ T5938] usb usb5-port1: attempt power cycle [ 511.415366][T14040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.464804][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.485174][ T5897] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 511.526982][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.549353][ T5897] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 511.581941][ T5938] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 511.593751][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.622805][ T5938] usb 5-1: device descriptor read/8, error -71 [ 511.768917][ T5897] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 511.796903][ T5897] usb 3-1: USB disconnect, device number 9 [ 511.859014][ T6128] udevd[6128]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.899144][ T5938] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 511.934084][ T5938] usb 5-1: device descriptor read/8, error -71 [ 512.052036][ T5938] usb usb5-port1: unable to enumerate USB device [ 512.341616][ T808] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 512.386292][T14061] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2824'. [ 512.503092][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.514358][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 512.529723][ T808] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 512.539415][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.550231][ T808] usb 2-1: config 0 descriptor?? [ 512.591640][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 512.671596][ T5938] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 512.821564][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 512.828606][ T5938] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 512.839006][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.855895][ T5938] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 512.865105][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.873364][ T5938] usb 3-1: Product: syz [ 512.877644][ T5938] usb 3-1: Manufacturer: syz [ 512.882298][ T5938] usb 3-1: SerialNumber: syz [ 512.889631][ T5938] usb 3-1: config 0 descriptor?? [ 512.898130][ T5938] appledisplay 3-1:0.0: Could not find int-in endpoint [ 512.908496][ T5938] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 512.969511][ T808] uclogic 0003:28BD:0055.002E: interface is invalid, ignoring [ 513.099542][T14063] syzkaller1: entered promiscuous mode [ 513.105233][T14063] syzkaller1: entered allmulticast mode [ 513.119321][ T993] usb 3-1: USB disconnect, device number 10 [ 513.167370][ T808] usb 2-1: USB disconnect, device number 107 [ 513.581570][ T5897] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 513.733538][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 513.750723][ T5897] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 513.769037][ T5897] usb 5-1: config 0 has no interface number 0 [ 513.778319][ T5897] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 513.791711][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.799925][ T5897] usb 5-1: Product: syz [ 513.805437][T14072] netlink: 'syz.1.2828': attribute type 10 has an invalid length. [ 513.811372][ T5897] usb 5-1: Manufacturer: syz [ 513.821866][ T5897] usb 5-1: SerialNumber: syz [ 513.837671][ T5897] usb 5-1: config 0 descriptor?? [ 513.867131][T14072] team0: Port device dummy0 added [ 514.054760][T14067] netlink: 'syz.4.2827': attribute type 10 has an invalid length. [ 514.273184][ T5897] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 514.287167][ T5897] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 514.501339][ T5897] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 514.512981][ T5897] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 514.666777][ T5897] IPVS: starting estimator thread 0... [ 514.667724][T14079] IPVS: nq: FWM 3 0x00000003 - no destination available [ 514.771936][T14081] IPVS: using max 28 ests per chain, 67200 per kthread [ 514.866176][T14086] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2833'. [ 515.181648][ T808] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 515.221598][ T5897] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 515.345344][ T808] usb 3-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 515.354871][ T808] usb 3-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 515.363762][ T808] usb 3-1: Product: syz [ 515.367982][ T808] usb 3-1: Manufacturer: syz [ 515.372647][ T808] usb 3-1: SerialNumber: syz [ 515.383746][ T5897] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 515.385855][ T808] usb 3-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 515.395097][ T5897] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 515.413471][ T808] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.415234][ T5897] usb 2-1: config 1 interface 0 has no altsetting 0 [ 515.424665][ T808] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 515.434914][ T5897] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 515.440037][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 515.456055][ T808] usb 3-1: media controller created [ 515.456195][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.463348][T14097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2827'. [ 515.472491][ T5897] usb 2-1: Product: syz [ 515.485295][ T5897] usb 2-1: Manufacturer: syz [ 515.489938][ T5897] usb 2-1: SerialNumber: syz [ 515.490829][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.504832][T14092] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 515.513249][T14092] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 515.531452][ T808] usb 3-1: selecting invalid altsetting 1 [ 515.537862][ T808] set interface failed [ 515.538154][ T808] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 515.550127][ T808] error writing reg: 0xff, val: 0x00 [ 515.581747][ T808] dvb_usb_mxl111sf 3-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 515.606863][ T808] usb 3-1: USB disconnect, device number 11 [ 516.174487][ T5897] rtl8150 2-1:1.0: couldn't reset the device [ 516.192088][ T5897] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 516.231623][ T5897] usb 2-1: USB disconnect, device number 108 [ 516.542020][ T5897] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 516.600100][T14116] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2844'. [ 516.691571][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 516.702128][ T5897] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 516.711323][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.719435][ T5897] usb 2-1: Product: syz [ 516.723730][ T5897] usb 2-1: Manufacturer: syz [ 516.728343][ T5897] usb 2-1: SerialNumber: syz [ 516.731616][ T808] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 516.883615][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.895514][ T808] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 516.906484][ T993] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 516.914266][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.934635][ T808] usb 4-1: config 0 descriptor?? [ 516.935920][T11361] usb 5-1: USB disconnect, device number 73 [ 517.052105][ T993] usb 3-1: device descriptor read/64, error -71 [ 517.088751][ T5897] ems_usb 2-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 517.099510][ T5897] ems_usb 2-1:91.0: probe with driver ems_usb failed with error -22 [ 517.116058][ T5897] usb 2-1: USB disconnect, device number 109 [ 517.311847][ T993] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 517.322110][T11361] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 517.359262][ T808] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 517.370913][ T808] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002F/input/input68 [ 517.473895][ T993] usb 3-1: device descriptor read/64, error -71 [ 517.478164][T11361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.494990][T11361] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 517.495575][ T808] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 517.508542][T11361] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.535489][T11361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.554061][T11361] usb 5-1: config 0 descriptor?? [ 517.562539][ C1] keytouch 0003:0926:3333.002F: Event data for report 0 was too short (8 vs 2) [ 517.578169][T11361] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 517.592236][ T993] usb usb3-port1: attempt power cycle [ 517.796227][ T808] usb 4-1: USB disconnect, device number 19 [ 517.931633][ T993] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 517.982716][ T993] usb 3-1: device descriptor read/8, error -71 [ 518.014625][T14138] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2853'. [ 518.241619][ T993] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 518.262713][ T993] usb 3-1: device descriptor read/8, error -71 [ 518.375288][ T993] usb usb3-port1: unable to enumerate USB device [ 518.496203][T14145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.762129][ T993] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 518.923701][ T993] usb 4-1: config 127 has an invalid interface number: 47 but max is 1 [ 518.935541][ T993] usb 4-1: config 127 has an invalid interface number: 76 but max is 1 [ 518.945766][ T993] usb 4-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 518.956425][ T993] usb 4-1: config 127 has no interface number 0 [ 518.962808][ T993] usb 4-1: config 127 has no interface number 1 [ 518.969134][ T993] usb 4-1: config 127 interface 47 altsetting 4 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 518.982290][ T993] usb 4-1: config 127 interface 47 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 518.994452][ T993] usb 4-1: config 127 interface 76 altsetting 15 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 519.009472][ T993] usb 4-1: config 127 interface 76 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 519.020575][ T993] usb 4-1: config 127 interface 76 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 519.031671][ T993] usb 4-1: config 127 interface 76 altsetting 15 has a duplicate endpoint with address 0x7, skipping [ 519.042684][ T993] usb 4-1: config 127 interface 76 altsetting 15 has a duplicate endpoint with address 0x7, skipping [ 519.056275][ T993] usb 4-1: config 127 interface 76 altsetting 15 has a duplicate endpoint with address 0x3, skipping [ 519.067539][ T993] usb 4-1: config 127 interface 47 has no altsetting 0 [ 519.077383][ T993] usb 4-1: config 127 interface 76 has no altsetting 0 [ 519.088567][ T993] usb 4-1: New USB device found, idVendor=0403, idProduct=bca0, bcdDevice=15.a1 [ 519.098030][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.106207][ T993] usb 4-1: Product: ㍊菫ྨ譍矣煑弽榉鉭射ﳶ [ 519.114204][ T993] usb 4-1: Manufacturer: 嗂Ɍ⥄熏竴勐㰧浽௬뺱䄰 [ 519.126544][ T993] usb 4-1: SerialNumber: з [ 519.135639][T14145] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 519.361745][ T808] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 519.369849][ T993] usb 4-1: USB disconnect, device number 20 [ 519.531607][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 519.539267][ T808] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 519.547841][ T808] usb 2-1: config 0 has no interface number 0 [ 519.554744][ T808] usb 2-1: config 0 interface 184 has no altsetting 0 [ 519.564997][ T808] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 519.574289][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.582348][ T808] usb 2-1: Product: syz [ 519.586653][ T808] usb 2-1: Manufacturer: syz [ 519.591258][ T808] usb 2-1: SerialNumber: syz [ 519.598029][ T808] usb 2-1: config 0 descriptor?? [ 519.845394][T14156] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2860'. [ 519.856822][T14156] ip6gretap0: entered promiscuous mode [ 519.865496][T14156] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2860'. [ 520.069578][ T993] usb 5-1: USB disconnect, device number 74 [ 520.101410][T14164] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2863'. [ 520.206097][T14170] dlm: no locking on control device [ 520.218119][ T808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 520.232274][ T808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 520.242243][ T808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 520.254704][ T808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 520.264657][ T808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 520.275791][ T808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 520.287365][ T808] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 520.300992][ T808] usb 2-1: USB disconnect, device number 110 [ 520.421664][ T42] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 520.442316][ T993] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 520.573143][ T42] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 520.581318][ T42] usb 3-1: config 0 has no interface number 0 [ 520.588228][ T42] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 520.599410][ T42] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 520.610676][ T42] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 244, setting to 64 [ 520.623555][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.634723][ T993] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 520.644078][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.654214][ T42] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 520.663959][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.673167][ T993] usb 5-1: config 0 descriptor?? [ 520.678501][ T42] usb 3-1: Product: syz [ 520.683411][ T42] usb 3-1: Manufacturer: syz [ 520.692938][ T42] usb 3-1: SerialNumber: syz [ 520.700420][ T42] usb 3-1: config 0 descriptor?? [ 520.706367][T14168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 520.714184][T14168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 520.724561][ T42] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.751687][ T808] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 520.914868][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 520.935587][ T808] usb 4-1: config 11 has an invalid interface number: 144 but max is 0 [ 520.944448][ T42] usb 3-1: USB disconnect, device number 16 [ 520.957336][ T808] usb 4-1: config 11 has no interface number 0 [ 520.965498][ T808] usb 4-1: config 11 interface 144 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 520.977656][ T808] usb 4-1: config 11 interface 144 altsetting 155 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 520.996788][ T808] usb 4-1: config 11 interface 144 altsetting 155 endpoint 0x8A is Bulk; changing to Interrupt [ 521.015480][ T808] usb 4-1: config 11 interface 144 altsetting 155 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.037720][ T808] usb 4-1: config 11 interface 144 has no altsetting 0 [ 521.055998][ T808] usb 4-1: string descriptor 0 read error: -22 [ 521.068507][ T808] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=4b.e6 [ 521.080885][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.096870][T14182] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 521.107953][ T993] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 521.127469][ T808] em28xx 4-1:11.144: New device @ 1.5 Mbps (1b80:e309, interface 144, class 144) [ 521.137594][ T993] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0030/input/input69 [ 521.149100][ T808] em28xx 4-1:11.144: Device initialization failed. [ 521.156429][ T808] em28xx 4-1:11.144: Device must be connected to a high-speed USB 2.0 port. [ 521.201573][T11361] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 521.233394][ T993] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 521.319162][ C1] keytouch 0003:0926:3333.0030: Event data for report 0 was too short (8 vs 2) [ 521.325361][ T1226] usb 4-1: USB disconnect, device number 21 [ 521.368573][T14190] syzkaller1: entered promiscuous mode [ 521.379154][T14190] syzkaller1: entered allmulticast mode [ 521.391836][T11361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 521.404523][T11361] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 521.414181][T11361] usb 2-1: can't read configurations, error -71 [ 521.522480][ T5938] usb 5-1: USB disconnect, device number 75 [ 521.661305][T14200] loop4: detected capacity change from 0 to 7 [ 521.671033][T14200] Dev loop4: unable to read RDB block 7 [ 521.677073][T14200] loop4: unable to read partition table [ 521.683081][T14200] loop4: partition table beyond EOD, truncated [ 521.689272][T14200] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 521.946996][T14208] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2879'. [ 522.016308][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 522.830468][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2881'. [ 523.203064][ T5938] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 523.231617][ T1226] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 523.363275][ T5938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.373492][ T5938] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 523.384523][ T5938] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 523.399084][ T5938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.408336][ T1226] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.418470][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 523.426546][ T1226] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 523.439701][ T5938] usb 4-1: SerialNumber: syz [ 523.443605][ T993] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 523.447502][ T1226] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 523.462776][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.472648][ T5938] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 523.480556][ T5938] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 523.489739][ T1226] usb 5-1: config 0 descriptor?? [ 523.494830][ T5938] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 523.506235][ T1226] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 523.611591][ T993] usb 3-1: Using ep0 maxpacket: 16 [ 523.618420][ T993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.628700][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.639788][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.649648][ T993] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 523.660024][ T993] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.674311][ T993] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 523.683592][ T993] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.688257][T14223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.693152][ T993] usb 3-1: Manufacturer: syz [ 523.702483][T14223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.713845][ T993] usb 3-1: config 0 descriptor?? [ 523.726197][ T1226] usb 4-1: USB disconnect, device number 22 [ 523.973776][ T993] rc_core: IR keymap rc-hauppauge not found [ 523.979705][ T993] Registered IR keymap rc-empty [ 523.984765][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.011638][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.032397][ T993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 524.046422][ T993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input70 [ 524.061085][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.081620][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.101589][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.121989][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.141769][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.161691][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.181887][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.202123][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.221719][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.242217][ T993] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.277929][ T993] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.287220][ T993] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.541578][ T1226] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 524.567051][ T5938] usb 3-1: USB disconnect, device number 17 [ 524.601574][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 524.608949][T14214] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 524.718997][T14240] syzkaller1: entered promiscuous mode [ 524.724663][T14240] syzkaller1: entered allmulticast mode [ 524.734968][ T1226] usb 4-1: unable to get BOS descriptor or descriptor too short [ 524.756582][ T1226] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 524.765947][ T1226] usb 4-1: can't read configurations, error -71 [ 525.165390][T14253] netlink: 14532 bytes leftover after parsing attributes in process `syz.2.2892'. [ 525.185255][T14255] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2893'. [ 525.411614][ T5938] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 525.515895][T14265] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 525.562368][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 525.572005][ T5938] usb 3-1: config 15 has an invalid interface number: 31 but max is 1 [ 525.580294][ T5938] usb 3-1: config 15 has an invalid interface number: 92 but max is 1 [ 525.588825][ T5938] usb 3-1: config 15 has no interface number 0 [ 525.595138][ T5938] usb 3-1: config 15 has no interface number 1 [ 525.601322][ T5938] usb 3-1: config 15 interface 31 has no altsetting 0 [ 525.609611][ T5938] usb 3-1: config 15 interface 92 has no altsetting 0 [ 525.611712][ T993] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 525.618618][ T5938] usb 3-1: New USB device found, idVendor=06cd, idProduct=0113, bcdDevice=fa.a0 [ 525.633644][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.641733][ T5938] usb 3-1: Product: syz [ 525.645932][ T5938] usb 3-1: Manufacturer: syz [ 525.650536][ T5938] usb 3-1: SerialNumber: syz [ 525.771564][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 525.778500][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.791448][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.802730][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 525.813123][ T993] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 525.822899][ T993] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.837281][ T993] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 525.846397][ T993] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 525.854447][ T993] usb 2-1: Manufacturer: syz [ 525.862340][ T993] usb 2-1: config 0 descriptor?? [ 525.863740][ T5938] keyspan 3-1:15.31: Keyspan - (without firmware) converter detected [ 525.879496][ T5938] usb 3-1: Direct firmware load for keyspan/usa28xb.fw failed with error -2 [ 525.888632][ T5938] usb 3-1: Falling back to sysfs fallback for: keyspan/usa28xb.fw [ 525.988336][ T808] usb 5-1: USB disconnect, device number 76 [ 526.151644][ T993] rc_core: IR keymap rc-hauppauge not found [ 526.161623][ T993] Registered IR keymap rc-empty [ 526.174876][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.211640][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.243345][ T993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 526.272917][ T993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input71 [ 526.297241][T14276] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2903'. [ 526.322316][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.351844][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.384592][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.421876][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.461179][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.491619][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.516969][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.547399][ T1226] hid_parser_main: 7 callbacks suppressed [ 526.547419][ T1226] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 526.563445][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.601851][ T1226] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 526.604664][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.671726][ T993] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.713126][ T993] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 526.736437][ T993] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 526.779002][ T993] usb 2-1: USB disconnect, device number 113 [ 526.823462][ T808] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 526.972072][ T808] usb 4-1: device descriptor read/64, error -71 [ 527.221608][ T808] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 527.372086][ T808] usb 4-1: device descriptor read/64, error -71 [ 527.489467][ T808] usb usb4-port1: attempt power cycle [ 527.511452][T14319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.686971][T14321] netlink: 'syz.4.2920': attribute type 1 has an invalid length. [ 527.698342][T14321] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2920'. [ 527.841656][ T808] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 527.862027][ T808] usb 4-1: device descriptor read/8, error -71 [ 527.945347][T14330] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 527.955480][T14332] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 527.981767][ T5877] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 528.101568][ T808] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 528.132786][ T808] usb 4-1: device descriptor read/8, error -71 [ 528.145054][ T5877] usb 5-1: config 1 interface 0 has no altsetting 0 [ 528.158382][ T5877] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 528.173740][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.191597][ T5877] usb 5-1: Product: syz [ 528.195894][ T5877] usb 5-1: Manufacturer: syz [ 528.202951][ T5877] usb 5-1: SerialNumber: syz [ 528.252054][ T808] usb usb4-port1: unable to enumerate USB device [ 528.326413][T14353] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2933'. [ 528.362120][ T1226] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 528.462146][T14321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.474186][T14321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.485503][T14321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.495569][T14321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.568188][ T5877] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input72 [ 528.585597][ T5198] bcm5974 5-1:1.0: could not read from device [ 528.594338][ T5198] bcm5974 5-1:1.0: could not read from device [ 528.608434][ T5198] bcm5974 5-1:1.0: could not read from device [ 528.611741][ T5877] usb 5-1: USB disconnect, device number 77 [ 528.626120][ T5198] bcm5974 5-1:1.0: could not read from device [ 529.100588][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.110737][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.729643][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'. [ 529.773081][T14382] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 529.790675][T14382] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 529.810560][T14382] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 529.816758][T14382] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 529.826991][T14382] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 529.833391][ T993] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 529.848501][T14382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 529.858581][T14382] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 529.868961][T14382] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 529.881052][T14387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.900439][T14387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.917160][T14387] netlink: 'syz.1.2947': attribute type 2 has an invalid length. [ 530.002679][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 530.020317][ T993] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 530.038659][ T993] usb 5-1: config 0 has no interface number 0 [ 530.053261][ T993] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 530.064866][ T993] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 530.077935][ T993] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 530.087532][ T993] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 530.095927][ T993] usb 5-1: Product: syz [ 530.111694][ T993] usb 5-1: SerialNumber: syz [ 530.141783][ T993] usb 5-1: config 0 descriptor?? [ 530.155553][ T993] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 530.168108][ T993] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input73 [ 530.364416][T14377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.378363][T14377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.389713][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 530.399634][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 530.407082][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 530.414721][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 530.422049][ T24] usb 5-1: USB disconnect, device number 78 [ 530.428334][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 530.428358][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 530.449440][ T24] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 530.640170][T14404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.924865][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 530.990424][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.999372][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.009864][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.022789][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.033166][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.043775][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.052225][T14420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.060992][T14420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.071809][ T24] usb 5-1: device descriptor read/64, error -71 [ 531.323108][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 531.457224][T14435] lo speed is unknown, defaulting to 1000 [ 531.474290][ T24] usb 5-1: device descriptor read/64, error -71 [ 531.591929][ T24] usb usb5-port1: attempt power cycle [ 531.794352][T14444] binder: 14443:14444 ioctl c0306201 2000000004c0 returned -22 [ 531.811884][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 531.883611][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 531.889696][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 531.925360][T14448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.963788][ T24] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 531.994001][ T24] usb 5-1: device descriptor read/8, error -71 [ 532.091829][ T5897] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 532.241996][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 532.245749][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 532.249623][ T5897] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 532.270723][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.289842][ T5897] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 532.299090][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.307162][ T5897] usb 4-1: Product: syz [ 532.311389][ T5897] usb 4-1: Manufacturer: syz [ 532.313206][ T24] usb 5-1: device descriptor read/8, error -71 [ 532.316072][ T5897] usb 4-1: SerialNumber: syz [ 532.443837][ T24] usb usb5-port1: unable to enumerate USB device [ 532.524418][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.532673][T14444] binder: 14443:14444 ioctl 8b32 200000000000 returned -22 [ 532.545203][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.572698][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.577945][ T5897] usb 4-1: 0:1 : does not exist [ 532.589905][ T5897] usb 4-1: 0:2 : does not exist [ 532.601004][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.628444][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.642557][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.707832][ T5897] usb 4-1: USB disconnect, device number 29 [ 533.201932][T14459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2973'. [ 533.356121][T14467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.369609][T14467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.413492][T14469] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2977'. [ 533.473732][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 533.531593][ T1226] usb 2-1: device descriptor read/64, error -110 [ 533.564948][T14475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.601583][ T993] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 533.761571][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 533.768230][ T993] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 533.778617][ T993] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.791847][ T1226] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 533.793733][ T993] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 533.809661][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.817759][ T993] usb 5-1: Product: syz [ 533.822000][ T993] usb 5-1: Manufacturer: syz [ 533.826609][ T993] usb 5-1: SerialNumber: syz [ 533.834711][ T993] usb 5-1: config 0 descriptor?? [ 533.843289][ T993] appledisplay 5-1:0.0: Could not find int-in endpoint [ 533.850851][ T993] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 533.881628][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 533.921557][ T1226] usb 2-1: device descriptor read/64, error -32 [ 533.961593][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 533.967667][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 534.031766][ T1226] usb usb2-port1: attempt power cycle [ 534.044835][T14466] syzkaller1: entered promiscuous mode [ 534.050432][T14466] syzkaller1: entered allmulticast mode [ 534.059895][ T5897] usb 5-1: USB disconnect, device number 83 [ 534.381594][ T1226] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 534.402287][ T1226] usb 2-1: device descriptor read/8, error -32 [ 534.491587][ T993] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 534.511666][ T1226] raw-gadget.2 gadget.1: failed to queue suspend event [ 534.519971][ T1226] raw-gadget.2 gadget.1: failed to queue reset event [ 534.601668][ T1226] raw-gadget.2 gadget.1: failed to queue resume event [ 534.655116][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.672026][ T1226] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 534.676425][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.692295][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 534.692699][ T993] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 534.701282][ T1226] usb 2-1: device descriptor read/8, error -32 [ 534.708668][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.735061][ T993] usb 4-1: config 0 descriptor?? [ 534.834590][ T1226] raw-gadget.2 gadget.1: failed to queue suspend event [ 534.846679][ T1226] usb usb2-port1: unable to enumerate USB device [ 535.065032][T14498] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20004 [ 535.140306][T14502] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2987'. [ 535.228091][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'. [ 535.287279][ T993] usbhid 4-1:0.0: can't add hid device: -71 [ 535.297475][ T993] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 535.319054][ T993] usb 4-1: USB disconnect, device number 30 [ 535.413639][T14509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.043670][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 536.043703][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 536.193201][ T993] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 536.351630][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 536.363941][ T993] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 536.375776][ T993] usb 5-1: config 0 has no interface number 0 [ 536.381328][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.381993][ T993] usb 5-1: too many endpoints for config 0 interface 154 altsetting 16: 145, using maximum allowed: 30 [ 536.382044][ T993] usb 5-1: config 0 interface 154 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 536.382072][ T993] usb 5-1: config 0 interface 154 has no altsetting 0 [ 536.382110][ T993] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 536.382135][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.395506][ T993] usb 5-1: config 0 descriptor?? [ 536.403628][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.432483][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 536.462109][T14531] netlink: 'syz.1.3000': attribute type 16 has an invalid length. [ 536.469987][T14531] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3000'. [ 536.479735][T14531] veth1_macvtap: entered allmulticast mode [ 536.487945][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.496885][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.611553][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 536.618657][ T24] usb 4-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 536.630522][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.646347][ T24] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 536.655502][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.666393][ T24] usb 4-1: config 0 descriptor?? [ 536.937502][ T24] usb 4-1: string descriptor 0 read error: -71 [ 536.948016][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 536.957967][ T24] usb 4-1: USB disconnect, device number 31 [ 537.107519][T14538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.117301][T14538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.354498][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.363304][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.778038][T14558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.788303][T14558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.992193][ T5897] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 538.153053][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.163270][ T5897] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 538.172357][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.183792][ T5897] usb 4-1: config 0 descriptor?? [ 538.192990][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 538.593894][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 538.603979][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 538.614767][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 538.622502][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 538.629724][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 539.005593][ T5877] usb 5-1: USB disconnect, device number 84 [ 539.341912][ T5897] pwc: recv_control_msg error -71 req 02 val 2000 [ 539.357929][ T5877] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 539.373403][ T5897] pwc: recv_control_msg error -71 req 02 val 2100 [ 539.386957][ T5897] pwc: recv_control_msg error -71 req 04 val 1500 [ 539.402294][ T5897] pwc: recv_control_msg error -71 req 02 val 2500 [ 539.410446][T14577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.422043][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 539.425156][T14577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.430966][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 539.446434][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 539.455397][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 539.465524][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 539.472778][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 539.490219][ T5897] pwc: Registered as video103. [ 539.500469][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input74 [ 539.535163][ T5897] usb 4-1: USB disconnect, device number 32 [ 539.554465][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 539.569945][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 544, setting to 64 [ 539.582913][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 539.594815][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 539.606133][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.624658][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.641974][ T5877] usb 5-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40 [ 539.651387][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.662300][ T5877] usb 5-1: Product: 䀁 [ 539.666525][ T5877] usb 5-1: Manufacturer: ь [ 539.671050][ T5877] usb 5-1: SerialNumber: Б [ 539.886527][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.895758][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.991627][T14582] netlink: 'syz.1.3022': attribute type 2 has an invalid length. [ 539.991842][ T5897] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 540.108733][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.127631][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.141801][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.152697][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.184216][ T5897] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 540.193117][ T5897] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 540.202508][ T5897] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 540.213061][ T5897] usb 4-1: config 220 has no interface number 2 [ 540.219419][ T5897] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 540.233416][ T5897] usb 4-1: config 220 interface 0 has no altsetting 0 [ 540.233440][ T5897] usb 4-1: config 220 interface 76 has no altsetting 0 [ 540.233485][ T5897] usb 4-1: config 220 interface 1 has no altsetting 0 [ 540.236746][ T5897] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 540.265887][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.265914][ T5897] usb 4-1: Product: syz [ 540.265930][ T5897] usb 4-1: Manufacturer: syz [ 540.283713][ T5897] usb 4-1: SerialNumber: syz [ 540.510380][ T5897] usb 4-1: selecting invalid altsetting 0 [ 540.517128][ T5897] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 540.537182][ T5897] uvcvideo 4-1:220.0: No valid video chain found. [ 540.555756][ T5897] usb 4-1: selecting invalid altsetting 0 [ 540.561866][ T5897] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 540.576265][ T5897] usb 4-1: USB disconnect, device number 33 [ 540.700691][ T5877] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.798072][ T5877] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 540.820922][ T5877] usb 5-1: USB disconnect, device number 85 [ 540.862911][ T6138] udevd[6138]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.568002][T14629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.580782][T14629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.631867][ T5897] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 541.811639][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 541.822866][T14629] infiniband syz1: set active [ 541.824848][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.827612][T14629] infiniband syz1: added team_slave_0 [ 541.847628][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 541.860151][T14629] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 541.861323][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 541.875470][T14629] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 541.907139][T14629] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 541.909037][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 541.945050][T14629] RDS/IB: syz1: added [ 541.954897][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 541.965160][T14629] smc: adding ib device syz1 with port count 1 [ 541.971415][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.985703][T14629] smc: ib device syz1 port 1 has no pnetid [ 541.997048][ T5897] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 542.015758][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.045867][ T5897] usb 5-1: config 0 descriptor?? [ 542.181694][ T5897] rc_core: IR keymap rc-hauppauge not found [ 542.198410][ T5897] Registered IR keymap rc-empty [ 542.221913][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.242486][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.293379][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 542.326711][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input75 [ 542.348434][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.355745][ C0] mceusb 5-1:0.0: Error: urb status = -75 [ 542.391739][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.423542][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.463551][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.494935][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.522247][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.541736][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.561707][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.603165][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.621668][ T5897] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 542.655243][ T5897] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 542.664867][ T5897] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 542.681728][ T5897] usb 5-1: USB disconnect, device number 86 [ 542.861580][T11361] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 543.002121][T11361] usb 4-1: device descriptor read/64, error -71 [ 543.243021][T11361] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 543.391670][T11361] usb 4-1: device descriptor read/64, error -71 [ 543.511868][T11361] usb usb4-port1: attempt power cycle [ 543.612083][ T5897] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 543.761686][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 543.768228][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.779232][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.789036][ T5897] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 543.798147][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.809184][ T5897] usb 5-1: config 0 descriptor?? [ 543.818078][ T5897] hub 5-1:0.0: USB hub found [ 543.861628][T11361] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 543.882369][T11361] usb 4-1: device descriptor read/8, error -71 [ 544.016847][ T5897] hub 5-1:0.0: 1 port detected [ 544.134280][T11361] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 544.162597][T11361] usb 4-1: device descriptor read/8, error -71 [ 544.223250][ T5897] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 544.233942][ T5897] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 544.246223][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 544.252277][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 544.272492][T11361] usb usb4-port1: unable to enumerate USB device [ 544.293151][ T5897] usb 5-1: USB disconnect, device number 87 [ 544.648156][T14652] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3050'. [ 544.696235][T14655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.706189][T14655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.716705][T14655] syzkaller1: entered promiscuous mode [ 544.722764][T14655] syzkaller1: entered allmulticast mode [ 545.031599][ T993] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 545.203407][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.214438][ T993] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 545.223543][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.234397][ T993] usb 5-1: config 0 descriptor?? [ 545.334244][T14659] loop5: detected capacity change from 0 to 7 [ 545.342967][T14659] Dev loop5: unable to read RDB block 7 [ 545.348594][T14659] loop5: AHDI p1 p2 p3 [ 545.354157][T14659] loop5: partition table partially beyond EOD, truncated [ 545.369187][T14659] loop5: p1 start 1818582900 is beyond EOD, truncated [ 545.376659][T14659] loop5: p2 size 150995200 extends beyond EOD, truncated [ 545.434029][ T6138] udevd[6138]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 545.652781][ T993] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 545.667233][ T993] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0032/input/input76 [ 545.768760][ T993] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 545.871282][ C1] keytouch 0003:0926:3333.0032: Event data for report 0 was too short (8 vs 6) [ 546.061570][ T5897] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 546.074153][T11361] usb 5-1: USB disconnect, device number 88 [ 546.223039][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.235892][ T5897] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 546.245251][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.253478][ T5897] usb 4-1: Product: syz [ 546.257684][ T5897] usb 4-1: Manufacturer: syz [ 546.262972][ T5897] usb 4-1: SerialNumber: syz [ 546.270938][ T5897] usb 4-1: config 0 descriptor?? [ 546.279529][ T5897] cyberjack 4-1:0.0: required endpoints missing [ 546.503681][ T5897] usb 4-1: USB disconnect, device number 38 [ 546.709170][T14684] loop5: detected capacity change from 0 to 7 [ 546.717398][T14684] Dev loop5: unable to read RDB block 7 [ 546.723496][T14684] loop5: AHDI p1 p2 p3 [ 546.728705][T14684] loop5: partition table partially beyond EOD, truncated [ 546.745552][T14684] loop5: p1 start 1818582900 is beyond EOD, truncated [ 546.760543][T14684] loop5: p2 size 150995200 extends beyond EOD, truncated [ 546.847318][ T6138] udevd[6138]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 547.001671][ T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 547.174017][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 547.191642][ T24] usb 5-1: too many configurations: 66, using maximum allowed: 8 [ 547.209081][ T24] usb 5-1: config 254 has an invalid interface number: 205 but max is 0 [ 547.231629][ T24] usb 5-1: config 254 has an invalid descriptor of length 88, skipping remainder of the config [ 547.254030][ T24] usb 5-1: config 254 has no interface number 0 [ 547.271631][ T24] usb 5-1: config 254 interface 205 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 547.291626][ T24] usb 5-1: config 254 interface 205 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.322012][ T24] usb 5-1: config 254 interface 205 has no altsetting 0 [ 547.333291][ T24] usb 5-1: config 254 has an invalid interface number: 205 but max is 0 [ 547.351742][ T24] usb 5-1: config 254 has an invalid descriptor of length 88, skipping remainder of the config [ 547.362998][ T24] usb 5-1: config 254 has no interface number 0 [ 547.370423][ T24] usb 5-1: config 254 interface 205 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 547.382356][ T24] usb 5-1: config 254 interface 205 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.396254][ T24] usb 5-1: config 254 interface 205 has no altsetting 0 [ 547.407037][ T24] usb 5-1: config 254 has an invalid interface number: 205 but max is 0 [ 547.416216][ T24] usb 5-1: config 254 has an invalid descriptor of length 88, skipping remainder of the config [ 547.426638][ T24] usb 5-1: config 254 has no interface number 0 [ 547.441601][ T24] usb 5-1: config 254 interface 205 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 547.452767][ T24] usb 5-1: config 254 interface 205 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.466165][ T24] usb 5-1: config 254 interface 205 has no altsetting 0 [ 547.482481][ T24] usb 5-1: config 254 has an invalid interface number: 205 but max is 0 [ 547.492378][T14701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.501224][T14701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.509126][ T24] usb 5-1: config 254 has an invalid descriptor of length 88, skipping remainder of the config [ 547.520131][ T24] usb 5-1: config 254 has no interface number 0 [ 547.526556][ T24] usb 5-1: config 254 interface 205 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 547.540009][T14701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.551690][ T24] usb 5-1: config 254 interface 205 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.567359][ T24] usb 5-1: config 254 interface 205 has no altsetting 0 [ 547.575004][T14701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.586952][ T24] usb 5-1: config 254 has an invalid interface number: 205 but max is 0 [ 547.596670][ T24] usb 5-1: config 254 has an invalid descriptor of length 88, skipping remainder of the config [ 547.607137][ T24] usb 5-1: config 254 has no interface number 0 [ 547.613596][ T24] usb 5-1: config 254 interface 205 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 547.625333][ T24] usb 5-1: config 254 interface 205 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.639259][ T24] usb 5-1: config 254 interface 205 has no altsetting 0 [ 547.648114][ T24] usb 5-1: config 254 has an invalid interface number: 205 but max is 0 [ 547.656787][ T24] usb 5-1: config 254 has an invalid descriptor of length 88, skipping remainder of the config [ 547.667275][ T24] usb 5-1: config 254 has no interface number 0 [ 547.673895][ T24] usb 5-1: config 254 interface 205 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 547.685260][ T24] usb 5-1: config 254 interface 205 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.699716][ T24] usb 5-1: config 254 interface 205 has no altsetting 0 [ 547.707911][ T24] usb 5-1: config 254 has an invalid interface number: 205 but max is 0 [ 547.716582][ T24] usb 5-1: config 254 has an invalid descriptor of length 88, skipping remainder of the config [ 547.728112][ T24] usb 5-1: config 254 has no interface number 0 [ 547.734509][ T24] usb 5-1: config 254 interface 205 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 547.745618][ T24] usb 5-1: config 254 interface 205 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.758875][ T24] usb 5-1: config 254 interface 205 has no altsetting 0 [ 547.767076][ T24] usb 5-1: config 254 has an invalid interface number: 205 but max is 0 [ 547.775546][ T24] usb 5-1: config 254 has an invalid descriptor of length 88, skipping remainder of the config [ 547.785967][ T24] usb 5-1: config 254 has no interface number 0 [ 547.792568][ T24] usb 5-1: config 254 interface 205 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 547.804347][ T24] usb 5-1: config 254 interface 205 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.817697][ T24] usb 5-1: config 254 interface 205 has no altsetting 0 [ 547.830115][ T24] usb 5-1: New USB device found, idVendor=1a0b, idProduct=3218, bcdDevice=f0.6a [ 547.839492][ T24] usb 5-1: New USB device strings: Mfr=244, Product=182, SerialNumber=74 [ 547.848075][ T24] usb 5-1: Product: syz [ 547.852406][ T24] usb 5-1: Manufacturer: syz [ 547.857049][ T24] usb 5-1: SerialNumber: syz [ 547.917008][T14709] overlayfs: workdir and upperdir must be separate subtrees [ 548.083772][ T24] usb 5-1: USB disconnect, device number 89 [ 548.091957][T14715] netlink: 'syz.3.3073': attribute type 2 has an invalid length. [ 548.164207][T14715] hmac(sha224): entered promiscuous mode [ 548.171512][T14717] 9pnet_fd: p9_fd_create_tcp (14717): problem connecting socket to 127.0.0.1 [ 548.191087][T14717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.206095][T14717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.895320][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.917981][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.151652][ T24] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 549.329900][T14728] syzkaller1: entered promiscuous mode [ 549.335547][T14728] syzkaller1: entered allmulticast mode [ 549.347902][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 549.378248][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 549.388984][ T24] usb 5-1: can't read configurations, error -71 [ 549.483820][ T1226] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 549.546982][T14740] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 549.556201][T14740] overlayfs: failed to set xattr on upper [ 549.563506][T14740] overlayfs: ...falling back to index=off. [ 549.570223][T14740] overlayfs: ...falling back to uuid=null. [ 549.644324][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 549.651299][ T1226] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 549.663356][ T1226] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.679642][ T1226] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 549.688865][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.696911][ T1226] usb 4-1: Product: syz [ 549.701109][ T1226] usb 4-1: Manufacturer: syz [ 549.705938][ T1226] usb 4-1: SerialNumber: syz [ 549.718653][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 549.719105][ T1226] usb 4-1: config 0 descriptor?? [ 549.736806][ T1226] appledisplay 4-1:0.0: Could not find int-in endpoint [ 549.744561][ T1226] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 549.938860][T14732] syzkaller1: entered promiscuous mode [ 549.944471][T14732] syzkaller1: entered allmulticast mode [ 549.962752][ T1226] usb 4-1: USB disconnect, device number 39 [ 550.088244][T14752] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3089'. [ 550.149017][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 550.544913][T14758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.559139][T14758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.837886][T14767] befs: (nbd3): No write support. Marking filesystem read-only [ 550.854648][T14767] befs: (nbd3): unable to read superblock [ 551.153971][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.183703][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.205675][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.217949][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.232364][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.251065][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.364560][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.379776][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.471589][ T808] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 551.491824][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 551.621600][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 551.628878][ T808] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 551.639171][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.652153][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 551.659777][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 551.667993][ T808] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 551.677451][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.685584][ T808] usb 4-1: Product: syz [ 551.689787][ T808] usb 4-1: Manufacturer: syz [ 551.694572][ T24] usb 5-1: config 255 has an invalid interface number: 45 but max is 0 [ 551.702894][ T808] usb 4-1: SerialNumber: syz [ 551.707539][ T24] usb 5-1: config 255 has no interface number 0 [ 551.715791][ T24] usb 5-1: config 255 interface 45 has no altsetting 0 [ 551.724007][ T808] usb 4-1: config 0 descriptor?? [ 551.731787][ T808] appledisplay 4-1:0.0: Could not find int-in endpoint [ 551.740219][ T24] usb 5-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice= b.6c [ 551.749683][ T808] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 551.757043][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.766002][ T24] usb 5-1: Product: syz [ 551.770776][ T24] usb 5-1: Manufacturer: syz [ 551.776120][ T24] usb 5-1: SerialNumber: syz [ 551.934932][T14777] syzkaller1: entered promiscuous mode [ 551.940543][T14777] syzkaller1: entered allmulticast mode [ 551.952929][ T1226] usb 4-1: USB disconnect, device number 40 [ 551.989968][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3098'. [ 552.023268][ T24] ums-datafab 5-1:255.45: USB Mass Storage device detected [ 552.142485][T14793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.152762][T14793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.183845][ T24] usb 5-1: USB disconnect, device number 92 [ 552.832839][T14808] loop5: detected capacity change from 0 to 7 [ 552.848272][T14808] Dev loop5: unable to read RDB block 7 [ 552.851803][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 552.862385][T14808] loop5: AHDI p1 p2 p3 [ 552.866635][T14808] loop5: partition table partially beyond EOD, truncated [ 552.876198][T14808] loop5: p1 start 1818582900 is beyond EOD, truncated [ 552.884882][T14808] loop5: p2 size 150995200 extends beyond EOD, truncated [ 552.983685][ T6138] udevd[6138]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 553.055233][T14799] syzkaller1: entered promiscuous mode [ 553.067612][T14799] syzkaller1: entered allmulticast mode [ 553.073922][T14810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.091543][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 553.103911][T14810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.129439][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 553.141074][ T24] usb 4-1: can't read configurations, error -71 [ 553.165640][T14810] syzkaller1: entered promiscuous mode [ 553.171590][T14810] syzkaller1: entered allmulticast mode [ 553.871586][T11361] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 553.987032][T14833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3120'. [ 554.041630][T11361] usb 5-1: Using ep0 maxpacket: 16 [ 554.049023][T11361] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 554.063714][T11361] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.084504][T11361] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 554.094008][T11361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.102438][T11361] usb 5-1: Product: syz [ 554.106795][T11361] usb 5-1: Manufacturer: syz [ 554.111435][T11361] usb 5-1: SerialNumber: syz [ 554.122659][T11361] usb 5-1: config 0 descriptor?? [ 554.130636][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3123'. [ 554.142299][T11361] appledisplay 5-1:0.0: Could not find int-in endpoint [ 554.150933][T11361] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 554.168218][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'. [ 554.192924][ T24] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 554.262040][T14845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.272280][T14845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.293066][T14845] syzkaller1: entered promiscuous mode [ 554.298600][T14845] syzkaller1: entered allmulticast mode [ 554.334108][T14814] syzkaller1: entered promiscuous mode [ 554.339784][T14814] syzkaller1: entered allmulticast mode [ 554.342080][ T24] usb 4-1: device descriptor read/64, error -71 [ 554.352411][ T1226] usb 5-1: USB disconnect, device number 93 [ 554.462003][ T24] usb usb4-port1: attempt power cycle [ 554.801805][ T24] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 554.822512][ T24] usb 4-1: device descriptor read/8, error -71 [ 554.946812][T14851] loop5: detected capacity change from 0 to 7 [ 554.962875][T14851] Dev loop5: unable to read RDB block 7 [ 554.973885][T14851] loop5: AHDI p1 p2 p3 [ 554.978498][T14851] loop5: partition table partially beyond EOD, truncated [ 554.986544][T14851] loop5: p1 start 1818582900 is beyond EOD, truncated [ 554.994704][T14851] loop5: p2 size 150995200 extends beyond EOD, truncated [ 555.039966][ T6138] udevd[6138]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 555.063391][ T24] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 555.106590][ T24] usb 4-1: device descriptor read/8, error -71 [ 555.219963][T14859] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3132'. [ 555.221981][ T24] usb usb4-port1: unable to enumerate USB device [ 555.807022][T14853] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 556.171619][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 556.334083][T14870] syzkaller1: entered promiscuous mode [ 556.339623][T14870] syzkaller1: entered allmulticast mode [ 556.356051][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 556.366384][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 556.386473][ T24] usb 5-1: can't read configurations, error -71 [ 556.392521][T14866] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 556.436475][T14872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.445349][T14872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.459246][T14872] syzkaller1: entered promiscuous mode [ 556.465260][T14872] syzkaller1: entered allmulticast mode [ 556.472518][T14872] FAULT_INJECTION: forcing a failure. [ 556.472518][T14872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.485634][T14872] CPU: 1 UID: 0 PID: 14872 Comm: syz.1.3138 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.485654][T14872] Tainted: [L]=SOFTLOCKUP [ 556.485660][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 556.485667][T14872] Call Trace: [ 556.485673][T14872] [ 556.485678][T14872] dump_stack_lvl+0xe8/0x150 [ 556.485700][T14872] should_fail_ex+0x412/0x560 [ 556.485720][T14872] _copy_from_iter+0x1d3/0x1670 [ 556.485736][T14872] ? unwind_next_frame+0xa6/0x2550 [ 556.485753][T14872] ? __lock_acquire+0x6b5/0x2cf0 [ 556.485770][T14872] ? __pfx__copy_from_iter+0x10/0x10 [ 556.485794][T14872] tun_get_user+0x267/0x4300 [ 556.485809][T14872] ? aa_file_perm+0x192/0x15e0 [ 556.485828][T14872] ? aa_file_perm+0x192/0x15e0 [ 556.485843][T14872] ? aa_file_perm+0x50e/0x15e0 [ 556.485856][T14872] ? __pfx_tun_get_user+0x10/0x10 [ 556.485870][T14872] ? __lock_acquire+0x6b5/0x2cf0 [ 556.485887][T14872] ? kstrtoull+0x12f/0x1d0 [ 556.485905][T14872] ? ref_tracker_alloc+0x35c/0x4c0 [ 556.485923][T14872] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 556.485940][T14872] ? tun_get+0x1c/0x2f0 [ 556.485952][T14872] ? tun_get+0x1c/0x2f0 [ 556.485967][T14872] ? tun_get+0x1c/0x2f0 [ 556.485979][T14872] ? tun_get+0x1c/0x2f0 [ 556.485993][T14872] tun_chr_write_iter+0x113/0x200 [ 556.486008][T14872] vfs_write+0x61d/0xb90 [ 556.486024][T14872] ? __pfx_vfs_write+0x10/0x10 [ 556.486045][T14872] ? __fget_files+0x2a/0x420 [ 556.486078][T14872] ksys_write+0x150/0x270 [ 556.486099][T14872] ? __pfx_ksys_write+0x10/0x10 [ 556.486126][T14872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.486143][T14872] do_syscall_64+0x15f/0xf80 [ 556.486158][T14872] ? trace_irq_disable+0x3b/0x140 [ 556.486172][T14872] ? clear_bhb_loop+0x40/0x90 [ 556.486186][T14872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.486198][T14872] RIP: 0033:0x7ffb4359c819 [ 556.486210][T14872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.486221][T14872] RSP: 002b:00007ffb44446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 556.486235][T14872] RAX: ffffffffffffffda RBX: 00007ffb43815fa0 RCX: 00007ffb4359c819 [ 556.486244][T14872] RDX: 0000000000000ffe RSI: 0000200000000000 RDI: 0000000000000003 [ 556.486252][T14872] RBP: 00007ffb44446090 R08: 0000000000000000 R09: 0000000000000000 [ 556.486259][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.486266][T14872] R13: 00007ffb43816038 R14: 00007ffb43815fa0 R15: 00007ffd511c71c8 [ 556.486284][T14872] [ 557.081596][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 557.162441][ T808] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 557.257848][T14883] qnx6: unable to read the first superblock [ 557.265115][T14883] qnx6: unable to read the first superblock [ 557.271861][T14883] qnx6: unable to read the first superblock [ 557.324470][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 557.336123][ T808] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 557.350424][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.368379][ T808] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 557.383497][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.394281][ T808] usb 4-1: Product: syz [ 557.398501][ T808] usb 4-1: Manufacturer: syz [ 557.403450][ T808] usb 4-1: SerialNumber: syz [ 557.426259][ T808] usb 4-1: config 0 descriptor?? [ 557.447035][ T808] appledisplay 4-1:0.0: Could not find int-in endpoint [ 557.458140][ T808] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 557.642095][T14879] syzkaller1: entered promiscuous mode [ 557.659449][T14879] syzkaller1: entered allmulticast mode [ 557.699082][ T5897] usb 4-1: USB disconnect, device number 45 [ 558.004927][T14912] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3150'. [ 558.350415][T14921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.363666][T14921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.681568][ T1226] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 558.831612][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 558.839302][ T1226] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 558.857380][ T1226] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 558.866947][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.876378][ T1226] usb 4-1: Product: syz [ 558.880635][ T1226] usb 4-1: Manufacturer: syz [ 558.887318][ T1226] usb 4-1: SerialNumber: syz [ 558.905116][ T1226] r8152-cfgselector 4-1: Unknown version 0x0000 [ 558.911544][ T1226] r8152-cfgselector 4-1: config 0 descriptor?? [ 559.006675][T14925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.019491][T14925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.030575][T14926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.044952][T14926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.162831][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 559.177233][T14931] binder: 14930:14931 ioctl c0306201 2000000003c0 returned -14 [ 559.264993][T14931] binder: 14930:14931 ioctl c0306201 200000000580 returned -14 [ 559.348833][ T1226] r8152-cfgselector 4-1: USB disconnect, device number 46 [ 559.440311][T14938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.805962][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.816160][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.826220][T14950] syzkaller1: entered promiscuous mode [ 559.831814][T14950] syzkaller1: entered allmulticast mode [ 560.051657][T14958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3167'. [ 560.142585][ T1226] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 560.313821][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.326121][ T1226] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 560.335241][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.345568][ T1226] usb 4-1: config 0 descriptor?? [ 560.401805][ T5897] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 560.562766][T14952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.587459][T14952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.596547][T14962] syzkaller1: entered promiscuous mode [ 560.604221][T14962] syzkaller1: entered allmulticast mode [ 560.625298][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 560.658668][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 560.674038][ T5897] usb 5-1: can't read configurations, error -71 [ 560.814821][T14952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.828274][T14952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.848887][ T1226] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 560.863176][ T1226] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0033/input/input78 [ 560.982621][ T1226] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 561.052274][T14952] openvswitch: netlink: Message has -2 unknown bytes. [ 561.087541][T14952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.111416][T14952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.436307][T14973] tmpfs: Unknown parameter 'm' [ 561.520560][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 561.527117][T14975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3173'. [ 561.552447][ T24] usb 4-1: USB disconnect, device number 47 [ 561.633692][T14979] PKCS7: Unknown OID: [5] (bad) [ 561.644260][T14979] PKCS7: Only support pkcs7_signedData type [ 561.663518][T14979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.674719][T14979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.781619][ T5897] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 561.931572][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 561.938904][ T5897] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 561.949358][ T5897] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 561.964540][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 561.974508][ T5897] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 561.984077][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.992232][ T5897] usb 5-1: Product: syz [ 561.996422][ T5897] usb 5-1: Manufacturer: syz [ 562.001007][ T5897] usb 5-1: SerialNumber: syz [ 562.019263][ T5897] usb 5-1: config 0 descriptor?? Stopping sshd: stopped /usr/sbin/sshd (pid 5599) OK Stopping crond: stopped /usr/sbin/crond (pid 5586) OK [ 562.415060][T14995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.437780][T14995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.448211][ T5897] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 562.475594][T14995] syzkaller1: entered promiscuous mode [ 562.491678][T14995] syzkaller1: entered allmulticast mode Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5507) [ 562.936902][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.943544][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 Stopping network: [ 563.079837][ T5897] usb 5-1: USB disconnect, device number 98 [ 563.303237][T15015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.325213][T15015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.845347][T15033] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3184'. [ 563.952655][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 563.977380][T15041] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 4, id = 0 OK [ 564.141979][ T24] usb 5-1: Using ep0 maxpacket: 16 Stopping iptables: [ 564.161872][ T24] usb 5-1: config 4 has an invalid interface number: 38 but max is 0 [ 564.186525][ T24] usb 5-1: config 4 has no interface number 0 [ 564.210925][ T24] usb 5-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 564.268942][ T24] usb 5-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 OK [ 564.325158][ T24] usb 5-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid maxpacket 72, setting to 64 Stopping system message bus: [ 564.379719][ T24] usb 5-1: config 4 interface 38 has no altsetting 0 [ 564.413329][ T24] usb 5-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=a2.ed [ 564.445278][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.470927][ T24] usb 5-1: Product: syz [ 564.489327][ T24] usb 5-1: Manufacturer: syz [ 564.506044][ T24] usb 5-1: SerialNumber: syz [ 564.639887][T15064] netlink: 'syz.3.3192': attribute type 1 has an invalid length. [ 564.751818][T15029] overlayfs: empty lowerdir [ 565.099530][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.140626][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.301637][ T42] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 565.340186][T15077] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3194'. done [ 565.473435][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 565.502795][ T42] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 565.532735][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.562899][ T42] usb 4-1: config 0 has no interface number 0 [ 565.593604][ T42] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.638097][ T42] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 565.648911][T15080] syzkaller1: entered promiscuous mode [ 565.651207][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.665728][ T42] usb 4-1: Product: syz [ 565.671215][T15080] syzkaller1: entered allmulticast mode [ 565.683435][ T42] usb 4-1: Manufacturer: syz [ 565.688103][ T42] usb 4-1: SerialNumber: syz [ 565.706541][ T42] usb 4-1: config 0 descriptor?? [ 565.746272][ T42] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 565.773630][ T42] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 565.865806][T15082] serio: Serial port ttyprintk [ 565.939201][ T24] rndis_host 5-1:4.38: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 565.949702][ T42] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 565.957406][ T42] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 565.979723][ T24] usb 5-1: USB disconnect, device number 99 [ 566.165500][ T1226] usb 4-1: USB disconnect, device number 48 Stopping klogd: OK [ 567.021422][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.033047][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.041573][ T1226] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 567.061666][ T5897] usb 5-1: new high-speed USB device number 100 using dummy_hcd Stopping acpid: [ 567.202182][ T1226] usb 4-1: Using ep0 maxpacket: 32 [ 567.208787][ T1226] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 567.217013][ T1226] usb 4-1: config 0 has no interface number 0 [ 567.223166][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 567.228324][ T1226] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 567.239321][ T1226] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 567.251036][ T1226] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 567.262750][ T1226] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 567.273003][ T1226] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 567.286331][ T1226] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 567.296390][ T5897] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 567.304608][ T1226] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 567.314564][ T5897] usb 5-1: config 0 has no interface number 0 [ 567.320721][ T5897] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 567.330774][ T1226] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 567.342063][ T5897] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 567.352030][ T1226] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 567.362167][ T5897] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 567.372215][ T1226] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.386154][ T5897] usb 5-1: config 0 interface 196 has no altsetting 0 [ 567.395873][ T1226] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 567.405127][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 567.414192][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.422191][ T1226] usb 4-1: Product: syz [ 567.426370][ T1226] usb 4-1: Manufacturer: syz [ 567.430948][ T1226] usb 4-1: SerialNumber: syz [ 567.435565][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.443605][ T5897] usb 5-1: Product: syz [ 567.447773][ T5897] usb 5-1: Manufacturer: syz [ 567.453418][ T5897] usb 5-1: SerialNumber: syz [ 567.458590][ T1226] usb 4-1: config 0 descriptor?? [ 567.465978][T15104] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.474942][T15104] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.475845][ T5897] usb 5-1: config 0 descriptor?? [ 567.489438][ T1226] usb 4-1: will this work? Response EP is not usually 3 [ 567.496633][ T1226] usb 4-1: will this work? Image data EP is not usually 2 [ 567.504343][T15105] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 567.514569][ T1226] scsi host1: microtekX6 [ 567.615089][T15119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.624023][T15119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.703290][T15120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.716537][T15120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.728076][ T42] usb 4-1: USB disconnect, device number 49 [ 568.117822][ T5897] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 568.134585][ T5897] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached OK Stopping syslogd: stopped /sbin/syslogd (pid 5195) OK [ 568.330196][ T42] usb 5-1: USB disconnect, device number 100 [ 568.414139][ T42] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 568.601540][T15080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.097474][T15144] binder: 15143:15144 ioctl c0306201 200000000480 returned -14 [ 569.519657][ T1226] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 569.683310][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.695491][T15163] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 569.715204][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.727054][T15164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.752850][T15164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.754413][ T1226] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.772089][T15163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.773720][ T1226] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.782097][ T42] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 569.790891][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.808169][T15163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.832480][ T1226] usb 4-1: config 0 descriptor?? [ 569.983842][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 569.993177][ T42] usb 5-1: config 250 has an invalid interface number: 5 but max is 0 [ 570.011727][ T42] usb 5-1: config 250 has no interface number 0 [ 570.027103][ T42] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=9c.5f [ 570.054627][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.090742][ T42] usb 5-1: Product: syz [ 570.102921][ T42] usb 5-1: Manufacturer: syz [ 570.108084][ T42] usb 5-1: SerialNumber: syz umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only [ 570.330401][ T42] int51x1 5-1:250.5: probe with driver int51x1 failed with error -71 umount: can't remount /dev/root read-only [ 570.378791][ T42] usb 5-1: USB disconnect, device number 101 The system is going down NOW! [ 570.417811][ T5213] udevd[5213]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes [ 570.524540][ T1226] usbhid 4-1:0.0: can't add hid device: -71 Connection to 10.128.0.8 closed by remote host. [ 570.574959][ T1226] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 570.636125][ T1226] usb 4-1: USB disconnect, device number 50 [ 570.760600][T14341] raw-gadget.2 gadget.1: failed to queue disconnect event [ 571.468500][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 571.718248][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.814914][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.893871][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.968594][ T144] bridge_slave_1: left allmulticast mode [ 571.975071][ T144] bridge_slave_1: left promiscuous mode [ 571.983095][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.995386][ T144] bridge_slave_0: left allmulticast mode [ 572.001045][ T144] bridge_slave_0: left promiscuous mode [ 572.009308][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.208856][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.219892][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.229620][ T144] bond0 (unregistering): Released all slaves [ 572.657609][T15176] smc: removing ib device syz0 [ 572.676192][T15176] smc: removing ib device syz1 [ 572.686704][T15176] smc: removing smcd device lo [ 572.753268][ T5938] usb 3-1: ezusb_ihex_firmware_download - request "keyspan/usa28xb.fw" failed [ 572.762342][ T5938] usb 3-1: failed to load firmware "keyspan/usa28xb.fw" [ 572.769487][ T5938] keyspan 3-1:15.31: probe with driver keyspan failed with error -2 [ 572.782544][ T5938] keyspan 3-1:15.92: Keyspan - (without firmware) converter detected [ 572.791621][ T144] hsr_slave_0: left promiscuous mode [ 572.792618][ T5938] usb 3-1: Direct firmware load for keyspan/usa28xb.fw failed with error -2 [ 572.805735][ T5938] usb 3-1: Falling back to sysfs fallback for: keyspan/usa28xb.fw [ 572.805803][ T144] hsr_slave_1: left promiscuous mode [ 572.815346][ T5938] ------------[ cut here ]------------ [ 572.820961][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.825386][ T5938] ret [ 572.825397][ T5938] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#0: kworker/0:7/5938 [ 572.825446][ T5938] Modules linked in: [ 572.825496][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.825526][ T5938] Tainted: [L]=SOFTLOCKUP [ 572.825536][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 572.825552][ T5938] Workqueue: usb_hub_wq hub_event [ 572.825583][ T5938] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 572.825614][ T5938] Code: b5 fb e9 5d fc ff ff e8 68 15 b5 fb c6 05 74 6c 0c 0a 01 48 c7 c7 80 d2 55 8c e8 d5 65 16 fb e9 85 fc ff ff e8 4b 15 b5 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 d3 55 8c 4c 89 e2 e8 e5 50 1b fb e9 [ 572.825634][ T5938] RSP: 0018:ffffc90004fa68d0 EFLAGS: 00010287 [ 572.825655][ T5938] RAX: ffffffff86115c45 RBX: dffffc0000000000 RCX: 0000000000100000 [ 572.825673][ T5938] RDX: ffffc900183db000 RSI: 000000000009560e RDI: 000000000009560f [ 572.825690][ T5938] RBP: 0000000000000001 R08: ffffffff9033bef7 R09: 1ffffffff20677de [ 572.825707][ T5938] R10: dffffc0000000000 R11: fffffbfff20677df R12: ffffffff8c8bfa60 [ 572.825724][ T5938] R13: 0000000000001770 R14: ffff88802aa4c0b0 R15: 00000000fffffff5 [ 572.825742][ T5938] FS: 0000000000000000(0000) GS:ffff888125204000(0000) knlGS:0000000000000000 [ 572.825761][ T5938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.825777][ T5938] CR2: 00007f47123e7158 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 572.825799][ T5938] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 572.825815][ T5938] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 572.825831][ T5938] Call Trace: [ 572.825841][ T5938] [ 572.825857][ T5938] ? kfree+0x1c5/0x640 [ 572.825888][ T5938] ? _request_firmware+0xf11/0x1780 [ 572.825913][ T5938] ? __kmalloc_cache_noprof+0x15b/0x660 [ 572.825952][ T5938] _request_firmware+0x1052/0x1780 [ 572.826003][ T5938] ? __pfx__request_firmware+0x10/0x10 [ 572.826038][ T5938] ? bus_for_each_drv+0x258/0x2f0 [ 572.826064][ T5938] ? __device_attach+0x2c5/0x450 [ 572.826094][ T5938] ? device_initial_probe+0xa1/0xd0 [ 572.826132][ T5938] ? do_raw_spin_lock+0x12b/0x2f0 [ 572.826164][ T5938] request_firmware+0x36/0x50 [ 572.826191][ T5938] ezusb_fx1_ihex_firmware_download+0xbb/0xd60 [ 572.826239][ T5938] ? __pfx_ezusb_fx1_ihex_firmware_download+0x10/0x10 [ 572.826280][ T5938] ? __raw_spin_lock_init+0x45/0x100 [ 572.826308][ T5938] ? __init_waitqueue_head+0xa9/0x150 [ 572.826341][ T5938] keyspan_fake_startup+0x230/0x4a0 [ 572.826372][ T5938] usb_serial_probe+0x2537/0x2e50 [ 572.834467][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.836479][ T5938] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 573.100058][ T5938] usb_probe_interface+0x659/0xc70 [ 573.105213][ T5938] ? __pfx_usb_probe_interface+0x10/0x10 [ 573.110845][ T5938] really_probe+0x267/0xaf0 [ 573.115363][ T5938] __driver_probe_device+0x18c/0x320 [ 573.121190][ T5938] driver_probe_device+0x4f/0x240 [ 573.126558][ T5938] __device_attach_driver+0x279/0x430 [ 573.131998][ T5938] bus_for_each_drv+0x258/0x2f0 [ 573.136855][ T5938] ? __pfx___device_attach_driver+0x10/0x10 [ 573.142787][ T5938] ? __pfx_bus_for_each_drv+0x10/0x10 [ 573.148180][ T5938] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.153393][ T5938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 573.159198][ T5938] __device_attach+0x2c5/0x450 [ 573.166749][ T5938] ? __pfx___device_attach+0x10/0x10 [ 573.172265][ T5938] ? _raw_spin_unlock+0x28/0x50 [ 573.177118][ T5938] device_initial_probe+0xa1/0xd0 [ 573.182189][ T5938] bus_probe_device+0x12a/0x220 [ 573.187063][ T5938] ? device_add+0x726/0xb70 [ 573.191605][ T5938] device_add+0x7b6/0xb70 [ 573.195968][ T5938] usb_set_configuration+0x1a87/0x2110 [ 573.201486][ T5938] usb_generic_driver_probe+0x8d/0x150 [ 573.206953][ T5938] usb_probe_device+0x1c4/0x3b0 [ 573.211830][ T5938] ? __pfx_usb_probe_device+0x10/0x10 [ 573.217200][ T5938] really_probe+0x267/0xaf0 [ 573.222241][ T5938] __driver_probe_device+0x18c/0x320 [ 573.227529][ T5938] driver_probe_device+0x4f/0x240 [ 573.232887][ T5938] __device_attach_driver+0x279/0x430 [ 573.238296][ T5938] bus_for_each_drv+0x258/0x2f0 [ 573.243188][ T5938] ? __pfx___device_attach_driver+0x10/0x10 [ 573.249082][ T5938] ? __pfx_bus_for_each_drv+0x10/0x10 [ 573.254472][ T5938] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.259670][ T5938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 573.265492][ T5938] __device_attach+0x2c5/0x450 [ 573.270258][ T5938] ? __pfx___device_attach+0x10/0x10 [ 573.275558][ T5938] ? _raw_spin_unlock+0x28/0x50 [ 573.280409][ T5938] device_initial_probe+0xa1/0xd0 [ 573.285451][ T5938] bus_probe_device+0x12a/0x220 [ 573.290296][ T5938] ? device_add+0x726/0xb70 [ 573.294868][ T5938] device_add+0x7b6/0xb70 [ 573.299225][ T5938] usb_new_device+0xa08/0x16f0 [ 573.304028][ T5938] ? __pfx_usb_new_device+0x10/0x10 [ 573.309223][ T5938] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.314447][ T5938] hub_event+0x2a1c/0x4f30 [ 573.318862][ T5938] ? do_raw_spin_unlock+0xf5/0x210 [ 573.324553][ T5938] ? __pfx_hub_event+0x10/0x10 [ 573.329343][ T5938] ? process_scheduled_works+0xa70/0x1860 [ 573.335398][ T5938] ? process_scheduled_works+0xa70/0x1860 [ 573.341149][ T5938] ? process_scheduled_works+0xa70/0x1860 [ 573.346890][ T5938] process_scheduled_works+0xb5d/0x1860 [ 573.352477][ T5938] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.358459][ T5938] ? assign_work+0x3d5/0x5e0 [ 573.363086][ T5938] worker_thread+0xa53/0xfc0 [ 573.367690][ T5938] kthread+0x388/0x470 [ 573.371773][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 573.376880][ T5938] ? __pfx_kthread+0x10/0x10 [ 573.381498][ T5938] ret_from_fork+0x514/0xb70 [ 573.386116][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 573.391222][ T5938] ? __switch_to+0xc79/0x1410 [ 573.395924][ T5938] ? __pfx_kthread+0x10/0x10 [ 573.400509][ T5938] ret_from_fork_asm+0x1a/0x30 [ 573.405556][ T5938] [ 573.408604][ T5938] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 573.415900][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.426830][ T5938] Tainted: [L]=SOFTLOCKUP [ 573.431145][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 573.441190][ T5938] Workqueue: usb_hub_wq hub_event [ 573.446216][ T5938] Call Trace: [ 573.449487][ T5938] [ 573.452413][ T5938] vpanic+0x56c/0xa60 [ 573.456391][ T5938] ? __pfx__printk+0x10/0x10 [ 573.460970][ T5938] ? __pfx_vpanic+0x10/0x10 [ 573.465475][ T5938] ? is_bpf_text_address+0x292/0x2b0 [ 573.470756][ T5938] ? is_bpf_text_address+0x26/0x2b0 [ 573.475955][ T5938] panic+0xc5/0xd0 [ 573.479666][ T5938] ? __pfx_panic+0x10/0x10 [ 573.484076][ T5938] ? ret_from_fork_asm+0x1a/0x30 [ 573.489008][ T5938] __warn+0x315/0x4c0 [ 573.492983][ T5938] ? firmware_fallback_sysfs+0x746/0xa30 [ 573.498623][ T5938] ? firmware_fallback_sysfs+0x746/0xa30 [ 573.504252][ T5938] __report_bug+0x29a/0x540 [ 573.508753][ T5938] ? firmware_fallback_sysfs+0x746/0xa30 [ 573.514387][ T5938] ? __pfx___report_bug+0x10/0x10 [ 573.519433][ T5938] ? __up_read+0x291/0x6b0 [ 573.523853][ T5938] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 573.529660][ T5938] ? firmware_fallback_sysfs+0x746/0xa30 [ 573.535293][ T5938] report_bug+0x16a/0x220 [ 573.539618][ T5938] ? firmware_fallback_sysfs+0x746/0xa30 [ 573.545242][ T5938] ? firmware_fallback_sysfs+0x748/0xa30 [ 573.550865][ T5938] handle_bug+0x9c/0x200 [ 573.555104][ T5938] exc_invalid_op+0x1a/0x50 [ 573.559608][ T5938] asm_exc_invalid_op+0x1a/0x20 [ 573.564453][ T5938] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 573.570692][ T5938] Code: b5 fb e9 5d fc ff ff e8 68 15 b5 fb c6 05 74 6c 0c 0a 01 48 c7 c7 80 d2 55 8c e8 d5 65 16 fb e9 85 fc ff ff e8 4b 15 b5 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 d3 55 8c 4c 89 e2 e8 e5 50 1b fb e9 [ 573.590288][ T5938] RSP: 0018:ffffc90004fa68d0 EFLAGS: 00010287 [ 573.596353][ T5938] RAX: ffffffff86115c45 RBX: dffffc0000000000 RCX: 0000000000100000 [ 573.604318][ T5938] RDX: ffffc900183db000 RSI: 000000000009560e RDI: 000000000009560f [ 573.612283][ T5938] RBP: 0000000000000001 R08: ffffffff9033bef7 R09: 1ffffffff20677de [ 573.620244][ T5938] R10: dffffc0000000000 R11: fffffbfff20677df R12: ffffffff8c8bfa60 [ 573.628205][ T5938] R13: 0000000000001770 R14: ffff88802aa4c0b0 R15: 00000000fffffff5 [ 573.636176][ T5938] ? firmware_fallback_sysfs+0x745/0xa30 [ 573.641813][ T5938] ? kfree+0x1c5/0x640 [ 573.645876][ T5938] ? _request_firmware+0xf11/0x1780 [ 573.651067][ T5938] ? __kmalloc_cache_noprof+0x15b/0x660 [ 573.656615][ T5938] _request_firmware+0x1052/0x1780 [ 573.661733][ T5938] ? __pfx__request_firmware+0x10/0x10 [ 573.667185][ T5938] ? bus_for_each_drv+0x258/0x2f0 [ 573.672199][ T5938] ? __device_attach+0x2c5/0x450 [ 573.677134][ T5938] ? device_initial_probe+0xa1/0xd0 [ 573.682328][ T5938] ? do_raw_spin_lock+0x12b/0x2f0 [ 573.687349][ T5938] request_firmware+0x36/0x50 [ 573.692023][ T5938] ezusb_fx1_ihex_firmware_download+0xbb/0xd60 [ 573.698182][ T5938] ? __pfx_ezusb_fx1_ihex_firmware_download+0x10/0x10 [ 573.704941][ T5938] ? __raw_spin_lock_init+0x45/0x100 [ 573.710217][ T5938] ? __init_waitqueue_head+0xa9/0x150 [ 573.715584][ T5938] keyspan_fake_startup+0x230/0x4a0 [ 573.720782][ T5938] usb_serial_probe+0x2537/0x2e50 [ 573.725815][ T5938] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 573.731637][ T5938] usb_probe_interface+0x659/0xc70 [ 573.736786][ T5938] ? __pfx_usb_probe_interface+0x10/0x10 [ 573.742427][ T5938] really_probe+0x267/0xaf0 [ 573.746953][ T5938] __driver_probe_device+0x18c/0x320 [ 573.752238][ T5938] driver_probe_device+0x4f/0x240 [ 573.757260][ T5938] __device_attach_driver+0x279/0x430 [ 573.762634][ T5938] bus_for_each_drv+0x258/0x2f0 [ 573.767477][ T5938] ? __pfx___device_attach_driver+0x10/0x10 [ 573.773370][ T5938] ? __pfx_bus_for_each_drv+0x10/0x10 [ 573.778737][ T5938] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.783930][ T5938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 573.789736][ T5938] __device_attach+0x2c5/0x450 [ 573.794500][ T5938] ? __pfx___device_attach+0x10/0x10 [ 573.799784][ T5938] ? _raw_spin_unlock+0x28/0x50 [ 573.804634][ T5938] device_initial_probe+0xa1/0xd0 [ 573.809657][ T5938] bus_probe_device+0x12a/0x220 [ 573.814502][ T5938] ? device_add+0x726/0xb70 [ 573.819001][ T5938] device_add+0x7b6/0xb70 [ 573.823332][ T5938] usb_set_configuration+0x1a87/0x2110 [ 573.828801][ T5938] usb_generic_driver_probe+0x8d/0x150 [ 573.834258][ T5938] usb_probe_device+0x1c4/0x3b0 [ 573.839108][ T5938] ? __pfx_usb_probe_device+0x10/0x10 [ 573.844488][ T5938] really_probe+0x267/0xaf0 [ 573.849024][ T5938] __driver_probe_device+0x18c/0x320 [ 573.854315][ T5938] driver_probe_device+0x4f/0x240 [ 573.859336][ T5938] __device_attach_driver+0x279/0x430 [ 573.864714][ T5938] bus_for_each_drv+0x258/0x2f0 [ 573.869562][ T5938] ? __pfx___device_attach_driver+0x10/0x10 [ 573.875454][ T5938] ? __pfx_bus_for_each_drv+0x10/0x10 [ 573.880825][ T5938] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.886024][ T5938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 573.891831][ T5938] __device_attach+0x2c5/0x450 [ 573.896593][ T5938] ? __pfx___device_attach+0x10/0x10 [ 573.901879][ T5938] ? _raw_spin_unlock+0x28/0x50 [ 573.906727][ T5938] device_initial_probe+0xa1/0xd0 [ 573.911753][ T5938] bus_probe_device+0x12a/0x220 [ 573.916601][ T5938] ? device_add+0x726/0xb70 [ 573.921104][ T5938] device_add+0x7b6/0xb70 [ 573.925433][ T5938] usb_new_device+0xa08/0x16f0 [ 573.930201][ T5938] ? __pfx_usb_new_device+0x10/0x10 [ 573.935399][ T5938] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.940600][ T5938] hub_event+0x2a1c/0x4f30 [ 573.945014][ T5938] ? do_raw_spin_unlock+0xf5/0x210 [ 573.950147][ T5938] ? __pfx_hub_event+0x10/0x10 [ 573.954908][ T5938] ? process_scheduled_works+0xa70/0x1860 [ 573.960638][ T5938] ? process_scheduled_works+0xa70/0x1860 [ 573.966354][ T5938] ? process_scheduled_works+0xa70/0x1860 [ 573.972075][ T5938] process_scheduled_works+0xb5d/0x1860 [ 573.977640][ T5938] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.983619][ T5938] ? assign_work+0x3d5/0x5e0 [ 573.988210][ T5938] worker_thread+0xa53/0xfc0 [ 573.992816][ T5938] kthread+0x388/0x470 [ 573.996883][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 574.001991][ T5938] ? __pfx_kthread+0x10/0x10 [ 574.006577][ T5938] ret_from_fork+0x514/0xb70 [ 574.011164][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 574.016268][ T5938] ? __switch_to+0xc79/0x1410 [ 574.020942][ T5938] ? __pfx_kthread+0x10/0x10 [ 574.025529][ T5938] ret_from_fork_asm+0x1a/0x30 [ 574.030298][ T5938] [ 574.033587][ T5938] Kernel Offset: disabled [ 574.037951][ T5938] Rebooting in 86400 seconds..