last executing test programs: 2m1.450714981s ago: executing program 1 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x4, 0x9, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xe}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x900) 2m1.339732589s ago: executing program 1 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000280)=@random="65c9", 0x2, 0x40000) 2m1.030996182s ago: executing program 1 (id=718): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x4040000, 0x0, 0x0, 0x0, 0x0, 0x429, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7, 0x2000000000000000, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x50b, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x2080000000000000, 0x0, 0x4, 0x20000, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x5, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc, 0xffffffff, 0x3, 0x6, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x200, 0x5, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0xffffffffffffff77, 0x0, 0x100000003]}) 2m0.863765365s ago: executing program 1 (id=711): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x228500, 0x152) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x1, 0x8, 0x200, 0x8001, 0x4}) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000006c0)="f081550000a000000f0000180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966baf80cb8c60ced45c194710a000000058a3b47d9f7", 0x49}], 0x1, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4010, r6, 0x85ed9000) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1000000, 0x20010, r6, 0x82000000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0xc000) 2m0.791449501s ago: executing program 1 (id=712): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100feff00000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4}, 0x0) 1m59.79111811s ago: executing program 1 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast}, 0x6000000000000000, @random=0x4, 0x9, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xe}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1m59.458487178s ago: executing program 32 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast}, 0x6000000000000000, @random=0x4, 0x9, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xe}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x0) 6.476814344s ago: executing program 0 (id=1413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0088a8aaaaaaaaaaaa00000000330086dd69"], 0x42) 6.308041042s ago: executing program 0 (id=1414): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x4, "67deed26"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.217041221s ago: executing program 3 (id=1416): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000009bbbb2200bbbbaaaaaaaaaaaa080600010800060400010900cc4e855000000001bbbbbb6deb2e2a"], 0x2e) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000b40)={{0x2, 0x100, 0x4, 0x6, 0x7}, 0xe, [0x6, 0x81, 0x6, 0x4cf, 0xf2, 0x1, 0x401, 0xffffff81, 0x10001, 0x9, 0x3, 0x8, 0x7, 0x8, 0x31, 0x5, 0x5, 0x10000, 0xdea, 0x7, 0x902d, 0x8, 0x0, 0x1, 0x9, 0x0, 0x6, 0x4, 0x6, 0x6, 0x4, 0x400, 0xffffff16, 0x3, 0x8, 0x6, 0x12b, 0x6, 0x69ad6983, 0x0, 0x9f60, 0x4, 0x6, 0x3, 0x5, 0x9, 0xb26e, 0xe, 0x1, 0x9, 0x1, 0x3, 0x81, 0xc, 0x9, 0xd25e, 0x80, 0x3, 0x2, 0x80, 0x4, 0x2, 0x9, 0xffffff81, 0x7, 0x4, 0x3a0d8914, 0x4576, 0x5, 0x10001, 0x8000, 0xf25, 0x7, 0x4, 0x17d, 0x1, 0x3, 0x9, 0x7, 0x80000000, 0x7, 0x80000000, 0x1ff, 0x2, 0x7, 0x10, 0x6, 0x1, 0x9, 0x81, 0x3, 0x743, 0x7, 0x6, 0x5, 0x4, 0x3, 0x856, 0x80000000, 0x94c, 0x9, 0x2, 0x2, 0xffff8001, 0x7, 0x1, 0x519, 0x101, 0x10000, 0x80, 0x3, 0x7, 0xb, 0x798, 0x5e38, 0x800, 0x7, 0x1b7, 0x80000001, 0x8, 0x81, 0x9, 0xfffffffb, 0xffffffc0, 0xb, 0x6, 0x7fffffff, 0x5, 0x9, 0x7fff, 0xe, 0x7ff, 0xd9, 0x2, 0x4b4, 0x2, 0x9, 0xfffffe23, 0x4, 0x5032c374, 0x9, 0x3, 0x8, 0x930, 0x8, 0x10001, 0x6, 0x6, 0x4, 0x1, 0x7, 0x6, 0x0, 0x4, 0x2, 0x4, 0x1, 0x81, 0x2, 0x5, 0xc, 0x4, 0xd, 0x1, 0xc, 0xc3ad, 0x100, 0x9, 0xd3, 0x2, 0x7ff, 0xfe, 0x2, 0xe, 0x6, 0x9, 0xe, 0x1, 0x2, 0x80000000, 0x80000, 0xfffffffa, 0x1, 0x3, 0x200, 0x36, 0x8, 0x7, 0x2, 0x9, 0x8, 0x6, 0x40, 0x7f, 0x8, 0x8, 0xffffffff, 0x3, 0x9, 0x3, 0x2, 0x0, 0x100, 0x3, 0xfffffffd, 0x100, 0xffffffff, 0x3, 0x5, 0xe701, 0xb2, 0x2, 0x8, 0x94033700, 0x2e, 0x0, 0x6, 0x8, 0x3, 0x9, 0x20, 0x80, 0xa8, 0x7, 0x7, 0x4, 0x7, 0x3, 0x3, 0x4, 0x100, 0x200, 0x1d7366fc, 0x2000000, 0x3, 0x8, 0x65, 0x10, 0xfff, 0x7fff, 0xfff, 0x8000, 0x3, 0xe7e7, 0xf4, 0x970, 0x56, 0xfffffff3, 0x97b, 0x1, 0x5f, 0xaf3e, 0xf17, 0x4, 0xe92e, 0x8, 0x4, 0x7, 0xfff, 0x7, 0x0, 0x2, 0xe, 0x80000000, 0x8001, 0x2, 0x30, 0x80000000, 0x7, 0x0, 0x81, 0x0, 0x401, 0x5, 0x2, 0x6, 0x5af, 0x9, 0x6, 0x100, 0x7db9, 0x9, 0x6, 0x8, 0x9, 0x1, 0x7, 0x0, 0x2be, 0xd, 0x1, 0x0, 0xa, 0x9, 0x1, 0x0, 0x5, 0x5, 0x3, 0x9ba, 0xd, 0xa, 0x548, 0x401, 0x1, 0x0, 0x9, 0x8, 0xb15, 0x4, 0x366eced0, 0x4, 0x0, 0xfffffd95, 0x8001, 0x3, 0x8, 0x6, 0x2, 0x7, 0x1, 0x40, 0x7, 0x5, 0xed, 0xc, 0x1, 0x2, 0x98ed, 0x3, 0x1, 0x2, 0x5c01, 0x6, 0x3, 0x1000000, 0xfffffffa, 0x7, 0x8000, 0x9ccc7f33, 0x4, 0x2, 0x7, 0x9, 0x97f4, 0x0, 0x1, 0x7, 0x4, 0x603880, 0x5, 0x8, 0xefc1, 0x2, 0x8, 0x5, 0x8050, 0x7, 0x4, 0x9, 0xffff8001, 0x4, 0xa7, 0x9, 0xfff, 0x4, 0x9, 0xe, 0x800, 0x5, 0x8, 0x0, 0x5, 0x1, 0x3, 0x2, 0x2, 0x9, 0x5, 0x4, 0x6, 0xd, 0x7, 0xffffffff, 0xce0, 0x81, 0x8001, 0x3c97, 0x7, 0x8a1, 0x1, 0x3, 0x7fff, 0x52eb, 0x101, 0xad2, 0x2, 0x2, 0xf0, 0x7, 0xfff, 0x100, 0x9, 0xcd52, 0x112, 0x7, 0x6, 0x6, 0x7, 0x1, 0x4, 0x6, 0x5, 0x6, 0x101, 0x81, 0x10, 0x69, 0xffff352e, 0x10001, 0x3, 0x6ed3, 0x0, 0x6, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x0, 0x5cefa349, 0xb33d, 0x7f, 0x2, 0xa05, 0x5ca, 0x0, 0x10001, 0x7, 0x8, 0x10000, 0xfe1, 0x3, 0x3, 0x6c, 0xd, 0x9, 0x3ff, 0xfffffff7, 0x1, 0xfff, 0x5, 0x2b, 0xfffffff9, 0xd6f, 0x0, 0x6, 0x8, 0x80000000, 0x1, 0x7fff, 0x2, 0xd, 0x4, 0x9, 0x2, 0x3, 0x8, 0x80, 0x7fffffff, 0x8, 0xffffff81, 0x8, 0x57e, 0x0, 0x5f, 0xfffffff9, 0x10000, 0x8, 0xa00, 0x5, 0x8, 0x1ff, 0xd, 0x1ff, 0x6, 0x8, 0xa, 0xc7, 0x7, 0x7, 0x7, 0x8, 0x4000000a, 0x5, 0x5, 0xffffff5c, 0x3, 0x5, 0xfffffbff, 0x9, 0x0, 0x0, 0x7, 0x8, 0x5, 0x2, 0x57f, 0x5, 0xd, 0x80000001, 0x9, 0xc4, 0x6, 0xe, 0x80000000, 0x400, 0x1, 0x2, 0x0, 0x1, 0x5, 0x5, 0x3, 0x6, 0x8, 0x141a, 0xfffffffd, 0x5, 0x80000001, 0x8, 0xfffffff8, 0x9, 0x7, 0xfffffffd, 0x4, 0x7f, 0xa, 0x8001, 0xe, 0x4, 0x10000, 0x4, 0x8, 0x3, 0x3, 0x9e6165c, 0x4, 0x4, 0x29f, 0x81, 0x100, 0x25, 0x98, 0x7, 0x8, 0x7, 0x6, 0x200, 0x1, 0x0, 0x8, 0xe, 0x9, 0x10, 0x1, 0x5, 0x4, 0x1, 0x1, 0xfffffffa, 0xffff, 0x32, 0x0, 0xbe5, 0x0, 0x7, 0x100, 0x6d, 0xffff7fff, 0x10000, 0x10, 0x2, 0x400, 0x7, 0x6, 0x6, 0x9, 0xfffffe00, 0x4, 0x0, 0xeddf, 0x4, 0x6, 0x3, 0xfffffffb, 0x1, 0x7, 0x4, 0x5, 0x401, 0x796ee162, 0x9, 0xe, 0x10000, 0xd1ee, 0x708, 0x4, 0x800, 0x0, 0x6, 0x68, 0x8, 0x6, 0xfffffff0, 0x9, 0xc2, 0x6258, 0x900, 0x8000, 0x7, 0x3, 0x9, 0x6, 0xf, 0x4, 0xffffff81, 0x6, 0x1, 0x1, 0x2, 0x3, 0x2, 0xffff26ea, 0xf, 0x8, 0x4, 0x3, 0x0, 0x8, 0xffffff81, 0x308b4bb9, 0x4, 0x7, 0x6, 0x5, 0xfffffff7, 0xfffffffe, 0x0, 0xc02, 0xfff, 0x81, 0xf, 0x2, 0x4, 0x7f, 0x4, 0x446173d9, 0x5, 0xe, 0x9, 0x3, 0x9, 0x3, 0x0, 0x2, 0x6, 0x800, 0x0, 0x200, 0x4, 0x7, 0xc7, 0x80000000, 0x800, 0x80000000, 0x3ff, 0x1, 0x8, 0x4, 0x7f, 0x1, 0x7, 0x9, 0x3, 0x8, 0x2, 0x1, 0x0, 0x8, 0xfffffff8, 0x5, 0x3, 0xe5ce, 0x7, 0xe, 0x9, 0x9, 0xcda, 0x9, 0x1, 0x5, 0xe8c, 0x3, 0xfffffc01, 0x8, 0x3, 0x6, 0xb, 0x5, 0x3, 0x6c, 0x7ff, 0xfd81, 0x10, 0x9, 0x7fffffff, 0x6, 0x80000007, 0x8, 0x5, 0x0, 0xfffff800, 0x5, 0x0, 0x4e, 0x0, 0x3, 0x9, 0x2, 0xb, 0x3, 0x10, 0x8000, 0x7f, 0xcae0, 0x100, 0x6, 0xfff, 0x3, 0x94d, 0xc, 0x81, 0x9, 0x2, 0xe1a, 0x7f, 0x1, 0x1, 0x2, 0x4, 0xe5, 0x80, 0xd11b, 0x8, 0x8, 0x2, 0x7, 0x7, 0x5, 0x8, 0x0, 0x7, 0x9, 0xff, 0x7, 0x2, 0x8, 0x3, 0x1, 0x8, 0x5d7f, 0x1ff, 0x5, 0x8, 0x8, 0x9, 0x100, 0x5, 0x3, 0x1, 0x3, 0x6, 0x4, 0x8000, 0x5, 0x0, 0x7, 0x5, 0x6e, 0x2, 0x7963ac0a, 0x3, 0x6, 0x8, 0x35b7, 0xa8, 0x3, 0x6, 0xfffffffd, 0x9, 0x7, 0x3ff, 0xfffffffb, 0x1, 0x9, 0x46fba294, 0xfffffffc, 0xe, 0x9, 0x80000001, 0x1, 0x7, 0xf, 0x0, 0x6, 0x10000, 0x6c, 0x9, 0x0, 0x3, 0x4, 0x0, 0xf7d0, 0x7, 0x7, 0x1, 0xc, 0x5, 0x2, 0x0, 0x9, 0x3, 0xb3, 0x6, 0x92, 0x8000, 0x3, 0x7, 0x7, 0x0, 0x3, 0x469a, 0x8, 0x4, 0x4, 0x1ff, 0x6, 0x2, 0x2, 0x3, 0xb101, 0x10, 0x0, 0x5, 0x50, 0x6, 0x8, 0x4, 0x4, 0xd0, 0x3ff, 0x3, 0x1, 0x8, 0x7, 0x4, 0x2, 0x1, 0x3, 0x1ff, 0x6, 0x6, 0x1, 0x2, 0x1f1, 0x8644, 0x40000000, 0x88c, 0x3, 0x7, 0x8, 0x8, 0x7f, 0x9, 0x7f, 0x5, 0x6, 0x800, 0x6, 0x7, 0x6, 0x7, 0x9, 0x6, 0x9, 0x5, 0xda90, 0x1, 0x9, 0x5, 0xe, 0x4, 0x7f, 0xb2, 0x6, 0x8e3a, 0xa, 0x80000001, 0x3, 0x3, 0x10a, 0x6, 0x6, 0xf, 0x6, 0x80, 0x8, 0x7f, 0x0, 0x0, 0x7, 0x1, 0x4, 0x8, 0x4, 0x7, 0x0, 0x8, 0x2, 0x9, 0xe16, 0x0, 0xfff, 0x0, 0x5, 0x27ce, 0x4e, 0x800, 0x4, 0x0, 0x3, 0x40, 0x5, 0x36, 0x4, 0x9, 0x9, 0x0, 0x3000000, 0x1, 0x0, 0x0, 0x1, 0xa, 0x5, 0x35143531, 0x5, 0x7, 0x280, 0x2, 0x2, 0x14de4ece, 0x6a5a, 0x1ff, 0xfffffff1, 0x2, 0x3, 0xffffffff, 0x7, 0x0, 0x0, 0xfffffff8, 0x5, 0xc, 0xfffffbff, 0x40, 0x9c, 0x7, 0xfffffffa, 0x200, 0x16, 0xfffffe16, 0xfff, 0xc, 0xb, 0xb, 0xd4, 0x7, 0x5, 0xb, 0x6, 0x3, 0xc086, 0x80000001, 0xe9, 0xf05f, 0x9, 0x2, 0x1ff, 0xb, 0x1724, 0x1, 0x3, 0x8, 0x80, 0x0, 0x28, 0x1, 0xffffffff, 0x7, 0x7, 0x4, 0x0, 0x6, 0x8, 0x3, 0x9e00, 0x25a5, 0x0, 0x8, 0xf, 0x7, 0x2]}) 4.565784896s ago: executing program 3 (id=1424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002440), 0x20600, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_AIE_OFF(r1, 0x7002) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100008ec010000000000060a00020008000000000000050000050c00044000000000000000020c00044000000000000800050c00044000000000000000031400000011000100"/84], 0x60}}, 0x20008801) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001240)=ANY=[@ANYBLOB="40100000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES64=r3], 0x1040}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000022c0)=0xffffffff, 0x4) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000002300)={'wg0\x00', &(0x7f0000002380)=@ethtool_test={0x1a, 0x9, 0xc72, 0xa, [0x3, 0x200004, 0x8, 0x1, 0x0, 0x7, 0xffffffffffff41dd, 0x9, 0x7ff, 0xfffffffffffffffe]}}) fstat(r2, &(0x7f00000011c0)) recvmmsg(r4, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000100)='gretap0\x00') syz_usb_connect(0x2, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ecef8708d8132200c81701fd030109021200010508e0220904"], 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r8, &(0x7f00000001c0)=""/4068, 0xfe4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x0) syz_usb_connect(0x0, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x2100) 3.447282702s ago: executing program 3 (id=1431): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@wr_drn={0x6e, 0x20, {0x5, 0x1}}, @in_dx={0x82, 0x20, {0x190c, 0x5}}, @rdmsr={0x32, 0x18, {0x81c}}, @in_dx={0x82, 0x20, {0x7f18, 0x5}}, @set_irq_handler={0xbe, 0x20, {0xc3, 0x1}}, @cpuid={0x14, 0x18, {0x80000000}}, @uexit={0x0, 0x18}, @set_irq_handler={0xbe, 0x20, {0x7a}}, @in_dx={0x82, 0x20, {0x5067, 0x1}}, @cpuid={0x14, 0x18, {0x1, 0x3}}, @code={0xa, 0x55, {"b9710500000f32400f32c4c1a9e587fcffffffb805000000b942c600000f01d999b9420200000f32c4417c50e9450f01c8c44201920c3507549de3660f3882b22b000000"}}, @uexit={0x0, 0x18, 0x99b}, @rdmsr={0x32, 0x18, {0x8c8}}, @in_dx={0x82, 0x20, {0x163e, 0x7}}, @rdmsr={0x32, 0x18, {0xb44}}, @wr_drn={0x6e, 0x20, {0x4, 0x8}}], 0x1fd}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0x1ff, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9ce3609d5be6614a888e59cdf99ac9162ccfadd24ab7", 0x16}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x404c8d4) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) ioctl$KVM_NMI(r0, 0xae9a) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f0000001380)=""/4070, 0xfe6) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 3.303988316s ago: executing program 2 (id=1432): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000009bbbb2200bbbbaaaaaaaaaaaa080600010800060400010900cc4e855000000001bbbbbb6deb2e2a"], 0x2e) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000b40)={{0x2, 0x100, 0x4, 0x6, 0x7}, 0xe, [0x6, 0x81, 0x6, 0x4cf, 0xf2, 0x1, 0x401, 0xffffff81, 0x10001, 0x9, 0x3, 0x8, 0x7, 0x8, 0x31, 0x5, 0x5, 0x10000, 0xdea, 0x7, 0x902d, 0x8, 0x0, 0x1, 0x9, 0x0, 0x6, 0x4, 0x6, 0x6, 0x4, 0x400, 0xffffff16, 0x3, 0x8, 0x6, 0x12b, 0x6, 0x69ad6983, 0x0, 0x9f60, 0x4, 0x6, 0x3, 0x5, 0x9, 0xb26e, 0xe, 0x1, 0x9, 0x1, 0x3, 0x81, 0xc, 0x9, 0xd25e, 0x80, 0x3, 0x2, 0x80, 0x4, 0x2, 0x9, 0xffffff81, 0x7, 0x4, 0x3a0d8914, 0x4576, 0x5, 0x10001, 0x8000, 0xf25, 0x7, 0x4, 0x17d, 0x1, 0x3, 0x9, 0x7, 0x80000000, 0x7, 0x80000000, 0x1ff, 0x2, 0x7, 0x10, 0x6, 0x1, 0x9, 0x81, 0x3, 0x743, 0x7, 0x6, 0x5, 0x4, 0x3, 0x856, 0x80000000, 0x94c, 0x9, 0x2, 0x2, 0xffff8001, 0x7, 0x1, 0x519, 0x101, 0x10000, 0x80, 0x3, 0x7, 0xb, 0x798, 0x5e38, 0x800, 0x7, 0x1b7, 0x80000001, 0x8, 0x81, 0x9, 0xfffffffb, 0xffffffc0, 0xb, 0x6, 0x7fffffff, 0x5, 0x9, 0x7fff, 0xe, 0x7ff, 0xd9, 0x2, 0x4b4, 0x2, 0x9, 0xfffffe23, 0x4, 0x5032c374, 0x9, 0x3, 0x8, 0x930, 0x8, 0x10001, 0x6, 0x6, 0x4, 0x1, 0x7, 0x6, 0x0, 0x4, 0x2, 0x4, 0x1, 0x81, 0x2, 0x5, 0xc, 0x4, 0xd, 0x1, 0xc, 0xc3ad, 0x100, 0x9, 0xd3, 0x2, 0x7ff, 0xfe, 0x2, 0xe, 0x6, 0x9, 0xe, 0x1, 0x2, 0x80000000, 0x80000, 0xfffffffa, 0x1, 0x3, 0x200, 0x36, 0x8, 0x7, 0x2, 0x9, 0x8, 0x6, 0x40, 0x7f, 0x8, 0x8, 0xffffffff, 0x3, 0x9, 0x3, 0x2, 0x0, 0x100, 0x3, 0xfffffffd, 0x100, 0xffffffff, 0x3, 0x5, 0xe701, 0xb2, 0x2, 0x8, 0x94033700, 0x2e, 0x0, 0x6, 0x8, 0x3, 0x9, 0x20, 0x80, 0xa8, 0x7, 0x7, 0x4, 0x7, 0x3, 0x3, 0x4, 0x100, 0x200, 0x1d7366fc, 0x2000000, 0x3, 0x8, 0x65, 0x10, 0xfff, 0x7fff, 0xfff, 0x8000, 0x3, 0xe7e7, 0xf4, 0x970, 0x56, 0xfffffff3, 0x97b, 0x1, 0x5f, 0xaf3e, 0xf17, 0x4, 0xe92e, 0x8, 0x4, 0x7, 0xfff, 0x7, 0x0, 0x2, 0xe, 0x80000000, 0x8001, 0x2, 0x30, 0x80000000, 0x7, 0x0, 0x81, 0x0, 0x401, 0x5, 0x2, 0x6, 0x5af, 0x9, 0x6, 0x100, 0x7db9, 0x9, 0x6, 0x8, 0x9, 0x1, 0x7, 0x0, 0x2be, 0xd, 0x1, 0x0, 0xa, 0x9, 0x1, 0x0, 0x5, 0x5, 0x3, 0x9ba, 0xd, 0xa, 0x548, 0x401, 0x1, 0x0, 0x9, 0x8, 0xb15, 0x4, 0x366eced0, 0x4, 0x0, 0xfffffd95, 0x8001, 0x3, 0x8, 0x6, 0x2, 0x7, 0x1, 0x40, 0x7, 0x5, 0xed, 0xc, 0x1, 0x2, 0x98ed, 0x3, 0x1, 0x2, 0x5c01, 0x6, 0x3, 0x1000000, 0xfffffffa, 0x7, 0x8000, 0x9ccc7f33, 0x4, 0x2, 0x7, 0x9, 0x97f4, 0x0, 0x1, 0x7, 0x4, 0x603880, 0x5, 0x8, 0xefc1, 0x2, 0x8, 0x5, 0x8050, 0x7, 0x4, 0x9, 0xffff8001, 0x4, 0xa7, 0x9, 0xfff, 0x4, 0x9, 0xe, 0x800, 0x5, 0x8, 0x0, 0x5, 0x1, 0x3, 0x2, 0x2, 0x9, 0x5, 0x4, 0x6, 0xd, 0x7, 0xffffffff, 0xce0, 0x81, 0x8001, 0x3c97, 0x7, 0x8a1, 0x1, 0x3, 0x7fff, 0x52eb, 0x101, 0xad2, 0x2, 0x2, 0xf0, 0x7, 0xfff, 0x100, 0x9, 0xcd52, 0x112, 0x7, 0x6, 0x6, 0x7, 0x1, 0x4, 0x6, 0x5, 0x6, 0x101, 0x81, 0x10, 0x69, 0xffff352e, 0x10001, 0x3, 0x6ed3, 0x0, 0x6, 0x0, 0x2, 0x4, 0xffff, 0x1, 0x0, 0x5cefa349, 0xb33d, 0x7f, 0x2, 0xa05, 0x5ca, 0x0, 0x10001, 0x7, 0x8, 0x10000, 0xfe1, 0x3, 0x3, 0x6c, 0xd, 0x9, 0x3ff, 0xfffffff7, 0x1, 0xfff, 0x5, 0x2b, 0xfffffff9, 0xd6f, 0x0, 0x6, 0x8, 0x80000000, 0x1, 0x7fff, 0x2, 0xd, 0x4, 0x9, 0x2, 0x3, 0x8, 0x80, 0x7fffffff, 0x8, 0xffffff81, 0x8, 0x57e, 0x0, 0x5f, 0xfffffff9, 0x10000, 0x8, 0xa00, 0x5, 0x8, 0x1ff, 0xd, 0x1ff, 0x6, 0x8, 0xa, 0xc7, 0x7, 0x7, 0x7, 0x8, 0x4000000a, 0x5, 0x5, 0xffffff5c, 0x3, 0x5, 0xfffffbff, 0x9, 0x0, 0x0, 0x7, 0x8, 0x5, 0x2, 0x57f, 0x5, 0xd, 0x80000001, 0x9, 0xc4, 0x6, 0xe, 0x80000000, 0x400, 0x1, 0x2, 0x0, 0x1, 0x5, 0x5, 0x3, 0x6, 0x8, 0x141a, 0xfffffffd, 0x5, 0x80000001, 0x8, 0xfffffff8, 0x9, 0x7, 0xfffffffd, 0x4, 0x7f, 0xa, 0x8001, 0xe, 0x4, 0x10000, 0x4, 0x8, 0x3, 0x3, 0x9e6165c, 0x4, 0x4, 0x29f, 0x81, 0x100, 0x25, 0x98, 0x7, 0x8, 0x7, 0x6, 0x200, 0x1, 0x0, 0x8, 0xe, 0x9, 0x10, 0x1, 0x5, 0x4, 0x1, 0x1, 0xfffffffa, 0xffff, 0x32, 0x0, 0xbe5, 0x0, 0x7, 0x100, 0x6d, 0xffff7fff, 0x10000, 0x10, 0x2, 0x400, 0x7, 0x6, 0x6, 0x9, 0xfffffe00, 0x4, 0x0, 0xeddf, 0x4, 0x6, 0x3, 0xfffffffb, 0x1, 0x7, 0x4, 0x5, 0x401, 0x796ee162, 0x9, 0xe, 0x10000, 0xd1ee, 0x708, 0x4, 0x800, 0x0, 0x6, 0x68, 0x8, 0x6, 0xfffffff0, 0x9, 0xc2, 0x6258, 0x900, 0x8000, 0x7, 0x3, 0x9, 0x6, 0xf, 0x4, 0xffffff81, 0x6, 0x1, 0x1, 0x2, 0x3, 0x2, 0xffff26ea, 0xf, 0x8, 0x4, 0x3, 0x0, 0x8, 0xffffff81, 0x308b4bb9, 0x4, 0x7, 0x6, 0x5, 0xfffffff7, 0xfffffffe, 0x0, 0xc02, 0xfff, 0x81, 0xf, 0x2, 0x4, 0x7f, 0x4, 0x446173d9, 0x5, 0xe, 0x9, 0x3, 0x9, 0x3, 0x0, 0x2, 0x6, 0x800, 0x0, 0x200, 0x4, 0x7, 0xc7, 0x80000000, 0x800, 0x80000000, 0x3ff, 0x1, 0x8, 0x4, 0x7f, 0x1, 0x7, 0x9, 0x3, 0x8, 0x2, 0x1, 0x0, 0x8, 0xfffffff8, 0x5, 0x3, 0xe5ce, 0x7, 0xe, 0x9, 0x9, 0xcda, 0x9, 0x1, 0x5, 0xe8c, 0x3, 0xfffffc01, 0x8, 0x3, 0x6, 0xb, 0x5, 0x3, 0x6c, 0x7ff, 0xfd81, 0x10, 0x9, 0x7fffffff, 0x6, 0x80000007, 0x8, 0x5, 0x0, 0xfffff800, 0x5, 0x0, 0x4e, 0x0, 0x3, 0x9, 0x2, 0xb, 0x3, 0x10, 0x8000, 0x7f, 0xcae0, 0x100, 0x6, 0xfff, 0x3, 0x94d, 0xc, 0x81, 0x9, 0x2, 0xe1a, 0x7f, 0x1, 0x1, 0x2, 0x4, 0xe5, 0x80, 0xd11b, 0x8, 0x8, 0x2, 0x7, 0x7, 0x5, 0x8, 0x0, 0x7, 0x9, 0xff, 0x7, 0x2, 0x8, 0x3, 0x1, 0x8, 0x5d7f, 0x1ff, 0x5, 0x8, 0x8, 0x9, 0x100, 0x5, 0x3, 0x1, 0x3, 0x6, 0x4, 0x8000, 0x5, 0x0, 0x7, 0x5, 0x6e, 0x2, 0x7963ac0a, 0x3, 0x6, 0x8, 0x35b7, 0xa8, 0x3, 0x6, 0xfffffffd, 0x9, 0x7, 0x3ff, 0xfffffffb, 0x1, 0x9, 0x46fba294, 0xfffffffc, 0xe, 0x9, 0x80000001, 0x1, 0x7, 0xf, 0x0, 0x6, 0x10000, 0x6c, 0x9, 0x0, 0x3, 0x4, 0x0, 0xf7d0, 0x7, 0x7, 0x1, 0xc, 0x5, 0x2, 0x0, 0x9, 0x3, 0xb3, 0x6, 0x92, 0x8000, 0x3, 0x7, 0x7, 0x0, 0x3, 0x469a, 0x8, 0x4, 0x4, 0x1ff, 0x6, 0x2, 0x2, 0x3, 0xb101, 0x10, 0x0, 0x5, 0x50, 0x6, 0x8, 0x4, 0x4, 0xd0, 0x3ff, 0x3, 0x1, 0x8, 0x7, 0x4, 0x2, 0x1, 0x3, 0x1ff, 0x6, 0x6, 0x1, 0x2, 0x1f1, 0x8644, 0x40000000, 0x88c, 0x3, 0x7, 0x8, 0x8, 0x7f, 0x9, 0x7f, 0x5, 0x6, 0x800, 0x6, 0x7, 0x6, 0x7, 0x9, 0x6, 0x9, 0x5, 0xda90, 0x1, 0x9, 0x5, 0xe, 0x4, 0x7f, 0xb2, 0x6, 0x8e3a, 0xa, 0x80000001, 0x3, 0x3, 0x10a, 0x6, 0x6, 0xf, 0x6, 0x80, 0x8, 0x7f, 0x0, 0x0, 0x7, 0x1, 0x4, 0x8, 0x4, 0x7, 0x0, 0x8, 0x2, 0x9, 0xe16, 0x0, 0xfff, 0x0, 0x5, 0x27ce, 0x4e, 0x800, 0x4, 0x0, 0x3, 0x40, 0x5, 0x36, 0x4, 0x9, 0x9, 0x0, 0x3000000, 0x1, 0x0, 0x0, 0x1, 0xa, 0x5, 0x35143531, 0x5, 0x7, 0x280, 0x2, 0x2, 0x14de4ece, 0x6a5a, 0x1ff, 0xfffffff1, 0x2, 0x3, 0xffffffff, 0x7, 0x0, 0x0, 0xfffffff8, 0x5, 0xc, 0xfffffbff, 0x40, 0x9c, 0x7, 0xfffffffa, 0x200, 0x16, 0xfffffe16, 0xfff, 0xc, 0xb, 0xb, 0xd4, 0x7, 0x5, 0xb, 0x6, 0x3, 0xc086, 0x80000001, 0xe9, 0xf05f, 0x9, 0x2, 0x1ff, 0xb, 0x1724, 0x1, 0x3, 0x8, 0x80, 0x0, 0x28, 0x1, 0xffffffff, 0x7, 0x7, 0x4, 0x0, 0x6, 0x8, 0x3, 0x9e00, 0x25a5, 0x0, 0x8, 0xf, 0x7, 0x2]}) 3.276668986s ago: executing program 0 (id=1433): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000015c0)={0x84, &(0x7f0000001180)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x40, 0x7, 0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.608159184s ago: executing program 2 (id=1434): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000500)={0x22, r2, 0xfffffffffffffffe, 0x5}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x0, 0x1}, 0x10) syz_open_dev$video4linux(&(0x7f0000000080), 0x101, 0xd2c00) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x101, 0xd2c00) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000130a05000000000000000000010000060900feff72797a300000004ee9aa0059f0edf1bd6e8cefef76311f93eeb68188845d7380bb8e39fcf4ac655c"], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x44) (async) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000130a05000000000000000000010000060900feff72797a300000004ee9aa0059f0edf1bd6e8cefef76311f93eeb68188845d7380bb8e39fcf4ac655c"], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x44) close(0x3) (async) close(0x3) 1.500264845s ago: executing program 2 (id=1435): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b4804f0945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.468067732s ago: executing program 2 (id=1436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x20, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.317921919s ago: executing program 2 (id=1438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000440)=[@iv={0x0, 0x117, 0x2, 0x0, "70778efbba7fe2e5f9a9b9e2ac501a9379ac7362b53e07d2486dbe8593df1154ffd8ae21668a0e7ce7fbf14d0c24b8570534d5176856ba545791bf5e9a84ecc9e12619197609bdf0c45d43511d835af1fcdc2e1cf9cf4599a29b35361df4028524bd3f9d25552d6d3fda76f66f70ecce6bad2f104597498d94777a9fef0bb067353b83edb01766404910c3d58fbc2b42eac6a966a2ee7b32f3eea7b7e36ef318eaf1ca2ce9862026cef8390fbf96a5295b580e9419c1cf"}], 0x3, 0x880}], 0x1, 0x80001) (async) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000440)=[@iv={0x0, 0x117, 0x2, 0x0, "70778efbba7fe2e5f9a9b9e2ac501a9379ac7362b53e07d2486dbe8593df1154ffd8ae21668a0e7ce7fbf14d0c24b8570534d5176856ba545791bf5e9a84ecc9e12619197609bdf0c45d43511d835af1fcdc2e1cf9cf4599a29b35361df4028524bd3f9d25552d6d3fda76f66f70ecce6bad2f104597498d94777a9fef0bb067353b83edb01766404910c3d58fbc2b42eac6a966a2ee7b32f3eea7b7e36ef318eaf1ca2ce9862026cef8390fbf96a5295b580e9419c1cf"}], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) (async) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000030000400000000001"]) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@in_dx={0x82, 0x20, {0x6718, 0x4}}, @uexit={0x0, 0x18, 0x8}, @in_dx={0x82, 0x20, {0x1005, 0x1}}, @set_irq_handler={0xbe, 0x20, {0xa3, 0x1}}], 0x78}) (async) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@in_dx={0x82, 0x20, {0x6718, 0x4}}, @uexit={0x0, 0x18, 0x8}, @in_dx={0x82, 0x20, {0x1005, 0x1}}, @set_irq_handler={0xbe, 0x20, {0xa3, 0x1}}], 0x78}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)=@arm64={0xff, 0x2, 0x8, '\x00', 0x9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_clone3(&(0x7f0000000640)={0x202100000, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000240), {0x1a}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000540)=""/96, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0xa}, 0x58) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r6, &(0x7f0000000400), 0x4001) 1.17601119s ago: executing program 3 (id=1439): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (fail_nth: 5) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 1.054697339s ago: executing program 2 (id=1441): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x4, "67deed26"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 712.137072ms ago: executing program 4 (id=1442): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) recvfrom(r0, &(0x7f0000000280)=""/104, 0x68, 0x100, &(0x7f0000000300)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) 690.063287ms ago: executing program 4 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0088a8aaaaaaaaaaaa000000003c0086dd69"], 0x42) 557.231003ms ago: executing program 4 (id=1444): r0 = dup(0xffffffffffffffff) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0000) close_range(r2, r3, 0x0) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000040)=@hat={'changehat ', 0x4}, 0x1d) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xd6d3}) 429.529937ms ago: executing program 0 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000280)=@random="65c9", 0x2, 0x81000000) 401.510149ms ago: executing program 0 (id=1446): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x0, 0x81, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x400, 0x3e, r3, 0x1, 0x2, 'syz1\x00', &(0x7f0000000640)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe}) r4 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x401, 0xb4e, 0xffffffff, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000002c0)={0x0, 0xa, 0x47}) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf250900000008000300", @ANYRES32=r7, @ANYBLOB="0500080007"], 0x2c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 394.343001ms ago: executing program 4 (id=1447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x24dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x200000000000000, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x34fe, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 196.016381ms ago: executing program 0 (id=1448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000001c0)=[{r4, 0x341}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xfdfdffff}, 0x0, 0x0, 0x0, 0x0, 0x0}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 195.661229ms ago: executing program 4 (id=1449): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x429, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7, 0x2000000000000000, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x50b, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x2080000000000000, 0x0, 0x4, 0x20000, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x5, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc, 0xffffffff, 0x3, 0x6, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x200, 0x5, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0xffffffffffffff77, 0x0, 0x100000003]}) 185.621008ms ago: executing program 3 (id=1450): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000054c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}, 0x40000000}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000280)="81", 0x1}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000ac0)="83", 0x1}], 0x1}}], 0x3, 0x4000001) 52.598071ms ago: executing program 4 (id=1451): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000810000c3ff000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 3 (id=1452): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, 0xffffffffffffffff, 0xebe3b000) syz_open_dev$mouse(&(0x7f00000007c0), 0x8, 0x2001) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000a, 0x4c032, 0xffffffffffffffff, 0x4000000) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x7207, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xbd, 0x10, 0xff, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x2, 0xee, 0x1, {0x22, 0xb38}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x80, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2b, 0x5, 0x86}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x51, 0x1, 0x5, 0xff, 0xf9}, 0x140, &(0x7f0000000c80)={0x5, 0xf, 0x140, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0xcb, 0x0, 0x6, 0x7, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "a29c772da352792db7e8cab4649fb97d"}, @generic={0xf9, 0x10, 0x3, "8d39bd5e42447211f276e42056468d9d5093c109a924fcc5e5038ff632ef040a55ee85a4b408e135a39f8a4975b254ca3a541e43641dc0c08ab7f2cd56119fda0375dbb53ab5b2b6c95a82573e06014cf2c42f867d3d25a693c952ccb1ade790f4a262250e7e98c759397b4c5ad1ba18f78bf5a7ab1c38b00d3b9a3a461e7c13a8abbb18eeef54143b2a7ad7f8a77a37bf0020ef8a5acb50188505e0c9d15763daa329efa3ff0985f8cb09c2817a6e3a990896742d4d7cb94967bcac6006c37546fb905fa3ff62dffd388208c956ee346259a2ec9981e7d632a9d062a6f380994c8c418a06b236398fd0858b697eaeeb454a9e87f9a3"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x9, 0x6, 0x480, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0x0, 0xf0f, 0x9, [0xff00f0, 0x0, 0x0]}]}, 0xa, [{0x7b, &(0x7f0000000600)=@string={0x7b, 0x3, "eb9aaf5c755187d2204bbc940ab35fba099fd8a78a566c0e4c1f0e907445b853ef79648a024f6ca0a0755eac3c1c01f775e92fd51f37e321264542795114e1f49b3aecc4ba512fbf30c4de882f4d15995bece68391ca138a87f3bb0610df3c66822c3757e7423fe44ca4b9f3e64870fb2f85f97859a502d7f6"}}, {0xf6, &(0x7f0000000680)=ANY=[@ANYBLOB="f60379255fdc3067c903840407804f279d37e9f7a504c16ac2d702797893ba73c2cbd1085dbb4444716f3bebeea56f176161e8a135c8657ace6e40d91cb1343b6d88699e0198fa2c39d8f791d84a22d41a297183e175d71a059e13706211415a7eabbc8937f1501d482e9051224ffb462b7b4f11ab63b5633a58741b4d67ab8f4dfa47269eb3f2e7074f3a69d92ace8de67fa0633398ec1d184be44ab87dcc502fa3669c2ec5d8795d989d614fe852fb97d36562b6910b879c29f2100ac2d66e6a9cf896438b69ff380057ad854409228d86d67e6233c3f14e95a198395b2496e0c6f9bd5302a46cec00"/246]}, {0x12, &(0x7f0000000480)=@string={0x12, 0x3, "7a0b91b1fe00a084dbead3213d03923f"}}, {0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="160351ef91c531041afa874da07a11bf9e4171a3a4b12b213f"]}, {0x15, &(0x7f0000000ac0)=@string={0x15, 0x3, "55839d8652026d0d95896228b63437bb4f1ee4"}}, {0x3d, &(0x7f0000000800)=@string={0x3d, 0x3, "2df4508c62eefa8bd2284c459e0fc288c0f0cf6e416ec43b8bca256b658454670ce2de33aeaacac10d1a3e3996f5a8093b3657ce8f2d1448938b8c"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x403}}, {0xc4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="c4037f5fb843ce79069f1ffa4695ba12bc259f3c23837e91a74ee1c78bb11f80d294f9fefcf1ad53eb34fbefabab5aa605f15e16b6f84d05c96d4bb437d7d9d294015ea14273ef0218b0dc04b62f1397053ade739874e45beb6e487e11b32c83b2da54ff66b37f6d71611607f431bf74b5258f563ce21eddb71f22e22d62170ef3a160de549ae85ccdfe0d162a6e491be031c2eecc90263d2ceea56971b5f0576e030b5693e5518a6cac6a1bac070faa8dbd85d35fbc501222c923d406c366ca40a6a626a055f34c07f1aad1ef62204f9e"]}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000040)=0x2, 0x4) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) (async) keyctl$link(0x8, r5, r5) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000b40)={0x44, {{0x2, 0x4e1e, @multicast2}}, {{0x2, 0x4e21, @broadcast}}}, 0xfffffffffffffca6) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e1d, @empty}}}, 0x108) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/sockcreate\x00') write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[], 0x15) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf251000000005000f000400000008000100", @ANYRES32=0x0, @ANYBLOB="0500100027"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) (async) write$P9_RVERSION(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1300000065ffff0300004006003950323016b2"], 0x13) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') (async) r9 = syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x202000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0xffffffffffffff33, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000140)=0x1c, 0x4) kernel console output (not intermixed with test programs): T43] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 237.427897][ T8371] netlink: 'syz.0.793': attribute type 27 has an invalid length. [ 237.446155][ T8371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.542020][ T43] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 237.551011][ T43] usb 3-1: config 0 has no interface number 0 [ 237.559374][ T43] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 237.570093][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.578275][ T43] usb 3-1: Product: syz [ 237.583088][ T43] usb 3-1: Manufacturer: syz [ 237.587996][ T43] usb 3-1: SerialNumber: syz [ 237.595453][ T43] usb 3-1: config 0 descriptor?? [ 237.769791][ T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 237.944601][ T10] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 237.954249][ T10] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 237.962517][ T10] usb 1-1: Product: syz [ 237.966780][ T10] usb 1-1: Manufacturer: syz [ 237.971485][ T10] usb 1-1: SerialNumber: syz [ 237.981756][ T10] usb 1-1: config 0 descriptor?? [ 237.991544][ T10] ch341 1-1:0.0: ch341-uart converter detected [ 238.007203][ T5835] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 238.072886][ T8376] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 238.085679][ T43] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 238.094483][ T43] usb 3-1: Firmware version (0.0) predates our first public release. [ 238.104610][ T43] usb 3-1: Please update to version 0.2 or newer [ 238.393631][ T10] usb 1-1: failed to send control message: -71 [ 238.402487][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 238.420055][ T10] usb 1-1: USB disconnect, device number 61 [ 238.427985][ T10] ch341 1-1:0.0: device disconnected [ 239.272840][ T8387] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 239.301455][ T8387] overlayfs: failed to set xattr on upper [ 239.307610][ T8387] overlayfs: ...falling back to redirect_dir=nofollow. [ 239.314868][ T8387] overlayfs: ...falling back to metacopy=off. [ 239.321565][ T8387] overlayfs: ...falling back to index=off. [ 239.327609][ T8387] overlayfs: ...falling back to uuid=null. [ 239.473239][ T8394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.800'. [ 239.665619][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.679536][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.049906][ T5864] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 240.152108][ T43] usb 3-1: USB disconnect, device number 44 [ 240.213900][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 240.245262][ T5864] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 240.339786][ T5864] usb 1-1: config 1 has no interface number 0 [ 240.360364][ T5864] usb 1-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 240.390195][ T5864] usb 1-1: config 1 interface 19 has no altsetting 0 [ 240.401780][ T5864] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 240.419913][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.479899][ T5864] usb 1-1: Product: syz [ 240.484366][ T5864] usb 1-1: Manufacturer: syz [ 240.489097][ T5864] usb 1-1: SerialNumber: syz [ 240.534718][ T8409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 240.582780][ T5864] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 240.621988][ T8424] FAULT_INJECTION: forcing a failure. [ 240.621988][ T8424] name failslab, interval 1, probability 0, space 0, times 0 [ 240.639421][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: syz.3.810 Not tainted syzkaller #0 PREEMPT(full) [ 240.639458][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.639473][ T8424] Call Trace: [ 240.639483][ T8424] [ 240.639493][ T8424] dump_stack_lvl+0x189/0x250 [ 240.639531][ T8424] ? __pfx____ratelimit+0x10/0x10 [ 240.639567][ T8424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.639597][ T8424] ? __pfx__printk+0x10/0x10 [ 240.639632][ T8424] ? __pfx___might_resched+0x10/0x10 [ 240.639656][ T8424] ? fs_reclaim_acquire+0x7d/0x100 [ 240.639694][ T8424] should_fail_ex+0x414/0x560 [ 240.639735][ T8424] should_failslab+0xa8/0x100 [ 240.639772][ T8424] __kmalloc_noprof+0xdf/0x800 [ 240.639805][ T8424] ? tomoyo_encode+0x28b/0x550 [ 240.639838][ T8424] tomoyo_encode+0x28b/0x550 [ 240.639873][ T8424] tomoyo_realpath_from_path+0x58d/0x5d0 [ 240.639907][ T8424] ? tomoyo_domain+0xd8/0x130 [ 240.639946][ T8424] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 240.639972][ T8424] tomoyo_path_number_perm+0x1e8/0x5a0 [ 240.639998][ T8424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 240.640068][ T8424] ? __fget_files+0x2a/0x420 [ 240.640103][ T8424] ? __fget_files+0x3a0/0x420 [ 240.640129][ T8424] ? __fget_files+0x2a/0x420 [ 240.640160][ T8424] security_file_ioctl+0xcb/0x2d0 [ 240.640201][ T8424] __se_sys_ioctl+0x47/0x170 [ 240.640248][ T8424] do_syscall_64+0xfa/0xfa0 [ 240.640272][ T8424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.640297][ T8424] ? clear_bhb_loop+0x60/0xb0 [ 240.640326][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.640350][ T8424] RIP: 0033:0x7f3e83f8f6c9 [ 240.640370][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.640391][ T8424] RSP: 002b:00007f3e84e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.640417][ T8424] RAX: ffffffffffffffda RBX: 00007f3e841e5fa0 RCX: 00007f3e83f8f6c9 [ 240.640435][ T8424] RDX: 0000200000000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 240.640451][ T8424] RBP: 00007f3e84e98090 R08: 0000000000000000 R09: 0000000000000000 [ 240.640467][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.640481][ T8424] R13: 00007f3e841e6038 R14: 00007f3e841e5fa0 R15: 00007ffd8be2cf58 [ 240.640520][ T8424] [ 240.882266][ T8424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.030341][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 241.054190][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.054872][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.189842][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 241.197302][ T43] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.210393][ T43] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.222232][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.229313][ T43] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 241.239999][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.259721][ T43] usb 3-1: config 0 descriptor?? [ 241.357403][ T8430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.610093][ T1163] usb 1-1: Failed to submit usb control message: -110 [ 241.617593][ T1163] usb 1-1: unable to send the bmi data to the device: -110 [ 241.625397][ T1163] usb 1-1: unable to get target info from device [ 241.632173][ T1163] usb 1-1: could not get target info (-110) [ 241.638381][ T1163] usb 1-1: could not probe fw (-110) [ 241.693694][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.703567][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.880681][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 241.892557][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 241.915782][ T8448] binder_alloc: 8447: binder_alloc_buf, no vma [ 241.923139][ T43] usb 3-1: USB disconnect, device number 45 [ 242.011951][ T5835] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 242.022049][ T5835] Bluetooth: hci2: Injecting HCI hardware error event [ 242.032255][ T5835] Bluetooth: hci2: hardware error 0x00 [ 242.513734][ T8466] netlink: 'syz.2.821': attribute type 27 has an invalid length. [ 242.537036][ T8466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.750391][ T5885] usb 1-1: USB disconnect, device number 62 [ 243.078699][ T8485] netlink: 'syz.3.827': attribute type 10 has an invalid length. [ 243.160086][ T5885] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 243.309891][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 243.327686][ T5885] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 243.337644][ T5885] usb 1-1: config 0 has no interface number 0 [ 243.344394][ T5885] usb 1-1: config 0 interface 184 has no altsetting 0 [ 243.355557][ T5885] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 243.365349][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.373613][ T5885] usb 1-1: Product: syz [ 243.378159][ T5885] usb 1-1: Manufacturer: syz [ 243.383024][ T5885] usb 1-1: SerialNumber: syz [ 243.393555][ T5885] usb 1-1: config 0 descriptor?? [ 243.403093][ T5885] smsc75xx v1.0.0 [ 244.017967][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 244.060001][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 244.089827][ T5835] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 244.276645][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 244.299071][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 244.325708][ T5885] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 244.351643][ T5885] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 244.619842][ T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 244.785736][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 244.813657][ T43] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 244.847754][ T43] usb 3-1: config 1 has no interface number 0 [ 244.860994][ T43] usb 3-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 244.882952][ T43] usb 3-1: config 1 interface 19 has no altsetting 0 [ 244.915261][ T43] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 244.939901][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.968659][ T43] usb 3-1: Product: syz [ 244.973214][ T43] usb 3-1: Manufacturer: syz [ 244.977900][ T43] usb 3-1: SerialNumber: syz [ 245.001658][ T8525] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 245.046319][ T43] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 245.269901][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.282128][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.803708][ T12] usb 3-1: Failed to submit usb control message: -71 [ 245.811869][ T5864] usb 3-1: USB disconnect, device number 46 [ 245.815681][ T43] usb 1-1: USB disconnect, device number 63 [ 245.822549][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 245.837174][ T12] usb 3-1: unable to get target info from device [ 245.843859][ T12] usb 3-1: could not get target info (-71) [ 245.854612][ T12] usb 3-1: could not probe fw (-71) [ 245.896635][ T8560] FAULT_INJECTION: forcing a failure. [ 245.896635][ T8560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.934348][ T8560] CPU: 0 UID: 0 PID: 8560 Comm: syz.0.841 Not tainted syzkaller #0 PREEMPT(full) [ 245.934382][ T8560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.934409][ T8560] Call Trace: [ 245.934418][ T8560] [ 245.934427][ T8560] dump_stack_lvl+0x189/0x250 [ 245.934461][ T8560] ? __pfx____ratelimit+0x10/0x10 [ 245.934492][ T8560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.934520][ T8560] ? __pfx__printk+0x10/0x10 [ 245.934547][ T8560] ? __might_fault+0xb0/0x130 [ 245.934587][ T8560] should_fail_ex+0x414/0x560 [ 245.934626][ T8560] _copy_from_user+0x2d/0xb0 [ 245.934655][ T8560] vlan_ioctl_handler+0x9d/0x650 [ 245.934697][ T8560] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 245.934748][ T8560] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 245.934788][ T8560] sock_ioctl+0x610/0x790 [ 245.934816][ T8560] ? __pfx_sock_ioctl+0x10/0x10 [ 245.934843][ T8560] ? __fget_files+0x3a0/0x420 [ 245.934867][ T8560] ? __fget_files+0x2a/0x420 [ 245.934897][ T8560] ? bpf_lsm_file_ioctl+0x9/0x20 [ 245.934930][ T8560] ? __pfx_sock_ioctl+0x10/0x10 [ 245.934953][ T8560] __se_sys_ioctl+0xfc/0x170 [ 245.934994][ T8560] do_syscall_64+0xfa/0xfa0 [ 245.935016][ T8560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.935038][ T8560] ? clear_bhb_loop+0x60/0xb0 [ 245.935066][ T8560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.935087][ T8560] RIP: 0033:0x7f0c64b8f6c9 [ 245.935108][ T8560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.935127][ T8560] RSP: 002b:00007f0c65acf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.935150][ T8560] RAX: ffffffffffffffda RBX: 00007f0c64de5fa0 RCX: 00007f0c64b8f6c9 [ 245.935167][ T8560] RDX: 0000200000000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 245.935182][ T8560] RBP: 00007f0c65acf090 R08: 0000000000000000 R09: 0000000000000000 [ 245.935196][ T8560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.935209][ T8560] R13: 00007f0c64de6038 R14: 00007f0c64de5fa0 R15: 00007ffd9a2ae2f8 [ 245.935246][ T8560] [ 246.237999][ T8564] netlink: 152 bytes leftover after parsing attributes in process `syz.0.843'. [ 246.255515][ T8564] netlink: 5 bytes leftover after parsing attributes in process `syz.0.843'. [ 246.268094][ T8564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 246.529896][ T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 246.702308][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.720503][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 246.741801][ T24] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 246.769774][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.799789][ T24] usb 1-1: Product: syz [ 246.804132][ T24] usb 1-1: Manufacturer: syz [ 246.808765][ T24] usb 1-1: SerialNumber: syz [ 246.841494][ T24] usb 1-1: config 0 descriptor?? [ 246.873158][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 246.899753][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.929111][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 246.938854][ T24] usb 1-1: media controller created [ 246.984727][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.064054][ T24] DVB: Unable to find symbol tda10046_attach() [ 247.072376][ T8584] netlink: 152 bytes leftover after parsing attributes in process `syz.0.843'. [ 247.092891][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 247.105352][ T8584] netlink: 5 bytes leftover after parsing attributes in process `syz.0.843'. [ 247.114281][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 247.117086][ T8584] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.149837][ T5885] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 247.171845][ T24] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 247.200158][ T24] usb 1-1: USB disconnect, device number 64 [ 247.320330][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 247.331855][ T5885] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 247.349798][ T5885] usb 3-1: config 0 has no interface number 0 [ 247.390039][ T5885] usb 3-1: config 0 interface 184 has no altsetting 0 [ 247.407735][ T5885] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 247.417284][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.427939][ T5885] usb 3-1: Product: syz [ 247.432849][ T5885] usb 3-1: Manufacturer: syz [ 247.437572][ T5885] usb 3-1: SerialNumber: syz [ 247.451089][ T5885] usb 3-1: config 0 descriptor?? [ 247.461500][ T5885] smsc75xx v1.0.0 [ 247.799813][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 247.949745][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 247.956892][ T24] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.968155][ T24] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.978300][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.985267][ T24] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 247.994441][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.005429][ T24] usb 1-1: config 0 descriptor?? [ 248.066005][ T5885] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 248.077596][ T5885] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 248.235962][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.245451][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.289999][ T5885] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 248.301388][ T5885] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 248.311947][ T5885] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 248.322399][ T5885] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 248.587109][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.598691][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.616215][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.628554][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.773181][ T8613] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 249.794943][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.806825][ T8613] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 249.951151][ T5885] usb 3-1: USB disconnect, device number 47 [ 250.689877][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 250.734465][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 250.758068][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 250.786897][ T24] usb 1-1: USB disconnect, device number 65 [ 250.850333][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 250.858868][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.870498][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.883769][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.900396][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.909952][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.918509][ T10] usb 3-1: Manufacturer: syz [ 250.927706][ T10] usb 3-1: config 0 descriptor?? [ 251.145988][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.155069][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.165053][ T24] usb 3-1: USB disconnect, device number 48 [ 251.220340][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 251.389914][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 251.398417][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 251.407647][ T10] usb 1-1: config 0 has no interface number 0 [ 251.414155][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 251.431934][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 251.441522][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.460008][ T10] usb 1-1: Product: syz [ 251.464357][ T10] usb 1-1: Manufacturer: syz [ 251.469044][ T10] usb 1-1: SerialNumber: syz [ 251.490971][ T10] usb 1-1: config 0 descriptor?? [ 251.502098][ T10] smsc75xx v1.0.0 [ 251.557915][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.566899][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.989818][ T5872] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 252.110047][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 252.119829][ T5872] usb 3-1: device descriptor read/64, error -71 [ 252.121287][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 252.338321][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 252.349400][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 252.359269][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 252.369133][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 252.369884][ T5872] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 252.509832][ T5872] usb 3-1: device descriptor read/64, error -71 [ 252.621295][ T5872] usb usb3-port1: attempt power cycle [ 252.959833][ T5872] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 252.980483][ T5872] usb 3-1: device descriptor read/8, error -71 [ 253.220932][ T5872] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 253.250394][ T5872] usb 3-1: device descriptor read/8, error -71 [ 253.361416][ T5872] usb usb3-port1: unable to enumerate USB device [ 253.636346][ T8652] FAULT_INJECTION: forcing a failure. [ 253.636346][ T8652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.650619][ T8652] CPU: 1 UID: 0 PID: 8652 Comm: syz.3.872 Not tainted syzkaller #0 PREEMPT(full) [ 253.650649][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.650663][ T8652] Call Trace: [ 253.650672][ T8652] [ 253.650681][ T8652] dump_stack_lvl+0x189/0x250 [ 253.650716][ T8652] ? __pfx____ratelimit+0x10/0x10 [ 253.650750][ T8652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.650778][ T8652] ? __pfx__printk+0x10/0x10 [ 253.650805][ T8652] ? __might_fault+0xb0/0x130 [ 253.650844][ T8652] should_fail_ex+0x414/0x560 [ 253.650882][ T8652] _copy_from_user+0x2d/0xb0 [ 253.650911][ T8652] ctrl_cdev_ioctl+0xe1/0x450 [ 253.650933][ T8652] ? __fget_files+0x2a/0x420 [ 253.650968][ T8652] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 253.650990][ T8652] ? __fget_files+0x3a0/0x420 [ 253.651013][ T8652] ? __fget_files+0x2a/0x420 [ 253.651042][ T8652] ? bpf_lsm_file_ioctl+0x9/0x20 [ 253.651073][ T8652] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 253.651091][ T8652] __se_sys_ioctl+0xfc/0x170 [ 253.651118][ T8652] do_syscall_64+0xfa/0xfa0 [ 253.651139][ T8652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.651159][ T8652] ? clear_bhb_loop+0x60/0xb0 [ 253.651180][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.651201][ T8652] RIP: 0033:0x7f3e83f8f6c9 [ 253.651218][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.651233][ T8652] RSP: 002b:00007f3e84e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.651253][ T8652] RAX: ffffffffffffffda RBX: 00007f3e841e5fa0 RCX: 00007f3e83f8f6c9 [ 253.651266][ T8652] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000003 [ 253.651277][ T8652] RBP: 00007f3e84e98090 R08: 0000000000000000 R09: 0000000000000000 [ 253.651287][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.651297][ T8652] R13: 00007f3e841e6038 R14: 00007f3e841e5fa0 R15: 00007ffd8be2cf58 [ 253.651326][ T8652] [ 253.917812][ T8654] FAULT_INJECTION: forcing a failure. [ 253.917812][ T8654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.950887][ T8654] CPU: 1 UID: 0 PID: 8654 Comm: syz.4.873 Not tainted syzkaller #0 PREEMPT(full) [ 253.950925][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.950940][ T8654] Call Trace: [ 253.950947][ T8654] [ 253.950971][ T8654] dump_stack_lvl+0x189/0x250 [ 253.951005][ T8654] ? __pfx____ratelimit+0x10/0x10 [ 253.951038][ T8654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.951066][ T8654] ? __pfx__printk+0x10/0x10 [ 253.951104][ T8654] should_fail_ex+0x414/0x560 [ 253.951142][ T8654] _copy_to_user+0x31/0xb0 [ 253.951172][ T8654] simple_read_from_buffer+0xe1/0x170 [ 253.951202][ T8654] proc_fail_nth_read+0x1b3/0x220 [ 253.951238][ T8654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.951274][ T8654] ? rw_verify_area+0x2a6/0x4d0 [ 253.951305][ T8654] ? __lock_acquire+0xab9/0xd20 [ 253.951324][ T8654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.951360][ T8654] vfs_read+0x200/0xa30 [ 253.951377][ T8654] ? fdget_pos+0x247/0x320 [ 253.951406][ T8654] ? __pfx___mutex_lock+0x10/0x10 [ 253.951429][ T8654] ? __pfx_vfs_read+0x10/0x10 [ 253.951453][ T8654] ? __fget_files+0x2a/0x420 [ 253.951483][ T8654] ? __fget_files+0x3a0/0x420 [ 253.951507][ T8654] ? __fget_files+0x2a/0x420 [ 253.951541][ T8654] ksys_read+0x145/0x250 [ 253.951563][ T8654] ? __pfx_ksys_read+0x10/0x10 [ 253.951586][ T8654] ? do_syscall_64+0xbe/0xfa0 [ 253.951611][ T8654] do_syscall_64+0xfa/0xfa0 [ 253.951633][ T8654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.951655][ T8654] ? clear_bhb_loop+0x60/0xb0 [ 253.951680][ T8654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.951701][ T8654] RIP: 0033:0x7f82bd98e0dc [ 253.951721][ T8654] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.951739][ T8654] RSP: 002b:00007f82be7e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.951761][ T8654] RAX: ffffffffffffffda RBX: 00007f82bdbe5fa0 RCX: 00007f82bd98e0dc [ 253.951777][ T8654] RDX: 000000000000000f RSI: 00007f82be7e70a0 RDI: 0000000000000005 [ 253.951791][ T8654] RBP: 00007f82be7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.951805][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.951817][ T8654] R13: 00007f82bdbe6038 R14: 00007f82bdbe5fa0 R15: 00007ffc237d9c78 [ 253.951850][ T8654] [ 254.258832][ T10] usb 1-1: USB disconnect, device number 66 [ 254.659911][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 254.815060][ T10] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 254.824150][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.836523][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.848025][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.868314][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.882987][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.895773][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.911815][ T10] usb 1-1: config 0 descriptor?? [ 254.928051][ T8662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.193498][ T8681] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 255.355528][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 255.373041][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 255.389806][ T5864] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 255.389994][ T8687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.427304][ T8687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.434146][ T10] usb 1-1: USB disconnect, device number 67 [ 255.569784][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 255.579365][ T5864] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 255.588722][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.597375][ T5864] usb 3-1: Product: syz [ 255.601892][ T5864] usb 3-1: Manufacturer: syz [ 255.606659][ T5864] usb 3-1: SerialNumber: syz [ 255.614401][ T5864] usb 3-1: config 0 descriptor?? [ 255.825485][ T5864] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 256.281384][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.292012][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.304726][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.314549][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.439818][ T5872] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 256.592036][ T5872] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 256.600482][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.613191][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.625168][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 256.636685][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.654180][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.663424][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.674790][ T5872] usb 1-1: config 0 descriptor?? [ 256.680946][ T8697] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 256.857729][ T5864] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 257.075979][ T24] usb 3-1: USB disconnect, device number 53 [ 257.105237][ T5872] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 257.128962][ T5872] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 257.376100][ T10] usb 1-1: USB disconnect, device number 68 [ 257.466746][ T8708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.554629][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.565811][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.241928][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.256197][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.499928][ T5872] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 258.649825][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 258.661781][ T5872] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 258.671547][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.680032][ T5872] usb 1-1: Product: syz [ 258.684363][ T5872] usb 1-1: Manufacturer: syz [ 258.689117][ T5872] usb 1-1: SerialNumber: syz [ 258.697608][ T5872] usb 1-1: config 0 descriptor?? [ 258.883014][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.893387][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.920827][ T5872] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 259.000523][ T8736] nbd3: detected capacity change from 0 to 63 [ 259.033182][ T8741] block nbd3: NBD_DISCONNECT [ 259.040786][ T8741] block nbd3: Disconnected due to user request. [ 259.052226][ T8741] block nbd3: shutting down sockets [ 259.083961][ T8736] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 259.105173][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.111351][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.114344][ C1] buffer_io_error: 72 callbacks suppressed [ 259.114364][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.123621][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.175351][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.184648][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 259.193468][ T8736] random: crng reseeded on system resumption [ 259.201081][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.210277][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 259.218138][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.227357][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 259.238482][ T5839] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.256189][ T5839] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.267906][ T5839] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.277812][ T5839] Buffer I/O error on dev nbd3, logical block 1, async page read [ 259.305853][ T5839] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.315642][ T5839] Buffer I/O error on dev nbd3, logical block 2, async page read [ 259.337183][ T5839] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.348153][ T5839] Buffer I/O error on dev nbd3, logical block 3, async page read [ 259.357529][ T5839] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.375247][ T5839] Buffer I/O error on dev nbd3, logical block 0, async page read [ 259.384346][ T5839] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.394396][ T5839] Buffer I/O error on dev nbd3, logical block 1, async page read [ 259.407950][ T5839] ldm_validate_partition_table(): Disk read failed. [ 259.421796][ T5839] Dev nbd3: unable to read RDB block 0 [ 259.435171][ T5839] nbd3: unable to read partition table [ 259.468555][ T5839] ldm_validate_partition_table(): Disk read failed. [ 259.479061][ T5839] Dev nbd3: unable to read RDB block 0 [ 259.489008][ T5839] nbd3: unable to read partition table [ 259.678891][ T8754] [U]  [ 259.682010][ T8754] [U] K{‘ [ 259.686611][ T8754] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 259.694127][ T8754] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 259.711557][ T8754] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 259.722609][ T8754] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 259.760409][ T8754] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 259.784851][ T8754] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 259.796697][ T8754] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 259.808583][ T8754] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 259.902766][ T8754] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 259.912689][ T8754] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 259.927335][ T8754] [U] 22½“Æ©Ðû©x?0;3u± [ 259.932623][ T8754] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 259.970130][ T5872] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 260.000023][ T8754] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 260.009604][ T8754] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 260.021993][ T8754] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 260.028350][ T8754] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 260.041309][ T8754] [U] ¹ ec [ 260.044496][ T8754] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 260.060771][ T8753] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 260.061208][ T8758] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 260.173525][ T24] usb 1-1: USB disconnect, device number 69 [ 260.609781][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 260.763046][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 260.771750][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.783917][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 260.796231][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.807819][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.821509][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.842385][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.864584][ T10] usb 3-1: config 0 descriptor?? [ 260.878964][ T8766] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 261.134844][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.142241][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.313994][ T8766] vlan0: entered promiscuous mode [ 261.319480][ T8766] vlan0: entered allmulticast mode [ 261.325210][ T8766] veth0_vlan: entered allmulticast mode [ 261.336857][ T10] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 261.359427][ T10] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 262.533374][ T8793] netlink: 328 bytes leftover after parsing attributes in process `syz.0.927'. [ 262.817410][ T8799] dlm: non-version read from control device 2 [ 262.856643][ T8799] program syz.4.930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.916540][ T8799] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 263.001132][ T8789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.039745][ T5872] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 263.218698][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 263.231477][ T5872] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 263.240758][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.248797][ T5872] usb 1-1: Product: syz [ 263.253217][ T5872] usb 1-1: Manufacturer: syz [ 263.257854][ T5872] usb 1-1: SerialNumber: syz [ 263.265823][ T5872] usb 1-1: config 0 descriptor?? [ 263.446599][ T5921] usb 3-1: USB disconnect, device number 54 [ 263.485893][ T5872] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 264.492259][ T5872] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 264.705155][ T24] usb 1-1: USB disconnect, device number 70 [ 266.418087][ T8911] loop5: detected capacity change from 0 to 2447 [ 266.444619][ T8911] loop5: detected capacity change from 2447 to 3319 [ 266.481896][ T5824] buffer_io_error: 138 callbacks suppressed [ 266.481918][ T5824] Buffer I/O error on dev loop5, logical block 414, async page read [ 266.569764][ T5921] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 266.580178][ T5824] Buffer I/O error on dev loop5, logical block 414, async page read [ 266.750876][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 266.761133][ T5921] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 266.780063][ T5921] usb 1-1: config 0 has no interface number 0 [ 266.786342][ T5921] usb 1-1: config 0 interface 184 has no altsetting 0 [ 266.804362][ T5921] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 266.818490][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.838814][ T5921] usb 1-1: Product: syz [ 266.846680][ T5921] usb 1-1: Manufacturer: syz [ 266.856866][ T5921] usb 1-1: SerialNumber: syz [ 266.873224][ T5921] usb 1-1: config 0 descriptor?? [ 266.889997][ T5921] smsc75xx v1.0.0 [ 266.981438][ T8919] netlink: 'syz.3.984': attribute type 27 has an invalid length. [ 267.017904][ T8919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.497973][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 267.522000][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 267.932497][ T8945] netlink: 'syz.2.991': attribute type 10 has an invalid length. [ 267.957294][ T8945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.966876][ T8945] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 268.142108][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 268.161254][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 268.187178][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 268.201212][ T5921] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 268.229455][ T8951] ======================================================= [ 268.229455][ T8951] WARNING: The mand mount option has been deprecated and [ 268.229455][ T8951] and is ignored by this kernel. Remove the mand [ 268.229455][ T8951] option from the mount to silence this warning. [ 268.229455][ T8951] ======================================================= [ 268.268303][ T8951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.994'. [ 269.357153][ T5921] usb 1-1: USB disconnect, device number 71 [ 269.725399][ T8991] netlink: 'syz.4.1008': attribute type 21 has an invalid length. [ 269.734008][ T8991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1008'. [ 269.789758][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 269.829884][ T5921] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 269.951902][ T24] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 269.970031][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.999882][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 270.010341][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.033372][ T5921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 270.046649][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.058016][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.079800][ T5921] usb 1-1: Product: syz [ 270.084057][ T5921] usb 1-1: Manufacturer: syz [ 270.088779][ T5921] usb 1-1: SerialNumber: syz [ 270.094335][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.130118][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.139609][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.150812][ T5921] usb 1-1: config 0 descriptor?? [ 270.205518][ T24] usb 3-1: config 0 descriptor?? [ 270.230762][ T8988] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 270.364974][ T5921] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 270.578624][ T9003] loop5: detected capacity change from 0 to 3543 [ 270.617594][ T9003] loop5: detected capacity change from 3543 to 4999 [ 270.679323][ T24] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 270.720491][ T24] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 270.799809][ T6050] Buffer I/O error on dev loop5, logical block 624, async page read [ 270.926527][ T10] usb 3-1: USB disconnect, device number 55 [ 271.194531][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.204095][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.390581][ T5921] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 271.604513][ T5872] usb 1-1: USB disconnect, device number 72 [ 271.829861][ T9014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1016'. [ 271.985113][ T9014] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.402484][ T9023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 272.444732][ T9023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 272.982871][ T9032] netlink: 'syz.3.1023': attribute type 29 has an invalid length. [ 272.991938][ T9032] netlink: 'syz.3.1023': attribute type 29 has an invalid length. [ 273.003599][ T9032] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1023'. [ 273.128962][ T9035] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1024'. [ 273.265739][ T9037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.300414][ T9037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.069595][ T9056] dlm: non-version read from control device 2 [ 274.089827][ T9056] program syz.3.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.125080][ T9056] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 274.147298][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.156574][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.706649][ T9059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.875137][ T9071] tmpfs: Bad value for 'mpol' [ 274.919860][ T5921] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 275.084200][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 275.096913][ T5921] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 275.098094][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.105588][ T5921] usb 3-1: config 1 has no interface number 0 [ 275.123469][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.137497][ T5921] usb 3-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 275.149488][ T5921] usb 3-1: config 1 interface 19 has no altsetting 0 [ 275.159033][ T5921] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 275.169221][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.177822][ T5921] usb 3-1: Product: syz [ 275.182560][ T5921] usb 3-1: Manufacturer: syz [ 275.187461][ T5921] usb 3-1: SerialNumber: syz [ 275.198473][ T9064] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 275.217078][ T5921] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 275.413874][ T62] usb 3-1: Failed to submit usb control message: -71 [ 275.414183][ T5921] usb 3-1: USB disconnect, device number 56 [ 275.421428][ T62] usb 3-1: unable to send the bmi data to the device: -71 [ 275.435164][ T62] usb 3-1: unable to get target info from device [ 275.444204][ T62] usb 3-1: could not get target info (-71) [ 275.455069][ T62] usb 3-1: could not probe fw (-71) [ 275.723306][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.734888][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.009016][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 276.018881][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 276.029767][ T9089] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1043'. [ 276.039409][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 276.048682][ T9089] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1043'. [ 276.049854][ T5872] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 276.222531][ T5872] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 276.232698][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.245083][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 276.256400][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 276.267718][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.281558][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.290916][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.300088][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 276.302968][ T5872] usb 1-1: config 0 descriptor?? [ 276.314800][ T9087] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 276.463521][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 276.473786][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 276.485682][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 276.502562][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 276.513817][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.522055][ T10] usb 3-1: Product: syz [ 276.526520][ T10] usb 3-1: Manufacturer: syz [ 276.531282][ T10] usb 3-1: SerialNumber: syz [ 276.539417][ T10] usb 3-1: config 0 descriptor?? [ 276.545730][ T9089] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 276.553682][ T9089] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 276.563365][ T10] usb 3-1: ucan: probing device on interface #0 [ 276.739932][ T9087] loop2: detected capacity change from 0 to 7 [ 276.749435][ T9087] Dev loop2: unable to read RDB block 7 [ 276.755347][ T9087] loop2: AHDI p1 p2 p3 [ 276.759995][ T9087] loop2: partition table partially beyond EOD, truncated [ 276.768676][ T9087] loop2: p1 start 1601398130 is beyond EOD, truncated [ 276.776007][ T9087] loop2: p2 start 1702059890 is beyond EOD, truncated [ 276.788343][ T5872] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 276.822506][ T5872] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 276.963187][ T9092] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1044'. [ 276.970353][ T10] usb 3-1: ucan: device reported invalid device info [ 276.981515][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 277.003150][ T9087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.020437][ T9087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.128573][ T5872] usb 1-1: USB disconnect, device number 73 [ 277.174947][ T9096] dlm: non-version read from control device 2 [ 277.184580][ T10] usb 3-1: USB disconnect, device number 57 [ 277.214964][ T9096] program syz.4.1046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.237603][ T9096] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.794303][ T9109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.808252][ T9109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.030049][ T5864] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 278.089873][ T5872] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 278.189719][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 278.198848][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 278.210865][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 278.222236][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.232246][ T5864] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 278.242275][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 278.249848][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 278.252230][ T5864] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166 [ 278.271058][ T5864] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 278.272062][ T5872] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 278.280511][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.289026][ T5872] usb 3-1: config 1 has no interface number 0 [ 278.297101][ T5864] usb 1-1: Product: syz [ 278.304334][ T5872] usb 3-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 278.307866][ T5864] usb 1-1: Manufacturer: syz [ 278.318367][ T5872] usb 3-1: config 1 interface 19 has no altsetting 0 [ 278.322853][ T5864] usb 1-1: SerialNumber: syz [ 278.334456][ T5872] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 278.334490][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.334515][ T5872] usb 3-1: Product: syz [ 278.357052][ T5872] usb 3-1: Manufacturer: syz [ 278.361531][ T5864] usb 1-1: config 0 descriptor?? [ 278.368142][ T9107] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 278.368954][ T5872] usb 3-1: SerialNumber: syz [ 278.382191][ T9107] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 278.390272][ T9112] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 278.402490][ T5864] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.412084][ T5872] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 278.608582][ T12] usb 3-1: Failed to submit usb control message: -71 [ 278.608903][ T5872] usb 3-1: USB disconnect, device number 58 [ 278.616041][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 278.633620][ T12] usb 3-1: unable to get target info from device [ 278.640947][ T12] usb 3-1: could not get target info (-71) [ 278.647067][ T12] usb 3-1: could not probe fw (-71) [ 279.096045][ T9] usb 1-1: USB disconnect, device number 74 [ 279.316986][ T9122] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.373738][ T9125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.383887][ T9125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.506404][ T9132] binder_alloc: 9130: binder_alloc_buf, no vma [ 279.599794][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 279.684606][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.694292][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.759823][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 279.766936][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.778203][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.791312][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 279.800512][ T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 279.808923][ T9] usb 1-1: Product: syz [ 279.813169][ T9] usb 1-1: Manufacturer: syz [ 279.827085][ T9] hub 1-1:4.0: USB hub found [ 280.024149][ T9] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 280.340869][ T5913] usb 1-1: USB disconnect, device number 75 [ 280.688729][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 281.017621][ T9163] netlink: 'syz.2.1070': attribute type 10 has an invalid length. [ 281.087149][ T9165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.499927][ T5913] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 281.649882][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 281.657986][ T5913] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 281.666850][ T5913] usb 1-1: config 0 has no interface number 0 [ 281.673217][ T5913] usb 1-1: config 0 interface 184 has no altsetting 0 [ 281.683814][ T5913] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 281.693476][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.702398][ T5913] usb 1-1: Product: syz [ 281.706627][ T5913] usb 1-1: Manufacturer: syz [ 281.712509][ T5913] usb 1-1: SerialNumber: syz [ 281.720545][ T5913] usb 1-1: config 0 descriptor?? [ 281.728943][ T5913] smsc75xx v1.0.0 [ 282.348082][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 282.369839][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 282.942909][ T9188] netlink: 'syz.3.1080': attribute type 27 has an invalid length. [ 282.963614][ T9188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.988334][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 283.001205][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 283.011422][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 283.021515][ T5913] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 283.814078][ T9205] input: syz1 as /devices/virtual/input/input35 [ 283.830894][ T9205] MTD: Attempt to mount non-MTD device "./file0" [ 283.838581][ T9205] ./file0: Can't open blockdev [ 284.049166][ T9209] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.234053][ T9214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.314314][ T5864] usb 1-1: USB disconnect, device number 76 [ 284.810015][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 284.848144][ T9232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.862491][ T9232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.014850][ T9] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 285.024521][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.032679][ T9] usb 1-1: Product: syz [ 285.036904][ T9] usb 1-1: Manufacturer: syz [ 285.041613][ T9] usb 1-1: SerialNumber: syz [ 285.049423][ T9] usb 1-1: config 0 descriptor?? [ 285.063729][ T9] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 285.072673][ T9] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 285.085893][ T9] usb-storage 1-1:0.0: USB Mass Storage device detected [ 285.101182][ T9] usb-storage 1-1:0.0: device ignored [ 285.494329][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.505722][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.183831][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.193602][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.301437][ T9252] binder_alloc: 9251: binder_alloc_buf, no vma [ 286.429561][ T9256] fuse: Bad value for 'user_id' [ 286.437822][ T9256] fuse: Bad value for 'user_id' [ 286.869932][ T5921] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 287.019819][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 287.029259][ T5921] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 287.038752][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.047416][ T5921] usb 3-1: Product: syz [ 287.052390][ T5921] usb 3-1: Manufacturer: syz [ 287.057031][ T5921] usb 3-1: SerialNumber: syz [ 287.067858][ T5921] usb 3-1: config 0 descriptor?? [ 287.212175][ T9267] netlink: 'syz.4.1110': attribute type 10 has an invalid length. [ 287.287087][ T5921] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 287.583730][ T5913] usb 1-1: USB disconnect, device number 77 [ 287.703928][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.713239][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.969855][ T5913] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 288.129987][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 288.137112][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 288.151259][ T5913] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 288.161250][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 288.169597][ T5913] usb 1-1: Product: syz [ 288.175927][ T5913] usb 1-1: Manufacturer: syz [ 288.180977][ T5913] usb 1-1: SerialNumber: syz [ 288.188960][ T5913] usb 1-1: config 0 descriptor?? [ 288.195471][ T9269] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.296346][ T5921] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 288.367701][ T9279] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1116'. [ 288.408719][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.419745][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.487060][ T9282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.500044][ T5921] usb 3-1: USB disconnect, device number 59 [ 288.509594][ T9282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.358887][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.396918][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.437212][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.448915][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.383884][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 290.448155][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.461198][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.611833][ T9301] netlink: 'syz.2.1122': attribute type 10 has an invalid length. [ 290.674872][ T5913] usb 1-1: USB disconnect, device number 78 [ 291.381089][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.401078][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.730012][ T5864] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 291.900415][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 291.911518][ T5864] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 291.924260][ T5864] usb 3-1: config 0 has no interface number 0 [ 291.936438][ T5864] usb 3-1: config 0 interface 184 has no altsetting 0 [ 291.955949][ T5864] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 291.977628][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.986925][ T5864] usb 3-1: Product: syz [ 291.993125][ T5864] usb 3-1: Manufacturer: syz [ 292.010235][ T5864] usb 3-1: SerialNumber: syz [ 292.021216][ T5864] usb 3-1: config 0 descriptor?? [ 292.035986][ T5864] smsc75xx v1.0.0 [ 292.229849][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 292.253626][ T9334] afs: Unknown parameter 'floctÜstrict' [ 292.394841][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.409087][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.421155][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 292.430910][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.453357][ T10] usb 1-1: config 0 descriptor?? [ 292.645344][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 292.669776][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 293.092614][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 293.100585][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 293.118814][ T10] usb 1-1: USB disconnect, device number 79 [ 293.292474][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 293.305812][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 293.316522][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 293.327658][ T5864] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 293.721484][ T9350] delete_channel: no stack [ 293.726795][ T9350] delete_channel: no stack [ 293.793893][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.813905][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.443853][ T9359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1144'. [ 294.458259][ T9359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'. [ 294.477304][ T9359] pimreg: entered allmulticast mode [ 294.570326][ T10] usb 3-1: USB disconnect, device number 60 [ 294.616256][ T5835] Bluetooth: Wrong link type (-71) [ 294.636722][ T5835] Bluetooth: Wrong link type (-71) [ 294.969710][ T5864] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 295.029805][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 295.110027][ T5864] usb 1-1: device descriptor read/64, error -71 [ 295.215447][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 295.223217][ T10] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 295.231492][ T10] usb 3-1: config 1 has no interface number 0 [ 295.237903][ T10] usb 3-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 295.248204][ T10] usb 3-1: config 1 interface 19 has no altsetting 0 [ 295.258149][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 295.267349][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.275780][ T10] usb 3-1: Product: syz [ 295.280152][ T10] usb 3-1: Manufacturer: syz [ 295.284825][ T10] usb 3-1: SerialNumber: syz [ 295.294599][ T9365] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.310721][ T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 295.360118][ T5864] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 295.502110][ T5864] usb 1-1: device descriptor read/64, error -71 [ 295.515407][ T10] usb 3-1: USB disconnect, device number 61 [ 295.515417][ T13] usb 3-1: Failed to submit usb control message: -71 [ 295.533095][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 295.541554][ T13] usb 3-1: unable to get target info from device [ 295.548125][ T13] usb 3-1: could not get target info (-71) [ 295.554799][ T13] usb 3-1: could not probe fw (-71) [ 295.631477][ T5864] usb usb1-port1: attempt power cycle [ 295.989758][ T5864] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 296.010685][ T5864] usb 1-1: device descriptor read/8, error -71 [ 296.249881][ T5864] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 296.280779][ T5864] usb 1-1: device descriptor read/8, error -71 [ 296.401000][ T5864] usb usb1-port1: unable to enumerate USB device [ 296.469861][ T5921] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 296.619808][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 296.626888][ T5921] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 296.635524][ T5921] usb 3-1: config 0 has no interface number 0 [ 296.642008][ T5921] usb 3-1: config 0 interface 184 has no altsetting 0 [ 296.655223][ T5921] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 296.664585][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.674178][ T5921] usb 3-1: Product: syz [ 296.678422][ T5921] usb 3-1: Manufacturer: syz [ 296.684389][ T5921] usb 3-1: SerialNumber: syz [ 296.693017][ T5921] usb 3-1: config 0 descriptor?? [ 296.705421][ T5921] smsc75xx v1.0.0 [ 297.308852][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 297.320238][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 297.501283][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.510324][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.940236][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 297.952048][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 297.962426][ T5921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 297.973413][ T5921] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 298.129120][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.141971][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.300039][ T5864] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 298.449947][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 298.457508][ T5864] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 298.465954][ T5864] usb 1-1: config 1 has no interface number 0 [ 298.472326][ T5864] usb 1-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 298.482421][ T5864] usb 1-1: config 1 interface 19 has no altsetting 0 [ 298.492249][ T5864] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 298.501764][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.509988][ T5864] usb 1-1: Product: syz [ 298.514244][ T5864] usb 1-1: Manufacturer: syz [ 298.518902][ T5864] usb 1-1: SerialNumber: syz [ 298.528526][ T9406] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 298.543146][ T5864] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 298.742698][ T5913] usb 1-1: USB disconnect, device number 84 [ 298.748976][ T62] usb 1-1: Failed to submit usb control message: -71 [ 298.764712][ T62] usb 1-1: unable to send the bmi data to the device: -71 [ 298.776898][ T62] usb 1-1: unable to get target info from device [ 298.788840][ T62] usb 1-1: could not get target info (-71) [ 298.798840][ T62] usb 1-1: could not probe fw (-71) [ 299.259449][ T10] usb 3-1: USB disconnect, device number 62 [ 299.509578][ T9429] pim6reg1: entered promiscuous mode [ 299.515105][ T9429] pim6reg1: entered allmulticast mode [ 299.587984][ T9430] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 299.979765][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 300.145636][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 300.155925][ T10] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 300.165451][ T10] usb 3-1: config 0 has no interface number 0 [ 300.172031][ T10] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 300.182605][ T10] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.193105][ T10] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 300.203633][ T10] usb 3-1: config 0 interface 196 has no altsetting 0 [ 300.215415][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 300.225256][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.233576][ T10] usb 3-1: Product: syz [ 300.238399][ T10] usb 3-1: Manufacturer: syz [ 300.243456][ T10] usb 3-1: SerialNumber: syz [ 300.254728][ T10] usb 3-1: config 0 descriptor?? [ 300.440296][ T9427] comedi comedi3: reset error (fatal) [ 300.681820][ T10] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 300.691835][ T10] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 300.891522][ T5921] usb 3-1: USB disconnect, device number 63 [ 301.251610][ T9445] binder_alloc: 9444: binder_alloc_buf, no vma [ 301.387496][ T9451] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 301.476909][ T9453] pim6reg: entered allmulticast mode [ 301.589827][ T5864] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 301.759764][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 301.767048][ T5864] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 301.775714][ T5864] usb 1-1: config 1 has no interface number 0 [ 301.782150][ T5864] usb 1-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 301.792359][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 301.800078][ T5864] usb 1-1: config 1 interface 19 has no altsetting 0 [ 301.810369][ T5864] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 301.819525][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.827990][ T5864] usb 1-1: Product: syz [ 301.832502][ T5864] usb 1-1: Manufacturer: syz [ 301.837167][ T5864] usb 1-1: SerialNumber: syz [ 301.847426][ T9450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.863440][ T5864] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 301.949735][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 301.956972][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.967325][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.980532][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 301.989687][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.001116][ T9] usb 3-1: config 0 descriptor?? [ 302.014152][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 302.061515][ T62] usb 1-1: Failed to submit usb control message: -71 [ 302.061963][ T5921] usb 1-1: USB disconnect, device number 85 [ 302.068675][ T62] usb 1-1: unable to send the bmi data to the device: -71 [ 302.091120][ T62] usb 1-1: unable to get target info from device [ 302.097763][ T62] usb 1-1: could not get target info (-71) [ 302.104847][ T62] usb 1-1: could not probe fw (-71) [ 302.224686][ T9459] netlink: 'syz.3.1178': attribute type 27 has an invalid length. [ 302.241922][ T9459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.938406][ T5921] usb 3-1: USB disconnect, device number 64 [ 303.212162][ T9480] netlink: 'syz.2.1186': attribute type 33 has an invalid length. [ 303.220310][ T9480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1186'. [ 303.748414][ T9484] fuse: Unknown parameter 'fä' [ 303.764687][ T9496] fuse: Unknown parameter 'fä' [ 303.824190][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.843905][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.870051][ T5921] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 304.049757][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 304.061994][ T5921] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 304.083022][ T5921] usb 1-1: config 1 has no interface number 0 [ 304.090310][ T5921] usb 1-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 304.108959][ T5921] usb 1-1: config 1 interface 19 has no altsetting 0 [ 304.120680][ T5921] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 304.132281][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.140706][ T5921] usb 1-1: Product: syz [ 304.145111][ T5921] usb 1-1: Manufacturer: syz [ 304.152071][ T5921] usb 1-1: SerialNumber: syz [ 304.169123][ T9491] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.193829][ T5921] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 304.334183][ T9476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.339829][ T5872] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 304.389440][ T62] usb 1-1: Failed to submit usb control message: -71 [ 304.397283][ T5921] usb 1-1: USB disconnect, device number 86 [ 304.415167][ T62] usb 1-1: unable to send the bmi data to the device: -71 [ 304.454399][ T62] usb 1-1: unable to get target info from device [ 304.472459][ T62] usb 1-1: could not get target info (-71) [ 304.478382][ T62] usb 1-1: could not probe fw (-71) [ 304.533923][ T5872] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 304.542667][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.556130][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.567715][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 304.579379][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.620005][ T5872] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.629127][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.662881][ T5872] usb 3-1: config 0 descriptor?? [ 304.668844][ T9498] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 304.872734][ T9508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.888499][ T9508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.949216][ T9508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.959463][ T9508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.042083][ T9515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.051936][ T9515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.106005][ T5872] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 305.145955][ T5872] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 305.376771][ T5872] usb 3-1: USB disconnect, device number 65 [ 305.389932][ T5864] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 305.560678][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 305.578608][ T5864] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.610401][ T5864] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.650034][ T5864] usb 1-1: config 0 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.683892][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 305.693321][ T5864] usb 1-1: New USB device found, idVendor=044e, idProduct=4d82, bcdDevice=a4.d8 [ 305.702760][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.753049][ T5864] usb 1-1: config 0 descriptor?? [ 306.257619][ T9518] netlink: 9872 bytes leftover after parsing attributes in process `syz.0.1198'. [ 306.319878][ T9538] netlink: 'syz.2.1204': attribute type 27 has an invalid length. [ 306.385212][ T9538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.688446][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.731377][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.763987][ T9549] netlink: 1584 bytes leftover after parsing attributes in process `syz.2.1208'. [ 306.826273][ T5864] hid-generic 0003:044E:4D82.0021: hidraw0: USB HID v0.00 Device [HID 044e:4d82] on usb-dummy_hcd.0-1/input0 [ 306.911451][ T43] usb 1-1: USB disconnect, device number 87 [ 306.977909][ T9550] fido_id[9550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 307.009909][ T5872] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 307.161810][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.182799][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 307.214224][ T5872] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 307.223983][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.232839][ T5872] usb 3-1: Product: syz [ 307.237475][ T5872] usb 3-1: Manufacturer: syz [ 307.242658][ T5872] usb 3-1: SerialNumber: syz [ 307.257268][ T5872] usb 3-1: config 0 descriptor?? [ 307.266359][ T5872] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 307.282892][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.293341][ T5872] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 307.303246][ T5872] usb 3-1: media controller created [ 307.322514][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.410299][ T5872] DVB: Unable to find symbol tda10046_attach() [ 307.416735][ T5872] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 307.430004][ T5872] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 307.812149][ T5872] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 307.837820][ T5872] usb 3-1: USB disconnect, device number 66 [ 308.042876][ T9565] tipc: Started in network mode [ 308.048359][ T9565] tipc: Node identity ac14140f, cluster identity 4711 [ 308.061279][ T9565] tipc: New replicast peer: 255.255.255.32 [ 308.088025][ T9565] tipc: Enabled bearer , priority 10 [ 308.315989][ T9574] netlink: 'syz.2.1216': attribute type 27 has an invalid length. [ 308.340411][ T9574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.571399][ T9582] binder_alloc: 9581: binder_alloc_buf, no vma [ 308.726947][ T9588] netlink: 1584 bytes leftover after parsing attributes in process `syz.3.1223'. [ 308.741395][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.751510][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.878341][ T9590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.880106][ T5872] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 309.050763][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 309.058081][ T5872] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 309.066944][ T5872] usb 1-1: config 1 has no interface number 0 [ 309.074154][ T5872] usb 1-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 309.085258][ T5872] usb 1-1: config 1 interface 19 has no altsetting 0 [ 309.097678][ T5872] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 309.107939][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.116476][ T5872] usb 1-1: Product: syz [ 309.121037][ T5872] usb 1-1: Manufacturer: syz [ 309.125757][ T5872] usb 1-1: SerialNumber: syz [ 309.143341][ T9586] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 309.167870][ T5872] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 309.202604][ T5872] tipc: Node number set to 2886997007 [ 309.374630][ T12] usb 1-1: Failed to submit usb control message: -71 [ 309.375061][ T5872] usb 1-1: USB disconnect, device number 88 [ 309.399780][ T12] usb 1-1: unable to send the bmi data to the device: -71 [ 309.413112][ T12] usb 1-1: unable to get target info from device [ 309.426649][ T12] usb 1-1: could not get target info (-71) [ 309.433516][ T12] usb 1-1: could not probe fw (-71) [ 309.535930][ T9607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.550919][ T9607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.137708][ T9616] netlink: 'syz.0.1231': attribute type 27 has an invalid length. [ 310.153950][ T9616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.558448][ T9624] [ 310.778967][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.789819][ T5864] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 310.791344][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.962615][ T5864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.975552][ T5864] usb 3-1: not running at top speed; connect to a high speed hub [ 310.984775][ T5864] usb 3-1: config 109 has an invalid interface number: 133 but max is 0 [ 310.993626][ T5864] usb 3-1: config 109 has no interface number 0 [ 311.000220][ T5864] usb 3-1: config 109 interface 133 has no altsetting 0 [ 311.011790][ T5864] usb 3-1: string descriptor 0 read error: -22 [ 311.018192][ T5864] usb 3-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=3c.39 [ 311.027419][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.045251][ T5864] gspca_main: benq-2.14.0 probing 04a5:3035 [ 311.244742][ T5864] usb 3-1: USB disconnect, device number 67 [ 311.599797][ T24] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 311.749776][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 311.760485][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 311.770547][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 311.780986][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 311.811764][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 311.821176][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.829441][ T24] usb 1-1: Product: syz [ 311.859748][ T24] usb 1-1: Manufacturer: syz [ 311.864422][ T24] usb 1-1: SerialNumber: syz [ 311.886957][ T24] usb 1-1: config 0 descriptor?? [ 311.902771][ T9644] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 311.913770][ T24] mceusb 1-1:0.0: mceusb_dev_probe: device setup failed! [ 311.923907][ T24] mceusb 1-1:0.0: probe with driver mceusb failed with error -12 [ 312.135833][ T5921] usb 1-1: USB disconnect, device number 89 [ 312.431415][ T9665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.557723][ T9669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.567096][ T9669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.808295][ T9677] syzkaller1: entered promiscuous mode [ 312.814039][ T9677] syzkaller1: entered allmulticast mode [ 312.834979][ T5864] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 312.975027][ T9679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.013948][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 313.030901][ T5864] usb 3-1: config 0 has no interfaces? [ 313.049771][ T5864] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.070459][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.091170][ T5864] usb 3-1: config 0 descriptor?? [ 313.310191][ T9671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.324619][ T9671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.335182][ T5864] usb 3-1: USB disconnect, device number 68 [ 313.766949][ T9700] netlink: 'syz.3.1260': attribute type 27 has an invalid length. [ 313.782770][ T9700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.203128][ T9712] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 314.412856][ T9720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.422245][ T9720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.435348][ T9720] input: syz1 as /devices/virtual/input/input38 [ 314.449847][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 314.609958][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 314.617283][ T9] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 314.625577][ T9] usb 3-1: config 1 has no interface number 0 [ 314.631854][ T9] usb 3-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 314.641921][ T9] usb 3-1: config 1 interface 19 has no altsetting 0 [ 314.652686][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 314.662102][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.670299][ T9] usb 3-1: Product: syz [ 314.674882][ T9] usb 3-1: Manufacturer: syz [ 314.679818][ T9] usb 3-1: SerialNumber: syz [ 314.688779][ T9714] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 314.703101][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 314.799775][ T10] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 314.900480][ T13] usb 3-1: Failed to submit usb control message: -71 [ 314.900773][ T24] usb 3-1: USB disconnect, device number 69 [ 314.908006][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 314.927635][ T13] usb 3-1: unable to get target info from device [ 314.934780][ T13] usb 3-1: could not get target info (-71) [ 314.941483][ T13] usb 3-1: could not probe fw (-71) [ 314.967197][ T10] usb 1-1: config 0 has an invalid interface number: 140 but max is 0 [ 314.999849][ T10] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 315.017769][ T10] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 315.040068][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.058443][ T10] usb 1-1: config 0 has no interface number 0 [ 315.068080][ T10] usb 1-1: config 0 interface 140 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.080373][ T10] usb 1-1: config 0 interface 140 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 315.092989][ T10] usb 1-1: config 0 interface 140 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 315.105223][ T10] usb 1-1: config 0 interface 140 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.129258][ T10] usb 1-1: config 0 interface 140 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 1023 [ 315.147893][ T10] usb 1-1: config 0 interface 140 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 315.159379][ T10] usb 1-1: config 0 interface 140 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 315.159417][ T10] usb 1-1: config 0 interface 140 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 315.159491][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=fc.f1 [ 315.159519][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.171541][ T10] usb 1-1: config 0 descriptor?? [ 315.339497][ T30] audit: type=1326 audit(1762883697.394:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.3.1274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e83f8f6c9 code=0x0 [ 315.419155][ T10] usb 1-1: string descriptor 0 read error: -71 [ 315.433031][ T10] usb 1-1: Cannot read MAC address [ 315.438719][ T10] MOSCHIP usb-ethernet driver 1-1:0.140: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 315.461764][ T10] usb 1-1: USB disconnect, device number 90 [ 315.807086][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.820443][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.845451][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.859457][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.884948][ T9751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.025587][ T9756] netlink: 'syz.2.1282': attribute type 25 has an invalid length. [ 316.033642][ T9756] netlink: 'syz.2.1282': attribute type 28 has an invalid length. [ 316.041066][ T9757] netlink: 'syz.0.1281': attribute type 10 has an invalid length. [ 316.459756][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 316.513159][ T9765] netlink: 'syz.3.1285': attribute type 27 has an invalid length. [ 316.528719][ T9765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.621018][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 316.642944][ T24] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 316.651499][ T24] usb 3-1: config 1 has no interface number 0 [ 316.657813][ T24] usb 3-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 316.668637][ T24] usb 3-1: config 1 interface 19 has no altsetting 0 [ 316.678202][ T24] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 316.699954][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.721730][ T24] usb 3-1: Product: syz [ 316.737225][ T24] usb 3-1: Manufacturer: syz [ 316.743349][ T24] usb 3-1: SerialNumber: syz [ 316.764154][ T9760] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 316.807118][ T24] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 317.000438][ T13] usb 3-1: Failed to submit usb control message: -71 [ 317.007671][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 317.016518][ T5921] usb 3-1: USB disconnect, device number 70 [ 317.037968][ T13] usb 3-1: unable to get target info from device [ 317.056514][ T13] usb 3-1: could not get target info (-71) [ 317.065010][ T13] usb 3-1: could not probe fw (-71) [ 317.742261][ T9797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.758248][ T9797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.829755][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 317.990023][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 317.996796][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 318.005648][ T10] usb 1-1: config 0 has no interface number 0 [ 318.012148][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 318.021443][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 318.030665][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.038724][ T10] usb 1-1: Product: syz [ 318.044380][ T10] usb 1-1: Manufacturer: syz [ 318.049344][ T10] usb 1-1: SerialNumber: syz [ 318.056997][ T10] usb 1-1: config 0 descriptor?? [ 318.065204][ T10] smsc75xx v1.0.0 [ 318.559527][ T9811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.570857][ T9811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.670297][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 318.681453][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 319.159031][ T9819] netlink: 'syz.3.1303': attribute type 27 has an invalid length. [ 319.176312][ T9819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.294816][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 319.311187][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 319.321989][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 319.332811][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 319.426896][ T9824] netlink: 'syz.3.1305': attribute type 10 has an invalid length. [ 320.273930][ T9828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.283617][ T9828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.592636][ T5921] usb 1-1: USB disconnect, device number 91 [ 321.343500][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1321'. [ 321.659761][ T5885] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 321.814330][ T5885] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 321.823141][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.835189][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 321.846824][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 321.858374][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.873041][ T5885] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.882255][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.903367][ T5885] usb 1-1: config 0 descriptor?? [ 321.909345][ T9865] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 322.111379][ T9880] netlink: 'syz.3.1327': attribute type 27 has an invalid length. [ 322.127872][ T9880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.336352][ T5885] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 322.384275][ T5885] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 322.402580][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.413113][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.445152][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.457395][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.468612][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.483240][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.576356][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.583062][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.585557][ T9] usb 1-1: USB disconnect, device number 92 [ 323.055550][ T9894] CIFS: iocharset name too long [ 323.255754][ T9898] program syz.3.1335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.308522][ T9900] FAULT_INJECTION: forcing a failure. [ 323.308522][ T9900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.323447][ T9900] CPU: 0 UID: 0 PID: 9900 Comm: syz.0.1334 Not tainted syzkaller #0 PREEMPT(full) [ 323.323494][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.323509][ T9900] Call Trace: [ 323.323520][ T9900] [ 323.323528][ T9900] dump_stack_lvl+0x189/0x250 [ 323.323554][ T9900] ? __pfx____ratelimit+0x10/0x10 [ 323.323579][ T9900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.323599][ T9900] ? __pfx__printk+0x10/0x10 [ 323.323618][ T9900] ? __might_fault+0xb0/0x130 [ 323.323645][ T9900] should_fail_ex+0x414/0x560 [ 323.323674][ T9900] _copy_from_user+0x2d/0xb0 [ 323.323695][ T9900] snd_pcm_oss_write+0x6e1/0xf20 [ 323.323726][ T9900] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 323.323744][ T9900] ? bpf_lsm_file_permission+0x9/0x20 [ 323.323768][ T9900] ? security_file_permission+0x75/0x290 [ 323.323794][ T9900] ? rw_verify_area+0x255/0x4d0 [ 323.323820][ T9900] ? __lock_acquire+0xab9/0xd20 [ 323.323835][ T9900] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 323.323853][ T9900] vfs_write+0x27e/0xb30 [ 323.323874][ T9900] ? __pfx_vfs_write+0x10/0x10 [ 323.323890][ T9900] ? __fget_files+0x2a/0x420 [ 323.323911][ T9900] ? __fget_files+0x2a/0x420 [ 323.323927][ T9900] ? __fget_files+0x3a0/0x420 [ 323.323944][ T9900] ? __fget_files+0x2a/0x420 [ 323.323968][ T9900] ksys_write+0x145/0x250 [ 323.323985][ T9900] ? __pfx_ksys_write+0x10/0x10 [ 323.324003][ T9900] ? do_syscall_64+0xbe/0xfa0 [ 323.324021][ T9900] do_syscall_64+0xfa/0xfa0 [ 323.324037][ T9900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.324060][ T9900] ? clear_bhb_loop+0x60/0xb0 [ 323.324079][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.324095][ T9900] RIP: 0033:0x7f0c64b8f6c9 [ 323.324110][ T9900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.324123][ T9900] RSP: 002b:00007f0c65aae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.324141][ T9900] RAX: ffffffffffffffda RBX: 00007f0c64de6090 RCX: 00007f0c64b8f6c9 [ 323.324153][ T9900] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 323.324163][ T9900] RBP: 00007f0c65aae090 R08: 0000000000000000 R09: 0000000000000000 [ 323.324173][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.324182][ T9900] R13: 00007f0c64de6128 R14: 00007f0c64de6090 R15: 00007ffd9a2ae2f8 [ 323.324207][ T9900] [ 323.561004][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.576366][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.885703][ T9910] netlink: 'syz.3.1339': attribute type 28 has an invalid length. [ 324.102122][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.112051][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.505158][ T9923] tmpfs: Unknown parameter 'usrquota_block_ha~ú%¿U‘ øi.+rdlimit' [ 324.829111][ T9932] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1350'. [ 324.890210][ T9933] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1349'. [ 325.042950][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 325.326050][ T9962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.335535][ T9962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.480580][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 325.642393][ T10] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 325.650830][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 325.662560][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 325.673817][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 325.685379][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.698862][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.708142][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.720295][ T10] usb 1-1: config 0 descriptor?? [ 325.726078][ T9954] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 325.769931][ T5885] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 325.943660][ T5885] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 325.957722][ T5885] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 325.967576][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.976683][ T5885] usb 3-1: Product: syz [ 325.981481][ T5885] usb 3-1: Manufacturer: syz [ 325.986214][ T5885] usb 3-1: SerialNumber: syz [ 326.116679][ T9970] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1363'. [ 326.148083][ T10] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 326.178115][ T10] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 326.203601][ T5885] usb 3-1: selecting invalid altsetting 1 [ 326.366090][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.376427][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.404714][ T5885] LME2510(C): Firmware Status: 04 03 60 08 00 00 [ 326.404916][ T5885] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 326.422941][ T5921] usb 1-1: USB disconnect, device number 93 [ 327.479835][ T5885] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 327.637214][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.652254][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.662255][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 327.670910][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 327.687506][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.713353][ T5885] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 327.722930][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.731152][ T5885] usb 1-1: Product: syz [ 327.735378][ T5885] usb 1-1: Manufacturer: syz [ 327.740788][ T5885] usb 1-1: SerialNumber: syz [ 327.749177][ T5885] usb 1-1: config 0 descriptor?? [ 327.760054][ T5885] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 327.769389][ T5885] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 328.366648][ T5885] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 328.376951][ T5885] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 328.537013][ T5921] usb 3-1: USB disconnect, device number 71 [ 328.997407][ T5885] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 329.005185][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 329.012335][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 329.019213][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 329.026393][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 329.033375][ T5885] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 329.045064][ T5885] usb 1-1: USB disconnect, device number 94 [ 330.671458][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 331.081071][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.092981][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.107425][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.117008][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.132020][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.142736][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.557235][T10045] netlink: 'syz.0.1389': attribute type 10 has an invalid length. [ 331.719085][T10052] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 331.727325][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 331.853108][T10056] FAULT_INJECTION: forcing a failure. [ 331.853108][T10056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.867621][T10056] CPU: 1 UID: 0 PID: 10056 Comm: syz.3.1393 Not tainted syzkaller #0 PREEMPT(full) [ 331.867653][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.867667][T10056] Call Trace: [ 331.867676][T10056] [ 331.867685][T10056] dump_stack_lvl+0x189/0x250 [ 331.867720][T10056] ? __pfx____ratelimit+0x10/0x10 [ 331.867753][T10056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.867781][T10056] ? __pfx__printk+0x10/0x10 [ 331.867808][T10056] ? __might_fault+0xb0/0x130 [ 331.867849][T10056] should_fail_ex+0x414/0x560 [ 331.867932][T10056] _copy_from_user+0x2d/0xb0 [ 331.867960][T10056] snd_pcm_oss_write+0x6e1/0xf20 [ 331.868003][T10056] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 331.868028][T10056] ? bpf_lsm_file_permission+0x9/0x20 [ 331.868060][T10056] ? security_file_permission+0x75/0x290 [ 331.868094][T10056] ? rw_verify_area+0x255/0x4d0 [ 331.868125][T10056] ? __lock_acquire+0xab9/0xd20 [ 331.868145][T10056] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 331.868171][T10056] vfs_write+0x27e/0xb30 [ 331.868202][T10056] ? __pfx_vfs_write+0x10/0x10 [ 331.868225][T10056] ? __fget_files+0x2a/0x420 [ 331.868253][T10056] ? __fget_files+0x2a/0x420 [ 331.868275][T10056] ? __fget_files+0x3a0/0x420 [ 331.868299][T10056] ? __fget_files+0x2a/0x420 [ 331.868334][T10056] ksys_write+0x145/0x250 [ 331.868359][T10056] ? __pfx_ksys_write+0x10/0x10 [ 331.868383][T10056] ? do_syscall_64+0xbe/0xfa0 [ 331.868408][T10056] do_syscall_64+0xfa/0xfa0 [ 331.868428][T10056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.868444][T10056] ? clear_bhb_loop+0x60/0xb0 [ 331.868463][T10056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.868483][T10056] RIP: 0033:0x7f3e83f8f6c9 [ 331.868504][T10056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.868524][T10056] RSP: 002b:00007f3e84e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.868560][T10056] RAX: ffffffffffffffda RBX: 00007f3e841e6090 RCX: 00007f3e83f8f6c9 [ 331.868576][T10056] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 331.868587][T10056] RBP: 00007f3e84e77090 R08: 0000000000000000 R09: 0000000000000000 [ 331.868596][T10056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.868609][T10056] R13: 00007f3e841e6128 R14: 00007f3e841e6090 R15: 00007ffd8be2cf58 [ 331.868639][T10056] [ 332.371766][T10058] rtc_cmos 00:00: Alarms can be up to one day in the future [ 332.621905][ T5872] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 332.717737][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.727558][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.789815][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 332.799710][ T5872] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 332.809036][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.821776][ T5872] usb 1-1: Product: syz [ 332.826014][ T5872] usb 1-1: Manufacturer: syz [ 332.830925][ T5872] usb 1-1: SerialNumber: syz [ 332.838769][ T5872] usb 1-1: config 0 descriptor?? [ 332.850983][ T5872] gspca_main: se401-2.14.0 probing 047d:5003 [ 333.462799][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.477328][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.623673][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.648456][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.669311][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 333.791584][ T5872] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 333.835941][ T5872] usb 1-1: USB disconnect, device number 95 [ 333.975932][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.987565][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.006899][T10078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.024157][T10078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.037175][T10078] netlink: 'syz.3.1402': attribute type 21 has an invalid length. [ 334.045237][T10078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1402'. [ 334.266238][T10082] netlink: 'syz.0.1403': attribute type 27 has an invalid length. [ 334.281068][T10082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.742989][T10092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.752486][T10092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.355228][T10094] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1408'. [ 335.453634][T10098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.462857][T10098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.989793][ T5872] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 336.036620][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.052405][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.065745][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.074857][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.149817][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 336.157215][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 336.166290][ T5872] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 336.174654][ T5872] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 336.183424][ T5872] usb 3-1: config 8 has no interface number 0 [ 336.189690][ T5872] usb 3-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 336.205295][ T5872] usb 3-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 336.214622][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.222904][ T5872] usb 3-1: Product: syz [ 336.227106][ T5872] usb 3-1: Manufacturer: syz [ 336.231816][ T5872] usb 3-1: SerialNumber: syz [ 336.673590][ T5921] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 336.728317][T10111] netlink: 'syz.3.1415': attribute type 10 has an invalid length. [ 336.829768][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 336.845794][ T5921] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 336.854266][ T5921] usb 1-1: config 0 has no interface number 0 [ 336.860705][ T5921] usb 1-1: config 0 interface 184 has no altsetting 0 [ 336.871615][ T5921] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 336.880983][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.889190][ T5921] usb 1-1: Product: syz [ 336.895306][ T5921] usb 1-1: Manufacturer: syz [ 336.900229][ T5921] usb 1-1: SerialNumber: syz [ 336.911596][ T5872] sierra 3-1:8.158: Sierra USB modem converter detected [ 336.919750][ T5921] usb 1-1: config 0 descriptor?? [ 336.928926][ T5872] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 336.938782][ T5921] smsc75xx v1.0.0 [ 336.946924][ T5872] usb 3-1: USB disconnect, device number 72 [ 336.961830][ T5872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 336.971820][ T5872] sierra 3-1:8.158: device disconnected [ 337.563438][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 337.587146][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 337.605610][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.615798][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.306993][T10134] rtc_cmos 00:00: Alarms can be up to one day in the future [ 338.329344][T10134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.342276][T10134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.359356][T10134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.371316][T10134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.428024][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 338.447660][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 338.458135][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 338.491368][ T5921] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 338.669763][T10134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.681051][T10134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.717653][T10126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.462862][ T5921] usb 1-1: USB disconnect, device number 96 [ 339.679706][ T5885] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 339.819796][ T5921] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 339.844955][ T5885] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 339.853472][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 339.865635][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 339.876690][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 339.888023][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.901173][ T5885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.910347][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.921216][ T5885] usb 3-1: config 0 descriptor?? [ 339.927476][T10160] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 339.989760][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 339.999038][ T5921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 340.008525][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.016620][ T5921] usb 1-1: Product: syz [ 340.020905][ T5921] usb 1-1: Manufacturer: syz [ 340.025536][ T5921] usb 1-1: SerialNumber: syz [ 340.033125][ T5921] usb 1-1: config 0 descriptor?? [ 340.245816][ T5921] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.343997][ T5885] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 340.360431][ T5885] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 340.613316][ T5885] usb 3-1: USB disconnect, device number 73 [ 341.308628][ T5921] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 341.370242][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 341.527375][ T24] usb 1-1: USB disconnect, device number 97 [ 341.670723][T10188] FAULT_INJECTION: forcing a failure. [ 341.670723][T10188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.708579][T10188] CPU: 1 UID: 0 PID: 10188 Comm: syz.3.1439 Not tainted syzkaller #0 PREEMPT(full) [ 341.708612][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.708627][T10188] Call Trace: [ 341.708636][T10188] [ 341.708646][T10188] dump_stack_lvl+0x189/0x250 [ 341.708683][T10188] ? __pfx____ratelimit+0x10/0x10 [ 341.708718][T10188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.708747][T10188] ? __pfx__printk+0x10/0x10 [ 341.708774][T10188] ? __might_fault+0xb0/0x130 [ 341.708817][T10188] should_fail_ex+0x414/0x560 [ 341.708856][T10188] _copy_from_user+0x2d/0xb0 [ 341.708886][T10188] snd_pcm_oss_write+0x6e1/0xf20 [ 341.708939][T10188] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 341.708968][T10188] ? bpf_lsm_file_permission+0x9/0x20 [ 341.709002][T10188] ? security_file_permission+0x75/0x290 [ 341.709039][T10188] ? rw_verify_area+0x255/0x4d0 [ 341.709073][T10188] ? __lock_acquire+0xab9/0xd20 [ 341.709094][T10188] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 341.709121][T10188] vfs_write+0x27e/0xb30 [ 341.709151][T10188] ? __pfx_vfs_write+0x10/0x10 [ 341.709175][T10188] ? __fget_files+0x2a/0x420 [ 341.709205][T10188] ? __fget_files+0x2a/0x420 [ 341.709229][T10188] ? __fget_files+0x3a0/0x420 [ 341.709255][T10188] ? __fget_files+0x2a/0x420 [ 341.709290][T10188] ksys_write+0x145/0x250 [ 341.709316][T10188] ? __pfx_ksys_write+0x10/0x10 [ 341.709342][T10188] ? do_syscall_64+0xbe/0xfa0 [ 341.709367][T10188] do_syscall_64+0xfa/0xfa0 [ 341.709392][T10188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.709413][T10188] ? clear_bhb_loop+0x60/0xb0 [ 341.709440][T10188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.709462][T10188] RIP: 0033:0x7f3e83f8f6c9 [ 341.709481][T10188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.709500][T10188] RSP: 002b:00007f3e84e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.709524][T10188] RAX: ffffffffffffffda RBX: 00007f3e841e6090 RCX: 00007f3e83f8f6c9 [ 341.709541][T10188] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 341.709556][T10188] RBP: 00007f3e84e77090 R08: 0000000000000000 R09: 0000000000000000 [ 341.709570][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.709588][T10188] R13: 00007f3e841e6128 R14: 00007f3e841e6090 R15: 00007ffd8be2cf58 [ 341.709623][T10188] [ 342.022000][T10195] netlink: 'syz.4.1442': attribute type 27 has an invalid length. [ 342.032614][T10196] fuseblk: Bad value for 'fd' [ 342.219816][ T5872] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 342.295790][ T30] audit: type=1400 audit(1762883724.351:386): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10199 comm="syz.4.1444" [ 342.370647][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 342.381974][ T5872] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 342.390983][ T5872] usb 3-1: config 0 has no interface number 0 [ 342.397145][ T5872] usb 3-1: config 0 interface 184 has no altsetting 0 [ 342.412164][ T5872] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 342.421923][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.431964][ T5872] usb 3-1: Product: syz [ 342.438940][ T5872] usb 3-1: Manufacturer: syz [ 342.445003][ T5872] usb 3-1: SerialNumber: syz [ 342.457486][ T5872] usb 3-1: config 0 descriptor?? [ 342.464767][T10204] program syz.0.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.473288][ T5872] smsc75xx v1.0.0 [ 342.784560][T10215] netlink: 'syz.4.1451': attribute type 27 has an invalid length. [ 342.799024][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.821938][T10215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.838375][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.856391][T10219] ------------[ cut here ]------------ [ 342.862420][T10219] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x88f/0xcb0, CPU#1: syz.3.1452/10219 [ 342.874248][T10219] Modules linked in: [ 342.878219][T10219] CPU: 1 UID: 0 PID: 10219 Comm: syz.3.1452 Not tainted syzkaller #0 PREEMPT(full) [ 342.887800][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.898856][T10219] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 342.905102][T10219] Code: 00 e8 75 3f 77 ff eb 0c e8 6e 3f 77 ff eb 05 e8 67 3f 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 3f 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 44 3f 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 342.925125][T10219] RSP: 0018:ffffc90003fffd40 EFLAGS: 00010293 [ 342.931522][T10219] RAX: ffffffff824a202e RBX: ffff88801defef70 RCX: ffff888027cbbd00 [ 342.940154][T10219] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 342.948376][T10219] RBP: ffffc90003fffe01 R08: ffff88805ed14cbb R09: 1ffff1100bda2997 [ 342.956830][T10219] R10: dffffc0000000000 R11: ffffed100bda2998 R12: dffffc0000000000 [ 342.964995][T10219] R13: 0000000000000000 R14: ffff88805ed14cb8 R15: ffff88805ed14c00 [ 342.973301][T10219] FS: 00007f3e84e566c0(0000) GS:ffff888125b82000(0000) knlGS:0000000000000000 [ 342.982422][T10219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.989056][T10219] CR2: 00007f3e84d17d60 CR3: 000000007edc6000 CR4: 00000000003526f0 [ 342.997261][T10219] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 343.005623][T10219] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 343.013767][T10219] Call Trace: [ 343.017091][T10219] [ 343.020200][T10219] switch_task_namespaces+0x3e/0x110 [ 343.025545][T10219] __se_sys_setns+0x784/0x17d0 [ 343.030435][T10219] ? __pfx_do_sys_openat2+0x10/0x10 [ 343.035710][T10219] ? __pfx___se_sys_setns+0x10/0x10 [ 343.041463][T10219] ? do_syscall_64+0xbe/0xfa0 [ 343.046206][T10219] do_syscall_64+0xfa/0xfa0 [ 343.053902][T10219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.060679][T10219] ? clear_bhb_loop+0x60/0xb0 [ 343.065431][T10219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.069097][T10221] rtc_cmos 00:00: Alarms can be up to one day in the future [ 343.071430][T10219] RIP: 0033:0x7f3e83f90ef7 [ 343.083279][T10219] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.103446][T10219] RSP: 002b:00007f3e84e55fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 343.111991][T10219] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f3e83f90ef7 [ 343.120190][T10219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 343.128221][T10219] RBP: 00007f3e84011f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.136498][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.144882][T10219] R13: 00007f3e841e6218 R14: 00007f3e841e6180 R15: 00007ffd8be2cf58 [ 343.153307][T10219] [ 343.156402][T10219] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.163730][T10219] CPU: 1 UID: 0 PID: 10219 Comm: syz.3.1452 Not tainted syzkaller #0 PREEMPT(full) [ 343.173148][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.183258][T10219] Call Trace: [ 343.186577][T10219] [ 343.189651][T10219] dump_stack_lvl+0x99/0x250 [ 343.194285][T10219] ? __asan_memcpy+0x40/0x70 [ 343.199696][T10219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.205103][T10219] ? __pfx__printk+0x10/0x10 [ 343.209747][T10219] vpanic+0x237/0x6d0 [ 343.213782][T10219] ? __pfx_vpanic+0x10/0x10 [ 343.218337][T10219] ? is_bpf_text_address+0x292/0x2b0 [ 343.223686][T10219] ? is_bpf_text_address+0x26/0x2b0 [ 343.228942][T10219] panic+0xb9/0xc0 [ 343.232715][T10219] ? __pfx_panic+0x10/0x10 [ 343.237170][T10219] __warn+0x318/0x4d0 [ 343.241194][T10219] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 343.246710][T10219] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 343.252331][T10219] report_bug+0x2be/0x4f0 [ 343.256871][T10219] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 343.262479][T10219] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 343.268062][T10219] ? nsproxy_ns_active_get+0x891/0xcb0 [ 343.273559][T10219] handle_bug+0x84/0x160 [ 343.277836][T10219] exc_invalid_op+0x1a/0x50 [ 343.282543][T10219] asm_exc_invalid_op+0x1a/0x20 [ 343.287521][T10219] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 343.293727][T10219] Code: 00 e8 75 3f 77 ff eb 0c e8 6e 3f 77 ff eb 05 e8 67 3f 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 3f 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 44 3f 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 343.313629][T10219] RSP: 0018:ffffc90003fffd40 EFLAGS: 00010293 [ 343.319824][T10219] RAX: ffffffff824a202e RBX: ffff88801defef70 RCX: ffff888027cbbd00 [ 343.327833][T10219] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 343.336032][T10219] RBP: ffffc90003fffe01 R08: ffff88805ed14cbb R09: 1ffff1100bda2997 [ 343.344046][T10219] R10: dffffc0000000000 R11: ffffed100bda2998 R12: dffffc0000000000 [ 343.352041][T10219] R13: 0000000000000000 R14: ffff88805ed14cb8 R15: ffff88805ed14c00 [ 343.360485][T10219] ? nsproxy_ns_active_get+0x88e/0xcb0 [ 343.366071][T10219] switch_task_namespaces+0x3e/0x110 [ 343.371374][T10219] __se_sys_setns+0x784/0x17d0 [ 343.376168][T10219] ? __pfx_do_sys_openat2+0x10/0x10 [ 343.381394][T10219] ? __pfx___se_sys_setns+0x10/0x10 [ 343.386620][T10219] ? do_syscall_64+0xbe/0xfa0 [ 343.391327][T10219] do_syscall_64+0xfa/0xfa0 [ 343.395860][T10219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.402128][T10219] ? clear_bhb_loop+0x60/0xb0 [ 343.406840][T10219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.412774][T10219] RIP: 0033:0x7f3e83f90ef7 [ 343.417378][T10219] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.437029][T10219] RSP: 002b:00007f3e84e55fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 343.445515][T10219] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f3e83f90ef7 [ 343.453518][T10219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 343.461512][T10219] RBP: 00007f3e84011f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.469583][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.477572][T10219] R13: 00007f3e841e6218 R14: 00007f3e841e6180 R15: 00007ffd8be2cf58 [ 343.485585][T10219] [ 343.488809][T10219] Kernel Offset: disabled [ 343.493162][T10219] Rebooting in 86400 seconds..