last executing test programs: 20m23.601091814s ago: executing program 2 (id=3): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x33c}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) 20m19.744852216s ago: executing program 2 (id=7): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 20m4.531199167s ago: executing program 32 (id=7): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) 19m59.774610274s ago: executing program 3 (id=30): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000800000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) 19m59.575263326s ago: executing program 3 (id=32): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ioprio_set$pid(0x3, 0x0, 0x0) 19m58.461272665s ago: executing program 3 (id=33): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 19m58.30908536s ago: executing program 3 (id=35): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 19m55.614553617s ago: executing program 3 (id=39): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r5, &(0x7f0000004440)=""/4096, 0x1000) 19m51.892182917s ago: executing program 3 (id=45): socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0'], 0x13) shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 19m36.230524323s ago: executing program 33 (id=45): socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0'], 0x13) shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 17m28.119701593s ago: executing program 0 (id=234): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0xffffffff, 0xfffff7ff, 0x0, 0x83, 0xffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x1, 0x2003, 0x16, 0x90, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 17m26.226791463s ago: executing program 0 (id=235): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000001100)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0xa}}, 0x0}}], 0x0, 0x0, 0x0}) 17m21.789603341s ago: executing program 0 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x80, 0xff, 0x3}) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000040)={0x1, 0x68c44b42}) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0xa08}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 17m20.341929615s ago: executing program 0 (id=242): syz_io_uring_setup(0x6fb, &(0x7f00000004c0)={0x0, 0xf635, 0x8000, 0x0, 0x215}, &(0x7f0000000240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setresuid(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xfff1, 0xffff}}}, 0x24}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 17m19.121322907s ago: executing program 0 (id=244): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) 17m18.905317152s ago: executing program 0 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000095000000000000000000000000000000000000e40a3850c0efdc0ea814cb8e73445409406608bd6dedd132d6b8f3a3b525bdce380de9484d479b1cb870c046a9a9cd1dde85754f71b3833de61897c82de364aa0db8274d3110cc8bb21d2e983e881e32393a0fb24aeef0b0bba7537c10a489eff663ddf1a73a57e25ea0080b8f3a3f684564bbdfadd8f514b6fdf29df258acc79d080c08556f0a6998511e44f20a25f03ab366bf9c2f2d84e5d5a818f1fc9a4426f6673cbdbaa019698070e271cd467f0ab51fe11ae1"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0x8000, 0x400048}, &(0x7f0000000300)=0x0, &(0x7f00000006c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1) close_range(r4, r5, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 17m3.598778816s ago: executing program 34 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000095000000000000000000000000000000000000e40a3850c0efdc0ea814cb8e73445409406608bd6dedd132d6b8f3a3b525bdce380de9484d479b1cb870c046a9a9cd1dde85754f71b3833de61897c82de364aa0db8274d3110cc8bb21d2e983e881e32393a0fb24aeef0b0bba7537c10a489eff663ddf1a73a57e25ea0080b8f3a3f684564bbdfadd8f514b6fdf29df258acc79d080c08556f0a6998511e44f20a25f03ab366bf9c2f2d84e5d5a818f1fc9a4426f6673cbdbaa019698070e271cd467f0ab51fe11ae1"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0x8000, 0x400048}, &(0x7f0000000300)=0x0, &(0x7f00000006c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1) close_range(r4, r5, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 10m44.809552899s ago: executing program 1 (id=770): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x54) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3ff, 0x1f480, 0x1, 0x399, 0x0, r1}) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sigaltstack(0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r7 = dup(r0) write$P9_RREAD(r5, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xb) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xc, 0xe652, 0x2, 0xcc, 0x4a, 0xff}, 0x9c) 10m41.528511293s ago: executing program 1 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c40) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) 10m40.242079566s ago: executing program 1 (id=779): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) setitimer(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r2 = fsopen(&(0x7f0000000300)='cifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 10m33.30612698s ago: executing program 1 (id=797): pipe(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x7fff, 0xfe000000, 0x28a}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xfff5, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) 10m30.439237418s ago: executing program 1 (id=807): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0xffffffff, 0xfffff7ff, 0x0, 0x83, 0xffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x1, 0x2003, 0x16, 0x90, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 10m28.494491451s ago: executing program 1 (id=810): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000009500"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000002540), 0x2, 0x0) open$dir(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x80000000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa9, &(0x7f0000000400)=""/169, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x10000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x71, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002640)=ANY=[@ANYBLOB='P'], 0x150) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@perf_event={0x8}}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[], 0xa0}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0x76, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f00000000c0)='#(:.', 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20004000) r6 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x2030}], 0x1, 0x0, 0x0, 0x0) 10m11.569682909s ago: executing program 35 (id=810): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000009500"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000002540), 0x2, 0x0) open$dir(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x80000000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa9, &(0x7f0000000400)=""/169, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x10000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x71, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002640)=ANY=[@ANYBLOB='P'], 0x150) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@perf_event={0x8}}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[], 0xa0}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0x76, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f00000000c0)='#(:.', 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20004000) r6 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x2030}], 0x1, 0x0, 0x0, 0x0) 16.656167948s ago: executing program 6 (id=2018): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 16.09289999s ago: executing program 8 (id=2019): r0 = socket$inet6(0xa, 0x3, 0xff) sendto(r0, 0x0, 0x0, 0x810, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 15.693725182s ago: executing program 8 (id=2021): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 15.291059278s ago: executing program 8 (id=2022): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x4f, 0xa, 0x2, "3258c5c0d651aa001b0000f4ff4000000000002000e926ba2800"}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x880) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x10, 0x2, {r4, r5/1000+10000}, {0x2, 0x0, 0xe, 0x1, 0x4, 0x9, "914c7bc8"}, 0x7f, 0x3, {&(0x7f0000000300)=[{0x3, 0x5, {0x6}, 0x400}, {0x3, 0x979, {0xfffffff1}, 0xc}]}, 0x99}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r7, &(0x7f00000000c0)=""/152, 0x98) 12.944623811s ago: executing program 5 (id=2026): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 12.926205691s ago: executing program 6 (id=2027): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, &(0x7f0000000440)={0x0, 0x2078, 0x20, 0x0, 0x3a3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) 11.355605081s ago: executing program 6 (id=2029): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x40800) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0xff, 0x4) 8.955967369s ago: executing program 5 (id=2033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 8.919789134s ago: executing program 8 (id=2034): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000100)=[{0xeba3, 0x1000, 0x3e, &(0x7f0000000180)="7d70629e60ef8434edde14bf8da471fccc35c68d824e1495ee3982b3ce40663f9d2f089b6b1aa67a6692b262656102cf6e13f65666a172c7e68b18ca7ac5"}], 0x1}) 8.882906749s ago: executing program 7 (id=2035): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 8.659082665s ago: executing program 5 (id=2037): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 8.143884896s ago: executing program 6 (id=2038): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.781066339s ago: executing program 7 (id=2039): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 7.564373036s ago: executing program 4 (id=2040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r4, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) 7.476904658s ago: executing program 7 (id=2041): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.181268025s ago: executing program 7 (id=2042): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@arm64={0x2, 0xb, 0x7e, '\x00', 0xfffffffffffff7fd}) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.954727518s ago: executing program 4 (id=2043): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x40, 0xc, 0x4, "ff8af547"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.689473956s ago: executing program 8 (id=2044): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.578779524s ago: executing program 5 (id=2045): sendto(0xffffffffffffffff, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 4.872614036s ago: executing program 6 (id=2046): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x8, 0x0, 0xfffffffc}) 4.581312812s ago: executing program 5 (id=2047): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$dsp(0xffffffffffffff9c, 0x0, 0x28041, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.234817434s ago: executing program 5 (id=2048): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000080)="116b41319ef13386d7fd40ac5cf9181c") 3.990313981s ago: executing program 4 (id=2049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r4, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) 2.456876888s ago: executing program 7 (id=2050): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.351813727s ago: executing program 4 (id=2051): 2.291903311s ago: executing program 8 (id=2052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.712210085s ago: executing program 4 (id=2053): r0 = syz_open_dev$vim2m(0x0, 0xdcc2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x1012}) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000008000000fe800000000000000200000000"], 0x38}, 0x41) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/51, 0x33}], 0x1, 0x16, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x80000001) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x3501, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 246.381252ms ago: executing program 6 (id=2054): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x4f, 0xa, 0x2, "3258c5c0d651aa001b0000f4ff4000000000002000e926ba2800"}) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "1284a398"}, 0x3}) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x10, 0x2, {r4, r5/1000+10000}, {0x2, 0x0, 0xe, 0x1, 0x4, 0x9, "914c7bc8"}, 0x7f, 0x3, {&(0x7f0000000300)=[{0x3, 0x5, {0x6}, 0x400}, {0x3, 0x979, {0xfffffff1}, 0xc}]}, 0x99}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r7, &(0x7f00000000c0)=""/152, 0x98) 239.809808ms ago: executing program 7 (id=2055): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b", 0x7c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 0s ago: executing program 4 (id=2056): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000380)={0x20, 0x17, 0x6, "0056ecb3ba35"}, 0x0, 0x0, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0xd}, 0x0, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "98811467a8a50a5f224f4c81d46b65567932ddc355936b8a57787d8fbda36ec3e69d0e0dadd7600d7cbd1014b1bf4f"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): nterface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.320887][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.320928][ T9] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1134.320954][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.391920][ T9] usb 8-1: config 0 descriptor?? [ 1134.830311][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 1134.830919][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1134.878617][ T9] usb 8-1: USB disconnect, device number 33 [ 1136.230507][T13966] tc_dump_action: action bad kind [ 1137.235986][T13972] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1649'. [ 1137.365825][ T9488] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1137.519887][ T9488] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1137.520775][ T9488] usb 9-1: not running at top speed; connect to a high speed hub [ 1137.522642][ T9488] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.522693][ T9488] usb 9-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1137.522721][ T9488] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1137.679935][ T9488] usb 9-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1137.679966][ T9488] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.679985][ T9488] usb 9-1: Product: syz [ 1137.679994][ T9488] usb 9-1: Manufacturer: syz [ 1137.680002][ T9488] usb 9-1: SerialNumber: syz [ 1137.866920][T11704] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1137.945369][ T9488] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input38 [ 1137.967574][ T5150] bcm5974 9-1:1.0: could not read from device [ 1137.998272][ T9488] bcm5974 9-1:1.0: could not read from device [ 1138.062149][T11704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1138.062248][T11704] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1138.062272][T11704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1138.062293][T11704] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1138.062333][T11704] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1138.062355][T11704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.070268][T11704] usb 6-1: config 0 descriptor?? [ 1138.157622][ T9488] input: failed to attach handler mousedev to device input38, error: -5 [ 1138.163977][ T9488] usb 9-1: USB disconnect, device number 24 [ 1138.192496][ T5150] bcm5974 9-1:1.0: could not read from device [ 1138.529042][T11704] hdpvr 6-1:0.0: unexpected answer of status request, len -32 [ 1138.529069][T11704] hdpvr 6-1:0.0: device init failed [ 1138.529140][T11704] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1139.205790][T11704] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1139.377657][T11704] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.377721][T11704] usb 9-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00 [ 1139.377745][T11704] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.381436][T11704] usb 9-1: config 0 descriptor?? [ 1139.424913][T11704] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1139.595589][ T31] usb 9-1: USB disconnect, device number 25 [ 1142.488013][ T31] usb 6-1: USB disconnect, device number 24 [ 1144.376229][T14025] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1661'. [ 1145.243455][T14034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1663'. [ 1145.458520][ T8800] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 1147.085961][ T31] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1147.248245][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.248308][ T31] usb 7-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00 [ 1147.248333][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.258429][ T31] usb 7-1: config 0 descriptor?? [ 1147.264543][ T31] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1147.515822][ T31] usb 7-1: USB disconnect, device number 21 [ 1149.138487][T14055] EXT4-fs (nbd8): unable to read superblock [ 1149.565978][T14062] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1672'. [ 1149.912102][T11704] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 1150.373830][T11704] usb 8-1: device descriptor read/64, error -71 [ 1150.431944][T14072] cgroup: fork rejected by pids controller in /syz4 [ 1150.625901][T11704] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 1150.798733][T11704] usb 8-1: device descriptor read/64, error -71 [ 1150.906367][T11704] usb usb8-port1: attempt power cycle [ 1150.925854][ T5969] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1151.105800][ T5969] usb 7-1: Using ep0 maxpacket: 16 [ 1151.125110][ T5969] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.125133][ T5969] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.125147][ T5969] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1151.125169][ T5969] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1151.125183][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.137857][ T5969] usb 7-1: config 0 descriptor?? [ 1151.245818][T11704] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 1151.282938][T11704] usb 8-1: device descriptor read/8, error -71 [ 1151.515793][T11704] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 1151.536567][T11704] usb 8-1: device descriptor read/8, error -71 [ 1151.646308][T11704] usb usb8-port1: unable to enumerate USB device [ 1151.733886][ T5969] usbhid 7-1:0.0: can't add hid device: -71 [ 1151.734016][ T5969] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1151.755167][ T5969] usb 7-1: USB disconnect, device number 22 [ 1152.945882][ T809] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1153.098206][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.098268][ T809] usb 5-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00 [ 1153.098294][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.315777][T11704] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1153.535735][T11704] usb 7-1: Using ep0 maxpacket: 16 [ 1153.540722][T11704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1153.544109][T11704] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1153.544137][T11704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.544149][T11704] usb 7-1: Product: syz [ 1153.544158][T11704] usb 7-1: Manufacturer: syz [ 1153.544166][T11704] usb 7-1: SerialNumber: syz [ 1153.653391][ T809] usb 5-1: config 0 descriptor?? [ 1153.743778][ T809] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1153.749696][T11704] usb 7-1: config 0 descriptor?? [ 1153.760054][T11704] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1153.760090][T11704] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1154.145447][ T809] usb 5-1: USB disconnect, device number 38 [ 1154.439329][T11704] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1154.985769][ T5969] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1155.578024][ T5969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.578087][ T5969] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1155.578116][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1155.578145][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1155.578168][ T5969] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1155.584019][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1687'. [ 1155.584577][ T5969] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1155.584595][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1155.584607][ T5969] usb 6-1: Product: syz [ 1155.584616][ T5969] usb 6-1: Manufacturer: syz [ 1155.584624][ T5969] usb 6-1: SerialNumber: syz [ 1155.612107][ T5969] usb 6-1: config 0 descriptor?? [ 1155.614344][T11704] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1155.614422][T11704] em28xx 7-1:0.0: board has no eeprom [ 1155.856945][T11704] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1155.856979][T11704] em28xx 7-1:0.0: dvb set to bulk mode. [ 1155.858965][T11945] em28xx 7-1:0.0: Binding DVB extension [ 1155.908920][ T5969] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1155.908953][ T5969] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1155.941200][T11704] usb 7-1: USB disconnect, device number 23 [ 1155.970747][T11704] em28xx 7-1:0.0: Disconnecting em28xx [ 1156.093645][T11945] em28xx 7-1:0.0: Registering input extension [ 1156.105538][T11704] em28xx 7-1:0.0: Closing input extension [ 1156.112689][ T5969] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1156.113621][ T5969] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1156.113930][ T5969] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1156.147892][ T5969] usb 6-1: USB disconnect, device number 25 [ 1156.291695][T11704] em28xx 7-1:0.0: Freeing device [ 1156.575861][ T9488] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 1156.665750][T11704] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1156.729787][ T9488] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1156.729818][ T9488] usb 9-1: config 0 has no interface number 0 [ 1156.729864][ T9488] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1156.729889][ T9488] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1156.729917][ T9488] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1156.729943][ T9488] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1156.729969][ T9488] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1156.729996][ T9488] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1156.730039][ T9488] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1156.730063][ T9488] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.861206][T11704] usb 7-1: config 16 has an invalid interface number: 19 but max is 0 [ 1156.861236][T11704] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.861256][T11704] usb 7-1: config 16 has no interface number 0 [ 1156.861304][T11704] usb 7-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1156.889959][T11704] usb 7-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 1156.889991][T11704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.890010][T11704] usb 7-1: Product: syz [ 1156.890023][T11704] usb 7-1: Manufacturer: syz [ 1156.890037][T11704] usb 7-1: SerialNumber: syz [ 1156.954247][ T9488] usb 9-1: config 0 descriptor?? [ 1156.955539][T14158] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1156.955871][T14158] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1156.983508][ T9488] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1157.005777][ T5886] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1157.262371][T14165] EXT4-fs (nbd5): unable to read superblock [ 1157.547669][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.547708][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.547749][ T5886] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1157.547773][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.600623][ T5886] usb 5-1: config 0 descriptor?? [ 1157.644775][T14158] input: syz0 as /devices/virtual/input/input40 [ 1158.075338][ T31] usb 9-1: USB disconnect, device number 26 [ 1158.141313][ T5886] hid_parser_main: 154 callbacks suppressed [ 1158.141341][ T5886] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1158.141372][ T5886] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1158.141397][ T5886] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1158.141422][ T5886] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1158.141448][ T5886] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1158.141473][ T5886] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1158.141497][ T5886] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1158.244348][ T5886] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1158.639738][T14176] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1694'. [ 1159.510660][ T5886] cp2112 0003:10C4:EA90.000E: error requesting version [ 1159.537216][ T8800] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 1159.684351][T11704] usb 7-1: USB disconnect, device number 24 [ 1159.701062][ T31] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1159.880854][T13712] udevd[13712]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.029289][ T5886] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -32 [ 1160.486362][T14190] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1698'. [ 1160.595854][ T31] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1160.745714][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 1160.747627][ T31] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1160.750123][ T31] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1160.750141][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.750153][ T31] usb 9-1: Product: syz [ 1160.750162][ T31] usb 9-1: Manufacturer: syz [ 1160.750170][ T31] usb 9-1: SerialNumber: syz [ 1160.813554][ T31] usb 9-1: config 0 descriptor?? [ 1160.935833][ T5886] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1161.094680][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.094760][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1161.094789][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1161.094817][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1161.094839][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1161.108775][ T5886] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1161.108807][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1161.108826][ T5886] usb 7-1: Product: syz [ 1161.108839][ T5886] usb 7-1: Manufacturer: syz [ 1161.108852][ T5886] usb 7-1: SerialNumber: syz [ 1161.198864][ T5886] usb 7-1: config 0 descriptor?? [ 1161.323576][T11704] usb 5-1: USB disconnect, device number 39 [ 1161.438449][ T5886] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1161.438480][ T5886] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1161.638137][ T5886] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1161.638155][ T5886] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1161.638329][ T5886] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1161.711592][ T5886] usb 7-1: USB disconnect, device number 25 [ 1161.805746][T11704] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1161.811205][T14196] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1701'. [ 1161.955730][T11704] usb 5-1: Using ep0 maxpacket: 16 [ 1161.957907][T11704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.957976][T11704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1161.957998][T11704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1161.958011][T11704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1161.958024][T11704] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1161.959250][T11704] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1161.959278][T11704] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1161.959297][T11704] usb 5-1: Manufacturer: syz [ 1162.056031][T11704] usb 5-1: config 0 descriptor?? [ 1162.510421][ T5886] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1162.811464][ T5886] usb 6-1: config 16 has an invalid interface number: 19 but max is 0 [ 1162.812482][ T5886] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.820180][ T5886] usb 6-1: config 16 has no interface number 0 [ 1162.841064][ T5886] usb 6-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1162.868857][ T5886] usb 6-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 1162.869313][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.869336][ T5886] usb 6-1: Product: syz [ 1162.870280][ T5886] usb 6-1: Manufacturer: syz [ 1162.870296][ T5886] usb 6-1: SerialNumber: syz [ 1167.015834][ T10] usb 9-1: USB disconnect, device number 27 [ 1167.550407][T14214] cgroup: fork rejected by pids controller in /syz6 [ 1167.715786][T11704] rc_core: IR keymap rc-hauppauge not found [ 1167.715807][T11704] Registered IR keymap rc-empty [ 1167.715953][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1167.749622][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1167.767682][T11704] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1167.774597][T11704] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input41 [ 1167.906120][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1167.937264][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1167.967642][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1167.986208][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1168.008026][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1168.026821][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1168.049179][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1168.068632][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1168.087644][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1168.115483][T11704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1168.128863][T11704] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1168.128899][T11704] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1168.160847][T11704] usb 5-1: USB disconnect, device number 40 [ 1170.523123][ T5886] usb 6-1: USB disconnect, device number 26 [ 1170.559290][ T8800] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1170.631058][T13712] udevd[13712]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.765855][ T9488] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1172.429666][ T9488] usb 8-1: Using ep0 maxpacket: 32 [ 1172.432429][ T9488] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1172.432576][ T9488] usb 8-1: config 0 has no interface number 0 [ 1172.432629][ T9488] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1172.445424][ T9488] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1172.445532][ T9488] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.445553][ T9488] usb 8-1: Product: syz [ 1172.445567][ T9488] usb 8-1: Manufacturer: syz [ 1172.445580][ T9488] usb 8-1: SerialNumber: syz [ 1172.598658][ T9488] usb 8-1: config 0 descriptor?? [ 1173.302081][ T9488] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1173.302117][ T9488] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1173.302702][ T9488] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1173.302737][ T9488] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1173.302756][ T9488] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1173.302775][ T9488] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1173.303089][ T9488] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1174.325645][ T9488] usb 8-1: USB disconnect, device number 38 [ 1177.682698][T14318] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1722'. [ 1178.250792][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.250873][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.545796][ T8800] Bluetooth: hci5: unexpected event for opcode 0x0c20 [ 1181.645228][T14330] netlink: 'syz.8.1713': attribute type 3 has an invalid length. [ 1182.065747][T11945] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1182.215730][T11945] usb 7-1: Using ep0 maxpacket: 32 [ 1182.267491][T11945] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1182.270173][T11945] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1182.270210][T11945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.270232][T11945] usb 7-1: Product: syz [ 1182.270247][T11945] usb 7-1: Manufacturer: syz [ 1182.270262][T11945] usb 7-1: SerialNumber: syz [ 1182.354857][T11945] usb 7-1: config 0 descriptor?? [ 1183.115236][T14347] /dev/nullb0: Can't open blockdev [ 1185.843894][ T31] usb 7-1: USB disconnect, device number 26 [ 1186.436256][ T31] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 1186.672679][ T31] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1186.672875][ T31] usb 7-1: config 0 has no interface number 0 [ 1186.673153][ T31] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1186.673210][ T31] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1186.673239][ T31] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1186.673266][ T31] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1186.673388][ T31] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1186.673458][ T31] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1186.673582][ T31] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1186.673644][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.982159][ T31] usb 7-1: config 0 descriptor?? [ 1187.011818][T14364] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1187.013218][T14364] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1188.089772][ T31] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1188.679434][ T31] usb 7-1: USB disconnect, device number 27 [ 1189.061925][ T31] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1190.233361][T14380] faux_driver vkms: [drm] Unknown color mode 524; guessing buffer size. [ 1190.426043][ T5884] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 1191.028079][ T5884] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1191.028109][ T5884] usb 6-1: config 0 has no interface number 0 [ 1191.028160][ T5884] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1191.028186][ T5884] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1191.028214][ T5884] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1191.028241][ T5884] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1191.028269][ T5884] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1191.028296][ T5884] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1191.028340][ T5884] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1191.028365][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.041412][ T5884] usb 6-1: config 0 descriptor?? [ 1191.045167][T14378] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1191.045264][T14378] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1191.174134][ T5884] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1191.457506][ T31] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1191.483146][ T9] usb 6-1: USB disconnect, device number 27 [ 1191.514231][T14391] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1742'. [ 1191.521475][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1191.618798][ T31] usb 7-1: config 16 has an invalid interface number: 19 but max is 0 [ 1191.618830][ T31] usb 7-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 1191.618851][ T31] usb 7-1: config 16 has no interface number 0 [ 1191.618898][ T31] usb 7-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1191.684039][ T31] usb 7-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 1191.684085][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.684211][ T31] usb 7-1: Product: syz [ 1191.684265][ T31] usb 7-1: Manufacturer: syz [ 1191.684282][ T31] usb 7-1: SerialNumber: syz [ 1193.457868][ T31] usb 7-1: USB disconnect, device number 28 [ 1193.525755][ T9] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1193.586049][T13712] udevd[13712]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.655795][ T9] usb 6-1: device descriptor read/64, error -71 [ 1193.965104][ T9] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1194.025729][T11945] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1194.484188][ T9] usb 6-1: device descriptor read/64, error -71 [ 1195.228647][ T9] usb usb6-port1: attempt power cycle [ 1195.280537][T11945] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1195.281511][T11945] usb 9-1: not running at top speed; connect to a high speed hub [ 1195.283081][T11945] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.283106][T11945] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1195.328426][T11945] usb 9-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1195.328461][T11945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.328482][T11945] usb 9-1: Product: syz [ 1195.328496][T11945] usb 9-1: Manufacturer: syz [ 1195.328510][T11945] usb 9-1: SerialNumber: syz [ 1195.565843][ T9488] usb 8-1: new low-speed USB device number 39 using dummy_hcd [ 1195.604335][T11945] usb 9-1: USB disconnect, device number 28 [ 1195.612185][ T9] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1195.629263][ T9] usb 6-1: device descriptor read/8, error -71 [ 1195.718982][ T9488] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1195.719015][ T9488] usb 8-1: config 0 has no interface number 0 [ 1195.719064][ T9488] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1195.719088][ T9488] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1195.719115][ T9488] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1195.719140][ T9488] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1195.719168][ T9488] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1195.719195][ T9488] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1195.719303][ T9488] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1195.719329][ T9488] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.756325][ T9488] usb 8-1: config 0 descriptor?? [ 1195.757596][T14424] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1195.757767][T14424] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1195.769291][ T9488] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1195.895760][ T9] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1196.142115][ T9488] usb 8-1: USB disconnect, device number 39 [ 1196.180633][ T9488] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1196.219074][ T9] usb 6-1: device not accepting address 31, error -71 [ 1196.238937][ T9] usb usb6-port1: unable to enumerate USB device [ 1196.299275][T14430] binder: 14428:14430 ioctl c0306201 0 returned -14 [ 1196.299991][T14430] binder_alloc: 14428: binder_alloc_buf size 64768 failed, no address space [ 1196.300090][T14430] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1196.406851][T14433] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1753'. [ 1196.487404][ T8800] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1197.700376][T14437] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1757'. [ 1198.468827][T11945] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1198.615820][T11945] usb 5-1: Using ep0 maxpacket: 32 [ 1198.620526][T11945] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1198.620557][T11945] usb 5-1: config 0 has no interface number 0 [ 1198.620609][T11945] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1198.663870][T11945] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1198.663905][T11945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.664029][T11945] usb 5-1: Product: syz [ 1198.664046][T11945] usb 5-1: Manufacturer: syz [ 1198.664061][T11945] usb 5-1: SerialNumber: syz [ 1200.037495][T11945] usb 5-1: config 0 descriptor?? [ 1200.081288][T14442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1200.358791][T14442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1200.575784][ T31] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1200.802724][ T31] usb 6-1: no configurations [ 1200.802746][ T31] usb 6-1: can't read configurations, error -22 [ 1200.971771][ T31] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1201.470084][ T31] usb 6-1: no configurations [ 1201.470107][ T31] usb 6-1: can't read configurations, error -22 [ 1201.470558][ T31] usb usb6-port1: attempt power cycle [ 1201.777906][T14473] lo speed is unknown, defaulting to 1000 [ 1201.805825][ T31] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1201.827570][ T31] usb 6-1: no configurations [ 1201.827591][ T31] usb 6-1: can't read configurations, error -22 [ 1201.965804][ T31] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1201.995815][ T5886] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1201.999316][ T31] usb 6-1: no configurations [ 1201.999334][ T31] usb 6-1: can't read configurations, error -22 [ 1201.999707][ T31] usb usb6-port1: unable to enumerate USB device [ 1202.121632][T14481] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1770'. [ 1202.150485][ T5886] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1202.151267][ T5886] usb 7-1: not running at top speed; connect to a high speed hub [ 1202.157366][ T5886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.157422][ T5886] usb 7-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1202.157449][ T5886] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1202.168433][ T5886] usb 7-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1202.168463][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.168483][ T5886] usb 7-1: Product: syz [ 1202.168496][ T5886] usb 7-1: Manufacturer: syz [ 1202.168509][ T5886] usb 7-1: SerialNumber: syz [ 1202.206841][ T31] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1202.368974][T11945] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1202.369010][T11945] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1202.369292][T11945] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1202.407545][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.407639][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.407681][ T31] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1202.407706][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.480841][T11945] usb 5-1: USB disconnect, device number 41 [ 1202.600104][ T5886] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 1202.627047][ T31] usb 8-1: config 0 descriptor?? [ 1202.682636][ T5886] usb 7-1: USB disconnect, device number 29 [ 1202.784935][T14487] lo speed is unknown, defaulting to 1000 [ 1203.128046][ T31] usbhid 8-1:0.0: can't add hid device: -71 [ 1203.128176][ T31] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1203.133022][ T31] usb 8-1: USB disconnect, device number 40 [ 1205.530461][ T5884] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1205.545818][ T5886] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1205.699279][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1205.755925][ T5884] usb 9-1: Using ep0 maxpacket: 16 [ 1205.758643][ T5884] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.758703][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1205.758731][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1205.758753][ T5884] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1205.758778][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1205.759548][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1205.760462][ T5884] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1205.760490][ T5884] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1205.760508][ T5884] usb 9-1: Manufacturer: syz [ 1206.012229][ T5886] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1206.012262][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.012283][ T5886] usb 6-1: Product: syz [ 1206.012298][ T5886] usb 6-1: Manufacturer: syz [ 1206.012313][ T5886] usb 6-1: SerialNumber: syz [ 1206.059544][ T5884] usb 9-1: config 0 descriptor?? [ 1206.162739][ T5886] usb 6-1: config 0 descriptor?? [ 1206.227275][ T5886] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1206.227311][ T5886] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1206.615725][ T5884] rc_core: IR keymap rc-hauppauge not found [ 1206.615751][ T5884] Registered IR keymap rc-empty [ 1206.615919][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.635786][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.657724][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1206.661291][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input44 [ 1206.710927][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.726981][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.746877][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.765882][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.786229][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.805804][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.825780][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.855785][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.874413][ T5886] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1206.875987][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.904077][ T5884] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1206.919273][ T5884] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1206.919301][ T5884] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1206.961641][ T5884] usb 9-1: USB disconnect, device number 29 [ 1207.319808][ T5886] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1207.319843][ T5886] em28xx 6-1:0.0: board has no eeprom [ 1207.405745][ T5886] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1207.405780][ T5886] em28xx 6-1:0.0: dvb set to bulk mode. [ 1207.406158][ T31] em28xx 6-1:0.0: Binding DVB extension [ 1207.437130][ T5886] usb 6-1: USB disconnect, device number 36 [ 1207.462765][ T5886] em28xx 6-1:0.0: Disconnecting em28xx [ 1207.590101][ T31] em28xx 6-1:0.0: Registering input extension [ 1207.590570][ T5886] em28xx 6-1:0.0: Closing input extension [ 1207.630756][ T5886] em28xx 6-1:0.0: Freeing device [ 1210.125922][T11945] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 1210.360216][T11945] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1210.360959][T11945] usb 9-1: not running at top speed; connect to a high speed hub [ 1210.362439][T11945] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.362469][T11945] usb 9-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1210.362484][T11945] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1210.367144][T11945] usb 9-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1210.367164][T11945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.367175][T11945] usb 9-1: Product: syz [ 1210.367183][T11945] usb 9-1: Manufacturer: syz [ 1210.367192][T11945] usb 9-1: SerialNumber: syz [ 1210.646065][T11945] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 1210.652021][T11945] usb 9-1: USB disconnect, device number 30 [ 1211.115779][ T5884] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 1211.296776][ T5884] usb 8-1: no configurations [ 1211.296799][ T5884] usb 8-1: can't read configurations, error -22 [ 1211.425876][ T5884] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 1211.469693][T14547] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1790'. [ 1211.640213][ T5884] usb 8-1: no configurations [ 1211.640236][ T5884] usb 8-1: can't read configurations, error -22 [ 1211.646042][ T5884] usb usb8-port1: attempt power cycle [ 1212.025814][ T5886] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1212.035808][ T5884] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1212.184869][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.184908][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.184950][ T5886] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1212.184975][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.199184][ T5886] usb 9-1: config 0 descriptor?? [ 1212.316767][ T5884] usb 8-1: no configurations [ 1212.316789][ T5884] usb 8-1: can't read configurations, error -22 [ 1212.616112][ T5884] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1213.168257][ T5884] usb 8-1: no configurations [ 1213.168281][ T5884] usb 8-1: can't read configurations, error -22 [ 1213.170374][ T5884] usb usb8-port1: unable to enumerate USB device [ 1213.252759][ T5886] usbhid 9-1:0.0: can't add hid device: -71 [ 1213.265781][ T5886] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1213.332453][ T5886] usb 9-1: USB disconnect, device number 31 [ 1213.762094][T11945] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1213.947991][T11945] usb 5-1: Using ep0 maxpacket: 16 [ 1213.952059][T11945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1213.977006][T11945] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1213.977029][T11945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.977041][T11945] usb 5-1: Product: syz [ 1213.977050][T11945] usb 5-1: Manufacturer: syz [ 1213.977058][T11945] usb 5-1: SerialNumber: syz [ 1213.982989][T11945] usb 5-1: config 0 descriptor?? [ 1214.038561][T11945] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1214.038602][T11945] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1214.325749][ T9488] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1214.405765][ T5969] usb 8-1: new low-speed USB device number 45 using dummy_hcd [ 1214.483668][ T9488] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.483707][ T9488] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.483749][ T9488] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1214.483772][ T9488] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.490531][ T9488] usb 9-1: config 0 descriptor?? [ 1214.569417][ T5969] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1214.569450][ T5969] usb 8-1: config 0 has no interface number 0 [ 1214.569500][ T5969] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1214.569746][ T5969] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1214.569777][ T5969] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1214.569805][ T5969] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1214.569832][ T5969] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1214.569975][ T5969] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1214.570078][ T5969] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1214.570104][ T5969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.607104][T11945] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1214.610281][ T5969] usb 8-1: config 0 descriptor?? [ 1214.628414][T14564] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1214.629253][T14564] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1214.695806][ T5886] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 1214.732994][ T5969] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1214.849376][ T5886] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1214.849417][ T5886] usb 6-1: config 0 has no interface number 0 [ 1214.849526][ T5886] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1214.849553][ T5886] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1214.849581][ T5886] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1214.849665][ T5886] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1214.849695][ T5886] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1214.849722][ T5886] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1214.849821][ T5886] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1214.849847][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.924470][ T5886] usb 6-1: config 0 descriptor?? [ 1214.966663][T14566] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1214.966882][T14566] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1215.003120][ T9488] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1215.003169][ T9488] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1215.004878][ T9488] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1215.004907][ T9488] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1215.008242][ T9488] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1215.008274][ T9488] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1215.008300][ T9488] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1215.087067][T11945] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1215.089928][T11945] em28xx 5-1:0.0: board has no eeprom [ 1215.130817][ T5886] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1215.181684][T14566] input: syz0 as /devices/virtual/input/input47 [ 1215.235688][T11945] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1215.235740][T11945] em28xx 5-1:0.0: dvb set to bulk mode. [ 1215.236105][ T5884] em28xx 5-1:0.0: Binding DVB extension [ 1215.362394][ T9488] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1215.477785][ T9488] cp2112 0003:10C4:EA90.000F: error requesting version [ 1215.504254][ T5884] em28xx 5-1:0.0: Registering input extension [ 1215.522094][T14564] input: syz0 as /devices/virtual/input/input46 [ 1215.535479][T11945] usb 5-1: USB disconnect, device number 42 [ 1215.599207][T11945] em28xx 5-1:0.0: Disconnecting em28xx [ 1215.599240][T11945] em28xx 5-1:0.0: Closing input extension [ 1215.647445][ T5886] usb 6-1: USB disconnect, device number 37 [ 1215.772418][ T9488] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -5 [ 1215.843830][ T5886] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 1215.989842][ T9488] usb 8-1: USB disconnect, device number 45 [ 1216.001737][ T9488] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1216.012955][T11945] em28xx 5-1:0.0: Freeing device [ 1216.980399][T14583] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1801'. [ 1217.106396][ T9488] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1217.184410][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1804'. [ 1217.266442][ T9488] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1217.266477][ T9488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.266498][ T9488] usb 6-1: Product: syz [ 1217.266513][ T9488] usb 6-1: Manufacturer: syz [ 1217.266529][ T9488] usb 6-1: SerialNumber: syz [ 1217.894014][ T5969] usb 9-1: USB disconnect, device number 32 [ 1217.938596][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1217.938661][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1217.976162][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1218.029875][ T9488] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1218.527461][T14612] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1813'. [ 1218.650364][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1816'. [ 1218.689319][ T8800] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1219.163975][T14625] lo speed is unknown, defaulting to 1000 [ 1220.025839][ T9488] usb 6-1: USB disconnect, device number 38 [ 1220.133267][ T5884] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1220.330013][ T5884] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1220.330762][ T5884] usb 9-1: not running at top speed; connect to a high speed hub [ 1220.332572][ T5884] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.332625][ T5884] usb 9-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1220.332653][ T5884] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1220.395737][ T5884] usb 9-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1220.395772][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.395930][ T5884] usb 9-1: Product: syz [ 1220.395947][ T5884] usb 9-1: Manufacturer: syz [ 1220.395962][ T5884] usb 9-1: SerialNumber: syz [ 1220.694957][ T5884] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 1220.723197][T14663] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1826'. [ 1220.751339][ T5884] usb 9-1: USB disconnect, device number 33 [ 1221.296719][ T8800] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1223.535726][ T9] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1223.688448][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.688486][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.688527][ T9] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1223.688553][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.761373][ T9] usb 9-1: config 0 descriptor?? [ 1224.190295][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 1224.190440][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1224.222638][ T9] usb 9-1: USB disconnect, device number 34 [ 1226.073260][T14697] binder: 14695:14697 ioctl c0306201 2000000003c0 returned -14 [ 1226.405140][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1841'. [ 1226.415747][ T9] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1226.588873][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1843'. [ 1226.726795][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.726826][ T9] usb 5-1: config 0 has no interfaces? [ 1226.735899][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1226.735933][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.735955][ T9] usb 5-1: Product: syz [ 1226.735968][ T9] usb 5-1: Manufacturer: syz [ 1226.735984][ T9] usb 5-1: SerialNumber: syz [ 1226.743735][ T9] usb 5-1: config 0 descriptor?? [ 1226.929149][ T1244] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1227.541432][ T1244] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1227.541466][ T1244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.541487][ T1244] usb 6-1: Product: syz [ 1227.541501][ T1244] usb 6-1: Manufacturer: syz [ 1227.541515][ T1244] usb 6-1: SerialNumber: syz [ 1227.737824][ T8800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1227.737846][ T8800] CPU: 1 UID: 0 PID: 8800 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1227.737866][ T8800] Tainted: [L]=SOFTLOCKUP [ 1227.737870][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1227.737883][ T8800] Workqueue: hci2 hci_rx_work [ 1227.737907][ T8800] Call Trace: [ 1227.737913][ T8800] [ 1227.737919][ T8800] dump_stack_lvl+0xe8/0x150 [ 1227.737942][ T8800] sysfs_create_dir_ns+0x271/0x2a0 [ 1227.737957][ T8800] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1227.737972][ T8800] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1227.737989][ T8800] ? rt_spin_unlock+0x160/0x200 [ 1227.738005][ T8800] kobject_add_internal+0x631/0xd10 [ 1227.738023][ T8800] kobject_add+0x163/0x240 [ 1227.738047][ T8800] ? __pfx_kobject_add+0x10/0x10 [ 1227.738078][ T8800] ? get_device_parent+0x370/0x3a0 [ 1227.738100][ T8800] device_add+0x408/0xb80 [ 1227.738127][ T8800] hci_conn_add_sysfs+0xd5/0x210 [ 1227.738145][ T8800] le_conn_complete_evt+0xf1d/0x1430 [ 1227.738172][ T8800] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1227.738192][ T8800] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1227.738210][ T8800] ? lockdep_hardirqs_on+0x7a/0x110 [ 1227.738228][ T8800] ? skb_pull_data+0xfb/0x200 [ 1227.738251][ T8800] hci_le_conn_complete_evt+0x187/0x470 [ 1227.738274][ T8800] hci_event_packet+0x7af/0x12c0 [ 1227.738294][ T8800] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1227.738312][ T8800] ? __pfx_hci_event_packet+0x10/0x10 [ 1227.738327][ T8800] ? rt_spin_unlock+0x14f/0x200 [ 1227.738346][ T8800] ? hci_send_to_monitor+0xe2/0x590 [ 1227.738361][ T8800] hci_rx_work+0x3ee/0x1030 [ 1227.738381][ T8800] ? process_scheduled_works+0xa25/0x1830 [ 1227.738400][ T8800] process_scheduled_works+0xb02/0x1830 [ 1227.738434][ T8800] ? __pfx_process_scheduled_works+0x10/0x10 [ 1227.738455][ T8800] ? assign_work+0x3d5/0x5e0 [ 1227.738475][ T8800] worker_thread+0xa50/0xfc0 [ 1227.738509][ T8800] kthread+0x388/0x470 [ 1227.738522][ T8800] ? __pfx_worker_thread+0x10/0x10 [ 1227.738538][ T8800] ? __pfx_kthread+0x10/0x10 [ 1227.738551][ T8800] ret_from_fork+0x51e/0xb90 [ 1227.738571][ T8800] ? __pfx_ret_from_fork+0x10/0x10 [ 1227.738588][ T8800] ? __switch_to+0xc7d/0x1450 [ 1227.738605][ T8800] ? __pfx_kthread+0x10/0x10 [ 1227.738618][ T8800] ret_from_fork_asm+0x1a/0x30 [ 1227.738641][ T8800] [ 1227.738702][ T8800] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1227.738728][ T8800] Bluetooth: hci2: failed to register connection device [ 1227.985780][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1228.146232][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1228.151158][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1228.173256][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1228.173286][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.173306][ T9] usb 7-1: Product: syz [ 1228.173322][ T9] usb 7-1: Manufacturer: syz [ 1228.173337][ T9] usb 7-1: SerialNumber: syz [ 1228.216881][ T9] usb 7-1: config 0 descriptor?? [ 1228.223722][ T1244] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1228.223786][ T1244] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1228.224607][ T1244] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1228.254344][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1228.254381][ T9] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1228.308077][ T1244] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1229.002872][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1229.255906][ T9813] usb 5-1: USB disconnect, device number 43 [ 1229.412815][ T9] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1229.412838][ T9] em28xx 7-1:0.0: board has no eeprom [ 1229.475697][ T9] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1229.475731][ T9] em28xx 7-1:0.0: dvb set to bulk mode. [ 1229.476559][T11945] em28xx 7-1:0.0: Binding DVB extension [ 1229.517063][ T9] usb 7-1: USB disconnect, device number 30 [ 1229.519716][ T9] em28xx 7-1:0.0: Disconnecting em28xx [ 1229.604360][T11945] em28xx 7-1:0.0: Registering input extension [ 1229.612178][ T9] em28xx 7-1:0.0: Closing input extension [ 1229.867724][ T9] em28xx 7-1:0.0: Freeing device [ 1229.886301][T11945] usb 6-1: USB disconnect, device number 39 [ 1230.215895][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1849'. [ 1230.576114][T14754] binder: 14748:14754 ioctl c0306201 2000000003c0 returned -14 [ 1234.005722][T14725] Bluetooth: hci2: command 0x0406 tx timeout [ 1234.055866][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1855'. [ 1236.157814][T11945] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1236.315817][T11945] usb 9-1: Using ep0 maxpacket: 16 [ 1236.319474][T11945] usb 9-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1236.319537][T11945] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1236.319567][T11945] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1236.319600][T11945] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1236.319625][T11945] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.322296][T11945] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1236.322326][T11945] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1236.322345][T11945] usb 9-1: Manufacturer: syz [ 1236.359484][T11945] usb 9-1: config 0 descriptor?? [ 1236.545723][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1236.741171][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1236.741206][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.741227][ T9] usb 5-1: Product: syz [ 1236.741243][ T9] usb 5-1: Manufacturer: syz [ 1236.741257][ T9] usb 5-1: SerialNumber: syz [ 1236.755696][T11945] rc_core: IR keymap rc-hauppauge not found [ 1236.755718][T11945] Registered IR keymap rc-empty [ 1236.755869][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1236.776668][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1236.813112][T11945] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1236.850926][T11945] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input50 [ 1236.876613][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1236.897077][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1236.904111][T14826] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1862'. [ 1236.915915][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1236.935855][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1236.965834][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1236.985862][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1237.005940][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1237.025958][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1237.036430][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1237.036539][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1237.036559][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1237.056100][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1237.085824][T11945] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1237.093903][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1237.161365][T11945] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1237.161395][T11945] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1237.224159][T11945] usb 9-1: USB disconnect, device number 35 [ 1238.083753][T14840] binder: 14832:14840 ioctl c0306201 2000000003c0 returned -14 [ 1239.105450][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.108157][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.339403][ T1244] usb 5-1: USB disconnect, device number 44 [ 1239.591400][T14849] kAFS: unable to lookup cell '(' [ 1240.055761][ T1244] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1240.208290][ T1244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.208328][ T1244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.208369][ T1244] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1240.208394][ T1244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.264117][ T1244] usb 6-1: config 0 descriptor?? [ 1240.306062][ T809] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1240.486751][ T809] usb 7-1: Using ep0 maxpacket: 16 [ 1240.489685][ T809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1240.498068][ T809] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1240.498101][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.498121][ T809] usb 7-1: Product: syz [ 1240.498137][ T809] usb 7-1: Manufacturer: syz [ 1240.498152][ T809] usb 7-1: SerialNumber: syz [ 1240.504381][ T809] usb 7-1: config 0 descriptor?? [ 1240.547294][ T809] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1240.547330][ T809] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1240.694020][ T1244] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1240.694060][ T1244] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1240.694085][ T1244] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1240.694111][ T1244] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1240.694136][ T1244] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1240.694160][ T1244] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1240.694184][ T1244] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1240.774854][ T1244] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1240.889996][ T1244] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 1241.091787][ T1244] cp2112 0003:10C4:EA90.0010: error requesting SMBus config [ 1241.157580][ T1244] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -32 [ 1241.168440][ T809] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1241.990589][ T809] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1241.990625][ T809] em28xx 7-1:0.0: board has no eeprom [ 1242.055737][ T809] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1242.055771][ T809] em28xx 7-1:0.0: dvb set to bulk mode. [ 1242.058072][ T5884] em28xx 7-1:0.0: Binding DVB extension [ 1242.117126][ T809] usb 7-1: USB disconnect, device number 31 [ 1242.118875][ T809] em28xx 7-1:0.0: Disconnecting em28xx [ 1242.303298][ T5884] em28xx 7-1:0.0: Registering input extension [ 1242.311495][ T809] em28xx 7-1:0.0: Closing input extension [ 1242.408059][ T809] em28xx 7-1:0.0: Freeing device [ 1242.576098][ T9813] usb 6-1: USB disconnect, device number 40 [ 1244.833527][T14887] binder: 14880:14887 ioctl c0306201 2000000003c0 returned -14 [ 1250.185854][ T9813] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1250.360081][ T9813] usb 5-1: Using ep0 maxpacket: 16 [ 1250.362886][ T9813] usb 5-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1250.362972][ T9813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1250.363000][ T9813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1250.363023][ T9813] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1250.363046][ T9813] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1250.364529][ T9813] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1250.364559][ T9813] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1250.364580][ T9813] usb 5-1: Manufacturer: syz [ 1250.457355][ T9813] usb 5-1: config 0 descriptor?? [ 1251.275905][ T9813] rc_core: IR keymap rc-hauppauge not found [ 1251.275930][ T9813] Registered IR keymap rc-empty [ 1251.276115][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.296384][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.317156][ T9813] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1251.319544][ T9813] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input52 [ 1251.355120][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.366569][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.386245][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.405785][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.426248][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.446065][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.465801][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.485784][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.506367][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.526715][ T9813] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.549109][ T9813] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1251.549129][ T9813] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1251.608698][ T9813] usb 5-1: USB disconnect, device number 45 [ 1252.355801][ T9813] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1252.505738][ T9813] usb 8-1: Using ep0 maxpacket: 32 [ 1252.513607][ T9813] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1252.513629][ T9813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.542507][ T9813] usb 8-1: config 0 descriptor?? [ 1252.561140][ T9813] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1253.776064][ T9813] gspca_vc032x: reg_w err -71 [ 1253.776084][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776095][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776103][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776112][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776122][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776131][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776140][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776150][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776159][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776167][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776176][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776185][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776195][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776204][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776213][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776221][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776229][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776237][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.776245][ T9813] gspca_vc032x: Unknown sensor... [ 1253.776358][ T9813] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 1253.971611][ T9813] usb 8-1: USB disconnect, device number 46 [ 1258.705723][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1258.890360][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.890397][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.890422][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1258.890436][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.894364][ T9] usb 5-1: config 0 descriptor?? [ 1259.024306][T15221] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1911'. [ 1259.219504][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1260.208677][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1260.208810][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1260.238501][ T9] usb 5-1: USB disconnect, device number 46 [ 1262.114922][T15253] lo speed is unknown, defaulting to 1000 [ 1263.062351][T15264] lo speed is unknown, defaulting to 1000 [ 1263.416707][ T1244] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1263.865738][ T1244] usb 5-1: Using ep0 maxpacket: 32 [ 1263.867761][ T1244] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1263.867789][ T1244] usb 5-1: config 0 has no interface number 0 [ 1263.867836][ T1244] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1263.871195][ T1244] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1263.871226][ T1244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.871247][ T1244] usb 5-1: Product: syz [ 1263.871263][ T1244] usb 5-1: Manufacturer: syz [ 1263.871278][ T1244] usb 5-1: SerialNumber: syz [ 1264.077264][ T1244] usb 5-1: config 0 descriptor?? [ 1264.081141][T15269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1264.178609][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1264.178643][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1264.178674][ T5806] Tainted: [L]=SOFTLOCKUP [ 1264.178683][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1264.178697][ T5806] Workqueue: hci1 hci_rx_work [ 1264.178733][ T5806] Call Trace: [ 1264.178742][ T5806] [ 1264.178752][ T5806] dump_stack_lvl+0xe8/0x150 [ 1264.178791][ T5806] sysfs_create_dir_ns+0x271/0x2a0 [ 1264.178816][ T5806] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1264.178842][ T5806] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1264.178872][ T5806] ? rt_spin_unlock+0x160/0x200 [ 1264.178900][ T5806] kobject_add_internal+0x631/0xd10 [ 1264.178943][ T5806] kobject_add+0x163/0x240 [ 1264.178984][ T5806] ? __pfx_kobject_add+0x10/0x10 [ 1264.179025][ T5806] ? get_device_parent+0x370/0x3a0 [ 1264.179065][ T5806] device_add+0x408/0xb80 [ 1264.179105][ T5806] hci_conn_add_sysfs+0xd5/0x210 [ 1264.179138][ T5806] le_conn_complete_evt+0xf1d/0x1430 [ 1264.179183][ T5806] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1264.179220][ T5806] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1264.179253][ T5806] ? lockdep_hardirqs_on+0x7a/0x110 [ 1264.179288][ T5806] ? skb_pull_data+0xfb/0x200 [ 1264.179328][ T5806] hci_le_conn_complete_evt+0x187/0x470 [ 1264.179369][ T5806] hci_event_packet+0x7af/0x12c0 [ 1264.179407][ T5806] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1264.179440][ T5806] ? __pfx_hci_event_packet+0x10/0x10 [ 1264.179467][ T5806] ? rt_spin_unlock+0x14f/0x200 [ 1264.179501][ T5806] ? hci_send_to_monitor+0xe2/0x590 [ 1264.179529][ T5806] hci_rx_work+0x3ee/0x1030 [ 1264.179566][ T5806] ? process_scheduled_works+0xa25/0x1830 [ 1264.179601][ T5806] process_scheduled_works+0xb02/0x1830 [ 1264.179663][ T5806] ? __pfx_process_scheduled_works+0x10/0x10 [ 1264.179703][ T5806] ? assign_work+0x3d5/0x5e0 [ 1264.179737][ T5806] worker_thread+0xa50/0xfc0 [ 1264.179797][ T5806] kthread+0x388/0x470 [ 1264.179820][ T5806] ? __pfx_worker_thread+0x10/0x10 [ 1264.179848][ T5806] ? __pfx_kthread+0x10/0x10 [ 1264.179873][ T5806] ret_from_fork+0x51e/0xb90 [ 1264.179908][ T5806] ? __pfx_ret_from_fork+0x10/0x10 [ 1264.179946][ T5806] ? __switch_to+0xc7d/0x1450 [ 1264.179978][ T5806] ? __pfx_kthread+0x10/0x10 [ 1264.180003][ T5806] ret_from_fork_asm+0x1a/0x30 [ 1264.180045][ T5806] [ 1264.180076][ T5806] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1264.180117][ T5806] Bluetooth: hci1: failed to register connection device [ 1264.559579][T15269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1265.106014][ T9488] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1265.279805][ T9488] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1265.279828][ T9488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.279840][ T9488] usb 6-1: Product: syz [ 1265.279849][ T9488] usb 6-1: Manufacturer: syz [ 1265.280478][ T9488] usb 6-1: SerialNumber: syz [ 1265.785048][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1265.785090][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1266.184939][ T1244] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1266.184976][ T1244] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1266.214686][ T1244] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1266.259990][ T1244] usb 5-1: USB disconnect, device number 47 [ 1266.594920][T15284] lo speed is unknown, defaulting to 1000 [ 1268.053745][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1268.054258][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1268.054750][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1268.054806][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1268.055893][ T9488] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1268.156855][ T9488] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1268.200159][ T9488] usb 6-1: USB disconnect, device number 41 [ 1269.461468][ T5806] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1270.836241][ T5884] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1270.995929][ T5884] usb 9-1: Using ep0 maxpacket: 32 [ 1271.644002][ T5884] usb 9-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 1271.644080][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.644147][ T5884] usb 9-1: Product: syz [ 1271.644164][ T5884] usb 9-1: Manufacturer: syz [ 1271.644231][ T5884] usb 9-1: SerialNumber: syz [ 1272.093925][ T5884] usb 9-1: config 0 descriptor?? [ 1272.219182][ T5884] hub 9-1:0.0: bad descriptor, ignoring hub [ 1272.219359][ T5884] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1272.289785][ T5884] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1273.011109][ T5884] gspca_vc032x: reg_w err -110 [ 1273.011133][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011145][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011155][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011164][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011175][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011185][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011195][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011248][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011259][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011306][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011317][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011327][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011389][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011400][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011446][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011457][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011501][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011511][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011522][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 1273.011572][ T5884] gspca_vc032x: Unknown sensor... [ 1273.011742][ T5884] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 1273.417561][ T1244] usb 9-1: USB disconnect, device number 36 [ 1273.726000][ T5884] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1274.039907][ T5884] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1274.039930][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.039942][ T5884] usb 6-1: Product: syz [ 1274.039951][ T5884] usb 6-1: Manufacturer: syz [ 1274.039959][ T5884] usb 6-1: SerialNumber: syz [ 1275.161085][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1275.161150][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1275.285757][ T1244] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1275.448104][ T1244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.448144][ T1244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.448184][ T1244] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1275.448209][ T1244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.500686][ T1244] usb 7-1: config 0 descriptor?? [ 1276.154057][ T1244] usbhid 7-1:0.0: can't add hid device: -71 [ 1276.154724][ T1244] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1276.199264][ T1244] usb 7-1: USB disconnect, device number 32 [ 1276.640253][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1276.641132][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1276.641524][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1276.641556][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1276.642102][ T5884] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1276.645716][ T5886] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1276.712707][ T5884] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1276.724707][ T5884] usb 6-1: USB disconnect, device number 42 [ 1276.798068][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.798107][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.798150][ T5886] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1276.798175][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.803879][ T5886] usb 8-1: config 0 descriptor?? [ 1278.004882][ T5886] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1278.004922][ T5886] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1278.004950][ T5886] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1278.004976][ T5886] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1278.005003][ T5886] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1278.005130][ T5886] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1278.005171][ T5886] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1278.083065][ T5886] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1278.220637][ T5886] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 1278.407120][ T5886] cp2112 0003:10C4:EA90.0011: error requesting SMBus config [ 1278.420178][ T5806] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1278.437265][ T5886] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -32 [ 1278.765751][ T5969] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1278.942935][ T5969] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1278.958781][ T5969] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1278.958813][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.958827][ T5969] usb 7-1: Product: syz [ 1278.958836][ T5969] usb 7-1: Manufacturer: syz [ 1278.958844][ T5969] usb 7-1: SerialNumber: syz [ 1278.963919][ T5969] usb 7-1: config 0 descriptor?? [ 1280.332150][ T9488] usb 8-1: USB disconnect, device number 47 [ 1281.306323][ T5886] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1281.604001][ T5969] usb 7-1: USB disconnect, device number 33 [ 1281.700355][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.700397][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.700438][ T5886] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1281.700464][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.766777][ T5886] usb 5-1: config 0 descriptor?? [ 1282.603966][ T5886] usb 5-1: string descriptor 0 read error: -71 [ 1282.604487][ T5886] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 1282.604550][ T5886] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 1282.604562][ T5886] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 1282.604593][ T5886] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 1282.604659][ T5886] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 1282.659725][ T5886] usb 5-1: USB disconnect, device number 48 [ 1283.072323][T15828] kAFS: unable to lookup cell '(' [ 1283.265956][ T5969] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1283.421059][ T5969] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1283.421095][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.421107][ T5969] usb 7-1: Product: syz [ 1283.421116][ T5969] usb 7-1: Manufacturer: syz [ 1283.421125][ T5969] usb 7-1: SerialNumber: syz [ 1283.425928][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1283.597265][ T9] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1283.597888][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1283.597914][ T9] usb 5-1: Product: syz [ 1283.597931][ T9] usb 5-1: Manufacturer: syz [ 1283.597947][ T9] usb 5-1: SerialNumber: syz [ 1283.709781][ T9] usb 5-1: config 0 descriptor?? [ 1283.814694][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1283.823345][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1283.958986][ T5969] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1283.959176][ T5969] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1283.962478][ T5969] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1283.962515][ T5969] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1284.019745][ T5969] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1284.242267][ T5969] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1284.253741][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1284.265033][ T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1284.265096][ T9] usb 5-1: media controller created [ 1284.358630][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1284.587602][ T9] cxusb: set interface failed [ 1284.587626][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1284.790134][ T9] DVB: Unable to find symbol mt352_attach() [ 1284.791304][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1284.791322][ T9] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1284.791355][ T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1284.977792][ T9] rc_core: IR keymap rc-dvico-mce not found [ 1284.977810][ T9] Registered IR keymap rc-empty [ 1284.978975][ T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1284.980943][ T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input53 [ 1284.982879][T15846] netlink: 'syz.4.1973': attribute type 3 has an invalid length. [ 1284.997970][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 1284.997991][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1285.035488][ T9] usb 5-1: USB disconnect, device number 49 [ 1285.339216][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1285.641706][T15855] netlink: 'syz.5.1976': attribute type 3 has an invalid length. [ 1285.685740][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1285.862373][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.862412][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.862454][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1285.862479][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.872816][ T9] usb 5-1: config 0 descriptor?? [ 1286.112619][ T5969] usb 7-1: USB disconnect, device number 34 [ 1286.330435][T15864] No control pipe specified [ 1286.726572][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1286.726660][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1286.730030][ T9] usb 5-1: USB disconnect, device number 50 [ 1287.085741][ T5969] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1287.145769][ T9488] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1287.247891][ T5969] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.247954][ T5969] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1287.247979][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.257823][ T5969] usb 7-1: config 0 descriptor?? [ 1287.270123][ T5969] pwc: Askey VC010 type 2 USB webcam detected. [ 1287.318279][ T9488] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.318317][ T9488] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.318357][ T9488] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1287.318383][ T9488] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.372155][ T9488] usb 8-1: config 0 descriptor?? [ 1287.683344][ T5969] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1287.685439][ T5969] pwc: recv_control_msg error -32 req 02 val 2700 [ 1287.701037][ T5969] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1287.702563][ T5969] pwc: recv_control_msg error -32 req 04 val 1000 [ 1287.703564][ T5969] pwc: recv_control_msg error -32 req 04 val 1300 [ 1287.704675][ T5969] pwc: recv_control_msg error -32 req 04 val 1400 [ 1287.738456][ T5969] pwc: recv_control_msg error -32 req 02 val 2000 [ 1287.742812][ T5969] pwc: recv_control_msg error -32 req 02 val 2100 [ 1287.744583][ T5969] pwc: recv_control_msg error -32 req 04 val 1500 [ 1287.779856][ T5969] pwc: recv_control_msg error -32 req 02 val 2500 [ 1287.784115][ T5969] pwc: recv_control_msg error -32 req 02 val 2400 [ 1287.810119][ T5969] pwc: recv_control_msg error -71 req 02 val 2600 [ 1287.810669][ T5969] pwc: recv_control_msg error -71 req 02 val 2900 [ 1287.811344][ T5969] pwc: recv_control_msg error -71 req 02 val 2800 [ 1287.812138][ T5969] pwc: recv_control_msg error -71 req 04 val 1100 [ 1287.812688][ T5969] pwc: recv_control_msg error -71 req 04 val 1200 [ 1287.889213][ T5969] pwc: Registered as video103. [ 1287.908546][ T5969] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input54 [ 1287.931899][ T5969] usb 7-1: USB disconnect, device number 35 [ 1288.210926][ T9488] usb 8-1: string descriptor 0 read error: -71 [ 1288.211431][ T9488] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71 [ 1288.211494][ T9488] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 1288.211513][ T9488] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71 [ 1288.211571][ T9488] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 1288.211682][ T9488] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 1288.311845][ T9488] usb 8-1: USB disconnect, device number 48 [ 1289.079890][T15881] lo speed is unknown, defaulting to 1000 [ 1289.285768][ T5884] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1290.527998][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.528046][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.528087][ T5884] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1290.528114][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.533106][ T5884] usb 7-1: config 0 descriptor?? [ 1290.709225][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1987'. [ 1291.071677][ T5884] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1291.071703][ T5884] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1291.071727][ T5884] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1291.071742][ T5884] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1291.071757][ T5884] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1291.071772][ T5884] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1291.071787][ T5884] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1291.073954][ T5884] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1291.265715][ T9813] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1291.270866][ T5884] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 1291.427971][ T9813] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1291.428005][ T9813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.428026][ T9813] usb 8-1: Product: syz [ 1291.428040][ T9813] usb 8-1: Manufacturer: syz [ 1291.428050][ T9813] usb 8-1: SerialNumber: syz [ 1291.472411][ T5884] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 1291.475778][ T5884] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -32 [ 1291.996605][ T9813] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1291.996679][ T9813] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1291.998414][ T9813] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1291.998475][ T9813] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1291.999415][ T9813] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1292.020745][ T9813] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1292.635847][ T9813] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1292.805829][ T9813] usb 9-1: Using ep0 maxpacket: 32 [ 1292.815536][ T9813] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1292.829267][ T9813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.915224][ T9813] usb 9-1: config 0 descriptor?? [ 1292.955814][ T5969] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1292.971301][ T9813] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1293.583042][ T9813] gspca_vc032x: reg_r err -110 [ 1293.583067][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583080][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583091][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583136][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583146][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583156][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583167][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583211][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583223][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583233][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583282][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583293][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583303][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583313][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583324][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583370][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583381][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583432][ T9813] gspca_vc032x: I2c Bus Busy Wait 00 [ 1293.583443][ T9813] gspca_vc032x: Unknown sensor... [ 1293.583683][ T9813] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 1293.894120][ T5886] usb 7-1: USB disconnect, device number 36 [ 1293.896485][ T5969] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1293.896518][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.896540][ T5969] usb 6-1: Product: syz [ 1293.896556][ T5969] usb 6-1: Manufacturer: syz [ 1293.896572][ T5969] usb 6-1: SerialNumber: syz [ 1293.923801][ T5969] usb 6-1: config 0 descriptor?? [ 1294.015482][ T5969] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1296.687484][T11940] usb 8-1: USB disconnect, device number 49 [ 1296.774291][T15945] binder: BINDER_SET_CONTEXT_MGR already set [ 1296.774310][T15945] binder: 15944:15945 ioctl 4018620d 200000004a80 returned -16 [ 1296.828939][ T9488] usb 9-1: USB disconnect, device number 37 [ 1297.099135][ T5886] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1297.577031][ T5969] gspca_stk1135: reg_w 0x200 err -110 [ 1297.578080][ T5969] gspca_stk1135: serial bus timeout: status=0x00 [ 1297.578096][ T5969] gspca_stk1135: Sensor write failed [ 1297.578125][ T5969] gspca_stk1135: serial bus timeout: status=0x00 [ 1297.578137][ T5969] gspca_stk1135: Sensor write failed [ 1297.578169][ T5969] gspca_stk1135: serial bus timeout: status=0x00 [ 1297.578179][ T5969] gspca_stk1135: Sensor read failed [ 1297.578211][ T5969] gspca_stk1135: serial bus timeout: status=0x00 [ 1297.578221][ T5969] gspca_stk1135: Sensor read failed [ 1297.578230][ T5969] gspca_stk1135: Detected sensor type unknown (0x0) [ 1297.578264][ T5969] gspca_stk1135: serial bus timeout: status=0x00 [ 1297.578275][ T5969] gspca_stk1135: Sensor read failed [ 1297.578305][ T5969] gspca_stk1135: serial bus timeout: status=0x00 [ 1297.578316][ T5969] gspca_stk1135: Sensor read failed [ 1297.578346][ T5969] gspca_stk1135: serial bus timeout: status=0x00 [ 1297.578356][ T5969] gspca_stk1135: Sensor write failed [ 1297.578387][ T5969] gspca_stk1135: serial bus timeout: status=0x00 [ 1297.578396][ T5969] gspca_stk1135: Sensor write failed [ 1297.578507][ T5969] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 1297.755944][T11940] usb 6-1: USB disconnect, device number 43 [ 1297.774403][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1298.005764][ T5886] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1298.216196][ T9488] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 1298.225852][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1298.262695][T15961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2001'. [ 1298.336290][ T5886] usb usb5-port1: attempt power cycle [ 1298.371715][ T9488] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1298.371750][ T9488] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.371771][ T9488] usb 8-1: Product: syz [ 1298.371784][ T9488] usb 8-1: Manufacturer: syz [ 1298.371798][ T9488] usb 8-1: SerialNumber: syz [ 1298.400401][ T9488] usb 8-1: config 0 descriptor?? [ 1298.442758][ T9488] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1298.676711][ T5886] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1298.698595][ T5886] usb 5-1: device descriptor read/8, error -71 [ 1298.825910][ T9813] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 1298.936145][ T5886] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1298.962852][ T5886] usb 5-1: device descriptor read/8, error -71 [ 1298.990492][ T9813] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.990552][ T9813] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1298.996949][ T9813] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1298.996980][ T9813] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1298.997000][ T9813] usb 9-1: Product: syz [ 1298.997014][ T9813] usb 9-1: Manufacturer: syz [ 1298.997029][ T9813] usb 9-1: SerialNumber: syz [ 1299.050064][ T9813] usb 9-1: config 0 descriptor?? [ 1299.066284][ T5886] usb usb5-port1: unable to enumerate USB device [ 1299.122250][ T9813] radio-si470x 9-1:0.0: could not find interrupt in endpoint [ 1299.123340][ T9813] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1299.131205][ T9813] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1299.425713][ T5969] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1299.576589][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 1299.582027][ T5969] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1299.584770][ T5969] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.584841][ T5969] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 1299.584859][ T5969] usb 6-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 1299.584980][ T5969] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1299.651121][ T5969] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 1299.651145][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.651167][ T5969] usb 6-1: Product: syz [ 1299.651559][ T5969] usb 6-1: Manufacturer: syz [ 1299.651578][ T5969] usb 6-1: SerialNumber: syz [ 1299.984125][ T5969] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1299.997600][ T5969] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1300.111676][ T5969] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1300.126326][ T5969] usb 6-1: USB disconnect, device number 44 [ 1300.149971][T13712] udevd[13712]: setting owner of /dev/bus/usb/006/044 to uid=0, gid=0 failed: No such file or directory [ 1300.220707][T13712] udevd[13712]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1300.366138][ T5886] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1300.479585][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.479681][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.528188][ T5886] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1300.528705][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.528790][ T5886] usb 7-1: Product: syz [ 1300.528807][ T5886] usb 7-1: Manufacturer: syz [ 1300.528823][ T5886] usb 7-1: SerialNumber: syz [ 1300.585740][ T5969] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1300.738714][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.738753][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.738777][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1300.738822][ T5969] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1300.738849][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.745387][ T5969] usb 5-1: config 0 descriptor?? [ 1300.855908][T11940] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1300.865100][ T9488] gspca_stk1135: reg_w 0x300 err -71 [ 1300.866443][ T9488] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.866457][ T9488] gspca_stk1135: Sensor write failed [ 1300.866482][ T9488] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.866492][ T9488] gspca_stk1135: Sensor write failed [ 1300.866517][ T9488] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.866905][ T9488] gspca_stk1135: Sensor read failed [ 1300.866935][ T9488] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.866945][ T9488] gspca_stk1135: Sensor read failed [ 1300.866952][ T9488] gspca_stk1135: Detected sensor type unknown (0x0) [ 1300.866982][ T9488] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.866991][ T9488] gspca_stk1135: Sensor read failed [ 1300.867731][ T9488] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.867745][ T9488] gspca_stk1135: Sensor read failed [ 1300.867771][ T9488] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.867781][ T9488] gspca_stk1135: Sensor write failed [ 1300.867805][ T9488] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.867815][ T9488] gspca_stk1135: Sensor write failed [ 1300.868294][ T9488] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 1300.892383][ T9488] usb 8-1: USB disconnect, device number 50 [ 1301.011938][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1301.012013][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1301.014372][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1301.014430][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1301.015263][ T5886] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1301.063708][ T5886] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1301.088789][T11940] usb 6-1: config 3 has an invalid interface number: 3 but max is 0 [ 1301.088820][T11940] usb 6-1: config 3 has an invalid interface number: 110 but max is 0 [ 1301.088842][T11940] usb 6-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 1301.089089][T11940] usb 6-1: config 3 has no interface number 0 [ 1301.089109][T11940] usb 6-1: config 3 has no interface number 1 [ 1301.089174][T11940] usb 6-1: too many endpoints for config 3 interface 110 altsetting 235: 128, using maximum allowed: 30 [ 1301.089433][T11940] usb 6-1: config 3 interface 110 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1301.089464][T11940] usb 6-1: config 3 interface 3 has no altsetting 0 [ 1301.089485][T11940] usb 6-1: config 3 interface 110 has no altsetting 0 [ 1301.137579][T11940] usb 6-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 1301.137601][T11940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.137613][T11940] usb 6-1: Product: syz [ 1301.137622][T11940] usb 6-1: Manufacturer: syz [ 1301.151463][T11940] usb 6-1: SerialNumber: syz [ 1301.246198][ T5969] kovaplus 0003:1E7D:2D50.0015: item fetching failed at offset 4/5 [ 1301.251690][ T5969] kovaplus 0003:1E7D:2D50.0015: parse failed [ 1301.253535][ T5969] kovaplus 0003:1E7D:2D50.0015: probe with driver kovaplus failed with error -22 [ 1301.479824][T11940] usb 6-1: USB disconnect, device number 45 [ 1301.483552][ T9488] usb 5-1: USB disconnect, device number 55 [ 1301.576069][T15988] binder: BINDER_SET_CONTEXT_MGR already set [ 1301.576087][T15988] binder: 15986:15988 ioctl 4018620d 200000004a80 returned -16 [ 1301.659929][ T5886] usb 9-1: USB disconnect, device number 38 [ 1302.145811][ T5884] usb 8-1: new low-speed USB device number 51 using dummy_hcd [ 1302.255767][ T5886] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1302.506436][ T5886] usb 9-1: Using ep0 maxpacket: 16 [ 1303.256362][ T5886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.256394][ T5886] usb 9-1: config 0 has no interfaces? [ 1303.256429][ T5886] usb 9-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1303.256456][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.381910][ T5886] usb 9-1: config 0 descriptor?? [ 1303.411099][ T5884] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1303.411134][ T5884] usb 8-1: config 0 has no interface number 0 [ 1303.411185][ T5884] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1303.411210][ T5884] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1303.411238][ T5884] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1303.411266][ T5884] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1303.411294][ T5884] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1303.411323][ T5884] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1303.411367][ T5884] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1303.411392][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.545068][ T5884] usb 8-1: config 0 descriptor?? [ 1303.547079][T15997] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1303.549753][T15997] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1303.606261][T11940] usb 7-1: USB disconnect, device number 37 [ 1303.621062][ T5884] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1303.695310][ T5884] usb 9-1: USB disconnect, device number 39 [ 1303.797488][ T5886] usb 8-1: USB disconnect, device number 51 [ 1303.801698][ T5886] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1303.915671][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1304.045753][ T9] usb 6-1: device descriptor read/64, error -71 [ 1304.075740][T11940] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1304.238675][T11940] usb 7-1: Using ep0 maxpacket: 32 [ 1304.244634][T11940] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1304.244658][T11940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1304.244680][T11940] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1304.244694][T11940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.256543][T11940] usb 7-1: config 0 descriptor?? [ 1304.305832][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1304.362167][ T5806] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1304.435715][ T9] usb 6-1: device descriptor read/64, error -71 [ 1304.546167][ T9] usb usb6-port1: attempt power cycle [ 1304.885732][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1304.908050][ T9] usb 6-1: device descriptor read/8, error -71 [ 1304.945880][ T5886] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1305.309126][ T5886] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.309190][ T5886] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1305.309217][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.315689][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1305.336261][ T9] usb 6-1: device descriptor read/8, error -71 [ 1306.077588][ T9] usb usb6-port1: unable to enumerate USB device [ 1306.128023][ T5886] usb 8-1: config 0 descriptor?? [ 1306.136308][T11940] corsair-cpro 0003:1B1C:0C10.0016: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 1306.170220][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 1306.603604][T11940] corsair-cpro 0003:1B1C:0C10.0016: probe with driver corsair-cpro failed with error -110 [ 1306.630810][T11940] usb 7-1: USB disconnect, device number 38 [ 1306.646884][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1306.647959][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 1306.648949][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1306.649706][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 1306.650491][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 1306.651449][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 1306.652369][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 1306.653000][ T5886] pwc: recv_control_msg error -32 req 02 val 2100 [ 1306.654382][ T5886] pwc: recv_control_msg error -32 req 04 val 1500 [ 1306.655747][ T5886] pwc: recv_control_msg error -32 req 02 val 2500 [ 1306.655869][ T9] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1306.960606][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 1306.961128][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 1306.961609][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 1306.962139][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 1306.962470][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 1306.996117][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1306.996150][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.996172][ T9] usb 5-1: Product: syz [ 1306.996186][ T9] usb 5-1: Manufacturer: syz [ 1306.996195][ T9] usb 5-1: SerialNumber: syz [ 1307.064943][ T5886] pwc: Registered as video103. [ 1307.072306][ T9] usb 5-1: config 0 descriptor?? [ 1307.083885][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input55 [ 1307.226098][ T5886] usb 8-1: USB disconnect, device number 52 [ 1307.332753][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1309.165768][ T5884] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1309.315449][T16045] lo speed is unknown, defaulting to 1000 [ 1309.339292][ T5884] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1309.339326][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.339346][ T5884] usb 6-1: Product: syz [ 1309.339360][ T5884] usb 6-1: Manufacturer: syz [ 1309.339375][ T5884] usb 6-1: SerialNumber: syz [ 1309.372420][ T5884] usb 6-1: config 0 descriptor?? [ 1309.394280][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1309.419466][ T9] usb 5-1: USB disconnect, device number 56 [ 1309.446681][T11940] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1309.588341][ T5884] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1309.595795][T11940] usb 8-1: Using ep0 maxpacket: 32 [ 1309.616301][T11940] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1309.616328][T11940] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1309.616401][T11940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1309.620701][T11940] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1309.621238][T11940] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.621253][T11940] usb 8-1: Product: syz [ 1309.621261][T11940] usb 8-1: Manufacturer: syz [ 1309.621270][T11940] usb 8-1: SerialNumber: syz [ 1309.700274][T11940] usb 8-1: config 0 descriptor?? [ 1310.127616][T11940] gs_usb 8-1:0.0: Configuring for 159 interfaces [ 1310.194501][ T5884] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1310.252399][ T5884] usb 6-1: USB disconnect, device number 50 [ 1310.342562][T11940] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1310.343026][T11940] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -32 [ 1310.448794][T14725] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1310.448817][T14725] CPU: 1 UID: 0 PID: 14725 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1310.448845][T14725] Tainted: [L]=SOFTLOCKUP [ 1310.448851][T14725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1310.448861][T14725] Workqueue: hci4 hci_rx_work [ 1310.448884][T14725] Call Trace: [ 1310.448890][T14725] [ 1310.448897][T14725] dump_stack_lvl+0xe8/0x150 [ 1310.448920][T14725] sysfs_create_dir_ns+0x271/0x2a0 [ 1310.448936][T14725] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1310.448952][T14725] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1310.448968][T14725] ? rt_spin_unlock+0x160/0x200 [ 1310.448984][T14725] kobject_add_internal+0x631/0xd10 [ 1310.449002][T14725] kobject_add+0x163/0x240 [ 1310.449024][T14725] ? __pfx_kobject_add+0x10/0x10 [ 1310.449048][T14725] ? get_device_parent+0x370/0x3a0 [ 1310.449070][T14725] device_add+0x408/0xb80 [ 1310.449091][T14725] hci_conn_add_sysfs+0xd5/0x210 [ 1310.449108][T14725] le_conn_complete_evt+0xf1d/0x1430 [ 1310.449133][T14725] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1310.449153][T14725] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1310.449170][T14725] ? lockdep_hardirqs_on+0x7a/0x110 [ 1310.449189][T14725] ? skb_pull_data+0xfb/0x200 [ 1310.449210][T14725] hci_le_conn_complete_evt+0x187/0x470 [ 1310.449233][T14725] hci_event_packet+0x7af/0x12c0 [ 1310.449252][T14725] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1310.449272][T14725] ? __pfx_hci_event_packet+0x10/0x10 [ 1310.449287][T14725] ? rt_spin_unlock+0x14f/0x200 [ 1310.449307][T14725] ? hci_send_to_monitor+0xe2/0x590 [ 1310.449323][T14725] hci_rx_work+0x3ee/0x1030 [ 1310.449344][T14725] ? process_scheduled_works+0xa25/0x1830 [ 1310.449363][T14725] process_scheduled_works+0xb02/0x1830 [ 1310.449396][T14725] ? __pfx_process_scheduled_works+0x10/0x10 [ 1310.449416][T14725] ? assign_work+0x3d5/0x5e0 [ 1310.449436][T14725] worker_thread+0xa50/0xfc0 [ 1310.449469][T14725] kthread+0x388/0x470 [ 1310.449482][T14725] ? __pfx_worker_thread+0x10/0x10 [ 1310.449498][T14725] ? __pfx_kthread+0x10/0x10 [ 1310.449512][T14725] ret_from_fork+0x51e/0xb90 [ 1310.449532][T14725] ? __pfx_ret_from_fork+0x10/0x10 [ 1310.449551][T14725] ? __switch_to+0xc7d/0x1450 [ 1310.449570][T14725] ? __pfx_kthread+0x10/0x10 [ 1310.449584][T14725] ret_from_fork_asm+0x1a/0x30 [ 1310.449608][T14725] [ 1310.449628][T14725] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1310.449655][T14725] Bluetooth: hci4: failed to register connection device [ 1310.486132][T11940] usb 8-1: USB disconnect, device number 53 [ 1311.596884][ T5806] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1311.826955][ T5886] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1311.966690][T11940] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1311.985446][ T5886] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1311.985496][ T5886] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1311.985510][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.021028][ T5886] usb 9-1: config 0 descriptor?? [ 1312.043360][ T5886] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1312.095911][T11940] usb 6-1: device descriptor read/64, error -71 [ 1312.335817][T11940] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1312.395978][ T5886] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1312.485759][T11940] usb 6-1: device descriptor read/64, error -71 [ 1312.570504][ T5886] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1312.570560][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.570592][ T5886] usb 7-1: Product: syz [ 1312.570610][ T5886] usb 7-1: Manufacturer: syz [ 1312.570627][ T5886] usb 7-1: SerialNumber: syz [ 1312.592133][ T5886] usb 7-1: config 0 descriptor?? [ 1312.612757][T11940] usb usb6-port1: attempt power cycle [ 1312.615343][ T5886] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1313.053730][T16079] autofs: Bad value for 'fd' [ 1313.065686][T11940] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1313.096465][T11940] usb 6-1: device descriptor read/8, error -71 [ 1314.123494][ T5886] gspca_stk1135: reg_w 0x3 err -110 [ 1314.124558][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1314.124571][ T5886] gspca_stk1135: Sensor write failed [ 1314.124602][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1314.124613][ T5886] gspca_stk1135: Sensor write failed [ 1314.124644][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1314.124655][ T5886] gspca_stk1135: Sensor read failed [ 1314.124688][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1314.124698][ T5886] gspca_stk1135: Sensor read failed [ 1314.124707][ T5886] gspca_stk1135: Detected sensor type unknown (0x0) [ 1314.124743][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1314.124755][ T5886] gspca_stk1135: Sensor read failed [ 1314.124784][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1314.124795][ T5886] gspca_stk1135: Sensor read failed [ 1314.124825][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1314.124835][ T5886] gspca_stk1135: Sensor write failed [ 1314.124860][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1314.124869][ T5886] gspca_stk1135: Sensor write failed [ 1314.124958][ T5886] stk1135 7-1:0.0: probe with driver stk1135 failed with error -110 [ 1314.267391][T11940] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1314.299527][T11940] usb 6-1: device descriptor read/8, error -71 [ 1314.406357][T11940] usb usb6-port1: unable to enumerate USB device [ 1314.415727][ T5886] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1314.523720][T11940] usb 9-1: USB disconnect, device number 40 [ 1314.602856][ T5886] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1314.602893][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.602915][ T5886] usb 8-1: Product: syz [ 1314.602931][ T5886] usb 8-1: Manufacturer: syz [ 1314.602948][ T5886] usb 8-1: SerialNumber: syz [ 1314.636002][ T9488] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1314.728201][ T5806] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1314.793118][ T9488] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.793181][ T9488] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1314.793255][ T9488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.827399][ T9488] usb 5-1: config 0 descriptor?? [ 1314.845899][ T9488] pwc: Askey VC010 type 2 USB webcam detected. [ 1314.975709][T11940] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1315.069268][ T5886] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1315.069362][ T5886] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1315.131611][T11940] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1315.131645][T11940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.131668][T11940] usb 9-1: Product: syz [ 1315.131684][T11940] usb 9-1: Manufacturer: syz [ 1315.131699][T11940] usb 9-1: SerialNumber: syz [ 1315.138435][T11940] usb 9-1: config 0 descriptor?? [ 1315.249126][ T9488] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1315.251875][ T9488] pwc: recv_control_msg error -32 req 02 val 2700 [ 1315.253024][ T9488] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1315.254494][ T9488] pwc: recv_control_msg error -32 req 04 val 1000 [ 1315.283954][ T9488] pwc: recv_control_msg error -32 req 04 val 1300 [ 1315.293520][ T9488] pwc: recv_control_msg error -32 req 04 val 1400 [ 1315.294788][ T9488] pwc: recv_control_msg error -32 req 02 val 2000 [ 1315.312685][ T9488] pwc: recv_control_msg error -32 req 02 val 2100 [ 1315.314937][ T9488] pwc: recv_control_msg error -32 req 04 val 1500 [ 1315.330137][ T9488] pwc: recv_control_msg error -32 req 02 val 2500 [ 1315.354968][ T9] usb 7-1: USB disconnect, device number 39 [ 1315.465700][T11940] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1315.534858][ T9488] pwc: recv_control_msg error -71 req 02 val 2600 [ 1315.542349][ T9488] pwc: recv_control_msg error -71 req 02 val 2900 [ 1315.543232][ T9488] pwc: recv_control_msg error -71 req 02 val 2800 [ 1315.561644][ T9488] pwc: recv_control_msg error -71 req 04 val 1100 [ 1315.562798][ T9488] pwc: recv_control_msg error -71 req 04 val 1200 [ 1315.631126][ T9488] pwc: Registered as video103. [ 1315.643210][ T9488] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 1315.689100][ T9488] usb 5-1: USB disconnect, device number 57 [ 1315.816906][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1315.983386][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.983734][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.984162][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1315.984190][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.017841][ T9] usb 7-1: config 0 descriptor?? [ 1316.071919][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1316.072276][T11940] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1316.113530][T11940] usb 9-1: USB disconnect, device number 41 [ 1316.151185][T13814] udevd[13814]: setting mode of /dev/bus/usb/009/041 to 020664 failed: No such file or directory [ 1316.152252][T13814] udevd[13814]: setting owner of /dev/bus/usb/009/041 to uid=0, gid=0 failed: No such file or directory [ 1316.639137][ T5886] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1316.639644][ T5886] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1316.640758][ T9] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 1316.640894][ T9] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 1316.642894][ T5886] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1316.642956][ T5886] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1316.646139][ T5969] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1316.723991][ T5886] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1316.929876][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 1317.713365][ T5886] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1317.713902][ T5969] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1317.713935][ T5969] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1317.713970][ T5969] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1317.713995][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.726418][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0017/input/input57 [ 1317.892176][ T5886] usb 8-1: USB disconnect, device number 54 [ 1317.938543][ T5969] usb 6-1: config 0 descriptor?? [ 1318.188929][ T9] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 1318.214665][ T9] usb 7-1: USB disconnect, device number 40 [ 1319.995996][T16116] syz.7.2050 (16116) used greatest stack depth: 16824 bytes left [ 1320.056928][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 1320.098761][ T5969] corsair-cpro 0003:1B1C:0C10.0018: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1320.368586][T16121] fido_id[16121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1320.775676][ T9488] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1320.959579][ T9488] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.959651][ T9488] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1320.959677][ T9488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.089017][ T5969] corsair-cpro 0003:1B1C:0C10.0018: probe with driver corsair-cpro failed with error -110 [ 1321.104647][ T5969] usb 6-1: USB disconnect, device number 55 [ 1321.164052][T16098] ------------[ cut here ]------------ [ 1321.164069][T16098] kcov->t != t [ 1321.164078][T16098] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz.5.2048/16098 [ 1321.164123][T16098] Modules linked in: [ 1321.164148][T16098] CPU: 0 UID: 0 PID: 16098 Comm: syz.5.2048 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1321.164181][T16098] Tainted: [L]=SOFTLOCKUP [ 1321.164189][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1321.164203][T16098] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1321.164231][T16098] Code: 10 00 00 48 8b bb 90 00 00 00 e8 c6 4f 54 00 48 89 df 5b 41 5e 41 5f e9 e9 26 5a 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 8b 00 60 09 48 89 df be 03 00 [ 1321.164281][T16098] RSP: 0018:ffffc90006d1fae0 EFLAGS: 00010283 [ 1321.164303][T16098] RAX: a1be74ab91445800 RBX: ffff8880723db700 RCX: 0000000000000000 [ 1321.164320][T16098] RDX: 0000000014dee08c RSI: ffffffff8ba647e0 RDI: 00000000ffffffff [ 1321.164337][T16098] RBP: ffffc90006d1fc28 R08: ffffffff8b245250 R09: ffffffff8ddcd780 [ 1321.164354][T16098] R10: dffffc0000000000 R11: fffffbfff1ed4657 R12: 1ffff11004f5c79d [ 1321.164372][T16098] R13: 0000000000000009 R14: ffff8880723db708 R15: ffff888031023c80 [ 1321.164389][T16098] FS: 000055556cdaa500(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 1321.164411][T16098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1321.164428][T16098] CR2: 0000001b3061aff8 CR3: 0000000056448000 CR4: 00000000003526f0 [ 1321.164450][T16098] Call Trace: [ 1321.164460][T16098] [ 1321.164472][T16098] do_exit+0xd8/0x2320 [ 1321.164508][T16098] ? __pfx_do_exit+0x10/0x10 [ 1321.164531][T16098] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 1321.164559][T16098] ? reacquire_held_locks+0x104/0x190 [ 1321.164592][T16098] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1321.164627][T16098] do_group_exit+0x21b/0x2d0 [ 1321.164654][T16098] ? rt_spin_unlock+0x160/0x200 [ 1321.164683][T16098] get_signal+0x125c/0x1310 [ 1321.164740][T16098] arch_do_signal_or_restart+0xbc/0x830 [ 1321.164780][T16098] ? __pfx_get_timespec64+0x10/0x10 [ 1321.164805][T16098] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1321.164843][T16098] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1321.164882][T16098] exit_to_user_mode_loop+0x86/0x480 [ 1321.164910][T16098] ? rcu_is_watching+0x15/0xb0 [ 1321.164941][T16098] do_syscall_64+0x32d/0xf80 [ 1321.164972][T16098] ? trace_irq_disable+0x3b/0x150 [ 1321.164998][T16098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.165023][T16098] ? clear_bhb_loop+0x40/0x90 [ 1321.165051][T16098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.165075][T16098] RIP: 0033:0x7f4a894ccfce [ 1321.165097][T16098] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1321.165117][T16098] RSP: 002b:00007ffe0a03d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1321.165141][T16098] RAX: fffffffffffffdfc RBX: 000055556cdaa500 RCX: 00007f4a894ccfce [ 1321.165157][T16098] RDX: 00007ffe0a03d140 RSI: 0000000000000000 RDI: 0000000000000000 [ 1321.165172][T16098] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1321.165186][T16098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000142f87 [ 1321.165201][T16098] R13: 00007f4a8978609c R14: 0000000000142465 R15: 00007f4a89786090 [ 1321.165239][T16098] [ 1321.165252][T16098] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1321.165272][T16098] CPU: 0 UID: 0 PID: 16098 Comm: syz.5.2048 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1321.165302][T16098] Tainted: [L]=SOFTLOCKUP [ 1321.165311][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1321.165324][T16098] Call Trace: [ 1321.165334][T16098] [ 1321.165343][T16098] vpanic+0x56c/0xa60 [ 1321.165379][T16098] ? __pfx__printk+0x10/0x10 [ 1321.165405][T16098] ? __pfx_vpanic+0x10/0x10 [ 1321.165437][T16098] ? is_bpf_text_address+0x292/0x2b0 [ 1321.165469][T16098] ? is_bpf_text_address+0x26/0x2b0 [ 1321.165508][T16098] panic+0xc5/0xd0 [ 1321.165546][T16098] ? __pfx_panic+0x10/0x10 [ 1321.165593][T16098] __warn+0x315/0x4f0 [ 1321.165626][T16098] ? kcov_task_exit+0xf5/0x160 [ 1321.165654][T16098] ? kcov_task_exit+0xf5/0x160 [ 1321.165681][T16098] __report_bug+0x29a/0x540 [ 1321.165718][T16098] ? kcov_task_exit+0xf5/0x160 [ 1321.165745][T16098] ? __pfx___report_bug+0x10/0x10 [ 1321.165784][T16098] ? update_se+0x91/0x620 [ 1321.165814][T16098] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1321.165845][T16098] ? do_raw_spin_lock+0x12b/0x2f0 [ 1321.165887][T16098] ? kcov_task_exit+0xf5/0x160 [ 1321.165912][T16098] report_bug+0x16a/0x220 [ 1321.165944][T16098] ? kcov_task_exit+0xf5/0x160 [ 1321.165968][T16098] ? kcov_task_exit+0xf7/0x160 [ 1321.165993][T16098] handle_bug+0x98/0x200 [ 1321.166029][T16098] exc_invalid_op+0x1a/0x50 [ 1321.166065][T16098] asm_exc_invalid_op+0x1a/0x20 [ 1321.166087][T16098] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1321.166114][T16098] Code: 10 00 00 48 8b bb 90 00 00 00 e8 c6 4f 54 00 48 89 df 5b 41 5e 41 5f e9 e9 26 5a 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 8b 00 60 09 48 89 df be 03 00 [ 1321.166133][T16098] RSP: 0018:ffffc90006d1fae0 EFLAGS: 00010283 [ 1321.166153][T16098] RAX: a1be74ab91445800 RBX: ffff8880723db700 RCX: 0000000000000000 [ 1321.166169][T16098] RDX: 0000000014dee08c RSI: ffffffff8ba647e0 RDI: 00000000ffffffff [ 1321.166186][T16098] RBP: ffffc90006d1fc28 R08: ffffffff8b245250 R09: ffffffff8ddcd780 [ 1321.166203][T16098] R10: dffffc0000000000 R11: fffffbfff1ed4657 R12: 1ffff11004f5c79d [ 1321.166221][T16098] R13: 0000000000000009 R14: ffff8880723db708 R15: ffff888031023c80 [ 1321.166244][T16098] ? rt_spin_lock+0x1e0/0x400 [ 1321.166280][T16098] do_exit+0xd8/0x2320 [ 1321.166315][T16098] ? __pfx_do_exit+0x10/0x10 [ 1321.166337][T16098] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 1321.166363][T16098] ? reacquire_held_locks+0x104/0x190 [ 1321.166395][T16098] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1321.166430][T16098] do_group_exit+0x21b/0x2d0 [ 1321.166457][T16098] ? rt_spin_unlock+0x160/0x200 [ 1321.166487][T16098] get_signal+0x125c/0x1310 [ 1321.166540][T16098] arch_do_signal_or_restart+0xbc/0x830 [ 1321.166570][T16098] ? __pfx_get_timespec64+0x10/0x10 [ 1321.166594][T16098] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1321.166633][T16098] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1321.166671][T16098] exit_to_user_mode_loop+0x86/0x480 [ 1321.166704][T16098] ? rcu_is_watching+0x15/0xb0 [ 1321.166735][T16098] do_syscall_64+0x32d/0xf80 [ 1321.166774][T16098] ? trace_irq_disable+0x3b/0x150 [ 1321.166801][T16098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.166825][T16098] ? clear_bhb_loop+0x40/0x90 [ 1321.166854][T16098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.166877][T16098] RIP: 0033:0x7f4a894ccfce [ 1321.166897][T16098] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1321.166917][T16098] RSP: 002b:00007ffe0a03d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1321.166940][T16098] RAX: fffffffffffffdfc RBX: 000055556cdaa500 RCX: 00007f4a894ccfce [ 1321.166957][T16098] RDX: 00007ffe0a03d140 RSI: 0000000000000000 RDI: 0000000000000000 [ 1321.166990][T16098] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1321.167004][T16098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000142f87 [ 1321.167019][T16098] R13: 00007f4a8978609c R14: 0000000000142465 R15: 00007f4a89786090 [ 1321.167055][T16098] [ 1321.167500][T16098] Kernel Offset: disabled