last executing test programs: 11.111844106s ago: executing program 4 (id=3073): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084020000ff0000000402000304"], 0x30}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=@base={0x1f, 0x0, 0x1, 0x26, 0x470, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400"], 0x70}}, 0x0) 9.361230838s ago: executing program 4 (id=3076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0xb356841f36698ca6}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8001) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0xb356841f36698ca6}) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8001) (async) 9.322680549s ago: executing program 4 (id=3077): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) io_setup(0x80, &(0x7f0000000040)=0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) socket$l2tp6(0xa, 0x2, 0x73) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x9, r7, &(0x7f0000001880)="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", 0x211, 0xffffffff}]) read(r5, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) syz_open_dev$vcsa(&(0x7f00000010c0), 0x81e2, 0x406404) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) preadv(r4, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x6, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000002c0)=ANY=[], 0x9) syz_usb_disconnect(r0) 8.846812389s ago: executing program 2 (id=3080): socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020"], 0x50) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (rerun: 32) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xa, &(0x7f0000000380)={0x8, 0x100000a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x1) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x50) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}}, 0x0) 7.389258339s ago: executing program 1 (id=3084): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0xa91, 0x100000000}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 6.638385405s ago: executing program 2 (id=3086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r4}, 0x38) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000080007"], 0x44}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) writev(r10, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) close_range(r9, 0xffffffffffffffff, 0x0) r11 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r11, 0x7, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r13, 0x541b, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.550439558s ago: executing program 1 (id=3096): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0x33, '\x00', @data=0xfff, 0xffff8000}, {0xd, '\x00', @buffer={"8400000000c195645f551a9359b1a72760a739f7f1b800", 0x20}, 0x1}, {0x20, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x3, @uvalue=0x1}, {0x2, @uvalue=0x8a3}, {0x1, @uvalue=0x5}]}, 0x1ff}, {0x41, '\x00', @st={0x4, [{0x3, @uvalue=0x1}, {0x0, @svalue=0x80000001}, {0x3, @uvalue=0x6}, {0x0, @uvalue=0x8}]}, 0xfffffff8}]}) (async) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000000c0)=[{0x33, '\x00', @data=0xfff, 0xffff8000}, {0xd, '\x00', @buffer={"8400000000c195645f551a9359b1a72760a739f7f1b800", 0x20}, 0x1}, {0x20, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x3, @uvalue=0x1}, {0x2, @uvalue=0x8a3}, {0x1, @uvalue=0x5}]}, 0x1ff}, {0x41, '\x00', @st={0x4, [{0x3, @uvalue=0x1}, {0x0, @svalue=0x80000001}, {0x3, @uvalue=0x6}, {0x0, @uvalue=0x8}]}, 0xfffffff8}]}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x5c, "a13cfd38e47464d06c676a67845eb0d1b425faa20b3b6ddd39d97a2527657c01ab7f44d9ac6dde50590f9fb4d767b667b849292f05e0c4634066fd8903b6328fa82e61977cde3e8ca147f3fb39fd33979d19b7e17fbc9fef6fccfd5c"}, &(0x7f0000000080)=0x64) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x5c, "a13cfd38e47464d06c676a67845eb0d1b425faa20b3b6ddd39d97a2527657c01ab7f44d9ac6dde50590f9fb4d767b667b849292f05e0c4634066fd8903b6328fa82e61977cde3e8ca147f3fb39fd33979d19b7e17fbc9fef6fccfd5c"}, &(0x7f0000000080)=0x64) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x401, @private0, 0xfffffff7}}}, &(0x7f0000000180)=0x84) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000340)={0x0, 0x10000}) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) (async) unshare(0x66000080) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000300)=0x208, 0xc1df0ff0dfb6053) 5.4544287s ago: executing program 4 (id=3097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) readv(r4, &(0x7f0000000900)=[{&(0x7f0000000080)=""/137, 0x89}], 0x1) syz_usb_disconnect(r2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xfffffee2) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000480)) (async) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000480)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) (async) connect$inet(r8, &(0x7f0000000000)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x24, 0x0, 0x0) (async) setsockopt$inet_mreqn(r8, 0x0, 0x24, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000040)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setsig(0x4203, 0x0, 0x72d8, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) 4.882725707s ago: executing program 0 (id=3098): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)='1', 0x1}], 0x1, 0x0, 0x0, 0x48044}}], 0x1, 0x20000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0xfff) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x40}) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0xfe48) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904"], 0x0) 4.387586697s ago: executing program 2 (id=3099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1f, 0x800, 0x3d0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r1, &(0x7f00000000c0)="dcde582b373f695b03a9502e1eb31e95bfef3d483bba82ffd20ead910d0c3c90b961d5637f7bb4", 0x27, 0x20040000, 0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000840)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xffff7ffffffffff8, 0x100000010000009, 0xff7ffffb, 0x1}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) (async) shutdown(r0, 0x1) 4.26273035s ago: executing program 1 (id=3100): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x68, 0x0, 0x0) unshare(0x6a040000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.170072407s ago: executing program 4 (id=3101): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@fd={0xd, 0xd, 0x4, 0x2000, 0xa4f1, {0x77359400}, {0x1, 0x0, 0x4, 0xd, 0x0, 0x9, "9d3a4c1a"}, 0x8000, 0x4, {}, 0x89}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0xe86, 0x40401, 0x4, 0x5, 0x0, "0d693e0100003700"}) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98, 0x0, 0x0, 0x0, 0xfffffffc}) r5 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r5, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x18, r6, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f00000000c0)="4987a034977f549ecf9800000000050000000000", 0x14}], 0x2, 0x0, 0x0, 0x11000000}, 0x20008014) 4.029555497s ago: executing program 1 (id=3104): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000003140)=ANY=[@ANYBLOB="7c0200001900010028bd70000000000064010100000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fbffffffffffffffa9000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000a000000000000040000000080400000000000000000080000000000000000000000000000000032000900050000f9ff0000000300000000000000000800000000000001000000000000000800160008000000240009002d9d000000000000f86affffffffffff0900000000000000000000000000000005001900330000001c00040002004e224e2400000a010101000000000000000000000000f5001200616567697332353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004805000000010000b213953ac5fd2548aa38ff14a289bfe6d4ad31058f6f60f50c289f5dc51b20c5fd43f9724944f787c4e15ea6c91951dda8a009693a6e75682abc24cc3ddb3f2aea3a55d22c1c9002b3e78875fa6f086d934357a73941b63351a644dd014081fe3efc02196f77aa4bbc4705e8c2c7cd4238af0c26c04a05525535541a1c55bb17f6f42c7887173def7150fbb4dcaf5c2b61713da0e13803315475f84f9797f8dffaea2dc8211c0f8a940000005700120061656769733132386c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058000000a00000003fa81541c96c8a3694441d00"], 0x27c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="380100002100010000000000feffffff00000000000000000000000000000000fe80000000000000000000000000001dfffc0000000100000a00e08001a80000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fe"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/179, 0xb3}, {&(0x7f0000001900)=""/89, 0x59}, {&(0x7f0000001980)=""/212, 0xd4}, {&(0x7f0000001a80)=""/67, 0x43}, {&(0x7f0000001b00)=""/33, 0x21}, {&(0x7f0000001b40)=""/192, 0xc0}, {&(0x7f0000001c00)=""/174, 0xae}, {&(0x7f0000001cc0)=""/243, 0xf3}, {&(0x7f0000001dc0)=""/180, 0xb4}], 0xa, &(0x7f0000001f40)=""/41, 0x29}, 0x2}, {{&(0x7f0000001f80)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002000)=""/22, 0x16}, {&(0x7f0000002040)=""/5, 0x5}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f0000004200)}], 0x6, &(0x7f0000004300)=""/48, 0x30}, 0x6}], 0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000140)='nfs4\x00', 0x1) r3 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x804019, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f64653d3030302cdc4d10803b2edf3030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,subj_type=/dev/fuse\x00,fsmagic=0x000000000000b3b4,uid<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x8000000000000000, 0x0, 0x0, 0x5, 0x50, 0x70, 0x0, 0x60}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r7, r7, &(0x7f0000000000)=0x1, 0x4) write$P9_RSTATu(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ef467201253def5b6e64d625a1ec2a146b8741d32d981872113e639d7bc6a90e0130e3c94af28f04938bcc7373902983277c11b9dcbb3458d5e9cb5cc2b9daff51a709d450b6792156694f3d7affefcae835d1666afa6dbcbee955536d9adc5b2e0f121c04ab4044b040139c22c89ca2ec70685169d781f507891218d047e99e2a73632badd47215d4353ad44ff023c2e2c17c7398431d689c056578", @ANYRES32=0x0], 0x1fa) 3.832568667s ago: executing program 2 (id=3106): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0xa91, 0x100000000}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 3.108787611s ago: executing program 1 (id=3107): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xffffffff, 0x80, 0x1000, 0x2, 0x20, 0x0, 0x7e}, 0x9c) r1 = semget$private(0x0, 0xb, 0x19f) semop(r1, &(0x7f00000001c0)=[{0x2, 0x6}, {0x2}], 0x2) semop(r1, &(0x7f0000000100)=[{0x4, 0xb, 0x800}, {0x2, 0x8, 0x1000}, {0x4, 0x4, 0x2000}, {0x1, 0xab, 0x1800}, {0x0, 0x1ff}, {0x2, 0xfff8, 0x1000}], 0x6) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x60, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xdfd, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0xd, 0x5, {0x7, 0x25, 0x1, 0xc, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0x92, 0x5, {0x7, 0x25, 0x1, 0xc, 0x60, 0x4}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="070309"]}]}) 2.505998946s ago: executing program 0 (id=3108): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) fsync(0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="03070600b531"], 0x31c8) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x1, 0x60, &(0x7f0000000040)={0x40, 0xd, 0x17, 0xff81}, 0x8, 0x28, 0x4, 0x0, 0x4bf, 0x7fff, 0x0}) 2.372880854s ago: executing program 0 (id=3109): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000880)={0xc, 0x8, 0x143, {0x0}}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0x949, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) (async) r3 = fsmount(r2, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xec}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xec}}, './file0\x00'}) landlock_restrict_self(0xffffffffffffffff, 0x5) (async) landlock_restrict_self(0xffffffffffffffff, 0x5) r4 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r5, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) (async) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)="0dc4d61b9e921f455fbd31cc9882d223e9ceee662777c753936f8657ea1071bbcea71b8a44b8883b417edb4d75763cd08b0876107d6ec23e38f634e668c3feb7f094af5335912b35f4546b6bdc2607f48f8d4e66526e4686ec8beb84d81a02c901778903b5b147180d4f0f13766ddbe3a3d9e4deb9dbdd5187b79b9db0aa06f949fb9eda53fc36e917e4f71376a6675d38b24cc481542e4be6589123842a40c5da5ed413163e2b4ced0dccd775881e211f1e204fe16e10e987159ef3458d43dedc82d15510128e516a0865c7070160ffee1b536f67d7e6a1c0f45d7dab573d812ddcaf22d1118bd5202992615cbd54163749049b9f830b1023", 0xf9}], 0x1}, 0x0) close(0x3) (async) close(0x3) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') 2.292119931s ago: executing program 3 (id=3111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x20d6}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000940)=""/9, 0x9}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f0000002e80)=""/4105, 0x1009}], 0x3}, 0xfffff004}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 2.243856532s ago: executing program 0 (id=3112): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000ac0)={0xfffffffd, 0x1d3, 0x4}) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x880) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0xff, 0x1, 0xee9f}) 2.169504535s ago: executing program 0 (id=3113): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x2fd, 0xea94, 0x6, 0xa, 0x4, 0xc091}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x5b, 0x0, 0xfa}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc074b6db8bfb5ea7}]}}}]}, 0x6c}}, 0x40844) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x56) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000000c0)='\x00', &(0x7f0000000180)='./file0\x00', r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000005c0)={0x0, 0x0, 0xc0, 0x3, 0x257, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) 2.144873883s ago: executing program 3 (id=3114): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x50000) close(r0) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0xc, '\x00', @p_u32=0x0}}) 2.108717644s ago: executing program 3 (id=3115): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40802, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="928598954c9465b0753a7b206eec0f5407e1d484e2d6466be8d29ffb07ef23ccd2d59e44139cdf3be1da6eda46363bd7220ab5c4a02853c69c213910bf4ca990ad6d951bf45a1c9940e72ab6850d6f8dfca9ff47cca54fc2210d284415a28611b42f418ccf2929eeb53998fb8c32a325255b05dced0a9f12461524500b2e0dd6f27f13d44babadef9b2b42eb4004b47ca714"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0xe1, 0x0, 0xb47, 0x9, 0xffffffffffffffff, 0x80002001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8c17f, 0x0) r1 = socket$inet(0x2, 0x4, 0x7) prlimit64(0x0, 0x7, &(0x7f0000000200)={0x8, 0x5}, 0x0) r2 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[], 0x24, 0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, 0x0, 0x1ff, 0x0, 0x0, 0xa, 0x0, 0x7d80fd77457c1c45, 0x4}, {0x0, 0x6, 0x0, 0x800, 0x3, 0x8000000000000, 0x0, 0x61}, {0x72, 0xfffffffffffffff9, 0x7ff, 0x4}, 0x1, 0x6e6bbb, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x1d00, @remote, 0x800001}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r5, 0x1, 0x3d, 0x0, &(0x7f0000000000)) close(r3) 1.961630585s ago: executing program 3 (id=3116): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x70bd29, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c805}, 0x8030) 1.95962402s ago: executing program 3 (id=3117): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x22a03) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port1\x00', 0xeb, 0x1b1c07, 0xfffffffa, 0x7, 0xe35, 0xffff, 0x0, 0x0, 0x7, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETS2(r3, 0x402c542b, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000540)={{r2}, "96aeb6c4c822217876c5ee665c478f205ad7e3f20434a7af26b89ccaa155b0f7e56220c090c90a3a1e47d70ed9fe2d77b7bc6a263d3582d870991d984025371ac1641a2741a1207e8f0bba714be478c5590a096dfc12b6da2c126d1888292c366833d7c3975a2660dcd4789ec56a40b7e6a36fc2b71b9fd9bb3a230fbbf8b5b9973659250c3b0f03b2065a53416b112eaaed689f1fa01464dcfbecc1cabc5697496ae2c2f91775c28ef2b32540b164c8f1fa652fbb1f7d4217b917d5468fc8050474de3994119e73de68004a3e06d54bafc550903547dd30df883bf95ae06a2433cf587169a648532ae4e27f3215ec1019e697f3ac8151963bc8ed63fcd06635bbfa79a7c4504224e4367b74a2e0f52976c86980a7a39bf88b59679d193372f5d0bf9ac1cf10697dee4b82e08758326056da58bd95d65b0e73b6ea28ac5f01f2031c7d056342bf364a9707fe62e876eb2dc6d4898e979c4fe7375d46fc189ad9d3afeb2f95b53ec6b53fdce2c5cd9d445ba0a96b88c1e1ec0eb5099459b19747cd09246bf685dc9689f0bddd5885821f013acdb5d422058722c2dc574b1c5addf217152dac799f831fde810cc0e94636ccdeea90cdd298de4dd5357999bd743f723b3f22ed6d9ccdbb2c2ecd4b09910a22257ac2c7fe01f3be66db874c8e95a29610260c33a6f0a800a8d932803d490166861023d6d92d38988663964bfb195df866e1f7ed875d6ffdb851d67187291fe3ff392c2930434e7bc6b1844ca7ce35b621573a0a7ae3c57ed9cb60567eea0882f912a4e7343413b9b1be044f10c8e2f3eefd0268f93cf3b458eaa5534f8ecfa9fc6296aa86f5d811feed8305a01d0d9ae48a9cacaf101215d69eb98e8b39f5b0b6a1f0633d65657f51097e3876c582a67c603a3592fbff33e5c4e29386294e04373062a0795d4c2fa689fd03909f44831c620e56f4a19593dc34283cc3e2b3e7fb85113f6353cb968df60936ed1fae69a3a282ebf33374b3c673fae3d9745be2e1fdf63d8c475808df3beac600c328417c4a87fdd602b4fa19ba1df35ebd408fffaf45ad470bcca3ec69a3efd7d5936c4849093a4c9bbb2a4caba447b0c30b585d959d166bca7529158d97653a8c2d93c238ce3ec8a322b77b11f08b22f37efb07b18d81e7abc34ebad22541c1a21dd7da6a7c4b2f885ef79c31f0193c21e1c88ae1aa83ba8f78bba1bbe775b98449ca22a426e6ecabda0f8d739064faca93d50364323f47a79b6b7c73b7ed008109b44b787100ccba54b1023190d66ad61c5dfe39f61191a16fb51e0e704194792c6a813c94a55fafa7e437a5ebe6797bcd0b58a6f0a5f34488cdf0223141d69db562d32b1ac77e2a080b736fbcd7d3317a4f130f2a43ccdf412abc5acdac7a204165074cf47b1a23d049c5bc946f4820c4620e311fa9025e2477d770053a4d3caf57a52c5cbe4ccb2aab24f82a8d360da17256d816dcd32be99160c54462bcf036469780820bb33985a157e3d9a0f744af530e8400cc40bc628992035e7e20c5898f2114e5337190ab6b28ec52638ac208a4e8fd4155786720e55b337cec33991948aa82cf31e1298d300c782d6e9fd86748034fcd572a3b26a1c011c037332f81b52c3e6ead230d267437dcca36d7090302c6ef5fa534e074056f0681a19e4dca0a5b00a2f04e8455c7a0c461c0d0642229cc18e61b9a38c0a6d2bbab8c038616b196f552a0b505595e6baab0bc7acb4e6c04c38f582ce4aa5a15f2a7329d56d7f7af4d44bc3ecb1327ee9fed53d5c924789669ed6dd9665377d2c3bf250f8da4e1c41c88134a97f101abffacc91c0124abdcb66bc0121862b8a12e2e17ace5774414d8c40a0f48deb0045ba81dd618d217448ebd0f530c4164dd41a9da641f862c9d9581d7cff4b67b43b0f6bd3c6154883f67c12c3f3e3498d4ccdc2a381e2f51edf2388df133926c90007a2db03ef277dd48983afb5652a3bea3de67fbcd6c2981d28e96fb4df2a2b2b09ce22ab12b8966b9c05658e75be0475c1d8bd8f5e0de6d423a8e2d93d710366020bdc3801555ec05845d7fc740f783873a1b44192e45cdf3ffd3c674474e196220a556975b1a16c83499485171d5d22397b13e838099e476c35b128195ac8ca6c91209b9b3d531a55ed65eae8132355fe182cc0233a6b52a0f4c1c814b8a1dbda938a1dc98fc87b5c27b58d365e224dc408267d164f7d6f77deaea1b23d6275d05024827348a543e1c90ea50729b0ad107233e187dda643809d7332455062171b1f1fa2882945dbc3f8336f36b8eec49ea44f9ebb8f9b49b260df769e95990ff591337d990852a04ce0cb8dac4f231d562371ee6858af760544c7381f7aa869744d5acaa207bad829fce535dd785a5112fbda8b4414c9d4ced32e7045283cd99bfa84ee199c8dcae98b2f64e783343b34c5357ddc8c0d7bb3665870df84c6fb0f5d9f4ac6232949b4a2a0fed150760da9a53d5d84c8858857558a66ec5a8b19d596fba41864688431cf73b878605b30d47685fd3c40fd6d396ad5bb37621f6971fb1e7ef2c00bf9b46a984dd271d46c84aacbfb78e2ff1d9557781b131d08dd599ba4eb53d69ba654faacf947538c8cf90a2581f1ee4d899fb5b5cfe78613af825ddec6391144451a6e33e869b27cae097c07f9e0a47b1e6d0891b28f5178d981306461e9795b0205c38255a218b87bf1606f8ae1ea45eee0fdd54978ac94ddaf3384ff1fec918b56fa758b5e6d4ec2f71a8f532d6bd102f596ec309d91a359bcf6b1efc3c80b45f782c711b9c274faac3f7c77d3287bb143c89e688ba0933bee1fd924955a60970f632bcd9b0b6f04e18f0a661d6e40422324578028fc8b8fcbdc5050161b34119dcce3f024f0c05cf2832649b1ff389c3d24a8b1397bd66d4ca0be87528b0145a3115749baaf9a830b364cb1534f9f3be6f0d1ecb2c4180666ea1441bd1a4f726729dc9f38604f32587d73ece4e22e07dc1622b644102de92e1995c0cf44f8a366f5909dd30aec01b7af2df200a463f539dc2648a11b9e47319389d189a91fc7361285d810a19f4ce1b7ad8aa156d8d2d0b4653493049e98dc15e2d2d3972e37a7efa2ec732959b55fd3251cdcb6201228da2cbadbb07469d216cd177c6347950b390622e97c5641fe0c957d7f6f01bda6d70955b752c26a9bdfbd157035c8c8920f563ab7becdf95f6ffe317d34c065dbc6ab4b384374e3423c49bc7dc8366a3f185a34f8735dae7ba6579464dffff2e4bc3d292861da6c5787714fe64fba12176c8980347db71b32721e8b136006c4bc0b8236ce81aaa9e0aa8102e48c9953de87ffa34d38c1c1aba447990a32a296d7f190c8e9c38a14d944219c415d765fc75fde9b26af40f26fa416c201bca2320e4ca0d7ffe2745e0cd62e10b20c9e285fd22a08ca857812f20d9f02b478c6a52ebe3d98e5198ef8e896a2f1514cfd3dcd8dadbc882f9197930197e4c11110cdfd5daf8a7286d8dc132ea95e3e20fb3a805cc2967d586e7de5ea00bdbbf771a4adaceb85746255d782626e7ee6da711771293cab7e6fcec3cafb6aaeffc624b9b67758cee75c9c7d2ce46f0e1e1eb027605151f9a887066c0dd19f67184edb3c012b48f7c69bdd1a953d862b5c6025e775abddf6eb9d6c76abd3ff447851f10ddab5d50530d7a9a53b0ba6b3d573f70637e7c91d423d868c28fb109e6124debc88360818afd8b88d9dfc045da43e443063bbe1c5b9ba107ca7ff9dd38b79f9a38460011816fd0c8da32e2b695d0302554365866b879a758f94498771605138752921beeccce28bef0d064f4c1d03eb2ddefb4d65f9345bd7666c7387e37f44d943e033e1ccb618bfa128d26729c9b487b39dfb82955e88908b3120a9f2a2162516a6a563a20b9fa0116fcb9a66dbceb7c72374fc3713bf379f3fed1fc5bfad51cbe66dcfb01d08aae9bdde3e362e0dcc996963cbf84111ec5042014bb43e30d9019d1c2dba2cf0e882dae91bca6fe3d665074e32741ceddb173aab058a6e2dccbe8f018549bdf7f84668e96f8a412a931d20f08cb40ec10915293d23f8a5e9c2dcd3230160b710d8c862a78e56a79f1dd4d26b008bfd873433e590793d943138fc90e50a27841667f4193f7423459c11100df04585de183f0fc1a94ec963d7be60c5ac44ed2234662a155c6c0df9b5170d18d50c258ea43783449f497ecfaac31f7fb437297349251b87f8b4e559df0c29127b5a911da87853b7fad413dc0bc2c46475eb6519bc9566a951e2b680ca75f740bf7fe92a2e91ada06270032d70ed6604bc6a15b60c97ce32314e5cc2ed6adf69a2f5ef41a49bbc81929f4f56ec0b2a48e3d642c11d251af9a03f6cbf78b135c423897618aad6d29388a5034c149173409cc294c9f4703d75a991d00b85aef5eb2a8ff50881b2f3b107e935aefae10a65ffd7e9408bfded84375b32a8dd4a242eccdb9877232eaa57d9cfdd31d390391dca219c69082c71ca00ece9538bb6e4ca87d0a793fac23be36da7d6145376c6e513312d2f83433ab6758eb2b06a0fa639e2ee8263be6d514aa3cd80dcb63d4d152174d4ee1c323387924387c2f00e8f01357de149ffe124a96b843edf0d537c3a3a92579dab5b968f2157e716314f285adffd75ea9940eefe2ab233ff05f397b62d7c5275092b97fcec8f83fe5b5fd8b36ab59e718d62f441ca14cd919c315b035b7fac07f155c48ee8cc6903deaf9925cb8924db61a8563ba3a2d172e48f67db27d59515b8bc469e2def70c1f3dbb4f84cc3d6440193a02a857f517d5d419553badaacfdb36b70c1ef4e17337b844a6e31e818fb3cdc4ffecffb996381ded7305c86f8996fa5f99363943fc11838a777403e4e8a341f571ccf9b5b07203a35e65fc18e9f8c412b2552e7e8f0a760a7b771d74fee38987c77da7e249c8346d2d93b53a5a33c76cff8d90a652fea8b0fa815bd725c224017c400dfe7b8fbfc9f641b6d0207b1e40a642d8ed9dae01d617c8fb0607fccbb1d4fcdeabbbed49214c4afbd2fba40c3663b5a28bbf906131c7cb2530b06ac9c7027366b4f2eb16adf9cea9438e7a6a8fafcf6af7e9c9db553c66dec9d5470551dcf530c9864d6a3140f013092d160c851b81e6a23abe8dbc0175b10ffc3a7666cb91e310cf1af69d071526279e2ebdfc5d168d2323ee82cbb38499a2c41996fed03513ea4f33ea5dd3e4474b9361057d5f02e2cab0224c7930ac9d29f93603249723876e044529b893439e508330a6194f0beaf96d0b61625607644da00527002330e8896e3e1b1d6979f5b27cbec261ca3c31d16f1e6b765afb4d3cad8c1e6de99c8a64c48b02398d9d9b2267a78940a28b0ea23636fd0b72734c2f10cc9edd7680bf3a32d41b70284adacefe3b3077192ce70ab25ce8acc07b32220ee17920e19f8eb05622653284de197312748d024126ace2e4f2d307c051acbee28c8cb525681358e8bf019ff8e68c57a38a016d43f274a22d9a3fefde40c871b2c224fb67c7a525939af8091fd93bd8608ff4f535948922f5851881d4b26e0d40745e0119ff62673ce70333006a7e5a22d976deed5cfba4273a2d7cb98b769501aee768389930faf8f818c92cad05ef8585fb6d06761b938d4201783d5f8102919d6aa9c2a60001ce4224b69d03b13429d7bc331e18115cc02782c10088fb84664982c14ecaf6c70a8d0cde7b236ad6d3a8ecb7a323df8775481679ae918184c5a99cfb0d9b41be1439da5c716f8b3528d5df5133a4ff4f44a9df97e745bed9b1"}) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000003640)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)}, {&(0x7f0000000300)="229e2f9077bc8c39da13c415bff888b10a5264b5f4cbbfd4450aeb422956f6699b497c0e0c32124f7ef6fc87ab040ed183f64c31173c4099df3353a1272a53d41d2681f1926c6e6dcc95a4ab0e3302ea1e3b6bb986b5193fddbd022afbebc6ffe986ebae83e0088d64", 0x69}, {&(0x7f0000000380)="4e99c8bf50c924ef500dd83b37a6754ebfd68c693202618fab8455a548d48ee56bc6e1c33095a6ea56063c8a194d640dd6", 0x31}], 0x3, &(0x7f00000016c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r1, @ANYRES32, @ANYBLOB="00008c1c00", @ANYRES32=r3, @ANYRESDEC, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400f4df2a276f00000000000001000040465c9161c115dd56625054f0abd0c1ce445039f60a2f65476d01583041c664edee142e0ecb355c99fd60668f8958d8c49c8df247ec96a89b4799db345dea426acfa1b9cf794589e3a597ec1129615f4054e6f67504530db520a4c3d412db231027dee8e2651cb053ae74c6d4e9c3e929a81ffc7e007d3d2a438ac0315d08fbdef4ecb28f990900005ed500"/171, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}}, {{&(0x7f0000002000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002280)="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", 0xfe}, {&(0x7f0000002380)="40843a5ceb891c80471b9f34a7779f7cfa9ff96a704883f81bd5317bfaef2cdb133490cf4cbecc8059de3ef3ac311acae7dd5a089d0fa96052e5f2543de17e73974f218bdfb6cba1d2c01247", 0x4c}, {&(0x7f0000002400)="28291bf7accc8932f7318f62ac5ae5b2b986f033e651790e248387b8a44b6af6ec6e502568e644c8662fd3d65dc34a9433a9df77d6548bf9f880c004f64f5ff04ad6633a66a3a1413de77f7c2830438d97515b464e96345257abe74ed3f235fcc31ffdc301dd6e7424d9d6c7bd568ebab4cc563a52b16ea24cc6a92f002de076e5a7b5a74cf5aa66617f3fc2b1da05cd03fade8e8aa698bb129fa845396b0be88aaaa028e9cc4bab411be712372ec2ba6f3e69b724dd37997c", 0xb9}, {&(0x7f00000024c0)="ba14ff504244f8a0969046a90dcd3c22774f9710dcdaa2c3d2e30aa78fa5342d7decb540369c6c42512d1142218d4c60b6ab1a3d32dda00d4b1e9a5e528939ff7d6df475726cd71754e20b4948ce9236f14109675813b7b56454bbbc461b389527267a002bbcb78fe24be737339214e505e6b0872e7f3650d841c0a20352d4d9f5a23c0facb7dfbc2a2445b0ed6d0d4b0130bb576a52042fa89b33914b17ac98d020d692bc73cd7710e6c4d14c8b03ab4dcffe15316a59df03c7ddba8d8b0cdcb0cdf09b743719fdda1039e282b3d4fce1281261633f4850eebca153a900f723aa0088221f5a35e6473797184e8b", 0xee}, {&(0x7f00000025c0)="0642791679c9cbb9bc1ea5ae9ba2fe57f4d9a93d5c63db830cbb5823ab87d070632889d500053c833d4462a818026d9e86573f75a892ad96e7aa6e8364246e44b34eb2f40921503830729f75ed2cb7b4bcadbecaa43f068d69d752dec0617d849e8e41b6f7a63403deff8c91646dc7de68e18662f80c2225acd8b4d81c4db48f175255135f4c86dca018689012d1079137007b6f0bd93feee7ea21f4e8442817d621afa6fbd96b9be1f0e683ae7f5456b4eae4818549b0fb31cd2bc2da7958f3b5d38f18ada6b4c889f4e854d343a8f6b7c5eb838290c1", 0xd7}], 0x5, &(0x7f0000002740)=[@cred={{0x1c}}], 0x20, 0x4080}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002780)="0e308ba752322ea3a5e1e8dbb448a3545a3953361d532ea3bc0d2caa5eda509bd95c94320a1c83dcb4bb5cff64e676771cfc345c64e3c402543941af1b9184eed085ae973dc449870d59ce86e5167579be6005bbdf052f5467590d49cba0455788f280a29db3ede33af5dd7287b3ac7433580f18255d88463daa2ee8c2960b4c931c7e132d4ea62b38b515e470965f1c43f8383bae05b6ee1447fb6fa17f6eb6fe4bd03d8900afc0287b69b8498ea63ff36bbad3690286e99396bf3a570ddc0a0ddb2510d9149616f7a06f8eb9fc079884af3cf6224a272148f6", 0xda}, {&(0x7f0000002880)="4029804b9341f3b16a414cd67ac7e12684a2223470f2f3409287e2bfce8b62132d448223c58f9071c7c7d430bcf3c9bdb10fb23d4d79db960ed3814ca6d80b85b5d0c674b46f3a7d54ea47f148", 0x4d}, {&(0x7f0000001540)="651cc9b2532560ebc73a298b4f5d5b5759bf20b4796010df709f1d2600c1111f7fba0dc4d08aeb1a7a08ab30b47fcb8fe951c6af9ed8cc7e7b8e7eeff84c9213d0db4e268d592722952744616a3fd79815a68e35da25fe0cab6d61244c028ac3b2160b4d32bc9d23ddc3d978e57e3b055a615bdd6ac63094afffb9000000000000", 0x81}, {&(0x7f00000029c0)="5e9757192a1818513a4d714a808f21aefe44f9c151eda8de7cdbe7512d2e8cb009b591abba047d99a51fc4e56de7ec1a0af9ecf1541852e4236f40b40313b999f93af6bb3a5e29a1a9bd6fd7de498ea6b701b4b88822cbcd2030f6030e8e68c777747fe1d8d1f9367374bf15feca6cea04c728cf260cb2bc7423f85f7343f03aef55f3b7f9dfd90b2721a5828f682262c790f00913f97da810b2bdb03d084d964710169dd11fa83cf3db490e7059c83e4f78dd1d491dad8d18001083c8c0c8ee429d1005806a6cab05", 0xc9}, {&(0x7f0000002ac0)="de1ac955e0c41eed5eaadb49b526867b9dbb7d677333fcf96a918a1466ad283cf14ff4d2b122007660935b8c8a2408f43952364683f7e46091af45c4d37a6050441059b54a00350b070e530d2fadd424f6f5c279bd17", 0x56}, {&(0x7f0000002b40)="972a520c659e7e5d7ac2a82f1ce3df52e53d32af8a905b448a2be45245a7f2a8422c99e09211bf22b912046a36c4f66bfb86a50a6206fd7e1e3df9608a6ab73f71b6618c5b8704e0189c", 0x4a}, {&(0x7f0000002bc0)="4d9478eec899a6022dbc1d974f1b26fbe973f64855a8a436713988f48f847ce2065df845b553d208482925b19d9355bad18290f5b84b3472c5eaf4bf2b1226d882de64a650642fbc98fa1e239715b82b0febf0ca6a53662486c6548e347d5e7c1a65f0c75bb49ae3f84273a7cd1c7a41afe62788352aa6117edf3bbd6ff7c783136d9888b78ad5", 0x87}, {&(0x7f0000002c80)="f7fe14c55d9c3d7b7f0bc380e9c6497562ee419d393648ab0f2f8811424f08df403c5debc91adb043295677b2fc4d4188561349911d3bdf98d25bd285fb8d2ffa3aa7c4d6be133ef2d85a2db568c4d6ad32a0867e9ada702cf12095d2e9091ca91e683709cc150ef0e834cc1f27bac878ca0cd3b3e5a4cbba4e750333d74adb4326cc9a6f97e330799f5886eb96be79aa309b1591413ed3d8c492d7818e4ea744d418e88bf729e", 0xa7}, {&(0x7f0000002d40)="e65f1141e02773b4575494097359a55cc2d97b2a76d4795d87a386a6ba5aaf5edcc3", 0x22}, {&(0x7f0000002d80)="96c58a0d9cdce0fb36f8a387df775f83fa0945c824d351331444cad282d6406687aa960a94ad6b4ac2dfa53046dd64c1bbe88954b707de21e48c40c4aa651f863c01bf3d643e3aba86992c99dc81fa4911352adc833a493cc9157cda8e8820a6e6f90a913db0e7073aaf0dde1da2b63f72d403c8a8cc0ecc288a173923d687f4c34e987c2d6f6c58938288122dff5f8087bc0a708c5ece0d38b214d6ddd78ee0d6dbeb9ccd70d2cc58fd62917b6ec7a0a37c4e198a53a8b19653cf3a5c98dbf20a2ef515f9c3dc5e86edd62837f84ac62c", 0xd1}], 0xa, &(0x7f0000002fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003540)=[{&(0x7f00000030c0)="6bda95b5ab4281daf6cb8b0b90b27fc446b49a56", 0x14}, {&(0x7f0000003100)="b046bed5a78a16129e9cf435f4b1cfe3b90e73778d8904ba6d6e9fcbff13eceb122bb9659a1b8ffbc3e1b761c2b6bc9af35edcd328d1e5b1efada04ef8df6ebb488404e03bacc56410005de64d7d2089b6a61b6b4e40592fe66c47dd40909cbd69c2d993377b716c8e2f76c81302b7232149e56be467a07de33895e0306d34b1d68a831e4ed7e2f75f8302cae2698e7b8c3469f2f763f408b5d8070db0995cd478c922add4f22a15e9f0db7e0484fb026f4dc408a674ed062f22df30ab00c79c148433810438228bf53c5a0a0d5281e1f3ff708f9942c9ae", 0xd8}, {&(0x7f0000003200)="672ba576874df087850bcc827f777fb5b42acd59b43a2a382d56f533cd21092e292d31d9b2ee33894d141dbdb1de45cd70a5c7ba94a6bd7e71ea7e67eda17f73cf20907f40b5866670d91e0573820e111c1a199e3f94c4c10d34d57827d7b5ece657d8af7f7751e4caaa5108defbb5dac51de6e30e774d19849a1fbad08eb50d8b459376df0d1fb058ae16321a4725cb8d8eee497abc2a74a4eff5caa66fbd8563deb477e1f75b7c2ee3ddeb67838e27c3f5d6a2cb782a7c026b9a03f8e0f78ff263acae9655", 0xc6}, {&(0x7f0000003300)="ec16087f281f644054d9f9ab5466a5da46c556e4b838a65793a0ff8a8c2bd34fe64b6854054ac73fc880f556e93a30848484382293b5dafa74b58d8237a12c0101cbb73a2e9ced552f52b1f5e61b20496a4351b19f0efbe5f8255d8594b68fe96ff705cf7050f5f18c8b0ba45fd50a28931d19b0fab328436f4d717d3b20dbe6ac109894cd0ea08608f7f6678c8c8454d5b6e045b6623516cd0245fc4f36037d1d2c6f8d92b14ba1929a598a7642ddef5a5cd0cd24af5031f353bf93543623c10fb0", 0xc2}, {&(0x7f0000003400)="83ea013d147730ee81963de1b3d19f89e7f1caa07bd95ca676900fc07ef18d87271f481a9b4f6b40d32fa4ffc98eda1523dd1fa26491ea4f7c0bb8ae31fe13f83ddddc6f8336653c71a7ae034645efec6ffda5d1f097636d2df9dd56b732e5132f00b95a4ac320d47197b8b787", 0x6d}, {&(0x7f0000003480)="9a2af7acfc32cce16d587e5c677b97a6967fbd6303311ab6a0942465f5d46d1336a99dee8c272abe09c9f53c95593ba17b8dff6af327ccd258bf355d5dfe35f14f80a0f15327202892570e61b6a90eed54bd3595f02f647dabb0742875bed2679476cc2b7e7e435813129020573657c46b175fe326b67f268863597351fa9097c1db79d26b4c48beff90f10d18", 0x8d}], 0x6, &(0x7f0000003600)=[@rights={{0x1c, 0x1, 0x1, [r8, r8, 0xffffffffffffffff]}}], 0x20, 0x8904}}], 0x4, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet(0xa, 0xa, 0x85) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0xfffffffd) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001000), 0x581, 0x40000000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) 1.728553696s ago: executing program 2 (id=3118): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="de57d3d2f16456a3699617a2d0d9d0c67b6a0cd3633f2f28a68b2ebc155de8d61a79195f91a135c406e0167ed5cf7c056439a3be6656ad4ec2e0ffab2e6fde1281d2b7571dc59ec28d3e22002890cc24f2f11d47f08d3aafd7d391ce1fb70d502f35cddef5ffc013d8ec1069c0a82b58527f4ef85af225b0289466771461e1d749388c000edef70cb41ae4248a07557f8ad9aa74ac9c74cf2742da317f05a7e36f0eb98561d785637cad766b3a7d4babf58557f8046d6ba34d5a7fe5fbb580f9a71236224f96190070d32cbe05f749f3665d044bee5ad559b8aac66dc1dff83892c3583d203c4812fda8a0b6a1472b", &(0x7f0000000140)=@udp6, 0x4}, 0x20) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz0\x00', {0x9a0e, 0x5, 0x6, 0x3}, 0x9, [0x5, 0x4, 0x9, 0x1, 0x0, 0x7, 0x7, 0xd24, 0x8c8, 0x1, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x3, 0x5, 0xfffff58f, 0x1708, 0xffff, 0x8, 0x8, 0x7, 0xac, 0xa, 0xe59, 0x4, 0xab6, 0x2, 0x1d, 0x7, 0x5, 0xffffee55, 0x9, 0x9, 0x6, 0x2, 0x7, 0x10001, 0xf874, 0x6, 0x1, 0x7ff, 0x4, 0x0, 0x4, 0x0, 0x7fff, 0x5, 0xc0000000, 0x4, 0x10000, 0x3, 0x0, 0x5, 0x1, 0x0, 0x8, 0x80000000, 0x4, 0x10000, 0x5, 0x7fff, 0x80000000], [0x9, 0xffff, 0x30, 0x6, 0x7b9, 0x10000, 0x800, 0x1, 0x9, 0x4, 0x9, 0x5, 0x9, 0xfffff833, 0x3, 0x3, 0xed, 0x21e, 0x3c7b, 0x6, 0x4, 0x0, 0x9, 0x0, 0x200000, 0x9, 0x9, 0x6, 0x47a1, 0x0, 0x1, 0x4, 0xec4, 0xd5ef, 0xfff, 0x7, 0x8992, 0x88e, 0xfff00, 0x1, 0x5, 0xe, 0x575, 0xffff, 0x8, 0x4, 0xd0, 0x9, 0xf1, 0x1, 0x80000000, 0x86000000, 0x1, 0x9, 0x400, 0xbc24, 0x3f93, 0x8c, 0x5, 0x8, 0x8000, 0x7, 0x8, 0x57b2], [0x3, 0x8, 0x6, 0x1, 0x2, 0x1, 0x7, 0x1, 0xc, 0x98a, 0x9, 0x2, 0x9, 0x78, 0x1, 0x81, 0xffffff2a, 0x1, 0x8, 0x9, 0x0, 0x37e2, 0x7, 0x6, 0x6, 0x2, 0x2, 0x0, 0xe9a, 0x1ff, 0xe7, 0x7de, 0xfffffe8d, 0x4, 0x0, 0xfff, 0x4, 0x2, 0x4, 0x7, 0xd8, 0x0, 0x8000, 0x163e, 0x7, 0xfffffff8, 0x1, 0x7ff, 0x2c97d66a, 0x6, 0x3, 0x9c6, 0x6, 0x0, 0x6, 0xbfb, 0x8, 0x6, 0x0, 0x401, 0xfff, 0x7c1a, 0x3a, 0xa], [0xffff8000, 0x80000001, 0x2, 0x7fffffff, 0x204, 0x40, 0xf, 0x0, 0x8, 0x3, 0x0, 0x80000000, 0x0, 0x3ff, 0x401, 0x8, 0x3311, 0x3, 0xfffffffd, 0xe, 0x8ca4, 0x0, 0xda, 0x9, 0x1, 0x0, 0x9, 0x1, 0x98, 0x3, 0x9, 0x2, 0x6, 0x1, 0x6, 0x8, 0x7, 0x7, 0x7, 0x401, 0x8, 0x10001, 0x0, 0x5, 0xa95a, 0x100, 0xa, 0x40, 0x2, 0x3ff, 0x3, 0x4, 0x4, 0x8000, 0x9, 0xe0, 0xfffffff9, 0x75, 0x7, 0x7, 0x5, 0x1, 0x7, 0x4]}, 0x45c) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x20, 0x5, "", [{{0x9, 0x4, 0x0, 0xf1, 0x2, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x3, 0xff}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x6, 0x8, 0x0, 0x8, 0x8}, 0x6c, &(0x7f00000006c0)={0x5, 0xf, 0x6c, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa7, 0x7, 0xb, 0x5, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "04b23fc102bd9062175fc0a575669823"}, @generic={0x22, 0x10, 0x3, "66705c2fc70955824f2315c3e8e45e27743dbda5f9e145a637e6473f35e09b"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x3, 0xf00, 0x1ff, [0xf, 0xff00a0, 0xffff0f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0xf, 0xb}]}, 0x1, [{0x9b, &(0x7f0000000740)=@string={0x9b, 0x3, "cbc9d3c4165df06103a1a340d2219abb28a6161814773a5e85cb994e12361dc8fdf09e02c8dccec9edb292878ee9198a71363c47b262fec924952e6e8ebfa55d0d0e63f0fe9fe3fce997ad2fdd3f8837ceb032fd1e23f5401eae492c696d3057ee8bebe7da240445c289068b61341a070430f97031b1e7d9baac502dc4194bb1079e17ecfbec64bc229836f92dbaf71f1bb5ac52d48490e145"}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x8001, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000880)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001f80)={{r1, &(0x7f00000008c0)='/dev/nvme-fabrics\x00', 0x1012c1, &(0x7f0000000900)={@align=0x2, {0x80, 0x4, 0x4e, 0x7}}, 0x10000, &(0x7f0000000940), &(0x7f0000000980)=0x857f}, 0x6, &(0x7f0000001ec0)=[{0x2, 0xa03, &(0x7f00000009c0)='/dev/kvm\x00', &(0x7f0000000a00)="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", 0x1000}, {0x1, 0x3, &(0x7f0000001a00)='{{%$\x00', &(0x7f0000001a40)="a746fe1c2edf4c4c4a34d243581b6c940721e7392e9cf0b622350ef8aabc0cd562aa5d725b4f1fbb0f796c677df91fc84378b4b0f679f2c7b2f9474249b269412efac7ebd9c46d28667df14b4ba1a036c7e850be9049070e4fd1a25cfa523d1c7dbf24f15c9de0870ab1db3a508e6543402f5658e5cdffbade19156496fb50c62dfa7ea14c8fea5d38d3701fb7f3567d3970ba18ffae84cbce0796fbca9ed33c4c860d880add7f4528d7c12774d079af5605d6a6595e8d9007831151269ec7373faa28c96274af0429ccb71ba67deb00d8b58011381be6c493c3fbced2108d35b67498eb01924ddfbc84ea0203c7be", 0xef, 0x8}, {0x1, 0x3, &(0x7f0000001b40)='%\x84:\x00', &(0x7f0000001b80)="ca7a8b1dd6c190245143a601bbc89c6526c3eef5", 0x14, 0x8}, {0x1, 0x7, &(0x7f0000001bc0)='/[\x00', &(0x7f0000001c00)="2210a195a4d9af2d6c04a5f85257a9f1c17f61a9246d31b19ebe8676798b4412090e0a3950f73511fa0809b9639701269b51ffc5b1f04441a08ca6fbc0faa2b824e817364899312dd3b5ca1bfcd278f24ff1ad1243d6dc732e7f8be409bd5d3a18c600f261eb1be6d084d09e71bd5dc94af7d49203385fa9add915cac9a7850dd640a344fdc19236594d3145f26566a8a3befc3102932689d4cc9aaba03940f24e1ee17c78da500424f5569caeddf4b90516e3675e12fbccfaa5984572b5044da784e025c564ceb4b9d257", 0xcb, 0x8}, {0x2, 0x6, &(0x7f0000001d00)='/dev/kvm\x00', &(0x7f0000001d40)="d11b9b6d747a3ec0490f33647ec75ebe4a9d08e5f38411f2d596128e9a0acdb33702cce850f0eee2ef0d8271c51f128d5a79902bf01b525f47a240a9487a934cdb36a284655d29f45f71a17878022981a610b5d791cbf28d64ea8c83e93f103deff569a3fdac845eaf1723781f576b52c4bbc9b1e03a", 0x76, 0x8}, {0x3, 0x46a6, &(0x7f0000001dc0)='!/@,&.-\x00', &(0x7f0000001e00)="35940256114188c22cd620c0a26c80fcd09bbc859e6b6de7ecbf4d7b58fc61c1a0b1122b98c5cf4c05e3cb605f7570f865950d1e2143607cb2602d1709f88f2aee3086cf605042c9bf84317ac9e00c91a1b7f17d4026fc40d9c29b91a9e6a909bf9203b14f3080d8288f20ab8b773bede7929fc366e05289174b8687137384482c000586fae7fb7abebba7e33a9f7384f7b9880d8e9be0a3b1acbc372cabe4eec46d", 0xa2, 0x38}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000020c0)={r0, 0x58, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000002240)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002200)={&(0x7f0000002140)=@dellink={0x98, 0x11, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x600, 0x20}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xffffffff}, @IFLA_GROUP={0x8, 0x1b, 0xa}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x147c}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x80000000}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0xfc9}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x100c0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_io_uring_setup(0x7b2d, &(0x7f0000002280)={0x0, 0x8025, 0x2000, 0x2, 0x187, 0x0, r0}, &(0x7f0000002300), &(0x7f0000002340), &(0x7f0000002380)) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) write$cgroup_devices(r2, &(0x7f00000023c0)={'c', ' *:* ', 'rm\x00'}, 0x9) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000002400)={'binder0\x00'}) socket$xdp(0x2c, 0x3, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000002540)={0x9, 0x1, 0x2, 0x4, 0x10, "86569d53c3994bb8c83ff7db870f8b7f021504", 0x7, 0x7fffffff}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000002580)={0x0, 0x0, 0xe2, 0x0, 0x1, 0x0, 0xdae, 0x8, {0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x3, 0x2, 0x3, 0x5, 0x40}}, &(0x7f0000002640)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000002700)={r8, 0x68, &(0x7f0000002680)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0xd76, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000002740)=0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002780)={'wg1\x00'}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f00000027c0)={0xfffffffd, 0x2, 0x1, '\x00', 0x4}, 0x1) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002800)=0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, r9, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000002840)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r5, 0x5, &(0x7f00000028c0)={0x2, 0x4, 0x80, 0xff, r10}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002900)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002940)=[@in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, @in={0x2, 0x4e22, @multicast2}], 0x2c) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000002980)={0x6, 0x5, 0x4, 0x9, 0xfffffffc}) 1.159792501s ago: executing program 0 (id=3119): syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d0000480000000000069078ac1e0001ac141411830775e000000244100523000000000000000000000000865c0000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P\x00\x00\b\x00'], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/154, 0x9a, 0xe4) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb8524e9023e364d3}, 0x800) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x2, 0x3, 0x1, 0x40, 0xc, 0x7}, @mpls={[{0x3}, {0x96667, 0x0, 0x1}, {0x6, 0x0, 0x1}], @generic="ad562cef35169956889f7882000017772a5d10016363fb9ff8436e6688fa957e70987837d8daed92734a397088880daebbe596e1f861228835b537223e33e4f7510ec6cba5f759c4d76dc640c801a2ba8d7e5dcaf1cf2c113ce77a2b559be71d0000000000000000000000618e2cd3d508708409f6fdd6da543ba8b7a8abccd31b0d55fa6796e9951e1a0366694afc50a5d7d121fa8e82a549f0a6808a03ca7084b438d808ebb0e8f72d1c067d214847bd727f52c69555de77de29956a55b9bae3123299d78b1eb26a9600"/212}}, 0xea) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000002010108000000000000f600000000070c0019800500"], 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0x84) 1.085632619s ago: executing program 4 (id=3120): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200f32415000000000000109022400259700e80b09040010010300000009218100801122e30109058103"], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010102000008402505a8a44000000003f908021b000101cc0009090400060207010203090501020002b2790827c93a6de01c5c6f6c158f1f0607f63e6cfdd823bf0561efe8733909b42b6c476b9b044d7af9f4f52acc2d647ea7702b4ee8f732cbc3aefb150ea3e6e71ceaa352ce39023cdf094086535e0040635dfd773f16b4018943cffda8005cf599ad426f573531bf33395717faca856d02e14fde12f0636ab9c1b44269bfbd6786e130ba859021335131470e41365fde7e3821f100"/205], &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xf, 0x73, 0xc, 0x8, 0x86}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd0, 0x0, 0x4, 0x40}]}, 0x1, [{0xc5, &(0x7f00000002c0)=@string={0xc5, 0x3, "aa27e59a721d3dff9031c381085fcdef886f923387474f068c02122156eb9911e17b37791c0c873eac2763090de95891809a0ddee94d9df9ada7f6e519cc60acc03e09f697ce1d9f4cea3c2bb508d04f332ca7b2ac46dc33f13e227a2cdbedede5cbfacd2f07c6d5c786c9b54fb68089736905b64e31ed88fb564455036331cc54095ecaeab88613ddf96d104747bffd425ec73c5e761d0e2a50ace281a5cfa44424daf5fdd2f8b46d10a0a90b3f6bb5f8f53211af4fe96ec61b85d1d0c33fcfe905bd"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.057348102s ago: executing program 3 (id=3121): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x19b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x8, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0xd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x1, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x40, 0x8, 0x70}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000009) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)='n', 0x1}], 0x2, 0x18, 0x0) sendto$inet(r4, 0x0, 0x5e, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd910ac0089289bf7c00bca5962c5bfb1a716ddd4cb96d929560eff333276dafb9550ec99b1b442aecb50f40d5615c1fd482b394607e18b1db2a25c0404c3080f22f3b96c8e3cd04ea9f341f890e916f7b230d9f969ed11b3ec826f08e85af851f034de92684a3e1ac765967623f0244a41cb9d7a1441909a5679b5fe088a4422e77db13eb1f", 0x89}], 0x1}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) sendmmsg$inet(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc11", 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x298}], 0x1}}], 0x2, 0x42054) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x20, 0x8, 0xa, {0xa, 0x31, "f70ba38103000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 330.664872ms ago: executing program 2 (id=3122): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0xa, @pix_mp={0x3, 0x4, 0x32315241, 0x6, 0x9, [{0x101, 0x4}, {0x4, 0xd7b}, {0x2, 0x5}, {0x9, 0x200}, {0x4, 0x6}, {0x9, 0x3}, {0xa0a7, 0x40}, {0x8001, 0xb7d3}], 0x0, 0xd9, 0x4, 0x1, 0x1}}) (async) mknod$loop(0x0, 0x8fff, 0x0) (async) move_pages(0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x8, 0x57, 0x10001, 0x2, 0x5, 0xfffffff3, 0x8, 0x3, 0x40, 0x7ffe], &(0x7f0000000000), 0x0) (async) r1 = syz_usb_connect(0x4, 0x36, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d130f0100000000000d000a0006471a010000190581"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) (async) r4 = syz_usb_connect$midi(0x1, 0x24, &(0x7f0000002e40)=ANY=[@ANYBLOB], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x5c1201, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'vlan0\x00', @link_local}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0x40}, {0x20, 0x0, 0x10, 0xfffff00c}, {0x6, 0x0, 0x2}]}, 0x10) (async) write$tun(r7, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES8=r3, @ANYRESHEX=r4], 0x3e) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f0000000100)=0x1) (async) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 0s ago: executing program 1 (id=3123): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80a0}, 0x4000) r0 = memfd_secret(0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d00000904010102020d00000905820200020942f90905030210"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000206a05320040010102030109022d000101099000090400070203010300092100000701225f0d090581039f07a10780090502030004088306"], &(0x7f0000001a80)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x2, 0x8, 0x7, 0xcf, 0xff}, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="450f1400020c100359d64fd0850462461128000f"], 0x1, [{0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x5024}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000001ac0)=ANY=[@ANYBLOB="20054e0000004e23aafb9850df283668d251c6775e2f9c24f9d16fe831cf2c2958bd319bd95d4b4651a882dae40014188ae73ba38d5bb6062305800bd24adc4e5c8cd595832ea771ed1e9047c37b0dcc7da1b59c102afa1b0b82c4edceb4a848c6f2a9c21bf71cc19039960ac43b76f382a3abdbcc3b6a9f484d803aae4bc7840c0c08e1fe83858e32b484ae170532afe408c9e6e757577df013165aad019e639157e828ed43e1450eb01bb035208c73c492"], &(0x7f00000019c0)=ANY=[@ANYBLOB="00030500000004031e049a7d75e1b4f78b731881e9c3e91d22d3e296ee4ca5aae6749deff84e478355a50c838baa4c6b336c9da928d2b38e04d2c4628a7ac0c6c35975798e5423b33d9e1a6ec215a0878084dfb373bc9529e3d518c13aa63fb8fdf19de4a0a02b775dd21306ae8f0588e326f193106f57019e1295b2f2e01746e7452bb3d54ba18deaa9d001801b897f5b0d22fddfb57b44ab41f4481206b2d1947dacd1f9e1d672c9a0bfedb1d3cac6946712c5535cd7e041392540cc"], &(0x7f0000000380)=ANY=[@ANYBLOB="00221600000009668bd3802a5eb30aede54c93e193d6888300ff0000"], &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x256}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x23, "d9450fd2f5a318dcaed98b5a33c63376438c696e4139e2c5465220898daf5b222183e8"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x97}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000600)={0x20, 0x1, 0xfb, "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"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x1a}}) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, &(0x7f00000013c0)={0x0, 0x1, 0x28, {0x28, 0x1, "b0db07f1a3bf895d09d15eaeb8a2ad0f7e3e88c0d32f39220fc656eabeb848e3842673abd407"}}, &(0x7f0000001400)={0x0, 0x3, 0x92, @string={0x92, 0x3, "7ef9004ac39efaf225ae9f13978327449e152686c1ea09b8a89671da94e62b1b6d082b2949bcd60982adc88433bf371e34c82089478d48005a286ad5b056425fa433981d4dcf8b62b9d1854af703fa79cd948b9312737d4630c1806bffef424628e0a8ef9fbd6698d2e04f9fd4312280e1f2ac80f4d94e4fd38fc9a58ff67ff94a5e2ff5447059cdddd5db7fc78f0a1b"}}, &(0x7f00000014c0)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x2, "d5787a8a"}, @main=@item_4={0x3, 0x0, 0x8, "610c5fe9"}, @main=@item_012={0x2, 0x0, 0xc, "cba6"}]}}, &(0x7f0000001500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x94b}}}}, &(0x7f0000001840)={0x2c, &(0x7f0000001600)=ANY=[@ANYBLOB="00000001000085f332d7793ce3c47211e6bcc8e4b63c9a8d1c9ee146d31a770b9a9ef84fb421bc90880dff7a43535554d19b80de53fd637d71bc41862849d513e0d446d6c20ea7e9f9e704b2363e1ead5689a85515e6dafc9e5a145bdd2e7bcfe0c9202cc537d363cf4d199a1e06ec0041520fbeedffe17af7ffffff671103145407e163852376721bc698be4944c1af37ef957276069b23ace398ca3f5bbb05566cc75ab9c924dc7c3c1ac8da7239b7ff0f67f6bd4a06a583227b539c8e483f168a8dc78a31161c650c087b9a9a690b75f2c4fe34b34b7e65bff8c33ed827fcd04a625b888b13b1df9292e388cb1105f1ff055edadcc7a8"], &(0x7f0000001740)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000017c0), &(0x7f0000001800)={0x20, 0x3, 0x1, 0x8f}}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x400, 0x28e9c2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000080)={0x0, 0x0, r5}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xb30, 0x539, 0xf, 0x7, 0xf, 0x40, 0x2, 0xfff, 0x7fff, 0x4, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000000c00000095"], &(0x7f0000001880)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x48084) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0}, &(0x7f0000000800)=0xc) syz_open_procfs(r7, &(0x7f0000000840)='net/arp\x00') r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 5690][T13186] usb 2-1: Cannot set autoneg [ 664.542932][T13186] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 664.578164][T13186] usb 2-1: USB disconnect, device number 69 [ 664.602588][ T50] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 664.610189][ T50] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 664.655553][ T50] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 664.819789][ T4992] Dev loop2: unable to read RDB block 7 [ 664.833488][ T4992] loop2: AHDI p1 p2 p3 [ 664.839496][ T4992] loop2: partition table partially beyond EOD, truncated [ 664.847959][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 664.854892][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 664.881208][ T1843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.938196][ T1843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.196636][T13211] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 665.206244][T13186] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 665.207866][T13210] usb write operation failed. (-71) [ 665.239922][T13210] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 665.242116][T13185] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 665.262423][T13210] dvbdev: DVB: registering new adapter (Terratec H7) [ 665.270984][T13210] usb 1-1: media controller created [ 665.280208][T13210] usb read operation failed. (-71) [ 665.285826][T13210] usb write operation failed. (-71) [ 665.299511][T13185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.320026][T13210] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 665.330711][T13185] usb 5-1: can't set config #1, error -71 [ 665.342706][T13185] usb 5-1: USB disconnect, device number 92 [ 665.351291][T13210] usb 1-1: USB disconnect, device number 38 [ 665.377125][T13211] usb 2-1: Using ep0 maxpacket: 8 [ 665.384759][T13211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 665.398035][T13186] usb 3-1: Using ep0 maxpacket: 8 [ 665.405309][T13211] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 665.415211][T13186] usb 3-1: config 7 has an invalid interface number: 162 but max is 1 [ 665.415240][T13186] usb 3-1: config 7 has an invalid interface number: 23 but max is 1 [ 665.415275][T13186] usb 3-1: config 7 has an invalid interface descriptor of length 2, skipping [ 665.415296][T13186] usb 3-1: config 7 has no interface number 0 [ 665.415315][T13186] usb 3-1: config 7 has no interface number 1 [ 665.415356][T13186] usb 3-1: config 7 interface 23 altsetting 48 bulk endpoint 0x5 has invalid maxpacket 1023 [ 665.415382][T13186] usb 3-1: config 7 interface 23 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 665.415412][T13186] usb 3-1: config 7 interface 162 has no altsetting 0 [ 665.415432][T13186] usb 3-1: config 7 interface 23 has no altsetting 0 [ 665.420342][T13186] usb 3-1: New USB device found, idVendor=0b62, idProduct=0059, bcdDevice=38.9c [ 665.444116][T13211] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 665.451742][T13186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.456023][T13211] usb 2-1: Product: syz [ 665.467440][T13186] usb 3-1: Product: syz [ 665.480995][T13211] usb 2-1: Manufacturer: syz [ 665.512730][T13186] usb 3-1: Manufacturer: syz [ 665.519289][T13211] usb 2-1: SerialNumber: syz [ 665.524836][T13186] usb 3-1: SerialNumber: syz [ 665.753707][T13211] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 665.763485][T13211] usb 2-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 665.771828][T13211] usb 2-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 665.782879][T13211] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 665.791579][T13186] usb 3-1: USB disconnect, device number 29 [ 665.963042][T13211] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 665.973384][T13211] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 665.984526][T13211] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 666.126671][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 666.156390][T13198] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 666.179807][ T1899] UHID_CREATE from different security context by process 52 (syz.1.2893), this is not allowed. [ 666.306224][T13198] usb 1-1: Using ep0 maxpacket: 8 [ 666.315504][T13198] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 666.325379][T13198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.334213][T13198] usb 1-1: Product: syz [ 666.338620][T13198] usb 1-1: Manufacturer: syz [ 666.343301][T13198] usb 1-1: SerialNumber: syz [ 666.354950][T13198] usb 1-1: config 0 descriptor?? [ 666.363717][T13198] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 666.372920][T13198] dvb-usb: bulk message failed: -22 (2/0) [ 666.383817][T13198] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 666.399958][T13198] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 666.412766][T13198] usb 1-1: media controller created [ 666.427489][T13198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.449285][ T4992] Dev loop2: unable to read RDB block 7 [ 666.455008][ T4992] loop2: AHDI p1 p2 p3 [ 666.462512][ T4992] loop2: partition table partially beyond EOD, truncated [ 666.471169][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 666.478290][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 666.597116][ T4992] Dev loop2: unable to read RDB block 7 [ 666.602879][ T4992] loop2: AHDI p1 p2 p3 [ 666.608475][ T4992] loop2: partition table partially beyond EOD, truncated [ 666.615874][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 666.626999][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 666.646208][T13185] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 666.796252][T13185] usb 5-1: Using ep0 maxpacket: 32 [ 666.809983][T13185] usb 5-1: unable to get BOS descriptor or descriptor too short [ 666.821322][T13185] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 666.829760][T13185] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 666.838556][T13185] usb 5-1: config 14 has no interface number 0 [ 666.844954][T13185] usb 5-1: config 14 has no interface number 1 [ 666.852049][T13185] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 666.864144][T13185] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 666.877290][T13185] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 666.889045][T13185] usb 5-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 666.902611][T13185] usb 5-1: config 14 interface 57 has no altsetting 0 [ 666.909891][T13185] usb 5-1: config 14 interface 228 has no altsetting 0 [ 666.920459][T13185] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 666.930771][T13185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.939783][T13185] usb 5-1: Product: syz [ 666.944732][T13185] usb 5-1: Manufacturer: syz [ 666.949637][T13185] usb 5-1: SerialNumber: syz [ 667.367356][T13185] legousbtower 5-1:14.57: interrupt endpoints not found [ 667.548803][ T4992] Dev loop2: unable to read RDB block 7 [ 667.555163][ T4992] loop2: AHDI p1 p2 p3 [ 667.560386][ T4992] loop2: partition table partially beyond EOD, truncated [ 667.570261][T13185] legousbtower 5-1:14.228: interrupt endpoints not found [ 667.578517][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 667.590215][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 667.894216][ T4992] Dev loop2: unable to read RDB block 7 [ 667.900117][ T4992] loop2: AHDI p1 p2 p3 [ 667.904480][ T4992] loop2: partition table partially beyond EOD, truncated [ 667.912889][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 667.920410][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 667.983731][ T491] usb 2-1: USB disconnect, device number 70 [ 668.023603][ T491] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 668.070438][ T2025] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2903'. [ 668.086753][ T491] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 668.112925][ T491] visor 2-1:1.0: device disconnected [ 668.206452][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 668.280083][ T4992] Dev loop2: unable to read RDB block 7 [ 668.300550][ T4992] loop2: AHDI p1 p2 p3 [ 668.317698][ T4992] loop2: partition table partially beyond EOD, truncated [ 668.332419][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 668.340513][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 668.789064][ T2065] syzkaller0: entered promiscuous mode [ 668.802068][ T2065] syzkaller0: entered allmulticast mode [ 668.811302][ T2064] 0: reclassify loop, rule prio 0, protocol 700 [ 668.845176][ T2060] kvm: pic: single mode not supported [ 668.845199][ T2060] kvm: pic: level sensitive irq not supported [ 668.914260][ T2060] kvm: pic: level sensitive irq not supported [ 668.950057][ T2060] kvm: pic: single mode not supported [ 668.962770][T13198] cxusb: set interface failed [ 668.973358][T13198] dvb-usb: bulk message failed: -22 (1/0) [ 669.006633][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 669.007281][T13198] DVB: Unable to find symbol mt352_attach() [ 669.030135][T13198] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 669.080783][ T2091] syzkaller1: entered promiscuous mode [ 669.089627][ T2091] syzkaller1: entered allmulticast mode [ 669.180462][ T2106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2910'. [ 669.209203][ T2106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.219025][T13198] rc_core: IR keymap rc-dvico-portable not found [ 669.219045][T13198] Registered IR keymap rc-empty [ 669.224469][T13198] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 669.261514][T13198] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input85 [ 669.297805][T13198] dvb-usb: schedule remote query interval to 100 msecs. [ 669.297844][T13198] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 669.353596][T13198] usb 1-1: USB disconnect, device number 39 [ 669.454869][T13198] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 669.523878][ T2060] kvm: pic: level sensitive irq not supported [ 669.702090][T13185] usb 5-1: USB disconnect, device number 93 [ 669.921513][ T30] audit: type=1326 audit(1782126642.048:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 669.921722][ T30] audit: type=1326 audit(1782126642.048:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 669.951663][ T30] audit: type=1326 audit(1782126642.078:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 670.006923][ T30] audit: type=1326 audit(1782126642.128:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 670.062706][ T30] audit: type=1326 audit(1782126642.138:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 670.110300][ T30] audit: type=1326 audit(1782126642.138:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 670.164100][ T30] audit: type=1326 audit(1782126642.138:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 670.210752][ T30] audit: type=1326 audit(1782126642.158:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 670.241290][ T30] audit: type=1326 audit(1782126642.158:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 670.266494][ T30] audit: type=1326 audit(1782126642.158:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2133 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d42b9ce59 code=0x7ffc0000 [ 670.297369][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 670.310528][ T2140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.365204][ T2149] fuse: Bad value for 'fd' [ 670.698040][ T4992] Dev loop2: unable to read RDB block 7 [ 670.708679][ T4992] loop2: AHDI p1 p2 p3 [ 670.716518][ T4992] loop2: partition table partially beyond EOD, truncated [ 670.725119][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 670.732940][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 670.756491][T13186] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 670.816652][T28758] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 670.926887][T13185] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 670.934753][T13189] syz_tun: tun_net_xmit 70 [ 670.941649][T13186] usb 2-1: unable to get BOS descriptor or descriptor too short [ 670.950956][T13186] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 670.954675][T24806] dvmrp0: left allmulticast mode [ 670.966689][T28758] usb 5-1: device descriptor read/64, error -71 [ 670.978474][T13186] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 670.987895][T13186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.997651][T13186] usb 2-1: Product: syz [ 671.001932][T24806] tipc: Resetting bearer [ 671.002001][T13186] usb 2-1: Manufacturer: syz [ 671.014456][T13186] usb 2-1: SerialNumber: syz [ 671.032562][T24806] tipc: Disabling bearer [ 671.142919][T24806] bond25 (unregistering): (slave geneve3): Releasing active interface [ 671.146564][T13198] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 671.152090][T24806] geneve3 (unregistering): left allmulticast mode [ 671.170343][T13185] usb 1-1: Using ep0 maxpacket: 32 [ 671.200411][T24806] tipc: Disabling bearer [ 671.209226][T13185] usb 1-1: unable to get BOS descriptor or descriptor too short [ 671.233404][T24806] bond0 (unregistering): Released all slaves [ 671.239902][T28758] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 671.251603][ T2154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2915'. [ 671.263920][T24806] bond1 (unregistering): Released all slaves [ 671.272697][T13189] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 671.285863][T24806] bond2 (unregistering): Released all slaves [ 671.295895][T13185] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 671.306613][T13198] usb 3-1: Using ep0 maxpacket: 32 [ 671.323064][T13185] usb 1-1: can't read configurations, error -61 [ 671.331837][T24806] bond3 (unregistering): Released all slaves [ 671.345948][T24806] bond4 (unregistering): Released all slaves [ 671.360174][T24806] bond5 (unregistering): Released all slaves [ 671.369628][T13198] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 671.380167][T13198] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.382887][T24806] bond6 (unregistering): Released all slaves [ 671.395069][T13198] usb 3-1: config 0 has no interface number 0 [ 671.396764][T28758] usb 5-1: device descriptor read/64, error -71 [ 671.414202][T13198] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 671.425042][T13198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.433890][T13198] usb 3-1: Product: syz [ 671.438679][T13198] usb 3-1: Manufacturer: syz [ 671.443336][T13198] usb 3-1: SerialNumber: syz [ 671.458441][T24806] bond7 (unregistering): Released all slaves [ 671.462197][T13198] usb 3-1: config 0 descriptor?? [ 671.475222][T13198] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 671.476417][T13189] usb 4-1: Using ep0 maxpacket: 16 [ 671.493937][T13198] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input86 [ 671.506411][T28758] usb usb5-port1: attempt power cycle [ 671.512076][T13185] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 671.529451][T24806] bond8 (unregistering): Released all slaves [ 671.545995][T13189] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 671.560051][T24806] bond9 (unregistering): Released all slaves [ 671.566792][T13189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.583608][T24806] bond10 (unregistering): Released all slaves [ 671.590607][T13189] usb 4-1: config 0 has no interface number 0 [ 671.610265][T13189] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 671.621435][T13189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.634864][T24806] bond11 (unregistering): Released all slaves [ 671.641751][T13189] usb 4-1: Product: syz [ 671.654378][T13189] usb 4-1: Manufacturer: syz [ 671.659408][T13189] usb 4-1: SerialNumber: syz [ 671.678067][T13189] usb 4-1: config 0 descriptor?? [ 671.697226][T13189] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 671.704959][T24806] bond12 (unregistering): Released all slaves [ 671.721629][T13189] uvcvideo 4-1:0.105: No valid video chain found. [ 671.735413][T24806] bond13 (unregistering): Released all slaves [ 671.766771][T24806] bond14 (unregistering): Released all slaves [ 671.778982][T13185] usb 1-1: Using ep0 maxpacket: 32 [ 671.798307][T24806] bond15 (unregistering): Released all slaves [ 671.804568][T13185] usb 1-1: unable to get BOS descriptor or descriptor too short [ 671.819345][T24806] bond16 (unregistering): Released all slaves [ 671.835532][T24806] bond17 (unregistering): Released all slaves [ 671.851375][T13185] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 671.859576][T13185] usb 1-1: can't read configurations, error -61 [ 671.873031][T24806] bond18 (unregistering): Released all slaves [ 671.879305][T28758] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 671.887558][T13185] usb usb1-port1: attempt power cycle [ 671.905742][T24806] bond19 (unregistering): Released all slaves [ 671.918228][T28758] usb 5-1: device descriptor read/8, error -71 [ 671.939933][T24806] bond20 (unregistering): Released all slaves [ 671.952689][T24806] bond21 (unregistering): Released all slaves [ 671.968971][T13198] usb 4-1: USB disconnect, device number 83 [ 671.969972][T24806] bond22 (unregistering): Released all slaves [ 672.003997][T24806] bond23 (unregistering): Released all slaves [ 672.015792][T24806] bond24 (unregistering): Released all slaves [ 672.031993][T24806] bond25 (unregistering): Released all slaves [ 672.050593][T24806] bond26 (unregistering): Released all slaves [ 672.084708][ T2154] team0 (unregistering): Port device team_slave_0 removed [ 672.100258][ T2154] team0 (unregistering): Port device team_slave_1 removed [ 672.128256][T13189] usb 3-1: USB disconnect, device number 30 [ 672.158358][T24806] tipc: Left network mode [ 672.186621][T28758] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 672.220324][T28758] usb 5-1: device descriptor read/8, error -71 [ 672.266484][T13185] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 672.287414][T13185] usb 1-1: Using ep0 maxpacket: 32 [ 672.300397][T24806] hsr_slave_1: left promiscuous mode [ 672.307427][T13185] usb 1-1: unable to get BOS descriptor or descriptor too short [ 672.318461][T13185] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 672.328574][T13185] usb 1-1: can't read configurations, error -61 [ 672.336412][T28758] usb usb5-port1: unable to enumerate USB device [ 672.456242][T13185] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 672.479150][T13185] usb 1-1: Using ep0 maxpacket: 32 [ 672.492522][T13185] usb 1-1: unable to get BOS descriptor or descriptor too short [ 672.547217][T13185] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 672.564225][T13185] usb 1-1: can't read configurations, error -61 [ 672.578386][T13185] usb usb1-port1: unable to enumerate USB device [ 672.678519][ T2234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 672.738390][ T4992] Dev loop2: unable to read RDB block 7 [ 672.744227][ T4992] loop2: AHDI p1 p2 p3 [ 672.751349][ T4992] loop2: partition table partially beyond EOD, truncated [ 672.761421][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 672.771045][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 672.833996][ T2244] syz.3.2924 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 672.869208][ T2244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.881695][ T2244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.899066][T24806] IPVS: stop unused estimator thread 0... [ 673.051959][ T2257] netlink: 'syz.2.2923': attribute type 10 has an invalid length. [ 673.096307][T13211] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 673.248471][T13211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 673.260109][T13211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.270952][T13211] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 673.281693][T13211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.293117][T13211] usb 4-1: config 0 descriptor?? [ 673.579035][ T2266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2925'. [ 673.598777][ T2266] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2925'. [ 673.711405][T13211] hid_parser_main: 29 callbacks suppressed [ 673.711433][T13211] elan 0003:04F3:0755.0042: unknown main item tag 0x0 [ 673.755899][T13211] elan 0003:04F3:0755.0042: unknown main item tag 0x0 [ 673.768051][T13211] elan 0003:04F3:0755.0042: failed to start in urb: -90 [ 673.798986][T13211] elan 0003:04F3:0755.0042: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 673.828125][ T2287] fuse: Bad value for 'fd' [ 673.893930][ T2283] syz.0.2927 (2283): drop_caches: 2 [ 673.948020][ T4992] Dev loop2: unable to read RDB block 7 [ 673.953810][ T4992] loop2: AHDI p1 p2 p3 [ 673.958248][ T4992] loop2: partition table partially beyond EOD, truncated [ 673.965775][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 673.975516][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 674.094269][ T4992] Dev loop2: unable to read RDB block 7 [ 674.100847][ T4992] loop2: AHDI p1 p2 p3 [ 674.105135][ T4992] loop2: partition table partially beyond EOD, truncated [ 674.113522][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 674.120638][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 674.131761][ T2314] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2931'. [ 674.276757][T13211] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 674.376723][T13186] usb 2-1: reset high-speed USB device number 71 using dummy_hcd [ 674.416238][T28758] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 674.437533][T13211] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 674.446056][T13211] usb 1-1: config 0 has no interface number 0 [ 674.454166][T13211] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 674.464012][T13211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.472139][T13211] usb 1-1: Product: syz [ 674.476701][T13211] usb 1-1: Manufacturer: syz [ 674.483007][T13211] usb 1-1: SerialNumber: syz [ 674.496054][T13211] usb 1-1: config 0 descriptor?? [ 674.577083][T28758] usb 3-1: Using ep0 maxpacket: 16 [ 674.620572][T13186] usb 2-1: unable to get BOS descriptor or descriptor too short [ 674.633555][T28758] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 674.642473][T13186] usb 2-1: device firmware changed [ 674.653149][T13186] usb 2-1: USB disconnect, device number 71 [ 674.684041][T28758] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 674.693941][T28758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.703509][T28758] usb 3-1: Product: syz [ 674.709837][T28758] usb 3-1: Manufacturer: syz [ 674.714577][T28758] usb 3-1: SerialNumber: syz [ 674.746029][T28758] r8152-cfgselector 3-1: Unknown version 0x0000 [ 674.758731][T28758] r8152-cfgselector 3-1: config 0 descriptor?? [ 674.947708][T13211] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 674.965196][T13211] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 674.977688][T13211] asix 1-1:0.251: probe with driver asix failed with error -5 [ 675.075436][T13210] usb 1-1: USB disconnect, device number 44 [ 675.117250][T13186] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 675.157319][ T2374] syzkaller0: entered promiscuous mode [ 675.162880][ T2374] syzkaller0: entered allmulticast mode [ 675.203631][ T2379] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2931'. [ 675.226193][T13211] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 675.227820][T28758] r8152-cfgselector 3-1: USB disconnect, device number 31 [ 675.277785][T13186] usb 5-1: Using ep0 maxpacket: 16 [ 675.285164][T13186] usb 5-1: unable to get BOS descriptor or descriptor too short [ 675.295207][T13186] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.305907][T13186] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 675.317401][T13186] usb 5-1: too many endpoints for config 1 interface 1 altsetting 254: 188, using maximum allowed: 30 [ 675.329226][T13186] usb 5-1: config 1 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 675.342950][T13186] usb 5-1: config 1 interface 1 has no altsetting 0 [ 675.353967][T13186] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 675.363085][T13186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.371760][T13186] usb 5-1: Product: syz [ 675.376049][T13186] usb 5-1: Manufacturer: syz [ 675.380814][T13186] usb 5-1: SerialNumber: syz [ 675.386486][T13211] usb 2-1: Using ep0 maxpacket: 32 [ 675.403670][T13211] usb 2-1: unable to get BOS descriptor or descriptor too short [ 675.414197][T13211] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 675.423429][ T4992] Dev loop2: unable to read RDB block 7 [ 675.432048][ T4992] loop2: AHDI p1 p2 p3 [ 675.436789][T13211] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 675.445150][ T4992] loop2: partition table partially beyond EOD, truncated [ 675.453164][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 675.460718][T13211] usb 2-1: config 14 has no interface number 0 [ 675.467762][T13211] usb 2-1: config 14 has no interface number 1 [ 675.474033][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 675.481781][T13211] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 675.502833][T13211] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 675.526611][T13211] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 675.548493][T13211] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 675.561434][T13211] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 675.574247][T13211] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.588399][T13211] usb 2-1: config 14 interface 57 has no altsetting 0 [ 675.599832][T13211] usb 2-1: config 14 interface 228 has no altsetting 0 [ 675.607392][T13186] usb 5-1: 0:2 : does not exist [ 675.613344][T13211] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 675.624924][T13211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.635853][T13211] usb 2-1: Product: syz [ 675.640746][T13211] usb 2-1: Manufacturer: syz [ 675.645467][T13211] usb 2-1: SerialNumber: syz [ 675.698223][T13186] usb 5-1: USB disconnect, device number 98 [ 675.722989][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.790314][ T4992] Dev loop2: unable to read RDB block 7 [ 675.796019][ T4992] loop2: AHDI p1 p2 p3 [ 675.800706][ T4992] loop2: partition table partially beyond EOD, truncated [ 675.808731][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 675.815690][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 675.860989][T28758] usb 4-1: USB disconnect, device number 84 [ 675.975244][ T2446] kAFS: unable to lookup cell '' [ 675.984329][ T2446] kAFS: unable to lookup cell '(,c' [ 676.075171][T13211] legousbtower 2-1:14.57: interrupt endpoints not found [ 676.146503][T13186] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 676.174635][ T491] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 676.197546][ T491] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 676.281174][T13211] legousbtower 2-1:14.228: get version request failed: -71 [ 676.297274][T13211] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 676.302419][T28758] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 676.325456][T13211] usb 2-1: USB disconnect, device number 72 [ 676.362951][T13186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.374814][T13186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.389511][T13186] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 676.400183][T13186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.411151][T13186] usb 3-1: config 0 descriptor?? [ 676.486521][T28758] usb 4-1: Using ep0 maxpacket: 8 [ 676.495479][T28758] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 0.40 [ 676.505286][T28758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.514881][T28758] usb 4-1: Product: 퇅忦㝑徒膟螣㋒廃誱鷙泗맆᫫㈊藍쒦⺍텵㽕贇恽ᄜ虨툱퓹蠯桵焫簸Ǝﷇ푃ⷀ尛ᚪ嫜塉㼬钕᣽둪ꋤ휉삳祔圧贞´桜裏昢ᒁ揘ⴖ歹？渷ꦧ㹗爰훎ꔟ籭⣊䃰璺⺴㄁킈⬓㗑⨃㯅씢쌸╾藵샻톶㧶àﾡ恀ꪮ嚉ﮆ [ 676.556732][T28758] usb 4-1: Manufacturer: 钓ᇝ젨툁㭦孭嶄罈젧萍㒾ﴨ抶쳯牭圷膜 [ 676.567558][T28758] usb 4-1: SerialNumber: 䱭滣琧ꭊ锎壭杍崋㾚뱫ﳓ純鲅ꫣ㪟ⱌ⢾덥낼綾ฯ輻辡珍ﯟ홲㰽羱㑦뎃ꐻ⹁檲蛟到⬛ [ 676.805956][T28758] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 676.825452][T28758] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 676.884887][T28758] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 676.902031][T28758] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 676.917704][ T2490] fuse: Unknown parameter '0x0000000000000003' [ 676.954921][T28758] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 677.166400][T28758] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 677.208071][T28758] usb 4-1: USB disconnect, device number 85 [ 677.209479][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.328293][T13186] usbhid 3-1:0.0: can't add hid device: -71 [ 677.350044][T13186] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 677.389573][T13186] usb 3-1: USB disconnect, device number 32 [ 677.741474][ T2572] loop4: detected capacity change from 0 to 2640 [ 677.766825][ T2572] buffer_io_error: 6 callbacks suppressed [ 677.766840][ T2572] Buffer I/O error on dev loop4, logical block 0, async page read [ 677.795763][ T2574] Buffer I/O error on dev loop4, logical block 73, async page read [ 677.808230][T28758] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 677.824778][ T2574] Buffer I/O error on dev loop4, logical block 73, async page read [ 677.842840][ T2572] Buffer I/O error on dev loop4, logical block 0, async page read [ 677.886454][ T2572] Buffer I/O error on dev loop4, logical block 0, async page read [ 677.936576][ T2572] Buffer I/O error on dev loop4, logical block 0, async page read [ 677.977851][ T2571] Buffer I/O error on dev loop4, logical block 0, async page read [ 677.986513][T28758] usb 2-1: Using ep0 maxpacket: 32 [ 678.002094][T28758] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.019870][ T2571] Buffer I/O error on dev loop4, logical block 0, async page read [ 678.041137][T28758] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 678.056471][ T2571] Buffer I/O error on dev loop4, logical block 0, async page read [ 678.073064][T28758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.082945][ T2572] Buffer I/O error on dev loop4, logical block 0, async page read [ 678.104487][ T2572] ldm_validate_partition_table(): Disk read failed. [ 678.112147][T28758] usb 2-1: config 0 descriptor?? [ 678.131003][ T2572] Dev loop4: unable to read RDB block 0 [ 678.143649][T28758] rndis_host 2-1:0.0: skipping garbage [ 678.163015][ T2572] loop4: unable to read partition table [ 678.172541][T28758] rndis_host 2-1:0.0: rndis: master #0/ffff888029c0c000 slave #1/0000000000000000 [ 678.186376][ T2572] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 678.280922][ T4992] ldm_validate_partition_table(): Disk read failed. [ 678.295769][ T4992] Dev loop4: unable to read RDB block 0 [ 678.303012][ T4992] loop4: unable to read partition table [ 678.334382][T28758] usb 2-1: USB disconnect, device number 73 [ 678.382767][ T4992] Dev loop2: unable to read RDB block 7 [ 678.390256][ T4992] loop2: AHDI p1 p2 p3 [ 678.394497][ T4992] loop2: partition table partially beyond EOD, truncated [ 678.401954][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 678.409173][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 678.945885][ T2648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2952'. [ 679.089760][ T4992] Dev loop2: unable to read RDB block 7 [ 679.095525][ T4992] loop2: AHDI p1 p2 p3 [ 679.102585][ T4992] loop2: partition table partially beyond EOD, truncated [ 679.110090][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 679.118407][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 679.200029][ T2678] bridge_slave_0: left allmulticast mode [ 679.206301][T13211] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 679.214056][ T2678] bridge_slave_0: left promiscuous mode [ 679.221420][ T2678] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.236501][ T491] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 679.246626][ T2678] bridge_slave_1: left allmulticast mode [ 679.252325][ T2678] bridge_slave_1: left promiscuous mode [ 679.260137][ T2678] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.276896][ T2678] bond0: (slave bond_slave_0): Releasing backup interface [ 679.295518][ T2678] bond0: (slave bond_slave_1): Releasing backup interface [ 679.313781][ T2678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.321735][ T2678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.331461][ T2678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.339427][ T2678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.347333][T13211] usb 4-1: device descriptor read/64, error -71 [ 679.356887][ T2678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 679.406759][ T491] usb 5-1: Using ep0 maxpacket: 32 [ 679.414550][ T491] usb 5-1: unable to get BOS descriptor or descriptor too short [ 679.423556][ T491] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 679.432972][ T491] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 679.442624][ T491] usb 5-1: config 14 has no interface number 0 [ 679.449328][ T491] usb 5-1: config 14 has no interface number 1 [ 679.455648][ T491] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 679.468290][ T491] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 679.480814][ T491] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 679.493314][ T491] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 679.515566][ T491] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 679.552298][ T491] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.576630][ T491] usb 5-1: config 14 interface 57 has no altsetting 0 [ 679.583901][ T491] usb 5-1: config 14 interface 228 has no altsetting 0 [ 679.595606][ T491] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 679.605120][T13211] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 679.614993][ T491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.626202][T13210] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 679.634642][ T491] usb 5-1: Product: syz [ 679.639885][ T491] usb 5-1: Manufacturer: syz [ 679.647536][ T491] usb 5-1: SerialNumber: syz [ 679.736494][T13211] usb 4-1: device descriptor read/64, error -71 [ 679.794353][T13210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.806709][T13210] usb 3-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 679.816495][T13210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.827413][T13210] usb 3-1: config 0 descriptor?? [ 679.846783][T13211] usb usb4-port1: attempt power cycle [ 680.062506][ T491] legousbtower 5-1:14.57: interrupt endpoints not found [ 680.186485][T13211] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 680.207191][T13211] usb 4-1: device descriptor read/8, error -71 [ 680.257758][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.275342][ T491] legousbtower 5-1:14.228: get version request failed: -71 [ 680.280241][ T2727] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 680.290415][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.298276][T13198] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 680.307724][ T491] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 680.317914][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.337887][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.346435][ T491] usb 5-1: USB disconnect, device number 99 [ 680.357663][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.375128][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.385682][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.393338][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.401882][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.409460][T13210] ortek 0003:05A4:2000.0044: unknown main item tag 0x0 [ 680.430000][T13210] ortek 0003:05A4:2000.0044: hidraw0: USB HID v7f.fd Device [HID 05a4:2000] on usb-dummy_hcd.2-1/input0 [ 680.456521][T13198] usb 1-1: device descriptor read/64, error -71 [ 680.462942][T13211] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 680.496830][T13211] usb 4-1: device descriptor read/8, error -71 [ 680.538314][T13210] usb 3-1: USB disconnect, device number 33 [ 680.617321][T13211] usb usb4-port1: unable to enumerate USB device [ 680.706263][T13198] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 680.836266][T13198] usb 1-1: device descriptor read/64, error -71 [ 680.872495][ T2789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2966'. [ 680.946457][T13198] usb usb1-port1: attempt power cycle [ 681.105775][ T4992] Dev loop2: unable to read RDB block 7 [ 681.111626][ T4992] loop2: AHDI p1 p2 p3 [ 681.115895][ T4992] loop2: partition table partially beyond EOD, truncated [ 681.123593][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 681.130507][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 681.288321][T13198] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 681.317501][T13198] usb 1-1: device descriptor read/8, error -71 [ 681.556593][T13198] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 681.582492][ T4992] Dev loop2: unable to read RDB block 7 [ 681.588074][T13198] usb 1-1: device descriptor read/8, error -71 [ 681.595518][ T4992] loop2: AHDI p1 p2 p3 [ 681.601334][ T4992] loop2: partition table partially beyond EOD, truncated [ 681.610444][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 681.618374][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 681.673255][ T2827] binder: 2826:2827 ioctl 4004743d 200000000100 returned -22 [ 681.696589][T13198] usb usb1-port1: unable to enumerate USB device [ 681.956572][T28758] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 681.988035][ T2885] Cannot find add_set index 2 as target [ 681.996761][T13186] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 682.106302][T28758] usb 3-1: Using ep0 maxpacket: 16 [ 682.118546][T28758] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 682.132656][T28758] usb 3-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 682.142752][T28758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.151382][T13186] usb 5-1: Using ep0 maxpacket: 8 [ 682.158666][T28758] usb 3-1: config 0 descriptor?? [ 682.168690][T13186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.189327][T13186] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.68 [ 682.199909][T28758] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input87 [ 682.215847][T13186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.246567][T13186] usb 5-1: Product: syz [ 682.250970][T13186] usb 5-1: Manufacturer: syz [ 682.258820][T13186] usb 5-1: SerialNumber: syz [ 682.266527][T13189] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 682.284040][T13186] usb 5-1: config 0 descriptor?? [ 682.299238][T13186] kalmia 5-1:0.0: probe with driver kalmia failed with error -22 [ 682.426588][T13189] usb 4-1: Using ep0 maxpacket: 32 [ 682.441056][T13189] usb 4-1: unable to get BOS descriptor or descriptor too short [ 682.461868][T13189] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 682.479115][T13189] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 682.496740][T13189] usb 4-1: config 14 has no interface number 0 [ 682.503092][T13189] usb 4-1: config 14 has no interface number 1 [ 682.509811][T13189] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 682.536656][T13189] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 682.549359][T13189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 682.572334][T13189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 682.594638][T13189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 682.606884][T13189] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.631333][T13189] usb 4-1: config 14 interface 57 has no altsetting 0 [ 682.645678][T13189] usb 4-1: config 14 interface 228 has no altsetting 0 [ 682.657980][T13189] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 682.674133][T13189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.689425][T13189] usb 4-1: Product: syz [ 682.694181][T13189] usb 4-1: Manufacturer: syz [ 682.700460][T13189] usb 4-1: SerialNumber: syz [ 682.831820][T28773] usb 5-1: USB disconnect, device number 100 [ 682.906527][T13186] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 683.032587][ T2859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.044116][ T2859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.053856][ T4977] bcm5974 3-1:0.0: could not read from device [ 683.060821][ T4977] bcm5974 3-1:0.0: could not read from device [ 683.071179][ T4977] bcm5974 3-1:0.0: could not read from device [ 683.080430][ T4977] bcm5974 3-1:0.0: could not read from device [ 683.087673][T13186] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 683.103364][T28758] usb 3-1: USB disconnect, device number 34 [ 683.110206][ T5636] bcm5974 3-1:0.0: could not read from device [ 683.116860][T13186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.128029][T13186] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 683.138379][T13186] usb 2-1: config 0 has no interface number 0 [ 683.145287][T13186] usb 2-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 683.163146][T13189] legousbtower 4-1:14.57: interrupt endpoints not found [ 683.176501][ T5636] udevd[5636]: Error opening device "/dev/input/event4": No such file or directory [ 683.185923][T13186] usb 2-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 683.197566][ T5636] udevd[5636]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.197662][ T5636] udevd[5636]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.197743][ T5636] udevd[5636]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.197826][ T5636] udevd[5636]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.229699][T13186] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 683.241545][T13186] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 683.256542][T13186] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 683.265939][T13186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.276970][T13186] usb 2-1: Product: syz [ 683.281229][T13186] usb 2-1: Manufacturer: syz [ 683.285882][T13186] usb 2-1: SerialNumber: syz [ 683.294080][T13186] usb 2-1: config 0 descriptor?? [ 683.346489][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 683.358743][T13189] legousbtower 4-1:14.228: get version request failed: -71 [ 683.366690][T13189] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 683.392222][T13189] usb 4-1: USB disconnect, device number 90 [ 683.465709][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 683.465730][ T30] audit: type=1326 audit(1782126655.588:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2959 comm="syz.4.2979" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d42b9ce59 code=0x0 [ 683.833600][ T4992] Dev loop2: unable to read RDB block 7 [ 683.840445][ T4992] loop2: AHDI p1 p2 p3 [ 683.844725][ T4992] loop2: partition table partially beyond EOD, truncated [ 683.852133][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 683.859456][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 683.994643][ T2976] batman_adv: batadv0: Adding interface: dummy0 [ 684.001455][ T2976] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.028062][ T2976] batman_adv: batadv0: Interface activated: dummy0 [ 684.353269][ T3007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2984'. [ 684.499680][ T4992] Dev loop2: unable to read RDB block 7 [ 684.505546][ T4992] loop2: AHDI p1 p2 p3 [ 684.511019][ T4992] loop2: partition table partially beyond EOD, truncated [ 684.519374][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 684.527212][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 684.596573][T13211] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 684.658419][ T4992] Dev loop2: unable to read RDB block 7 [ 684.664184][ T4992] loop2: AHDI p1 p2 p3 [ 684.669093][ T4992] loop2: partition table partially beyond EOD, truncated [ 684.679267][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 684.686387][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 684.756601][T13211] usb 5-1: Using ep0 maxpacket: 32 [ 684.763689][T13211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.778718][T13211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.789531][T13211] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 684.799060][T13211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.811200][T13211] usb 5-1: config 0 descriptor?? [ 684.825392][T13211] hub 5-1:0.0: USB hub found [ 684.976370][T13210] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 685.011814][ T3036] syzkaller0: entered promiscuous mode [ 685.018805][ T3036] syzkaller0: entered allmulticast mode [ 685.026028][ T3007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2984'. [ 685.049566][T13211] hub 5-1:0.0: 7 ports detected [ 685.054943][T13211] hub 5-1:0.0: insufficient power available to use all downstream ports [ 685.098135][ T3036] veth5: entered allmulticast mode [ 685.129065][T13210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.140896][T13210] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 685.150486][T13210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.160945][T13210] usb 3-1: config 0 descriptor?? [ 685.255314][T13211] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 685.261952][T13211] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 685.276845][T13211] usbhid 5-1:0.0: can't add hid device: -71 [ 685.285938][T13211] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 685.324530][T13211] usb 5-1: USB disconnect, device number 101 [ 685.375198][T13210] usbhid 3-1:0.0: can't add hid device: -71 [ 685.387437][T13210] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 685.409951][T13210] usb 3-1: USB disconnect, device number 35 [ 685.420823][T13186] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected [ 685.441653][T13186] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 685.459784][T13186] usb 2-1: USB disconnect, device number 74 [ 685.477482][T13186] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 685.501020][T13186] cypress_m8 2-1:0.74: device disconnected [ 685.556238][T13198] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 685.718187][T13198] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.728534][T13198] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 685.738172][T13198] usb 1-1: config 1 has no interface number 1 [ 685.744361][T13198] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 685.758859][T13198] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 685.771689][T13198] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.781096][T13198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.789583][T13198] usb 1-1: Product: syz [ 685.793875][T13198] usb 1-1: Manufacturer: syz [ 685.808339][T13198] usb 1-1: SerialNumber: syz [ 685.818651][ T3063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 685.886255][T13210] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 685.892182][ T3117] fuse: Unknown parameter 'user_id00000000000000000000' [ 685.909105][T13186] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 686.067592][T13210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.079919][ T3063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.088659][T13210] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 686.096710][T13186] usb 2-1: Using ep0 maxpacket: 32 [ 686.098904][T13210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.117874][T13210] usb 3-1: config 0 descriptor?? [ 686.123910][ T3063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.138131][T13186] usb 2-1: unable to get BOS descriptor or descriptor too short [ 686.142603][ T3063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.161245][ T3063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.175191][T13186] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 686.183610][T13198] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 686.183830][T13198] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 686.231072][T13186] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 686.253375][T13186] usb 2-1: config 14 has no interface number 0 [ 686.266948][T13185] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 686.279026][T13186] usb 2-1: config 14 has no interface number 1 [ 686.290384][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.297082][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.311012][T13186] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 686.334108][ T3026] netlink: 'syz.2.2987': attribute type 1 has an invalid length. [ 686.351430][T13198] usb 1-1: USB disconnect, device number 49 [ 686.375670][T13186] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 686.406750][T13186] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 686.418595][T13186] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 686.432764][T13186] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 686.446418][T13185] usb 4-1: Using ep0 maxpacket: 16 [ 686.452122][T13186] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.468609][T13185] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 686.482900][T13185] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 686.495419][T13185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 55, changing to 9 [ 686.509571][T13186] usb 2-1: config 14 interface 57 has no altsetting 0 [ 686.527801][T13186] usb 2-1: config 14 interface 228 has no altsetting 0 [ 686.539827][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.545465][T13185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8496, setting to 1024 [ 686.570826][T13185] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.586595][T13186] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 686.604193][T13186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.620066][T13186] usb 2-1: Product: syz [ 686.627431][T13185] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 686.637076][T13186] usb 2-1: Manufacturer: syz [ 686.641816][T13186] usb 2-1: SerialNumber: syz [ 686.647377][T13185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.664378][T13185] usb 4-1: config 0 descriptor?? [ 686.684150][T13185] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input89 [ 686.822940][ T3026] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2987'. [ 686.899409][T13185] usb 4-1: USB disconnect, device number 91 [ 687.068138][T13186] legousbtower 2-1:14.57: interrupt endpoints not found [ 687.081836][ T3189] batadv_slave_0: entered promiscuous mode [ 687.094348][ T3187] batadv_slave_0: left promiscuous mode [ 687.276735][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 687.287765][T13186] legousbtower 2-1:14.228: get version request failed: -71 [ 687.296220][ T3080] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 687.305205][T13186] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 687.323644][T13186] usb 2-1: USB disconnect, device number 75 [ 687.426962][ T3080] usb 1-1: device descriptor read/64, error -71 [ 687.433649][T13210] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 687.442351][T13210] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88 [ 687.667446][ T3080] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 687.773170][ T3232] binder: 3229:3232 ioctl c0306201 0 returned -14 [ 687.796570][ T3080] usb 1-1: device descriptor read/64, error -71 [ 687.823818][ T3232] syz.3.3002 (3232): drop_caches: 2 [ 687.926603][ T3080] usb usb1-port1: attempt power cycle [ 688.108496][ T3244] Cannot find del_set index 0 as target [ 688.266577][ T3080] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 688.303370][ T3080] usb 1-1: device descriptor read/8, error -71 [ 688.379989][T13185] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 688.546588][ T3080] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 688.577225][ T3080] usb 1-1: device descriptor read/8, error -71 [ 688.593737][T13185] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 688.625517][T13185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.657329][T13185] usb 2-1: Product: syz [ 688.674015][T13185] usb 2-1: Manufacturer: syz [ 688.699518][T13185] usb 2-1: SerialNumber: syz [ 688.709190][ T3080] usb usb1-port1: unable to enumerate USB device [ 688.746297][T13185] usb 2-1: config 0 descriptor?? [ 688.971365][T13185] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 688.995023][T13185] usb 2-1: Firmware version (0.0) predates our first public release. [ 689.022978][T13185] usb 2-1: Please update to version 0.2 or newer [ 689.055850][T13185] usb 2-1: Firmware: build [ 689.141022][ T3080] usb 3-1: USB disconnect, device number 36 [ 689.147476][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 689.247974][ T4992] Dev loop2: unable to read RDB block 7 [ 689.253678][ T4992] loop2: AHDI p1 p2 p3 [ 689.258170][ T4992] loop2: partition table partially beyond EOD, truncated [ 689.267662][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 689.274848][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 689.289417][T13185] usb 2-1: USB disconnect, device number 76 [ 689.934061][ T3334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3014'. [ 690.026590][T13185] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 690.105903][ T3354] netlink: 'syz.1.3018': attribute type 1 has an invalid length. [ 690.116875][T13186] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 690.181921][T13185] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.195918][T13185] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 690.208298][T13185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.217500][T13185] usb 3-1: Product: syz [ 690.221859][T13185] usb 3-1: Manufacturer: syz [ 690.226794][T13185] usb 3-1: SerialNumber: syz [ 690.231603][ T3379] bond1: (slave veth3): Enslaving as an active interface with a down link [ 690.244799][T13185] usb 3-1: config 0 descriptor?? [ 690.287545][T13186] usb 5-1: Using ep0 maxpacket: 32 [ 690.299535][T13186] usb 5-1: unable to get BOS descriptor or descriptor too short [ 690.326312][T13186] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 690.357861][T13186] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 690.367665][T13185] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 690.377166][T13186] usb 5-1: config 14 has no interface number 0 [ 690.386397][ T3416] tipc: Enabling of bearer rejected, failed to enable media [ 690.404019][T13186] usb 5-1: config 14 has no interface number 1 [ 690.411366][T13186] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 690.423530][T13186] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 690.437679][T13186] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 690.453374][T13186] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 690.470078][T13186] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 690.482006][T13186] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.495748][T13186] usb 5-1: config 14 interface 57 has no altsetting 0 [ 690.502846][T13186] usb 5-1: config 14 interface 228 has no altsetting 0 [ 690.513093][T13186] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 690.525773][T13186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.534490][T13186] usb 5-1: Product: syz [ 690.539181][T13186] usb 5-1: Manufacturer: syz [ 690.543875][T13186] usb 5-1: SerialNumber: syz [ 690.718031][ T3434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3021'. [ 690.886608][T13210] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 690.969388][ T3434] bridge1: port 1(veth7) entered blocking state [ 690.983600][T13186] legousbtower 5-1:14.57: interrupt endpoints not found [ 691.001834][ T3434] bridge1: port 1(veth7) entered disabled state [ 691.021903][ T3434] veth7: entered allmulticast mode [ 691.036577][T13210] usb 2-1: device descriptor read/64, error -71 [ 691.044879][ T3434] veth7: entered promiscuous mode [ 691.073796][ T3443] bond0: (slave veth0_to_bond): Releasing backup interface [ 691.095814][ T3443] bridge1: port 2(veth0_to_bond) entered blocking state [ 691.114929][ T3443] bridge1: port 2(veth0_to_bond) entered disabled state [ 691.134028][ T3443] veth0_to_bond: entered allmulticast mode [ 691.152951][ T3443] veth0_to_bond: entered promiscuous mode [ 691.157395][T13198] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 691.199094][T13186] legousbtower 5-1:14.228: get version request failed: -71 [ 691.215457][T13186] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 691.227887][T13185] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 691.249807][T13186] usb 5-1: USB disconnect, device number 102 [ 691.261495][T13185] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 691.295468][T13185] usb 3-1: USB disconnect, device number 37 [ 691.296540][T13210] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 691.326399][T13198] usb 4-1: Invalid ep0 maxpacket: 32 [ 691.446572][T13210] usb 2-1: device descriptor read/64, error -71 [ 691.456572][T13198] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 691.499340][ T3462] bridge1: port 3(veth9) entered blocking state [ 691.506043][ T3462] bridge1: port 3(veth9) entered disabled state [ 691.512966][ T3462] veth9: entered allmulticast mode [ 691.521284][ T3462] veth9: entered promiscuous mode [ 691.556487][T13210] usb usb2-port1: attempt power cycle [ 691.606963][T13198] usb 4-1: Invalid ep0 maxpacket: 32 [ 691.614567][T13198] usb usb4-port1: attempt power cycle [ 691.797500][ T3497] netlink: 'syz.4.3026': attribute type 8 has an invalid length. [ 691.855878][ T4992] Dev loop2: unable to read RDB block 7 [ 691.861712][ T4992] loop2: AHDI p1 p2 p3 [ 691.866441][ T4992] loop2: partition table partially beyond EOD, truncated [ 691.874529][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 691.882674][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 691.896197][T13210] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 691.926726][T13210] usb 2-1: device descriptor read/8, error -71 [ 691.966604][T13198] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 691.987768][T13198] usb 4-1: Invalid ep0 maxpacket: 32 [ 692.116936][T13198] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 692.137328][T13198] usb 4-1: Invalid ep0 maxpacket: 32 [ 692.142981][T13198] usb usb4-port1: unable to enumerate USB device [ 692.176499][T13210] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 692.197078][T13210] usb 2-1: device descriptor read/8, error -71 [ 692.223091][ T4992] Dev loop2: unable to read RDB block 7 [ 692.229179][ T4992] loop2: AHDI p1 p2 p3 [ 692.233474][ T4992] loop2: partition table partially beyond EOD, truncated [ 692.242592][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 692.251459][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 692.306777][T13210] usb usb2-port1: unable to enumerate USB device [ 692.352480][ T3523] syzkaller0: entered promiscuous mode [ 692.358414][T13185] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 692.366651][ T3523] syzkaller0: entered allmulticast mode [ 692.463688][ T4992] Dev loop2: unable to read RDB block 7 [ 692.470477][ T4992] loop2: AHDI p1 p2 p3 [ 692.474887][ T4992] loop2: partition table partially beyond EOD, truncated [ 692.482550][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 692.490753][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 692.516249][T13185] usb 5-1: Using ep0 maxpacket: 32 [ 692.527607][T13185] usb 5-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config [ 692.539069][T13185] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 692.551133][T13185] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 692.560338][T13185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.576629][T13185] usb 5-1: Product: syz [ 692.580915][T13185] usb 5-1: Manufacturer: syz [ 692.585526][T13185] usb 5-1: SerialNumber: syz [ 692.591881][T13185] usb 5-1: config 0 descriptor?? [ 692.811070][ T3511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3029'. [ 692.873822][T13198] usb 5-1: USB disconnect, device number 103 [ 693.385515][ T4992] Dev loop2: unable to read RDB block 7 [ 693.400952][ T4992] loop2: AHDI p1 p2 p3 [ 693.413268][ T4992] loop2: partition table partially beyond EOD, truncated [ 693.429051][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 693.437808][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 693.450621][ T3553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2671293370 (85481387840 ns) > initial count (74217225856 ns). Using initial count to start timer. [ 693.592679][ T4992] Dev loop2: unable to read RDB block 7 [ 693.598474][ T4992] loop2: AHDI p1 p2 p3 [ 693.603054][ T4992] loop2: partition table partially beyond EOD, truncated [ 693.610812][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 693.618864][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 693.634900][ T3571] netlink: 'syz.2.3034': attribute type 21 has an invalid length. [ 693.691881][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 693.702902][ T3571] bridge_slave_1: left allmulticast mode [ 693.710263][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.717747][T13210] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 693.730966][ T3571] x9: left allmulticast mode [ 693.735912][ T3571] x9: left promiscuous mode [ 693.742293][ T3571] bridge0: port 1(1x9) entered disabled state [ 693.792776][ T3587] syzkaller0: entered promiscuous mode [ 693.798783][ T3587] syzkaller0: entered allmulticast mode [ 693.810794][ T3590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.822823][ T3590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.856834][ T4992] Dev loop2: unable to read RDB block 7 [ 693.864060][ T4992] loop2: AHDI p1 p2 p3 [ 693.876546][ T4992] loop2: partition table partially beyond EOD, truncated [ 693.887080][T13210] usb 5-1: config 11 has an invalid interface number: 104 but max is 0 [ 693.891453][ T4992] loop2: p1 start 1601398130 is beyond EOD, [ 693.898399][T13210] usb 5-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 693.901748][ T4992] truncated [ 693.905479][T13210] usb 5-1: config 11 has no interface number 0 [ 693.931009][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 693.940709][T13210] usb 5-1: config 11 interface 104 altsetting 5 endpoint 0xD has invalid maxpacket 288, setting to 64 [ 693.967794][T13210] usb 5-1: config 11 interface 104 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 693.991932][T13210] usb 5-1: config 11 interface 104 has no altsetting 0 [ 694.013039][T13210] usb 5-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=e9.15 [ 694.022742][T13210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.031249][T13210] usb 5-1: Product: syz [ 694.039030][T13210] usb 5-1: Manufacturer: syz [ 694.056268][ T3080] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 694.063897][T13210] usb 5-1: SerialNumber: syz [ 694.197390][ T3080] usb 2-1: device descriptor read/64, error -71 [ 694.308162][T13210] rndis_host 5-1:11.104: invalid descriptor buffer length [ 694.335599][T13210] rndis_host 5-1:11.104: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 694.360357][T13210] cdc_acm 5-1:11.104: invalid descriptor buffer length [ 694.407927][T13210] usb 5-1: USB disconnect, device number 104 [ 694.456632][ T3080] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 694.556613][T13185] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 694.596268][ T3080] usb 2-1: device descriptor read/64, error -71 [ 694.708483][ T3661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 694.716517][ T3080] usb usb2-port1: attempt power cycle [ 694.718176][T13185] usb 3-1: Using ep0 maxpacket: 32 [ 694.729375][ T3661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 694.816044][T13185] usb 3-1: unable to get BOS descriptor or descriptor too short [ 694.827626][T13185] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 694.838249][T13185] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 694.863879][T13185] usb 3-1: config 14 has no interface number 0 [ 694.878107][T13185] usb 3-1: config 14 has no interface number 1 [ 694.891990][T13185] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 694.929611][T13185] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 694.964045][T13185] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 694.996581][T13185] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 695.022306][T13185] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 695.048959][T13185] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.076505][ T3080] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 695.085949][T13185] usb 3-1: config 14 interface 57 has no altsetting 0 [ 695.094387][T13185] usb 3-1: config 14 interface 228 has no altsetting 0 [ 695.104098][ T3080] usb 2-1: device descriptor read/8, error -71 [ 695.131518][T13185] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 695.140976][T13185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.150987][T13185] usb 3-1: Product: syz [ 695.156406][T13185] usb 3-1: Manufacturer: syz [ 695.161893][T13185] usb 3-1: SerialNumber: syz [ 695.226541][T13186] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 695.346449][ T3080] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 695.378819][ T3080] usb 2-1: device descriptor read/8, error -71 [ 695.406341][T13186] usb 4-1: Using ep0 maxpacket: 8 [ 695.415393][T13186] usb 4-1: config 9 has an invalid interface number: 127 but max is 3 [ 695.434237][T13186] usb 4-1: config 9 has an invalid interface number: 40 but max is 3 [ 695.448802][T13186] usb 4-1: config 9 has an invalid interface number: 61 but max is 3 [ 695.463122][T13186] usb 4-1: config 9 has an invalid interface number: 202 but max is 3 [ 695.479121][T13186] usb 4-1: config 9 has no interface number 0 [ 695.491890][T13186] usb 4-1: config 9 has no interface number 1 [ 695.498061][ T3080] usb usb2-port1: unable to enumerate USB device [ 695.512297][T13186] usb 4-1: config 9 has no interface number 2 [ 695.522633][T13186] usb 4-1: config 9 has no interface number 3 [ 695.532837][T13186] usb 4-1: config 9 interface 127 altsetting 154 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 695.544660][T13186] usb 4-1: config 9 interface 127 altsetting 154 bulk endpoint 0x6 has invalid maxpacket 16 [ 695.554870][T13186] usb 4-1: config 9 interface 127 altsetting 154 has a duplicate endpoint with address 0xA, skipping [ 695.576211][T13186] usb 4-1: config 9 interface 127 altsetting 154 bulk endpoint 0xB has invalid maxpacket 1024 [ 695.596051][T13186] usb 4-1: config 9 interface 127 altsetting 154 has a duplicate endpoint with address 0x3, skipping [ 695.610123][T13186] usb 4-1: config 9 interface 40 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 695.621452][T13186] usb 4-1: config 9 interface 40 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 695.632810][T13186] usb 4-1: config 9 interface 61 altsetting 173 endpoint 0x9 has invalid maxpacket 1423, setting to 64 [ 695.644997][T13186] usb 4-1: config 9 interface 202 altsetting 240 endpoint 0x2 has invalid maxpacket 1544, setting to 64 [ 695.657231][T13186] usb 4-1: config 9 interface 202 altsetting 240 bulk endpoint 0x1 has invalid maxpacket 8 [ 695.668887][T13186] usb 4-1: config 9 interface 202 altsetting 240 has a duplicate endpoint with address 0x1, skipping [ 695.680055][T13186] usb 4-1: config 9 interface 127 has no altsetting 0 [ 695.687987][T13186] usb 4-1: config 9 interface 40 has no altsetting 0 [ 695.694998][T13186] usb 4-1: config 9 interface 61 has no altsetting 0 [ 695.702923][T13186] usb 4-1: config 9 interface 202 has no altsetting 0 [ 695.711665][T13185] legousbtower 3-1:14.57: interrupt endpoints not found [ 695.721365][T13186] usb 4-1: Dual-Role OTG device on HNP port [ 695.733083][T13186] usb 4-1: New USB device found, idVendor=04bb, idProduct=093d, bcdDevice=23.d9 [ 695.742433][T13186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.751088][T13186] usb 4-1: Product: с [ 695.755253][T13186] usb 4-1: Manufacturer: Ⰺ [ 695.763931][T13186] usb 4-1: SerialNumber: ␊ [ 695.775336][ T3675] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 695.784396][ T3675] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 695.938000][T13185] legousbtower 3-1:14.228: get version request failed: -71 [ 695.946551][T13185] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 695.960207][T13185] usb 3-1: USB disconnect, device number 38 [ 696.007572][T13198] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 696.136559][T13198] usb 5-1: device descriptor read/64, error -71 [ 696.197005][ T3675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.206524][ T3675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.238869][T13186] usb 4-1: USB disconnect, device number 96 [ 696.377123][T13198] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 696.466978][ T4992] Dev loop2: unable to read RDB block 7 [ 696.472700][ T4992] loop2: AHDI p1 p2 p3 [ 696.477469][ T4992] loop2: partition table partially beyond EOD, truncated [ 696.484862][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 696.491795][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 696.506730][T13198] usb 5-1: device descriptor read/64, error -71 [ 696.594916][ T3722] fuse: Invalid rootmode [ 696.626656][T13198] usb usb5-port1: attempt power cycle [ 696.755989][ T3725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.767641][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 696.773744][ T662] Bluetooth: hci0: command 0x0c1a tx timeout [ 696.966229][T13198] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 696.987766][T13198] usb 5-1: device descriptor read/8, error -71 [ 697.226246][T13198] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 697.248190][T13198] usb 5-1: device descriptor read/8, error -71 [ 697.356552][T13186] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 697.367026][T13198] usb usb5-port1: unable to enumerate USB device [ 697.391585][ T4992] Dev loop2: unable to read RDB block 7 [ 697.397677][ T4992] loop2: AHDI p1 p2 p3 [ 697.401922][ T4992] loop2: partition table partially beyond EOD, truncated [ 697.411173][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 697.418522][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 697.506178][T13186] usb 4-1: Using ep0 maxpacket: 16 [ 697.512854][T13186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.524785][T13186] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 697.534763][T13186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.544931][T13186] usb 4-1: config 0 descriptor?? [ 697.676182][T13198] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 697.826286][T13198] usb 3-1: Invalid ep0 maxpacket: 16 [ 697.956459][T13198] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 697.973076][T13186] hid_parser_main: 215 callbacks suppressed [ 697.973094][T13186] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0 [ 697.987382][T13186] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0 [ 697.994478][T13186] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0 [ 698.002685][T13186] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0 [ 698.009841][T13186] mcp2221 0003:04D8:00DD.0045: unknown main item tag 0x0 [ 698.018202][T13186] mcp2221 0003:04D8:00DD.0045: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 698.106224][T13198] usb 3-1: Invalid ep0 maxpacket: 16 [ 698.111879][T13198] usb usb3-port1: attempt power cycle [ 698.172539][ T3754] netlink: 'syz.3.3051': attribute type 1 has an invalid length. [ 698.186230][T13210] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 698.210080][ T3754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.225360][ T3754] vlan2: entered allmulticast mode [ 698.230685][ T3754] bond1: entered allmulticast mode [ 698.239718][ T3754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 698.250210][ T3754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3051'. [ 698.262029][T13186] usb 4-1: USB disconnect, device number 97 [ 698.357051][T13210] usb 2-1: Using ep0 maxpacket: 32 [ 698.363763][T13210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.379162][T13210] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 698.388727][T13210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.397482][T13210] usb 2-1: Product: syz [ 698.401715][T13210] usb 2-1: Manufacturer: syz [ 698.406611][T13210] usb 2-1: SerialNumber: syz [ 698.412540][T13210] usb 2-1: config 0 descriptor?? [ 698.421947][T13210] xr_serial 2-1:0.0: failed to claim sibling interface: -16 [ 698.429781][T13210] xr_serial 2-1:0.0: probe with driver xr_serial failed with error -16 [ 698.456342][T13198] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 698.477425][T13198] usb 3-1: Invalid ep0 maxpacket: 16 [ 698.606492][T13198] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 698.626933][T13198] usb 3-1: Invalid ep0 maxpacket: 16 [ 698.634215][T13198] usb usb3-port1: unable to enumerate USB device [ 698.685839][ T662] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 698.700472][T13186] usb 2-1: USB disconnect, device number 85 [ 699.056269][T13198] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 699.166379][T28773] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 699.207941][T13198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.230292][T13198] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 699.239927][T13198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.250533][T13198] usb 4-1: config 0 descriptor?? [ 699.327342][T28773] usb 5-1: Using ep0 maxpacket: 32 [ 699.334764][T28773] usb 5-1: unable to get BOS descriptor or descriptor too short [ 699.344299][T28773] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 699.352703][T28773] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 699.362257][T28773] usb 5-1: config 14 has no interface number 0 [ 699.368733][T28773] usb 5-1: config 14 has no interface number 1 [ 699.375707][T28773] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 699.387457][T28773] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 699.399412][T28773] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 699.411633][T28773] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 699.423682][T28773] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 699.435126][T28773] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.448690][T28773] usb 5-1: config 14 interface 57 has no altsetting 0 [ 699.455509][T28773] usb 5-1: config 14 interface 228 has no altsetting 0 [ 699.465215][T28773] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 699.468566][T13198] usbhid 4-1:0.0: can't add hid device: -71 [ 699.477992][T28773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.491493][T28773] usb 5-1: Product: syz [ 699.495675][T13198] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 699.503221][T13198] usb 4-1: USB disconnect, device number 98 [ 699.510279][T28773] usb 5-1: Manufacturer: syz [ 699.514950][T28773] usb 5-1: SerialNumber: syz [ 699.520084][T13186] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 699.686407][T13186] usb 2-1: Using ep0 maxpacket: 16 [ 699.696046][T13186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.710233][T13186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.721100][T13186] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 699.735443][T13186] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 699.744632][T13186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.757248][T13186] usb 2-1: config 0 descriptor?? [ 699.936219][T13210] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 699.957583][T28773] legousbtower 5-1:14.57: interrupt endpoints not found [ 700.042283][T13186] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 700.051191][T13186] microsoft 0003:045E:07DA.0046: ignoring exceeding usage max [ 700.072361][T13186] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0046/input/input90 [ 700.089093][T13210] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 700.104070][T13210] usb 4-1: can't read configurations, error -61 [ 700.148084][T13186] microsoft 0003:045E:07DA.0046: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 700.176922][T28773] legousbtower 5-1:14.228: get version request failed: -71 [ 700.197312][T28773] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 700.213689][T28773] usb 5-1: USB disconnect, device number 109 [ 700.236302][T13210] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 700.398789][T13210] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 700.406724][T13210] usb 4-1: can't read configurations, error -61 [ 700.413395][T13210] usb usb4-port1: attempt power cycle [ 700.458102][ T4992] Dev loop2: unable to read RDB block 7 [ 700.463872][ T4992] loop2: AHDI p1 p2 p3 [ 700.471473][ T4992] loop2: partition table partially beyond EOD, truncated [ 700.480099][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 700.487380][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 700.756652][T13210] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 700.778498][T13210] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 700.786629][T13210] usb 4-1: can't read configurations, error -61 [ 700.856349][T13186] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 700.916242][T13210] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 700.939628][T13210] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 700.947434][T13210] usb 4-1: can't read configurations, error -61 [ 700.954060][T13210] usb usb4-port1: unable to enumerate USB device [ 700.960631][T13198] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 701.006585][T13186] usb 3-1: Using ep0 maxpacket: 8 [ 701.013434][T13186] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 701.022226][T13186] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 701.032449][T13186] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 701.042813][T13186] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 701.052967][T13186] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.066200][T13186] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 701.075319][T13186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.118163][T13198] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.129367][T13198] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 701.139287][T13198] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.152695][T13198] usb 5-1: config 0 interface 0 has no altsetting 0 [ 701.161709][T13198] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 701.171196][T13198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.179757][T13198] usb 5-1: Product: syz [ 701.184054][T13198] usb 5-1: Manufacturer: syz [ 701.188994][T13198] usb 5-1: SerialNumber: syz [ 701.195525][T13198] usb 5-1: config 0 descriptor?? [ 701.209624][T13198] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 701.293411][T13186] usb 3-1: GET_CAPABILITIES returned 0 [ 701.299991][T13186] usbtmc 3-1:16.0: can't read capabilities [ 701.336550][T28773] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 701.464754][T13198] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 701.473073][T13198] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 701.476386][T28773] usb 2-1: device descriptor read/64, error -32 [ 701.487622][T13198] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 701.733234][T13198] usb 5-1: USB disconnect, device number 110 [ 701.746609][T28773] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 701.886272][T28773] usb 2-1: device descriptor read/64, error -32 [ 702.126234][T28773] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 702.146910][T28773] usb 2-1: device descriptor read/8, error -32 [ 702.226561][T13210] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 702.387208][T13210] usb 4-1: Using ep0 maxpacket: 8 [ 702.393006][T28773] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 702.399693][T13210] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 702.427089][T13210] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 702.438541][T13210] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 702.479366][T13210] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.497459][T13210] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 702.510289][T13210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.636440][T28773] usb 2-1: device not accepting address 86, error -71 [ 702.655651][T13185] usb 2-1: USB disconnect, device number 86 [ 702.744159][T13210] usb 4-1: GET_CAPABILITIES returned 0 [ 702.744187][T13210] usbtmc 4-1:16.0: can't read capabilities [ 702.946777][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.946809][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948148][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948183][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948209][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948233][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948257][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948282][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948307][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948331][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948356][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948538][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948566][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948591][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948637][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 702.948675][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 703.386379][T13185] usb 4-1: USB disconnect, device number 103 [ 703.524149][T28773] usb 3-1: USB disconnect, device number 43 [ 703.858965][ T4992] Dev loop2: unable to read RDB block 7 [ 703.864629][ T4992] loop2: AHDI p1 p2 p3 [ 703.870441][ T4992] loop2: partition table partially beyond EOD, truncated [ 703.878289][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 703.885623][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 703.981896][ T4078] lo: entered allmulticast mode [ 704.010488][ T4078] tunl0: entered allmulticast mode [ 704.029110][ T4078] gre0: entered allmulticast mode [ 704.044347][ T4078] gretap0: entered allmulticast mode [ 704.066243][T28773] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 704.075619][ T4078] bridge1: port 1(erspan0) entered disabled state [ 704.093899][ T4078] ip_vti0: entered allmulticast mode [ 704.100765][ T4078] ip6_vti0: entered allmulticast mode [ 704.108680][ T4078] sit0: entered allmulticast mode [ 704.117536][ T4078] ip6tnl0: entered allmulticast mode [ 704.124542][ T4078] ip6gre0: entered allmulticast mode [ 704.132217][ T4078] syz_tun: entered allmulticast mode [ 704.140028][ T4078] ip6gretap0: entered allmulticast mode [ 704.148634][ T4078] vcan0: entered allmulticast mode [ 704.155405][ T4078] bond0: entered allmulticast mode [ 704.161580][ T4078] bond_slave_0: entered allmulticast mode [ 704.167656][ T4078] bond_slave_1: entered allmulticast mode [ 704.174376][ T4078] dummy0: entered allmulticast mode [ 704.181197][ T4078] nlmon0: entered allmulticast mode [ 704.188456][ T4078] batadv0: entered allmulticast mode [ 704.195702][ T4078] vxcan0: entered allmulticast mode [ 704.202409][ T4078] vxcan1: entered allmulticast mode [ 704.209524][ T4078] veth0: entered allmulticast mode [ 704.217178][ T4078] veth1: entered allmulticast mode [ 704.224853][ T4078] wg0: entered allmulticast mode [ 704.232020][ T4078] wg1: entered allmulticast mode [ 704.239545][ T4078] wg2: entered allmulticast mode [ 704.245767][ T4078] veth0_to_bridge: entered allmulticast mode [ 704.246272][T28773] usb 2-1: Using ep0 maxpacket: 32 [ 704.257401][ T4078] x9: entered allmulticast mode [ 704.264895][ T4078] veth1_to_bridge: entered allmulticast mode [ 704.265878][T28773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 704.281243][ T4078] bridge_slave_1: entered allmulticast mode [ 704.291297][T28773] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 704.300319][T28773] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 704.307446][ T4078] veth0_to_bond: entered allmulticast mode [ 704.312334][T28773] usb 2-1: config 14 has no interface number 0 [ 704.322479][T28773] usb 2-1: config 14 has no interface number 1 [ 704.329203][T28773] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 704.340844][T28773] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 704.354144][T28773] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 704.366253][T28773] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 704.377068][ T4078] veth1_to_bond: entered allmulticast mode [ 704.381724][T28773] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 704.418688][T28773] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.452429][T28773] usb 2-1: config 14 interface 57 has no altsetting 0 [ 704.468976][T28773] usb 2-1: config 14 interface 228 has no altsetting 0 [ 704.489969][T28773] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 704.506208][T28773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.521473][T28773] usb 2-1: Product: syz [ 704.529806][ T4093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3073'. [ 704.540343][T28773] usb 2-1: Manufacturer: syz [ 704.556169][T28773] usb 2-1: SerialNumber: syz [ 704.581284][ T4078] veth0_to_team: entered allmulticast mode [ 704.650660][ T4078] team_slave_0: entered allmulticast mode [ 704.657629][ T4078] veth1_to_team: entered allmulticast mode [ 704.665597][ T4078] team_slave_1: entered allmulticast mode [ 704.674855][ T4078] veth1_to_batadv: entered allmulticast mode [ 704.683523][ T4078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.692490][ T4078] batadv_slave_1: entered allmulticast mode [ 704.711794][ T4078] xfrm0: entered allmulticast mode [ 704.730140][ T4078] veth0_to_hsr: entered allmulticast mode [ 704.753285][ T4078] hsr_slave_0: entered allmulticast mode [ 704.774413][ T4078] veth1_to_hsr: entered allmulticast mode [ 704.793422][ T4078] hsr_slave_1: entered allmulticast mode [ 704.815785][ T4078] hsr0: entered allmulticast mode [ 704.839222][ T4078] veth1_virt_wifi: entered allmulticast mode [ 704.871258][ T4078] veth0_virt_wifi: entered allmulticast mode [ 704.907113][ T4078] virt_wifi0: entered allmulticast mode [ 704.921914][ T4078] veth1_vlan: entered allmulticast mode [ 704.945859][ T4078] veth0_vlan: entered allmulticast mode [ 704.969159][ T4078] vlan1: entered allmulticast mode [ 704.982331][ T4078] macvlan0: entered allmulticast mode [ 704.990442][T28773] legousbtower 2-1:14.57: interrupt endpoints not found [ 705.002787][ T4078] macvlan1: entered allmulticast mode [ 705.018170][ T4078] ipvlan0: entered allmulticast mode [ 705.032130][ T4078] ipvlan1: entered allmulticast mode [ 705.044193][ T4078] veth1_macvtap: entered allmulticast mode [ 705.065811][ T4078] veth0_macvtap: entered allmulticast mode [ 705.084051][ T4078] macvtap0: entered allmulticast mode [ 705.103164][ T4078] macsec0: left promiscuous mode [ 705.115606][ T4078] macsec0: entered allmulticast mode [ 705.128335][ T4078] geneve0: entered allmulticast mode [ 705.141956][ T4078] geneve1: entered allmulticast mode [ 705.161196][ T4078] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 705.181390][ T4078] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 705.199733][T28773] legousbtower 2-1:14.228: get version request failed: -71 [ 705.211553][ T4078] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 705.219141][T28773] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 705.234724][T28773] usb 2-1: USB disconnect, device number 87 [ 705.255999][ T4078] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 705.292664][ T4078] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 705.310172][ T4078] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 705.330053][ T4078] geneve2: entered allmulticast mode [ 705.349377][ T4078] bridge1: entered allmulticast mode [ 705.362716][ T4078] bond1: entered allmulticast mode [ 705.378164][ T4078] ipip0: entered allmulticast mode [ 705.389359][ T4078] vti0: entered allmulticast mode [ 705.406655][ T4078] veth2: entered allmulticast mode [ 705.415550][ T4078] veth3: entered allmulticast mode [ 705.435556][ T4078] bond2: entered allmulticast mode [ 705.441684][ T4078] geneve3: entered allmulticast mode [ 705.453167][ T4078] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 705.468656][ T4078] veth4: entered allmulticast mode [ 705.484336][ T4078] veth5: entered allmulticast mode [ 705.494681][ T4078] sit1: entered allmulticast mode [ 705.537323][ T4078] ip6gretap1: entered allmulticast mode [ 705.555744][ T4078] bond3: left promiscuous mode [ 705.562865][ T4078] bridge2: left promiscuous mode [ 705.581079][ T4078] bond3: entered allmulticast mode [ 705.597510][ T4078] bridge2: entered allmulticast mode [ 705.609121][ T4078] syztnl2: entered allmulticast mode [ 705.621856][ T4078] @: entered allmulticast mode [ 705.639070][ T4078] ip6erspan0: left promiscuous mode [ 705.645780][ T4078] ip6erspan0: entered allmulticast mode [ 705.664541][ T4078] bond4: entered allmulticast mode [ 705.674816][ T4078] bond5: entered allmulticast mode [ 705.688319][ T4078] veth6: entered allmulticast mode [ 705.704139][ T4078] veth7: entered allmulticast mode [ 705.713656][ T4078] bridge3: entered allmulticast mode [ 705.728703][ T4078] hsr0.1: entered allmulticast mode [ 705.744601][ T4078] ipvlan2: entered allmulticast mode [ 705.755574][ T4078] bond6: entered allmulticast mode [ 705.821841][ T4078] bond7: entered allmulticast mode [ 705.844057][ T4078] bridge4: left promiscuous mode [ 705.858643][ T4078] bridge4: entered allmulticast mode [ 705.911763][ T4112] Cannot find del_set index 0 as target [ 706.107579][ T4078] vti60: entered allmulticast mode [ 706.133907][ T4093] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 706.487143][T24817] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.496613][T24817] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.512960][T24817] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.528107][T24817] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.576594][T13210] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 706.741613][ T4992] Dev loop2: unable to read RDB block 7 [ 706.749074][ T4992] loop2: AHDI p1 p2 p3 [ 706.754071][ T4992] loop2: partition table partially beyond EOD, truncated [ 706.763736][T13210] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 706.774392][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 706.783283][ T4992] loop2: p2 start 1702059890 is beyond EOD, [ 706.783382][T13210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 706.799691][T13210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 706.816772][ T4992] truncated [ 706.842192][T13210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 706.877583][T13210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 706.886853][T13210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 706.900876][T13210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 706.926376][T13210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 706.935663][T13210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 706.947869][T13210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 706.958663][T13210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 706.969936][T13210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 706.981141][T13210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 706.988998][T13210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 707.001403][T13210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 707.044393][T13210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 707.054369][ T4144] fuse: Bad value for 'fd' [ 707.083995][T13210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 707.109694][T13210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 707.146808][T13210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 707.178847][T13210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 707.203754][T13210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 707.214971][T13210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 707.223278][T13210] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 707.232397][T13210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 707.243565][T13210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 707.253481][T13210] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 707.264540][T13210] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 707.274564][T13210] usb 5-1: Product: syz [ 707.279926][T13210] usb 5-1: Manufacturer: syz [ 707.284678][T13210] usb 5-1: SerialNumber: syz [ 707.304375][T13210] usb 5-1: config 0 descriptor?? [ 707.355935][T13210] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 707.835145][T13210] usb 5-1: USB disconnect, device number 111 [ 707.842439][T13210] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 708.136334][T13185] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 708.308045][T13185] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 708.329526][T13185] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 708.358854][T13185] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 708.380858][T13185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.395743][T13185] usb 4-1: Product: syz [ 708.401880][T13185] usb 4-1: Manufacturer: syz [ 708.417349][T13185] usb 4-1: SerialNumber: syz [ 708.442869][T13185] usb 4-1: config 0 descriptor?? [ 708.456218][T13210] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 708.616306][T13210] usb 2-1: Using ep0 maxpacket: 32 [ 708.624628][T13210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 708.634260][T13210] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 708.645038][T13210] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 708.653630][T13210] usb 2-1: config 14 has no interface number 0 [ 708.661543][T13210] usb 2-1: config 14 has no interface number 1 [ 708.668068][T13210] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 708.681214][T13210] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 708.696967][T13210] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 708.709549][T13210] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 708.739612][T13210] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 708.756421][T13185] mos7840 4-1:0.0: required endpoints missing [ 708.758900][T13210] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.778033][T13210] usb 2-1: config 14 interface 57 has no altsetting 0 [ 708.786500][T13210] usb 2-1: config 14 interface 228 has no altsetting 0 [ 708.798205][T13210] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 708.827937][T13185] usb 4-1: USB disconnect, device number 104 [ 708.833172][T13210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.848924][T13210] usb 2-1: Product: syz [ 708.860349][T13210] usb 2-1: Manufacturer: syz [ 708.873077][T13210] usb 2-1: SerialNumber: syz [ 708.989617][ T4992] Dev loop2: unable to read RDB block 7 [ 708.995408][ T4992] loop2: AHDI p1 p2 p3 [ 709.000866][ T4992] loop2: partition table partially beyond EOD, truncated [ 709.009388][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 709.018257][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 709.192098][ T4219] netlink: 'syz.0.3088': attribute type 11 has an invalid length. [ 709.204869][ T4219] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3088'. [ 709.219825][ T4211] random: crng reseeded on system resumption [ 709.311335][T13210] legousbtower 2-1:14.57: interrupt endpoints not found [ 709.340351][ T4226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 709.521975][T13210] legousbtower 2-1:14.228: get version request failed: -71 [ 709.529760][T13210] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 709.544965][T13210] usb 2-1: USB disconnect, device number 88 [ 710.185092][ T30] audit: type=1326 audit(1782126682.308:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.216177][ T30] audit: type=1326 audit(1782126682.308:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.245426][ T30] audit: type=1326 audit(1782126682.308:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.278603][ T30] audit: type=1326 audit(1782126682.308:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.306299][ T30] audit: type=1326 audit(1782126682.308:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.355640][ T30] audit: type=1326 audit(1782126682.308:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.412850][ T30] audit: type=1326 audit(1782126682.308:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.498020][ T30] audit: type=1326 audit(1782126682.308:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.524860][T13210] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 710.547212][ T30] audit: type=1326 audit(1782126682.308:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.587733][ T30] audit: type=1326 audit(1782126682.308:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4269 comm="syz.3.3095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08ef9ce59 code=0x7ffc0000 [ 710.698015][T13210] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 710.709882][T13210] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 710.731295][T13210] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 710.754273][T13210] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 710.764038][T13210] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 710.801795][T13210] usb 5-1: Manufacturer: syz [ 710.834564][T13210] usb 5-1: SerialNumber: syz [ 711.074020][T13210] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 711.094500][T13210] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input91 [ 711.109444][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 711.116725][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 711.123704][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 711.130792][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 711.137781][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 711.144800][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 711.152192][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 711.159177][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 711.165979][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 711.177050][T13210] usb 5-1: USB disconnect, device number 112 [ 711.239292][ T4992] Dev loop2: unable to read RDB block 7 [ 711.246648][ T4992] loop2: AHDI p1 p2 p3 [ 711.253018][ T4992] loop2: partition table partially beyond EOD, truncated [ 711.271223][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 711.278978][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 711.517823][ T4431] syzkaller1: entered promiscuous mode [ 711.524117][ T4431] syzkaller1: entered allmulticast mode [ 711.660838][ T4442] netlink: 400 bytes leftover after parsing attributes in process `syz.1.3104'. [ 711.706464][T13185] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 711.730404][ T4992] Dev loop2: unable to read RDB block 7 [ 711.741000][ T4992] loop2: AHDI p1 p2 p3 [ 711.748950][ T4992] loop2: partition table partially beyond EOD, truncated [ 711.757493][ T4455] fuse: Invalid rootmode [ 711.761979][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 711.778380][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 711.836555][T13185] usb 5-1: device descriptor read/64, error -71 [ 711.867012][T13186] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 711.906300][T13215] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 712.028278][T13186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.039081][T28773] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 712.048484][T13186] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 712.058600][T13186] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 712.059368][T13215] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 712.073743][T13186] usb 1-1: Manufacturer: syz [ 712.080541][T13215] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 712.083086][T13186] usb 1-1: SerialNumber: syz [ 712.092603][T13215] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 712.092635][T13215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.097823][T13185] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 712.125406][T13186] usb 1-1: config 0 descriptor?? [ 712.127695][ T4446] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 712.149352][T13215] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 712.226829][T28773] usb 3-1: Using ep0 maxpacket: 32 [ 712.234452][T28773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 712.244023][T28773] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 712.252483][T28773] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 712.261733][T28773] usb 3-1: config 14 has no interface number 0 [ 712.268243][T13185] usb 5-1: device descriptor read/64, error -71 [ 712.274860][T28773] usb 3-1: config 14 has no interface number 1 [ 712.281960][T28773] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 712.293377][T28773] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 712.305590][T28773] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 712.317218][T28773] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 712.329025][T28773] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 712.340595][T28773] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.355531][T28773] usb 3-1: config 14 interface 57 has no altsetting 0 [ 712.362748][T28773] usb 3-1: config 14 interface 228 has no altsetting 0 [ 712.372112][T28773] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 712.382689][T13186] usb 1-1: USB disconnect, device number 54 [ 712.390615][T13185] usb usb5-port1: attempt power cycle [ 712.399547][T28758] usb 4-1: USB disconnect, device number 105 [ 712.412965][T28773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.443810][T28773] usb 3-1: Product: syz [ 712.454706][T28773] usb 3-1: Manufacturer: syz [ 712.459456][T28773] usb 3-1: SerialNumber: syz [ 712.766247][T13185] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 712.787036][T13185] usb 5-1: device descriptor read/8, error -71 [ 712.846320][T13186] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 712.905378][T28773] legousbtower 3-1:14.57: interrupt endpoints not found [ 713.008990][T13186] usb 2-1: unable to get BOS descriptor or descriptor too short [ 713.017780][T13186] usb 2-1: not running at top speed; connect to a high speed hub [ 713.026623][T13186] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 713.038442][T13185] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 713.047330][T13186] usb 2-1: language id specifier not provided by device, defaulting to English [ 713.058274][T13186] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.068721][T13186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.077525][T13186] usb 2-1: Product: syz [ 713.081882][T13185] usb 5-1: device descriptor read/8, error -71 [ 713.088485][T13186] usb 2-1: Manufacturer: [ 713.093315][T13186] usb 2-1: SerialNumber: syz [ 713.118530][T28773] legousbtower 3-1:14.228: get version request failed: -71 [ 713.126350][T28773] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 713.142202][T28773] usb 3-1: USB disconnect, device number 44 [ 713.155314][ T4521] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 713.208476][T13185] usb usb5-port1: unable to enumerate USB device [ 713.257475][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3110'. [ 713.880254][ T4992] Dev loop2: unable to read RDB block 7 [ 713.886015][ T4992] loop2: AHDI p1 p2 p3 [ 713.890738][ T4992] loop2: partition table partially beyond EOD, truncated [ 713.898548][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 713.907570][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 714.186220][T28773] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 714.346530][T28773] usb 3-1: Using ep0 maxpacket: 16 [ 714.354617][T28773] usb 3-1: config 1 interface 0 altsetting 241 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 714.369580][T28773] usb 3-1: config 1 interface 0 has no altsetting 0 [ 714.378864][T28773] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 714.388339][T28773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.397698][T28773] usb 3-1: Product: syz [ 714.402024][T28773] usb 3-1: Manufacturer: syz [ 714.407256][T28773] usb 3-1: SerialNumber: syz [ 714.671878][T28773] usb 3-1: USB disconnect, device number 45 [ 714.836678][T13185] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 714.876233][T13210] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 714.986535][T28758] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 715.016582][T13185] usb 4-1: Using ep0 maxpacket: 8 [ 715.023435][T13185] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.026489][T13210] usb 5-1: Using ep0 maxpacket: 32 [ 715.035843][T13185] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 715.049338][T13210] usb 5-1: config 151 has too many interfaces: 37, using maximum allowed: 32 [ 715.054899][T13185] usb 4-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 715.062349][T13210] usb 5-1: config 151 has 1 interface, different from the descriptor's value: 37 [ 715.078401][T13185] usb 4-1: config 0 interface 0 has no altsetting 0 [ 715.083925][T13210] usb 5-1: config 151 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.091047][T13185] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 715.110832][T13185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.121720][T13210] usb 5-1: config 151 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.125766][T13185] usb 4-1: config 0 descriptor?? [ 715.133847][T13210] usb 5-1: config 151 interface 0 has no altsetting 0 [ 715.136952][T28758] usb 1-1: device descriptor read/64, error -71 [ 715.151839][T13210] usb 5-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 715.161070][T13210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.181097][T13210] usbhid 5-1:151.0: fixing wrong optional hid class descriptors count [ 715.274508][ T4992] Dev loop2: unable to read RDB block 7 [ 715.281076][ T4992] loop2: AHDI p1 p2 p3 [ 715.285373][ T4992] loop2: partition table partially beyond EOD, truncated [ 715.294118][ T4992] loop2: p1 start 1601398130 is beyond EOD, truncated [ 715.301664][ T4992] loop2: p2 start 1702059890 is beyond EOD, truncated [ 715.376985][T28758] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 715.388817][T13210] hid (null): unknown global tag 0xc [ 715.398018][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.408300][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.415430][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.422973][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.430264][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.438059][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.445186][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.452742][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.460095][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.467764][T13210] evision 0003:320F:5041.0047: unknown main item tag 0x0 [ 715.477418][T13210] evision 0003:320F:5041.0047: reserved main item tag 0xe [ 715.484862][T13210] evision 0003:320F:5041.0047: unknown global tag 0xc [ 715.491971][T13210] evision 0003:320F:5041.0047: item 0 1 1 12 parsing failed [ 715.500343][T13210] evision 0003:320F:5041.0047: probe with driver evision failed with error -22 [ 715.516607][T28758] usb 1-1: device descriptor read/64, error -71 [ 715.559951][T13186] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 715.576538][T28773] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 715.588461][T13186] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 715.596574][T13210] usb 5-1: USB disconnect, device number 117 [ 715.637163][T28758] usb usb1-port1: attempt power cycle [ 715.661949][T13186] usb 2-1: USB disconnect, device number 89 [ 715.725325][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.742186][T13185] asus 0003:0B05:19B6.0048: hidraw0: USB HID v0.04 Device [HID 0b05:19b6] on usb-dummy_hcd.3-1/input0 [ 715.811388][T28773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.826198][T28773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 715.835243][T28773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 715.846860][T28773] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 715.856007][T28773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.869887][ T4602] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 715.879331][T28773] hub 3-1:1.0: bad descriptor, ignoring hub [ 715.886302][T28773] hub 3-1:1.0: probe with driver hub failed with error -5 [ 715.894023][T28773] cdc_wdm 3-1:1.0: skipping garbage [ 715.901106][T28773] cdc_wdm 3-1:1.0: skipping garbage [ 715.907298][T28773] cdc_wdm 3-1:1.0: skipping garbage [ 715.915349][T28773] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 715.922339][T28773] cdc_wdm 3-1:1.0: Unknown control protocol [ 715.979069][T28773] usb 4-1: USB disconnect, device number 106 [ 715.991063][T28773] ------------[ cut here ]------------ [ 715.996696][T28773] !work->func [ 715.996722][T28773] WARNING: kernel/workqueue.c:4335 at __flush_work+0xb8f/0xca0, CPU#1: kworker/1:1/28773 [ 716.010317][T28773] Modules linked in: [ 716.014239][T28773] CPU: 1 UID: 0 PID: 28773 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.025419][T28773] Tainted: [L]=SOFTLOCKUP [ 716.029872][T28773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 716.040318][T28773] Workqueue: usb_hub_wq hub_event [ 716.045532][T28773] RIP: 0010:__flush_work+0xb8f/0xca0 [ 716.051319][T28773] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f0 d1 38 00 90 0f 0b 90 e9 7c ff ff ff e8 e2 d1 38 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 c8 [ 716.071732][T28773] RSP: 0018:ffffc90005846f40 EFLAGS: 00010287 [ 716.078173][T28773] RAX: ffffffff818d62ce RBX: ffff88807e1e30f0 RCX: 0000000000100000 [ 716.086671][T28773] RDX: ffffc9001aec9000 RSI: 00000000000052e3 RDI: 00000000000052e4 [ 716.095075][T28773] RBP: ffffc90005847100 R08: ffffffff9031adf7 R09: 1ffffffff20635be [ 716.103566][T28773] R10: dffffc0000000000 R11: fffffbfff20635bf R12: dffffc0000000000 [ 716.111634][T28773] R13: 1ffff1100fc3c61e R14: 1ffff92000b08df0 R15: ffff88807e1e30d8 [ 716.119991][T28773] FS: 0000000000000000(0000) GS:ffff888125353000(0000) knlGS:0000000000000000 [ 716.129468][T28773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.136979][T28773] CR2: 00007f503095135a CR3: 0000000031bdc000 CR4: 00000000003526f0 [ 716.145979][T28773] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.154095][T28773] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 716.162465][T28773] Call Trace: [ 716.165970][T28773] [ 716.169333][T28773] ? __pfx___flush_work+0x10/0x10 [ 716.175404][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.180297][T28773] ? work_grab_pending+0x3d1/0x930 [ 716.185639][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.190824][T28773] ? trace_irq_enable+0x3b/0x140 [ 716.197077][T28773] ? __cancel_work_sync+0x5c/0x110 [ 716.202530][T28773] __cancel_work_sync+0xbe/0x110 [ 716.207724][T28773] asus_remove+0x147/0x180 [ 716.212550][T28773] ? hid_device_remove+0xb3/0x370 [ 716.217997][T28773] ? __pfx_asus_remove+0x10/0x10 [ 716.222999][T28773] hid_device_remove+0x230/0x370 [ 716.228127][T28773] ? __pfx_hid_device_remove+0x10/0x10 [ 716.233813][T28773] device_release_driver_internal+0x48b/0x880 [ 716.241021][T28773] bus_remove_device+0x444/0x560 [ 716.246043][T28773] ? __pfx_bus_remove_device+0x10/0x10 [ 716.252130][T28773] ? kernfs_remove_by_name_ns+0x101/0x140 [ 716.258009][T28773] device_del+0x524/0x8f0 [ 716.262387][T28773] ? __pfx_device_del+0x10/0x10 [ 716.267314][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.272342][T28773] hid_destroy_device+0x6b/0x1b0 [ 716.277875][T28773] usbhid_disconnect+0x9f/0xc0 [ 716.282831][T28773] usb_unbind_interface+0x295/0x9f0 [ 716.288298][T28773] ? up_write+0x19f/0x4a0 [ 716.292698][T28773] ? kernfs_remove_by_name_ns+0x101/0x140 [ 716.298562][T28773] ? __pfx_usb_unbind_interface+0x10/0x10 [ 716.304348][T28773] device_release_driver_internal+0x4f5/0x880 [ 716.310834][T28773] bus_remove_device+0x444/0x560 [ 716.315868][T28773] ? __pfx_bus_remove_device+0x10/0x10 [ 716.321446][T28773] ? kernfs_remove_by_name_ns+0x101/0x140 [ 716.327528][T28773] device_del+0x524/0x8f0 [ 716.331934][T28773] ? __pfx_device_del+0x10/0x10 [ 716.337184][T28773] ? kobject_put+0x516/0x550 [ 716.341948][T28773] usb_disable_device+0x3d4/0x8d0 [ 716.347094][T28773] usb_disconnect+0x346/0x9a0 [ 716.351838][T28773] hub_event+0x1bbb/0x4d30 [ 716.356382][T28773] ? trace_hrtimer_start+0x82/0x200 [ 716.361655][T28773] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 716.368710][T28773] ? __pfx_hub_event+0x10/0x10 [ 716.373756][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.378965][T28773] ? lock_acquire+0x5f/0x350 [ 716.383654][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.388791][T28773] ? process_scheduled_works+0xa20/0x14e0 [ 716.394586][T28773] process_scheduled_works+0xa8e/0x14e0 [ 716.400560][T28773] ? __pfx_process_scheduled_works+0x10/0x10 [ 716.406664][T28773] ? do_raw_spin_lock+0x12b/0x2f0 [ 716.411753][T28773] ? assign_work+0x3cf/0x5d0 [ 716.416546][T28773] worker_thread+0xa47/0xfb0 [ 716.421233][T28773] kthread+0x388/0x470 [ 716.425360][T28773] ? __pfx_worker_thread+0x10/0x10 [ 716.430898][T28773] ? __pfx_kthread+0x10/0x10 [ 716.435598][T28773] ret_from_fork+0x514/0xb70 [ 716.440353][T28773] ? __pfx_ret_from_fork+0x10/0x10 [ 716.445563][T28773] ? __switch_to+0xc89/0x1420 [ 716.450467][T28773] ? __pfx_kthread+0x10/0x10 [ 716.455178][T28773] ret_from_fork_asm+0x1a/0x30 [ 716.460529][T28773] [ 716.463667][T28773] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 716.471101][T28773] CPU: 1 UID: 0 PID: 28773 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.482182][T28773] Tainted: [L]=SOFTLOCKUP [ 716.486541][T28773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 716.496677][T28773] Workqueue: usb_hub_wq hub_event [ 716.501825][T28773] Call Trace: [ 716.505136][T28773] [ 716.508117][T28773] vpanic+0x56c/0xa60 [ 716.512161][T28773] ? __pfx__printk+0x10/0x10 [ 716.516867][T28773] ? __pfx_vpanic+0x10/0x10 [ 716.521466][T28773] ? is_bpf_text_address+0x292/0x2b0 [ 716.526828][T28773] ? is_bpf_text_address+0x26/0x2b0 [ 716.532089][T28773] panic+0xc5/0xd0 [ 716.535867][T28773] ? __pfx_panic+0x10/0x10 [ 716.540364][T28773] ? ret_from_fork_asm+0x1a/0x30 [ 716.545404][T28773] __warn+0x315/0x4c0 [ 716.549458][T28773] ? __flush_work+0xb8f/0xca0 [ 716.554259][T28773] ? __flush_work+0xb8f/0xca0 [ 716.559067][T28773] __report_bug+0x331/0x530 [ 716.563696][T28773] ? __flush_work+0xb8f/0xca0 [ 716.568476][T28773] ? __pfx___report_bug+0x10/0x10 [ 716.573578][T28773] ? ret_from_fork_asm+0x1a/0x30 [ 716.578666][T28773] ? stack_trace_save+0xa9/0x100 [ 716.583702][T28773] ? __pfx_stack_trace_save+0x10/0x10 [ 716.589199][T28773] ? __flush_work+0xb8f/0xca0 [ 716.594002][T28773] report_bug+0x16a/0x220 [ 716.598428][T28773] ? __flush_work+0xb8f/0xca0 [ 716.603183][T28773] ? __flush_work+0xb91/0xca0 [ 716.607950][T28773] handle_bug+0x9c/0x200 [ 716.612292][T28773] exc_invalid_op+0x1a/0x50 [ 716.616853][T28773] asm_exc_invalid_op+0x1a/0x20 [ 716.621757][T28773] RIP: 0010:__flush_work+0xb8f/0xca0 [ 716.627153][T28773] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f0 d1 38 00 90 0f 0b 90 e9 7c ff ff ff e8 e2 d1 38 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 c8 [ 716.646872][T28773] RSP: 0018:ffffc90005846f40 EFLAGS: 00010287 [ 716.653060][T28773] RAX: ffffffff818d62ce RBX: ffff88807e1e30f0 RCX: 0000000000100000 [ 716.661101][T28773] RDX: ffffc9001aec9000 RSI: 00000000000052e3 RDI: 00000000000052e4 [ 716.669137][T28773] RBP: ffffc90005847100 R08: ffffffff9031adf7 R09: 1ffffffff20635be [ 716.677170][T28773] R10: dffffc0000000000 R11: fffffbfff20635bf R12: dffffc0000000000 [ 716.685205][T28773] R13: 1ffff1100fc3c61e R14: 1ffff92000b08df0 R15: ffff88807e1e30d8 [ 716.693285][T28773] ? __flush_work+0xb8e/0xca0 [ 716.698089][T28773] ? __pfx___flush_work+0x10/0x10 [ 716.703237][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.708064][T28773] ? work_grab_pending+0x3d1/0x930 [ 716.713283][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.718129][T28773] ? trace_irq_enable+0x3b/0x140 [ 716.723182][T28773] ? __cancel_work_sync+0x5c/0x110 [ 716.728352][T28773] __cancel_work_sync+0xbe/0x110 [ 716.733362][T28773] asus_remove+0x147/0x180 [ 716.737927][T28773] ? hid_device_remove+0xb3/0x370 [ 716.743015][T28773] ? __pfx_asus_remove+0x10/0x10 [ 716.748028][T28773] hid_device_remove+0x230/0x370 [ 716.753028][T28773] ? __pfx_hid_device_remove+0x10/0x10 [ 716.758552][T28773] device_release_driver_internal+0x48b/0x880 [ 716.764763][T28773] bus_remove_device+0x444/0x560 [ 716.769837][T28773] ? __pfx_bus_remove_device+0x10/0x10 [ 716.775385][T28773] ? kernfs_remove_by_name_ns+0x101/0x140 [ 716.781202][T28773] device_del+0x524/0x8f0 [ 716.785606][T28773] ? __pfx_device_del+0x10/0x10 [ 716.790525][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.795382][T28773] hid_destroy_device+0x6b/0x1b0 [ 716.800391][T28773] usbhid_disconnect+0x9f/0xc0 [ 716.805257][T28773] usb_unbind_interface+0x295/0x9f0 [ 716.810629][T28773] ? up_write+0x19f/0x4a0 [ 716.815083][T28773] ? kernfs_remove_by_name_ns+0x101/0x140 [ 716.820880][T28773] ? __pfx_usb_unbind_interface+0x10/0x10 [ 716.826704][T28773] device_release_driver_internal+0x4f5/0x880 [ 716.832853][T28773] bus_remove_device+0x444/0x560 [ 716.837890][T28773] ? __pfx_bus_remove_device+0x10/0x10 [ 716.843430][T28773] ? kernfs_remove_by_name_ns+0x101/0x140 [ 716.849222][T28773] device_del+0x524/0x8f0 [ 716.853630][T28773] ? __pfx_device_del+0x10/0x10 [ 716.858614][T28773] ? kobject_put+0x516/0x550 [ 716.863292][T28773] usb_disable_device+0x3d4/0x8d0 [ 716.868413][T28773] usb_disconnect+0x346/0x9a0 [ 716.873167][T28773] hub_event+0x1bbb/0x4d30 [ 716.877692][T28773] ? trace_hrtimer_start+0x82/0x200 [ 716.882999][T28773] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 716.888458][T28773] ? __pfx_hub_event+0x10/0x10 [ 716.893335][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.898216][T28773] ? lock_acquire+0x5f/0x350 [ 716.902895][T28773] ? rcu_is_watching+0x15/0xb0 [ 716.907749][T28773] ? process_scheduled_works+0xa20/0x14e0 [ 716.913576][T28773] process_scheduled_works+0xa8e/0x14e0 [ 716.919222][T28773] ? __pfx_process_scheduled_works+0x10/0x10 [ 716.925348][T28773] ? do_raw_spin_lock+0x12b/0x2f0 [ 716.930491][T28773] ? assign_work+0x3cf/0x5d0 [ 716.935269][T28773] worker_thread+0xa47/0xfb0 [ 716.939983][T28773] kthread+0x388/0x470 [ 716.944182][T28773] ? __pfx_worker_thread+0x10/0x10 [ 716.949385][T28773] ? __pfx_kthread+0x10/0x10 [ 716.954040][T28773] ret_from_fork+0x514/0xb70 [ 716.958706][T28773] ? __pfx_ret_from_fork+0x10/0x10 [ 716.963873][T28773] ? __switch_to+0xc89/0x1420 [ 716.968661][T28773] ? __pfx_kthread+0x10/0x10 [ 716.973354][T28773] ret_from_fork_asm+0x1a/0x30 [ 716.978214][T28773] [ 716.981913][T28773] Kernel Offset: disabled [ 716.986272][T28773] Rebooting in 86400 seconds..