last executing test programs: 1m34.387485937s ago: executing program 3 (id=206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = memfd_create(&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00z\x9b\xb6/\xf5j\x8f\xadS\xa1X9\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbf\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x80\xc4\x0f\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)M\n\xce\xbe\x8e\xdc\b8wX\x18\xe2\x94\xad\xea\xe3\xce\x02D\xc2\xf2\x11\x88s', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000008c0)="ad06b6c5970fae9d8e703292ea9800338b917c564c90c2008355f021c285fb8551edb7bb653e2b8bf010d58e36e07d7fee9699f9e6e0497807de3cf085d0634bcd64ee430faa1633e18e400400b3ede6c1cf3041226a19fcfdb2979a0c26cfb9f743547f62383b768c99b3d721539de61be89b79c7bac2dc841d5d36291ca546a141665b3431e7cb325258cb97b2690c083bda5f36b02eb207c57840405284dc64", 0xa1) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtaction={0x314, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0x300, 0x1, [@m_ipt={0x25c, 0x18, 0x0, 0x0, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efed9064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f53db88f3ba2e308499f6252662a51fa4b12868be55ce53954a07aae068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xa0, 0x11, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xd92}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x314}}, 0x4000) (async) recvmsg$can_raw(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000b00)=""/76, 0x4c}, {&(0x7f0000000b80)=""/145, 0x91}], 0x2}, 0x40020001) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) (async) sendmsg$inet_sctp(r1, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) (async) r5 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000200)) (async) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f00000000c0)={&(0x7f000037c000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000, 0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1ff}}, 0x10) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x2e}], 0x1}, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000007740)={0x0, 0xea60}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 1m34.383912843s ago: executing program 3 (id=208): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}]}) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x111, 0x1}}, 0x20) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000780)=@ethtool_eeprom={0xc, 0x188, 0x2, 0x1000, "70b8120950e06f79d0051f3199a33ddb497b597bb3dbf64311204358772f8e2bde7b7d5f74f12a17132e29e6df601c3b1ea73b319ea228fc4ee538f9378be821fadbcef38082fbb38b8fb8c396ea1c72f2716b09e589959e8627c6efbe0f7ed63a8942fb970f1801850e715d85cb7c354295b4026527dc33ca5afe04c4b198dcf513d6bd43908c5df56045ce9846807a1ddf95bde77762d518c51b7cdcb7506f5114e9078fe3ccb67f40bc8d90cdfff619c68ce61cfcbdf7b1142f42d0f05369000530f53b627ffb603722d8903815112e9e47d14b67e538edbe605078e2f0218b98096a49bd362d2d99dff980e014759a5dcb8f19662eccd5a68dfa803b42c52ee3e00a2e77ecd2fe1d008f5b1a508b73dc5dd0936e35d35c5f72e8ccfc0bf31492251790b92d5ab6724db78b8456d43ecdf23aaf5a245bb1c19759c6e339aafd2bf2ceaf7a2344b10e93151a5750c3a5578957f80452ff02fcf790e7af04e8db6fda94bdd3a21e9f6e7ba9ffd4ac8daf2e0583ac0ee730a322b8aea6783acbffdf8b1d4aaa24a5226d5346eb8728e50728a266e00fbd78f76ee357064445c584d53177f1cd18e2466ae0ea94d4bdb0cf9c6be19c067b1b7f0f5457463ef660fd64ade960e35539fef216c6a6c395eef8fa83863e968df1aac78e5f66b516c0ef6080997d52d1dac1a29e5848eb943c9d917cd3c57f48eb3d011fcd3eccf9dfe93129a462e3668239b48e04c92347f156382e93163bebae7769cff56bab375442c485f40702dad2692bc76a3cba8795d60c4cde700e72429db652ec3693b63063c7a42907af3db041fb7200093262d19d5222bce9fb040856f40156d0261cc17cb861da37677e2204212e9034248a4d6434ea8e70b317b43fe3c6f2d88dff8b082d8d7a74d725fb5fcd08970fc3b359733a112abf73a6738a5b678ad2d4a923c1d51c22e8dcc24807af327a4223b73737efdf1600876c9f0a0d5a9ff912aaf839129802f0b508012af16cda22c27338f5b26613113d171f93fdf7db773ea08a01cfb7c617caf38352ef9627a6e72f34a0851d6710df28ea9fdc1e7b10995be55087990cb69235c72cfa8eb09b3ec313a6751746a01fdb189669f65ff41d8d48f6862d69f595374be59a425f2d80bd65f28996d05ced3ac790ca7b404d2cdc122ee076959ba73ba0db7db0d2cd4b09518d2f56bd8f367b1357cff6f23c4cf890b57e5c5033d5ce032556835d7020b2909dd988f4496d3bda817709fb8c40189ee0894b7b479e0ecd268d9a52762f623e58fb683dd59932d7bcf727cf7b486db1846609c0a4e3b758811e7081e223984f7a4a2c14273adbc444fe401929460b92a611849ceaa3a60c0e85b65973a69f5a273f964411d8e6ac23e2a013525d8e731881cfb1bd35e2398de743e263a024a7b3a43598d6d442ebf135479d6bebacb30ad1fc0f3529c16e5580c7b24fce492a82bb69351332aeb5d68051d5ee929ec077535e772af659d90aad2f9d23890b8542790d6cff8387e11374faa8154441acc5722213232dc7fc6a2f23c42ce1697aa4aab33c14e39378a2fb4bee9fc62af283b7d3b9a0f6b8b5c8e6d3bf16843e4ec9e311728b1e83466cf44bef09a874f45423cd90f62340a40549e245b513d6eeab2c68bc89bae0ab847879d1e52d60c505fc246fec124974d22ef73102dd1a0b03a622f3bca8eb0e4c837541a8fee41407dc25647ca55ce0e6738e753eb3946fc791a0f4500157e5efd5788fe77331a887b4b90b1c37d345792c7aafd705b602ae2aab8f2563a96d94f47216b70dc3e57cd0c61e74991d4a9a24b089c02223e4a3e9e8fc96a1c9cb7caf1fc1c4fac7833d1bbe5aea1b34d8a6435a749862cb9473de666fb44116ecd60189a6dbc3140d55f9402437f306d9d1a99ba08f4479e231e3da33f24b1766d888ab345e87c7b9023db66acf4aabbf7330abe62d62d9d0689afd73d87c0e4f1ebf45c7dca3cc34d5f74c0708c36a68e0ae54796fc60d677deaf4297d31ebd06f818a2f72922604ce22c20463c55abc28344b461cef7eedf45cb9b3a56826a043c821347dfb6ecf8960f756c88bac1064d0e1e6615a8f82ee90d16fd1b77fde57f06e1bb5565274f9130de7925ecf7e728a27eebf4ab289a3eff18ea44e0e903ca0fcf5f845b73b68b7ea5072ddbc2b8c057554394f5c3e30a9e4ee594f5d6249db3ed9d0ccb5caf62786d2a03cadd751320993686355eec3d360cf32d1c758bb4657acd127d5e316429023a5977aa3d41ae4ec46006ac7b18b9116f979def80f1947068c3cf883b32ef20f5db4ba6ce6a03afb02a8b14a756b73c99d7dff823fc5069a78cc235123c7122769325518fd4d5c6951e7290eaee3634c8b8fa57edcda5669beb173d3daa0fe1757442e55009245b611db0dcaae825ed6e7f63efdb77323ea0d47e201a5c7155aa95e1dee86178837b8bc4a37b39bd283754cd11805b0bfeb8ed64ee3a5bb20c892115c85273936242e8c45fda061cf97a1730953f7eb5b0d1c1f10b786c85fdda1edc3e1be34d1fed21350bae28baba7f95deb09af02471d531d63641a550d6193b62f44d5d8517d8c643c7d5b961cd6d4f7219dacc9c1f106990cdca27cde7c070616408535f62eb28829830ec2d1b5874f050f9746309bfa09e5e79878a906af17c4791dbfa30729b0209b6d9b2a88b12680361c0661fff5ca2cee6533c55ee5d156a5c59a399efd436196308a36c769801e2c1a86f4382c65f57e08ef089a3f91697728777be6ae3793a5b7b4d4f1626fab07deabc6a43dd8940f0865ec2d2193b6b12d6359504de7184a9ca23beed6b8ad3badccdf64da85f01f2fffa2db46e0b4b2c75a292fb19c3eccce99e59df97ee2cc06b269a8b65590141f6265335cfc2f3288423278fc9b0c04143f7c0445c88e07aae0694ff940e3d91ad9e27332a56e4fd991e8a978e29f51f4ecc4df191394873443f306d4dfd83590697daf35a4769327d4b8803bb823afcc940b82cb159653e1812bef7469c3923bf8124392447b91150d9a69ea574816917d6602550d790d545b9973d3de7a16c3f46ecac55ffed2692699c9634bb8efc2c503f82fac2a12ec1d470bc5d22777d8c0addc5ee423f346ff733a38972da6099a0602141d8a79906f7e0822a6ba47d3aac431a61ddc92a719a7c94cef230a7b7b2f89ab2015f57634fdd21c70393c11afcaa5202cd1aa890a35304c04949f03924c2d6beb5e918c1ec4e7e12570186ccdb03de227d4e35f4c687a83c31f3f967e394d2a9af9e6a5ab2d40bfde9db1cc299a266363b7151e3217220b44789675ed5c57bf03be74ff997c7780c6c6440d15b457f17698bcc06a67229319dd799760001f223ef86d7f83e1d5a04b70a9782b72ad6f8ef65588b280fd02c424a61de6a00ca17d4d2a935c2bee864ebb636c9fdefab985524fe5a5d926d70f5bd6ace0ca42c2e6fcab9c2b17a0636f275b6ca0420aff46edaf47e34cf994ef56353aaa76342c64f3ba39779a6d441e7fc61eb3a0b619d896a7393376a7b8434228e2fe3376582753f99809189d9478de893e41da145b02c6db90b0d3fa167d0669c6487633253f58eb317d42629641829c8e0b2d8bbfd56286090804721e75ca28cd41be13ad8d2fb28f25f0a65218d327a582ac5ae1e04c2749fffb7a28d7283954081871de109e65e1fe97f2a7fc64a79617c9a23774b685ce29c82d14be9395def3b2add6d4429e6e29131e77232dfddcfc935d1c527180b0b2fbde70ad5084e9f430b775fe95a135f1017a3ee59e3f7f005ad2b10fcd27bb7c05a3d0269fb04f317ef80d4d0c8792d8acad05b045ec3f2a9000e7387a247f54ac5359871ff4ef77220d20959ace3173d2c0635881922e4cee0979a7f508c8d4e085c58c34104385b6f6c493e6eb03d2a64a863259061c51c9f8d556f9bd1f32d37be84d68a04e423a0ac18614b2f8d7bc99cd3ef4df2a7324d51848329feaa4b77bf9c4e88c37950e42a9494ef2f687102719d9bc9ed2927364308a1fd6cc36ef3d9576234ea3d40c587bf6d6c35c47d217eb61133ae91fad389dafbb286f172ee4f63b9b673ae245348e950542a39210aa5385d700628f3195d5aab8a1ebd6a497e19663c47b164abef81638172bddf2bbbc0d5f1dae841a931b2c13b4d34d130dbeb67b132ddc5719d66f83cdc037f4856a976bacc50388706ea509cdf2f9fa3fc7e229dc4c3f49b33fdfa6faa761294c9ec93197206125929b17eb2381b170d48488fe9f79cf598f86c6d28965f3c267d381efa0af227f6f7b16e2cb91dcf87e5ae10806e7e7948bdfd20295e837d237eb10a8d441904c3950ae365c9545d1508823742f89a0a851390b036c168512fc99788a063fd74b271b40f188266d2fc86a5b019f9c0509cb8b8483b8e0e4d483b674ff61907de8675a41d166742f41e995f1cbda825f53d378f69aeca5b279c52679d72a73686e0509f11c0f4ba8042f1f1eada44120a2de22055d47c7db7df7afb5be084627702b9e443e821726581b93e547b325c6f5f8a4ba91f4b26b40bb09225e122bf67f8f8e8cf452f689650843fd2c49a078b15f45b14477f705177263f5df06d9e09c6605b05f56aca33f9af9ee4e1a8b51199b9031b82115832caeba23c77e9fd3a10a9f54ee8d056a97938e73313fd12e1a8cbc889d74a43e8afe2e9fcd473077e77bc459f681ea948a2cbe0a04984c649e6dcfeb7d67cf680534a90ab6a37c78a921f82f14cc40f70bd789cd88ce8bf6ce0fba012bf45acdb7b5fbc4621ef065fedf228541a3ebb360bcd01e154ea3ca87a9ee6ef4ca3e30c80f278ad1f54ea7346b1cab9585915d2d728a0e060fc081aa174e58e412975bcf1e08dbbc7f37b485d36842db297eb719136dd20361dc537feb2175089acae93e447ca72030d3d3ff93a85fe2010ce14f37f6a58998f4712a0d2494cf98e40634b98d1afd8ed8d10d870afe532f4e9b9cf909c6b95b1c239e947c3ec78a339f5efca7580bfd9fa6e535c8a4e58c6e2990ea653536f45af7ed787a2321afc5f9f0012af920f7425a9e8932c656906e9e7e51e1587b19877a2a265a6a539ee314e029f6efa224fa71f73984ba0efe19403c8abca7aa2f72d50830e8cab879bf025fdf58796e37f00b654a259dccbdd1534c119603ca490584f1ddb1241b2adbbeea4ccc79f256dff003d85824cb8a0f0f8151339bb95a95f6f86e772017ac0ba359c6eb151546e60ba8c55840e00a7fc6243a790a7b598540801158ecfbbb0e523bcf876c3494dfc5bada2df3dc7cc90bd2d3354781a29026a67889434b88b385a776b0ced0fc00637634fe41a31a40e93653d73bbf3faf7baf308c67451b0bcb924cafc7ce00838c4e3dd9bac1deb18cbaf1e1ef0c31c4959f89ef5a9997f7afe4990cc34862ead9867b056f7617382b0234ff5743c070f3b9e43b773e4d958611e146c15e54fa24e030d6b9c0004122aed918450a2e76140d886a3ddb238145eff6ad8425490314e0a784d658bee45696ed528ab83f650b9722d2c31270fb5b527ab1644bfbc1ec00b536a8a605be65eaa957d1123ebb7d5dd2c3d58b9af215442a5be93e35d33f18f19d8bec57a3167be39474e3a13cb51a63c683353bd8377b1ffedc286cbe831fa2969a90e66f6f0f0bed9dbad75e676fa94921be1aad921afa5e063ccf4ac592c2231fc8dde5e0f83184b6dd907eab7bc58ce3543a7610073f2f94baf7f3354e18736791c4d224de001fb329ab53037870b2e1548bc8efd037990220df"}}) accept(r0, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) 1m34.208364531s ago: executing program 3 (id=209): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x4, 0x700000000000000, 0x0, 0x40090}, 0x40) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) sysfs$1(0x7ffffffe, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000635f41045f201d0640c16fce0102030109021b00010000800000"], 0x0) 1m31.06786922s ago: executing program 3 (id=225): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000002240)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103", @ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)) r2 = syz_open_pts(r1, 0x101000) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000019080)="00000ace2f380f29d4b5622e5bea7aaefbabb6e2ea772e1670", 0x19}], 0x2) r4 = dup3(r2, r1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x44, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r7, 0x245, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0xfffffffe, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000000000000a00004000000003ff"], 0x90) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) 1m28.040996659s ago: executing program 3 (id=251): chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x874fd42a7836ef66, 0x4}) (async) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x300}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x14, r7, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44814}, 0x8904) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001a00010000000200000000000a000000"], 0x14}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xc0, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_MASTER={0x54, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xdfa5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x78}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x800040068], 0x2000, 0x40110}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m27.800463532s ago: executing program 3 (id=254): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x80000003, 0x1}}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x202, 0xa401) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}, 0xffff}], 0x1, 0x10041, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0xa00, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x8}}, 0x20) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0xb, 0x4, 0xff81, 0x0, 0x5, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x0, 0x0) syslog(0x9, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24000010}, 0x20040800) read$FUSE(r5, &(0x7f00000044c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r4, 0x8b22, &(0x7f0000000200)="f39864fad29bd28cf0556f29a41248b32c079d2b7036dda300b26468b4757732443de32e01a8c2d67452a069c95d244f1b24e1") socket$tipc(0x1e, 0x5, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000001f) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x153840, 0x0) 1m12.607062709s ago: executing program 32 (id=254): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x80000003, 0x1}}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x202, 0xa401) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}, 0xffff}], 0x1, 0x10041, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0xa00, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x8}}, 0x20) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0xb, 0x4, 0xff81, 0x0, 0x5, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x0, 0x0) syslog(0x9, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24000010}, 0x20040800) read$FUSE(r5, &(0x7f00000044c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r4, 0x8b22, &(0x7f0000000200)="f39864fad29bd28cf0556f29a41248b32c079d2b7036dda300b26468b4757732443de32e01a8c2d67452a069c95d244f1b24e1") socket$tipc(0x1e, 0x5, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000001f) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x153840, 0x0) 11.186929181s ago: executing program 0 (id=418): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid}], [], 0x6b}}) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0002040000080904000065d4695e000905", @ANYRESDEC], 0x0) (rerun: 64) 7.968019106s ago: executing program 0 (id=436): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x72) 7.228391253s ago: executing program 0 (id=446): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103e0000c0007"], 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r1, &(0x7f0000001280)='\f', 0x1) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0xd9510ea96f314097, 0x2, 0x36, {0x36, 0xa, "bd9b70f70c367775dd27e691515c3463906586f62aabf81c19a9fbcd62fd03a91a80c3f204258adc12c2c703365a9094892be5a7"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f00000000c0)={0x0, 0xf, 0xc5, {0x5, 0xf, 0xc5, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "fb3c2ad87f445ff4a983d2ca4556c3fc"}, @generic={0x98, 0x10, 0xb, "19d78920fc197d239e08d05f1d0bd616878097bdb777f59d698f41629ac8801291e5d171813bd341ea8e0db1dcfca2735a621cd0b789e9bb1da002d67b09706032876b976255ca5cab13ec88d2f6ef01710589c589c2a33458ce167f55ed71c8030a7a9fa1c296f774a049bc8b6de313dbfde70e6603a7c89e33fee2a97e5648753dc7ee8b509fb237b6b7b008244f492287ec021f"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "700a46bed2b5560489f4103030be6590"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfd, 0x3, 0xbd, 0xa7, "21040f5c", "01e168fc"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x10, 0xf1, 0xa, 0x9, 0x2ec}}}, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x40, 0x16, 0xca, "8a5664b08269db7307daf8d87e7dd6bd49041627176c19ef2f3c131d173847db46f35832ed9ca7ee036c4177068f9a83ea0970e82865ea5daa00398491a19f8c168802cb490892bc5d199020148db9f2dc8b51961ed887b1481f77ff7c082dc76e69980c19621ad6245d148ed2dbb4d8824b14806978fb1cc5c0fad194f072d2aac35420c3707b599ff5d8cef0c66c59e907933650c9c9e3f6f942bd6914d6d21dfdeaa62a9e41a31d4a70114ed37816f9a5ebf49839abf31ccdb6335b4887941e4db377343f2f1eb7f2"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x37}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1c00, 0x8, [0xf00]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "83a2"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "a96c"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0xd9510ea96f314097, 0x2, 0x36, {0x36, 0xa, "bd9b70f70c367775dd27e691515c3463906586f62aabf81c19a9fbcd62fd03a91a80c3f204258adc12c2c703365a9094892be5a7"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f00000000c0)={0x0, 0xf, 0xc5, {0x5, 0xf, 0xc5, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "fb3c2ad87f445ff4a983d2ca4556c3fc"}, @generic={0x98, 0x10, 0xb, "19d78920fc197d239e08d05f1d0bd616878097bdb777f59d698f41629ac8801291e5d171813bd341ea8e0db1dcfca2735a621cd0b789e9bb1da002d67b09706032876b976255ca5cab13ec88d2f6ef01710589c589c2a33458ce167f55ed71c8030a7a9fa1c296f774a049bc8b6de313dbfde70e6603a7c89e33fee2a97e5648753dc7ee8b509fb237b6b7b008244f492287ec021f"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "700a46bed2b5560489f4103030be6590"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfd, 0x3, 0xbd, 0xa7, "21040f5c", "01e168fc"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x10, 0xf1, 0xa, 0x9, 0x2ec}}}, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x40, 0x16, 0xca, "8a5664b08269db7307daf8d87e7dd6bd49041627176c19ef2f3c131d173847db46f35832ed9ca7ee036c4177068f9a83ea0970e82865ea5daa00398491a19f8c168802cb490892bc5d199020148db9f2dc8b51961ed887b1481f77ff7c082dc76e69980c19621ad6245d148ed2dbb4d8824b14806978fb1cc5c0fad194f072d2aac35420c3707b599ff5d8cef0c66c59e907933650c9c9e3f6f942bd6914d6d21dfdeaa62a9e41a31d4a70114ed37816f9a5ebf49839abf31ccdb6335b4887941e4db377343f2f1eb7f2"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x37}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1c00, 0x8, [0xf00]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "83a2"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "a96c"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x4}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="202256000000560f9e57"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0xffffff0c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global=@item_4={0x3, 0x1, 0x6, "aa4e89bb"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0xffffff0c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global=@item_4={0x3, 0x1, 0x6, "aa4e89bb"}]}}, 0x0}, 0x0) 5.669946262s ago: executing program 1 (id=454): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x72) 5.451250412s ago: executing program 4 (id=455): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201", 0x15}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_int(r1, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000002f80)={{0x1, 0x6, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x1000000000000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x7) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x1, 0xfffffffe, 0x2}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r10, 0x40084149, &(0x7f0000000200)=0xffffffffffffff4c) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 4.972131491s ago: executing program 1 (id=457): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a18100390000000015f0ffffff00000e0025000f000000028002002d1f", 0x2e}], 0x1}, 0x20) 4.755848199s ago: executing program 1 (id=458): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r0, 0x400000003fd, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c080}, 0x20048004) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@local, @in=@private}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) syz_usb_connect(0x5, 0x4f, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x13, 0xc8, 0x2f, 0x20, 0x6cd, 0x104, 0xc86a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0xec, 0x1, 0x68, 0x83, 0xb6, 0x9, [], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x3, 0x5, 0x5}}]}}, {{0x9, 0x4, 0x2b, 0xfa, 0x2, 0x93, 0x5c, 0x95, 0x1, [], [{{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x8, 0x40, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x1a, 0x6, [@generic={0x7, 0x5, "ce37064ab4"}]}}]}}]}}]}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='ecryptfs\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000240)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r4, &(0x7f0000000080)="cd", 0x1) close(r0) r6 = open(&(0x7f0000000400)='./file0\x00', 0x20040, 0x101) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000440), 0x4) write$dsp(r4, &(0x7f0000000800)="1359a7fa84341a0c682304359731791967c60151693423f7a99fc8d9ec1a1f2e3d3d44601f9c10a75f8e20d289a754dc0050ae04f4a13e4c9ffdaf676d956d464516c14600"/84, 0x54) close(r4) 4.402261244s ago: executing program 4 (id=459): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002380)={0x2, &(0x7f0000002340)=[{0x5, 0x4, 0xf8}, {0x6, 0xf, 0x7, 0x9}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x8000) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) (async) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000340)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount$nfs(&(0x7f0000000040)='{.', 0x0, 0x0, 0x28803, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xdc, 0xd3, 0x5b, 0x40, 0x1199, 0x9009, 0xaff4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x4, 0x4, 0x40, 0xa, [{{0x9, 0x4, 0x0, 0x5, 0x0, 0x98, 0xdb, 0xd9, 0x3, [@uac_as]}}, {{0x9, 0x4, 0x12, 0x7, 0x0, 0xff, 0xff, 0xff, 0x18}}]}}]}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000005080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xfff, 0x2, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000240)={r10}) (async) write$FUSE_CREATE_OPEN(r6, &(0x7f0000002f80)={0xa0, 0x0, r7, {{0x2, 0x2, 0x6, 0x4, 0x7, 0x7, {0x1, 0xe, 0x100, 0x7b, 0xf, 0x400, 0x3, 0x6, 0x8, 0x8000, 0x10001, r8, r9, 0x9, 0x8}}, {0x0, 0x1d}}}, 0xa0) write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x1000, {0x40, 0x2, 0x4}, 0x40, r5, r9, 0xddca, 0x8, 0x3, 0x6, 0x7, 0x200, 0x3, 0x2, 0x7fffffff, 0x34, 0x3, 0x2, 0x80000000, 0x0, 0x6}}, 0xa0) 4.063800533s ago: executing program 0 (id=461): write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r0 = inotify_init() r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}, 0x1, 0x2, 0x4, 0x4}}, 0x26) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4724, 0xc0, @private0, 0xff}}, 0x80, 0x9, 0x8002, 0x4, 0x3}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) poll(&(0x7f0000000140)=[{r1, 0x12}], 0x1, 0x79) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x410002, 0x0) r5 = syz_io_uring_setup(0x7799, &(0x7f0000000340)={0x0, 0x9f81, 0x2000, 0x2, 0xdc}, &(0x7f0000000100), &(0x7f0000000480)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r6, 0x5, &(0x7f0000000200)={0x1}) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000001c80)=ANY=[@ANYBLOB="3001e4ba229bd03c0c78be36476283b9f3040000010200010000000000000000070000030500060000000000a80001801400018008000100e0000001080002000000000006000340000000000c000280050001003a0000000600034000040000140001800800010000ffffffff14000180080001007f00000108000200ffffffff2c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c000280050001008200000014000180080001000000000008000200ac1414aa0800084000000001080009400000000414000a800800014000000000080001400000000008000b00736970000400028008000440000000040800c878000000092c000a80280002800600034000020000060003000002000006000340"], 0x130}}, 0x40) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x10, r5, 0x10000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0], 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000000300)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000600)=0x549680}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001a80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e24, 0x1e4fba55, @mcast2, 0x6}, 0x1c) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000680)={0x1, 0x4, {0x3, @struct={0x7, 0x7fffffff}, 0x0, 0x40, 0x9, 0xa707, 0x92, 0x7, 0xa, @struct={0xffffffd0, 0x8}, 0x9, 0x1, [0x8a, 0x3, 0xd95, 0x5, 0x1, 0x3]}, {0x4, @struct={0x1, 0x3}, 0x0, 0xc, 0x200, 0x9, 0x7fffffffffffffff, 0x6, 0x4c0, @struct={0xffa6, 0x1}, 0x5, 0x3, [0x0, 0x3, 0x59c, 0x0, 0x7fff, 0x9]}, {0xfffffffffffff939, @usage=0x5, 0x0, 0xb16a, 0x8, 0x9, 0x6, 0x5, 0x1, @struct={0x0, 0xffff}, 0x7, 0x4, [0x4, 0x24, 0x1, 0x0, 0x6, 0xfffffffffffffffe]}, {0x81, 0x7, 0x4}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000a80)={{r4}, r10, 0x15, @unused=[0xbb6c, 0xfffffffffffffffa, 0x4, 0x2], @subvolid=0x7fffffffffffffff}) socket(0x2, 0x2, 0x0) 3.619920837s ago: executing program 0 (id=462): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00005fc000/0x2000)=nil, 0x2000, 0x12) (async) syz_usb_connect$cdc_ncm(0x0, 0xc2, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x2, 0x1, 0x0, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "e7fde73f22"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5d37fb99, 0x4, 0x6, 0x6}, {0x6, 0x24, 0x1a, 0x101, 0x19}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x831}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @mdlm_detail={0x2c, 0x24, 0x13, 0x9, "c0b3c35c3b9cf3e1dea3a1e5a99df747592c9fff04388ddd41fc2d02ac7972b364ba8992c197353b"}, @country_functional={0xe, 0x24, 0x7, 0x3, 0xd1, [0x6, 0x231c, 0x9, 0x40]}, @acm={0x4, 0x24, 0x2, 0xa}, @obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x81, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x10, 0xc4}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xc2, 0x1, 0xe, 0x0, 0xb}, 0x4b, &(0x7f00000001c0)={0x5, 0xf, 0x4b, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x0, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9, 0x4c, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "10c1420835852d61d76a534eac3eead7"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x6, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "6ef6054b7badb267701b913edcbadf07"}]}, 0x5, [{0xa9, &(0x7f0000000280)=@string={0xa9, 0x3, "3c8a8fe9b75162e219221f0fb7f5689b8885383cab18987477a8d67c0bc1b996c4c6094335997c834f356dd2ceda74e66fc9859765bec227bcf7f6f6d50fc64ef21403576ad25e7a1d0c078f32777efd29b2a71f01d226b15c69f28ace610c2cea944e19d031f04ef0831c19c48bf1ad1ff7290876e4852ffe8e25c29294231a59358325d5de7cdbaf738739b57f5af060f05423dd959d3bcb690a4fb90dca8b8df0f4db2e6d26"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x429}}]}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0), 0x10) (async) recvmmsg$unix(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.286263818s ago: executing program 2 (id=463): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f00000000c0)=0x1004, 0xfefb) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@default) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000aad8cdbee256bdd4f0491600330600000000000000807f00000100000000", @ANYBLOB], 0xfc}}, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x10, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 2.55968056s ago: executing program 4 (id=464): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x24044884) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x462f00, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)="11a32ed688eb47", 0x7}, 0x1, 0x0, 0x0, 0x24008011}, 0x240040d0) recvmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x62, 0x0) r6 = dup(r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r6) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x400], 0x2000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.372729345s ago: executing program 4 (id=465): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x72) 2.361310537s ago: executing program 2 (id=466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res(&(0x7f0000000080), 0x5, 0x24) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x4}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x12) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f00000003c0)={@val={0x3, 0x88b5}, @val={0x0, 0x1, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x1, 0x13c, 0x66, 0x0, 0x26, 0x6, 0x0, @private=0xa010100, @loopback, {[@timestamp_prespec={0x44, 0x4, 0x39, 0x3, 0xe}]}}, {{0x4e23, 0x4e22, r4, r5, 0x0, 0x0, 0x1a, 0x20, 0x5, 0x0, 0x7, {[@mss={0x2, 0x4, 0x1}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xa, [0x7, 0x1588]}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x16, [0x0, 0x401, 0x5, 0x2, 0x8]}, @mss={0x2, 0x4, 0xa97c}, @mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x7, 0x8, 0x4}, @nop, @timestamp={0x8, 0xa, 0x8, 0x6}, @fastopen={0x22, 0x9, "130224688175a6"}]}}, {"ac0fd13d3a5b6e2cc78c39e72551db8cfbf238c1ae32a493f12a03a0c872ae461e50763829e12df73fd9df4ed29a2d1d4b112b487aae62fe094a661c171f0e6086762b3daac29135dac187283df5f078f630e03161dfabd307c73df4fbbcd113722fabb7c5d9fe71a5eabc45838066ba22effb88f0d43608d75ed3704bc2e6eec0d7d5936463d8e368e3a44d3f113fab1002b296ea6ed5647ffed134eaa7887f9420e05d6ab81063494a24060e6aacc932317a2853b9931240829bdd"}}}}, 0x14a) 1.747477371s ago: executing program 2 (id=467): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000100)={0x21}) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r5, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/63, 0x3f, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000080)=""/35, 0x23, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.617122561s ago: executing program 1 (id=468): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2, 0x8001020, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') capset(&(0x7f0000000040), &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x914}) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r5, &(0x7f0000000000), 0x10) dup3(r4, r5, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x44) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x7}, 0x18, 0x0) r8 = dup(r7) read$FUSE(r8, 0x0, 0x2) read$FUSE(r8, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000002100)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x444000c, 0x7ff7, 0x0, 0x1e, 0x1, 0x0, 0x0, 0x10, 0x5}}, 0x50) fcntl$setstatus(r6, 0x4, 0x42000) move_mount(r2, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x406) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0xb0000005}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000000)={0x8000200c}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r12, 0x4, 0x2400) 1.489505454s ago: executing program 4 (id=469): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000630000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304, 0x39}, "f3ffff0d00ffffff", "37a0f9ffff4b00000200007d00", "40c28f00", "de3f106b925ded4d"}, 0x28) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1ff}, {&(0x7f0000000140)=""/215, 0xd7}, &(0x7f00000000c0)}, 0xa0) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000340)) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) 1.151719037s ago: executing program 1 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'], 0x7) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10004802}, 0x80) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000000)=""/33, 0x21}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000780)=""/134, 0x86}, {&(0x7f0000000840)=""/209, 0xd1}, {&(0x7f0000000940)=""/245, 0xf5}], 0x9, &(0x7f0000000b00)=""/227, 0xe3}, 0xf7}], 0x1, 0x80000100, 0x0) 1.059821501s ago: executing program 2 (id=471): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\v', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf25080000000400018008000400f7ffffff"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000200)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004000) socket$kcm(0x29, 0x2, 0x0) r7 = accept4(r5, &(0x7f0000000100)=@in={0x2, 0x0, @private}, &(0x7f0000000180)=0x80, 0x80c00) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x2b8, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x6d}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1d2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x294, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xec, 0x0, "b5a8d12482bf4988411bbaa38de12846badda87f5f2c0b6bd1f43177db2572df1fa3953b85b05b1e51f885c172c408127fde100b1b31efb87cb731e153c330f7bd47511248d2a6b4280d93159442ba3acbc3514c49ce427febdca64dfe90a985f1a65380aaa27b5432d69385eaf988c38542c4a54b1db493e2dc980e4426acdc3042008c22bab7f4969d018515e6e0ad213445925474fbb9df7db6b4ca7a3d8b75b58892f7e32419282e48680e2125c876eb98bc2893646fd2a8116c9174059d1072c36d2b030e32858a00c1607d52ff1692b3ae3d7409021d526a9a2a132c6abe3f63cd23e6d7b6"}, @NL80211_BAND_60GHZ={0x25, 0x2, "0feb145b13a8800bb66fa80cf7bef9a197b73fe1030b14f10eec62a1996978349a"}, @NL80211_BAND_6GHZ={0x68, 0x3, "459957e50beecb5a92df3a2fcfa076cb98fac33036cebdf3d0eb2218382d151e69f65ffbe3879f94250afedcb22a44a95ff400c1445134131a9ad8e23bb2a6153a272ce816d546b9c0d63df9c9635d26fc57d5448b270e60f00a9609ef0a3af9d633dbc1"}, @NL80211_BAND_60GHZ={0xf0, 0x2, "13d6d4866cca879940e5de465e254791225258e42a2ec86575fbece8d3e45ba2d83fd41db432dca913afbfcd54857805c23404089d27947873b56868fe5b86e562c3980d42a5ffd343e01488deee4bd65bac1ff7fd6ff762caba85e02ce395ece9a9cd5e467d23d331e14ada54591f897337fba2dc8ae64017c94f2ff001d5fd79e580a776f137c7a8a0735e88b26b08da80786aff343c0efc74f958375fb9bc4ab58109bda137e4c8a9aec6f082338f46f346e91b25fb7bd54b195e8f8f2cfee6052e4d8bd280f85c5470eaa4494fe02b4554fae37290cbd8c761a57d8d28025081b35f35655fc26947a2b9"}, @NL80211_BAND_6GHZ={0x1e, 0x3, "a148c28a326729c975030333d2d0293a9f2a8feb54f484d44615"}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40090}, 0x4) 918.620975ms ago: executing program 0 (id=472): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x1) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x4f, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4], 0x0) (async) syz_usb_connect(0x0, 0x4f, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, &(0x7f0000000140)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000140)=0x14) sendto$packet(r2, &(0x7f0000000080)='3', 0x1, 0x40008c1, &(0x7f0000000180)={0x11, 0x86dd, r5, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000006100)='./file0\x00', 0x0, 0x2228000, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x17b4b522, 0x0) (async) r6 = syz_open_dev$video(&(0x7f00000000c0), 0x17b4b522, 0x0) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, &(0x7f0000000000)) (async) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, &(0x7f0000000000)) syz_usb_connect$uac1(0x4, 0xb7, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001000000206b1d01014000010203010902a50003010930080904000000010100000a2401f7ff0802010207240403074646092404035eafb9e9990904010000010200000904010101010200000c240201810209dad551ac1b0c240201d3040307ae988c860c24f0d676370703ae02280209050109ff03090909072501820976130904020000010200000904020101010200000b24020103040f0852b47407240106ce021009058209000408000407250100050f00"], &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x0, 0x1, 0x16, 0x20, 0x7}, 0xd7, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/449]}) (async) syz_usb_connect$uac1(0x4, 0xb7, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001000000206b1d01014000010203010902a50003010930080904000000010100000a2401f7ff0802010207240403074646092404035eafb9e9990904010000010200000904010101010200000c240201810209dad551ac1b0c240201d3040307ae988c860c24f0d676370703ae02280209050109ff03090909072501820976130904020000010200000904020101010200000b24020103040f0852b47407240106ce021009058209000408000407250100050f00"], &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x0, 0x1, 0x16, 0x20, 0x7}, 0xd7, &(0x7f0000000940)=ANY=[@ANYBLOB="050fd7000524100ade0000000000f0c00000cf00000000ffff0000c000008c1001d31c746be71966b9c7ef59714e49d830cebb8061e091f8cc8c67af0506d6c3ed2b1aecfc416a0c73dca8f525ca99aded04357a2163d9933338612f7552e12a911f4ce8f11d436a2b467db584ca29bf2d4d55c1e9ba80d07fb30bc3023701f65a316cb172a5a9e9e8dd989fd31736af91a62d5a6e07fe8e6695748a4638b6f7f1339870340a8a64285007100216534c0014100407b97501531d7c46f681143581b45ad78c0710021a920200147779a649c5b3049fb6272cf3bf9c56a112f32d382eb50b32a85ea1251d12cecb2398317e25f94b340b763fda290f3c2e70cae410ed25e8cad6e1bf2221d9fc76d236a65f80580c64f3ee52f2fcc3205090f1c4b0d5fe6c86738f76607cec81aea5bbebdc711218d2db4ce41d2e52bef0d3acfacc2647e4290765c0c6465f97083992aef15c7eb1ceee90de062b9730e5e03e6d992f0a3487d5ced352119199ef1e1f820b3139ebd43b68c14892ad45e1953832830e748df38153a8673237fc0324aee9da3fd5c0c4c940f9e5e1dbb538d84978603a3634582916a53b7425a59b6112bfcdb2cc0d769e00"/449]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x5) syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12011003e3c16720e3050305ed570102030109021b0002cd0350a00904fe0700013db2800904e10100ffffffc8493c7479aee378b0f6d07a93a9099db103e647839b04d4168c55a40f329e544fe070869b12bae60853f2eb9583096357388a41a0a975d385ab4553d06506410947961be47619f5cc8a801081de4b18ec31c46f55d4f507b813989a9634210f2c8f55125ad00c4d60cc0f2f3a76f7f9df9efeb29c2042747a2c6bb3d331b2036fb96b9f29213ab054e6862533fe5ce598adcfa13430e263"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) fchdir(r7) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000680)={0x0, 0x7d7}) recvmmsg(r7, &(0x7f00000006c0), 0x0, 0x0, &(0x7f0000000700)) (async) recvmmsg(r7, &(0x7f00000006c0), 0x0, 0x0, &(0x7f0000000700)) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) 443.909445ms ago: executing program 4 (id=473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x3, {"718c707b2f1958b0cf84e0799c88d5af"}, 0x8, 0xffffffffffffee78, 0x7}, @ib={0x1b, 0x1, 0x8, {"4ffef529a8edb12375d1dce0d261df44"}, 0x8, 0x81, 0xe18000}}}, 0x118) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000003200e7ef007b00000000000000a1", 0x12, 0x20080000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r5], 0xc9) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYBLOB="5adce7b0b22cc179b359477e86411cbfcff4e3ae3b9f267a8e019893cf2a3c1833ca44a2c10f99942a0bfa9f53773caa745ea054211a16509df7fbbb58b7def781deac4b827107263ec91dae1459c3682674cafe86a518d31d14abbaf9129b0271cfb02cb704af9b8a0ccc575628283d60f411952ed303c601a54946fa135d72c2fb75133876fe3b3069718273bc1a8fd58b745c368bce94f92eeb91f388c02786802296d195127980e84ca81e2621a8cfa120a973166d8bb217518d970a985e94e82e29868bb0333091170e", @ANYRES64, @ANYRES64=r0], 0x0) 164.544958ms ago: executing program 1 (id=474): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4d, 0x77, 0x6d, 0x20, 0x681, 0x5, 0xe323, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xc8, 0x2, 0x0, 0x9a, 0x29, 0xff}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)={0x34, r5, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}}, 0x0) syz_usb_disconnect(r0) 158.076374ms ago: executing program 2 (id=475): openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000000001010400000000141a0000020000f5240001801400018008000100e00000010001000000000024000280140001800800011d71f80734c39cba0f79ba6d4a0000000008000200e000000149000280050001000000000008000740000000010c00068008000100ffffffff00b08fa6486697a4cdfd04a30aa90c3df5c8e0f826decd4f169396565755904e837fc8edd6964bf9cd31736fb8fb6643e194a13256112b25da1a"], 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 0s ago: executing program 2 (id=476): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fstat(r0, &(0x7f0000000140)) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100039e7bf740720c0d00a5190102030109022400018c091005090446060272ce8402090591"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c830040000a93fcf8aea9b7a1140ec630001001a0bb7b6f17b29b6a08e98a183ad9ab0261d43230d18d43e5439985f3b4386be7273242c93e5a0921809ac25ee8ac7ceae668ea9321a54db2f"], 0x9) r3 = epoll_create1(0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r5 = dup2(r2, r3) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000180)={0x1ff, 0x2, 0x0, 0x1, 0x3, 0x5, 0x2}) r6 = epoll_create1(0x0) ustat(0x9, &(0x7f0000000000)) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000400)={0xce, 0x0, r5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, &(0x7f0000000140)) r8 = fcntl$dupfd(r3, 0x406, r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x6, &(0x7f0000000480)=[{0x81, 0xf4, 0x3, 0x7}, {0x8, 0x9, 0x0, 0x37}, {0xc, 0x0, 0x3, 0x6b5}, {0x1, 0x5f, 0x0, 0x7}, {0x1, 0x2, 0x5, 0xc71}, {0x3, 0xc, 0xda, 0x2}]}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111, 0x4}}, 0x20) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x330, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r10, 0x1000) kernel console output (not intermixed with test programs): 84391][ T5950] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.694125][ T5950] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.717213][ T5950] Buffer I/O error on dev nbd0, logical block 1, async page read [ 111.769061][ T6175] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 111.780236][ T5950] ldm_validate_partition_table(): Disk read failed. [ 111.792230][ T5950] Dev nbd0: unable to read RDB block 0 [ 111.803481][ T5950] nbd0: unable to read partition table [ 111.829023][ T5950] ldm_validate_partition_table(): Disk read failed. [ 111.839395][ T5950] Dev nbd0: unable to read RDB block 0 [ 111.846340][ T5950] nbd0: unable to read partition table [ 111.984216][ T6179] overlayfs: missing 'lowerdir' [ 112.027230][ T5922] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 112.066772][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 112.189945][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.202894][ T5922] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 112.212167][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.220448][ T5922] usb 4-1: Product: syz [ 112.225012][ T5922] usb 4-1: Manufacturer: syz [ 112.230480][ T5922] usb 4-1: SerialNumber: syz [ 112.235970][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.246338][ T5922] usb 4-1: config 0 descriptor?? [ 112.252267][ T9] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 112.263647][ T5922] CoreChips 4-1:0.0: probe with driver CoreChips failed with error -22 [ 112.273239][ T9] usb 1-1: config 63 has an invalid descriptor of length 32, skipping remainder of the config [ 112.286670][ T9] usb 1-1: config 63 has no interface number 0 [ 112.292901][ T9] usb 1-1: config 63 interface 66 has no altsetting 0 [ 112.304216][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 112.313433][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.321609][ T9] usb 1-1: Product: syz [ 112.326026][ T9] usb 1-1: Manufacturer: syz [ 112.330903][ T9] usb 1-1: SerialNumber: syz [ 112.346933][ T5885] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.471649][ T799] usb 4-1: USB disconnect, device number 15 [ 112.477791][ T5885] usb 2-1: device descriptor read/64, error -71 [ 112.559892][ T9] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8a31) [ 112.568678][ T9] uvcvideo 1-1:63.66: No valid video chain found. [ 112.577290][ T9] usb 1-1: USB disconnect, device number 10 [ 112.736714][ T5885] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 112.866662][ T5885] usb 2-1: device descriptor read/64, error -71 [ 112.986877][ T5885] usb usb2-port1: attempt power cycle [ 113.019883][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.031927][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.356597][ T5885] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 113.376553][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 113.377165][ T5885] usb 2-1: device descriptor read/8, error -71 [ 113.427048][ T5921] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 113.506602][ T9] usb 4-1: device descriptor read/64, error -71 [ 113.576537][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 113.595245][ T5921] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.609547][ T5921] usb 1-1: config 1 interface 0 has no altsetting 0 [ 113.618045][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.620224][ T5921] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 113.629840][ T5885] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 113.636931][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.644778][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.651671][ T5921] usb 1-1: Product: syz [ 113.663829][ T5921] usb 1-1: Manufacturer: syz [ 113.668939][ T5921] usb 1-1: SerialNumber: syz [ 113.677622][ T5885] usb 2-1: device descriptor read/8, error -71 [ 113.746498][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 113.788920][ T5885] usb usb2-port1: unable to enumerate USB device [ 113.876485][ T9] usb 4-1: device descriptor read/64, error -71 [ 113.883989][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.892863][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.894666][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.906225][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.929581][ T5921] usbhid 1-1:1.0: can't add hid device: -71 [ 113.935624][ T5921] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 113.952151][ T5921] usb 1-1: USB disconnect, device number 11 [ 113.986821][ T9] usb usb4-port1: attempt power cycle [ 114.215962][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.225348][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.242855][ T6194] : entered promiscuous mode [ 114.336417][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 114.358619][ T9] usb 4-1: device descriptor read/8, error -71 [ 114.474119][ T6197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.596399][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 114.618237][ T9] usb 4-1: device descriptor read/8, error -71 [ 114.727320][ T9] usb usb4-port1: unable to enumerate USB device [ 114.805853][ T6199] trusted_key: encrypted_key: insufficient parameters specified [ 114.950648][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 115.208642][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.217902][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.225965][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.241119][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.376290][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 115.528296][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.536713][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 115.547533][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.557904][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 115.571700][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.581008][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 115.589473][ T24] usb 1-1: Product: ꈧ카漂핅떔㗉哙䏷菱猟ᚖ䢯䘈㽆졑氓妿㈒䋖漌뎑礫ꑅ愖밊맽멭㮀攁ᵁ䲹쓐ट㯑ᡐ覲赻뢲⨰怴銞轙먫぀甋텥䂖焉픺ﰦ㏼䨼뗏꫃Ꟍ餼穨䗮ᬁ攔 [ 115.591339][ T5921] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 115.611133][ T24] usb 1-1: Manufacturer: Ѝ [ 115.623200][ T24] usb 1-1: SerialNumber: syz [ 115.632369][ T6205] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 115.766226][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 115.777760][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.788429][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.801609][ T5921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.812624][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.832224][ T5921] usb 2-1: Product: syz [ 115.842232][ T5921] usb 2-1: Manufacturer: syz [ 115.847684][ T5921] usb 2-1: SerialNumber: syz [ 115.861918][ T6205] loop4: detected capacity change from 0 to 2559 [ 115.879040][ T6005] ldm_validate_partition_table(): Disk read failed. [ 115.887001][ T6005] Dev loop4: unable to read RDB block 0 [ 115.893365][ T6005] loop4: unable to read partition table [ 115.987382][ T6220] CUSE: info not properly terminated [ 115.994665][ T24] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 116.035987][ T24] usb 1-1: USB disconnect, device number 12 [ 116.062570][ T5921] usb 2-1: 0:2 : does not exist [ 116.093085][ T5921] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 116.211134][ T5921] usb 2-1: USB disconnect, device number 15 [ 116.315590][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.472491][ T6229] netlink: 'syz.2.100': attribute type 16 has an invalid length. [ 116.650603][ T6236] binder: 6235:6236 ioctl 40044591 0 returned -22 [ 116.839605][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.867729][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.898944][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.942701][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.956522][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.966628][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.039607][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.075543][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.100608][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.119222][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.250263][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.252659][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.337158][ T5921] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 117.350735][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.371449][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.508701][ T5921] usb 1-1: not running at top speed; connect to a high speed hub [ 117.524318][ T5921] usb 1-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 117.540144][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.562008][ T5921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.573026][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.602321][ T5921] usb 1-1: Product: syz [ 117.606938][ T5921] usb 1-1: Manufacturer: syz [ 117.611650][ T5921] usb 1-1: SerialNumber: syz [ 117.838546][ T5921] usb 1-1: 0:2 : does not exist [ 117.864757][ T5921] usb 1-1: USB disconnect, device number 13 [ 117.915813][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.992409][ T6289] netlink: 52 bytes leftover after parsing attributes in process `syz.1.118'. [ 118.249868][ T6301] binder: 6300:6301 ioctl 40044591 0 returned -22 [ 118.286110][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 118.309034][ T6302] binder: 6300:6302 ioctl c0306201 200000000640 returned -22 [ 118.316796][ T6303] binder: 6300:6303 ioctl c0306201 200000000640 returned -22 [ 118.436411][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 118.444192][ T9] usb 2-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 118.455218][ T9] usb 2-1: config 0 interface 0 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 118.468368][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 118.475188][ T9] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 118.484274][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.494386][ T9] usb 2-1: config 0 descriptor?? [ 118.666389][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 118.826020][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 118.833074][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.848438][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 118.857851][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.865964][ T24] usb 1-1: Product: syz [ 118.870137][ T24] usb 1-1: Manufacturer: syz [ 118.874733][ T24] usb 1-1: SerialNumber: syz [ 118.881904][ T24] usb 1-1: config 0 descriptor?? [ 118.891043][ T24] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 118.898791][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 118.911072][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 118.924065][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 118.931922][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 118.939645][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 118.947393][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 118.955142][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 118.964813][ T24] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 119.023513][ T9] usb 2-1: string descriptor 0 read error: -71 [ 119.035420][ T9] usb 2-1: USB disconnect, device number 16 [ 119.110056][ T24] usb 1-1: USB disconnect, device number 14 [ 119.136090][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 119.152698][ T24] keyspan 1-1:0.0: device disconnected [ 119.286883][ T30] audit: type=1400 audit(1761233865.372:2): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=6312 comm="syz.3.125" [ 119.615802][ T5899] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 119.805944][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 119.812628][ T5899] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 119.821027][ T5899] usb 4-1: config 0 has no interface number 0 [ 119.827462][ T5899] usb 4-1: config 0 interface 12 has no altsetting 0 [ 119.839732][ T5899] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 119.849034][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.857151][ T5899] usb 4-1: Product: syz [ 119.861327][ T5899] usb 4-1: Manufacturer: syz [ 119.867135][ T5899] usb 4-1: SerialNumber: syz [ 119.874106][ T5899] usb 4-1: config 0 descriptor?? [ 119.945739][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 120.098154][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 120.108429][ T9] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 120.121153][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 120.130773][ T9] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 120.139937][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.148795][ T9] usb 1-1: Product: 줺ﯿᵃ삂쑸㕇艆鰴鳕菈紥ꂏ嬡ꬼᛑ颉괛⚁✵슜许儿興떻鏩眊楻讻㉾梨ꔍ杀┱쮸ሻ㟧碉喭ἑ샺⦚⾠하 [ 120.167545][ T9] usb 1-1: Manufacturer: 㐾 [ 120.172497][ T9] usb 1-1: SerialNumber: ࠪ [ 120.185584][ T6323] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 120.379015][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'. [ 120.388206][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'. [ 120.613408][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.624351][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.650842][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.689758][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.922898][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.953061][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.976150][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 120.999392][ T30] audit: type=1326 audit(1761233867.082:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f8b7e98efc9 code=0x0 [ 121.024061][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 4 proto 2 vid 0x04B8 pid 0x0202 [ 121.047998][ T9] usb 1-1: USB disconnect, device number 15 [ 121.064923][ T9] usblp0: removed [ 121.126584][ T24] usb 2-1: device descriptor read/64, error -71 [ 121.365589][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 121.495546][ T24] usb 2-1: device descriptor read/64, error -71 [ 121.606802][ T24] usb usb2-port1: attempt power cycle [ 121.946653][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 121.966713][ T24] usb 2-1: device descriptor read/8, error -71 [ 121.995535][ T5885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 122.148164][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.163504][ T5885] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.173255][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.195650][ T5885] usb 1-1: config 0 descriptor?? [ 122.215781][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 122.246732][ T24] usb 2-1: device descriptor read/8, error -71 [ 122.365896][ T24] usb usb2-port1: unable to enumerate USB device [ 122.450084][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 122.472738][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 122.528286][ T5885] usb 1-1: USB disconnect, device number 16 [ 122.948352][ T5899] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 122.965398][ T5899] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 122.975517][ T5899] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 123.000258][ T5899] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 123.021439][ T5899] usb 4-1: USB disconnect, device number 20 [ 123.024985][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.057035][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.080494][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.091959][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.815302][ T5922] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 123.859878][ T6390] capability: warning: `syz.1.145' uses deprecated v2 capabilities in a way that may be insecure [ 123.915346][ T6394] program syz.1.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.042273][ T5922] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 124.051151][ T5922] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 124.089021][ T5922] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 124.102255][ T5922] usb 4-1: config 220 has no interface number 2 [ 124.109387][ T5922] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 124.122683][ T5922] usb 4-1: config 220 interface 0 has no altsetting 0 [ 124.130651][ T5922] usb 4-1: config 220 interface 76 has no altsetting 0 [ 124.147420][ T5922] usb 4-1: config 220 interface 1 has no altsetting 0 [ 124.197383][ T5922] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 124.213409][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.232139][ T5922] usb 4-1: Product: syz [ 124.236543][ T5922] usb 4-1: Manufacturer: syz [ 124.245763][ T5922] usb 4-1: SerialNumber: syz [ 124.315224][ T5885] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 124.374955][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.384718][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.472711][ T5922] usb 4-1: selecting invalid altsetting 0 [ 124.481787][ T5922] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 124.495182][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 124.495687][ T5922] uvcvideo 4-1:220.0: No valid video chain found. [ 124.510899][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.515394][ T5922] usb 4-1: selecting invalid altsetting 0 [ 124.538042][ T5922] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 124.545596][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.560660][ T5885] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 124.570275][ T5922] usb 4-1: USB disconnect, device number 21 [ 124.580457][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.602089][ T5885] usb 2-1: config 0 descriptor?? [ 125.037180][ T5885] koneplus 0003:1E7D:2D51.0009: item fetching failed at offset 3/5 [ 125.079130][ T5885] koneplus 0003:1E7D:2D51.0009: parse failed [ 125.098628][ T5885] koneplus 0003:1E7D:2D51.0009: probe with driver koneplus failed with error -22 [ 125.110793][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.125422][ T5899] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 125.125590][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.164955][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.175495][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.184494][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.194422][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.204926][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.213810][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.271365][ T6431] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 125.315097][ T5899] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 125.324267][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.333910][ T5899] usb 1-1: Product: syz [ 125.338531][ T5899] usb 1-1: Manufacturer: syz [ 125.343153][ T5899] usb 1-1: SerialNumber: syz [ 125.371807][ T5899] r8152-cfgselector 1-1: Unknown version 0x0000 [ 125.378467][ T5899] r8152-cfgselector 1-1: config 0 descriptor?? [ 125.387496][ T798] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 125.417701][ T6433] bond0: entered promiscuous mode [ 125.555107][ T798] usb 4-1: Using ep0 maxpacket: 16 [ 125.569472][ T798] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 125.592010][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.612470][ T798] usb 4-1: Product: syz [ 125.617882][ T798] usb 4-1: Manufacturer: syz [ 125.628355][ T798] usb 4-1: SerialNumber: syz [ 125.648329][ T798] usb 4-1: config 0 descriptor?? [ 125.671907][ T798] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 125.799856][ T5885] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 126.102585][ T798] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 126.145490][ T798] usb 4-1: USB disconnect, device number 22 [ 126.568799][ T798] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 126.618697][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.648878][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.691087][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.705590][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.747086][ T798] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 126.757679][ T798] usb 4-1: config 0 has no interface number 0 [ 126.787237][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.799324][ T798] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 126.817701][ T5922] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 126.826396][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.835084][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.844352][ T5922] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 126.855905][ T5885] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 126.857550][ T798] usb 4-1: config 0 descriptor?? [ 126.869167][ T5922] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 126.877266][ T5922] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0 [ 126.891575][ T798] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.105/input/input15 [ 126.913118][ T5922] hid-generic 00A0:0008:0003.000A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 127.024843][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 127.038162][ T5885] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 127.042096][ T6492] fido_id[6492]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.049347][ T5885] usb 1-1: config 0 has no interface number 0 [ 127.093484][ T5183] bcm5974 4-1:0.105: could not read from device [ 127.093995][ T5885] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db11, bcdDevice= e.2d [ 127.113343][ T5922] usb 2-1: USB disconnect, device number 21 [ 127.156152][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.170237][ T5183] bcm5974 4-1:0.105: could not read from device [ 127.189728][ T798] usb 4-1: USB disconnect, device number 23 [ 127.195344][ T5885] usb 1-1: Product: syz [ 127.201787][ T5885] usb 1-1: Manufacturer: syz [ 127.221635][ T5885] usb 1-1: SerialNumber: syz [ 127.232706][ T5183] bcm5974 4-1:0.105: could not read from device [ 127.242159][ T5885] usb 1-1: config 0 descriptor?? [ 127.260747][ T6005] bcm5974 4-1:0.105: could not read from device [ 127.267101][ T5885] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (TH7579)' in warm state. [ 127.280895][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 127.290249][ T5183] bcm5974 4-1:0.105: could not read from device [ 127.301382][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.316216][ T5885] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (TH7579)) [ 127.327760][ T5885] usb 1-1: media controller created [ 127.334064][ T6005] udevd[6005]: Error opening device "/dev/input/event5": No such device [ 127.354965][ T6005] udevd[6005]: Unable to EVIOCGABS device "/dev/input/event5" [ 127.362641][ T6005] udevd[6005]: Unable to EVIOCGABS device "/dev/input/event5" [ 127.368030][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.381672][ T6005] udevd[6005]: Unable to EVIOCGABS device "/dev/input/event5" [ 127.392389][ T6005] udevd[6005]: Unable to EVIOCGABS device "/dev/input/event5" [ 127.434495][ T5885] cxusb: set interface failed [ 127.451875][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 127.512586][ T5885] DVB: Unable to find symbol mt352_attach() [ 127.523166][ T5885] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (TH7579)' [ 127.677169][ T5885] rc_core: IR keymap rc-dvico-portable not found [ 127.701410][ T5885] Registered IR keymap rc-empty [ 127.708176][ T5885] rc rc1: DViCO FusionHDTV DVB-T USB (TH7579) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1 [ 127.729993][ T5885] input: DViCO FusionHDTV DVB-T USB (TH7579) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input16 [ 127.751025][ T5885] dvb-usb: schedule remote query interval to 100 msecs. [ 127.760513][ T5885] dvb-usb: DViCO FusionHDTV DVB-T USB (TH7579) successfully initialized and connected. [ 127.779830][ T5885] usb 1-1: USB disconnect, device number 18 [ 128.011407][ T6518] netlink: 260 bytes leftover after parsing attributes in process `syz.1.168'. [ 128.024292][ T5885] dvb-usb: DViCO FusionHDTV DVB-T USB (TH7579) successfully deinitialized and disconnected. [ 128.127980][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.149342][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.185146][ T5899] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 128.198731][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.225406][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.366260][ T5899] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 128.374525][ T5899] usb 4-1: config 0 has no interface number 0 [ 128.380733][ T5899] usb 4-1: config 0 interface 255 has no altsetting 0 [ 128.387927][ T5899] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.397183][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.408847][ T5899] usb 4-1: config 0 descriptor?? [ 128.417480][ T5899] cp210x 4-1:0.255: cp210x converter detected [ 128.554683][ T798] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 128.564684][ T5922] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 128.617034][ T5899] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 128.639943][ T5899] cp210x 4-1:0.255: failed to get vendor val 0x3711 size 2: -71 [ 128.651449][ T5899] cp210x 4-1:0.255: GPIO initialisation failed: -71 [ 128.672224][ T5899] usb 4-1: cp210x converter now attached to ttyUSB0 [ 128.688886][ T5899] usb 4-1: USB disconnect, device number 24 [ 128.705028][ T798] usb 1-1: Using ep0 maxpacket: 32 [ 128.711667][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.713652][ T798] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 128.722578][ T5899] cp210x 4-1:0.255: device disconnected [ 128.759120][ T5922] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 128.778555][ T798] usb 1-1: config 0 has no interface number 0 [ 128.784816][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.792872][ T5922] usb 2-1: Product: syz [ 128.804816][ T798] usb 1-1: config 0 interface 12 has no altsetting 0 [ 128.813171][ T5922] usb 2-1: Manufacturer: syz [ 128.818443][ T5922] usb 2-1: SerialNumber: syz [ 128.829338][ T798] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 128.839662][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.855770][ T5922] usb 2-1: config 0 descriptor?? [ 128.878451][ T798] usb 1-1: Product: syz [ 128.882673][ T798] usb 1-1: Manufacturer: syz [ 128.890716][ T798] usb 1-1: SerialNumber: syz [ 128.900786][ T798] usb 1-1: config 0 descriptor?? [ 129.154647][ T5899] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 129.282423][ T5922] airspy 2-1:0.0: Board ID: 00 [ 129.287643][ T5922] airspy 2-1:0.0: Firmware version: cPW%sT,ya [ 129.310916][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.320009][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 129.320772][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.331936][ T5899] usb 4-1: config 0 has no interfaces? [ 129.338553][ T5899] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 129.347948][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.358480][ T5899] usb 4-1: config 0 descriptor?? [ 129.548940][ T798] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 129.557347][ T798] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 129.567346][ T798] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 129.575490][ T798] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 129.588563][ T6539] sp0: Synchronizing with TNC [ 129.598398][ T798] usb 1-1: USB disconnect, device number 19 [ 129.617351][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.630980][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.646710][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.656433][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.669982][ T799] usb 4-1: USB disconnect, device number 25 [ 129.891702][ T5922] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 129.910668][ T5922] airspy 2-1:0.0: Registered as swradio24 [ 129.917316][ T5922] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 129.930720][ T5922] usb 2-1: USB disconnect, device number 22 [ 130.394969][ T5922] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 130.544395][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 130.551770][ T5922] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 130.563407][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 130.573755][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.583735][ T5922] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.597617][ T5922] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.606889][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.624482][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 130.795379][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 130.803351][ T9] usb 4-1: config 4 has an invalid interface number: 67 but max is 2 [ 130.812093][ T9] usb 4-1: config 4 has an invalid interface number: 99 but max is 2 [ 130.820374][ T9] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 130.829553][ T9] usb 4-1: config 4 has an invalid interface number: 42 but max is 2 [ 130.837931][ T9] usb 4-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 130.848748][ T5922] usb 1-1: GET_CAPABILITIES returned 0 [ 130.854409][ T9] usb 4-1: config 4 has no interface number 0 [ 130.860790][ T9] usb 4-1: config 4 has no interface number 1 [ 130.867154][ T5922] usbtmc 1-1:16.0: can't read capabilities [ 130.886062][ T9] usb 4-1: config 4 has no interface number 2 [ 130.892290][ T9] usb 4-1: config 4 interface 67 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 130.894748][ T6560] netlink: 'syz.2.183': attribute type 27 has an invalid length. [ 130.908333][ T9] usb 4-1: config 4 interface 67 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 130.922975][ T9] usb 4-1: config 4 interface 67 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 130.926323][ T5899] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 130.933974][ T9] usb 4-1: config 4 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.952648][ T9] usb 4-1: config 4 interface 67 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 130.963504][ T9] usb 4-1: config 4 interface 99 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 130.974746][ T9] usb 4-1: config 4 interface 99 altsetting 3 bulk endpoint 0xC has invalid maxpacket 1024 [ 130.984974][ T9] usb 4-1: config 4 interface 99 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 130.995944][ T9] usb 4-1: config 4 interface 99 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 131.007749][ T9] usb 4-1: config 4 interface 99 altsetting 3 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.017629][ T9] usb 4-1: config 4 interface 99 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 131.028330][ T9] usb 4-1: config 4 interface 99 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 131.039029][ T9] usb 4-1: config 4 interface 99 altsetting 3 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 131.050679][ T9] usb 4-1: config 4 interface 99 altsetting 3 endpoint 0x8A has invalid maxpacket 23661, setting to 1024 [ 131.062205][ T9] usb 4-1: config 4 interface 99 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 131.073747][ T9] usb 4-1: config 4 interface 99 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 131.084670][ T9] usb 4-1: config 4 interface 99 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 131.096240][ T9] usb 4-1: config 4 interface 99 altsetting 3 endpoint 0x6 has invalid wMaxPacketSize 0 [ 131.106849][ T9] usb 4-1: config 4 interface 99 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 131.117779][ T9] usb 4-1: config 4 interface 99 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 131.121130][ T5899] usb 2-1: config 0 has an invalid interface number: 248 but max is 0 [ 131.138294][ T9] usb 4-1: config 4 interface 99 altsetting 3 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 131.152201][ T9] usb 4-1: config 4 interface 42 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.165400][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.165424][ T5899] usb 2-1: config 0 has no interface number 0 [ 131.175985][ T9] usb 4-1: config 4 interface 99 has no altsetting 0 [ 131.189750][ T5899] usb 2-1: config 0 interface 248 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.199728][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.200020][ T5899] usb 2-1: config 0 interface 248 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 131.226539][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.238860][ T5899] usb 2-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice=ec.d3 [ 131.240320][ T6554] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71 [ 131.248233][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.248258][ T5899] usb 2-1: Product: syz [ 131.248273][ T5899] usb 2-1: Manufacturer: syz [ 131.248288][ T5899] usb 2-1: SerialNumber: syz [ 131.252190][ T5899] usb 2-1: config 0 descriptor?? [ 131.257290][ T9] usb 4-1: config 4 interface 42 has no altsetting 0 [ 131.267937][ T5899] usb 2-1: Could not find all expected endpoints [ 131.276198][ T9] usb 4-1: New USB device found, idVendor=093b, idProduct=a004, bcdDevice=e0.ee [ 131.309570][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.317762][ T9] usb 4-1: Product: syz [ 131.321945][ T9] usb 4-1: Manufacturer: syz [ 131.327087][ T9] usb 4-1: SerialNumber: syz [ 131.485106][ T5922] usb 2-1: USB disconnect, device number 23 [ 131.541509][ T9] go7007-loader 4-1:4.67: loading firmware go7007/px-tv402u.fw [ 131.554157][ T9] usb 4-1: Direct firmware load for go7007/px-tv402u.fw failed with error -2 [ 131.563168][ T9] usb 4-1: Falling back to sysfs fallback for: go7007/px-tv402u.fw [ 131.769131][ T5922] usb 1-1: USB disconnect, device number 20 [ 131.774731][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.787541][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.274292][ T5922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 132.343631][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.357172][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.375887][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.387177][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.404229][ T5922] usb 2-1: device descriptor read/64, error -71 [ 132.435460][ T6572] syzkaller1: entered promiscuous mode [ 132.441211][ T6572] syzkaller1: entered allmulticast mode [ 132.542713][ T6577] netlink: 'syz.0.189': attribute type 27 has an invalid length. [ 132.654219][ T5922] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 132.784175][ T5922] usb 2-1: device descriptor read/64, error -71 [ 132.784175][ T5899] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 132.907147][ T5922] usb usb2-port1: attempt power cycle [ 132.934375][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 132.952884][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.964794][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.974138][ T5899] usb 1-1: Product: syz [ 132.978710][ T5899] usb 1-1: Manufacturer: syz [ 132.983329][ T5899] usb 1-1: SerialNumber: syz [ 133.006212][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.012956][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.127877][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.138016][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.244248][ T5922] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 133.266821][ T5922] usb 2-1: device descriptor read/8, error -71 [ 133.266880][ T5899] cdc_ncm 1-1:1.0: bind() failure [ 133.282026][ T5899] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 133.288924][ T5899] cdc_ncm 1-1:1.1: bind() failure [ 133.301219][ T5899] usb 1-1: USB disconnect, device number 21 [ 133.514112][ T5922] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 133.534567][ T5922] usb 2-1: device descriptor read/8, error -71 [ 133.644294][ T5922] usb usb2-port1: unable to enumerate USB device [ 133.692484][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.701764][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.858121][ T6589] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.870539][ T6589] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 134.315566][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.325442][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.350016][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'. [ 134.521688][ T6603] netlink: 204 bytes leftover after parsing attributes in process `syz.0.197'. [ 134.881286][ T6621] 9pnet_fd: Insufficient options for proto=fd [ 134.962850][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.973162][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.241050][ T6632] process 'syz.3.206' launched '/dev/fd/5' with NULL argv: empty string added [ 135.443849][ T5899] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 135.583829][ T5899] usb 2-1: device descriptor read/64, error -71 [ 135.823833][ T5899] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 135.903922][ T5922] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 135.963737][ T5899] usb 2-1: device descriptor read/64, error -71 [ 136.063773][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 136.070693][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.083168][ T5922] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 136.084179][ T5899] usb usb2-port1: attempt power cycle [ 136.092517][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.113804][ T5922] usb 1-1: Product: syz [ 136.118861][ T5922] usb 1-1: Manufacturer: syz [ 136.123493][ T5922] usb 1-1: SerialNumber: syz [ 136.132243][ T5833] Bluetooth: unknown link type 98 [ 136.133139][ T5922] usb 1-1: config 0 descriptor?? [ 136.138824][ T5833] Bluetooth: hci2: connection err: -111 [ 136.166844][ T5922] asix 1-1:0.0: probe with driver asix failed with error -22 [ 136.196938][ T6643] netlink: 'syz.3.208': attribute type 4 has an invalid length. [ 136.202291][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.204782][ T6643] netlink: 'syz.3.208': attribute type 27 has an invalid length. [ 136.215403][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.222785][ T6643] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 136.238939][ T6643] netlink: 3577 bytes leftover after parsing attributes in process `syz.3.208'. [ 136.371778][ T5922] usb 1-1: USB disconnect, device number 22 [ 136.454473][ T5899] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 136.475456][ T5899] usb 2-1: device descriptor read/8, error -71 [ 136.713790][ T5899] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 136.734311][ T5899] usb 2-1: device descriptor read/8, error -71 [ 136.844091][ T5899] usb usb2-port1: unable to enumerate USB device [ 136.851595][ T6648] openvswitch: netlink: Message has 192 unknown bytes. [ 137.283622][ T5922] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 137.433608][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 137.442421][ T5922] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 137.452400][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.460459][ T5922] usb 1-1: Product: syz [ 137.464843][ T5922] usb 1-1: Manufacturer: syz [ 137.469452][ T5922] usb 1-1: SerialNumber: syz [ 137.476975][ T5922] usb 1-1: config 0 descriptor?? [ 137.687872][ T5922] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 137.703673][ T5922] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 137.730009][ T5922] usb 1-1: USB disconnect, device number 23 [ 137.986146][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.214'. [ 137.997684][ T6661] tmpfs: Unknown parameter 'usrquota' [ 138.323558][ T6679] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 138.808702][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.820367][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.853414][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 139.023424][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 139.049641][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.072739][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 139.082833][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.108772][ T10] usb 1-1: config 0 descriptor?? [ 139.373755][ T5922] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 139.515844][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.534295][ T10] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 139.549853][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.583843][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 139.597001][ T5922] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 139.609040][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.636085][ T5922] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 139.650234][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.673558][ T5922] usb 2-1: Product: syz [ 139.678108][ T5922] usb 2-1: Manufacturer: syz [ 139.682952][ T5922] usb 2-1: SerialNumber: syz [ 139.703053][ T5922] usb 2-1: config 0 descriptor?? [ 139.727855][ T5922] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 139.919173][ T799] usb 2-1: USB disconnect, device number 32 [ 139.946229][ T10] usb 1-1: USB disconnect, device number 24 [ 140.262630][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.275822][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.731240][ T6726] dvmrp1: entered allmulticast mode [ 140.938840][ T6728] netlink: 'syz.1.234': attribute type 3 has an invalid length. [ 141.197630][ T6750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 141.216964][ T6750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 141.241151][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.253439][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.498320][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 141.513961][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.522890][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.693539][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 141.709158][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 141.726273][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.731092][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.247'. [ 141.745747][ T10] usb 2-1: config 0 descriptor?? [ 141.832514][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.844347][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.859131][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.879399][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.962250][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 141.973100][ T10] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 141.981993][ T10] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 142.133070][ T799] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 142.263128][ T799] usb 1-1: device descriptor read/64, error -71 [ 142.503318][ T799] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 142.571065][ T6786] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 142.580396][ T6786] UDF-fs: Scanning with blocksize 512 failed [ 142.589285][ T6786] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 142.597635][ T6786] UDF-fs: Scanning with blocksize 1024 failed [ 142.610868][ T6786] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 142.619453][ T6786] UDF-fs: Scanning with blocksize 2048 failed [ 142.627959][ T6786] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 142.639271][ T6786] UDF-fs: Scanning with blocksize 4096 failed [ 142.663520][ T799] usb 1-1: device descriptor read/64, error -71 [ 142.774807][ T799] usb usb1-port1: attempt power cycle [ 143.122888][ T799] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 143.143763][ T799] usb 1-1: device descriptor read/8, error -71 [ 143.393063][ T799] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 143.424925][ T799] usb 1-1: device descriptor read/8, error -71 [ 143.543395][ T799] usb usb1-port1: unable to enumerate USB device [ 143.611419][ T30] audit: type=1804 audit(1761233889.695:4): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.259" name="/newroot/94/file1" dev="fuse" ino=1 res=1 errno=0 [ 143.633560][ T30] audit: type=1800 audit(1761233889.695:5): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.259" name="/" dev="fuse" ino=1 res=0 errno=0 [ 143.654121][ T30] audit: type=1800 audit(1761233889.695:6): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.259" name="/" dev="fuse" ino=1 res=0 errno=0 [ 143.791489][ T6819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.870175][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.881122][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.469152][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.477982][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.232936][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.241711][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.255107][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.264176][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.312739][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 145.466353][ T43] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 145.475864][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.484037][ T43] usb 1-1: Product: syz [ 145.488300][ T43] usb 1-1: Manufacturer: syz [ 145.492978][ T43] usb 1-1: SerialNumber: syz [ 145.499526][ T43] usb 1-1: config 0 descriptor?? [ 145.951271][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.963604][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.652048][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 146.763858][ T6855] No control pipe specified [ 146.918966][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.928064][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.742763][ T43] usb 1-1: f81604_read: reg: 200f failed: -ETIMEDOUT [ 148.750893][ T6853] bridge_slave_1: left allmulticast mode [ 148.762317][ T6853] bridge_slave_1: left promiscuous mode [ 148.768665][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.832308][ T5922] usb 1-1: USB disconnect, device number 29 [ 148.839499][ T6853] bridge_slave_0: left allmulticast mode [ 148.856311][ T6853] bridge_slave_0: left promiscuous mode [ 148.865854][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.968656][ T5922] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 148.980975][ T6862] netlink: 56 bytes leftover after parsing attributes in process `syz.0.273'. [ 149.000272][ T5493] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 149.060269][ T5922] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 149.110390][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.140695][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.463792][ T5922] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 149.642874][ T5922] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 149.651621][ T5922] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 149.663099][ T5922] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 149.674076][ T5922] usb 1-1: config 220 has no interface number 2 [ 149.680439][ T5922] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 149.703797][ T5922] usb 1-1: config 220 interface 0 has no altsetting 0 [ 149.710620][ T5922] usb 1-1: config 220 interface 76 has no altsetting 0 [ 149.718039][ T5922] usb 1-1: config 220 interface 1 has no altsetting 0 [ 149.727972][ T5922] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 149.741274][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.754974][ T5922] usb 1-1: Product: syz [ 149.759183][ T5922] usb 1-1: Manufacturer: syz [ 149.785676][ T5922] usb 1-1: SerialNumber: syz [ 149.836965][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.850634][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.099540][ T5922] usb 1-1: selecting invalid altsetting 0 [ 150.106999][ T5922] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 150.116173][ T5922] uvcvideo 1-1:220.0: No valid video chain found. [ 150.127376][ T5922] usb 1-1: selecting invalid altsetting 0 [ 150.133319][ T5922] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 150.145772][ T5922] usb 1-1: USB disconnect, device number 30 [ 150.406155][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.416991][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.659278][ T6901] syzkaller1: entered promiscuous mode [ 150.672182][ T6901] syzkaller1: entered allmulticast mode [ 150.978789][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.987559][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.999359][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.008640][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.121991][ T5922] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 151.251958][ T5922] usb 1-1: device descriptor read/64, error -71 [ 151.491908][ T5922] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 151.622029][ T5922] usb 1-1: device descriptor read/64, error -71 [ 151.742911][ T5922] usb usb1-port1: attempt power cycle [ 152.081869][ T5922] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 152.112944][ T5922] usb 1-1: device descriptor read/8, error -71 [ 152.371846][ T5922] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 152.416397][ T5922] usb 1-1: device descriptor read/8, error -71 [ 152.450453][ T6937] netlink: 248 bytes leftover after parsing attributes in process `syz.2.285'. [ 152.460130][ T6937] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 152.542277][ T5922] usb usb1-port1: unable to enumerate USB device [ 152.938378][ T6942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.287'. [ 153.510645][ T6944] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 153.520813][ T6944] VFS: Can't find a romfs filesystem on dev nullb0. [ 153.520813][ T6944] [ 153.638225][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.647277][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.302912][ T5922] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 154.463006][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.474574][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.485469][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.495280][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.508791][ T5922] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.517899][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.528309][ T5922] usb 1-1: config 0 descriptor?? [ 154.997548][ T5922] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 155.836803][ T5885] usb 1-1: USB disconnect, device number 35 [ 156.611391][ T5892] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 156.761324][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 156.768656][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 156.780134][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.790448][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 156.802977][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 156.813997][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 156.826510][ T5892] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 156.835808][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.844134][ T5892] usb 1-1: Product: syz [ 156.848305][ T5892] usb 1-1: Manufacturer: syz [ 156.852960][ T5892] usb 1-1: SerialNumber: syz [ 156.859473][ T5892] usb 1-1: config 0 descriptor?? [ 156.869668][ T5892] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20 [ 157.067105][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.075962][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.085060][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.093708][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.094579][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.102531][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.120597][ T5892] usb 1-1: USB disconnect, device number 36 [ 157.308229][ T6975] binder: Bad value for 'max' [ 157.317398][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.328774][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.340481][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.349450][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.742069][ T6981] wireguard: wg1: Could not create IPv4 socket [ 157.991090][ T5892] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 158.153394][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.166333][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 158.195349][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 158.206632][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 158.220833][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 158.242914][ T5892] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 158.252965][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 158.261359][ T5892] usb 1-1: Product: syz [ 158.266048][ T5892] usb 1-1: Manufacturer: syz [ 158.270676][ T5892] usb 1-1: SerialNumber: syz [ 158.282778][ T5892] usb 1-1: config 0 descriptor?? [ 158.377155][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.385151][ T6993] netlink: 'syz.2.301': attribute type 3 has an invalid length. [ 158.387904][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.394319][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 158.402752][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.417361][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.427070][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.495601][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.524594][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.534592][ T5892] radio-si470x 1-1:0.0: DeviceID=0xa78c ChipID=0x46e0 [ 158.735814][ T5892] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 158.749899][ T5892] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 158.759689][ T5892] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 158.777051][ T6990] chnl_net:caif_netlink_parms(): no params data found [ 158.785864][ T5892] usb 1-1: USB disconnect, device number 37 [ 158.869900][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.877220][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.885584][ T6990] bridge_slave_0: entered allmulticast mode [ 158.893486][ T6990] bridge_slave_0: entered promiscuous mode [ 158.903267][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.910579][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.917974][ T6990] bridge_slave_1: entered allmulticast mode [ 158.924991][ T6990] bridge_slave_1: entered promiscuous mode [ 158.958671][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.970419][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.001305][ T6990] team0: Port device team_slave_0 added [ 159.009452][ T6990] team0: Port device team_slave_1 added [ 159.035839][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.043079][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.071073][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.083884][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.090842][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.117329][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.164504][ T6990] hsr_slave_0: entered promiscuous mode [ 159.171442][ T6990] hsr_slave_1: entered promiscuous mode [ 159.178240][ T6990] debugfs: 'hsr0' already exists in 'hsr' [ 159.185853][ T6990] Cannot create hsr debugfs directory [ 159.236717][ T7006] netlink: 'syz.2.303': attribute type 21 has an invalid length. [ 159.277007][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.289831][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.495748][ T6990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.505925][ T6990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.517036][ T6990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.526696][ T6990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.558836][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.566012][ T6990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.573568][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.580696][ T6990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.642571][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.659828][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.670184][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.687022][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.690982][ T5885] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 159.711540][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.718798][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.727115][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.734279][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.864770][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 159.876158][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.887460][ T5885] usb 1-1: config 8 interface 0 has no altsetting 0 [ 159.898535][ T5885] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= f.ca [ 159.908921][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.917937][ T5885] usb 1-1: Product: syz [ 159.924669][ T5885] usb 1-1: Manufacturer: syz [ 159.929488][ T5885] usb 1-1: SerialNumber: syz [ 159.958620][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.186042][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.197763][ T7026] block nbd2: shutting down sockets [ 160.204508][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.288884][ T6990] veth0_vlan: entered promiscuous mode [ 160.303744][ T6990] veth1_vlan: entered promiscuous mode [ 160.340546][ T6990] veth0_macvtap: entered promiscuous mode [ 160.351636][ T6990] veth1_macvtap: entered promiscuous mode [ 160.374780][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.396548][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.414604][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.432026][ T5916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.444373][ T5916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.453420][ T5916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.502025][ T5833] Bluetooth: hci3: command tx timeout [ 160.529708][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.547435][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.574794][ T5916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.587416][ T5916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.855890][ T7036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.308'. [ 161.068583][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.106856][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.126469][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.137200][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.450811][ T5899] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 161.610777][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 161.618646][ T5899] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 161.628422][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.641458][ T5899] usb 5-1: config 0 descriptor?? [ 161.652551][ T5899] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 161.857421][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.877658][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.213240][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.223500][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.411991][ T5885] usb 1-1: USB disconnect, device number 38 [ 162.740687][ T5833] Bluetooth: hci3: command tx timeout [ 162.839600][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.852638][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.861260][ T5885] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 163.010508][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 163.017530][ T5885] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 163.025773][ T5885] usb 1-1: config 0 has no interface number 0 [ 163.034121][ T5885] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 163.043227][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.052272][ T5885] usb 1-1: Product: syz [ 163.056486][ T5885] usb 1-1: Manufacturer: syz [ 163.062201][ T5885] usb 1-1: SerialNumber: syz [ 163.070952][ T5885] usb 1-1: config 0 descriptor?? [ 163.078346][ T5885] smsc95xx v2.0.0 [ 163.313248][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.323766][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.413736][ T7070] binder: 7069:7070 ioctl c0306201 200000000540 returned -22 [ 163.484326][ T5885] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 163.488218][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.509857][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.510744][ T5885] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.546233][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.556994][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.307875][ T7081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.318599][ T7081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.821145][ T5833] Bluetooth: hci3: command tx timeout [ 164.938398][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.948941][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.957961][ T5885] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 164.969649][ T5885] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 164.976965][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 164.983449][ T5885] usb 1-1: USB disconnect, device number 39 [ 165.002609][ T5899] gspca_vc032x: reg_r err -71 [ 165.007417][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.017699][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.028442][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.036087][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.042337][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.047645][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.053237][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.058661][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.065493][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.070848][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.076172][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.082590][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.087979][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.095254][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.100618][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.102763][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 165.106035][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.120515][ T5899] gspca_vc032x: I2c Bus Busy Wait 00 [ 165.125841][ T5899] gspca_vc032x: Unknown sensor... [ 165.131479][ T5899] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 165.143183][ T5899] usb 5-1: USB disconnect, device number 2 [ 165.204417][ T7090] netlink: 112 bytes leftover after parsing attributes in process `syz.2.325'. [ 165.245358][ T7090] syz.2.325 (7090) used greatest stack depth: 17864 bytes left [ 165.300078][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.315006][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.326051][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.335845][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.625692][ T7101] blk_print_req_error: 138 callbacks suppressed [ 165.625714][ T7101] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.641915][ T7101] buffer_io_error: 159 callbacks suppressed [ 165.641934][ T7101] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.656332][ T7101] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.665527][ T7101] Buffer I/O error on dev nbd0, logical block 1, async page read [ 165.674087][ T7101] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.684009][ T7101] Buffer I/O error on dev nbd0, logical block 2, async page read [ 165.698102][ T7101] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.729320][ T7101] Buffer I/O error on dev nbd0, logical block 3, async page read [ 165.748090][ T7101] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.820153][ T7101] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.848394][ T7101] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.898042][ T7101] Buffer I/O error on dev nbd0, logical block 1, async page read [ 165.960410][ T7101] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.969601][ T7101] Buffer I/O error on dev nbd0, logical block 2, async page read [ 166.031329][ T7101] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.110077][ T7101] Buffer I/O error on dev nbd0, logical block 3, async page read [ 166.140623][ T7101] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.160485][ T7101] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.169326][ T7101] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.200413][ T7101] Buffer I/O error on dev nbd0, logical block 1, async page read [ 166.225170][ T7101] ldm_validate_partition_table(): Disk read failed. [ 166.236985][ T7101] Dev nbd0: unable to read RDB block 0 [ 166.252853][ T7101] nbd0: unable to read partition table [ 166.956742][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 167.291575][ T7119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.310703][ T7119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.016380][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.059753][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.256023][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 168.689555][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 168.835122][ T7156] bond0: (slave bond_slave_0): Releasing backup interface [ 169.030501][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 169.169789][ T7166] comedi comedi0: ni_at_a2150: I/O port conflict (0x3,28) [ 169.464116][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 169.897700][ T7173] IPVS: You probably need to specify IP address on multicast interface. [ 169.908780][ T798] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 169.918195][ T7173] IPVS: Error connecting to the multicast addr [ 170.069612][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 170.078690][ T798] usb 5-1: config 0 has no interfaces? [ 170.085723][ T798] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 170.095524][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.114331][ T798] usb 5-1: config 0 descriptor?? [ 170.180293][ T5921] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 170.329347][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.338795][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.348515][ T5921] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 170.350119][ T43] usb 5-1: USB disconnect, device number 3 [ 170.356996][ T5921] usb 1-1: config 5 has no interface number 0 [ 170.369352][ T5921] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 170.381195][ T5921] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 170.392639][ T5921] usb 1-1: config 5 interface 123 has no altsetting 0 [ 170.402617][ T5921] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 170.411748][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.421170][ T5921] usb 1-1: Product: syz [ 170.425708][ T5921] usb 1-1: Manufacturer: syz [ 170.431026][ T5921] usb 1-1: SerialNumber: syz [ 170.654606][ T5921] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 170.668933][ T5921] usb 1-1: USB disconnect, device number 40 [ 170.809555][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.961479][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.972605][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.982630][ T5892] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 170.994573][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.005100][ T5892] usb 5-1: config 0 descriptor?? [ 171.014616][ T5892] yurex 5-1:0.0: Could not submitting URB [ 171.020826][ T5892] yurex 5-1:0.0: probe with driver yurex failed with error -5 [ 171.557553][ T43] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 171.729615][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 171.736787][ T43] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 171.746256][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.757600][ T43] usb 1-1: config 0 descriptor?? [ 171.766530][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 172.077349][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.086441][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.096680][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.107058][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.119180][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.128270][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.675830][ T798] usb 5-1: USB disconnect, device number 4 [ 172.741418][ T7193] netlink: zone id is out of range [ 172.746935][ T7193] netlink: zone id is out of range [ 173.759193][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 173.909178][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 173.917100][ T24] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 173.925581][ T24] usb 5-1: config 0 has no interface number 0 [ 173.931803][ T24] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 173.941784][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.954527][ T24] usb 5-1: config 0 descriptor?? [ 174.089812][ T24] viperboard 5-1:0.143: version 0.00 found at bus 005 address 005 [ 174.119815][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 174.132356][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 174.173619][ T24] usb 5-1: USB disconnect, device number 5 [ 175.191299][ T43] gspca_vc032x: reg_r err -32 [ 175.196090][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.201544][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.207048][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.212729][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.218021][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.223648][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.229266][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.236566][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.242026][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.247349][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.252862][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.258158][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.263585][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.268879][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.274335][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.279690][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.285087][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.290498][ T43] gspca_vc032x: Unknown sensor... [ 175.295614][ T43] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 175.705412][ T43] usb 1-1: USB disconnect, device number 41 [ 192.697000][ T5198] udevd[5198]: worker [5841] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 194.421328][ T9] go7007-loader 4-1:4.67: unable to load firmware from file "go7007/px-tv402u.fw" [ 194.422717][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.430681][ T9] go7007-loader 4-1:4.67: probe failed [ 194.437175][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.452763][ T9] go7007-loader 4-1:4.99: loading firmware go7007/px-tv402u.fw [ 194.462066][ T9] usb 4-1: Direct firmware load for go7007/px-tv402u.fw failed with error -2 [ 194.471071][ T9] usb 4-1: Falling back to sysfs fallback for: go7007/px-tv402u.fw [ 204.663746][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 204.679682][ T10] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 204.694872][ T10] usb 2-1: USB disconnect, device number 33 [ 209.478074][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.488662][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.532141][ T7208] warning: `syz.2.360' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 209.555450][ T7208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.360'. [ 209.742051][ T7220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.754876][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 209.785653][ T5892] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 209.914926][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 209.928437][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.951439][ T5892] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 209.954960][ T43] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.975581][ T5892] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.984889][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 209.996673][ T5892] usb 1-1: config 2 interface 0 has no altsetting 0 [ 210.004789][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.007083][ T5892] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 210.011539][ T43] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 210.025240][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.044019][ T5892] usb 1-1: Product: syz [ 210.048562][ T5892] usb 1-1: Manufacturer: syz [ 210.053506][ T5892] usb 1-1: SerialNumber: syz [ 210.054880][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.089076][ T43] usb 5-1: config 0 descriptor?? [ 210.108537][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 210.198778][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.211921][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.220043][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.221875][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.239790][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.251608][ T24] usb 2-1: config 0 descriptor?? [ 210.280743][ T5892] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 210.293044][ T5892] usb 1-1: USB disconnect, device number 42 [ 210.462044][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 210.468448][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 210.479906][ T24] usb 2-1: USB disconnect, device number 34 [ 210.507327][ T5885] usb 5-1: USB disconnect, device number 6 [ 210.906387][ T5885] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 211.067822][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.090216][ T5885] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.113980][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.143040][ T5885] usb 2-1: config 0 descriptor?? [ 211.375486][ T5892] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 211.469011][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.479817][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.534877][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 211.547771][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.561300][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.572289][ T5892] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 211.586154][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.589754][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 211.604022][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 211.605537][ T5892] usb 1-1: config 0 descriptor?? [ 211.615698][ T5885] usb 2-1: USB disconnect, device number 35 [ 211.629010][ T7251] binder: BINDER_SET_CONTEXT_MGR already set [ 211.635425][ T7251] binder: 7250:7251 ioctl 4018620d 2000000002c0 returned -16 [ 211.695352][ T5921] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 211.735629][ T7253] fuse: Bad value for 'fd' [ 211.857858][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 211.864322][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 211.870490][ T5148] Bluetooth: hci0: command 0x0406 tx timeout [ 211.889040][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 211.918594][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.933007][ T5921] usb 5-1: config 255 has no interfaces? [ 211.944467][ T5921] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a31, bcdDevice=ae.ca [ 211.955057][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.963212][ T5921] usb 5-1: Product: 穱싳疌ᄤ뗼ڄ낤퀵ٰ䞢ඏ쁪䌭킔륦뜶턺ᡣ [ 211.975273][ T5921] usb 5-1: Manufacturer: ᬭ坑䟄㜋司况亴ៈ⫁직≩໖뒐닎죡䫘쎻ۂ馢牲ꚭ횕鄩꽃垭コ료Ꝩ쳝榧嫙鑍醽붌懬閭蟗ﴜ役䕔庱扬괳䀧屜雹꫱邕ⅱ窃힭ᯌ毴떦ꑟ縣ⶈ [ 211.998260][ T5921] usb 5-1: SerialNumber: 皢얝苪젞⅘懰᳴曅䠚〼檐肊賝됸ᇕ榜ರ걭Ē암殟ĸ큝䡿耘ᙗ⒴셕뺓紫䭔묺李進磺ﴔ躱쎠ਸ਼槃ộ|͌筣謂檢宅暷戡뼺⁏╶焥証틈䅤㹡帛ᷙ䰝볁᭩ї薃恰뾏秐睘৤ꢔꣶ괱긂꼪喩㵌誄쉦ꉐ뛍䤅袤䩆㪘缎䎖螢㷛蝬鮗 [ 212.174457][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.217862][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.234783][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.242063][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.254121][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.263549][ T5921] usb 5-1: USB disconnect, device number 7 [ 212.288719][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.330398][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.353822][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.371605][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.380991][ T5892] apple 0003:05AC:024B.000D: unknown main item tag 0x0 [ 212.398871][ T5892] apple 0003:05AC:024B.000D: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 212.418215][ T5892] usb 1-1: USB disconnect, device number 43 [ 212.536162][ T7260] fido_id[7260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 212.773041][ T7266] binder: 7265:7266 ioctl 40046205 0 returned -22 [ 212.838332][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.379'. [ 213.592343][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.622888][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.634768][ T5892] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 213.664264][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.675469][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.687555][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.699132][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.808401][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.821894][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 213.840389][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 213.852818][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 213.882967][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.909591][ T5892] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 213.934591][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 213.955038][ T5892] usb 1-1: Product: syz [ 213.959271][ T5892] usb 1-1: Manufacturer: syz [ 213.964089][ T5892] usb 1-1: SerialNumber: syz [ 213.980630][ T5892] usb 1-1: config 0 descriptor?? [ 214.262325][ T5892] radio-si470x 1-1:0.0: DeviceID=0xa78c ChipID=0x46e0 [ 214.445871][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 214.473990][ T7312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.489956][ T7312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.606283][ T24] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.614836][ T5921] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 214.629831][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.636651][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 214.646009][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.667509][ T24] usb 2-1: config 0 descriptor?? [ 214.775259][ T5892] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 214.795585][ T5892] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 214.807686][ T5892] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 214.822731][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 214.834302][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.852210][ T5921] usb 5-1: Product: syz [ 214.868298][ T5921] usb 5-1: Manufacturer: syz [ 214.879913][ T5921] usb 5-1: SerialNumber: syz [ 215.070823][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.083099][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.099608][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.120397][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.363532][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 215.375306][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.388826][ T24] usb 2-1: USB disconnect, device number 36 [ 215.519151][ T7314] fuse: Bad value for 'group_id' [ 215.528972][ T7314] fuse: Bad value for 'group_id' [ 215.599423][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 215.613772][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 215.640744][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 215.655574][ T5921] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 215.699723][ T5921] usb 5-1: USB disconnect, device number 8 [ 216.194128][ T24] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 216.348474][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.362986][ T24] usb 2-1: config 0 has no interface number 0 [ 216.371289][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 216.381821][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.409255][ T7364] overlay: ./file0 is not a directory [ 216.417160][ T24] usb 2-1: config 0 descriptor?? [ 216.431212][ T5921] usb 1-1: USB disconnect, device number 44 [ 216.446923][ T24] usb 2-1: selecting invalid altsetting 1 [ 216.463408][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 216.497033][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 216.607196][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.636865][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.664856][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.684632][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.738444][ T24] DVB: Unable to find symbol ves1820_attach() [ 216.770231][ T7377] loop5: detected capacity change from 0 to 1223 [ 216.845378][ T7377] loop5: detected capacity change from 1223 to 3191 [ 216.861463][ T24] DVB: Unable to find symbol stv0297_attach() [ 216.894236][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 216.939862][ T5950] buffer_io_error: 54 callbacks suppressed [ 216.939882][ T5950] Buffer I/O error on dev loop5, logical block 398, async page read [ 216.994498][ T5921] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 217.001564][ T24] usb 2-1: USB disconnect, device number 37 [ 217.180894][ T5921] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 217.202283][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.238656][ T5921] usb 1-1: config 0 descriptor?? [ 217.266155][ T5921] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 217.451401][ T7375] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 217.461682][ T5921] gspca_sn9c2028: read1 error 0 [ 217.644395][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 217.803923][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 217.811030][ T24] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 217.820022][ T24] usb 5-1: config 0 has no interface number 0 [ 217.827630][ T24] usb 5-1: config 0 interface 244 has no altsetting 0 [ 217.837028][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.bc [ 217.846622][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.855306][ T24] usb 5-1: Product: syz [ 217.859586][ T24] usb 5-1: Manufacturer: syz [ 217.867040][ T5921] gspca_sn9c2028: read1 error -71 [ 217.868282][ T24] usb 5-1: SerialNumber: syz [ 217.877676][ T5921] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 217.894293][ T5921] usb 1-1: USB disconnect, device number 45 [ 217.894479][ T24] usb 5-1: config 0 descriptor?? [ 217.917524][ T24] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort found [ 217.974091][ T5892] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 218.126609][ T24] snd_usb_toneport 5-1:0.244: cannot get proper max packet size [ 218.137321][ T24] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort now disconnected [ 218.143909][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 218.149218][ T24] snd_usb_toneport 5-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 218.179579][ T5892] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 218.188583][ T5892] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.200247][ T5892] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.211825][ T5892] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 218.223307][ T5892] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 218.237458][ T5892] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.252530][ T5892] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 218.262143][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.277707][ T5892] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 218.318795][ T24] usb 5-1: USB disconnect, device number 9 [ 218.477639][ T5899] usb 2-1: USB disconnect, device number 38 [ 218.693887][ T5892] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 218.854270][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 218.868497][ T5892] usb 1-1: config 0 has an invalid interface number: 74 but max is 2 [ 218.893521][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.918772][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 218.947476][ T5892] usb 1-1: config 0 has no interface number 0 [ 218.969508][ T5892] usb 1-1: config 0 interface 74 altsetting 9 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 218.982898][ T5892] usb 1-1: config 0 interface 74 altsetting 9 endpoint 0x8A has an invalid bInterval 208, changing to 11 [ 218.997276][ T5892] usb 1-1: config 0 interface 74 altsetting 9 endpoint 0x8A has invalid maxpacket 33340, setting to 1024 [ 219.009916][ T5892] usb 1-1: config 0 interface 74 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 219.026909][ T5892] usb 1-1: config 0 interface 74 has no altsetting 0 [ 219.037110][ T5892] usb 1-1: New USB device found, idVendor=12d1, idProduct=a35b, bcdDevice=f8.3b [ 219.046644][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.057035][ T5892] usb 1-1: Product: syz [ 219.061251][ T5892] usb 1-1: Manufacturer: syz [ 219.066637][ T5892] usb 1-1: SerialNumber: syz [ 219.098036][ T5892] usb 1-1: config 0 descriptor?? [ 219.347583][ T5892] option 1-1:0.74: GSM modem (1-port) converter detected [ 219.367293][ T5899] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 219.384312][ T5892] usb 1-1: USB disconnect, device number 46 [ 219.392816][ T5892] option 1-1:0.74: device disconnected [ 219.559647][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.580880][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.608512][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.621686][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.784811][ T5892] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 219.838042][ T5899] usb 2-1: GET_CAPABILITIES returned 0 [ 219.846411][ T5899] usbtmc 2-1:16.0: can't read capabilities [ 219.960767][ T5892] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 219.985956][ T5892] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 220.030881][ T5892] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 220.068305][ T5892] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 220.092517][ T5892] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 220.123665][ T5892] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 220.133181][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.134335][ T24] usb 2-1: USB disconnect, device number 39 [ 220.359521][ T7465] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 220.399458][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.426223][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.442094][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.451362][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.461203][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.487175][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.536303][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.564327][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.579494][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.610172][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.905850][ T7485] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 220.921103][ T7485] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 220.935726][ T7485] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 220.943892][ T7485] netlink: 'syz.4.427': attribute type 3 has an invalid length. [ 220.952995][ T7485] netlink: 224 bytes leftover after parsing attributes in process `syz.4.427'. [ 220.984912][ T7488] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 221.013537][ T5922] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 221.193515][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 221.214920][ T5892] ath6kl: Failed to submit usb control message: -110 [ 221.227382][ T5892] ath6kl: unable to send the bmi data to the device: -110 [ 221.237748][ T5922] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.257318][ T5892] ath6kl: Unable to send get target info: -110 [ 221.264485][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.277346][ T5922] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.288679][ T5892] ath6kl: Failed to init ath6kl core: -110 [ 221.298016][ T5922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.301029][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.309916][ T5892] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 221.322187][ T5922] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 221.331345][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.340122][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.357773][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.367109][ T5922] usb 2-1: config 0 descriptor?? [ 221.483607][ T43] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 221.660312][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.669571][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.680004][ T43] usb 5-1: config 0 has no interface number 0 [ 221.688868][ T43] usb 5-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 221.698275][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.707812][ T43] usb 5-1: Product: syz [ 221.712327][ T43] usb 5-1: Manufacturer: syz [ 221.719600][ T43] usb 5-1: SerialNumber: syz [ 221.727659][ T43] usb 5-1: config 0 descriptor?? [ 221.740275][ T43] cx231xx 5-1:0.1: New device syz syz @ 12 Mbps (0572:58a2) with 1 interfaces [ 221.750887][ T43] cx231xx 5-1:0.1: Not found matching IAD interface [ 221.783640][ T5922] hid_parser_main: 52 callbacks suppressed [ 221.783665][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.798268][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.807793][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.814767][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.825656][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.832588][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.839987][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.847021][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.857743][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.865801][ T5922] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 221.878912][ T5922] kye 0003:0458:0138.000E: collection stack underflow [ 221.885983][ T5922] kye 0003:0458:0138.000E: item 0 0 0 12 parsing failed [ 221.894131][ T5922] kye 0003:0458:0138.000E: parse failed [ 221.899934][ T5922] kye 0003:0458:0138.000E: probe with driver kye failed with error -22 [ 221.978414][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.989968][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.000034][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.009320][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.034935][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.049679][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.059531][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.071165][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.082599][ T7520] overlayfs: missing 'lowerdir' [ 222.082647][ T7498] netlink: 165 bytes leftover after parsing attributes in process `syz.4.429'. [ 222.101847][ T5899] usb 5-1: USB disconnect, device number 10 [ 222.282196][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.291551][ T7530] 9pnet_fd: Insufficient options for proto=fd [ 222.301044][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.318773][ T5899] usb 2-1: USB disconnect, device number 40 [ 222.422435][ T7537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.437367][ T7537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.494723][ T24] usb 1-1: USB disconnect, device number 47 [ 222.761369][ T7552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.048825][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.073818][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.132699][ T7567] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 223.162201][ T7567] CIFS mount error: No usable UNC path provided in device string! [ 223.162201][ T7567] [ 223.175527][ T7567] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 223.189885][ T7567] netlink: 14 bytes leftover after parsing attributes in process `syz.4.444'. [ 223.372229][ T7567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.384950][ T7567] bond0 (unregistering): Released all slaves [ 223.494325][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 223.583354][ T5922] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 223.658672][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 223.675115][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 223.684843][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.692881][ T10] usb 2-1: Product: syz [ 223.698420][ T10] usb 2-1: Manufacturer: syz [ 223.703057][ T10] usb 2-1: SerialNumber: syz [ 223.717749][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 223.725517][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 223.743245][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 223.750150][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.760799][ T5922] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.775484][ T5892] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 223.783595][ T5922] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.791588][ T5922] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 223.801285][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.817071][ T5922] usb 1-1: config 0 descriptor?? [ 223.933654][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 223.961756][ T5892] usb 5-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 223.974763][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.982095][ T5892] usb 5-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 223.992533][ T5892] usb 5-1: config 218 has no interface number 0 [ 223.992636][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.999633][ T5892] usb 5-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.021222][ T5892] usb 5-1: config 218 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 224.033421][ T5892] usb 5-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 224.045083][ T5892] usb 5-1: config 218 interface 95 has no altsetting 0 [ 224.059085][ T5922] hid-thrustmaster 0003:044F:B65D.000F: item fetching failed at offset 3/5 [ 224.071595][ T5922] hid-thrustmaster 0003:044F:B65D.000F: parse failed with error -22 [ 224.079921][ T5892] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 224.089547][ T5922] hid-thrustmaster 0003:044F:B65D.000F: probe with driver hid-thrustmaster failed with error -22 [ 224.105107][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.114483][ T5892] usb 5-1: Product: syz [ 224.120496][ T5892] usb 5-1: Manufacturer: syz [ 224.125221][ T5892] usb 5-1: SerialNumber: syz [ 224.185577][ T7571] syzkaller1: entered promiscuous mode [ 224.191286][ T7571] syzkaller1: entered allmulticast mode [ 224.276149][ T43] r8152-cfgselector 2-1: USB disconnect, device number 41 [ 224.345469][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.354631][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.405285][ T7573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.430408][ T7573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.440173][ T7578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=69 (138 ns) > initial count (120 ns). Using initial count to start timer. [ 224.553637][ T5892] usbtouchscreen 5-1:218.95: probe with driver usbtouchscreen failed with error -71 [ 224.587412][ T5892] usb 5-1: USB disconnect, device number 11 [ 224.649177][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.660499][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.679498][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.692404][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.189665][ T7603] netlink: 763 bytes leftover after parsing attributes in process `syz.4.455'. Stopping sshd: stopped /usr/sbin/sshd (pid 5586) OK [ 225.642080][ T7612] netlink: 'syz.1.457': attribute type 37 has an invalid length. Stopping crond: stopped /usr/sbin/crond (pid 5571) OK [ 226.094125][ T5922] usb 2-1: new high-speed USB device number 42 using dummy_hcd Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5492) [ 226.252895][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 226.276902][ T5922] usb 2-1: config 0 has an invalid interface number: 145 but max is 1 [ 226.295956][ T5922] usb 2-1: config 0 has an invalid interface number: 43 but max is 1 [ 226.322294][ T5922] usb 2-1: config 0 has no interface number 0 [ 226.355328][ T5922] usb 2-1: config 0 has no interface number 1 [ 226.388369][ T5922] usb 2-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 226.404834][ T5921] usb 1-1: USB disconnect, device number 48 [ 226.448615][ T5922] usb 2-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 226.487149][ T5922] usb 2-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 226.502067][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.565777][ T5922] usb 2-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 226.579300][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.600073][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.619433][ T5922] usb 2-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 226.663501][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.671450][ T5922] usb 2-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.699432][ T5922] usb 2-1: config 0 interface 145 has no altsetting 0 [ 226.708859][ T5922] usb 2-1: config 0 interface 43 has no altsetting 0 [ 226.719907][ T30] audit: type=1326 audit(1761233972.815:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.4.459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7630f8efc9 code=0x0 [ 226.721940][ T5922] usb 2-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 226.761843][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.770328][ T5922] usb 2-1: Product: syz Stopping network: [ 226.780909][ T5922] usb 2-1: Manufacturer: syz [ 226.788635][ T5922] usb 2-1: SerialNumber: syz [ 226.837828][ T5922] usb 2-1: config 0 descriptor?? [ 227.055861][ T7615] Device name cannot be null; rc = [-22] OK [ 228.073376][ T5921] usb 1-1: new high-speed USB device number 49 using dummy_hcd Stopping iptables: [ 228.283675][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 228.297002][ T5921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 228.337358][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 OK [ 228.360894][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.392681][ T5921] usb 1-1: Product: ж [ 228.406557][ T5921] usb 1-1: Manufacturer: Б [ 228.420592][ T5921] usb 1-1: SerialNumber: Ж [ 228.452405][ T7669] syzkaller1: entered promiscuous mode [ 228.501783][ T7669] syzkaller1: entered allmulticast mode Stopping system message bus: [ 228.707197][ T5921] cdc_ncm 1-1:1.0: bind() failure [ 228.750943][ T5921] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 228.777304][ T5921] cdc_ncm 1-1:1.1: bind() failure [ 228.811146][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.813641][ T5921] usb 1-1: USB disconnect, device number 49 [ 228.853418][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.888707][ T5922] keyspan_pda 2-1:0.145: required endpoints missing [ 228.936564][ T5922] keyspan_pda 2-1:0.43: Keyspan PDA converter detected [ 228.957934][ T5922] usb 2-1: Keyspan PDA converter now attached to ttyUSB0 [ 228.975850][ T5922] usb 2-1: USB disconnect, device number 42 [ 229.035257][ T5922] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 229.069373][ T5922] keyspan_pda 2-1:0.43: device disconnected done [ 229.631487][ T7696] netlink: 830 bytes leftover after parsing attributes in process `syz.2.471'. [ 229.669368][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.681915][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.909301][ T5922] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 230.052587][ T5922] usb 1-1: device descriptor read/64, error -71 Stopping klogd: [ 230.339118][ T5922] usb 1-1: new high-speed USB device number 51 using dummy_hcd OK [ 230.411282][ T7712] netlink: 56 bytes leftover after parsing attributes in process `syz.2.475'. [ 230.427145][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'. [ 230.438609][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 230.451426][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. Stopping acpid: [ 230.502674][ T5922] usb 1-1: device descriptor read/64, error -71 [ 230.531694][ T30] audit: type=1326 audit(1761233976.625:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.2.476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b7e98efc9 code=0x0 [ 230.572555][ T10] usb 5-1: device descriptor read/64, error -71 [ 230.613122][ T5922] usb usb1-port1: attempt power cycle [ 230.650830][ T5833] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 230.693317][ T5921] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 230.812562][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 230.842368][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 230.849619][ T5921] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 230.861817][ T5921] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 230.871125][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.879361][ T5921] usb 2-1: Product: syz [ 230.883806][ T5921] usb 2-1: Manufacturer: syz [ 230.888406][ T5921] usb 2-1: SerialNumber: syz [ 230.896544][ T5921] usb 2-1: config 0 descriptor?? [ 230.905302][ T5921] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 230.952352][ T10] usb 5-1: device descriptor read/64, error -71 [ 230.962349][ T5922] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 230.982874][ T5922] usb 1-1: device descriptor read/8, error -71 [ 231.063640][ T10] usb usb5-port1: attempt power cycle [ 231.222350][ T5922] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 231.243047][ T5922] usb 1-1: device descriptor read/8, error -71 [ 231.353857][ T5922] usb usb1-port1: unable to enumerate USB device [ 231.412352][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 231.433111][ T10] usb 5-1: device descriptor read/8, error -71 OK [ 231.672292][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 231.696216][ T10] usb 5-1: device descriptor read/8, error -71 Stopping syslogd: stopped /sbin/syslogd (pid 5180) OK [ 231.817632][ T10] usb usb5-port1: unable to enumerate USB device umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 232.116373][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.134840][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 232.796019][ T5198] udevd[5198]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes Connection to 10.128.0.106 closed by remote host. [ 233.392328][ T5921] gspca_zc3xx: reg_r err -110 [ 233.841858][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes [ 233.878232][ T5922] usb 3-1: USB disconnect, device number 4 [ 233.903628][ T5922] em28xx 3-1:0.0: Disconnecting em28xx [ 233.909412][ T5922] em28xx 3-1:0.0: Closing input extension [ 233.980995][ T5922] em28xx 3-1:0.0: Freeing device [ 233.986127][ T5921] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 234.008509][ T5921] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 234.046367][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Requesting system poweroff [ 234.099009][ T5921] usb 2-1: USB disconnect, device number 43 [ 234.154158][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.243564][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.348514][ T12] bridge_slave_1: left allmulticast mode [ 234.354605][ T12] bridge_slave_1: left promiscuous mode [ 234.361485][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.371800][ T12] bridge_slave_0: left allmulticast mode [ 234.377757][ T12] bridge_slave_0: left promiscuous mode [ 234.383852][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.879202][ T12] hsr_slave_0: left promiscuous mode [ 234.885967][ T12] hsr_slave_1: left promiscuous mode [ 234.892387][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.899817][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.908958][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.916873][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.935171][ T12] veth1_macvtap: left promiscuous mode [ 234.941886][ T12] veth0_macvtap: left promiscuous mode [ 234.947643][ T12] veth1_vlan: left promiscuous mode [ 234.953014][ T12] veth0_vlan: left promiscuous mode [ 235.381192][ T12] team0 (unregistering): Port device team_slave_1 removed [ 235.424937][ T12] team0 (unregistering): Port device team_slave_0 removed [ 236.094375][ T7727] smc: removing smcd device lo [ 236.094559][ T9] go7007-loader 4-1:4.99: unable to load firmware from file "go7007/px-tv402u.fw" [ 236.115944][ T9] go7007-loader 4-1:4.99: probe failed [ 236.134560][ T9] go7007-loader 4-1:4.42: loading firmware go7007/px-tv402u.fw [ 236.143891][ T9] usb 4-1: Direct firmware load for go7007/px-tv402u.fw failed with error -2 [ 236.153341][ T9] usb 4-1: Falling back to sysfs fallback for: go7007/px-tv402u.fw [ 236.162148][ T9] ------------[ cut here ]------------ [ 236.167651][ T9] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0x9b0, CPU#0: kworker/0:0/9 [ 236.179912][ T9] Modules linked in: [ 236.184152][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 236.184457][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.193596][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.193616][ T9] Workqueue: usb_hub_wq hub_event [ 236.219184][ T9] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 236.225657][ T9] Code: e9 fb e9 5d fc ff ff e8 78 e1 e9 fb c6 05 d6 4d b2 09 01 48 c7 c7 80 e0 e8 8b e8 a5 f1 50 fb e9 85 fc ff ff e8 5b e1 e9 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 e1 e8 8b 4c 89 e2 e8 15 9f 55 fb e9 [ 236.245358][ T9] RSP: 0018:ffffc900000e6ab0 EFLAGS: 00010246 [ 236.251434][ T9] RAX: ffffffff85d69c35 RBX: dffffc0000000000 RCX: 0000000000100000 [ 236.259772][ T9] RDX: ffffc90016ad5000 RSI: 00000000000fffff RDI: 0000000000100000 [ 236.268217][ T9] RBP: 0000000000000001 R08: ffffffff8f9ed377 R09: 1ffffffff1f3da6e [ 236.276301][ T9] R10: dffffc0000000000 R11: fffffbfff1f3da6f R12: ffffffff8c3f9a80 [ 236.284431][ T9] R13: 0000000000001770 R14: ffff88807a7660b0 R15: 00000000fffffff5 [ 236.292461][ T9] FS: 0000000000000000(0000) GS:ffff888125ce4000(0000) knlGS:0000000000000000 [ 236.301395][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.308023][ T9] CR2: 00007f61c9fb4198 CR3: 000000000df38000 CR4: 00000000003526f0 [ 236.316122][ T9] Call Trace: [ 236.319531][ T9] [ 236.322500][ T9] ? kmem_cache_free+0x19b/0x690 [ 236.327441][ T9] ? _request_firmware+0x6be/0x15b0 [ 236.332883][ T9] _request_firmware+0xf83/0x15b0 [ 236.337972][ T9] ? __pfx__request_firmware+0x10/0x10 [ 236.343586][ T9] request_firmware+0x36/0x50 [ 236.348303][ T9] go7007_loader_probe+0x4dc/0x6e0 [ 236.353446][ T9] ? __pfx_go7007_loader_probe+0x10/0x10 [ 236.359381][ T9] ? __pm_runtime_set_status+0x785/0xa50 [ 236.365507][ T9] usb_probe_interface+0x668/0xc30 [ 236.370682][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 236.376488][ T9] really_probe+0x26d/0x9e0 [ 236.381025][ T9] __driver_probe_device+0x18c/0x2f0 [ 236.386459][ T9] driver_probe_device+0x4f/0x430 [ 236.391558][ T9] __device_attach_driver+0x2ce/0x530 [ 236.397022][ T9] bus_for_each_drv+0x251/0x2e0 [ 236.401986][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 236.407907][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 236.413517][ T9] __device_attach+0x2b8/0x400 [ 236.418396][ T9] ? __pfx___device_attach+0x10/0x10 [ 236.423760][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 236.429064][ T9] bus_probe_device+0x185/0x260 [ 236.434073][ T9] device_add+0x7b6/0xb50 [ 236.438601][ T9] usb_set_configuration+0x1a87/0x20e0 [ 236.444144][ T9] usb_generic_driver_probe+0x8d/0x150 [ 236.449617][ T9] usb_probe_device+0x1c4/0x390 [ 236.454528][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 236.460399][ T9] really_probe+0x26d/0x9e0 [ 236.465583][ T9] __driver_probe_device+0x18c/0x2f0 [ 236.470916][ T9] driver_probe_device+0x4f/0x430 [ 236.476004][ T9] __device_attach_driver+0x2ce/0x530 [ 236.481404][ T9] bus_for_each_drv+0x251/0x2e0 [ 236.486315][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 236.492306][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 236.497710][ T9] __device_attach+0x2b8/0x400 [ 236.502516][ T9] ? __pfx___device_attach+0x10/0x10 [ 236.507826][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 236.513068][ T9] bus_probe_device+0x185/0x260 [ 236.517936][ T9] device_add+0x7b6/0xb50 [ 236.522297][ T9] usb_new_device+0xa39/0x16f0 [ 236.527055][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 236.532393][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.537634][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.542880][ T9] hub_event+0x2958/0x4a20 [ 236.547412][ T9] ? __pfx_hub_event+0x10/0x10 [ 236.552243][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 236.558115][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.563770][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 236.569545][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 236.575858][ T9] process_scheduled_works+0xae1/0x17b0 [ 236.581475][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.587568][ T9] worker_thread+0x8a0/0xda0 [ 236.592256][ T9] kthread+0x711/0x8a0 [ 236.596411][ T9] ? __pfx_worker_thread+0x10/0x10 [ 236.601509][ T9] ? __pfx_kthread+0x10/0x10 [ 236.606186][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.611383][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.616644][ T9] ? __pfx_kthread+0x10/0x10 [ 236.621268][ T9] ret_from_fork+0x4bc/0x870 [ 236.625978][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 236.631108][ T9] ? __switch_to_asm+0x39/0x70 [ 236.635904][ T9] ? __switch_to_asm+0x33/0x70 [ 236.640661][ T9] ? __pfx_kthread+0x10/0x10 [ 236.645278][ T9] ret_from_fork_asm+0x1a/0x30 [ 236.650160][ T9] [ 236.653240][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.660601][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 236.669714][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.679960][ T9] Workqueue: usb_hub_wq hub_event [ 236.685015][ T9] Call Trace: [ 236.688307][ T9] [ 236.691243][ T9] dump_stack_lvl+0x99/0x250 [ 236.695852][ T9] ? __asan_memcpy+0x40/0x70 [ 236.700453][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.705795][ T9] ? __pfx__printk+0x10/0x10 [ 236.710402][ T9] vpanic+0x237/0x6d0 [ 236.714479][ T9] ? __pfx_vpanic+0x10/0x10 [ 236.718993][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 236.724291][ T9] panic+0xb9/0xc0 [ 236.728020][ T9] ? __pfx_panic+0x10/0x10 [ 236.732460][ T9] __warn+0x334/0x4c0 [ 236.736453][ T9] ? firmware_fallback_sysfs+0x746/0x9b0 [ 236.742354][ T9] ? firmware_fallback_sysfs+0x746/0x9b0 [ 236.747992][ T9] report_bug+0x2be/0x4f0 [ 236.752336][ T9] ? firmware_fallback_sysfs+0x746/0x9b0 [ 236.758055][ T9] ? firmware_fallback_sysfs+0x746/0x9b0 [ 236.763809][ T9] ? firmware_fallback_sysfs+0x748/0x9b0 [ 236.769470][ T9] handle_bug+0x84/0x160 [ 236.773781][ T9] exc_invalid_op+0x1a/0x50 [ 236.778384][ T9] asm_exc_invalid_op+0x1a/0x20 [ 236.783232][ T9] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 236.789494][ T9] Code: e9 fb e9 5d fc ff ff e8 78 e1 e9 fb c6 05 d6 4d b2 09 01 48 c7 c7 80 e0 e8 8b e8 a5 f1 50 fb e9 85 fc ff ff e8 5b e1 e9 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 e1 e8 8b 4c 89 e2 e8 15 9f 55 fb e9 [ 236.809205][ T9] RSP: 0018:ffffc900000e6ab0 EFLAGS: 00010246 [ 236.815289][ T9] RAX: ffffffff85d69c35 RBX: dffffc0000000000 RCX: 0000000000100000 [ 236.823349][ T9] RDX: ffffc90016ad5000 RSI: 00000000000fffff RDI: 0000000000100000 [ 236.831322][ T9] RBP: 0000000000000001 R08: ffffffff8f9ed377 R09: 1ffffffff1f3da6e [ 236.839526][ T9] R10: dffffc0000000000 R11: fffffbfff1f3da6f R12: ffffffff8c3f9a80 [ 236.847740][ T9] R13: 0000000000001770 R14: ffff88807a7660b0 R15: 00000000fffffff5 [ 236.855840][ T9] ? firmware_fallback_sysfs+0x745/0x9b0 [ 236.861600][ T9] ? kmem_cache_free+0x19b/0x690 [ 236.866565][ T9] ? _request_firmware+0x6be/0x15b0 [ 236.871874][ T9] _request_firmware+0xf83/0x15b0 [ 236.877045][ T9] ? __pfx__request_firmware+0x10/0x10 [ 236.882543][ T9] request_firmware+0x36/0x50 [ 236.887236][ T9] go7007_loader_probe+0x4dc/0x6e0 [ 236.892370][ T9] ? __pfx_go7007_loader_probe+0x10/0x10 [ 236.898010][ T9] ? __pm_runtime_set_status+0x785/0xa50 [ 236.903653][ T9] usb_probe_interface+0x668/0xc30 [ 236.908788][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 236.914425][ T9] really_probe+0x26d/0x9e0 [ 236.918942][ T9] __driver_probe_device+0x18c/0x2f0 [ 236.924291][ T9] driver_probe_device+0x4f/0x430 [ 236.929367][ T9] __device_attach_driver+0x2ce/0x530 [ 236.934775][ T9] bus_for_each_drv+0x251/0x2e0 [ 236.939910][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 236.945868][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 236.951437][ T9] __device_attach+0x2b8/0x400 [ 236.956213][ T9] ? __pfx___device_attach+0x10/0x10 [ 236.961507][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 236.966919][ T9] bus_probe_device+0x185/0x260 [ 236.971812][ T9] device_add+0x7b6/0xb50 [ 236.976214][ T9] usb_set_configuration+0x1a87/0x20e0 [ 236.981725][ T9] usb_generic_driver_probe+0x8d/0x150 [ 236.987197][ T9] usb_probe_device+0x1c4/0x390 [ 236.992065][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 236.997440][ T9] really_probe+0x26d/0x9e0 [ 237.001955][ T9] __driver_probe_device+0x18c/0x2f0 [ 237.007343][ T9] driver_probe_device+0x4f/0x430 [ 237.012581][ T9] __device_attach_driver+0x2ce/0x530 [ 237.018149][ T9] bus_for_each_drv+0x251/0x2e0 [ 237.023001][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 237.028929][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 237.034423][ T9] __device_attach+0x2b8/0x400 [ 237.039206][ T9] ? __pfx___device_attach+0x10/0x10 [ 237.044504][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 237.049714][ T9] bus_probe_device+0x185/0x260 [ 237.054671][ T9] device_add+0x7b6/0xb50 [ 237.059016][ T9] usb_new_device+0xa39/0x16f0 [ 237.063796][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 237.069014][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.074228][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.079528][ T9] hub_event+0x2958/0x4a20 [ 237.084185][ T9] ? __pfx_hub_event+0x10/0x10 [ 237.089184][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 237.095023][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.100321][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 237.106313][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 237.112084][ T9] process_scheduled_works+0xae1/0x17b0 [ 237.117770][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 237.123950][ T9] worker_thread+0x8a0/0xda0 [ 237.128571][ T9] kthread+0x711/0x8a0 [ 237.133002][ T9] ? __pfx_worker_thread+0x10/0x10 [ 237.138118][ T9] ? __pfx_kthread+0x10/0x10 [ 237.142807][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.148182][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.153474][ T9] ? __pfx_kthread+0x10/0x10 [ 237.158161][ T9] ret_from_fork+0x4bc/0x870 [ 237.162860][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 237.168091][ T9] ? __switch_to_asm+0x39/0x70 [ 237.172982][ T9] ? __switch_to_asm+0x33/0x70 [ 237.177857][ T9] ? __pfx_kthread+0x10/0x10 [ 237.182991][ T9] ret_from_fork_asm+0x1a/0x30 [ 237.187819][ T9] [ 237.191149][ T9] Kernel Offset: disabled [ 237.195468][ T9] Rebooting in 86400 seconds..