last executing test programs: 8m0.177351909s ago: executing program 0 (id=354): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) (async) fcntl$getflags(r0, 0x401) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 8m0.171490822s ago: executing program 0 (id=355): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, &(0x7f0000000a80)={0x20, 0x31, 0xf8, {0xf8, 0x3, "53d33b95acb1e5920336164683b95c4fdb8ebf0e3a427f1c8801dd325d42b9421e630e2227eee390a3fe0a87a03148346d698c1ac37149be0b4fe66b8ad552b13e07e39eed5fef7e1271d6a53a2e5818341fa6bd94c70859ae9cf46d5199662e2f1744b49a6b1b97240f313f614812279002e4d14103f50766f4aaa5be25ee33b5f885b9363fca15d23a4cc10fd3567d51f5f9a4b1c2d09009512f0f7254333529bc8652c1385ae3e551e20dc2086496f8966dc606dad2fcb0938b6e114dc2b4b8ec65d49b5ee0bbd9f6f3c49a1126a15f1286220800000000000000b3edc430d2daf7ecfc6b8c04c3905d694ecffd11890500000000"}}, &(0x7f0000000200)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000340)={0x20, 0x8, 0xd, "740b3c106b2c825ec932c62c4a"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x0, 0x8c, {0x8a, "e83d29b42589173315c5137699218a42fb34ddd755fc27122c5d10743259856672f7501d064e26e308478a9fd2de62f3172f76088f978d8817e004d1f0604ce7dde8fd802a0ad5285d178039dd65e65f61ba29c86974aa25d51f13ad7d9fd1d15e1daf39e74eb42308aa016ef4829992be87c77390bf24aa9358aef5d43211ab8ec13ad83066b9be8c2d"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x80}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000780)={0x14, &(0x7f0000000800)={0x0, 0x9, 0x90, {0x90, 0x4, "a2f119f66711047fa5dc3b9cb0e52e4e4cab0176aacf32b9a082dd674b14b411a80ba9bfc06f69809e500918b90ca72528ac381e013fdfd3b7c548b5deaa862b0cacb497d168affe0ce0392ab6015fffdc38abf8913bde24c977604a9407dc436ee1e2db76f51a208445d486cbcc57b4fe82879e0fb0df0c630e6bd37c96ef7dfde0bd567dfaff75d765d9d021a7"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000900)={0x0, 0x15, 0x62, "2ee95d215f12533b89e83644ebc4f9c2a019e5d638a44d8f47ff2064a344b90b4e34ebe9b958a6356a2053421cc5a214407c65017d2f8f8f3b5a8f876d2fc43114784d882f93ec2657edc31ecce19e3ffb16bf7801e4a8317352ced94b2ef3fba88c"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x40}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x28000054) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x1, 0x60, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 7m59.581816791s ago: executing program 0 (id=365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @mss, @window, @window, @sack_perm, @window={0x3, 0x7, 0x2}, @mss={0x2, 0x400}, @timestamp], 0x8) sendto$inet(r0, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)='I', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0xf0ff}}], 0x3, 0x4008095) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 7m59.497001017s ago: executing program 0 (id=367): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r4 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@ocfs2={0xc, 0x1, {0x0, 0x446}}, 0x0, 0x1200) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@local, 0x4}, @local, 0x1, 0x8000000000000001, 0x100, 0xfffffffffffffff9, 0x9f, 0x1, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x22, "d69a00000000001c028f7e453b653a1478005a31589cff42e82e58b2b3b9de670d"}}) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 7m59.078578634s ago: executing program 0 (id=375): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @mss, @window, @window, @sack_perm, @window={0x3, 0x7, 0x2}, @mss={0x2, 0x400}, @timestamp], 0x8) sendto$inet(r0, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)='I', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0xfff0}}], 0x3, 0x4008095) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 7m58.734680971s ago: executing program 0 (id=378): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000002179135e0e6cb2b824ca945f64009425ff0325010ebc000000000000808000f0fffeffe80949d7aaffde7f10b300100001408d08e1560000000000040000", 0x58}], 0x1) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0xe3, [{{0x9, 0x4, 0x0, 0x4f, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfc, 0x8, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xfb, 0x0, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0xd27007b813145751, 0x9, 0x9, 0xa, 0x40, 0x5f}, 0x38, &(0x7f0000000180)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "571a89bee44c69c210040c6839593d36"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x4, 0xff11, 0x8, [0x8bfee312a90286c2, 0xc180, 0xf, 0xffc030]}]}, 0x1, [{0xb8, &(0x7f00000001c0)=@string={0xb8, 0x3, "c6261fce0e0b7c320f5a3112a19e2c5cac526c5a2641ff7534fdb1b0e71b074e085622931bcbd6da1611f616921adf929fa6b7aaf53fabaf594eed2b5e6dd3b5eaddc6f04e339ab9dcc9648cc49139cf72a1c38f03e389c18f17499236bb5e90312bce40d7c31c05d1fda20e195a8c22ef9ed591c4d8a5ab9bd6d28969184cd1a4cdf4531dac0845b98217d94ca29b8d1f77ae702a2965170f8d66c85eb43dd5d09767e84dc72f863a2dd4d60104b3531c571168077b"}}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000300)="00214717a70700000000030600710a5eeb9d04712000bbd6e76880f485dc585c786db84caec25c498e245bb9784982f3b0d2", 0x32}], 0x1, 0xee, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') madvise(&(0x7f0000588000/0x1000)=nil, 0x1000, 0xa) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e23, @empty}}) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x200}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000600)={0x24, &(0x7f0000000440)={0x40, 0xe, 0xcc, {0xcc, 0x11, "c407a91ea744e90ba0df34de7deae34d89a339e5563465313c939748a5668e352117079d8bbd7c11d3cec9ec60732954444203c46c397e2bd31c5cd39eb48d432966886ef8f6155715f86cbacdcb285c5468251ef096dedffe54dcbce60605847b5259624154f4f2f9c3ab4402b7fbd491652fe7b52cb35999409eb1a2ab55cc7ad37fe5b789cfc919afaa87ac7da41b4118ac4e43f5c8d5f51af0dafd048e4be77767b577903035e5bc7201241095535d04dc3062c4bd1121c8497d8c968854b17611d0fa94e04be3f3"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000000580)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0xb, "9cfcf93d"}, @local=@item_4={0x3, 0x2, 0x7, "ff504954"}, @global=@item_012={0x0, 0x1, 0x4}, @main=@item_4={0x3, 0x0, 0xb, "43b8b94f"}, @local=@item_012={0x2, 0x2, 0x3, "dc07"}, @local=@item_012={0x2, 0x2, 0x8, "a439"}, @local=@item_4={0x3, 0x2, 0x9, "b0a2aa1a"}, @local=@item_012={0x1, 0x2, 0x9, 'H'}, @local=@item_012={0x2, 0x2, 0x9, "1590"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb887, 0x7, 0x1, {0x22, 0x4b2}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x0, 0x8, 0x3f, "0f74f340bfbfd7f2997fa05bb043a7d22be9e4bf0dafdf0495a83870b601b65f53d934d6f234c47a69fd34dce383dfd21ab7c6062bb8a9f9b009e0a954f23c"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x1, 0x1c, "87daf65ec123d4985e90619ab05712dfe08838cacf158b69553b6975"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x1}}) write$fb(r3, &(0x7f00000003c0)="96296c1284dd20f4dad3f075ffdfc34d60d07eb2213e0a21c6375d7dc797952b91dd83949dfb046074fcdd65820ad3f7e0551dd3d8292e7965bd732562d617f1ea382790fce58ebc4052d3069ba2ed0b31", 0x51) syz_usb_control_io(r1, 0x0, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0xa7, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x40, 0x7, 0x5, {0x5, 0x30, '\x00\a\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="4035441638ecc7f362359211420e8b7f0de3ea23535fec"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m58.386747742s ago: executing program 32 (id=378): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000002179135e0e6cb2b824ca945f64009425ff0325010ebc000000000000808000f0fffeffe80949d7aaffde7f10b300100001408d08e1560000000000040000", 0x58}], 0x1) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0xe3, [{{0x9, 0x4, 0x0, 0x4f, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfc, 0x8, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xfb, 0x0, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0xd27007b813145751, 0x9, 0x9, 0xa, 0x40, 0x5f}, 0x38, &(0x7f0000000180)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "571a89bee44c69c210040c6839593d36"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x4, 0xff11, 0x8, [0x8bfee312a90286c2, 0xc180, 0xf, 0xffc030]}]}, 0x1, [{0xb8, &(0x7f00000001c0)=@string={0xb8, 0x3, "c6261fce0e0b7c320f5a3112a19e2c5cac526c5a2641ff7534fdb1b0e71b074e085622931bcbd6da1611f616921adf929fa6b7aaf53fabaf594eed2b5e6dd3b5eaddc6f04e339ab9dcc9648cc49139cf72a1c38f03e389c18f17499236bb5e90312bce40d7c31c05d1fda20e195a8c22ef9ed591c4d8a5ab9bd6d28969184cd1a4cdf4531dac0845b98217d94ca29b8d1f77ae702a2965170f8d66c85eb43dd5d09767e84dc72f863a2dd4d60104b3531c571168077b"}}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000300)="00214717a70700000000030600710a5eeb9d04712000bbd6e76880f485dc585c786db84caec25c498e245bb9784982f3b0d2", 0x32}], 0x1, 0xee, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') madvise(&(0x7f0000588000/0x1000)=nil, 0x1000, 0xa) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e23, @empty}}) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x200}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000600)={0x24, &(0x7f0000000440)={0x40, 0xe, 0xcc, {0xcc, 0x11, "c407a91ea744e90ba0df34de7deae34d89a339e5563465313c939748a5668e352117079d8bbd7c11d3cec9ec60732954444203c46c397e2bd31c5cd39eb48d432966886ef8f6155715f86cbacdcb285c5468251ef096dedffe54dcbce60605847b5259624154f4f2f9c3ab4402b7fbd491652fe7b52cb35999409eb1a2ab55cc7ad37fe5b789cfc919afaa87ac7da41b4118ac4e43f5c8d5f51af0dafd048e4be77767b577903035e5bc7201241095535d04dc3062c4bd1121c8497d8c968854b17611d0fa94e04be3f3"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000000580)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0xb, "9cfcf93d"}, @local=@item_4={0x3, 0x2, 0x7, "ff504954"}, @global=@item_012={0x0, 0x1, 0x4}, @main=@item_4={0x3, 0x0, 0xb, "43b8b94f"}, @local=@item_012={0x2, 0x2, 0x3, "dc07"}, @local=@item_012={0x2, 0x2, 0x8, "a439"}, @local=@item_4={0x3, 0x2, 0x9, "b0a2aa1a"}, @local=@item_012={0x1, 0x2, 0x9, 'H'}, @local=@item_012={0x2, 0x2, 0x9, "1590"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb887, 0x7, 0x1, {0x22, 0x4b2}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x0, 0x8, 0x3f, "0f74f340bfbfd7f2997fa05bb043a7d22be9e4bf0dafdf0495a83870b601b65f53d934d6f234c47a69fd34dce383dfd21ab7c6062bb8a9f9b009e0a954f23c"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x1, 0x1c, "87daf65ec123d4985e90619ab05712dfe08838cacf158b69553b6975"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x1}}) write$fb(r3, &(0x7f00000003c0)="96296c1284dd20f4dad3f075ffdfc34d60d07eb2213e0a21c6375d7dc797952b91dd83949dfb046074fcdd65820ad3f7e0551dd3d8292e7965bd732562d617f1ea382790fce58ebc4052d3069ba2ed0b31", 0x51) syz_usb_control_io(r1, 0x0, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0xa7, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x40, 0x7, 0x5, {0x5, 0x30, '\x00\a\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="4035441638ecc7f362359211420e8b7f0de3ea23535fec"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.765062074s ago: executing program 4 (id=3374): syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e500000087"], 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xcc, &(0x7f0000000640)=@string={0xcc, 0x3, "8cfbf2a285163a7972718062346737d72387662acacfebf85de08e0c34dcf1342d278f0a8bf004ec6ef3dddc83751056dc313166345dde1d17241a6d8a34a76b17616d0d87e3ac1ebc04448b5e8e573b89d873c66d6e9510072dad048bf6dc7b36c6fe0041f94fa0cb4e414aa31a2d517c3446b9ce3ccdf11f598e3b8f75ef76c2c0291951097fa98d680ef6b9814d8840cd5b5b0c0bcb159c9d9fb0102fd828c36c1198e4c07787402e3f4efeee707bfb28a54de9f307ebee474e4056683a3f0456686ac5a63cc872ab"}}, {0x4f, &(0x7f0000000180)=@string={0x4f, 0x3, "9357d134291ecd43cbebd6f8ce25dc6ae03690fcdb005dd072bbe301f38e56905660213e0ecfe3dde09b8f74f2815487b59f6070e114e36b7beb186317bd6ea22896b381da9344bf270b08e45f"}}, {0xa, &(0x7f00000002c0)=@string={0xa, 0x3, "cb353ab37c0a1430"}}, {0xb7, &(0x7f0000000740)=@string={0xb7, 0x3, "4b38eab16d254650206a85ee4fac6c4913f941014e26cbd859d872af33358edbe0d35a09dbf5f27c17d0ade39d02ebcc6bdfc97b7a66c90904108a46efd6ad78fbee0c8eeb9afd1319ee65fdcc567fc56f325fe3a241d205fa32b0bcbb2c0a0b3ae6874ce86766c2adde6983b57566ba44ce109b01be1f9d89e7d4ffebae6f53771ae3a435ebd80203a3fdc5124cabe89b311caee56772cbd1e199c7081187da03eb8bacaa998563a0bad0d66158814fc766197f8b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x83e}}, {0x0, 0x0}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3, 0x6, 0x4002004c4, 0x1004, 0x54d351bd, 0xc595, 0xd10, 0x2, 0xf7, 0x0, 0x7f, 0x3], 0xeefe0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.594178399s ago: executing program 1 (id=3381): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="00f7ff000000"], 0x0, 0x0}) 5.455104232s ago: executing program 4 (id=3382): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x90, 0x53, 0x16, 0x8, 0xa5c, 0x2033, 0x7201, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7c, 0x0, 0x0, 0x29, 0x7f, 0xa0}}]}}]}}, 0x0) 4.180526154s ago: executing program 4 (id=3391): syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB='s'], 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 3.293127574s ago: executing program 3 (id=3396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}}, 0x0) 3.292450433s ago: executing program 2 (id=3397): symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xb, 0x3f8, 0x2, 0x41, 0x0, 0xfd}, 0x9c) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0xffffffffffff94aa, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x40, 0x1, 0x3}, 0x18) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000b80)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) 3.28901572s ago: executing program 2 (id=3398): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) r5 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000f8dee1a33def22e004fefef0c570ca6cecec28cd869cc75cc51ac045864946eea522f434c6003f4cf02802f613529ea0abf8532254674fe75b0175ae810256793d8c08ca7603721f96b7b599f8892ea883581bca", @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2515000000050029000100000008000300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c8ad50be596c97be4b000425bd7000fbdbdf25250000000a000100777061", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x4c052) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000031553ba15ab961502d321dbd83ae4bfeed2bef3a23ea40c626435f8b55796eb875d5c3abd1f72c5b38fe86c4db4bbaa53c0144080e5c3442e38aca57a327411cac88c91a2cdd71bfe3bb25fbb6a50df7a60c61e798178a12b675b6a5301c3a34fe5ef1be055e93aa4df2a06d82f911f5a60eb28561a79176ade0347c66f832de363ddda2aa64787b69cc67a2ec797b5f0e265edc71b3bb4791ccb16d37888b3111183dea20aad7fbfe0854df7f9863f0636b25468c0ed4163f5ae732", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf252b0000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 3.281134744s ago: executing program 3 (id=3399): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1c0000001a007f0214f9f40700090408030000000000000000020000", 0x1c) 3.233578855s ago: executing program 3 (id=3400): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000000) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x11c3}, {0x0}, &(0x7f0000000580)=[{&(0x7f0000000400)=""/118, 0x76}], 0x1, 0x24, 0x1}}], 0x48, 0x8004}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000094bbac1"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x0, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020f08001000000000000000fedbdf25030005000000000002000020000000000000000000000000080012000000020000000000000000000600320000000000000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000001803000600002000000200"], 0x80}}, 0x0) sendmsg$key(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)={0x2, 0x10, 0x6, 0x9, 0x30, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_address={0x3, 0x17, 0x32, 0x20, 0x0, @in={0x2, 0x4e22, @broadcast}}, @sadb_x_sec_ctx={0x20, 0x18, 0x94, 0xf, 0xf8, "b6653543d866c06ab26c802de575b1aef8f0d90578082eae3c8fe99a5a48a8f13fc6ea2143bc855d9bb0dddd6ec53685a3be4d58e4b5aec99ddc589d383422b914b5aa1c0371303b34abb2c3bbaac4ab6588b34a5f773d0afb863a29c8c8826c6e4d2340a32dbd1ed07d1eefec279cdfb41a03ae7b9b5eb93419ac3dcbe57a952033b7b3200515b5c4b6e2e71e8d0ce9f198fa41fc61b4050b26afdf1abb6725d2a8531078d81aae85fbc097e12a83b87ff1362f551882536bd431acabbf86dc51662b27eb14607163837f81aefbe2ceea12c203fa5c5118f2af21d63b79801b8ba5f132231d97e5c6ca5c49de8cb2148024094ec88ed618"}, @sadb_address={0x3, 0x7, 0x32, 0xa0, 0x0, @in={0x2, 0x4e20, @multicast1}}]}, 0x180}}, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'hsr0\x00', 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.160995999s ago: executing program 2 (id=3401): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x10b80) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x1ff, 0x8}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) (async) sendmmsg$inet(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000800)="3bae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a3", 0x22d}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') (rerun: 32) read$FUSE(r3, &(0x7f00000102c0)={0x2020}, 0x2020) (async, rerun: 32) read$FUSE(r3, &(0x7f0000014c80)={0x2020}, 0x2020) (async, rerun: 32) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000100)=@attr_pmu_init) 3.143591636s ago: executing program 2 (id=3402): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000600000000000000001", @ANYRES64=r1], 0xfdef) 3.099449682s ago: executing program 3 (id=3403): syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e500000087"], 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xcc, &(0x7f0000000640)=@string={0xcc, 0x3, "8cfbf2a285163a7972718062346737d72387662acacfebf85de08e0c34dcf1342d278f0a8bf004ec6ef3dddc83751056dc313166345dde1d17241a6d8a34a76b17616d0d87e3ac1ebc04448b5e8e573b89d873c66d6e9510072dad048bf6dc7b36c6fe0041f94fa0cb4e414aa31a2d517c3446b9ce3ccdf11f598e3b8f75ef76c2c0291951097fa98d680ef6b9814d8840cd5b5b0c0bcb159c9d9fb0102fd828c36c1198e4c07787402e3f4efeee707bfb28a54de9f307ebee474e4056683a3f0456686ac5a63cc872ab"}}, {0x4f, &(0x7f0000000180)=@string={0x4f, 0x3, "9357d134291ecd43cbebd6f8ce25dc6ae03690fcdb005dd072bbe301f38e56905660213e0ecfe3dde09b8f74f2815487b59f6070e114e36b7beb186317bd6ea22896b381da9344bf270b08e45f"}}, {0xa, &(0x7f00000002c0)=@string={0xa, 0x3, "cb353ab37c0a1430"}}, {0xb7, &(0x7f0000000740)=@string={0xb7, 0x3, "4b38eab16d254650206a85ee4fac6c4913f941014e26cbd859d872af33358edbe0d35a09dbf5f27c17d0ade39d02ebcc6bdfc97b7a66c90904108a46efd6ad78fbee0c8eeb9afd1319ee65fdcc567fc56f325fe3a241d205fa32b0bcbb2c0a0b3ae6874ce86766c2adde6983b57566ba44ce109b01be1f9d89e7d4ffebae6f53771ae3a435ebd80203a3fdc5124cabe89b311caee56772cbd1e199c7081187da03eb8bacaa998563a0bad0d66158814fc766197f8b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x83e}}, {0x2, &(0x7f0000000840)=@string={0x2}}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3, 0x6, 0x4002004c4, 0x1004, 0x54d351bd, 0xc595, 0xd10, 0x2, 0xf7, 0x0, 0x7f, 0x3], 0xeefe0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.988023577s ago: executing program 2 (id=3404): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3c1e, 0x200020, 0xdc, 0x8, 0xb85, 0x4, 0x0, 0x0, 0x20, 0xffffff81}}, 0x50) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101", @ANYRESDEC=0x0], 0x0) 2.987346641s ago: executing program 4 (id=3405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24042016}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={0xfffffff8, 0x0, 0x0, 0x7ff, 0x0, "0000005f9ed6280000000000edfc001900"}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xf4, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x21}}}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x5]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5a6d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xbf}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cb}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0xa4, 0xffff]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x1, 0x2, 0x6fe, 0x1, 0x9, 0x9, 0x401, 0xfffffffe, 0x5, 0x3]}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x9, 0xd]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40040c1}, 0x41) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25010000007c000380140002006970766c616e31000000000000000000140002006e696376663000000000000000000000060004000200000006000400c1000000080003000200000014000600fe88000000000000000000000000000114000600000000000000000000000000000000010800010000000000080023000300000008000400000000004000018008000b007369700008000b007369700007000600727200000c0007003200000003000000060005"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 2.925088451s ago: executing program 4 (id=3406): r0 = epoll_create1(0x80000) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x58, {0x3, 0x4, 0xffd, 0x9, 0x4, 0x8000, 0xfffd, 0x8, 0x1, 0xfffc, 0x8, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000600), r3, r2}}, 0x18) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000140)={0x40, 0xe, 0x5e, {0x5e, 0x24, "463dfde5ff7a73aedcfea6d759f76774a958510f4ab59f15c9602262f5f18d7edeb221caf2057cc39e49d6b9101769b83b9b60c65f70312c3d2f15f231074af0341b1ca9ae3c889d145db6349cd6d678abe69fa267fc92badd02874e"}}, &(0x7f00000002c0)={0x0, 0x3, 0x71, @string={0x71, 0x3, "16e1b5d8a549fe817794de598caf8fc30e18125620afc8e1f67bc295573a8746590a8ed3985df3ebcb88a5b217449f9191ab3942a91d2f52397babce4e2e8fbeb45127def769bd676144cc8890131f7f5ca0243fc733cda0abc441bf29a71551aa47cc359515049722d937814e1080"}}, &(0x7f0000000680)={0x0, 0xf, 0x1c9, {0x5, 0xf, 0x1c9, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xff, 0xf00, 0x8001, [0xc000, 0x7f400f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x2, 0x9}, @generic={0xb2, 0x10, 0x2, "399191d81455b100e5d962620f49e5deacd027799b4b9ef8a8909d8ab6e87959c22588c2f9afe98ca392b8ff3217b9086b1f3963a62b760fa12c534a7d7eec03e9eb64262a6208cab1fe8f0c427582ed1b5402b511f9fb6b08ab360e3013871960a2fcc7d54baa25b9dcb8aa89c70622707dad13cca9d616316ef936d982704ed9db1ece4be527347bfbde1258961caacb81d45e2f4ed0a5c526c83890057df8ba28c084cea3fb0a8fe165e20e406e"}, @generic={0xd8, 0x10, 0x3, "e8731bb86cdc1e3157e5228ce6b8738db201fb33420cb2a2eb2890570eb8bbcd3a9c713e18f8e97bd3ca95cd037d1492ad9d0a4f5228c3076e3243191ceb778d37276f34f7f4beff5d38ebe278846d2de5b02a3019705f31f13c0726dad105e4f4edb3a83efadc924f810fe897349f9e4bb8c90ddfcb1e7448f16792221329178c60fdd9f5fd1716347b1afc37097e856e7715d6ac9c8cc8a2a3feb5c5488d58f9582fdd412e0c688769def34b8cca0912d4c1e7d16ff772f84b8de02bddc87db16faa11d3c7327542aa0d920bc90046aceca919df"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a25b9da88209b700913952451727beed"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0xd9, 0xd, "dbe091ba", "919a55e6"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2f, 0x80, 0xbf, 0x9, 0x9, 0xe70f, 0x7}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000003c0)={0x0, 0x1, 0x64, "75f7a21ce78c7a7d76fa3917eb105f79f6282c2dae5e5e2da408968508ec16948a8edd98b864dcb5c764c737013434d7ca1bf98d3dd3bb92ec8b13eb145791588e972ac3b2a3724b9dbae851351dd34fdadbc755214428a943eb813ae162e47139374010"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x3edc7b67cd4736b6}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0xb, 0x2, "f22f"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a40)={0x40, 0x17, 0x6}, &(0x7f0000000a80)={0x40, 0x19, 0x2, 'k&'}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x21, 0x1}}) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000340)={0x2}) r8 = dup3(r5, r4, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0x20000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r8, &(0x7f0000000040)={0x40000006}) 2.916672839s ago: executing program 1 (id=3407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="37040000000000000000010000005c03088030000080060005ff8100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223400008004000980060005000080000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922f4020080cc02098034000080060001000200000008000200ac1414aa0500030003000000060001000200000008000200640101010500030000000000a0000080060001000a00000014000200000000000000000000000000000000000500030003000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe80000000000000000000000000003305000300020000001c000080060001000200000008000200ac1414bb050003000200000028000080060001000a00000014000200fc000000000000000000000000000001050003000000000034000080060001000200000008000200ac1414bb0500030003000000060001000200000008000204e0000002050003000000000088000080060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe80000000000000000000000000002e0500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200e00000020500030001000000f4000080060001000a00000014000200fe80000000000000000000000000002f0500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200e00000010500030001000000060001000a00000014000200200100000000000000000000000000010500030001000000060001000200000008000200ac1414300500030000000000060001000200000008000200ac1e00010500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fc010000000000000000000000000000050003000200000024000100000000000000000000000000000000000000000000000000000000000000000008000100", @ANYRES32=r3], 0x378}}, 0x0) 2.833298771s ago: executing program 1 (id=3408): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi5\x00', 0x5c000, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000140)={0x2, 0x20, 0x1, 0x8, 0x100, 0xd, 0x80, 0xfffffffe, 0x10, 0x81, 0x2, 0x95a, 0x0, 0x0, 0x0}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r2, &(0x7f0000000cc0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) (async) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4004911) (async) syz_usb_connect(0x6, 0xab2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x3, 0x5e, 0x40, 0x53}, 0x66, &(0x7f00000000c0)={0x5, 0xf, 0x66, 0x2, [@generic={0x3d, 0x10, 0x1, "4c10c11e18bc6cc0ed49bf9fc697fc8abfd277be4050b9e56795ff4d0bc37192a7d11d9f3d77eb5c29e64b4f4d92b0c7822f612e8d078fd8233f"}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x9, 0xf, 0x9, [0x3f21, 0x0, 0xff0000, 0xff0000, 0xc00f, 0xff2080]}]}, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x200a}}]}) 2.326534482s ago: executing program 1 (id=3409): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1c0000001a007f0214f9f40700090408030000000000000000020000", 0x1c) 2.293945214s ago: executing program 1 (id=3410): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7f, 0x0, &(0x7f0000000000)) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000001200000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 2.14130553s ago: executing program 1 (id=3411): syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002309801e5660f42782a150002030189021200010702b001090402090010311c6dbf98e1b5f41f5730a9c90f112bcafcf96ec4d9b90730dbcdc4630969e9124174cba351a7fc6e07db5bc6c39ae452aff7db151ada30e9101f37158c7b8eee57211c42c636e3a18c502395d778f229593c438ea4aade2ca40000000000000000ef3312e79aad3a3b66b84bae180de130df37937dd70054650c469553bb114e1751c742e49fe76d1fea36bc8aff67238aa4110606343398e71d7a53319e49881980d5fea2db120c31f02e54df97699b2d2b427c859a3041639b"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x4103, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x185) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0xbf14, 0xfffffffffffffdfd, 0xfc, 0x0}) 2.05829044s ago: executing program 4 (id=3412): sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000094bbac1"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="140000002402000b00416465762f76696d326d00893b7a594ca939eb8e36ec4c9a2252ef90ab33f1e41d41e311a1497ee20618e0f4d5c0eccc7863a610504105f328eda0dcda74c16a63455456e7e635bd0badb166eb3bc6e8659be68c087345567b5fa0f006b726fb73bf9e28445b9eeb130634c957bb63aa1afb1ff5dfb21f67d1319263fc418bc7373f814172add86af091503287a3e92c2f1681f082e1cb0e82abcb19b147009b"], 0x14) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7ffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = mq_open(&(0x7f0000000800)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18J\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\";a~\n\x15\xaf.\x82\xe4\xefa\\\xdd\x93\x81G\xb4\x1d_\xb7b\xb8\x06`\xcf\xefci#zd\x01\xb2j\x05\x13\x8f\x92\x01\x8aB\xc3\xf1\x9d\xc2\xee\xd3\xad\x84\xb5\x1e[R\xff\b\x86NC\xff\xc5\xd8 \xa8 \f`\xa4\x8a\xc1b\xc9q\xe8\xb0\tZ\x00\x00\x00', 0x40, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000040)={&(0x7f00000000c0)=[{0x4, 0x9411, 0x1, &(0x7f0000000840)='\b'}], 0x1}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x0, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x882}}, './file0\x00'}) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x4, 0x0, 0x0, 0x959, 0x10}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.825898519s ago: executing program 3 (id=3413): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000001000000000001", @ANYRES64=r1], 0xfdef) 1.701190651s ago: executing program 3 (id=3414): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000280)={0x20, 0x14, 0x6, "230ed7564d3c"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000000a606"]) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x0, 0x23, 0x72, {0x72, 0x11, "011ca7c8be0172cd67c8613e87eecc074d43f1acd5f50faa332a6ac749e9f5c40aecb516da2cfbdf70e25860ad689ad80d588955da1f47b54e0224c8816e2e7dd4c040540fae65248d7db8b3ba582ffab0455e9cc855c07aa01aacb115779d8201f6c710b2b71a09f1c5b1aacba362cb"}}, &(0x7f0000000200)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "53a165c9097d0f3fa033abc711d0b4833be85d49b5e4a2469079bc4b4930f22564375bc3f9aaec39de375f81b9610bb3259e6f62e9b08b27f68d808d65cb5278fa9f0b2997e7380793c916322155bcfd39285649ef28a372429c30c11a7a5e26839e50fae27d3b0b"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x20, 0x14, 0x1e, "036b80ab77db8c923c23d31929de5edcd47304e87f10287d9660bf52bf93"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x71}, &(0x7f0000000380)={0x20, 0x81, 0x3, "c0fa2c"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "85307b"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "6bd113"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "bcd2"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "fe73ef"}}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f00000001c0)={0x1c, &(0x7f0000000580)={0x0, 0x31, 0x48, "f993a1545dc1f9d2cbf285626c464308d6bf1d71e2a86744bd44b21610da00012af9c241ea437a58d9dcfce9c50cf1f0d067cbd1510f82505586a6c8f7777447a06857363190979d"}, 0x0, 0x0}) 0s ago: executing program 2 (id=3415): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x304, 0x40, 0x8, 0x300}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000900)={0x0, 0x15}, 0x0, 0x0}) kernel console output (not intermixed with test programs): as 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 543.516022][ T981] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 543.525785][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 543.539954][ T981] usb 2-1: SerialNumber: syz [ 543.569210][ T981] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 543.812166][T15459] ieee802154 phy1 wpan1: encryption failed: -22 [ 543.860921][T15459] pimreg: entered allmulticast mode [ 543.906261][ T981] usb 2-1: USB disconnect, device number 30 [ 543.925882][T15459] pimreg: left allmulticast mode [ 544.088312][T15475] syzkaller1: entered promiscuous mode [ 544.097129][T15475] syzkaller1: entered allmulticast mode [ 544.123613][ T5908] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 544.285595][ T5908] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.306159][ T5908] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.318158][ T5908] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.334060][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 544.363668][ T5908] usb 5-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 544.391326][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.417820][ T5908] usb 5-1: config 0 descriptor?? [ 544.853840][ T5922] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 544.857446][ T5908] hid-multitouch 0003:18D1:5028.0046: item fetching failed at offset 0/4 [ 544.872375][ T5908] hid-multitouch 0003:18D1:5028.0046: probe with driver hid-multitouch failed with error -22 [ 545.012605][ T5921] usb 4-1: USB disconnect, device number 8 [ 545.045705][ T5922] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 545.055597][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.075725][ T5922] usb 3-1: config 0 descriptor?? [ 545.077233][T15521] dvmrp0: entered allmulticast mode [ 545.094003][T15463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.103421][T15463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.126839][T15463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.142403][T15463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.204218][ T5969] usb 5-1: USB disconnect, device number 58 [ 545.544104][ T5921] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 545.703701][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 545.711575][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.722020][ T5921] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 545.735165][ T5969] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 545.755007][ T5921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.764495][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 545.772497][ T5921] usb 4-1: SerialNumber: syz [ 545.786012][ T5921] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 545.904141][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 545.910629][ T5969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.920873][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.932219][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 545.941970][ T5969] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 545.952359][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.966573][ T5969] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 545.976203][ T5969] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 545.984255][ T5969] usb 2-1: Manufacturer: syz [ 545.991496][ T5969] usb 2-1: config 0 descriptor?? [ 546.033735][ T5908] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 546.055061][ T938] usb 4-1: USB disconnect, device number 9 [ 546.183609][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 546.193603][ T5908] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 546.202741][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.210867][ T5908] usb 5-1: Product: syz [ 546.215541][ T5908] usb 5-1: Manufacturer: syz [ 546.220149][ T5908] usb 5-1: SerialNumber: syz [ 546.228205][ T5908] usb 5-1: config 0 descriptor?? [ 546.283812][ T5969] rc_core: IR keymap rc-hauppauge not found [ 546.289809][ T5969] Registered IR keymap rc-empty [ 546.295055][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.313673][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.335165][ T5969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 546.348467][ T5969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input89 [ 546.362928][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.383689][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.410322][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.433695][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.453590][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.473737][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.493682][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.513777][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.533778][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.553700][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.577103][ T5969] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 546.586445][ T5969] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 546.676215][ T981] usb 2-1: USB disconnect, device number 31 [ 546.847830][ T5908] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 546.857985][ T5969] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 546.865625][ T5908] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 546.872481][ T5908] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 546.935265][ T5908] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 547.027188][ T5969] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 547.036426][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.044490][ T5969] usb 4-1: Product: syz [ 547.048745][ T5969] usb 4-1: Manufacturer: syz [ 547.053347][ T5969] usb 4-1: SerialNumber: syz [ 547.056038][ T5901] usb 5-1: USB disconnect, device number 59 [ 547.069440][ T5969] usb 4-1: config 0 descriptor?? [ 547.281958][ T5969] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 547.336837][ T5922] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 547.354381][ T5922] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 547.366947][ T5922] asix 3-1:0.0: probe with driver asix failed with error -71 [ 547.386448][ T5922] usb 3-1: USB disconnect, device number 88 [ 547.715789][ T5908] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 547.874959][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 547.889906][ T5908] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 547.907216][ T5908] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 547.922440][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.941413][ T5908] usb 2-1: Product: syz [ 547.947534][ T5908] usb 2-1: Manufacturer: syz [ 547.952407][ T5908] usb 2-1: SerialNumber: syz [ 547.973975][ T5908] usb 2-1: config 0 descriptor?? [ 547.984742][ T5908] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 547.992804][ T5908] usb 2-1: setting power ON [ 547.998129][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 548.011180][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 548.022678][ T5908] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 548.031346][ T5908] usb 2-1: media controller created [ 548.059295][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 548.085493][ T5908] usb 2-1: selecting invalid altsetting 6 [ 548.093409][ T5908] usb 2-1: digital interface selection failed (-22) [ 548.100335][ T5908] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 548.110870][ T5908] usb 2-1: setting power OFF [ 548.118374][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 548.125454][ T5908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 548.135640][ T5908] (NULL device *): no alternate interface [ 548.167252][ T5908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 548.194280][ T8308] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 548.226434][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.235692][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.287388][ T5922] usb 2-1: USB disconnect, device number 32 [ 548.343639][ T8308] usb 3-1: Using ep0 maxpacket: 16 [ 548.350662][ T8308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.361141][ T8308] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 548.375344][ T8308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.384494][ T8308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 548.392511][ T8308] usb 3-1: SerialNumber: syz [ 548.403447][ T8308] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 548.513652][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.523426][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.698038][ T8308] usb 3-1: USB disconnect, device number 89 [ 549.000620][ T5969] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 549.018285][ T5969] usb 4-1: USB disconnect, device number 10 [ 549.062935][T15591] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3052'. [ 549.072933][T15591] xt_policy: neither incoming nor outgoing policy selected [ 549.313671][ T8308] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 549.486048][ T8308] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.496549][ T8308] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 549.518327][ T8308] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.535044][ T8308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.555472][ T8308] usb 2-1: Product: syz [ 549.561925][ T8308] usb 2-1: Manufacturer: syz [ 549.573452][ T8308] usb 2-1: SerialNumber: syz [ 549.794070][T15582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.802980][T15582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.821585][ T8308] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 549.842700][ T8308] usb 2-1: USB disconnect, device number 33 [ 550.284040][ T8308] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 550.453617][ T8308] usb 2-1: Using ep0 maxpacket: 8 [ 550.460661][ T8308] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 550.471050][ T8308] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 550.481806][ T8308] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 550.495680][ T8308] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 550.505627][ T8308] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 550.516181][ T8308] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.527626][ T8308] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.537601][ T8308] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 550.546747][ T8308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.578601][T15624] netlink: 'syz.3.3065': attribute type 4 has an invalid length. [ 550.608784][T15624] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 550.615412][T15624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 550.624066][T15624] vhci_hcd vhci_hcd.0: Device attached [ 550.625215][ T5969] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 550.631700][T15624] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 550.643728][T15624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 550.651795][T15624] vhci_hcd vhci_hcd.0: Device attached [ 550.659033][T15627] vhci_hcd: connection closed [ 550.659306][ T1151] vhci_hcd: stop threads [ 550.661976][T15625] vhci_hcd: connection closed [ 550.664103][ T1151] vhci_hcd: release socket [ 550.664123][ T1151] vhci_hcd: disconnect device [ 550.686182][T13990] vhci_hcd: stop threads [ 550.691241][T13990] vhci_hcd: release socket [ 550.695802][T13990] vhci_hcd: disconnect device [ 550.743889][ T981] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 550.793686][ T5969] usb 3-1: Using ep0 maxpacket: 16 [ 550.800413][ T5969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.810969][ T5969] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 550.825273][ T5969] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.834598][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 550.842582][ T5969] usb 3-1: SerialNumber: syz [ 550.856543][ T5969] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 550.873950][ T981] usb 5-1: device descriptor read/64, error -71 [ 551.113851][ T981] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 551.126774][ T938] usb 3-1: USB disconnect, device number 90 [ 551.243600][ T981] usb 5-1: device descriptor read/64, error -71 [ 551.354365][ T981] usb usb5-port1: attempt power cycle [ 551.463593][ T5922] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 551.593613][ T5922] usb 4-1: device descriptor read/64, error -71 [ 551.694570][ T981] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 551.724366][ T981] usb 5-1: device descriptor read/8, error -71 [ 551.833582][ T5922] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 551.976689][ T5922] usb 4-1: device descriptor read/64, error -71 [ 551.983036][ T981] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 552.015800][ T981] usb 5-1: device descriptor read/8, error -71 [ 552.047912][ T8308] usb 2-1: usb_control_msg returned -71 [ 552.075469][ T8308] usbtmc 2-1:16.0: can't read capabilities [ 552.085038][ T8308] usbtmc 2-1:16.0: Failed to submit iin_urb [ 552.087516][ T5922] usb usb4-port1: attempt power cycle [ 552.091810][ T8308] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -90 [ 552.124757][ T8308] usb 2-1: USB disconnect, device number 34 [ 552.143951][ T981] usb usb5-port1: unable to enumerate USB device [ 552.433699][ T5922] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 552.458535][ T5922] usb 4-1: device descriptor read/8, error -71 [ 552.533600][ T8308] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 552.675842][ T8308] usb 2-1: device descriptor read/64, error -71 [ 552.683613][ T5901] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 552.703592][ T5922] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 552.724934][ T5922] usb 4-1: device descriptor read/8, error -71 [ 552.833593][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 552.839311][ T5922] usb usb4-port1: unable to enumerate USB device [ 552.848091][ T5901] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 552.856406][ T5901] usb 3-1: config 179 has no interface number 0 [ 552.862663][ T5901] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 552.873872][ T5901] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 552.885549][ T5901] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 552.896871][ T5901] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 552.906969][ T5901] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 552.920544][ T8308] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 552.921282][ T5901] usb 3-1: config 179 interface 65 has no altsetting 0 [ 552.936015][ T5901] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 552.945676][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.969733][ T5901] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input90 [ 553.054087][ T8308] usb 2-1: device descriptor read/64, error -71 [ 553.162087][ T5921] usb 3-1: USB disconnect, device number 91 [ 553.168446][ T8308] usb usb2-port1: attempt power cycle [ 553.513644][ T8308] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 553.534623][ T8308] usb 2-1: device descriptor read/8, error -71 [ 553.774645][ T8308] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 553.794006][ T8308] usb 2-1: device descriptor read/8, error -71 [ 553.904021][ T8308] usb usb2-port1: unable to enumerate USB device [ 553.913693][ T5901] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 553.933594][ T5969] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 554.067028][ T5901] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 554.076598][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.084635][ T5901] usb 5-1: Product: syz [ 554.088791][ T5901] usb 5-1: Manufacturer: syz [ 554.093592][ T5901] usb 5-1: SerialNumber: syz [ 554.094422][ T5969] usb 3-1: Using ep0 maxpacket: 16 [ 554.104757][ T5901] usb 5-1: config 0 descriptor?? [ 554.111031][ T5969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.112875][ T5901] usbsevseg 5-1:0.0: USB 7 Segment device now attached [ 554.123115][ T5969] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 554.143116][ T5969] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.152429][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 554.161144][ T5969] usb 3-1: SerialNumber: syz [ 554.171301][ T5969] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 554.317112][ T5901] usb 5-1: USB disconnect, device number 64 [ 554.324406][ T5901] usbsevseg 5-1:0.0: USB 7 Segment now disconnected [ 554.505746][ T5969] usb 3-1: USB disconnect, device number 92 [ 555.093911][ T5969] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 555.271096][ T5969] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 555.289600][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.307919][ T5969] usb 5-1: Product: syz [ 555.313565][ T5969] usb 5-1: Manufacturer: syz [ 555.326222][ T5969] usb 5-1: SerialNumber: syz [ 555.352189][ T5969] usb 5-1: config 0 descriptor?? [ 555.565128][ T5969] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 555.663591][ T8308] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 555.663630][ T5950] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 555.823694][ T8308] usb 3-1: Using ep0 maxpacket: 8 [ 555.831096][ T5950] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 555.831878][ T8308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 555.840883][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.863972][ T981] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 555.864353][ T8308] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 555.882256][ T8308] usb 3-1: can't read configurations, error -71 [ 555.884816][ T5950] usb 4-1: config 0 descriptor?? [ 555.899286][ T5950] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 556.033758][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 556.040762][ T981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.051787][ T981] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 556.065988][ T981] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.075165][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 556.083170][ T981] usb 2-1: SerialNumber: syz [ 556.094517][ T981] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 556.358637][ T5921] usb 2-1: USB disconnect, device number 39 [ 556.512383][ T5950] pwc: recv_control_msg error -32 req 02 val 2b00 [ 556.521251][ T5950] pwc: recv_control_msg error -32 req 02 val 2700 [ 556.732320][ T5950] pwc: recv_control_msg error -71 req 02 val 2c00 [ 556.740504][ T5950] pwc: recv_control_msg error -71 req 04 val 1000 [ 556.747366][ T5950] pwc: recv_control_msg error -71 req 04 val 1300 [ 556.754204][ T5950] pwc: recv_control_msg error -71 req 04 val 1400 [ 556.760986][ T5950] pwc: recv_control_msg error -71 req 02 val 2000 [ 556.767891][ T5950] pwc: recv_control_msg error -71 req 02 val 2100 [ 556.775096][ T5950] pwc: recv_control_msg error -71 req 06 val 0600 [ 556.781855][ T5950] pwc: recv_control_msg error -71 req 04 val 1500 [ 556.788689][ T5950] pwc: recv_control_msg error -71 req 02 val 2500 [ 556.795499][ T5950] pwc: recv_control_msg error -71 req 02 val 2400 [ 556.802259][ T5950] pwc: recv_control_msg error -71 req 02 val 2600 [ 556.813219][ T5950] pwc: recv_control_msg error -71 req 02 val 2900 [ 556.821358][ T5950] pwc: recv_control_msg error -71 req 02 val 2800 [ 556.828371][ T5950] pwc: recv_control_msg error -71 req 04 val 1100 [ 556.836104][ T5950] pwc: recv_control_msg error -71 req 04 val 1200 [ 556.844722][ T5950] pwc: Registered as video103. [ 556.851569][ T5950] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input91 [ 556.891316][ T5950] usb 4-1: USB disconnect, device number 15 [ 556.943662][ T8308] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 556.987480][ T5969] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 557.001549][ T5969] usb 5-1: USB disconnect, device number 65 [ 557.123939][ T8308] usb 3-1: Using ep0 maxpacket: 8 [ 557.131864][ T8308] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 557.141556][ T8308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.149620][ T8308] usb 3-1: Product: syz [ 557.153851][ T8308] usb 3-1: Manufacturer: syz [ 557.158439][ T8308] usb 3-1: SerialNumber: syz [ 557.165437][ T8308] usb 3-1: config 0 descriptor?? [ 557.173019][ T8308] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 557.684063][ T5950] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 557.833585][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 557.841537][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.855851][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.868009][ T5950] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 557.877148][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.886428][ T981] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 557.894936][ T5950] usb 4-1: config 0 descriptor?? [ 557.903476][ T5950] hub 4-1:0.0: USB hub found [ 557.982487][ T8308] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 557.992390][ T8308] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 558.002986][ T8308] usb 3-1: USB disconnect, device number 94 [ 558.045435][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 558.052089][ T981] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.062418][ T981] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 558.077297][ T981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.086493][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 558.094714][ T981] usb 5-1: SerialNumber: syz [ 558.106583][ T981] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 558.307022][ T5950] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 558.368650][ T981] usb 5-1: USB disconnect, device number 66 [ 558.650318][ T981] IPVS: starting estimator thread 0... [ 558.740464][ T5950] usbhid 4-1:0.0: can't add hid device: -71 [ 558.746486][ T5950] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 558.763704][T15763] IPVS: using max 29 ests per chain, 69600 per kthread [ 558.775738][ T5950] usb 4-1: USB disconnect, device number 16 [ 558.903592][ T981] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 559.053636][ T8308] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 559.056680][ T981] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 559.072829][ T981] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64 [ 559.083794][ T981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 559.092901][ T981] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 559.102660][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.110884][ T981] usb 3-1: Product: syz [ 559.115134][ T981] usb 3-1: Manufacturer: syz [ 559.119723][ T981] usb 3-1: SerialNumber: syz [ 559.126177][ T981] usb 3-1: config 0 descriptor?? [ 559.137388][ T981] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 559.217262][ T8308] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 559.226365][ T8308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.234405][ T8308] usb 2-1: Product: syz [ 559.238571][ T8308] usb 2-1: Manufacturer: syz [ 559.243159][ T8308] usb 2-1: SerialNumber: syz [ 559.250516][ T8308] usb 2-1: config 0 descriptor?? [ 559.337272][ T981] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 559.347381][ T981] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 559.464951][ T8308] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 559.546395][ T5969] usb 3-1: USB disconnect, device number 95 [ 559.554213][ T5921] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 559.635497][T15775] [U]  [ 559.638537][T15775] [U] K{ [ 559.641773][T15775] [U] t 1ŠFfˊ`GJgo/mC [ 559.649240][T15775] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 559.665253][T15775] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 559.676214][T15775] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 559.711921][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.720131][T15775] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 559.743673][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.749941][T15775] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 559.755220][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 559.761315][T15775] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 559.768651][ T5921] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 559.779219][T15775] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 559.895038][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.902430][ T5921] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 559.904079][T15775] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 559.917910][T15775] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 559.931823][T15775] [U] 22Ʃx?0;3u [ 559.936923][T15775] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 559.961861][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.968020][T15775] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 559.973799][ T938] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 559.977436][T15775] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 559.994502][T15775] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 560.000822][T15775] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 560.016202][T15775] [U] ec [ 560.019333][T15775] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 560.101159][ T5185] Bluetooth: hci4: unexpected event for opcode 0x041b [ 560.109727][T15778] gfs2: gfs2 mount does not exist [ 560.123730][ T938] usb 5-1: Using ep0 maxpacket: 32 [ 560.130561][ T938] usb 5-1: unable to get BOS descriptor or descriptor too short [ 560.139659][ T938] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 560.148084][ T938] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 560.158473][ T938] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 560.167982][ T938] usb 5-1: config 128 has no interface number 0 [ 560.176975][ T938] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.187215][ T938] usb 5-1: config 128 interface 127 has no altsetting 0 [ 560.197043][ T938] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 560.206188][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.214250][ T938] usb 5-1: Product: syz [ 560.218457][ T938] usb 5-1: Manufacturer: syz [ 560.223056][ T938] usb 5-1: SerialNumber: syz [ 560.413646][ T5908] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 560.437807][T15774] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 560.469189][ T938] usb 5-1: USB disconnect, device number 67 [ 560.490928][ T7060] udevd[7060]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.546267][ T5908] usb 3-1: device descriptor read/64, error -71 [ 560.566198][T15782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3119'. [ 560.575509][T15782] tipc: Invalid UDP bearer configuration [ 560.575654][T15782] tipc: Enabling of bearer rejected, failed to enable media [ 560.783573][ T5908] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 560.914750][ T8308] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 560.924332][ T5908] usb 3-1: device descriptor read/64, error -71 [ 560.933133][ T8308] usb 2-1: USB disconnect, device number 40 [ 561.034840][ T5908] usb usb3-port1: attempt power cycle [ 561.283636][ T938] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 561.373595][ T5908] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 561.394303][ T5908] usb 3-1: device descriptor read/8, error -71 [ 561.395165][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'. [ 561.411941][T15771] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3119'. [ 561.421004][T15771] netlink: 'syz.3.3119': attribute type 6 has an invalid length. [ 561.431170][T15771] netlink: 'syz.3.3119': attribute type 5 has an invalid length. [ 561.439599][T15771] netlink: 'syz.3.3119': attribute type 4 has an invalid length. [ 561.449196][ T938] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 561.458562][T15771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3119'. [ 561.468038][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.485771][ T938] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 561.495017][ T5921] gspca_vc032x: reg_w err -71 [ 561.499711][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.505661][ T938] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 561.513728][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.519031][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.524490][ T938] usb 5-1: Manufacturer: syz [ 561.530372][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.537542][ T938] usb 5-1: config 0 descriptor?? [ 561.542617][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.548024][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.553586][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.558876][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.565935][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.571229][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.577196][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.582488][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.587837][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.593120][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.598470][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.603853][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.609118][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.614452][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 561.619727][ T5921] gspca_vc032x: Unknown sensor... [ 561.624931][ T5921] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 561.633591][ T938] rc_core: IR keymap rc-hauppauge not found [ 561.639484][ T938] Registered IR keymap rc-empty [ 561.644399][ T5908] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 561.656205][ T938] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 561.666677][ T5921] usb 4-1: USB disconnect, device number 17 [ 561.678689][ T938] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input93 [ 561.690100][ T5908] usb 3-1: device descriptor read/8, error -71 [ 561.703848][ T5950] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 561.804466][ T5908] usb usb3-port1: unable to enumerate USB device [ 561.863592][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 561.872159][ T5950] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 561.881319][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.889391][ T5950] usb 2-1: Product: syz [ 561.893679][ T5950] usb 2-1: Manufacturer: syz [ 561.898280][ T5950] usb 2-1: SerialNumber: syz [ 561.906904][ T5950] usb 2-1: config 0 descriptor?? [ 561.957486][ C1] igorplugusb 5-1:0.0: receive overflow invalid: 56 [ 562.117342][T15788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.126446][T15788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.158578][ T5921] usb 5-1: USB disconnect, device number 68 [ 562.293710][ T938] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 562.335863][ T5950] airspy 2-1:0.0: Board ID: 00 [ 562.340683][ T5950] airspy 2-1:0.0: Firmware version: [ 562.443598][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 562.450943][ T938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.461576][ T938] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 562.476292][ T938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.485447][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 562.493442][ T938] usb 4-1: SerialNumber: syz [ 562.505484][ T938] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 562.536908][T15788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.545762][T15788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.758754][T15788] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3125'. [ 562.773895][ T5950] airspy 2-1:0.0: usb_control_msg() failed -32 request 0e [ 562.785471][ T981] usb 4-1: USB disconnect, device number 18 [ 562.792592][ T5950] airspy 2-1:0.0: Registered as swradio24 [ 562.801968][ T5950] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 562.818562][ T5950] usb 2-1: USB disconnect, device number 41 [ 562.889824][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.253661][ T938] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 563.372979][T15815] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 563.382280][T15815] netlink: 'syz.3.3136': attribute type 3 has an invalid length. [ 563.390899][T15815] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3136'. [ 563.406032][T15817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.415178][T15817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.423593][ T938] usb 5-1: Using ep0 maxpacket: 16 [ 563.433369][ T938] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 563.453557][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 563.466687][ T938] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 563.477106][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.487012][ T938] usb 5-1: Product: syz [ 563.491513][ T938] usb 5-1: Manufacturer: syz [ 563.496158][ T938] usb 5-1: SerialNumber: syz [ 563.502602][ T938] usb 5-1: config 0 descriptor?? [ 563.510381][ T938] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 563.519630][ T938] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 563.583647][ T981] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 563.613595][ T5921] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 563.633629][ T5950] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 563.713660][ T981] usb 3-1: device descriptor read/64, error -71 [ 563.744007][ T5921] usb 2-1: device descriptor read/64, error -71 [ 563.763827][ T5950] usb 4-1: device descriptor read/64, error -71 [ 563.765678][ T938] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 563.777252][ T938] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 563.785251][ T938] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 563.792391][ T938] em28xx 5-1:0.0: No AC97 audio processor [ 563.807936][ T938] usb 5-1: USB disconnect, device number 69 [ 563.826851][ T938] em28xx 5-1:0.0: Disconnecting em28xx [ 563.841166][ T938] em28xx 5-1:0.0: Freeing device [ 563.953731][ T981] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 563.983831][ T5921] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 564.003734][ T5950] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 564.039233][T15831] netlink: 'syz.4.3140': attribute type 37 has an invalid length. [ 564.086998][ T981] usb 3-1: device descriptor read/64, error -71 [ 564.124020][ T5921] usb 2-1: device descriptor read/64, error -71 [ 564.133640][ T5950] usb 4-1: device descriptor read/64, error -71 [ 564.205977][ T981] usb usb3-port1: attempt power cycle [ 564.243963][ T5921] usb usb2-port1: attempt power cycle [ 564.245658][ T5950] usb usb4-port1: attempt power cycle [ 564.553607][ T981] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 564.574890][ T981] usb 3-1: device descriptor read/8, error -71 [ 564.593614][ T5950] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 564.593645][ T5921] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 564.623997][ T5950] usb 4-1: device descriptor read/8, error -71 [ 564.634159][ T5921] usb 2-1: device descriptor read/8, error -71 [ 564.823586][ T981] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 564.843968][ T981] usb 3-1: device descriptor read/8, error -71 [ 564.863630][ T5950] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 564.873653][ T5921] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 564.884604][ T5950] usb 4-1: device descriptor read/8, error -71 [ 564.904236][ T5921] usb 2-1: device descriptor read/8, error -71 [ 564.954919][ T981] usb usb3-port1: unable to enumerate USB device [ 564.993797][ T5950] usb usb4-port1: unable to enumerate USB device [ 565.013842][ T5921] usb usb2-port1: unable to enumerate USB device [ 566.631812][T15845] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.3146'. [ 566.663637][ T938] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 566.813790][ T981] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 566.827268][ T938] usb 5-1: Using ep0 maxpacket: 16 [ 566.844588][ T938] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.860189][ T938] usb 5-1: config 0 has no interface number 0 [ 566.870172][ T938] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 566.883629][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.901848][ T938] usb 5-1: Product: syz [ 566.906116][ T938] usb 5-1: Manufacturer: syz [ 566.910719][ T938] usb 5-1: SerialNumber: syz [ 566.918154][ T938] usb 5-1: config 0 descriptor?? [ 566.931520][ T938] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 566.963622][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 566.970908][ T981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.983291][ T981] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 566.999154][ T981] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.010588][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 567.018691][ T981] usb 2-1: SerialNumber: syz [ 567.034170][ T981] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 567.133576][ T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 567.298298][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 567.307542][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.318659][ T10] usb 4-1: Product: syz [ 567.322862][ T10] usb 4-1: Manufacturer: syz [ 567.327805][ T10] usb 4-1: SerialNumber: syz [ 567.343992][ T10] usb 4-1: config 0 descriptor?? [ 567.354822][ T981] usb 2-1: USB disconnect, device number 46 [ 567.552650][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 567.873677][ T5908] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 568.024337][ T5908] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 568.041757][ T5908] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 568.050938][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 568.059177][ T5908] usb 3-1: Product: syz [ 568.063360][ T5908] usb 3-1: Manufacturer: syz [ 568.067998][ T5908] usb 3-1: SerialNumber: syz [ 568.076676][ T5908] usb 3-1: config 0 descriptor?? [ 568.287941][ T5908] ims_pcu 3-1:0.0: Zero length descriptor [ 568.294546][ T5908] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 568.309834][ T5908] usb 3-1: USB disconnect, device number 104 [ 568.349836][ T938] gspca_spca1528: reg_w err -71 [ 568.354866][ T938] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 568.371072][ T938] usb 5-1: USB disconnect, device number 70 [ 568.777653][T15857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.786508][T15857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.807177][T15857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.817233][T15857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.854522][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 568.898132][ T10] usb 4-1: USB disconnect, device number 23 [ 569.153966][ T5901] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 569.231976][T15886] netlink: 'syz.4.3164': attribute type 1 has an invalid length. [ 569.314889][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 569.321232][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.332324][ T5901] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 569.346310][ T5901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 569.355416][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 569.363399][ T5901] usb 2-1: SerialNumber: syz [ 569.382623][ T5901] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 569.677115][ T5901] usb 2-1: USB disconnect, device number 47 [ 570.114251][ T981] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 570.243605][ T981] usb 3-1: device descriptor read/64, error -71 [ 570.306282][ T5908] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 570.443760][ T5908] usb 4-1: device descriptor read/64, error -71 [ 570.504593][ T981] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 570.633606][ T981] usb 3-1: device descriptor read/64, error -71 [ 570.683604][ T5908] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 570.743980][ T981] usb usb3-port1: attempt power cycle [ 570.813683][ T5908] usb 4-1: device descriptor read/64, error -71 [ 570.913654][ T5969] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 570.933824][ T5908] usb usb4-port1: attempt power cycle [ 571.063561][ T5969] usb 5-1: Using ep0 maxpacket: 16 [ 571.070201][ T5969] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.080593][ T5969] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 571.093798][ T938] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 571.102420][ T5969] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.103759][ T981] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 571.111566][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 571.127768][ T5969] usb 5-1: SerialNumber: syz [ 571.135142][ T981] usb 3-1: device descriptor read/8, error -71 [ 571.141867][ T5969] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 571.223845][ T938] usb 2-1: device descriptor read/64, error -71 [ 571.273610][ T5908] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 571.294021][ T5908] usb 4-1: device descriptor read/8, error -71 [ 571.375429][ T981] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 571.394857][ T981] usb 3-1: device descriptor read/8, error -71 [ 571.399061][ T5969] usb 5-1: USB disconnect, device number 71 [ 571.463602][ T938] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 571.503807][ T981] usb usb3-port1: unable to enumerate USB device [ 571.533646][ T5908] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 571.555034][ T5908] usb 4-1: device descriptor read/8, error -71 [ 571.593638][ T938] usb 2-1: device descriptor read/64, error -71 [ 571.665174][ T5908] usb usb4-port1: unable to enumerate USB device [ 571.703842][ T938] usb usb2-port1: attempt power cycle [ 572.043600][ T938] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 572.064424][ T938] usb 2-1: device descriptor read/8, error -71 [ 572.303605][ T938] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 572.324336][ T938] usb 2-1: device descriptor read/8, error -71 [ 572.444011][ T938] usb usb2-port1: unable to enumerate USB device [ 572.992722][T15960] random: crng reseeded on system resumption [ 573.104340][ T5908] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 573.238972][T15969] sit0: entered promiscuous mode [ 573.274420][T15969] netlink: 'syz.3.3195': attribute type 1 has an invalid length. [ 573.293291][T15969] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3195'. [ 573.305161][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.323627][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.343914][ T5908] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 573.352939][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.376824][ T5908] usb 5-1: config 0 descriptor?? [ 573.394838][T15969] orangefs_devreq_write_iter: failed to copy head. [ 573.553638][ T5901] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 573.705384][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 573.725545][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.736044][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 573.751955][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.761196][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 573.769585][ T5901] usb 3-1: SerialNumber: syz [ 573.786057][ T5901] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 573.796027][T15952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.816752][T15952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.837106][ T5908] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 573.860515][ T5908] cp2112 0003:10C4:EA90.0047: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 573.937361][T15979] netlink: 'syz.1.3198': attribute type 10 has an invalid length. [ 573.971656][T15979] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.990788][T15979] bond0: (slave team0): Enslaving as an active interface with an up link [ 574.029512][ T5908] cp2112 0003:10C4:EA90.0047: Part Number: 0x82 Device Version: 0xFE [ 574.096270][ T5921] usb 3-1: USB disconnect, device number 109 [ 574.393640][ T5969] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 574.449100][T15952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.458204][T15952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.546757][ T5969] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 574.555951][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.564069][ T5969] usb 2-1: Product: syz [ 574.568267][ T5969] usb 2-1: Manufacturer: syz [ 574.572870][ T5969] usb 2-1: SerialNumber: syz [ 574.579573][ T5969] usb 2-1: config 0 descriptor?? [ 574.654550][ T5921] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 574.668897][ T5908] cp2112 0003:10C4:EA90.0047: error reading lock byte: -71 [ 574.682018][ T5908] usb 5-1: USB disconnect, device number 72 [ 574.805952][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.806005][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 574.806029][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 574.806050][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.806090][ T5921] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.806111][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.809008][ T5921] usb 4-1: config 0 descriptor?? [ 574.881974][ T5969] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 574.891913][ T981] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 575.043681][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 575.049437][ T981] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 575.049463][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.049482][ T981] usb 3-1: Product: syz [ 575.049496][ T981] usb 3-1: Manufacturer: syz [ 575.049511][ T981] usb 3-1: SerialNumber: syz [ 575.052335][ T981] usb 3-1: config 0 descriptor?? [ 575.096761][ T981] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 575.128549][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 575.128685][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 575.136006][ T5921] usb 4-1: USB disconnect, device number 28 [ 575.250855][T15996] nft_compat: unsupported protocol 1 [ 575.637597][T16008] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3207'. [ 575.647601][T16009] netlink: 'syz.4.3207': attribute type 5 has an invalid length. [ 575.647981][T16008] netlink: 'syz.4.3207': attribute type 5 has an invalid length. [ 575.706747][ T5969] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 575.708877][ T5969] usb 2-1: USB disconnect, device number 52 [ 575.730813][ T5921] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 575.813223][T16011] netlink: 'syz.4.3208': attribute type 10 has an invalid length. [ 575.822743][T16011] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.834588][T16011] bond0: (slave team0): Enslaving as an active interface with an up link [ 575.873976][ T5921] usb 4-1: device descriptor read/64, error -71 [ 576.014103][ T981] gspca_sonixj: reg_r err -32 [ 576.014216][ T981] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 576.113621][ T5921] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 576.243621][ T5921] usb 4-1: device descriptor read/64, error -71 [ 576.353650][ T981] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 576.353849][ T5921] usb usb4-port1: attempt power cycle [ 576.507881][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 576.509929][ T981] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.524416][ T981] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 576.525578][ T981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.547262][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 576.555297][ T981] usb 5-1: SerialNumber: syz [ 576.570431][ T981] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 576.693577][ T5921] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 576.714211][ T5921] usb 4-1: device descriptor read/8, error -71 [ 576.891261][ T938] usb 5-1: USB disconnect, device number 73 [ 576.954645][ T5921] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 576.985910][ T5921] usb 4-1: device descriptor read/8, error -71 [ 577.093871][ T5921] usb usb4-port1: unable to enumerate USB device [ 577.454155][ T5901] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 577.569012][T16032] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3217'. [ 577.618082][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 577.628060][ T5901] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 577.637189][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 577.645947][ T5901] usb 2-1: Product: syz [ 577.650113][ T5901] usb 2-1: Manufacturer: syz [ 577.654784][ T5901] usb 2-1: SerialNumber: syz [ 577.672000][ T5921] usb 3-1: USB disconnect, device number 110 [ 577.672718][ T5901] usb 2-1: config 0 descriptor?? [ 577.710161][ T5901] gspca_main: sq905-2.14.0 probing 2770:9120 [ 577.987577][T16042] input: syz1 as /devices/virtual/input/input94 [ 577.997263][T16042] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 578.113606][ T938] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 578.265456][ T938] usb 5-1: unable to get BOS descriptor or descriptor too short [ 578.274345][ T938] usb 5-1: config 14 has an invalid interface number: 21 but max is 0 [ 578.282517][ T938] usb 5-1: config 14 has no interface number 0 [ 578.288940][ T938] usb 5-1: config 14 interface 21 has no altsetting 0 [ 578.295847][ T8308] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 578.305833][ T938] usb 5-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 578.314957][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.323322][ T938] usb 5-1: Product: syz [ 578.327864][ T938] usb 5-1: Manufacturer: syz [ 578.332466][ T938] usb 5-1: SerialNumber: syz [ 578.433600][ T8308] usb 3-1: device descriptor read/64, error -71 [ 578.567826][ T938] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.583607][ T938] usb 5-1: MIDIStreaming interface descriptor not found [ 578.629259][ T5901] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 578.643007][ T938] usb 5-1: USB disconnect, device number 74 [ 578.659938][ T5901] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 578.674440][ T8308] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 578.699752][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.814886][ T5901] usb 2-1: USB disconnect, device number 53 [ 578.853622][ T8308] usb 3-1: device descriptor read/64, error -71 [ 578.886540][ T5921] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 578.964172][ T8308] usb usb3-port1: attempt power cycle [ 578.969057][T16055] vivid-000: ================= START STATUS ================= [ 578.978256][T16055] vivid-000: Enable Output Cropping: true [ 578.984260][T16055] vivid-000: Enable Output Composing: true [ 578.990101][T16055] vivid-000: Enable Output Scaler: true [ 578.996103][T16055] vivid-000: Tx RGB Quantization Range: Automatic [ 579.002533][T16055] vivid-000: Transmit Mode: HDMI [ 579.007516][T16055] vivid-000: Hotplug Present: 0x00000000 [ 579.013159][T16055] vivid-000: RxSense Present: 0x00000000 [ 579.018898][T16055] vivid-000: EDID Present: 0x00000000 [ 579.024850][T16055] vivid-000: ================== END STATUS ================== [ 579.043596][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 579.056067][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.066316][ T5921] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 579.089687][ T5921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.113595][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 579.121603][ T5921] usb 4-1: SerialNumber: syz [ 579.144772][ T5921] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 579.304481][ T8308] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 579.347105][ T8308] usb 3-1: device descriptor read/8, error -71 [ 579.416778][ T10] usb 4-1: USB disconnect, device number 33 [ 579.563582][ T5901] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 579.593609][ T8308] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 579.613980][ T8308] usb 3-1: device descriptor read/8, error -71 [ 579.693732][ T5901] usb 2-1: device descriptor read/64, error -71 [ 579.723846][ T8308] usb usb3-port1: unable to enumerate USB device [ 579.943754][ T5901] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 580.073634][ T5901] usb 2-1: device descriptor read/64, error -71 [ 580.184032][ T5901] usb usb2-port1: attempt power cycle [ 580.523718][ T5901] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 580.544254][ T5901] usb 2-1: device descriptor read/8, error -71 [ 580.793610][ T5901] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 580.814074][ T5901] usb 2-1: device descriptor read/8, error -71 [ 580.923803][ T5901] usb usb2-port1: unable to enumerate USB device [ 581.326746][T16082] netlink: 'syz.3.3232': attribute type 11 has an invalid length. [ 581.363730][ T5901] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 581.442810][T16084] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 581.453196][T16084] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 581.460277][T16084] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 581.466846][ T8308] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 581.534115][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 581.543641][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.554264][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 581.570080][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.579641][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 581.587960][ T5901] usb 5-1: SerialNumber: syz [ 581.601216][ T5901] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 581.613618][ T8308] usb 3-1: device descriptor read/64, error -71 [ 581.813620][ T938] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 581.858069][ T5901] usb 5-1: USB disconnect, device number 75 [ 581.873674][ T8308] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 581.973602][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 581.980331][ T938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.990538][ T938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.001190][ T938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.010857][ T8308] usb 3-1: device descriptor read/64, error -71 [ 582.017178][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.025404][ T938] usb 4-1: Product: syz [ 582.029566][ T938] usb 4-1: Manufacturer: syz [ 582.034220][ T938] usb 4-1: SerialNumber: syz [ 582.133834][ T8308] usb usb3-port1: attempt power cycle [ 582.447310][T16093] tmpfs: Bad value for 'mpol' [ 582.457622][T16093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.472123][T16093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.495742][ T8308] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 582.525478][ T8308] usb 3-1: device descriptor read/8, error -71 [ 582.753688][ T5921] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 582.763936][ T8308] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 582.773375][ T938] usb 4-1: cannot find UAC_HEADER [ 582.785221][ T8308] usb 3-1: device descriptor read/8, error -71 [ 582.799057][ T938] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 582.810678][ T938] usb 4-1: USB disconnect, device number 34 [ 582.829173][ T7060] udevd[7060]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.846214][ T5901] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 582.894115][ T8308] usb usb3-port1: unable to enumerate USB device [ 582.903829][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 582.910748][ T5921] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 582.922696][ T5921] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 582.932027][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 582.940287][ T5921] usb 2-1: Product: syz [ 582.944618][ T5921] usb 2-1: Manufacturer: syz [ 582.949198][ T5921] usb 2-1: SerialNumber: syz [ 582.956612][ T5921] usb 2-1: config 0 descriptor?? [ 582.962192][T16103] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 582.971719][ T5921] hub 2-1:0.0: bad descriptor, ignoring hub [ 582.977795][ T5921] hub 2-1:0.0: probe with driver hub failed with error -5 [ 583.016425][ T5901] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 583.025880][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.035429][ T5901] usb 5-1: Product: syz [ 583.039602][ T5901] usb 5-1: Manufacturer: syz [ 583.044298][ T5901] usb 5-1: SerialNumber: syz [ 583.051357][ T5901] usb 5-1: config 0 descriptor?? [ 583.261105][ T5901] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 583.293977][ T10] usb 2-1: USB disconnect, device number 58 [ 583.683718][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 583.733610][ T5950] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 583.848128][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 583.857272][ T10] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 583.866444][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.875193][ T5950] usb 2-1: device descriptor read/64, error -71 [ 583.881472][ T10] usb 4-1: Product: syz [ 583.886020][ T10] usb 4-1: Manufacturer: syz [ 583.890673][ T10] usb 4-1: SerialNumber: syz [ 584.108776][T16116] syzkaller1: entered promiscuous mode [ 584.114363][T16116] syzkaller1: entered allmulticast mode [ 584.123667][ T5950] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 584.131914][ T10] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 584.150585][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 584.176950][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 584.264141][ T5950] usb 2-1: device descriptor read/64, error -71 [ 584.265443][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3246'. [ 584.383821][ T5950] usb usb2-port1: attempt power cycle [ 584.392295][ T5969] usb 4-1: USB disconnect, device number 35 [ 584.401609][ T5969] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 584.416916][ T5969] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 584.428736][ T5969] visor 4-1:1.0: device disconnected [ 584.484990][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.494311][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.553595][ T5921] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 584.703599][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 584.705388][ T5901] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 584.715454][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.721990][ T5901] usb 5-1: USB disconnect, device number 76 [ 584.736905][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 584.751368][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 584.754669][ T5950] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 584.762721][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 584.776888][ T5921] usb 3-1: SerialNumber: syz [ 584.787759][ T5950] usb 2-1: device descriptor read/8, error -71 [ 584.792414][ T5921] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 585.033716][ T5950] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 585.074040][ T5950] usb 2-1: device descriptor read/8, error -71 [ 585.081508][ T5901] usb 3-1: USB disconnect, device number 119 [ 585.189524][T16130] 9pnet_fd: Insufficient options for proto=fd [ 585.195986][ T5950] usb usb2-port1: unable to enumerate USB device [ 585.611185][T16139] FAULT_INJECTION: forcing a failure. [ 585.611185][T16139] name failslab, interval 1, probability 0, space 0, times 0 [ 585.624469][T16139] CPU: 0 UID: 0 PID: 16139 Comm: syz.1.3252 Not tainted syzkaller #0 PREEMPT(full) [ 585.624493][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 585.624505][T16139] Call Trace: [ 585.624512][T16139] [ 585.624521][T16139] dump_stack_lvl+0x189/0x250 [ 585.624549][T16139] ? __pfx____ratelimit+0x10/0x10 [ 585.624574][T16139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.624597][T16139] ? __pfx__printk+0x10/0x10 [ 585.624624][T16139] ? __pfx___might_resched+0x10/0x10 [ 585.624650][T16139] should_fail_ex+0x414/0x560 [ 585.624677][T16139] should_failslab+0xa8/0x100 [ 585.624697][T16139] __kmalloc_noprof+0xcb/0x7f0 [ 585.624718][T16139] ? kfree+0x4d/0x6d0 [ 585.624736][T16139] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.624763][T16139] tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.624784][T16139] ? tomoyo_domain+0xd9/0x130 [ 585.624809][T16139] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 585.624832][T16139] tomoyo_path_number_perm+0x1e8/0x5a0 [ 585.624858][T16139] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 585.624919][T16139] ? __fget_files+0x2a/0x420 [ 585.624943][T16139] ? __fget_files+0x3a0/0x420 [ 585.624961][T16139] ? __fget_files+0x2a/0x420 [ 585.624983][T16139] security_file_ioctl+0xcb/0x2d0 [ 585.625008][T16139] __se_sys_ioctl+0x47/0x170 [ 585.625033][T16139] do_syscall_64+0xfa/0xfa0 [ 585.625049][T16139] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.625066][T16139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.625083][T16139] ? clear_bhb_loop+0x60/0xb0 [ 585.625104][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.625120][T16139] RIP: 0033:0x7ffba778eec9 [ 585.625136][T16139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.625150][T16139] RSP: 002b:00007ffba8556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.625168][T16139] RAX: ffffffffffffffda RBX: 00007ffba79e5fa0 RCX: 00007ffba778eec9 [ 585.625180][T16139] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 585.625192][T16139] RBP: 00007ffba8556090 R08: 0000000000000000 R09: 0000000000000000 [ 585.625203][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.625214][T16139] R13: 00007ffba79e6038 R14: 00007ffba79e5fa0 R15: 00007fffcd8114b8 [ 585.625253][T16139] [ 585.625261][T16139] ERROR: Out of memory at tomoyo_realpath_from_path. [ 585.653050][T16142] netlink: 'syz.2.3253': attribute type 15 has an invalid length. [ 585.656430][ T5901] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 585.662509][T16142] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3253'. [ 585.855416][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 585.926140][T16143] lo speed is unknown, defaulting to 1000 [ 585.945000][ T5901] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 585.956876][ T5901] usb 5-1: config 0 has no interface number 0 [ 585.962996][ T5901] usb 5-1: config 0 interface 184 has no altsetting 0 [ 585.988807][ T5901] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 586.001147][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.010504][ T5901] usb 5-1: Product: syz [ 586.015041][ T5901] usb 5-1: Manufacturer: syz [ 586.027943][T16146] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 586.039269][ T5901] usb 5-1: SerialNumber: syz [ 586.054155][ T5901] usb 5-1: config 0 descriptor?? [ 586.066897][T16146] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 586.079037][ T5901] smsc75xx v1.0.0 [ 586.140197][T16153] netlink: 'syz.2.3256': attribute type 5 has an invalid length. [ 586.473758][ T10] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 586.593618][ T5921] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 586.633995][ T5969] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 586.640190][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 586.650854][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.658972][ T10] usb 3-1: Product: syz [ 586.663164][ T10] usb 3-1: Manufacturer: syz [ 586.667821][ T10] usb 3-1: SerialNumber: syz [ 586.674817][ T10] usb 3-1: config 0 descriptor?? [ 586.743679][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 586.751592][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.762871][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.772961][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 586.786007][ T5921] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 586.795093][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.803637][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 586.810553][ T5969] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.821705][ T5921] usb 4-1: config 0 descriptor?? [ 586.826751][ T5969] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 586.844562][ T5969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.853712][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 586.861714][ T5969] usb 2-1: SerialNumber: syz [ 586.876657][ T5969] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 586.876722][ T5901] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 586.897027][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 586.905760][ T5901] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 587.118039][ T5901] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 587.131353][ T5901] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 587.141687][ T5901] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 587.142214][ T5969] usb 2-1: USB disconnect, device number 63 [ 587.153200][ T5901] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 587.169168][ T5901] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 587.186092][ T5901] usb 5-1: USB disconnect, device number 77 [ 587.246809][ T5921] microsoft 0003:045E:07DA.0048: item 0 4 0 8 parsing failed [ 587.255098][ T5921] microsoft 0003:045E:07DA.0048: parse failed [ 587.261315][ T5921] microsoft 0003:045E:07DA.0048: probe with driver microsoft failed with error -22 [ 587.447998][ T5969] usb 4-1: USB disconnect, device number 36 [ 587.700871][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.711663][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.725182][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.736661][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.750908][T16169] FAULT_INJECTION: forcing a failure. [ 587.750908][T16169] name failslab, interval 1, probability 0, space 0, times 0 [ 587.766329][T16169] CPU: 0 UID: 0 PID: 16169 Comm: syz.1.3263 Not tainted syzkaller #0 PREEMPT(full) [ 587.766355][T16169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.766366][T16169] Call Trace: [ 587.766374][T16169] [ 587.766381][T16169] dump_stack_lvl+0x189/0x250 [ 587.766409][T16169] ? __pfx____ratelimit+0x10/0x10 [ 587.766432][T16169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.766456][T16169] ? __pfx__printk+0x10/0x10 [ 587.766483][T16169] ? __pfx___might_resched+0x10/0x10 [ 587.766502][T16169] ? fs_reclaim_acquire+0x7d/0x100 [ 587.766525][T16169] should_fail_ex+0x414/0x560 [ 587.766553][T16169] should_failslab+0xa8/0x100 [ 587.766573][T16169] __kmalloc_noprof+0xcb/0x7f0 [ 587.766594][T16169] ? tomoyo_encode+0x28b/0x550 [ 587.766619][T16169] tomoyo_encode+0x28b/0x550 [ 587.766643][T16169] tomoyo_realpath_from_path+0x58d/0x5d0 [ 587.766665][T16169] ? tomoyo_domain+0xd9/0x130 [ 587.766690][T16169] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 587.766712][T16169] tomoyo_path_number_perm+0x1e8/0x5a0 [ 587.766737][T16169] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 587.766790][T16169] ? __fget_files+0x2a/0x420 [ 587.766812][T16169] ? __fget_files+0x3a0/0x420 [ 587.766828][T16169] ? __fget_files+0x2a/0x420 [ 587.766850][T16169] security_file_ioctl+0xcb/0x2d0 [ 587.766874][T16169] __se_sys_ioctl+0x47/0x170 [ 587.766897][T16169] do_syscall_64+0xfa/0xfa0 [ 587.766912][T16169] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.766929][T16169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.766945][T16169] ? clear_bhb_loop+0x60/0xb0 [ 587.766967][T16169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.766982][T16169] RIP: 0033:0x7ffba778eec9 [ 587.766999][T16169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.767020][T16169] RSP: 002b:00007ffba8556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.767038][T16169] RAX: ffffffffffffffda RBX: 00007ffba79e5fa0 RCX: 00007ffba778eec9 [ 587.767051][T16169] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 587.767060][T16169] RBP: 00007ffba8556090 R08: 0000000000000000 R09: 0000000000000000 [ 587.767070][T16169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.767079][T16169] R13: 00007ffba79e6038 R14: 00007ffba79e5fa0 R15: 00007fffcd8114b8 [ 587.767105][T16169] [ 587.767145][T16169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 588.187792][T16184] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3268'. [ 588.283190][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3270'. [ 588.310872][T16190] overlayfs: overlapping lowerdir path [ 588.381134][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 588.398743][ T10] usb 3-1: USB disconnect, device number 120 [ 588.554441][ T5921] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 588.583591][ T5922] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 588.723686][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 588.738534][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 588.746476][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.751426][ T5921] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0 [ 588.756916][ T5922] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 588.774124][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.790490][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.800154][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 588.808521][ T5921] usb 4-1: Product: syz [ 588.812703][ T5921] usb 4-1: Manufacturer: syz [ 588.818761][ T5922] usb 5-1: SerialNumber: syz [ 588.824178][ T5921] usb 4-1: SerialNumber: syz [ 588.832661][ T5922] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 588.837571][ T5921] usb 4-1: config 0 descriptor?? [ 588.860293][ T5921] usb 4-1: ucan: probing device on interface #0 [ 588.869540][ T5921] usb 4-1: ucan: invalid EP count (0) [ 588.876710][ T5921] usb 4-1: ucan: probe failed; try to update the device firmware [ 588.963030][T16222] FAULT_INJECTION: forcing a failure. [ 588.963030][T16222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.977334][T16222] CPU: 0 UID: 0 PID: 16222 Comm: syz.2.3278 Not tainted syzkaller #0 PREEMPT(full) [ 588.977357][T16222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 588.977368][T16222] Call Trace: [ 588.977376][T16222] [ 588.977384][T16222] dump_stack_lvl+0x189/0x250 [ 588.977412][T16222] ? __pfx____ratelimit+0x10/0x10 [ 588.977435][T16222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.977458][T16222] ? __pfx__printk+0x10/0x10 [ 588.977492][T16222] should_fail_ex+0x414/0x560 [ 588.977520][T16222] _copy_to_user+0x31/0xb0 [ 588.977543][T16222] simple_read_from_buffer+0xe1/0x170 [ 588.977567][T16222] proc_fail_nth_read+0x1b3/0x220 [ 588.977593][T16222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 588.977619][T16222] ? rw_verify_area+0x2a6/0x4d0 [ 588.977634][T16222] ? __lock_acquire+0xab9/0xd20 [ 588.977652][T16222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 588.977676][T16222] vfs_read+0x200/0xa30 [ 588.977692][T16222] ? fdget_pos+0x247/0x320 [ 588.977715][T16222] ? __pfx___mutex_lock+0x10/0x10 [ 588.977733][T16222] ? __pfx_vfs_read+0x10/0x10 [ 588.977752][T16222] ? __fget_files+0x2a/0x420 [ 588.977774][T16222] ? __fget_files+0x3a0/0x420 [ 588.977792][T16222] ? __fget_files+0x2a/0x420 [ 588.977818][T16222] ksys_read+0x145/0x250 [ 588.977832][T16222] ? __fget_files+0x2a/0x420 [ 588.977851][T16222] ? __pfx_ksys_read+0x10/0x10 [ 588.977871][T16222] ? do_syscall_64+0xbe/0xfa0 [ 588.977897][T16222] do_syscall_64+0xfa/0xfa0 [ 588.977918][T16222] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.977934][T16222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.977951][T16222] ? clear_bhb_loop+0x60/0xb0 [ 588.977972][T16222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.977989][T16222] RIP: 0033:0x7f77a438d8dc [ 588.978004][T16222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 588.978018][T16222] RSP: 002b:00007f77a52f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 588.978037][T16222] RAX: ffffffffffffffda RBX: 00007f77a45e5fa0 RCX: 00007f77a438d8dc [ 588.978050][T16222] RDX: 000000000000000f RSI: 00007f77a52f10a0 RDI: 0000000000000007 [ 588.978061][T16222] RBP: 00007f77a52f1090 R08: 0000000000000000 R09: 0000000000000000 [ 588.978072][T16222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.978083][T16222] R13: 00007f77a45e6038 R14: 00007f77a45e5fa0 R15: 00007ffdc0ef1f08 [ 588.978114][T16222] [ 588.991083][T16225] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3279'. [ 589.199781][ T5922] usb 4-1: USB disconnect, device number 37 [ 589.335901][ T5969] usb 5-1: USB disconnect, device number 78 [ 589.438472][T16234] FAT-fs (nullb0): bogus number of reserved sectors [ 589.458694][T16234] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 589.670666][T16251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3288'. [ 589.749486][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'. [ 589.759887][T16253] veth1_macvtap: left promiscuous mode [ 589.833626][ T5969] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 589.853640][ T10] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 589.949740][T16261] tipc: Started in network mode [ 589.955886][T16261] tipc: Node identity fe55be155716, cluster identity 4711 [ 589.963097][T16261] tipc: Enabled bearer , priority 0 [ 589.971476][T16261] tipc: Disabling bearer [ 589.983763][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 589.990493][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 590.001975][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.015599][ T5969] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 590.018317][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 590.026992][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.042187][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.053256][ T5969] usb 4-1: config 0 descriptor?? [ 590.058346][ T10] usb 3-1: Product: syz [ 590.062550][ T10] usb 3-1: Manufacturer: syz [ 590.067706][ T10] usb 3-1: SerialNumber: syz [ 590.078168][ T10] usb 3-1: config 0 descriptor?? [ 590.145779][ T5921] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 590.288962][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 590.307889][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 590.317014][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.325609][ T5921] usb 5-1: Product: syz [ 590.329952][ T5921] usb 5-1: Manufacturer: syz [ 590.334712][ T5921] usb 5-1: SerialNumber: syz [ 590.403647][ T5922] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 590.556180][T16271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.558845][ T5922] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 590.571980][T16271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.576086][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.603575][ T5922] usb 2-1: config 0 descriptor?? [ 590.608040][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 590.636075][ T5922] gspca_main: spca508-2.14.0 probing 8086:0110 [ 590.643720][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 590.657117][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 590.669656][ T5921] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 590.685402][ T5921] usb 5-1: USB disconnect, device number 79 [ 590.820445][ T5922] gspca_spca508: reg_read err -32 [ 590.836171][ T5922] gspca_spca508: reg_read err -32 [ 590.847089][ T5922] gspca_spca508: reg_read err -32 [ 590.855335][ T5922] gspca_spca508: reg_read err -32 [ 591.067726][ T5922] gspca_spca508: reg write: error -71 [ 591.073240][ T5922] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 591.113278][ T5922] usb 2-1: USB disconnect, device number 64 [ 591.324203][ T5921] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 591.397812][T16289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.410015][T16289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.483649][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 591.490816][ T5921] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 591.499730][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.510541][ T5921] usb 5-1: config 0 has no interface number 0 [ 591.519722][ T5921] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 591.529442][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.538099][ T5921] usb 5-1: Product: syz [ 591.542336][ T5921] usb 5-1: Manufacturer: syz [ 591.547427][ T5921] usb 5-1: SerialNumber: syz [ 591.557040][ T5921] usb 5-1: config 0 descriptor?? [ 591.567030][ T5921] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 591.637865][T16292] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3300'. [ 591.712077][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 591.742266][ T10] usb 3-1: USB disconnect, device number 121 [ 591.885254][ T5901] usb 5-1: USB disconnect, device number 80 [ 592.023902][T16302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.037118][T16302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.226058][ T5969] usbhid 4-1:0.0: can't add hid device: -71 [ 592.243296][ T5969] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 592.253843][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 592.269465][ T5969] usb 4-1: USB disconnect, device number 38 [ 592.423601][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 592.451843][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 592.464252][ T10] usb 2-1: config 0 has no interface number 0 [ 592.485290][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 143, changing to 11 [ 592.488526][T16324] i2c i2c-0: Invalid block write size 34 [ 592.497821][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid maxpacket 49304, setting to 1024 [ 592.516927][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 592.528474][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 592.541608][ T10] usb 2-1: Product: syz [ 592.546163][ T10] usb 2-1: SerialNumber: syz [ 592.567640][ T10] usb 2-1: config 0 descriptor?? [ 592.577397][ T10] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 592.596470][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input98 [ 592.814566][ C0] cm109_urb_ctl_callback: 112 callbacks suppressed [ 592.814592][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.829455][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.836641][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.844287][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.851777][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.859534][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.867525][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.875448][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.883913][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.891658][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 592.902903][ T10] usb 2-1: USB disconnect, device number 65 [ 592.908876][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 592.933121][ T5901] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 592.982161][ T10] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 593.122884][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 593.148945][ T5901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.166148][ T5901] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 593.181503][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.191348][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 593.199565][ T5901] usb 4-1: SerialNumber: syz [ 593.214472][ T5901] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 593.477125][ T5901] usb 4-1: USB disconnect, device number 39 [ 593.716340][T16341] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3317'. [ 593.793829][ T5921] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 593.890395][T16353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.899230][T16353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.981001][ T5921] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 593.990749][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.999949][ T5921] usb 2-1: Product: syz [ 594.004464][ T5921] usb 2-1: Manufacturer: syz [ 594.009075][ T5921] usb 2-1: SerialNumber: syz [ 594.016912][ T5921] usb 2-1: config 0 descriptor?? [ 594.133644][ T5908] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 594.237954][ T5921] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 594.313672][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 594.326690][ T5908] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 594.338578][ T5908] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 594.346176][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.361358][ T5908] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.371031][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.379639][ T5908] usb 3-1: Manufacturer: Э [ 594.384567][ T5908] usb 3-1: SerialNumber: 宻鵬埘獓낿퍢샄骟금䂝춥鎏梕ⴣ븆ﲓ긢斬꘺꫰湋相ᡱ쓫彂掿᜴ẫ巅릙쓔䕔醬浴觏꘸䱄ㄒﺄ걲ฑភ禩Ԅᛟ꼸ङ⒮캝̃⁸ⷸ丣म쮍䩛ꈁ樾⻤䝓貞ꄣ [ 594.563628][ T5901] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 594.635365][ T5908] usb 3-1: 0:2 : does not exist [ 594.661773][ T5908] usb 3-1: USB disconnect, device number 122 [ 594.723615][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 594.736592][ T5901] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 594.754818][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.774588][ T5901] usb 4-1: config 0 descriptor?? [ 594.787500][ T5901] hso 4-1:0.0: Can't find BULK IN endpoint [ 594.985500][ T5908] usb 4-1: USB disconnect, device number 40 [ 595.190772][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'. [ 595.447603][T16338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.457044][T16338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.573666][ T5908] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 595.671139][ T5921] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 595.683649][ T5921] usb 2-1: USB disconnect, device number 66 [ 595.744141][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 595.751832][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 595.764627][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 595.776024][ T5969] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 595.789457][ T5908] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 595.798769][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.806839][ T5908] usb 3-1: Product: syz [ 595.811098][ T5908] usb 3-1: Manufacturer: syz [ 595.815750][ T5908] usb 3-1: SerialNumber: syz [ 595.824912][ T5908] usb 3-1: config 0 descriptor?? [ 595.838610][ T5908] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 595.839954][T16386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3334'. [ 595.849141][ T5908] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 595.943859][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 595.950755][ T5969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.960978][ T5969] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 595.975065][ T5969] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.985798][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 595.993920][ T5969] usb 4-1: SerialNumber: syz [ 596.008509][ T5969] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 596.285405][ T5921] usb 4-1: USB disconnect, device number 41 [ 596.304224][ T5969] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 596.441153][ T5908] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 596.447854][T16392] nbd0: detected capacity change from 0 to 127 [ 596.448256][ T5908] em28xx 3-1:0.0: Config register raw data: 0x41 [ 596.460737][ T52] block nbd0: Receive control failed (result -32) [ 596.461152][ T5185] block nbd0: Receive control failed (result -32) [ 596.472455][T13799] block nbd0: Send control failed (result -32) [ 596.479501][ T5969] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 596.498850][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.502983][T13799] block nbd0: Request send failed, requeueing [ 596.508944][ T5969] usb 5-1: Product: syz [ 596.517250][ T5969] usb 5-1: Manufacturer: syz [ 596.521842][ T5969] usb 5-1: SerialNumber: syz [ 596.534928][ T95] block nbd0: Dead connection, failed to find a fallback [ 596.542518][ T95] block nbd0: shutting down sockets [ 596.548757][T13799] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.549382][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.569852][ T5969] usb 5-1: config 0 descriptor?? [ 596.574965][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 596.583428][T13799] Buffer I/O error on dev nbd0, logical block 1, async page read [ 596.594329][ T5969] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 596.601484][T13799] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.610626][T13799] Buffer I/O error on dev nbd0, logical block 2, async page read [ 596.618633][T13799] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.627759][T13799] Buffer I/O error on dev nbd0, logical block 3, async page read [ 596.635723][T13799] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.644835][T13799] Buffer I/O error on dev nbd0, logical block 0, async page read [ 596.652934][T13799] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.656346][T16397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.670693][ T5908] usb 3-1: USB disconnect, device number 123 [ 596.677881][T13799] Buffer I/O error on dev nbd0, logical block 1, async page read [ 596.690359][T13799] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.692535][ T5908] em28xx 3-1:0.0: Disconnecting em28xx [ 596.703317][T13799] Buffer I/O error on dev nbd0, logical block 2, async page read [ 596.709663][ T5908] em28xx 3-1:0.0: Freeing device [ 596.716211][T13799] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.727292][T13799] Buffer I/O error on dev nbd0, logical block 3, async page read [ 596.736021][T13799] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.745714][T13799] Buffer I/O error on dev nbd0, logical block 0, async page read [ 596.755842][T13799] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.765669][T13799] Buffer I/O error on dev nbd0, logical block 1, async page read [ 596.776694][T13799] ldm_validate_partition_table(): Disk read failed. [ 596.785419][T13799] Dev nbd0: unable to read RDB block 0 [ 596.795081][T13799] nbd0: unable to read partition table [ 596.812725][T13799] ldm_validate_partition_table(): Disk read failed. [ 596.821848][T13799] Dev nbd0: unable to read RDB block 0 [ 596.831320][T13799] nbd0: unable to read partition table [ 596.852568][T16399] syzkaller1: entered promiscuous mode [ 596.860838][T16399] syzkaller1: entered allmulticast mode [ 597.143600][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 597.219570][T16390] Mount JFS Failure: -22 [ 597.227324][T16390] jfs_mount failed w/return code = -22 [ 597.274946][ T5969] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 597.286934][ T5969] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 597.293589][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 597.304263][ T10] usb 2-1: config 3 has no interfaces? [ 597.309102][ T5969] usb 5-1: USB disconnect, device number 81 [ 597.314375][ T10] usb 2-1: New USB device found, idVendor=0c44, idProduct=0022, bcdDevice=40.3f [ 597.325034][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.333024][ T10] usb 2-1: Product: 퍣就㬔⬒緽ᄋ撟왃윅΍櫙ᷢ枲箾攆䝥ㄟq㥁惬 [ 597.344390][ T10] usb 2-1: SerialNumber: 뷮⩒⍍듗恍⇞颍臋⥍ [ 597.440340][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 597.449799][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 597.489000][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 597.498707][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 597.507256][T16419] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 597.523816][ T5901] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 597.537399][T16419] kvm: pic: non byte read [ 597.542275][T16419] kvm: pic: level sensitive irq not supported [ 597.542374][T16419] kvm: pic: non byte read [ 597.560428][T16419] kvm: pic: level sensitive irq not supported [ 597.560598][T16419] kvm: pic: non byte read [ 597.593482][T16419] kvm: pic: level sensitive irq not supported [ 597.594964][T16419] kvm: pic: non byte read [ 597.595002][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 597.618603][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 597.709074][ T5901] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 597.721656][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.741113][ T5901] usb 3-1: Product: syz [ 597.748748][ T5901] usb 3-1: Manufacturer: syz [ 597.762188][ T5901] usb 3-1: SerialNumber: syz [ 597.791813][ T5901] usb 3-1: config 0 descriptor?? [ 598.021752][ T5901] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 598.070005][ T10] usb 2-1: USB disconnect, device number 67 [ 598.093672][ T5922] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 598.143635][ T5908] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 598.263627][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 598.270538][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.281025][ T5922] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 598.296277][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.298190][ T5908] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 598.305601][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 598.315072][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.324499][ T5922] usb 5-1: SerialNumber: syz [ 598.331427][ T5908] usb 4-1: Product: syz [ 598.339736][ T5908] usb 4-1: Manufacturer: syz [ 598.345031][ T5908] usb 4-1: SerialNumber: syz [ 598.351835][ T5922] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 598.352879][ T5908] usb 4-1: config 0 descriptor?? [ 598.372668][ T5908] ch341 4-1:0.0: ch341-uart converter detected [ 598.653975][ T5922] usb 5-1: USB disconnect, device number 82 [ 598.774284][T16439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.783058][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.787725][T16439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.794114][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.808670][ T5908] usb 4-1: failed to send control message: -71 [ 598.817379][ T5908] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 598.835454][ T5908] usb 4-1: USB disconnect, device number 42 [ 598.843363][ T5908] ch341 4-1:0.0: device disconnected [ 598.874214][ T5969] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 599.025257][ T5969] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 599.033663][ T5969] usb 2-1: config 8 has no interface number 0 [ 599.039773][ T5969] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 599.052288][ T5969] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 599.062400][ T5969] usb 2-1: config 8 interface 177 has no altsetting 0 [ 599.070892][ T5969] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 599.080088][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.100537][T16448] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 599.322156][ T5969] usb 2-1: string descriptor 0 read error: -71 [ 599.405534][ T5969] ir_toy 2-1:8.177: required endpoints not found [ 599.423230][ T5969] usb 2-1: USB disconnect, device number 68 [ 599.548093][T16464] ocfs2: Unknown parameter 'grpquotaf&ȒCj' [ 599.673701][ T5901] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 599.687725][ T5901] usb 3-1: USB disconnect, device number 124 [ 599.754875][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 599.926651][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.936937][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 599.949778][ T10] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 599.958954][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.970384][ T10] usb 5-1: config 0 descriptor?? [ 600.114140][ T5969] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 600.263591][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 600.270841][ T5969] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.281161][ T5969] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 600.295116][ T5969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.304253][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 600.312238][ T5969] usb 2-1: SerialNumber: syz [ 600.317172][ T5921] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 600.331235][ T5969] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 600.387643][T16462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.396559][T16462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.407647][ T10] Bluetooth: Can't get version to change to load ram patch err [ 600.415693][ T10] Bluetooth: Loading patch file failed [ 600.421226][ T10] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 600.431695][ T10] usb 5-1: USB disconnect, device number 83 [ 600.454530][ T5908] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 600.463607][ T5921] usb 4-1: device descriptor read/64, error -71 [ 600.584128][ T5908] usb 3-1: device descriptor read/64, error -71 [ 600.591989][ T5950] usb 2-1: USB disconnect, device number 69 [ 600.703581][ T5921] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 600.823586][ T5908] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 600.833805][ T5921] usb 4-1: device descriptor read/64, error -71 [ 600.951702][ T5921] usb usb4-port1: attempt power cycle [ 600.958511][ T5908] usb 3-1: device descriptor read/64, error -71 [ 601.073870][ T5908] usb usb3-port1: attempt power cycle [ 601.293617][ T5921] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 601.324319][ T5921] usb 4-1: device descriptor read/8, error -71 [ 601.353618][ T5950] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 601.413690][ T5908] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 601.434244][ T5908] usb 3-1: device descriptor read/8, error -71 [ 601.515213][ T5950] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 601.523433][ T5950] usb 2-1: config 0 has no interface number 0 [ 601.534576][ T5950] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e14, bcdDevice=db.f2 [ 601.544681][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.552684][ T5950] usb 2-1: Product: syz [ 601.556868][ T5950] usb 2-1: Manufacturer: syz [ 601.561459][ T5950] usb 2-1: SerialNumber: syz [ 601.568741][ T5950] usb 2-1: config 0 descriptor?? [ 601.583667][ T5921] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 601.583667][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 601.604571][ T5921] usb 4-1: device descriptor read/8, error -71 [ 601.673614][ T5908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 601.695806][ T5908] usb 3-1: device descriptor read/8, error -71 [ 601.714346][ T5921] usb usb4-port1: unable to enumerate USB device [ 601.745186][ T10] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 601.753590][ T10] usb 5-1: config 0 has no interface number 0 [ 601.759691][ T10] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 601.774627][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=44.42 [ 601.785300][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.794613][ T10] usb 5-1: Product: syz [ 601.798813][ T10] usb 5-1: Manufacturer: syz [ 601.803439][ T10] usb 5-1: SerialNumber: syz [ 601.808209][ T5908] usb usb3-port1: unable to enumerate USB device [ 601.822672][ T10] usb 5-1: config 0 descriptor?? [ 601.834759][ T10] appletouch 5-1:0.219: Could not find int-in endpoint [ 601.841685][ T10] appletouch 5-1:0.219: probe with driver appletouch failed with error -5 [ 601.851221][ T10] usbhid 5-1:0.219: couldn't find an input interrupt endpoint [ 602.038642][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.047483][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.058146][ T5908] usb 5-1: USB disconnect, device number 84 [ 602.122288][T16507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.131290][T16507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.127039][T16518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.139435][T16518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.324204][ T938] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 603.485954][ T938] usb 5-1: Using ep0 maxpacket: 16 [ 603.495014][ T938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.505546][ T5908] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 603.514412][ T938] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 603.529566][ T938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.542242][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 603.551437][ T938] usb 5-1: SerialNumber: syz [ 603.561194][T16528] tipc: Started in network mode [ 603.565877][ T938] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 603.566319][T16528] tipc: Node identity ac14140f, cluster identity 4711 [ 603.582922][T16528] tipc: New replicast peer: 255.255.255.255 [ 603.594449][T16528] tipc: Enabled bearer , priority 10 [ 603.663574][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 603.672721][ T5908] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 603.681978][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.690039][ T5908] usb 4-1: Product: syz [ 603.694394][ T5908] usb 4-1: Manufacturer: syz [ 603.698992][ T5908] usb 4-1: SerialNumber: syz [ 603.706949][ T5908] usb 4-1: config 0 descriptor?? [ 603.719249][ T5908] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 603.828605][ T10] usb 5-1: USB disconnect, device number 85 [ 603.844036][ T938] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 603.915118][ T5908] gspca_stk1135: reg_w 0x2 err -71 [ 603.922237][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 603.930789][ T5908] gspca_stk1135: Sensor write failed [ 603.936220][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 603.942552][ T5908] gspca_stk1135: Sensor write failed [ 603.947878][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 603.954262][ T5908] gspca_stk1135: Sensor read failed [ 603.959473][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 603.965812][ T5908] gspca_stk1135: Sensor read failed [ 603.971003][ T5908] gspca_stk1135: Detected sensor type unknown (0x0) [ 603.977845][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 603.984420][ T5908] gspca_stk1135: Sensor read failed [ 603.989637][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 603.996109][ T5908] gspca_stk1135: Sensor read failed [ 604.001327][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 604.007706][ T938] usb 3-1: Using ep0 maxpacket: 8 [ 604.012803][ T5908] gspca_stk1135: Sensor write failed [ 604.018435][ T5908] gspca_stk1135: serial bus timeout: status=0x00 [ 604.025154][ T5908] gspca_stk1135: Sensor write failed [ 604.030562][ T5908] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 604.040213][ T938] usb 3-1: config 14 has an invalid interface number: 123 but max is 0 [ 604.051030][ T938] usb 3-1: config 14 has no interface number 0 [ 604.057658][ T5908] usb 4-1: USB disconnect, device number 47 [ 604.063693][ T938] usb 3-1: config 14 interface 123 altsetting 4 bulk endpoint 0xF has invalid maxpacket 16 [ 604.078546][ T938] usb 3-1: config 14 interface 123 has no altsetting 0 [ 604.087678][ T938] usb 3-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice= 1.12 [ 604.096931][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.104961][ T938] usb 3-1: Product: syz [ 604.109126][ T938] usb 3-1: SerialNumber: syz [ 604.117197][T16528] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 604.156933][ T5950] dvb-usb: found a 'DiBcom STK7700P reference design' in cold state, will try to load a firmware [ 604.176843][ T5950] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 604.189452][ T5950] dib0700: firmware download failed at 7 with -22 [ 604.204758][ T5950] usb 2-1: USB disconnect, device number 70 [ 604.357731][ T938] asix 3-1:14.123 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 604.379240][ T938] asix 3-1:14.123: probe with driver asix failed with error -71 [ 604.397436][ T938] usb 3-1: USB disconnect, device number 3 [ 604.553839][ T5950] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 604.646998][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 604.710214][ T5950] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 604.720198][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.728442][ T5922] tipc: Node number set to 2886997007 [ 604.734816][ T5950] usb 2-1: Product: syz [ 604.739650][ T5950] usb 2-1: Manufacturer: syz [ 604.744679][ T5950] usb 2-1: SerialNumber: syz [ 604.755137][ T5950] usb 2-1: config 0 descriptor?? [ 604.813666][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 604.824711][ T10] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 604.832986][ T10] usb 5-1: config 0 has no interface number 0 [ 604.844011][ T10] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 604.853254][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.863642][ T10] usb 5-1: Product: syz [ 604.867837][ T10] usb 5-1: Manufacturer: syz [ 604.872473][ T10] usb 5-1: SerialNumber: syz [ 604.889042][ T10] usb 5-1: config 0 descriptor?? [ 604.972297][ T5950] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 605.114959][ T10] usb 5-1: USB disconnect, device number 86 [ 605.393623][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 605.544859][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 605.552803][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.565049][ T5922] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 605.582004][ T5922] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.591704][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 605.604925][ T5922] usb 3-1: SerialNumber: syz [ 605.625157][ T5922] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 605.876978][ T5922] usb 3-1: USB disconnect, device number 4 [ 605.913585][ T938] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 606.065175][ T938] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 606.076900][ T938] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 606.089190][ T938] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 606.098293][ T938] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 606.106588][ T938] usb 5-1: Manufacturer: syz [ 606.111176][ T938] usb 5-1: SerialNumber: syz [ 606.325903][ T938] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 606.335898][ T938] usb 5-1: USB disconnect, device number 87 [ 606.396181][ T5950] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 606.435153][ T5950] usb 2-1: USB disconnect, device number 71 [ 606.862370][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3405'. [ 606.872313][T16600] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3405'. [ 606.881852][T16600] netlink: 'syz.4.3405': attribute type 5 has an invalid length. [ 606.984656][ T938] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 607.113814][ T5950] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 607.133621][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 607.140608][ T938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.150804][ T938] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 607.163915][ T5908] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 607.172414][ T938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.181567][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 607.189669][ T938] usb 4-1: SerialNumber: syz [ 607.201993][ T938] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 607.273618][ T5950] usb 3-1: Invalid ep0 maxpacket: 64 [ 607.318716][ T5908] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.327846][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.335904][ T5908] usb 5-1: Product: syz [ 607.340061][ T5908] usb 5-1: Manufacturer: syz [ 607.344691][ T5908] usb 5-1: SerialNumber: syz [ 607.414131][ T5950] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 607.477230][ T5922] usb 4-1: USB disconnect, device number 48 [ 607.582730][ T5950] usb 3-1: Invalid ep0 maxpacket: 64 [ 607.590139][ T5950] usb usb3-port1: attempt power cycle [ 607.774054][ T5908] cdc_ncm 5-1:1.0: bind() failure [ 607.786030][ T5908] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 607.793148][ T5908] cdc_ncm 5-1:1.1: bind() failure [ 607.816491][ T5908] usb 5-1: USB disconnect, device number 88 [ 607.903569][ T938] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 607.954266][ T5950] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 607.974925][ T5950] usb 3-1: Invalid ep0 maxpacket: 64 [ 608.033766][ T938] usb 2-1: device descriptor read/64, error -71 [ 608.113595][ T5950] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 608.125300][ T5908] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 608.134576][ T5950] usb 3-1: Invalid ep0 maxpacket: 64 [ 608.140662][ T5950] usb usb3-port1: unable to enumerate USB device [ 608.273583][ T938] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 608.283715][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 608.290048][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 608.301874][ T5908] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 608.311000][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.319033][ T5908] usb 5-1: Product: syz [ 608.323321][ T5908] usb 5-1: Manufacturer: syz [ 608.328087][ T5908] usb 5-1: SerialNumber: syz [ 608.333650][ T5921] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 608.344069][ T5908] usb 5-1: config 0 descriptor?? [ 608.351519][ T5908] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 608.360933][ T5908] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 608.404245][ T938] usb 2-1: device descriptor read/64, error -71 [ 608.493632][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 608.501039][ T5921] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 608.509310][ T5921] usb 4-1: config 1 has no interface number 0 [ 608.515475][ T5921] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 608.525649][ T938] usb usb2-port1: attempt power cycle [ 608.531798][ T5921] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 608.541854][ T5921] usb 4-1: config 1 interface 105 has no altsetting 0 [ 608.550577][ T5921] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 608.559759][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.567979][ T5921] usb 4-1: Product: syz [ 608.572189][ T5921] usb 4-1: Manufacturer: syz [ 608.576874][ T5921] usb 4-1: SerialNumber: syz [ 608.585151][T16626] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 608.592512][T16626] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 608.863553][ T938] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 608.884271][ T938] usb 2-1: device descriptor read/8, error -71 [ 608.970210][ T5908] em28xx 5-1:0.0: chip ID is em2765 [ 609.003573][T16626] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 609.010932][T16626] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 609.133610][ T938] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 609.154220][ T938] usb 2-1: device descriptor read/8, error -71 [ 609.263833][ T938] usb usb2-port1: unable to enumerate USB device [ 609.580743][ T5908] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 609.589194][ T5908] em28xx 5-1:0.0: board has no eeprom [ 609.863978][ T5908] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 609.875063][ T5908] em28xx 5-1:0.0: dvb set to bulk mode. [ 609.881177][ T5921] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 609.893003][ T8308] em28xx 5-1:0.0: Binding DVB extension [ 609.904511][ T5908] usb 5-1: USB disconnect, device number 89 [ 609.936399][ T5908] em28xx 5-1:0.0: Disconnecting em28xx [ 609.947217][ T5921] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:12:6b:3d:dd:aa [ 609.964775][ T8308] [ 609.967115][ T8308] ====================================================== [ 609.974115][ T8308] WARNING: possible circular locking dependency detected [ 609.981127][ T8308] syzkaller #0 Not tainted [ 609.985516][ T8308] ------------------------------------------------------ [ 609.992506][ T8308] kworker/1:7/8308 is trying to acquire lock: [ 609.998550][ T8308] ffff88801bea7a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x2fb/0x3e0 [ 610.008960][ T8308] [ 610.008960][ T8308] but task is already holding lock: [ 610.016298][ T8308] ffff88801bea7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 610.025663][ T8308] [ 610.025663][ T8308] which lock already depends on the new lock. [ 610.025663][ T8308] [ 610.036046][ T8308] [ 610.036046][ T8308] the existing dependency chain (in reverse order) is: [ 610.045036][ T8308] [ 610.045036][ T8308] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 610.053096][ T8308] lock_acquire+0x120/0x360 [ 610.058105][ T8308] down_write+0x96/0x1f0 [ 610.062854][ T8308] kernfs_add_one+0x41/0x520 [ 610.067950][ T8308] kernfs_create_dir_ns+0xde/0x130 [ 610.073572][ T8308] internal_create_group+0x419/0x1110 [ 610.079464][ T8308] cpuhp_invoke_callback+0x445/0x860 [ 610.085258][ T8308] cpuhp_issue_call+0x430/0x7a0 [ 610.090630][ T8308] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 610.097217][ T8308] __cpuhp_setup_state+0x3f/0x60 [ 610.102668][ T8308] do_one_initcall+0x236/0x820 [ 610.107934][ T8308] do_initcall_level+0x104/0x190 [ 610.113375][ T8308] do_initcalls+0x59/0xa0 [ 610.118209][ T8308] kernel_init_freeable+0x334/0x4b0 [ 610.123912][ T8308] kernel_init+0x1d/0x1d0 [ 610.128756][ T8308] ret_from_fork+0x4bc/0x870 [ 610.133860][ T8308] ret_from_fork_asm+0x1a/0x30 [ 610.139134][ T8308] [ 610.139134][ T8308] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 610.146941][ T8308] [ 610.146941][ T8308] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 610.154651][ T8308] lock_acquire+0x120/0x360 [ 610.159664][ T8308] cpus_read_lock+0x42/0x160 [ 610.164756][ T8308] static_key_slow_inc+0x12/0x30 [ 610.170201][ T8308] tcp_md5_do_add+0x21f/0x3a0 [ 610.175393][ T8308] tcp_v4_parse_md5_keys+0x412/0x600 [ 610.181184][ T8308] do_tcp_setsockopt+0x11dc/0x1f20 [ 610.186795][ T8308] do_sock_setsockopt+0x17c/0x1b0 [ 610.192324][ T8308] __x64_sys_setsockopt+0x13f/0x1b0 [ 610.198030][ T8308] do_syscall_64+0xfa/0xfa0 [ 610.203044][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.209440][ T8308] [ 610.209440][ T8308] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 610.217078][ T8308] lock_acquire+0x120/0x360 [ 610.222092][ T8308] lock_sock_nested+0x48/0x100 [ 610.227363][ T8308] inet_shutdown+0x6a/0x390 [ 610.232380][ T8308] nbd_mark_nsock_dead+0x2e9/0x560 [ 610.237999][ T8308] sock_shutdown+0x15e/0x260 [ 610.243093][ T8308] nbd_config_put+0x342/0x790 [ 610.248274][ T8308] nbd_release+0xfe/0x140 [ 610.253111][ T8308] bdev_release+0x536/0x650 [ 610.258122][ T8308] blkdev_release+0x15/0x20 [ 610.263130][ T8308] __fput+0x44c/0xa70 [ 610.267619][ T8308] task_work_run+0x1d4/0x260 [ 610.272715][ T8308] do_exit+0x6b5/0x2300 [ 610.277373][ T8308] __pfx___ia32_sys_exit+0x0/0x10 [ 610.282907][ T8308] x64_sys_call+0x21da/0x2200 [ 610.288085][ T8308] do_syscall_64+0xfa/0xfa0 [ 610.293124][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.299520][ T8308] [ 610.299520][ T8308] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 610.307149][ T8308] lock_acquire+0x120/0x360 [ 610.312156][ T8308] __mutex_lock+0x187/0x1350 [ 610.317248][ T8308] nbd_queue_rq+0x257/0xf10 [ 610.322254][ T8308] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 610.328299][ T8308] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 610.335130][ T8308] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 610.341612][ T8308] blk_mq_run_hw_queue+0x348/0x4f0 [ 610.347222][ T8308] blk_mq_dispatch_list+0xd0c/0xe00 [ 610.352919][ T8308] blk_mq_flush_plug_list+0x469/0x550 [ 610.358790][ T8308] __blk_flush_plug+0x3d3/0x4b0 [ 610.364142][ T8308] __submit_bio+0x2d3/0x5a0 [ 610.369148][ T8308] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 610.375281][ T8308] block_read_full_folio+0x599/0x830 [ 610.381073][ T8308] filemap_read_folio+0x117/0x380 [ 610.386596][ T8308] do_read_cache_folio+0x350/0x590 [ 610.392209][ T8308] read_part_sector+0xb6/0x2b0 [ 610.397474][ T8308] adfspart_check_ICS+0xa4/0xa50 [ 610.402915][ T8308] bdev_disk_changed+0x75f/0x14b0 [ 610.408440][ T8308] blkdev_get_whole+0x380/0x510 [ 610.413793][ T8308] bdev_open+0x31e/0xd30 [ 610.418533][ T8308] blkdev_open+0x457/0x600 [ 610.423449][ T8308] do_dentry_open+0x953/0x13f0 [ 610.428715][ T8308] vfs_open+0x3b/0x340 [ 610.433291][ T8308] path_openat+0x2ee5/0x3830 [ 610.438388][ T8308] do_filp_open+0x1fa/0x410 [ 610.443399][ T8308] do_sys_openat2+0x121/0x1c0 [ 610.448578][ T8308] __x64_sys_openat+0x138/0x170 [ 610.453932][ T8308] do_syscall_64+0xfa/0xfa0 [ 610.458935][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.465327][ T8308] [ 610.465327][ T8308] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 610.472517][ T8308] lock_acquire+0x120/0x360 [ 610.477527][ T8308] __mutex_lock+0x187/0x1350 [ 610.482623][ T8308] nbd_queue_rq+0xc8/0xf10 [ 610.487542][ T8308] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 610.493601][ T8308] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 610.500440][ T8308] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 610.506924][ T8308] blk_mq_run_hw_queue+0x348/0x4f0 [ 610.512544][ T8308] blk_mq_dispatch_list+0xd0c/0xe00 [ 610.518244][ T8308] blk_mq_flush_plug_list+0x469/0x550 [ 610.524117][ T8308] __blk_flush_plug+0x3d3/0x4b0 [ 610.529469][ T8308] __submit_bio+0x2d3/0x5a0 [ 610.534476][ T8308] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 610.540646][ T8308] block_read_full_folio+0x599/0x830 [ 610.546439][ T8308] filemap_read_folio+0x117/0x380 [ 610.551965][ T8308] do_read_cache_folio+0x350/0x590 [ 610.557580][ T8308] read_part_sector+0xb6/0x2b0 [ 610.562849][ T8308] adfspart_check_ICS+0xa4/0xa50 [ 610.568286][ T8308] bdev_disk_changed+0x75f/0x14b0 [ 610.573809][ T8308] blkdev_get_whole+0x380/0x510 [ 610.579166][ T8308] bdev_open+0x31e/0xd30 [ 610.583909][ T8308] blkdev_open+0x457/0x600 [ 610.588832][ T8308] do_dentry_open+0x953/0x13f0 [ 610.594103][ T8308] vfs_open+0x3b/0x340 [ 610.598675][ T8308] path_openat+0x2ee5/0x3830 [ 610.603770][ T8308] do_filp_open+0x1fa/0x410 [ 610.608778][ T8308] do_sys_openat2+0x121/0x1c0 [ 610.613958][ T8308] __x64_sys_openat+0x138/0x170 [ 610.619314][ T8308] do_syscall_64+0xfa/0xfa0 [ 610.624319][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.630712][ T8308] [ 610.630712][ T8308] -> #4 (set->srcu){.+.+}-{0:0}: [ 610.637814][ T8308] lock_sync+0xba/0x160 [ 610.642478][ T8308] __synchronize_srcu+0x96/0x3a0 [ 610.647927][ T8308] elevator_switch+0x12b/0x640 [ 610.653190][ T8308] elevator_change+0x315/0x4c0 [ 610.658454][ T8308] elevator_set_default+0x186/0x260 [ 610.664149][ T8308] blk_register_queue+0x34e/0x3f0 [ 610.669676][ T8308] __add_disk+0x677/0xd50 [ 610.674507][ T8308] add_disk_fwnode+0xfc/0x480 [ 610.679690][ T8308] nbd_dev_add+0x717/0xae0 [ 610.684610][ T8308] nbd_init+0x168/0x1f0 [ 610.689270][ T8308] do_one_initcall+0x236/0x820 [ 610.694532][ T8308] do_initcall_level+0x104/0x190 [ 610.699973][ T8308] do_initcalls+0x59/0xa0 [ 610.704806][ T8308] kernel_init_freeable+0x334/0x4b0 [ 610.710515][ T8308] kernel_init+0x1d/0x1d0 [ 610.715357][ T8308] ret_from_fork+0x4bc/0x870 [ 610.720462][ T8308] ret_from_fork_asm+0x1a/0x30 [ 610.725726][ T8308] [ 610.725726][ T8308] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 610.733524][ T8308] lock_acquire+0x120/0x360 [ 610.738533][ T8308] __mutex_lock+0x187/0x1350 [ 610.743623][ T8308] elevator_change+0x1e5/0x4c0 [ 610.748887][ T8308] elevator_set_none+0x42/0xb0 [ 610.754151][ T8308] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 610.760461][ T8308] nbd_start_device+0x17f/0xb10 [ 610.765819][ T8308] nbd_genl_connect+0x135b/0x18f0 [ 610.771348][ T8308] genl_family_rcv_msg_doit+0x215/0x300 [ 610.777397][ T8308] genl_rcv_msg+0x60e/0x790 [ 610.782405][ T8308] netlink_rcv_skb+0x208/0x470 [ 610.787676][ T8308] genl_rcv+0x28/0x40 [ 610.792160][ T8308] netlink_unicast+0x82f/0x9e0 [ 610.797429][ T8308] netlink_sendmsg+0x805/0xb30 [ 610.802689][ T8308] __sock_sendmsg+0x21c/0x270 [ 610.807869][ T8308] ____sys_sendmsg+0x505/0x830 [ 610.813133][ T8308] ___sys_sendmsg+0x21f/0x2a0 [ 610.818312][ T8308] __x64_sys_sendmsg+0x19b/0x260 [ 610.823753][ T8308] do_syscall_64+0xfa/0xfa0 [ 610.828757][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.835147][ T8308] [ 610.835147][ T8308] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 610.843734][ T8308] lock_acquire+0x120/0x360 [ 610.848737][ T8308] blk_alloc_queue+0x538/0x620 [ 610.854000][ T8308] __blk_mq_alloc_disk+0x15c/0x340 [ 610.859613][ T8308] nbd_dev_add+0x46c/0xae0 [ 610.864532][ T8308] nbd_init+0x168/0x1f0 [ 610.869199][ T8308] do_one_initcall+0x236/0x820 [ 610.874461][ T8308] do_initcall_level+0x104/0x190 [ 610.879900][ T8308] do_initcalls+0x59/0xa0 [ 610.884731][ T8308] kernel_init_freeable+0x334/0x4b0 [ 610.890433][ T8308] kernel_init+0x1d/0x1d0 [ 610.895265][ T8308] ret_from_fork+0x4bc/0x870 [ 610.900356][ T8308] ret_from_fork_asm+0x1a/0x30 [ 610.905626][ T8308] [ 610.905626][ T8308] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 610.912821][ T8308] lock_acquire+0x120/0x360 [ 610.917824][ T8308] fs_reclaim_acquire+0x72/0x100 [ 610.923261][ T8308] kmem_cache_alloc_noprof+0x45/0x6e0 [ 610.929139][ T8308] __kernfs_iattrs+0xd9/0x320 [ 610.934325][ T8308] kernfs_iop_setattr+0xea/0x3f0 [ 610.939767][ T8308] notify_change+0xc1a/0xf40 [ 610.944857][ T8308] do_truncate+0x1a4/0x220 [ 610.949774][ T8308] path_openat+0x306c/0x3830 [ 610.954873][ T8308] do_filp_open+0x1fa/0x410 [ 610.959878][ T8308] do_sys_openat2+0x121/0x1c0 [ 610.965058][ T8308] __x64_sys_openat+0x138/0x170 [ 610.970409][ T8308] do_syscall_64+0xfa/0xfa0 [ 610.975413][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.981808][ T8308] [ 610.981808][ T8308] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 610.990301][ T8308] validate_chain+0xb9b/0x2140 [ 610.995574][ T8308] __lock_acquire+0xab9/0xd20 [ 611.000751][ T8308] lock_acquire+0x120/0x360 [ 611.005757][ T8308] down_write+0x96/0x1f0 [ 611.010506][ T8308] kernfs_link_sibling+0x2fb/0x3e0 [ 611.016125][ T8308] kernfs_add_one+0x1e0/0x520 [ 611.021299][ T8308] kernfs_create_dir_ns+0xde/0x130 [ 611.026909][ T8308] sysfs_create_dir_ns+0x123/0x280 [ 611.032534][ T8308] kobject_add_internal+0x59f/0xb40 [ 611.038246][ T8308] kobject_add+0x155/0x220 [ 611.043167][ T8308] device_add+0x408/0xb50 [ 611.048006][ T8308] i2c_new_client_device+0xa11/0x1120 [ 611.053884][ T8308] dvb_module_probe+0x1c7/0x310 [ 611.059241][ T8308] em28178_dvb_init_pctv_292e+0x169/0x390 [ 611.065467][ T8308] em28xx_dvb_init+0x448/0x4b20 [ 611.070819][ T8308] em28xx_init_extension+0x120/0x1c0 [ 611.076609][ T8308] process_scheduled_works+0xae1/0x17b0 [ 611.082660][ T8308] worker_thread+0x8a0/0xda0 [ 611.087755][ T8308] kthread+0x711/0x8a0 [ 611.092335][ T8308] ret_from_fork+0x4bc/0x870 [ 611.097428][ T8308] ret_from_fork_asm+0x1a/0x30 [ 611.102696][ T8308] [ 611.102696][ T8308] other info that might help us debug this: [ 611.102696][ T8308] [ 611.112916][ T8308] Chain exists of: [ 611.112916][ T8308] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 611.112916][ T8308] [ 611.127326][ T8308] Possible unsafe locking scenario: [ 611.127326][ T8308] [ 611.134752][ T8308] CPU0 CPU1 [ 611.140097][ T8308] ---- ---- [ 611.145441][ T8308] lock(&root->kernfs_rwsem); [ 611.150190][ T8308] lock(cpuhp_state_mutex); [ 611.157284][ T8308] lock(&root->kernfs_rwsem); [ 611.164547][ T8308] lock(&root->kernfs_iattr_rwsem); [ 611.169813][ T8308] [ 611.169813][ T8308] *** DEADLOCK *** [ 611.169813][ T8308] [ 611.177932][ T8308] 5 locks held by kworker/1:7/8308: [ 611.183106][ T8308] #0: ffff88801b019948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 611.194138][ T8308] #1: ffffc9000b8bfba0 ((work_completion)(&dev->request_module_wk)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 611.206907][ T8308] #2: ffffffff8f572ba8 (em28xx_devlist_mutex){+.+.}-{4:4}, at: em28xx_init_extension+0x32/0x1c0 [ 611.217415][ T8308] #3: ffff888048515ba8 (&dev->lock#5){+.+.}-{4:4}, at: em28xx_dvb_init+0x2de/0x4b20 [ 611.226892][ T8308] #4: ffff88801bea7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 611.236718][ T8308] [ 611.236718][ T8308] stack backtrace: [ 611.242596][ T8308] CPU: 1 UID: 0 PID: 8308 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 611.242614][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.242624][ T8308] Workqueue: events request_module_async [ 611.242646][ T8308] Call Trace: [ 611.242654][ T8308] [ 611.242661][ T8308] dump_stack_lvl+0x189/0x250 [ 611.242682][ T8308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.242700][ T8308] ? __pfx__printk+0x10/0x10 [ 611.242717][ T8308] ? print_lock_name+0xde/0x100 [ 611.242734][ T8308] print_circular_bug+0x2ee/0x310 [ 611.242753][ T8308] check_noncircular+0x134/0x160 [ 611.242778][ T8308] validate_chain+0xb9b/0x2140 [ 611.242795][ T8308] ? lockdep_unlock+0x89/0x120 [ 611.242808][ T8308] ? validate_chain+0x897/0x2140 [ 611.242827][ T8308] __lock_acquire+0xab9/0xd20 [ 611.242843][ T8308] ? kernfs_link_sibling+0x2fb/0x3e0 [ 611.242855][ T8308] lock_acquire+0x120/0x360 [ 611.242868][ T8308] ? kernfs_link_sibling+0x2fb/0x3e0 [ 611.242884][ T8308] down_write+0x96/0x1f0 [ 611.242898][ T8308] ? kernfs_link_sibling+0x2fb/0x3e0 [ 611.242910][ T8308] ? __pfx_down_write+0x10/0x10 [ 611.242923][ T8308] ? kernfs_root+0x1c/0x230 [ 611.242940][ T8308] ? kernfs_root+0x1c/0x230 [ 611.242957][ T8308] ? kernfs_root+0x1c/0x230 [ 611.242973][ T8308] ? kernfs_root+0x1ea/0x230 [ 611.242990][ T8308] kernfs_link_sibling+0x2fb/0x3e0 [ 611.243004][ T8308] kernfs_add_one+0x1e0/0x520 [ 611.243017][ T8308] kernfs_create_dir_ns+0xde/0x130 [ 611.243031][ T8308] sysfs_create_dir_ns+0x123/0x280 [ 611.243049][ T8308] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 611.243066][ T8308] ? do_raw_spin_unlock+0x122/0x240 [ 611.243086][ T8308] kobject_add_internal+0x59f/0xb40 [ 611.243102][ T8308] kobject_add+0x155/0x220 [ 611.243117][ T8308] ? __pfx_kobject_add+0x10/0x10 [ 611.243130][ T8308] ? class_to_subsys+0xb6/0x120 [ 611.243145][ T8308] ? get_device_parent+0xbc/0x3a0 [ 611.243165][ T8308] device_add+0x408/0xb50 [ 611.243183][ T8308] i2c_new_client_device+0xa11/0x1120 [ 611.243197][ T8308] ? __pfx___request_module+0x10/0x10 [ 611.243215][ T8308] ? __pfx_i2c_new_client_device+0x10/0x10 [ 611.243228][ T8308] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 611.243245][ T8308] ? rcu_is_watching+0x15/0xb0 [ 611.243261][ T8308] ? dvb_module_probe+0x64/0x310 [ 611.243274][ T8308] ? trace_contention_end+0x39/0x120 [ 611.243291][ T8308] dvb_module_probe+0x1c7/0x310 [ 611.243306][ T8308] em28178_dvb_init_pctv_292e+0x169/0x390 [ 611.243322][ T8308] ? em28xx_dvb_init+0x2de/0x4b20 [ 611.243337][ T8308] ? __pfx_em28178_dvb_init_pctv_292e+0x10/0x10 [ 611.243352][ T8308] ? em28xx_gpio_set+0x122/0x480 [ 611.243366][ T8308] ? __pfx___mutex_lock+0x10/0x10 [ 611.243383][ T8308] ? em28xx_set_mode+0x9b/0x220 [ 611.243399][ T8308] em28xx_dvb_init+0x448/0x4b20 [ 611.243413][ T8308] ? em28xx_init_extension+0x32/0x1c0 [ 611.243432][ T8308] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 611.243447][ T8308] ? process_scheduled_works+0x9ef/0x17b0 [ 611.243465][ T8308] em28xx_init_extension+0x120/0x1c0 [ 611.243480][ T8308] ? process_scheduled_works+0x9ef/0x17b0 [ 611.243497][ T8308] process_scheduled_works+0xae1/0x17b0 [ 611.243522][ T8308] ? __pfx_process_scheduled_works+0x10/0x10 [ 611.243542][ T8308] worker_thread+0x8a0/0xda0 [ 611.243558][ T8308] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 611.243578][ T8308] ? __kthread_parkme+0x7b/0x200 [ 611.243597][ T8308] kthread+0x711/0x8a0 [ 611.243616][ T8308] ? __pfx_worker_thread+0x10/0x10 [ 611.243631][ T8308] ? __pfx_kthread+0x10/0x10 [ 611.243649][ T8308] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.243666][ T8308] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.243677][ T8308] ? __pfx_kthread+0x10/0x10 [ 611.243695][ T8308] ret_from_fork+0x4bc/0x870 [ 611.243710][ T8308] ? __pfx_ret_from_fork+0x10/0x10 [ 611.243726][ T8308] ? __switch_to_asm+0x39/0x70 [ 611.243739][ T8308] ? __switch_to_asm+0x33/0x70 [ 611.243751][ T8308] ? __pfx_kthread+0x10/0x10 [ 611.243773][ T8308] ret_from_fork_asm+0x1a/0x30 [ 611.243791][ T8308] [ 611.653837][ T5921] usb 4-1: USB disconnect, device number 49 [ 611.660676][ T5921] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 611.675906][ T8308] em28xx 5-1:0.0: Registering input extension [ 611.682100][ T5908] em28xx 5-1:0.0: Closing input extension [ 611.691760][ T5908] em28xx 5-1:0.0: Freeing device [ 611.703654][ T5921] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 611.712981][ T5921] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 611.722503][ T5921] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 611.923582][ T938] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 612.077547][ T938] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 612.086639][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.094658][ T938] usb 3-1: Product: syz [ 612.098810][ T938] usb 3-1: Manufacturer: syz [ 612.103378][ T938] usb 3-1: SerialNumber: syz [ 612.109072][ T938] usb 3-1: config 0 descriptor?? [ 612.317056][ T938] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 612.921301][ T938] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 613.935495][ T5950] usb 3-1: USB disconnect, device number 9