last executing test programs: 12.887697522s ago: executing program 2 (id=2960): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0xffffffffffffffff, 0xa3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000), 0xc) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0xffffffffffffff09, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r10}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x10200, 0x0, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000500)={'\x00', 0x200, 0x530, 0xc, 0x9, 0x59c}) write$tun(r4, &(0x7f00000003c0)={@val={0x0, 0x1a}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @remote, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x0, 0x14, 0xf1, 0x66, 0x0, 0x9, 0x21, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x8, 0x27, 0x0, 0x4, [0x1]}]}}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x3, "d8b2b3", 0x3, "dd0138"}, "b4ce54a397f86a132b757be2d6a4bc02ec243229fc16bce3b4cdf3baa09de5f68ea11ea302415d0be40ef41695ebbd2c030dba3bb36cbbbe278a7686c3f177c9e9ea5d18f8cd34c095c24d344dce3080da154892c3fea4e787a7926c3a2b1a8cdfecbe5bfbad4811489d36aa87a5ce462dfd85aad53d9c0a86ab7df4b917951a0a482180caad7c00cf1b4c3651c1aca42caadfbd2a2d5a5112ecaa51f3e4e7996de0aa7a293fa40b2d06da97fafcdddbe44aebf4811d3ed99c3500cb9f9e80aa44392592a8"}}}}}}, 0x107) ioctl$SG_BLKTRACETEARDOWN(r11, 0x1276, 0x20000000) 11.957024239s ago: executing program 2 (id=2963): r0 = syz_io_uring_setup(0x5a07, &(0x7f0000000000)={0x0, 0x2, 0x20, 0x0, 0x1ed}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x5093, &(0x7f0000000100)={0x0, 0xbd21, 0x80, 0x0, 0x110}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x454180, 0x81) syz_io_uring_submit(r1, r3, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00'}) io_setup(0xff7, &(0x7f0000000300)=0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000340), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000380)={0x10001, 0x1, 0x1, "7d5beb00335cf494b1e929ec1aee666d3a4201f44e84b8f53b4c8309e85993c8", 0x32314d56}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000400)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x4, &(0x7f0000000440)=[{0x4, 0x1, 0x3, 0x5}, {0xfff7, 0xe, 0x7, 0x7ff}, {0x9, 0x0, 0xe, 0x9}, {0x2, 0x9, 0x1, 0x9}]}) r9 = syz_open_dev$video(&(0x7f00000004c0), 0x1, 0x151c80) ioctl$VIDIOC_QUERYCTRL(r9, 0xc0445624, &(0x7f0000000500)={0xc6bd, 0x3, "9fab8955bda6731ee7ab3e8442076a573426c3bd4bf72360238115ce93176014", 0x4, 0x2, 0x4, 0x9, 0x15bb37e06c901b28}) r10 = syz_open_dev$evdev(&(0x7f0000000580), 0x8, 0x101100) ioctl$EVIOCGPROP(r10, 0x80404509, &(0x7f00000005c0)=""/130) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000680)="0e6ba79f4f9a8c79de885338ec14d717bb409ccb2d962d3cf4007acec415b27fb24cfeb9d42ecafb82311d5d149a710d47335ea78485314faae5cca0f1d7b13a353ae80ccefcf6c2d40335481c72131a9f2f4022bc0a575b", 0x58) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) ioctl$TUNSETPERSIST(r11, 0x400454cb, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {r8}}, './file0\x00'}) fstat(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) r16 = getegid() setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000d80)=@nat={'nat\x00', 0x19, 0x3, 0x462, [0x200000000900, 0x0, 0x0, 0x200000000c1c, 0x200000000d32], 0x0, &(0x7f0000000780), &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x56, 0x19, 'rose0\x00', 'macvlan0\x00', 'syzkaller1\x00', 'gretap0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff], @local, [0xff], 0xee, 0x126, 0x15e, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x2, 0x197, 0x8f2, 0x2269a9b9, 0x2}}}, @owner={{'owner\x00', 0x0, 0x18}, {{r14, r15, r16, 0x0, 0x2, 0x4}}}], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0x10}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, 0xfffffffffffffffc}}}}, {0x9, 0x40, 0x600, 'vlan1\x00', 'gretap0\x00', 'ip6_vti0\x00', 'ip6erspan0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff], 0x11e, 0x156, 0x18e, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'syzkaller0\x00', {}, 'veth1_macvtap\x00', {0xff}, 0x11, 0x2}}}, @time={{'time\x00', 0x0, 0x18}, {{0x3, 0x8, 0x2c8c, 0x137b9, 0x200, 0x8}}}], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffd}}}], @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x19, 0x9200, 'virt_wifi0\x00', 'dvmrp0\x00', 'nicvf0\x00', 'veth0_to_batadv\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xae, 0xae, 0xe6, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x7}, {0x4}], 0x1, 0x1}}}], [], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x4da) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000000e00)) ioctl$FICLONE(r2, 0x40049409, r9) r17 = getpid() sched_setattr(r17, &(0x7f0000000e40)={0x38, 0x3, 0x41, 0x8, 0xffff, 0x8, 0x45, 0x7, 0x5, 0x7ff}, 0x0) bind$inet(r13, &(0x7f0000000e80)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r13, 0x0, 0x485, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000f40)=[&(0x7f0000000f00)={0x0, 0x0, 0x0, 0x8, 0x401, 0xffffffffffffffff, &(0x7f0000000ec0)="c80c36ceeed7479925447c88db770ce40537e1499f4d3df6", 0x18, 0x1, 0x0, 0x0, r13}]) 11.386035668s ago: executing program 2 (id=2965): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) landlock_restrict_self(r3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000001000)={0x0, "e02e65932931200f30c2fe3a26f9fca8d500000800", 0x5, 0x20, 0x4, 0xb708, 0x0, 0x2, 0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4a18f722c88e7e56dc4501b4a79e76023b92295c436e6ae5fce93f9165bef77047b607f0addda179b59773e54dd93544e4f7abca47d5c5eff18d66d3b02d276e255fbdd2ab8c6843000000000000000000", @ANYRES16=r6, @ANYBLOB="050026bd7000fedbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000000800178004000400"], 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r9 = signalfd(0xffffffffffffffff, 0x0, 0x0) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905) close(r10) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fcntl$setstatus(r9, 0x4, 0x2c00) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r10], 0x0) 11.315269626s ago: executing program 1 (id=2966): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x0, 0x465, &(0x7f0000000080)={{0x12, 0x1, 0x100, 0x64, 0x6b, 0x6b, 0x10, 0x499, 0x5008, 0x7773, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x453, 0x2, 0x3, 0x92, 0xd0, 0x0, [{{0x9, 0x4, 0xec, 0x8, 0x3, 0xb7, 0xcf, 0x60, 0x2, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "e767"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x5, 0x5}, [@mdlm_detail={0x100, 0x24, 0x13, 0x3, "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"}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x1ff, 0xd, 0xa2, 0x80, 0x8}, @acm={0x4, 0x24, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x6}, @acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7f}]}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x6, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb8, 0x5}]}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x9, 0x7, 0x83}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x5, 0x6, 0x9}}]}}, {{0x9, 0x4, 0x79, 0xc, 0x9, 0x3b, 0x53, 0x5f, 0x9, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "c1da16"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x1, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9f}, @ncm={0x6, 0x24, 0x1a, 0x9}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xdfec}]}], [{{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x2, 0x9, 0xab}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x0, 0xd6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd0, 0xd}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x72, 0x6, 0x0, [@generic={0x2a, 0x11, "cfcf09fb55c6d3c9219e81363d0830f5e77efeae6a1e3d240d21621083924e9a5d64b65d41b68dfc"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x9, 0xf4, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xfff7}, @generic={0x97, 0x28, "2ef26410a89df9ce6dcbeefbac8f2cb9e3c519b599369287cc59ba47108f280fa380096d0a16696d4c67660fe5da019735b05815392a9c4e7b261955b2cd959a31403cab94ce92f21d9da6f6d315e53424496a4046d886d6b4f91ed2e2f6ed3ae28da57121d1da822f0bfa42229b7aac2ddf010553c6ce3c6f45125540764894bdaa0cd5ebe10bf37a5f6a278efa3193397bfc0b6d"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x89, 0x4, 0x40}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x7f, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xfff9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xfffd}]}}, {{0x9, 0x5, 0x80, 0x12, 0x20, 0x6, 0x7, 0x2, [@generic={0x5f, 0x2, "fd4ebcd405d83a73e3b5bc59b73b48ca0cc5378bb597b506d798b1fd2dce71c89f53acade826f6bf6b9b2102cf81d46879d87a59062631e251cf7abfc300c6fd92aecc1fa01d8f1b8885cfcfad2f9035b814fdc3d3865e80322661c219"}, @generic={0xf8, 0x21, "2a88dd115d3e1a985be0e20df931c3fef0a14cbf6e1bf1f62e8be9d5827458a709c1e02d72ee9c25ddf9edc5084582801c5f1b1978fa7b0e59f883e3d7adb5ca1fbf5d6982bb4d2eaef528b90f5e0d31eabb535f8d537e2e9257327182f4dba6cd056ee18566118783eae78554d36999b34e8ccb6a9aba400bb6cc63f3e609c653e8406606f13073ed243f55bc542cc3cae27c334faff4cdc5ef743a9503744a582c7a085c4e66a705f1caaedb0568905f00686548c565f6b00ab695fac0e41be25098cbf04d4a34bf553d215a9bbc3d1036993f74092b1939ef20cfe0e75f3307bd6793a9e4b3ea5f4f4223ac037fec35b8c05bc431"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x9, 0xf7, 0x9}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x9, 0x38, 0x3, 0x20, 0xb9}, 0x22, &(0x7f0000000540)={0x5, 0xf, 0x22, 0x1, [@generic={0x1d, 0x10, 0x1, "ba6ab64e7eea7806b835f81bb886fed18725735abb6862eb5eae"}]}, 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1001}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001bae", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0xff, {[@mptcp=@capable={0x1e, 0xc, 0x9, 0x8, 0x5, 0x44}]}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 9.167332766s ago: executing program 0 (id=2969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)="6468af3c278a09f48b05c18f57de82a9b6dc01c1805c01802874818797180beb19f0b65eb0424f5c144beccc4debe629168af874b51248f64adb47", 0x3b}, {&(0x7f0000000780)="2916b8f703a3bec5e7e93c8c09e315e34bdf23c260c92409e0a56e20d887ce4322fd37eef9cedb960ec2e7312e7c3fc77b0613c66b82bff006145a22b321854925dab654a2", 0x45}], 0x2}}], 0x1, 0x801) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) 8.768653891s ago: executing program 0 (id=2970): syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) syz_io_uring_setup(0xb97, &(0x7f0000000480)={0x0, 0xffbfffff, 0x100, 0x2, 0x18c}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x185801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010200000000ce0000000000000000140007800800010006000000050005000a00000013000300686173683a6e65742c696661636500000900020073797a310000000005000400030000"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x41045508, &(0x7f0000002600)={0x8, 0x3, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222003472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2eef28def4b73905ca14d90d1f600"}) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000000)="e3f6675e3b2e3e", 0x7}, {0x0}, {&(0x7f0000000200)="856d6acd75cdb56b0725f28c36159acce55f25885f", 0x15}, {&(0x7f0000000580)="90f280c274bcad62f499afbe20f4d9459c29fbeaaa46875ea948bb9d290fb3a6800e9ba1b2b59017689d9b57826bbe5c0fc31dce21d4158d68af917e06c49e8fe506a08010326c7c789466b7a970924b58bf135ad256286ab8928f87a628fd0880fb1236d228fbfa9a83487862ca29942ce4834518b29dff215d793d3b66265adb786b6a8646e99b4282f0c2940deb1baa8eb8f52d7ba9", 0x97}], 0x4) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="0056040000005fe79a52"], 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x2, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.328023078s ago: executing program 1 (id=2972): syz_usb_connect(0x1, 0x2d, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}}], 0x1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf25080001000100000008000100020000000800010002000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0200000000000000440012800b0001006970766c616e00003400028006000200020000000600010000000000060002000100000006000100010000000600020001000000060001000100000008000300418cdba9ed304c9b70bd191f03fd964d69b8905b6dc324ca3555452524ed0fc9a1c9ec067714fbd5de11c2f0d8e585eec56edbed6e03217e94ed3b0e8ec1c2da0e4d7ef7923007211084a117f53bb7051dabaaf4ea3aadc5b2365126eb3cf01903b2d21bfe0971c87783ec846b762a95cf0576e051b0ce6a9e61204f9cccf98d7b0d17defea28bec8cfe545fe078763dea474cd6e263bf53ac56115c95", @ANYRES32=r6, @ANYBLOB], 0x6c}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x27, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}}) syz_io_uring_setup(0x6170, &(0x7f0000000340)={0x0, 0xcded, 0x2, 0x3, 0x333}, &(0x7f0000000200), &(0x7f0000ff4000)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x30, 0x18, 0x301, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @loopback={0x40000}}]}, 0x30}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 7.731731671s ago: executing program 1 (id=2975): setxattr$incfs_metadata(&(0x7f0000000800)='./file1\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './cgroup\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220180018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000bf030000000000008500000013000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100), 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x0, 0x14, 0x6, "ccf4ff46c1a1"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r0, &(0x7f0000000600), 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000004c0), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth1\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x0) 7.38080894s ago: executing program 2 (id=2976): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x402000, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[], 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats\x00') getpid() openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 6.063101366s ago: executing program 1 (id=2977): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) 5.88157754s ago: executing program 3 (id=2978): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x747fc824, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x1}) syz_open_dev$vim2m(&(0x7f00000002c0), 0x747fc824, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x1}) (async) 5.572916528s ago: executing program 0 (id=2979): syz_usb_ep_write(0xffffffffffffffff, 0x3, 0x4, &(0x7f0000000100)="6eb61887") socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000300)={r8, 0x8000000, 0x0, 0x4, 0x0, [], [0x0, 0x0, 0x0, 0xffffff00], [0x1ff, 0x0, 0x9], [0x1]}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, 0x0, 0x108) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000140)=0x99ab) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) close_range(r2, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x1ce6, &(0x7f0000000140)={0x0, 0xaee2, 0x8000, 0x0, 0xbfdfffff}, 0x0, &(0x7f0000000280)) 5.572638176s ago: executing program 3 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r2, 0x2004, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x80000000, 0x18001001, 0x7f, 0x8, 0x4, 0x6, 0x0, 0x0, 0x0, 0x1}}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) 5.497632843s ago: executing program 4 (id=2981): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file3\x00', 0x3410c2, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) r4 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.::/', 0x0) rename(&(0x7f0000000280)='./file1/file3\x00', &(0x7f0000000100)='./file1\x00') getdents64(r3, &(0x7f0000000040)=""/42, 0x2a) getdents64(r3, 0xfffffffffffffffe, 0x29) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r6, 0x2881f000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffee0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = socket(0x840000000002, 0x3, 0x100) socket$inet(0x2, 0x2, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r8], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4040084) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x10) 5.078554239s ago: executing program 3 (id=2982): unshare(0x6a040000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x421}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0xff, 0x1, 0x0, 0x6a}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="83450500010000001c0012eb3d7eb6dd20c5c465766500000c00028005000c00010000003a2d873a1ef28a63c150470240a19b8bbca05a497dd020f7a92af618f92632e4be609add5394368e6896df3c1a7c6cfbe73966b5228af0ee534e27a41631eda6a8dd65be2ee319bab72707cafbe071403ed558c710e7d6b544c3f3b308e0372676c5b436e0da0bbdf1d6bed0c1e67a69f8dd2cd435cb367048ce24"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x1, 0x810) 4.89682605s ago: executing program 4 (id=2983): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09080000000000000000020000000900020073797a310000000008000440020000000900010073797a30000000000800034000000004140000001100010000000000000000000000000a1717509d30f85e2db52d0e459dfed9a95889b1b4ebc97e3958efc2bd47dad4039f107ee8045b32160f1779"], 0x64}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x2004011) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x1b3, 0x2) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000340)=0x5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r7 = syz_open_procfs(r4, &(0x7f00000002c0)='net/udp\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) socket$netlink(0x10, 0x3, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) 3.902981446s ago: executing program 4 (id=2984): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) dup3(r0, r2, 0x0) 3.897626947s ago: executing program 2 (id=2985): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2, "2111e96f"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x1, "ab38b0f0"}]}}, 0x0}, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000022c0)=0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x5, 0x7, 0xc, 0x0, 0xfffffffffffffffe, 0xfffffffe}, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && '], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000004c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r10, r10, 0x0, 0x200000) 3.665050179s ago: executing program 4 (id=2986): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000780)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000740)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x721401, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r6, 0x1000, &(0x7f0000001540)=""/4096}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000300)={0x28, 0x0, r6, 0x1000, &(0x7f0000000800)=""/4096}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r7, 0xc, 0x3f369d9d, 0xb) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x2000004}, {0x0, 0x109003ff}, 0x6, 0x6}) syz_usb_connect(0x0, 0x25c, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/78, 0x4e}], 0x2) 3.458344022s ago: executing program 1 (id=2987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000019000100000000000000000080"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x80000}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000240), &(0x7f0000000140), 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1250e2, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x0, 0x1}) io_setup(0x2004, &(0x7f0000000680)) 2.860667598s ago: executing program 3 (id=2988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x24810}, 0x2000c040) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0) 2.416814119s ago: executing program 3 (id=2989): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c0000000097ffffff00000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c00000000000000000000000700"/36], 0x40}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9b0224c742601eba, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.49326696s ago: executing program 0 (id=2991): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc3) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000001640)={'pimreg\x00', @ifru_map={0x1, 0x7fff, 0x1, 0xcc, 0xfd, 0x9}}) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x1) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0x10000008}) 1.34825792s ago: executing program 0 (id=2992): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x10, 0xffffffffffffffff, 0xb618000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x505000, 0x110) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={@desc={0x1, 0x0, @auto="008f6ce2e4393a46"}}) mknod(&(0x7f00000000c0)='./file0\x00', 0x1, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000001780)={&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000600)=""/213, 0xd5}], 0x8, &(0x7f0000000780)=""/4096, 0x1000}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0xac, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9b05, 0x67}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc5c0}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x44f}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4bf}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004804) sendmsg$nl_generic(r2, &(0x7f0000002ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000001980)={0x10f4, 0x3a, 0x400, 0x70bd2b, 0x25dfdbfc, {0xc}, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@loopback}, @generic="dcf3eecac3ea3a78e64332fdee64f79d4a17fd2d0912fb5c9b4af5a7363c6c53d8a022a8cfe4e5d495186e9b3fe998520b6364b2621beefb326d29add9db19114c0d0940bcbdfdba2b9457902e8fcd3696461c69f893776ac400e32db5e2c6af26c5d44a7b5db4071f39d8335c8142376b05470b88e97173831cd34908af3dda37fe7b19804ed8dd9d2af35d9c0086b00586241f4fbbb3fb8714b11642a5710df89b4c64439b49361e5749eb628c5dafe89bb635675ae0c6157e05e2c4e8d54fc99a", @typed={0x4, 0x14}, @typed={0x1004, 0x102, 0x0, 0x0, @binary="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"}]}, 0x10f4}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4000) syz_emit_ethernet(0xfa, &(0x7f0000002b00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @random="53135af20475", @void, {@ipv4={0x800, @dccp={{0x21, 0x4, 0x2, 0x20, 0xec, 0x68, 0x0, 0x2, 0x21, 0x0, @empty, @multicast2, {[@end, @lsrr={0x83, 0x7, 0xef, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x2, 0xd, "8aea55d126b0acf7bb0e06"}, {0x1, 0x12, "d9e08af37bbbcf0b515c96e298eaa960"}, {0x7, 0x4, "fb1b"}, {0x5, 0xd, "f2f5e770d21531f00119c3"}]}, @timestamp_prespec={0x44, 0x24, 0x8, 0x3, 0x3, [{@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x2304e53}, {@multicast1, 0xfffffffd}]}, @generic={0x94, 0xe, "29b4268b0717499ba37cccf9"}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x4, 0x2, "f03273", 0xc5, "f1b241"}, "fd59ec1a3af8bf45a050fc5591fca1d982e62f1d2fc4215a404bfa2617e741eb635cc8632a4a359058b22438e0e2c125db23585455dc71fd06512a9fe6778dc6540aa953a5bce02a01b3727b8cb2e4f8007678fb0037d975"}}}}}, &(0x7f0000002c00)={0x1, 0x1, [0xf80, 0x6e7, 0xcf0, 0x959]}) lsetxattr$security_capability(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80), &(0x7f0000002cc0)=@v1={0x1000000, [{0xcecf, 0x200}]}, 0xc, 0x2) syz_open_dev$loop(&(0x7f0000002d00), 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002d40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000002d80)='cpu.stat\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e00), r2) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e40)={0xfc, r5, 0x400, 0x70bd26, 0x694a, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xcc, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffff7}}, {0x94, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8f, 0x2, "d0970080e1af370272990655e9d78a4d90973dfee2c0114a07209bbfa7cd95c4e6bbb5835d696010af8333fa10969c4445e7b317b668efe2c84f1391cb7a181bc8d0f4c4050e71fbf6212e71b63846a3bfd76c7fb625b3284b90fa7bd0ccf478f16d94d512a2faf54a885b3ee5a1fcafb66dc59bec65f5e45df4d355b5145d2b8248c3b6991b25bb893080"}}, {0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x21, 0x1, "b725bf9e5f030199eba9ae1e39ef5a34c10d40e6a5d2c127ce89689d01"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000002fc0)=@generic={0x3, 0x6, 0x1}) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003400)={0x0, &(0x7f0000003080)=[@code={0x1, 0x3d, {"f2a73e0f300f0765480fc72a0f01c4c4a28ddca625badb85660f38820ec4e111d1d56567664181f200880f08"}}, @code={0x1, 0x5f, {"c4e1782e64480d66baf80cb86005a683ef66bafc0ced0f20d835200000000f22d864660f17350500000026400f01cf410f01749125c4c22d93bc2223c4000066460f3825db440f07c441fa167702"}}, @code={0x1, 0x50, {"0fc79f0a620000c401f82eb600000000420f01c3260f1c5c6fe9f3410f0966ba4100b800400000ef660f388230660f38823e66b874008ec066ba4200b000ee"}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x5a, {"450f2c9e00000100430f01f8dfc6440f01eec44125ee020f21afc7442400c3a90000c74424021538fe19c7442406000000000f011c246540de6d4566ba410066b8efff66ef260fc72a"}}, @code={0x1, 0x6a, {"652666daba060000000f01c30f07c744240000700000c74424020000c0fec7442406000000000f011424400f300f01c8640f23dc0f785b01c4427d5916c744240004000000c744240200000000c7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0xd8}, @uexit={0x0, 0x18, 0xc9d}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x1000}, @code={0x1, 0x71, {"66baf80cb85629e88aef66bafc0c66edc17a2da2c786f0240000cc0000000f0096070000000f015b00f20f4eb90001c0fe65410fc73da348000066430f383f84ad0600000066400f3880b800000000b949090000b8e2cc976dba000000000f30"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x2}], 0x359}) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000003440)={{r7}, "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"}) io_uring_enter(r4, 0x7afc, 0x4f84, 0x8, &(0x7f0000004440)={[0xbca]}, 0x8) r8 = fsmount(r4, 0x0, 0x74) read$FUSE(r4, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r8, &(0x7f00000064c0)={0x18, 0x0, r9, {0x9e1}}, 0x18) readlink(&(0x7f0000006500)='./file0\x00', &(0x7f0000006540)=""/135, 0x87) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000006680)='./file0\x00', &(0x7f00000066c0)={0x202, 0x0, 0xc}, 0x18) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000006600)='\x00', &(0x7f0000006640)='./file0\x00', r10) chroot(&(0x7f0000006700)='./file0\x00') 1.040933451s ago: executing program 0 (id=2993): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) unshare(0x48060600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000780)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce) unshare(0x30040080) 779.704376ms ago: executing program 1 (id=2990): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12011900cef8bd08410e424176bc0102030109021b00010000000009040002016a2ff6000905010c389b750864"], 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x9, 0xfffffffb}) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0003040006c90004030705001289474a413e6d4a9600000000000000003d2acb027fabab1fccaf65e974038e292fd57a94a4c18708d86f37ea4e750382a390bdc4e8d23a850554cc89c1d77150f210e7545af6c501fd289a38aca8bd3248b9bd571188805664bba3c598747e68ad6a25c38583dd5b9df0cbfbe909946e8db4780fa2f0d519d0a3d23aef97234161998de30b6666364e33283b914561700447a2ce920000"], &(0x7f0000000200)=ANY=[@ANYBLOB="2a002210f5ff0102abaaacaff6899e1a625ec97d58d3", @ANYRES16], &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x15a}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)=ANY=[@ANYRESOCT=r3], &(0x7f0000000140)={0x20, 0x3, 0x1, 0x5}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f00000001c0)) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x4, 0x0, 0x2000, &(0x7f0000996000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) open_by_handle_at(r6, &(0x7f0000001840)=ANY=[@ANYRES8=r9, @ANYRES8=r5, @ANYRES16=r0, @ANYRES64=r7], 0x8040) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) (async) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0x80a0000, 0x118000}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r7], 0x28}}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000206b1d01014000010203010902930003010900040904000000010100000a240101000e0201020d2407050100014c8d3ca75ddc0c240704010006f01fc273da0c2402050302010807000206090401000001020000090402000101020000090501094000070805072501007f050009040200000102000009040201"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 690.293077ms ago: executing program 2 (id=2994): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c01020301090212000100000000090400000091b0e2001f43daaca26c8b2034afda84d94fe46885fcf2"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 591.448036ms ago: executing program 4 (id=2995): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = dup(r4) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000000)={0x7, 0xfffb, 0x1, 0x1, 0x1, "8cd373f12210c706"}) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003000000000000001c7d7c2108000300", @ANYRES32=r3], 0x2c}}, 0x0) 1.025455ms ago: executing program 3 (id=2996): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', 0x800}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000080)=ANY=[@ANYBLOB="6b0ee0b3d41b1bc916422af3c259ab00000000b5904da8679e92bcac62704952241d7baeb79bb47332120a00e55b8fa4fbbeab15a99edd88b70549d5b07a32f472daf2bbee650f0b384ba65f9a055c15bb9765f62dff7e63b477385e3ce31d05d242ec3adbcb184b06ac974b81b277c4247d30e0db4ae7c831b78b79bd1f6e5a78f09c903cf08ab503"]) 0s ago: executing program 4 (id=2997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x8}, {0xfffe, 0x1}, {0x0, 0xffe8}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0x7c}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x4, 0x20000005, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x408c004}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0xfffffffffffffebf, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x98}}, 0x0) kernel console output (not intermixed with test programs): .517044][ T978] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 794.582977][ T978] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 794.594023][ T978] usb 4-1: can't read configurations, error -22 [ 794.600570][ T6718] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 794.631572][ T978] usb usb4-port1: unable to enumerate USB device [ 794.811587][ T6718] usb 2-1: Using ep0 maxpacket: 16 [ 794.843476][ T6718] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 794.853162][ T6718] usb 2-1: config 4 has no interface number 0 [ 794.860967][ T6718] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 794.870945][ T6718] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 794.881220][ T6718] usb 2-1: config 4 interface 9 has no altsetting 0 [ 794.898861][ T6718] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 794.932540][ T6718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.957375][ T6718] usb 2-1: Product: syz [ 794.961805][ T6718] usb 2-1: Manufacturer: syz [ 795.011135][ T6718] usb 2-1: SerialNumber: syz [ 795.155887][T20522] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 795.168093][T20522] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 795.290596][ T6718] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 795.445409][T18153] usb 2-1: Failed to submit usb control message: -71 [ 795.453080][ T6718] usb 2-1: USB disconnect, device number 103 [ 795.462704][T18153] usb 2-1: unable to send the bmi data to the device: -71 [ 795.515384][T18153] usb 2-1: unable to get target info from device [ 795.548146][T18153] usb 2-1: could not get target info (-71) [ 795.579980][T18153] usb 2-1: could not probe fw (-71) [ 796.033547][T20550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2462'. [ 796.110871][T20550] netlink: 'syz.4.2462': attribute type 1 has an invalid length. [ 796.387139][ T5917] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 796.562324][T20589] x_tables: duplicate underflow at hook 1 [ 796.588849][T20593] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 796.609489][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 796.632264][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.692126][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 796.708326][ T5917] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 796.727381][ T5917] usb 2-1: Manufacturer: syz [ 796.738405][ T5917] usb 2-1: config 0 descriptor?? [ 796.764553][ T5917] hub 2-1:0.0: USB hub found [ 796.797254][ T6718] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 796.949984][ T5917] hub 2-1:0.0: 1 port detected [ 796.974583][ T5917] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 796.981409][ T5917] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 797.003649][ T6718] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 797.049054][ T6718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.063842][ T6718] usb 5-1: Product: syz [ 797.098854][ T6718] usb 5-1: Manufacturer: syz [ 797.134713][ T6718] usb 5-1: SerialNumber: syz [ 797.223991][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 797.240407][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 797.290633][ T5917] usb 2-1: USB disconnect, device number 104 [ 797.315987][ T6718] usb 5-1: config 0 descriptor?? [ 798.367945][ T6718] usb 5-1: non-Atmel transceiver xxxx0008 [ 798.576801][ T6718] usb 5-1: Firmware version (0.0) predates our first public release. [ 798.612700][ T6718] usb 5-1: Please update to version 0.2 or newer [ 798.639804][ T6718] usb 5-1: atusb_probe: initialization failed, error = -19 [ 798.693907][ T6718] usb 5-1: USB disconnect, device number 65 [ 798.985955][T20667] syz.3.2476 (20667): attempted to duplicate a private mapping with mremap. This is not supported. [ 799.030507][T20667] fuse: Unknown parameter '0xffffffffffffffffÿÿ' [ 799.149803][T20672] libceph: resolve '0..' (ret=-3): failed [ 801.057098][ T5917] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 801.119817][T20742] macvlan2: entered promiscuous mode [ 801.125189][T20742] macvlan2: entered allmulticast mode [ 801.160260][T20742] input: syz0 as /devices/virtual/input/input68 [ 801.230967][ T5917] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 801.254724][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.266792][ T5917] usb 4-1: Product: syz [ 801.271632][ T5917] usb 4-1: Manufacturer: syz [ 801.276410][ T5917] usb 4-1: SerialNumber: syz [ 801.290188][ T5917] usb 4-1: config 0 descriptor?? [ 801.299771][ T5917] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 801.309579][ T5917] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 801.318288][ T5917] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 801.499351][ T6718] usb 4-1: USB disconnect, device number 80 [ 801.927265][ T5885] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 802.117419][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 802.130392][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.142627][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.153390][ T5885] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 802.174668][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.194607][ T5885] usb 5-1: config 0 descriptor?? [ 802.199997][ T6718] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 802.369158][ T6718] usb 2-1: Using ep0 maxpacket: 8 [ 802.376794][ T6718] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 802.392608][ T6718] usb 2-1: config 2 has no interfaces? [ 802.399572][ T6718] usb 2-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 802.413911][ T6718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.674291][ T5885] samsung 0003:0419:0001.003E: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 802.691995][ T6718] usb 2-1: string descriptor 0 read error: -71 [ 802.700633][ T6718] usb 2-1: USB disconnect, device number 105 [ 802.727000][ T5917] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 802.863941][T20775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.872796][T20775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.880889][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 802.885822][T20775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.892870][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 802.896558][T20775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.906815][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 802.920116][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 802.920132][ T30] audit: type=1326 audit(1747653377.683:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.4.2491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb862d8e969 code=0x0 [ 802.925900][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 802.952445][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.968930][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 802.980133][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 802.996615][ T5917] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 803.005781][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.013933][ T5917] usb 4-1: Product: syz [ 803.018426][ T5917] usb 4-1: Manufacturer: syz [ 803.023064][ T5917] usb 4-1: SerialNumber: syz [ 803.030051][ T5917] usb 4-1: config 0 descriptor?? [ 803.448570][ T5917] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 803.507123][ T5917] input input69: Device does not respond to id packet M [ 803.928535][T20839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.939220][T20839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.531199][ T5917] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 804.552638][ T5917] input input69: Device does not respond to id packet P [ 804.570989][ T5917] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 804.596632][ T5917] input input69: Device does not respond to id packet B [ 804.607397][ T5917] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 804.613501][ T5917] input input69: Device does not respond to id packet N [ 804.622365][ T5917] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 804.633094][ T5917] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 804.641011][ T5917] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 804.648980][ T5917] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 804.664325][ T5917] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input69 [ 804.706498][ T5920] usb 5-1: USB disconnect, device number 66 [ 805.272128][T20889] kvm: pic: non byte read [ 805.491731][T20897] fuse: Bad value for 'fd' [ 806.184191][ T5885] usb 4-1: USB disconnect, device number 81 [ 806.333181][T20941] netlink: 'syz.2.2510': attribute type 5 has an invalid length. [ 806.382418][T20948] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2512'. [ 806.466665][T20948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.771457][T20982] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 807.240684][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'. [ 807.250245][ T5917] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 807.454939][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 807.617198][ T6718] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 807.647202][ T5917] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 807.655379][ T5917] usb 4-1: config 0 has no interface number 0 [ 807.666625][ T5917] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 807.684841][ T5917] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 807.701798][ T5917] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 807.716612][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.728702][ T5917] usb 4-1: Product: syz [ 807.732906][ T5917] usb 4-1: Manufacturer: syz [ 807.737857][ T5917] usb 4-1: SerialNumber: syz [ 807.760744][ T5917] usb 4-1: config 0 descriptor?? [ 807.766417][T20957] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 807.779363][ T6718] usb 5-1: Using ep0 maxpacket: 16 [ 807.784183][ T5917] smsc95xx v2.0.0 [ 807.787166][ T6718] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 807.815118][ T6718] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 807.835377][ T6718] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 807.860803][ T6718] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.870637][ T6718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.879056][ T6718] usb 5-1: Product: syz [ 807.883391][ T6718] usb 5-1: Manufacturer: syz [ 807.889067][ T6718] usb 5-1: SerialNumber: syz [ 807.976363][T20957] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 808.185046][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 808.326147][ T6718] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 808.397717][ T5917] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 808.426057][ T5917] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 808.456018][ T5917] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 808.493429][ T5917] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 808.506465][ T5917] usb 4-1: USB disconnect, device number 82 [ 808.613706][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.620397][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.644560][T21035] netlink: 'syz.0.2525': attribute type 5 has an invalid length. [ 808.843958][T21035] ip6erspan0: entered promiscuous mode [ 809.277118][T21056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2527'. [ 810.689705][ T6718] usb 5-1: USB disconnect, device number 67 [ 810.934828][ T6835] udevd[6835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 811.207367][ T6718] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 811.427264][ T6718] usb 5-1: Using ep0 maxpacket: 16 [ 811.446737][ T6718] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 811.460395][ T6718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.499930][ T6718] usb 5-1: Product: syz [ 811.504236][ T6718] usb 5-1: Manufacturer: syz [ 811.517572][ T6718] usb 5-1: SerialNumber: syz [ 811.536742][ T6718] usb 5-1: config 0 descriptor?? [ 811.876961][ T5917] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 811.976795][T21123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2533'. [ 812.051353][ T5917] usb 4-1: config 0 has no interfaces? [ 812.081041][ T5917] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 812.192231][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.212535][ T5917] usb 4-1: Product: syz [ 812.230901][ T5917] usb 4-1: Manufacturer: syz [ 812.248506][ T5917] usb 4-1: SerialNumber: syz [ 812.273837][ T5917] usb 4-1: config 0 descriptor?? [ 812.277355][ T6718] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 813.727090][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 813.820530][ T5920] usb 5-1: USB disconnect, device number 68 [ 814.946640][ T6718] usb 4-1: USB disconnect, device number 83 [ 815.296494][T21223] netlink: 'syz.4.2546': attribute type 1 has an invalid length. [ 815.318998][T21223] netlink: 'syz.4.2546': attribute type 10 has an invalid length. [ 815.327076][T21223] syz_tun: entered promiscuous mode [ 815.337963][T21223] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 815.347739][T18154] bond0: (slave syz_tun): interface is now down [ 815.356539][T21222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2545'. [ 815.367574][T18158] bond0: (slave syz_tun): interface is now down [ 815.388277][T21223] xt_TPROXY: Can be used only with -p tcp or -p udp [ 815.485390][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2546'. [ 815.653725][T18158] bond0: now running without any active interface! [ 816.454656][T21242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2548'. [ 817.297306][ T5885] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 817.457224][ T5885] usb 4-1: device descriptor read/64, error -71 [ 817.836920][ T5885] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 818.017300][ T5885] usb 4-1: device descriptor read/64, error -71 [ 818.147764][ T5885] usb usb4-port1: attempt power cycle [ 818.292924][T21290] netlink: 'syz.4.2556': attribute type 13 has an invalid length. [ 818.343242][T21295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.567082][ T5885] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 818.700921][ T5885] usb 4-1: device descriptor read/8, error -71 [ 818.956951][ T5885] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 818.978203][ T5885] usb 4-1: device descriptor read/8, error -71 [ 819.054801][T21290] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.088574][ T5885] usb usb4-port1: unable to enumerate USB device [ 819.150679][T21290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 820.566982][ T5920] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 820.749624][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.761838][ T5920] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 820.772613][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.792716][ T5920] usb 4-1: config 0 descriptor?? [ 820.819166][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 821.297859][ T5920] pwc: recv_control_msg error -32 req 02 val 2b00 [ 821.337220][ T5920] pwc: recv_control_msg error -32 req 02 val 2700 [ 821.347872][ T5920] pwc: recv_control_msg error -32 req 02 val 2c00 [ 821.355265][ T5920] pwc: recv_control_msg error -32 req 04 val 1000 [ 821.368128][ T5920] pwc: recv_control_msg error -32 req 04 val 1300 [ 821.400062][ T5920] pwc: recv_control_msg error -32 req 04 val 1400 [ 821.577466][ T5920] pwc: recv_control_msg error -32 req 02 val 2000 [ 821.584912][ T5920] pwc: recv_control_msg error -32 req 02 val 2100 [ 821.605723][ T5920] pwc: recv_control_msg error -32 req 04 val 1500 [ 821.625330][ T5920] pwc: recv_control_msg error -32 req 02 val 2500 [ 821.671952][ T5920] pwc: recv_control_msg error -71 req 02 val 2400 [ 821.713962][ T5920] pwc: recv_control_msg error -71 req 02 val 2600 [ 821.730741][ T5920] pwc: recv_control_msg error -71 req 02 val 2900 [ 821.741869][ T5920] pwc: recv_control_msg error -71 req 02 val 2800 [ 821.750054][ T5920] pwc: recv_control_msg error -71 req 04 val 1100 [ 821.757530][ T5920] pwc: recv_control_msg error -71 req 04 val 1200 [ 821.767948][ T5920] pwc: Registered as video103. [ 821.799796][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input70 [ 821.873195][ T5920] usb 4-1: USB disconnect, device number 88 [ 824.348404][T21281] syz.4.2556 (21281): drop_caches: 3 [ 824.947014][T21420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.417201][ T5920] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 825.726971][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 825.737745][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 825.749010][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 825.761162][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 825.781421][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 825.857631][ T5920] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 825.867017][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.878856][ T5920] usb 2-1: Product: syz [ 825.883024][ T5920] usb 2-1: Manufacturer: syz [ 825.889517][ T5920] usb 2-1: SerialNumber: syz [ 825.896263][ T5920] usb 2-1: config 0 descriptor?? [ 825.913097][ T5920] cypress_m8 2-1:0.0: HID->COM RS232 Adapter converter detected [ 825.924189][ T5920] cyphidcom ttyUSB0: required endpoint is missing [ 827.607113][ T5888] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 827.788534][ T5888] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 827.802354][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 827.845578][ T5888] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 827.865788][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 827.902964][ T5888] usb 4-1: Product: syz [ 827.913020][ T5888] usb 4-1: Manufacturer: syz [ 827.926459][ T5888] usb 4-1: SerialNumber: syz [ 827.944783][ T5888] usb 4-1: config 0 descriptor?? [ 827.961177][ T5888] usb 4-1: selecting invalid altsetting 0 [ 828.292405][T21484] kvm: pic: non byte write [ 828.487474][T21491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.497780][T21491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.937591][ T6718] usb 2-1: USB disconnect, device number 106 [ 828.945832][ T6718] cypress_m8 2-1:0.0: device disconnected [ 829.228930][ T30] audit: type=1326 audit(1747653404.003:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21511 comm="syz.2.2586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73a298e969 code=0x0 [ 829.637331][ T6718] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 829.848979][ T6718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 829.860753][ T6718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.892489][ T6718] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 829.911788][ T6718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.930159][ T6718] usb 2-1: config 0 descriptor?? [ 830.428028][ T6718] waltop 0003:172F:0037.003F: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.1-1/input0 [ 830.925760][ T52] usb 4-1: USB disconnect, device number 89 [ 831.597302][ T5885] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 831.800832][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.823829][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 831.862267][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 832.164773][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 832.210475][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 832.240437][ T5885] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 832.254290][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 832.274323][ T5885] usb 5-1: Product: syz [ 832.295820][ T5885] usb 5-1: Manufacturer: syz [ 832.315480][ T5885] usb 5-1: SerialNumber: syz [ 832.336163][ T5885] usb 5-1: config 0 descriptor?? [ 832.558320][ T5885] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 832.620687][ T5885] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 832.724877][ T5885] usb 5-1: USB disconnect, device number 69 [ 835.207657][T21637] netlink: 'syz.0.2604': attribute type 11 has an invalid length. [ 836.000085][ T5885] usb 2-1: USB disconnect, device number 107 [ 836.971630][T21694] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 21694 comm: syz.2.2614) [ 836.990767][ T5833] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 837.058630][ T30] audit: type=1800 audit(1747653411.793:2629): pid=21694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2614" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=65806 res=0 errno=0 [ 837.675754][ T5885] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 837.865860][T21712] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2617'. [ 837.878448][ T5885] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 837.897206][ T5885] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 837.911455][ T5885] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 837.921186][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.971043][ T5885] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 838.091765][ T5885] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 838.218971][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.684354][ T5885] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 838.863157][ T5885] usb 5-1: config 0 has no interfaces? [ 838.873916][ T5885] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 838.886979][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.010830][ T5885] usb 5-1: Product: syz [ 839.031931][ T5885] usb 5-1: Manufacturer: syz [ 839.062501][ T5885] usb 5-1: SerialNumber: syz [ 839.124339][ T5885] usb 5-1: config 0 descriptor?? [ 839.199738][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2622'. [ 840.105718][ T5885] usb 4-1: USB disconnect, device number 90 [ 840.124491][T21699] delete_channel: no stack [ 840.240079][T21800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.510285][T21800] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 840.522764][T21800] bond0: (slave lo): Error: Device can not be enslaved while up [ 841.078807][T21837] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 841.397061][ T5885] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 841.547311][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 841.556311][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 841.589093][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 841.655237][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 841.665062][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.677882][ T5885] usb 4-1: Product: syz [ 841.686458][ T5885] usb 4-1: Manufacturer: syz [ 841.705855][ T5885] usb 4-1: SerialNumber: syz [ 841.744332][ T5885] usb 4-1: config 0 descriptor?? [ 841.761585][ T5885] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 841.787096][ T5885] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 842.014423][ T6718] usb 5-1: USB disconnect, device number 70 [ 842.160739][ T5885] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 842.230767][ T5885] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 842.241661][ T5885] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 842.249977][ T5885] em28xx 4-1:0.0: No AC97 audio processor [ 842.285086][ T5885] usb 4-1: USB disconnect, device number 91 [ 842.344079][T21880] fuse: Bad value for 'group_id' [ 842.352778][ T5885] em28xx 4-1:0.0: Disconnecting em28xx [ 842.358403][T21880] fuse: Bad value for 'group_id' [ 842.368794][ T5885] em28xx 4-1:0.0: Freeing device [ 842.507145][ T6718] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 842.679769][ T6718] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 842.694013][ T6718] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 842.705310][ T6718] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 842.717893][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.735895][T21868] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 842.761387][ T6718] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.951563][T21868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.962471][T21868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.981293][T21868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.995270][T21868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.010042][T21868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.021455][T21868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.967492][T21940] bond0: entered promiscuous mode [ 844.005583][T21940] bond0: entered allmulticast mode [ 844.039743][T21940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.423030][ T6718] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 844.587726][ T6718] usb 2-1: Using ep0 maxpacket: 16 [ 844.612254][ T6718] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 844.810160][ T6718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 844.821899][ T6718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 844.835125][ T6718] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 844.845512][ T6718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.887083][ T6718] usb 2-1: Product: syz [ 844.900404][ T6718] usb 2-1: Manufacturer: syz [ 844.913367][ T6718] usb 2-1: SerialNumber: syz [ 845.048151][ T6718] usb 2-1: config 0 descriptor?? [ 845.510821][ T5888] usb 5-1: USB disconnect, device number 71 [ 845.731991][T22013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2645'. [ 846.033122][T22013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2645'. [ 846.755184][ T6718] usb 2-1: USB disconnect, device number 108 [ 846.930342][T22057] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2650'. [ 847.266977][ T6718] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 847.412087][ T5885] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 847.518930][ T6718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.538014][ T6718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.548262][ T6718] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 847.570929][ T6718] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 847.592232][ T6718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.644511][ T6718] usb 2-1: config 0 descriptor?? [ 847.679974][ T5885] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 847.709736][ T5885] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 847.801673][ T5885] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 847.885770][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.899654][T22055] JFS: charset not found [ 847.958460][ T5885] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 847.960166][T22084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.007329][T22084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.200776][ T5885] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 848.430938][ T5888] usb 2-1: USB disconnect, device number 109 [ 849.417024][ T6718] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 849.583009][ T6718] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 849.593460][ T6718] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 849.607169][ T6718] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 849.616330][ T6718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.667154][ T6718] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 849.739144][ T6718] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 849.752550][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.929726][T22067] delete_channel: no stack [ 849.953664][ T5920] usb 5-1: USB disconnect, device number 72 [ 850.676943][ T5920] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 850.826951][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 850.845399][ T5920] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.857605][ T5920] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.869359][ T5920] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.883341][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 850.890377][ T5920] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 850.899974][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.916021][ T5920] usb 4-1: config 0 descriptor?? [ 851.342123][ T5920] waltop 0003:172F:0501.0041: unknown main item tag 0x0 [ 851.351661][ T5920] waltop 0003:172F:0501.0041: unknown main item tag 0x0 [ 851.364073][ T5920] waltop 0003:172F:0501.0041: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0 [ 851.543541][ T5920] usb 4-1: USB disconnect, device number 92 [ 851.729418][ T6718] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 851.931252][ T6718] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.944004][ T6718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.958713][ T6718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 851.969659][ T6718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 851.985228][ T6718] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 851.995280][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.042189][T22118] delete_channel: no stack [ 852.055538][ T5920] usb 2-1: USB disconnect, device number 110 [ 852.140285][ T6718] usb 5-1: config 0 descriptor?? [ 852.557734][ T6718] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 852.570490][ T6718] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving [ 852.618516][ T6718] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 852.737062][ T5896] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 852.844018][T22187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.853270][T22187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.886896][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 852.927979][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.958068][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 852.970202][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 852.988880][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 853.012844][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.039002][ T5896] usb 4-1: Product: syz [ 853.043289][ T5896] usb 4-1: Manufacturer: syz [ 853.057851][ T5896] usb 4-1: SerialNumber: syz [ 853.063492][T22259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2665'. [ 853.077938][ T5896] usb 4-1: config 0 descriptor?? [ 853.086703][ T5896] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 853.094106][ T5896] gspca_stv06xx: st6422 sensor detected [ 853.347925][T22239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.362964][T22239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.373090][T22270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 853.417161][ T5885] usb 5-1: USB disconnect, device number 73 [ 854.957126][ T6718] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 855.119046][ T6718] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 9 [ 855.137106][ T6718] usb 5-1: config 4 has no interface number 0 [ 855.143711][ T6718] usb 5-1: config 4 interface 4 has no altsetting 0 [ 855.158207][ T6718] usb 5-1: New USB device found, idVendor=0635, idProduct=0326, bcdDevice=ea.c7 [ 855.168120][ T6718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.176295][ T6718] usb 5-1: Product: syz [ 855.181077][ T6718] usb 5-1: Manufacturer: syz [ 855.185930][ T6718] usb 5-1: SerialNumber: syz [ 855.227393][ T5920] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 855.396900][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 855.413462][ T6718] usb 5-1: USB disconnect, device number 74 [ 855.426621][ T5920] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 855.439403][ T5920] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 855.454818][ T5920] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 855.476570][ T5920] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 855.516196][ T5896] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 855.524578][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.541021][ T5920] usb 2-1: Product: syz [ 855.541265][ T5896] usb 4-1: USB disconnect, device number 93 [ 855.545477][ T5920] usb 2-1: Manufacturer: syz [ 855.605601][ T5920] usb 2-1: SerialNumber: syz [ 855.887094][ T5896] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 855.894898][ T6718] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 856.026403][ T5920] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 856.047102][ T6718] usb 5-1: Using ep0 maxpacket: 32 [ 856.052310][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 856.066025][ T6718] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 9 [ 856.109046][ T5896] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 856.118478][ T6718] usb 5-1: config 4 has no interface number 0 [ 856.124632][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.132948][ T6718] usb 5-1: config 4 interface 4 has no altsetting 0 [ 856.147850][ T5896] usb 4-1: Product: syz [ 856.152464][ T5896] usb 4-1: Manufacturer: syz [ 856.157406][ T5896] usb 4-1: SerialNumber: syz [ 856.164537][ T6718] usb 5-1: New USB device found, idVendor=0635, idProduct=0326, bcdDevice=ea.c7 [ 856.173801][ T6718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.185512][ T5896] usb 4-1: config 0 descriptor?? [ 856.190684][ T6718] usb 5-1: Product: syz [ 856.195262][ T6718] usb 5-1: Manufacturer: syz [ 856.200108][ T6718] usb 5-1: SerialNumber: syz [ 856.503856][ T5896] speedtch 4-1:0.0: speedtch_bind: wrong device class 68 [ 856.521114][ T5896] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 856.842589][ T5920] usb 2-1: failed to read current rate; disabling the check [ 857.007190][ T5896] usb 5-1: USB disconnect, device number 75 [ 857.457074][ T5896] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 857.587136][ T5896] usb 5-1: device descriptor read/64, error -71 [ 857.826927][ T5896] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 857.967085][ T5896] usb 5-1: device descriptor read/64, error -71 [ 858.105977][ T5896] usb usb5-port1: attempt power cycle [ 858.305727][ T5920] usb 2-1: USB disconnect, device number 111 [ 858.392502][ T6801] udevd[6801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.477271][ T5896] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 858.508990][ T5896] usb 5-1: device descriptor read/8, error -71 [ 858.655824][ T5888] usb 4-1: USB disconnect, device number 94 [ 858.662279][ T5920] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 858.750162][ T5896] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 858.778783][ T5896] usb 5-1: device descriptor read/8, error -71 [ 858.859201][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.873205][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.886762][ T5920] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 858.899144][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.907579][ T5896] usb usb5-port1: unable to enumerate USB device [ 858.932443][ T5920] usb 2-1: config 0 descriptor?? [ 859.219050][T22422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.243051][T22422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.260665][T22422] xt_CONNSECMARK: invalid mode: 0 [ 859.498107][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 859.504559][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 859.517840][ T5920] usb 2-1: USB disconnect, device number 112 [ 859.618172][T22453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2682'. [ 859.635221][T22453] vlan2: entered promiscuous mode [ 860.067009][ T5920] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 860.088098][T22468] batadv_slave_0: mtu less than device minimum [ 860.318606][ T5920] usb 4-1: config 0 has no interfaces? [ 860.345358][ T5920] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 860.460217][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.527352][ T6718] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 860.574694][ T5920] usb 4-1: Product: syz [ 860.592835][T22498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2690'. [ 860.650573][ T5920] usb 4-1: Manufacturer: syz [ 860.667674][ T6718] usb 2-1: device descriptor read/64, error -71 [ 860.710759][ T5920] usb 4-1: SerialNumber: syz [ 860.726438][ T5920] usb 4-1: config 0 descriptor?? [ 860.906987][ T6718] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 861.138082][ T6718] usb 2-1: device descriptor read/64, error -71 [ 861.254512][ T6718] usb usb2-port1: attempt power cycle [ 861.607047][ T6718] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 861.647537][T22510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.700152][ T6718] usb 2-1: device descriptor read/8, error -71 [ 861.956935][ T6718] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 861.977667][ T6718] usb 2-1: device descriptor read/8, error -71 [ 862.087422][ T6718] usb usb2-port1: unable to enumerate USB device [ 862.574342][T22533] loop2: detected capacity change from 0 to 7 [ 862.583947][ T5883] Dev loop2: unable to read RDB block 7 [ 862.590284][ T5883] loop2: unable to read partition table [ 862.596174][ T5883] loop2: partition table beyond EOD, truncated [ 862.604416][T22533] Dev loop2: unable to read RDB block 7 [ 862.613850][T22533] loop2: unable to read partition table [ 862.621258][T22533] loop2: partition table beyond EOD, truncated [ 862.630625][T22533] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 862.797028][ T5920] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 862.885237][ T5888] usb 4-1: USB disconnect, device number 95 [ 862.964870][ T5920] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 862.978748][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.004463][ T5920] usb 5-1: config 0 descriptor?? [ 863.027519][ T5920] cp210x 5-1:0.0: cp210x converter detected [ 863.313028][T22561] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 863.451848][ T5920] usb 5-1: cp210x converter now attached to ttyUSB0 [ 864.922143][ T5896] usb 5-1: USB disconnect, device number 80 [ 864.968037][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 865.050700][ T5896] cp210x 5-1:0.0: device disconnected [ 865.417082][ T5885] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 865.637005][ T5896] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 865.676916][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 865.684056][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 865.695953][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 865.730261][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 865.739989][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.766911][ T5885] usb 2-1: Product: syz [ 865.771555][ T5885] usb 2-1: Manufacturer: syz [ 865.776258][ T5885] usb 2-1: SerialNumber: syz [ 865.800552][ T5885] usb 2-1: config 0 descriptor?? [ 865.823562][ T5885] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 865.834672][ T5885] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 865.845310][ T5896] usb 4-1: config 0 has no interfaces? [ 865.857955][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 865.867876][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.900113][ T5896] usb 4-1: Product: syz [ 865.904459][ T5896] usb 4-1: Manufacturer: syz [ 865.929704][ T5896] usb 4-1: SerialNumber: syz [ 865.955599][ T5896] usb 4-1: config 0 descriptor?? [ 866.423838][T22644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.443133][ T5885] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 866.456434][ T5885] em28xx 2-1:0.0: Config register raw data: 0x6c [ 866.483393][ T5885] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 866.517654][ T5885] em28xx 2-1:0.0: No AC97 audio processor [ 866.521685][T22644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.658000][ T5920] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 867.077254][ T5885] usb 2-1: USB disconnect, device number 117 [ 867.737526][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 867.877096][ T5920] usb 5-1: device descriptor read/64, error -71 [ 868.140691][ T5920] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 868.307160][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 868.315290][ T5920] usb 5-1: no configurations [ 868.333444][ T5920] usb 5-1: can't read configurations, error -22 [ 868.647327][ T5920] usb usb5-port1: attempt power cycle [ 868.928720][ T5885] usb 4-1: USB disconnect, device number 96 [ 869.007132][ T5920] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 869.058181][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 869.067648][ T5920] usb 5-1: no configurations [ 869.072296][ T5920] usb 5-1: can't read configurations, error -22 [ 869.217179][ T5920] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 869.517977][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 869.523951][ T5920] usb 5-1: no configurations [ 869.529213][ T5920] usb 5-1: can't read configurations, error -22 [ 869.542681][ T5920] usb usb5-port1: unable to enumerate USB device [ 870.052036][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.058527][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.627769][ T5920] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 870.907084][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 870.917380][ T5920] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 870.925731][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.940592][ T5920] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 870.950555][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.958681][ T5920] usb 2-1: Product: syz [ 870.967755][ T5920] usb 2-1: Manufacturer: syz [ 870.972467][ T5920] usb 2-1: SerialNumber: syz [ 871.061933][ T5920] usb 2-1: config 0 descriptor?? [ 871.156316][ T5920] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 871.857270][ T5920] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 871.903086][ T5920] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 872.805841][ T30] audit: type=1326 audit(1747653447.573:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22725 comm="syz.0.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a958e969 code=0x7fc00000 [ 872.828318][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.148599][ T6718] usb 2-1: USB disconnect, device number 118 [ 873.767415][ T6718] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 873.965770][ T6718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.010185][ T6718] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 874.039492][ T6718] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 874.054784][ T6718] usb 2-1: Product: syz [ 874.062280][ T6718] usb 2-1: Manufacturer: syz [ 874.074255][ T6718] usb 2-1: SerialNumber: syz [ 874.112716][ T6718] usb 2-1: config 0 descriptor?? [ 874.298833][T22832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 874.315495][ T6718] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 874.400074][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.417339][T22832] netlink: 'syz.0.2736': attribute type 9 has an invalid length. [ 874.457079][ T6718] usb 2-1: USB disconnect, device number 119 [ 874.721344][T22832] macvlan0: entered allmulticast mode [ 874.729591][T22832] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 874.881685][ T5896] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 875.130177][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.146851][ T5896] usb 5-1: config 0 has no interfaces? [ 875.159074][ T5896] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 875.188843][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.221534][ T5896] usb 5-1: config 0 descriptor?? [ 875.307249][ T5920] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 875.456285][T22844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.466645][T22844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.479183][T22844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2737'. [ 875.518317][T22844] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.527506][T22844] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.536210][T22844] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.585828][T22844] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.595552][T22844] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.604712][T22844] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.640405][ T5920] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 875.814464][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.861805][ T5920] usb 2-1: config 0 has no interface number 0 [ 875.868155][ T5920] usb 2-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.884053][ T5920] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 875.893465][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.918412][ T5920] usb 2-1: Product: syz [ 875.925755][ T5920] usb 2-1: Manufacturer: syz [ 875.934484][ T5920] usb 2-1: SerialNumber: syz [ 875.949361][ T5920] r8152-cfgselector 2-1: Unknown version 0x0000 [ 875.955892][ T5920] r8152-cfgselector 2-1: config 0 descriptor?? [ 876.176905][ T5920] r8152 2-1:0.129: Expected endpoints are not found [ 876.246585][ T5920] r8152-cfgselector 2-1: USB disconnect, device number 120 [ 876.821977][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2744'. [ 877.677520][ T5920] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 877.857453][T22933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2748'. [ 878.159564][ T6718] usb 5-1: USB disconnect, device number 85 [ 878.225736][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2748'. [ 878.225914][T22944] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 878.225948][T22944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.228631][T22951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2751'. [ 878.376503][T22958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.388269][T22958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.478259][T22969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 878.596984][ T5896] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 878.684841][T22982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 878.738450][T22985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.227279][ T6718] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 879.593957][ T6718] usb 4-1: config 0 has no interfaces? [ 879.605832][ T6718] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 879.619578][ T6718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.629692][ T6718] usb 4-1: Product: syz [ 879.633869][ T6718] usb 4-1: Manufacturer: syz [ 879.701341][ T6718] usb 4-1: SerialNumber: syz [ 879.733648][ T6718] usb 4-1: config 0 descriptor?? [ 879.936956][ T5889] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 880.089545][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 880.106779][ T5889] usb 5-1: config 0 has no interfaces? [ 880.115696][ T5889] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 880.138416][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.172491][ T5889] usb 5-1: config 0 descriptor?? [ 880.466986][T23028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.486151][T23028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.817152][ T5896] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 880.968901][ T5896] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 880.979650][ T5896] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 880.991152][ T5896] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 881.001300][ T5896] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.014491][ T5896] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 881.023874][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.042104][ T5896] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 881.050424][ T5896] usb 2-1: invalid MIDI out EP 0 [ 881.152062][ T5896] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 881.246328][ T5896] usb 2-1: USB disconnect, device number 121 [ 881.923396][ T5896] usb 4-1: USB disconnect, device number 98 [ 882.738584][ T5888] usb 5-1: USB disconnect, device number 87 [ 882.994196][T23126] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2772'. [ 883.077233][ T5885] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 883.259522][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 883.275333][ T5885] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 883.326407][ T5885] usb 4-1: config 0 has no interface number 0 [ 883.364622][ T5885] usb 4-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 883.419400][ T5885] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8 [ 883.439677][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.460618][ T5885] usb 4-1: Product: syz [ 883.465027][ T5885] usb 4-1: Manufacturer: syz [ 883.483712][ T5885] usb 4-1: SerialNumber: syz [ 883.573012][ T5885] usb 4-1: config 0 descriptor?? [ 883.600494][ T5885] kvaser_usb 4-1:0.124: error -ENODEV: Cannot get usb endpoint(s) [ 885.233390][ T5888] usb 4-1: USB disconnect, device number 99 [ 885.737124][ T5920] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 886.087319][ T5920] usb 4-1: config 0 has no interfaces? [ 886.114860][ T5920] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 886.141539][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.201115][ T5920] usb 4-1: Product: syz [ 886.205316][ T5920] usb 4-1: Manufacturer: syz [ 886.267048][ T5920] usb 4-1: SerialNumber: syz [ 886.317876][ T5920] usb 4-1: config 0 descriptor?? [ 886.967193][T23202] openvswitch: netlink: IP tunnel dst address not specified [ 887.337517][ T5889] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 887.511509][ T5889] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 887.534217][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.553992][ T5889] usb 2-1: Product: syz [ 887.566625][ T5889] usb 2-1: Manufacturer: syz [ 887.571528][ T5889] usb 2-1: SerialNumber: syz [ 887.583937][ T5889] usb 2-1: config 0 descriptor?? [ 887.810728][ T5889] usb 2-1: USB disconnect, device number 122 [ 888.546266][T23246] fuse: blksize only supported for fuseblk [ 889.427315][ T5920] usb 4-1: USB disconnect, device number 100 [ 889.564925][T23301] netlink: 'syz.3.2797': attribute type 4 has an invalid length. [ 889.587052][T23299] netlink: 'syz.4.2795': attribute type 2 has an invalid length. [ 889.633360][T23301] netlink: 'syz.3.2797': attribute type 4 has an invalid length. [ 889.962742][T23327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.011060][T23327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.157336][ T5920] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 890.166428][T23342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 890.175972][T23343] batadv_slave_1: entered promiscuous mode [ 890.194892][T23342] batadv_slave_1: left promiscuous mode [ 890.240052][T23348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.402844][T23354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2804'. [ 890.439012][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.439259][T23354] netlink: 'syz.3.2804': attribute type 30 has an invalid length. [ 890.458377][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.468834][ T5920] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 890.483695][T23354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2804'. [ 890.497032][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.536460][T23357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2804'. [ 890.638090][ T5920] usb 2-1: config 0 descriptor?? [ 890.937075][ T6718] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 891.087048][ T6718] usb 5-1: Using ep0 maxpacket: 16 [ 891.141131][ T6718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.212264][ T6718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 891.256570][ T6718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 891.337028][ T6718] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 891.346731][ T6718] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 891.500638][ T5920] hid-led 0003:27B8:01ED.0043: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 891.525279][ T6718] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 891.554973][ T6718] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 891.617119][ T5885] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 891.617779][ T5920] hid-led 0003:27B8:01ED.0043: ThingM blink(1) initialized [ 891.628133][ T6718] usb 5-1: Manufacturer: syz [ 891.700433][ T5920] usb 2-1: USB disconnect, device number 123 [ 891.757057][T23417] fido_id[23417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 891.790319][ T6718] usb 5-1: config 0 descriptor?? [ 892.333400][ T5885] usb 4-1: config 0 has no interfaces? [ 892.355206][ T5885] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 892.366709][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.395313][ T5885] usb 4-1: Product: syz [ 892.401642][ T5885] usb 4-1: Manufacturer: syz [ 892.475898][ T5885] usb 4-1: SerialNumber: syz [ 892.520026][ T5885] usb 4-1: config 0 descriptor?? [ 892.529018][ T6718] rc_core: IR keymap rc-hauppauge not found [ 892.534967][ T6718] Registered IR keymap rc-empty [ 892.547037][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 892.587716][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 892.630925][ T6718] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 892.797816][ T6718] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input72 [ 893.123441][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.217451][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.377575][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.511720][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.547069][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.613373][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.665117][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.696957][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.729132][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.757665][ T6718] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 893.799880][ T6718] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 893.829225][ T6718] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 893.847416][ T6718] usb 5-1: USB disconnect, device number 88 [ 893.980959][T23505] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 894.317082][ T6718] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 894.477883][ T6718] usb 5-1: Using ep0 maxpacket: 32 [ 894.494904][ T6718] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.517449][ T6718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 894.547732][ T6718] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 894.558775][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.580589][ T6718] usb 5-1: config 0 descriptor?? [ 894.770461][ T30] audit: type=1326 audit(1747653469.543:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.1.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 894.824199][ T30] audit: type=1326 audit(1747653469.543:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.1.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 894.956531][ T30] audit: type=1326 audit(1747653469.573:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.1.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 894.981068][ T30] audit: type=1326 audit(1747653469.573:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.1.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 895.015060][ T30] audit: type=1326 audit(1747653469.573:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.1.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 895.043838][ T30] audit: type=1326 audit(1747653469.573:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.1.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 895.069479][ T30] audit: type=1326 audit(1747653469.573:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.1.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 895.092595][ T30] audit: type=1326 audit(1747653469.573:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.1.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 895.156048][ T30] audit: type=1326 audit(1747653469.573:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23519 comm="syz.1.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 895.188318][ T5920] usb 4-1: USB disconnect, device number 101 [ 895.190438][ T6718] elecom 0003:056E:00FD.0044: unknown main item tag 0x0 [ 895.203578][ T6718] elecom 0003:056E:00FD.0044: unknown main item tag 0x0 [ 895.231747][ T6718] elecom 0003:056E:00FD.0044: unknown main item tag 0x0 [ 895.246891][ T6718] elecom 0003:056E:00FD.0044: unknown main item tag 0x0 [ 895.301041][ T6718] elecom 0003:056E:00FD.0044: unknown main item tag 0x0 [ 895.324136][ T6718] elecom 0003:056E:00FD.0044: hidraw0: USB HID v8.00 Device [HID 056e:00fd] on usb-dummy_hcd.4-1/input0 [ 895.796988][ T6718] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 895.962092][ T6718] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 895.972842][ T6718] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 896.032397][ T6718] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.044544][ T6718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.091571][ T6718] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 896.126457][ T6718] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 896.209449][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.360551][T23537] delete_channel: no stack [ 896.384874][ T5888] usb 4-1: USB disconnect, device number 102 [ 897.037207][ T5920] usb 5-1: USB disconnect, device number 89 [ 897.529786][ T5920] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 897.697389][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 897.706766][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.720042][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 897.750584][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 897.774693][ T5920] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 897.785344][ T5920] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 897.795293][ T5920] usb 5-1: Manufacturer: syz [ 897.825769][ T5920] usb 5-1: config 0 descriptor?? [ 897.926957][ T5888] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 898.038497][ T5920] usb 5-1: USB disconnect, device number 90 [ 898.159194][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 898.172315][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.199127][ T5888] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 898.226925][ T5888] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 898.251052][ T5888] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 898.278958][ T5888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 898.307474][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.366944][ T5888] usb 2-1: Product: syz [ 898.381490][ T5888] usb 2-1: Manufacturer: syz [ 898.386302][ T5888] usb 2-1: SerialNumber: syz [ 898.720964][T23629] sctp: [Deprecated]: syz.3.2825 (pid 23629) Use of int in max_burst socket option deprecated. [ 898.720964][T23629] Use struct sctp_assoc_value instead [ 898.911069][ T5888] usb 2-1: USB disconnect, device number 124 [ 898.955724][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.987406][ T6716] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 899.037462][ T5920] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 899.126912][ T6716] usb 5-1: device descriptor read/64, error -71 [ 899.202542][ T5920] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 899.216869][ T5920] usb 4-1: config 0 has no interface number 0 [ 899.226306][ T5920] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 899.247736][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.255727][ T5920] usb 4-1: Product: syz [ 899.262005][ T5920] usb 4-1: Manufacturer: syz [ 899.273512][ T5920] usb 4-1: SerialNumber: syz [ 899.288460][ T5920] usb 4-1: config 0 descriptor?? [ 899.331483][ T5920] xr_serial 4-1:0.46: More than one union descriptor, skipping ... [ 899.366968][ T6716] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 899.506872][ T6716] usb 5-1: device descriptor read/64, error -71 [ 899.633148][ T6716] usb usb5-port1: attempt power cycle [ 899.997263][ T6718] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 900.086906][ T6716] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 900.107867][ T6716] usb 5-1: device descriptor read/8, error -71 [ 900.160755][ T6718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 900.170311][ T6718] usb 2-1: can't read configurations, error -61 [ 900.326957][ T6718] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 900.346881][ T6716] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 900.367437][ T6716] usb 5-1: device descriptor read/8, error -71 [ 900.477327][ T6716] usb usb5-port1: unable to enumerate USB device [ 900.501522][ T6718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 900.534736][ T6718] usb 2-1: can't read configurations, error -61 [ 900.557911][ T6718] usb usb2-port1: attempt power cycle [ 900.865172][T23690] fuse: Unknown parameter '184467440737095516150x0000000000000004' [ 900.897156][ T6718] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 900.931474][ T6718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 900.939267][ T6718] usb 2-1: can't read configurations, error -61 [ 901.097295][ T6718] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 901.140882][ T6718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 901.158372][ T6718] usb 2-1: can't read configurations, error -61 [ 901.169619][ T6718] usb usb2-port1: unable to enumerate USB device [ 901.287826][T23694] loop3: detected capacity change from 0 to 1 [ 901.299326][ T5883] Dev loop3: unable to read RDB block 1 [ 901.305267][ T5883] loop3: unable to read partition table [ 901.311318][ T5883] loop3: partition table beyond EOD, truncated [ 901.327994][T23694] Dev loop3: unable to read RDB block 1 [ 901.333603][T23694] loop3: unable to read partition table [ 901.347248][T23694] loop3: partition table beyond EOD, truncated [ 901.353445][T23694] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 901.556321][ T6718] usb 4-1: USB disconnect, device number 103 [ 901.580382][ T5199] Dev loop3: unable to read RDB block 1 [ 901.586447][ T5199] loop3: unable to read partition table [ 901.592761][ T5199] loop3: partition table beyond EOD, truncated [ 901.616316][T23710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.116922][ T5920] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 902.247439][ T5920] usb 4-1: device descriptor read/64, error -71 [ 902.487050][ T5920] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 902.736939][ T5920] usb 4-1: device descriptor read/64, error -71 [ 902.736945][T23732] FAULT_INJECTION: forcing a failure. [ 902.736945][T23732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.736973][T23732] CPU: 0 UID: 0 PID: 23732 Comm: syz.1.2835 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 902.736991][T23732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 902.737018][T23732] Call Trace: [ 902.737027][T23732] [ 902.737036][T23732] dump_stack_lvl+0x189/0x250 [ 902.737075][T23732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 902.737105][T23732] ? __pfx__printk+0x10/0x10 [ 902.737140][T23732] should_fail_ex+0x414/0x560 [ 902.737172][T23732] _copy_from_user+0x2d/0xb0 [ 902.737204][T23732] sctp_setsockopt+0x19f/0x1200 [ 902.737225][T23732] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 902.737251][T23732] do_sock_setsockopt+0x257/0x3e0 [ 902.737283][T23732] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 902.737307][T23732] ? __fget_files+0x2a/0x420 [ 902.737340][T23732] ? __fget_files+0x3a0/0x420 [ 902.737364][T23732] ? __fget_files+0x2a/0x420 [ 902.737399][T23732] __x64_sys_setsockopt+0x18b/0x220 [ 902.737433][T23732] do_syscall_64+0xf6/0x210 [ 902.737462][T23732] ? clear_bhb_loop+0x60/0xb0 [ 902.737487][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.737507][T23732] RIP: 0033:0x7f2330d8e969 [ 902.737525][T23732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.737543][T23732] RSP: 002b:00007f2331b93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 902.737564][T23732] RAX: ffffffffffffffda RBX: 00007f2330fb5fa0 RCX: 00007f2330d8e969 [ 902.737579][T23732] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 902.737591][T23732] RBP: 00007f2331b93090 R08: 000000000001000f R09: 0000000000000000 [ 902.737604][T23732] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 902.737617][T23732] R13: 0000000000000000 R14: 00007f2330fb5fa0 R15: 00007f23310dfa28 [ 902.737647][T23732] [ 903.048480][ T5920] usb usb4-port1: attempt power cycle [ 903.386976][ T5920] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 903.408222][ T5920] usb 4-1: device descriptor read/8, error -71 [ 903.647226][ T5920] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 903.667620][ T5920] usb 4-1: device descriptor read/8, error -71 [ 903.777528][ T5920] usb usb4-port1: unable to enumerate USB device [ 904.264821][T23758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2839'. [ 905.056351][T23782] blktrace: Concurrent blktraces are not allowed on sg0 [ 905.137409][ T6716] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 905.546977][ T6716] usb 2-1: config 0 has no interfaces? [ 905.579258][ T6716] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 905.595845][ T6716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.626759][ T6716] usb 2-1: Product: syz [ 905.631434][ T6716] usb 2-1: Manufacturer: syz [ 905.692134][ T6716] usb 2-1: SerialNumber: syz [ 905.768022][ T6716] usb 2-1: config 0 descriptor?? [ 906.067285][T23808] FAULT_INJECTION: forcing a failure. [ 906.067285][T23808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.116544][T23808] CPU: 0 UID: 0 PID: 23808 Comm: syz.0.2846 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 906.116578][T23808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.116587][T23808] Call Trace: [ 906.116593][T23808] [ 906.116599][T23808] dump_stack_lvl+0x189/0x250 [ 906.116630][T23808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.116650][T23808] ? __pfx__printk+0x10/0x10 [ 906.116672][T23808] should_fail_ex+0x414/0x560 [ 906.116690][T23808] _copy_to_user+0x31/0xb0 [ 906.116712][T23808] simple_read_from_buffer+0xe1/0x170 [ 906.116733][T23808] proc_fail_nth_read+0x1df/0x250 [ 906.116754][T23808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.116777][T23808] ? rw_verify_area+0x258/0x650 [ 906.116799][T23808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.116827][T23808] vfs_read+0x1fd/0x980 [ 906.116853][T23808] ? __pfx___mutex_lock+0x10/0x10 [ 906.116881][T23808] ? __pfx_vfs_read+0x10/0x10 [ 906.116902][T23808] ? __fget_files+0x2a/0x420 [ 906.116933][T23808] ? __fget_files+0x3a0/0x420 [ 906.116959][T23808] ? __fget_files+0x2a/0x420 [ 906.116984][T23808] ksys_read+0x145/0x250 [ 906.117002][T23808] ? __pfx_ksys_read+0x10/0x10 [ 906.117021][T23808] ? do_syscall_64+0xba/0x210 [ 906.117042][T23808] do_syscall_64+0xf6/0x210 [ 906.117060][T23808] ? clear_bhb_loop+0x60/0xb0 [ 906.117077][T23808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.117090][T23808] RIP: 0033:0x7f28a958d37c [ 906.117102][T23808] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 906.117113][T23808] RSP: 002b:00007f28aa340030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 906.117128][T23808] RAX: ffffffffffffffda RBX: 00007f28a97b5fa0 RCX: 00007f28a958d37c [ 906.117139][T23808] RDX: 000000000000000f RSI: 00007f28aa3400a0 RDI: 0000000000000004 [ 906.117147][T23808] RBP: 00007f28aa340090 R08: 0000000000000000 R09: 0000000000000000 [ 906.117156][T23808] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 906.117165][T23808] R13: 0000000000000000 R14: 00007f28a97b5fa0 R15: 00007f28a98dfa28 [ 906.117185][T23808] [ 906.324967][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.850435][T23820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'. [ 906.894588][T23825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 907.477844][ T5920] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 907.688038][ T5920] usb 5-1: config 162 has an invalid interface number: 251 but max is 1 [ 907.705899][ T5920] usb 5-1: config 162 has an invalid interface number: 209 but max is 1 [ 907.718572][ T5920] usb 5-1: config 162 has no interface number 0 [ 907.725197][ T5920] usb 5-1: config 162 has no interface number 1 [ 907.742345][ T5920] usb 5-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 907.810953][ T5920] usb 5-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 907.832586][ T5888] usb 2-1: USB disconnect, device number 3 [ 907.863317][ T5920] usb 5-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 907.888196][ T5920] usb 5-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 907.917588][ T5920] usb 5-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 907.959032][ T5920] usb 5-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 907.959977][ T30] audit: type=1326 audit(1747653482.733:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 908.036126][ T30] audit: type=1326 audit(1747653482.773:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 908.058847][ T6718] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 908.106850][ T30] audit: type=1326 audit(1747653482.773:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2330d8e9a3 code=0x7ffc0000 [ 908.129192][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.142757][ T5920] usb 5-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 908.176094][ T5920] usb 5-1: config 162 interface 251 has no altsetting 0 [ 908.176449][ T30] audit: type=1326 audit(1747653482.773:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2330d8e9a3 code=0x7ffc0000 [ 908.196908][ T5920] usb 5-1: config 162 interface 209 has no altsetting 0 [ 908.237022][ T6718] usb 4-1: Using ep0 maxpacket: 16 [ 908.246684][ T6718] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 908.255508][ T6718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.271162][ T5920] usb 5-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 908.288655][ T6718] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 908.298853][ T6718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.300798][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.307012][ T6718] usb 4-1: Product: syz [ 908.315075][ T30] audit: type=1326 audit(1747653482.773:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 908.367882][ T5920] usb 5-1: Product: syz [ 908.367919][ T6718] usb 4-1: Manufacturer: syz [ 908.372067][ T5920] usb 5-1: Manufacturer: syz [ 908.396876][ T5920] usb 5-1: SerialNumber: syz [ 908.401954][ T30] audit: type=1326 audit(1747653482.773:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 908.435205][ T6718] usb 4-1: SerialNumber: syz [ 908.453406][ T6718] usb 4-1: config 0 descriptor?? [ 908.484564][ T6718] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 908.495465][ T30] audit: type=1326 audit(1747653482.773:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 908.517897][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.579639][ T30] audit: type=1326 audit(1747653482.773:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 908.603083][ T30] audit: type=1326 audit(1747653482.773:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 908.629816][ T30] audit: type=1326 audit(1747653482.773:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23870 comm="syz.1.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2330d8e969 code=0x7ffc0000 [ 908.679098][ T5920] io_edgeport 5-1:162.251: required endpoints missing [ 908.854412][ T5920] io_edgeport 5-1:162.209: Edgeport 2 port adapter converter detected [ 908.882820][ T5920] usb 5-1: detected [ 908.914318][ T5920] usb 5-1: error in getting manufacturer descriptor: -71 [ 908.935174][ T5920] usb 5-1: error in getting boot descriptor: -71 [ 908.952977][ T5920] usb 5-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 909.061808][ T5920] usb 5-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 909.167402][ T5920] usb 5-1: Falling back to sysfs fallback for: edgeport/down.fw [ 909.297091][ T6718] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 909.304106][ T6718] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 909.433612][T23872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2855'. [ 909.538784][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 910.763101][ T6718] usb 4-1: USB disconnect, device number 108 [ 911.227128][ T5885] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 911.557978][ T5885] usb 2-1: config 0 has no interfaces? [ 911.568471][ T5885] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 911.568500][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.568515][ T5885] usb 2-1: Product: syz [ 911.568526][ T5885] usb 2-1: Manufacturer: syz [ 911.568538][ T5885] usb 2-1: SerialNumber: syz [ 911.570800][ T5885] usb 2-1: config 0 descriptor?? [ 911.849985][ T5833] Bluetooth: hci1: unexpected event for opcode 0x64c6 [ 912.128755][T23940] wireguard3: entered promiscuous mode [ 912.144782][T23940] wireguard3: entered allmulticast mode [ 912.656723][T23989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 912.669648][T23989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 912.680342][T23989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 912.689523][T23989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 912.698247][T23989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 913.399058][T18154] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 913.889962][ T52] usb 2-1: USB disconnect, device number 5 [ 914.264129][T18154] bridge_slave_1: left allmulticast mode [ 914.293852][T18154] bridge_slave_1: left promiscuous mode [ 914.367637][T18154] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.459926][T18154] bridge_slave_0: left allmulticast mode [ 914.501863][T18154] bridge_slave_0: left promiscuous mode [ 914.524442][T18154] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.767018][ T5833] Bluetooth: hci2: command tx timeout [ 915.139747][T24138] qrtr: Invalid version 10 [ 915.949336][T18154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.960678][T18154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.970462][T18154] bond0 (unregistering): Released all slaves [ 915.988436][T18154] bond1 (unregistering): Released all slaves [ 916.003355][T18154] bond2 (unregistering): Released all slaves [ 916.019432][T18154] bond3 (unregistering): Released all slaves [ 916.043853][T18154] bond4 (unregistering): Released all slaves [ 916.061885][T18154] bond5 (unregistering): Released all slaves [ 916.083018][T18154] bond6 (unregistering): Released all slaves [ 916.150322][T24156] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 916.182247][T23993] chnl_net:caif_netlink_parms(): no params data found [ 916.441962][ T30] kauditd_printk_skb: 575 callbacks suppressed [ 916.441997][ T30] audit: type=1326 audit(1747653491.213:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a298e969 code=0x7ffc0000 [ 916.634914][T18154] : left promiscuous mode [ 916.681611][ T30] audit: type=1326 audit(1747653491.213:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a298e969 code=0x7ffc0000 [ 916.803477][ T30] audit: type=1326 audit(1747653491.213:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f73a298e969 code=0x7ffc0000 [ 916.835540][T18154] tipc: Left network mode [ 916.843569][T23993] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.847314][ T5833] Bluetooth: hci2: command tx timeout [ 916.880049][T23993] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.916995][ T30] audit: type=1326 audit(1747653491.213:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a298e969 code=0x7ffc0000 [ 916.940612][T23993] bridge_slave_0: entered allmulticast mode [ 916.946684][ T30] audit: type=1326 audit(1747653491.213:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73a298e969 code=0x7ffc0000 [ 916.976910][ T30] audit: type=1326 audit(1747653491.303:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a298e969 code=0x7ffc0000 [ 916.979200][T23993] bridge_slave_0: entered promiscuous mode [ 917.012670][ T30] audit: type=1326 audit(1747653491.303:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a298e969 code=0x7ffc0000 [ 917.209568][T23993] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.270540][T23993] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.287066][T23993] bridge_slave_1: entered allmulticast mode [ 917.378660][T23993] bridge_slave_1: entered promiscuous mode [ 917.761954][T23993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.771320][ T5888] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 917.835485][T23993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.218973][T23993] team0: Port device team_slave_0 added [ 918.240207][ T5888] usb 2-1: config 0 has no interfaces? [ 918.266367][ T5888] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 918.279395][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.291753][ T5888] usb 2-1: Product: syz [ 918.302457][ T5888] usb 2-1: Manufacturer: syz [ 918.307987][ T5888] usb 2-1: SerialNumber: syz [ 918.318084][T23993] team0: Port device team_slave_1 added [ 918.329039][ T5888] usb 2-1: config 0 descriptor?? [ 918.513479][T18154] hsr_slave_0: left promiscuous mode [ 918.520783][T18154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.530054][T18154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.938952][ T5833] Bluetooth: hci2: command tx timeout [ 919.791989][T24344] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 919.836740][T24344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2888'. [ 920.885853][T24258] wireguard4: entered promiscuous mode [ 920.891645][T24258] wireguard4: entered allmulticast mode [ 921.007269][ T5833] Bluetooth: hci2: command tx timeout [ 921.213334][T23993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.222542][T23993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.543517][T23993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.603734][T23993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.640940][T23993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.700725][T23993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.149772][ T5896] usb 2-1: USB disconnect, device number 6 [ 922.414861][T23993] hsr_slave_0: entered promiscuous mode [ 922.435769][T23993] hsr_slave_1: entered promiscuous mode [ 922.465542][T23993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.481145][T23993] Cannot create hsr debugfs directory [ 925.260913][T18154] IPVS: stop unused estimator thread 0... [ 925.380157][T24532] netlink: 'syz.4.2897': attribute type 1 has an invalid length. [ 925.597232][T24569] veth3: entered promiscuous mode [ 925.682128][T24569] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 925.966961][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 926.279934][ T5888] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 926.302440][ T5888] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 926.363518][ T5888] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 926.413907][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.535778][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 926.695338][T23993] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 926.748462][T24586] delete_channel: no stack [ 926.821954][T23993] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 927.001019][T23993] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 927.010128][ T5888] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 927.115610][T24650] sg_write: process 2081 (syz.2.2903) changed security contexts after opening file descriptor, this is not allowed. [ 927.155476][T23993] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 927.183109][T24650] netlink: 'syz.2.2903': attribute type 3 has an invalid length. [ 927.244901][ T5888] usb 2-1: USB disconnect, device number 7 [ 927.261448][T24650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'. [ 927.980949][T23993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.350837][T23993] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.390217][T18153] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.397392][T18153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.461793][T18153] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.468954][T18153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.631396][T23993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.744013][T23993] veth0_vlan: entered promiscuous mode [ 928.793439][T23993] veth1_vlan: entered promiscuous mode [ 928.903184][T23993] veth0_macvtap: entered promiscuous mode [ 928.941567][T24679] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 928.948140][T24679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 928.960467][T23993] veth1_macvtap: entered promiscuous mode [ 928.980912][T24679] vhci_hcd vhci_hcd.0: Device attached [ 929.000218][T23993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.021946][T23993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.040598][T23993] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.052310][T23993] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.062848][T23993] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.082521][T23993] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.137139][ T52] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 929.217092][ T5889] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 929.297463][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 929.304428][ T52] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 929.389460][ T52] usb 2-1: config 179 has no interface number 0 [ 929.412493][ T52] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 929.433179][T18158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.450113][ T52] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 929.481950][ T52] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 929.494809][ T52] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 929.497513][T18158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.524103][ T52] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 929.569748][ T52] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 929.736425][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.830633][T24678] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 929.965463][T18154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.013255][T18154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.101566][ T5896] usb 2-1: USB disconnect, device number 8 [ 930.101662][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 930.116014][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 930.148345][T24684] vhci_hcd: connection reset by peer [ 930.167149][T18154] vhci_hcd: stop threads [ 930.190099][T18154] vhci_hcd: release socket [ 930.200522][T18154] vhci_hcd: disconnect device [ 930.460036][T24613] delete_channel: no stack [ 931.126965][ T5896] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 931.328868][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 931.335529][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 931.414085][ T5896] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 931.431982][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.462899][ T5896] usb 4-1: Product: syz [ 931.481634][ T5896] usb 4-1: Manufacturer: syz [ 931.492364][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.498755][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.514614][ T5896] usb 4-1: SerialNumber: syz [ 931.559561][ T5896] usb 4-1: config 0 descriptor?? [ 931.592947][ T5896] hub 4-1:0.0: bad descriptor, ignoring hub [ 931.631833][ T5896] hub 4-1:0.0: probe with driver hub failed with error -5 [ 931.718704][ T5896] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input73 [ 932.349276][ T5184] usb 4-1: reset high-speed USB device number 109 using dummy_hcd [ 932.407999][ T5896] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 932.534465][T24830] netlink: 'syz.2.2913': attribute type 1 has an invalid length. [ 932.543088][ T5184] usb 4-1: device descriptor read/64, error -71 [ 932.598438][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 932.656115][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 932.716075][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 932.758461][T24830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 932.781653][ T5896] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 932.793173][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.806073][T24835] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 932.817430][ T5184] usb 4-1: reset high-speed USB device number 109 using dummy_hcd [ 932.863955][ T5896] usb 2-1: Product: syz [ 932.874145][ T5896] usb 2-1: Manufacturer: syz [ 932.881652][ T5896] usb 2-1: SerialNumber: syz [ 932.894741][ T5896] usb 2-1: config 0 descriptor?? [ 932.914154][T24810] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 932.938980][T24810] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 932.967696][ T5184] usb 4-1: device descriptor read/64, error -71 [ 933.253940][ T5184] usb 4-1: reset high-speed USB device number 109 using dummy_hcd [ 933.272517][ T5896] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 933.364166][ T5896] asix 2-1:0.0: probe with driver asix failed with error -71 [ 933.373379][ T5184] usb 4-1: device descriptor read/8, error -71 [ 933.395171][ T5896] usb 2-1: USB disconnect, device number 9 [ 933.635793][ T5184] usb 4-1: reset high-speed USB device number 109 using dummy_hcd [ 933.699670][ T5184] usb 4-1: device descriptor read/8, error -71 [ 933.818938][ T6716] usb 4-1: USB disconnect, device number 109 [ 934.077195][ T6716] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 934.216925][ T6716] usb 4-1: device descriptor read/64, error -71 [ 934.356920][ T5896] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 934.387459][ T5889] vhci_hcd: vhci_device speed not set [ 934.456935][ T6716] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 934.530495][ T5896] usb 2-1: config 0 has no interfaces? [ 934.554279][ T5896] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 934.593279][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.672830][ T6716] usb 4-1: device descriptor read/64, error -71 [ 934.692746][ T5896] usb 2-1: Product: syz [ 934.742985][ T5896] usb 2-1: Manufacturer: syz [ 934.756684][ T5896] usb 2-1: SerialNumber: syz [ 934.781912][ T5896] usb 2-1: config 0 descriptor?? [ 934.837245][ T6716] usb usb4-port1: attempt power cycle [ 935.081041][ T52] usb 2-1: USB disconnect, device number 10 [ 935.181343][ T6716] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 935.293573][ T6716] usb 4-1: device descriptor read/8, error -71 [ 936.205698][T24985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2922'. [ 936.267058][ T5833] Bluetooth: hci1: unexpected event for opcode 0x64c6 [ 937.226923][ T5896] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 937.429111][ T5896] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 937.503128][ T5896] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 937.512806][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.526196][ T5896] usb 4-1: Product: syz [ 937.544421][ T5896] usb 4-1: Manufacturer: syz [ 937.576644][ T5896] usb 4-1: SerialNumber: syz [ 937.685224][ T5896] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 937.696229][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 937.734235][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 937.767216][ T5896] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 937.777256][ T5896] usb 4-1: media controller created [ 937.833118][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 938.115303][ T5896] DVB: Unable to find symbol mt352_attach() [ 938.350428][ T5896] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 938.396545][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 938.437108][ T5896] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 938.572541][ T5896] usb 4-1: USB disconnect, device number 114 [ 938.860777][ T5896] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 939.566921][ T5889] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 939.750601][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.762108][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.773603][ T5889] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 939.783469][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.798282][ T5889] usb 4-1: config 0 descriptor?? [ 940.052789][T25051] Cannot find map_set index 0 as target [ 940.059854][T25070] IPv6: sit1: Disabled Multicast RS [ 940.071419][T25070] sit1: entered allmulticast mode [ 940.101725][T25078] fuse: Unknown parameter '0x0000000000000003ÿ' [ 941.299395][T24690] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 941.477054][T24690] usb 2-1: Using ep0 maxpacket: 32 [ 941.484420][T24690] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 941.496212][T24690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.515305][T24690] usb 2-1: config 0 descriptor?? [ 941.537205][T24690] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 941.954333][ T5889] usbhid 4-1:0.0: can't add hid device: -71 [ 941.960621][ T5889] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 942.004783][ T5889] usb 4-1: USB disconnect, device number 115 [ 942.941643][T25121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2937'. [ 943.380967][T25091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.400828][T25091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.552552][T24690] gspca_nw80x: reg_w err -71 [ 943.557532][T24690] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 943.621386][T24690] usb 2-1: USB disconnect, device number 11 [ 943.777456][ T5896] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 943.944688][ T5896] usb 4-1: config 0 has no interfaces? [ 943.963488][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 943.972862][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.984463][ T5896] usb 4-1: Product: syz [ 943.988813][ T5896] usb 4-1: Manufacturer: syz [ 943.993839][ T5896] usb 4-1: SerialNumber: syz [ 944.003104][ T5896] usb 4-1: config 0 descriptor?? [ 944.156924][T24690] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 944.358758][T24690] usb 2-1: Using ep0 maxpacket: 16 [ 944.372212][T24690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.387886][T24690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.418509][T24690] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 944.476892][T24690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.567902][T24690] usb 2-1: config 0 descriptor?? [ 944.772769][ T5896] usb 4-1: USB disconnect, device number 116 [ 945.070638][T25189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.089175][T25189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.105284][T25160] libceph: resolve '400' (ret=-3): failed [ 945.117369][T25160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.133685][T25160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.148727][T24690] savu 0003:1E7D:2D5A.0045: unknown main item tag 0x0 [ 945.156288][T24690] savu 0003:1E7D:2D5A.0045: unknown main item tag 0x0 [ 945.167248][T24690] savu 0003:1E7D:2D5A.0045: unknown main item tag 0x0 [ 945.174179][T24690] savu 0003:1E7D:2D5A.0045: unknown main item tag 0x0 [ 945.186456][T24690] savu 0003:1E7D:2D5A.0045: unknown main item tag 0x0 [ 945.200804][T24690] savu 0003:1E7D:2D5A.0045: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 945.360490][T24690] usb 2-1: USB disconnect, device number 12 [ 945.866931][T24690] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 946.029539][T24690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.055831][T24690] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 946.066215][T24690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.078442][T24690] usb 4-1: config 0 descriptor?? [ 946.177098][ T978] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 946.326910][ T978] usb 2-1: Invalid ep0 maxpacket: 16 [ 946.460061][ T978] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 946.488401][T24690] keytouch 0003:0926:3333.0046: fixing up Keytouch IEC report descriptor [ 946.502375][T24690] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0046/input/input74 [ 946.617635][ T978] usb 2-1: Invalid ep0 maxpacket: 16 [ 946.618193][T24690] keytouch 0003:0926:3333.0046: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 946.636060][ T978] usb usb2-port1: attempt power cycle [ 946.977054][ T978] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 947.020690][ T978] usb 2-1: Invalid ep0 maxpacket: 16 [ 947.095985][ C1] Mem-Info: [ 947.099487][ C1] active_anon:33651 inactive_anon:1 isolated_anon:10 [ 947.099487][ C1] active_file:11769 inactive_file:4087 isolated_file:0 [ 947.099487][ C1] unevictable:762 dirty:147 writeback:0 [ 947.099487][ C1] slab_reclaimable:10019 slab_unreclaimable:121211 [ 947.099487][ C1] mapped:32603 shmem:28422 pagetables:1200 [ 947.099487][ C1] sec_pagetables:0 bounce:0 [ 947.099487][ C1] kernel_misc_reclaimable:0 [ 947.099487][ C1] free:1305745 free_pcp:3901 free_cma:0 [ 947.144962][ C1] Node 0 active_anon:134904kB inactive_anon:4kB active_file:46952kB inactive_file:16216kB unevictable:1512kB isolated(anon):40kB isolated(file):0kB mapped:130684kB dirty:588kB writeback:0kB shmem:112452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12424kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 947.178516][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:124kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 947.209972][ C1] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.237033][ C1] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 947.242798][ C1] Node 0 DMA32 free:1302804kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:134896kB inactive_anon:4kB active_file:46952kB inactive_file:16128kB unevictable:1512kB writepending:588kB present:3129332kB managed:2564112kB mlocked:0kB bounce:0kB free_pcp:13400kB local_pcp:5300kB free_cma:0kB [ 947.273215][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 947.277941][ C1] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 947.304533][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 947.309261][ C1] Node 1 Normal free:3904816kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:124kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 947.338713][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 947.343464][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 947.356172][ C1] Node 0 DMA32: 1479*4kB (UE) 389*8kB (UME) 218*16kB (UE) 17*32kB (UME) 100*64kB (UME) 59*128kB (UME) 169*256kB (UME) 123*512kB (UME) 92*1024kB (UME) 15*2048kB (UM) 255*4096kB (UM) = 1302660kB [ 947.375208][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 947.386698][ C1] Node 1 Normal: 232*4kB (UM) 70*8kB (UME) 44*16kB (UME) 213*32kB (UME) 108*64kB (UME) 34*128kB (UME) 16*256kB (UME) 13*512kB (UME) 1*1024kB (M) 5*2048kB (UME) 943*4096kB (M) = 3904816kB [ 947.405592][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.415149][ C1] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 947.424427][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.433999][ C1] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 947.443289][ C1] 44350 total pagecache pages [ 947.447990][ C1] 1 pages in swap cache [ 947.452135][ C1] Free swap = 124992kB [ 947.456294][ C1] Total swap = 124996kB [ 947.460445][ C1] 2097051 pages RAM [ 947.464246][ C1] 0 pages HighMem/MovableOnly [ 947.468916][ C1] 424365 pages reserved [ 947.473065][ C1] 0 pages cma reserved [ 947.477734][ C1] vkms_vblank_simulate: vblank timer overrun [ 947.596600][ T978] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 947.638368][ T978] usb 2-1: Invalid ep0 maxpacket: 16 [ 947.638637][ T978] usb usb2-port1: unable to enumerate USB device [ 947.667317][ T978] usb 4-1: USB disconnect, device number 117 [ 947.676893][ C1] keytouch 0003:0926:3333.0046: usb_submit_urb(ctrl) failed: -19 [ 949.517284][T25367] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 949.523831][T25367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 949.533514][T25367] vhci_hcd vhci_hcd.0: Device attached [ 949.577175][ T5889] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 949.706929][T24690] vhci_hcd: vhci_device speed not set [ 949.737807][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 949.740368][T25370] vhci_hcd: connection closed [ 949.750830][T18154] vhci_hcd: stop threads [ 949.765967][ T5889] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 949.777585][T24690] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 949.787102][T18154] vhci_hcd: release socket [ 949.792815][T18154] vhci_hcd: disconnect device [ 949.802263][ T5889] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 Stopping sshd: [ 949.815808][ T5889] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.826661][ T5889] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 949.842529][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 949.908381][ T5889] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 949.933672][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.964223][ T5889] usb 2-1: config 0 descriptor?? stopped /usr/sbin/sshd (pid 5590) OK Stopping crond: stopped /usr/sbin/crond (pid 5572) OK Stopping dhcpcd... [ 951.190539][T25450] dvmrp8: entered allmulticast mode stopped /sbin/dhcpcd (pid 5493) [ 951.786996][ T5888] usb 4-1: new high-speed USB device number 118 using dummy_hcd Stopping network: [ 951.967010][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 952.028146][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 952.252240][ T5888] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 952.349709][ T5888] usb 4-1: config 0 has no interface number 0 [ 952.437498][ T5889] usbhid 2-1:0.0: can't add hid device: -71 [ 952.495630][ T5888] usb 4-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 952.557476][ T5889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 952.619063][ T5888] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 952.642543][ T5889] usb 2-1: USB disconnect, device number 17 [ 952.658426][ T5888] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 952.677084][ T5888] usb 4-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 952.746214][ T5888] usb 4-1: config 0 interface 41 has no altsetting 0 [ 952.779926][T25502] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2965'. [ 952.810059][T25502] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 952.886961][ T5888] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 952.911889][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.940163][ T5888] usb 4-1: Product: syz [ 952.952530][ T5888] usb 4-1: Manufacturer: syz [ 952.975232][ T5888] usb 4-1: SerialNumber: syz [ 953.022107][ T5888] usb 4-1: config 0 descriptor?? [ 953.078837][T25464] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 953.121907][T25464] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 953.258683][ T978] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 953.279389][T25516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 953.490887][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 953.541905][ T978] usb 2-1: config 3 has an invalid interface number: 236 but max is 1 [ 953.558161][T25464] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 953.577192][ T978] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 953.625821][ T978] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 953.647192][T25464] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 953.711718][ T978] usb 2-1: config 3 has no interface number 0 [ 953.772407][ T978] usb 2-1: config 3 interface 236 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 OK [ 953.957006][ T978] usb 2-1: config 3 interface 236 has no altsetting 0 [ 954.005103][T25523] cgroup: fork rejected by pids controller in /syz4 Stopping iptable[ 954.260893][ T978] usb 2-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice=77.73 s: [ 954.287062][ T5888] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 954.389459][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.435184][ T978] usb 2-1: Product: syz [ 954.558337][ T978] usb 2-1: Manufacturer: syz [ 954.623990][ T978] usb 2-1: SerialNumber: syz [ 954.883033][T25507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.898183][T25507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.916961][T24690] vhci_hcd: vhci_device speed not set [ 955.004806][ T978] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 955.141435][T26453] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2970'. OK [ 955.324342][ T978] snd-usb-audio 2-1:3.236: probe with driver snd-usb-audio failed with error -2 [ 955.433779][ T978] usb 2-1: USB disconnect, device number 18 Stopping system message bus: [ 955.557918][ T6836] udevd[6836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.236/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.606716][ T5896] usb 4-1: USB disconnect, device number 118 [ 955.772943][T26480] netlink: 'syz.1.2972': attribute type 8 has an invalid length. [ 955.924120][T26491] IPv6: Can't replace route, no match found [ 956.497058][ T5896] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 956.507010][ T5885] usb 2-1: new high-speed USB device number 19 using dummy_hcd done [ 956.689023][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 956.707669][ T5896] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 956.715724][ T5896] usb 4-1: config 4 has no interface number 0 [ 956.722007][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 956.759010][ T5885] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 956.782522][ T5896] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 956.811508][ T5885] usb 2-1: config 0 has no interface number 0 [ 956.843410][ T5896] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 956.856934][ T5885] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 956.874081][ T5896] usb 4-1: config 4 interface 8 has no altsetting 0 [ 956.888379][ T5885] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 956.907067][ T5885] usb 2-1: config 0 interface 41 has no altsetting 0 [ 956.917456][ T5885] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 956.926555][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.935595][ T5885] usb 2-1: Product: syz [ 956.945716][ T5885] usb 2-1: Manufacturer: syz [ 956.951027][ T5896] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 956.969372][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.979865][ T5885] usb 2-1: SerialNumber: syz [ 956.996091][ T5885] usb 2-1: config 0 descriptor?? [ 957.001376][ T5896] usb 4-1: Product: syz [ 957.005638][ T5896] usb 4-1: Manufacturer: syz [ 957.016363][ T5896] usb 4-1: SerialNumber: syz [ 957.016758][T26495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 957.035995][T26495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 957.119402][T25452] dvmrp8: left allmulticast mode [ 957.267850][T26495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 957.277169][T26495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 957.298580][ T5896] opticon 4-1:4.8: opticon converter detected [ 957.309234][ T5896] usb 4-1: opticon converter now attached to ttyUSB0 [ 957.327803][ T5896] usb 4-1: USB disconnect, device number 119 [ 957.361334][ T5896] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 957.381923][ T5896] opticon 4-1:4.8: device disconnected [ 957.723532][ T5885] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 957.846484][ T5885] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 958.031277][ T5885] usb 2-1: USB disconnect, device number 19 Stopping klogd: [ 958.544995][ T5885] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 958.740171][ T5885] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 958.807118][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.892888][ T5885] usb 2-1: config 0 descriptor?? [ 958.964031][ T5885] cp210x 2-1:0.0: cp210x converter detected OK [ 959.071112][T26586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. Stopping acpid: [ 959.394386][ T5885] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 959.597187][ T5885] usb 2-1: cp210x converter now attached to ttyUSB0 [ 959.629841][ T5885] usb 2-1: USB disconnect, device number 20 [ 959.655900][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 959.722274][ T5885] cp210x 2-1:0.0: device disconnected [ 960.720622][T26651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2987'. [ 960.737251][T26645] iommufd_mock iommufd_mock0: Adding to iommu group 0 OK Stopping syslogd: stopped /sbin/syslogd (pid 5181) OK [ 961.216352][T26664] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2988'. umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 962.779000][T23989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 962.809041][T23989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 962.827062][T23989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 962.837148][T23989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 962.853721][T23989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 963.048052][T26693] syzkaller1: entered promiscuous mode [ 963.057104][T26693] syzkaller1: entered allmulticast mode [ 963.549459][T26737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2995'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 963.933266][ T5199] udevd[5199]: could not touch /run/udev/queue: Read-only file system Connection to 10.128.0.37 closed by remote host. [ 964.172517][ T5885] usb 4-1: new high-speed USB device number 120 using dummy_hcd Sent SIGKILL to all processes Requesting system poweroff [ 965.146030][T18162]  (unregistering): Released all slaves [ 965.161742][T18162] bond1 (unregistering): Released all slaves [ 965.282151][T18162] bond0 (unregistering): Released all slaves [ 965.352446][ T9228] bond0: (slave syz_tun): Releasing backup interface [ 965.517118][T18162] tipc: Disabling bearer [ 965.546972][T18162] tipc: Left network mode [ 965.977012][T18162] hsr_slave_0: left promiscuous mode [ 965.985607][T18162] hsr_slave_1: left promiscuous mode [ 967.098678][ T5920] usb 5-1: Failed to load image "edgeport/down.fw" err -2 [ 967.107684][ T5920] usb 5-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 967.116228][ T5920] usb 5-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 967.124721][ T5920] ------------[ cut here ]------------ [ 967.130364][ T5920] WARNING: CPU: 1 PID: 5920 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x746/0x9b0 [ 967.142492][ T5920] Modules linked in: [ 967.146651][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: kworker/1:8 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 967.157587][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 967.167787][ T5920] Workqueue: usb_hub_wq hub_event [ 967.172848][ T5920] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 967.179287][ T5920] Code: ce fb e9 5d fc ff ff e8 68 44 ce fb c6 05 58 89 77 09 01 48 c7 c7 60 87 e8 8b e8 f5 e3 35 fb e9 85 fc ff ff e8 4b 44 ce fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 88 e8 8b 4c 89 e2 e8 75 a8 3a fb e9 [ 967.199030][ T5920] RSP: 0018:ffffc9000a93e8f0 EFLAGS: 00010287 [ 967.205121][ T5920] RAX: ffffffff85f1ad85 RBX: dffffc0000000000 RCX: 0000000000100000 [ 967.213142][ T5920] RDX: ffffc90018c4c000 RSI: 00000000000a7662 RDI: 00000000000a7663 [ 967.221189][ T5920] RBP: 0000000000000001 R08: ffffffff8f7f3377 R09: 1ffffffff1efe66e [ 967.229235][ T5920] R10: dffffc0000000000 R11: fffffbfff1efe66f R12: ffffffff8c1b1040 [ 967.237258][ T5920] R13: 0000000000001770 R14: ffff8880223d80b0 R15: 00000000fffffff5 [ 967.245260][ T5920] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 967.254291][ T5920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 967.260962][ T5920] CR2: 00007f73a2b82338 CR3: 0000000033a3a000 CR4: 00000000003526f0 [ 967.268974][ T5920] DR0: 0000040000000000 DR1: 000000000000000c DR2: 0000000000000006 [ 967.277013][ T5920] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 967.285001][ T5920] Call Trace: [ 967.288351][ T5920] [ 967.291280][ T5920] ? kmem_cache_free+0x192/0x3f0 [ 967.296219][ T5920] ? _request_firmware+0x6be/0x15b0 [ 967.301462][ T5920] _request_firmware+0xf83/0x15b0 [ 967.306509][ T5920] ? __pfx__request_firmware+0x10/0x10 [ 967.312041][ T5920] ? rom_read+0x19e/0x1c0 [ 967.316378][ T5920] ? rom_read+0x19e/0x1c0 [ 967.320765][ T5920] request_firmware+0x36/0x50 [ 967.325452][ T5920] edge_startup+0x251b/0x5cc0 [ 967.330288][ T5920] ? __pfx_edge_startup+0x10/0x10 [ 967.335336][ T5920] ? trace_kmalloc+0x1f/0xd0 [ 967.339994][ T5920] ? __kmalloc_noprof+0x29b/0x4f0 [ 967.345026][ T5920] ? setup_port_interrupt_in+0x159/0x590 [ 967.350733][ T5920] ? setup_port_interrupt_in+0x3d0/0x590 [ 967.356375][ T5920] ? __pfx_edge_interrupt_callback+0x10/0x10 [ 967.362429][ T5920] usb_serial_probe+0x2506/0x2d20 [ 967.367504][ T5920] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 967.373847][ T5920] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 967.380300][ T5920] usb_probe_interface+0x641/0xbc0 [ 967.385439][ T5920] ? __pfx_usb_probe_interface+0x10/0x10 [ 967.391106][ T5920] really_probe+0x26a/0x9a0 [ 967.395638][ T5920] __driver_probe_device+0x18c/0x2f0 [ 967.401077][ T5920] driver_probe_device+0x4f/0x430 [ 967.406120][ T5920] __device_attach_driver+0x2ce/0x530 [ 967.411672][ T5920] bus_for_each_drv+0x251/0x2e0 [ 967.416544][ T5920] ? __pfx___device_attach_driver+0x10/0x10 [ 967.422488][ T5920] ? __pfx_bus_for_each_drv+0x10/0x10 [ 967.427934][ T5920] __device_attach+0x2b8/0x400 [ 967.432706][ T5920] ? __pfx___device_attach+0x10/0x10 [ 967.438075][ T5920] ? do_raw_spin_unlock+0x122/0x240 [ 967.443298][ T5920] bus_probe_device+0x185/0x260 [ 967.448229][ T5920] device_add+0x7b6/0xb50 [ 967.452582][ T5920] usb_set_configuration+0x1a87/0x20e0 [ 967.458133][ T5920] usb_generic_driver_probe+0x8d/0x150 [ 967.463614][ T5920] usb_probe_device+0x1c1/0x390 [ 967.468554][ T5920] ? __pfx_usb_probe_device+0x10/0x10 [ 967.473959][ T5920] really_probe+0x26a/0x9a0 [ 967.478531][ T5920] __driver_probe_device+0x18c/0x2f0 [ 967.483826][ T5920] driver_probe_device+0x4f/0x430 [ 967.488900][ T5920] __device_attach_driver+0x2ce/0x530 [ 967.494281][ T5920] bus_for_each_drv+0x251/0x2e0 [ 967.499278][ T5920] ? __pfx___device_attach_driver+0x10/0x10 [ 967.505203][ T5920] ? __pfx_bus_for_each_drv+0x10/0x10 [ 967.510611][ T5920] __device_attach+0x2b8/0x400 [ 967.515378][ T5920] ? __pfx___device_attach+0x10/0x10 [ 967.520706][ T5920] ? do_raw_spin_unlock+0x122/0x240 [ 967.525901][ T5920] bus_probe_device+0x185/0x260 [ 967.530794][ T5920] device_add+0x7b6/0xb50 [ 967.535132][ T5920] usb_new_device+0xa39/0x16c0 [ 967.539980][ T5920] ? __pfx_usb_new_device+0x10/0x10 [ 967.545203][ T5920] ? _raw_spin_unlock_irq+0x23/0x50 [ 967.550462][ T5920] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.555666][ T5920] hub_event+0x2941/0x4a00 [ 967.560233][ T5920] ? __pfx_hub_event+0x10/0x10 [ 967.565009][ T5920] ? process_scheduled_works+0x9ec/0x17a0 [ 967.571022][ T5920] ? _raw_spin_unlock_irq+0x23/0x50 [ 967.576240][ T5920] ? process_scheduled_works+0x9ec/0x17a0 [ 967.582020][ T5920] ? process_scheduled_works+0x9ec/0x17a0 [ 967.587803][ T5920] process_scheduled_works+0xadb/0x17a0 [ 967.593387][ T5920] ? __pfx_process_scheduled_works+0x10/0x10 [ 967.599461][ T5920] worker_thread+0x8a0/0xda0 [ 967.604065][ T5920] kthread+0x70e/0x8a0 [ 967.608197][ T5920] ? __pfx_worker_thread+0x10/0x10 [ 967.613307][ T5920] ? __pfx_kthread+0x10/0x10 [ 967.617966][ T5920] ? __pfx_kthread+0x10/0x10 [ 967.622570][ T5920] ? _raw_spin_unlock_irq+0x23/0x50 [ 967.627786][ T5920] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.633070][ T5920] ? __pfx_kthread+0x10/0x10 [ 967.637742][ T5920] ret_from_fork+0x4b/0x80 [ 967.642159][ T5920] ? __pfx_kthread+0x10/0x10 [ 967.646807][ T5920] ret_from_fork_asm+0x1a/0x30 [ 967.651634][ T5920] [ 967.654680][ T5920] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 967.662238][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: kworker/1:8 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 967.672593][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 967.682655][ T5920] Workqueue: usb_hub_wq hub_event [ 967.687699][ T5920] Call Trace: [ 967.691004][ T5920] [ 967.693932][ T5920] dump_stack_lvl+0x99/0x250 [ 967.698533][ T5920] ? __asan_memcpy+0x40/0x70 [ 967.703127][ T5920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 967.708331][ T5920] ? __pfx__printk+0x10/0x10 [ 967.712932][ T5920] panic+0x2db/0x790 [ 967.716834][ T5920] ? __pfx_panic+0x10/0x10 [ 967.721355][ T5920] ? ret_from_fork_asm+0x1a/0x30 [ 967.726303][ T5920] __warn+0x31b/0x4b0 [ 967.730294][ T5920] ? firmware_fallback_sysfs+0x746/0x9b0 [ 967.735931][ T5920] ? firmware_fallback_sysfs+0x746/0x9b0 [ 967.741581][ T5920] report_bug+0x2be/0x4f0 [ 967.745916][ T5920] ? firmware_fallback_sysfs+0x746/0x9b0 [ 967.751561][ T5920] ? firmware_fallback_sysfs+0x746/0x9b0 [ 967.757203][ T5920] ? firmware_fallback_sysfs+0x748/0x9b0 [ 967.762837][ T5920] handle_bug+0x84/0x160 [ 967.767086][ T5920] exc_invalid_op+0x1a/0x50 [ 967.771600][ T5920] asm_exc_invalid_op+0x1a/0x20 [ 967.776448][ T5920] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 967.782714][ T5920] Code: ce fb e9 5d fc ff ff e8 68 44 ce fb c6 05 58 89 77 09 01 48 c7 c7 60 87 e8 8b e8 f5 e3 35 fb e9 85 fc ff ff e8 4b 44 ce fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 88 e8 8b 4c 89 e2 e8 75 a8 3a fb e9 [ 967.802325][ T5920] RSP: 0018:ffffc9000a93e8f0 EFLAGS: 00010287 [ 967.808398][ T5920] RAX: ffffffff85f1ad85 RBX: dffffc0000000000 RCX: 0000000000100000 [ 967.816368][ T5920] RDX: ffffc90018c4c000 RSI: 00000000000a7662 RDI: 00000000000a7663 [ 967.824342][ T5920] RBP: 0000000000000001 R08: ffffffff8f7f3377 R09: 1ffffffff1efe66e [ 967.832315][ T5920] R10: dffffc0000000000 R11: fffffbfff1efe66f R12: ffffffff8c1b1040 [ 967.840290][ T5920] R13: 0000000000001770 R14: ffff8880223d80b0 R15: 00000000fffffff5 [ 967.848270][ T5920] ? firmware_fallback_sysfs+0x745/0x9b0 [ 967.853929][ T5920] ? kmem_cache_free+0x192/0x3f0 [ 967.858870][ T5920] ? _request_firmware+0x6be/0x15b0 [ 967.864088][ T5920] _request_firmware+0xf83/0x15b0 [ 967.869182][ T5920] ? __pfx__request_firmware+0x10/0x10 [ 967.874741][ T5920] ? rom_read+0x19e/0x1c0 [ 967.879088][ T5920] ? rom_read+0x19e/0x1c0 [ 967.883420][ T5920] request_firmware+0x36/0x50 [ 967.888108][ T5920] edge_startup+0x251b/0x5cc0 [ 967.892803][ T5920] ? __pfx_edge_startup+0x10/0x10 [ 967.897833][ T5920] ? trace_kmalloc+0x1f/0xd0 [ 967.902428][ T5920] ? __kmalloc_noprof+0x29b/0x4f0 [ 967.907456][ T5920] ? setup_port_interrupt_in+0x159/0x590 [ 967.913104][ T5920] ? setup_port_interrupt_in+0x3d0/0x590 [ 967.918745][ T5920] ? __pfx_edge_interrupt_callback+0x10/0x10 [ 967.924736][ T5920] usb_serial_probe+0x2506/0x2d20 [ 967.929776][ T5920] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 967.936122][ T5920] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 967.942464][ T5920] usb_probe_interface+0x641/0xbc0 [ 967.947586][ T5920] ? __pfx_usb_probe_interface+0x10/0x10 [ 967.953214][ T5920] really_probe+0x26a/0x9a0 [ 967.957727][ T5920] __driver_probe_device+0x18c/0x2f0 [ 967.963020][ T5920] driver_probe_device+0x4f/0x430 [ 967.968061][ T5920] __device_attach_driver+0x2ce/0x530 [ 967.973472][ T5920] bus_for_each_drv+0x251/0x2e0 [ 967.978326][ T5920] ? __pfx___device_attach_driver+0x10/0x10 [ 967.984225][ T5920] ? __pfx_bus_for_each_drv+0x10/0x10 [ 967.989605][ T5920] __device_attach+0x2b8/0x400 [ 967.994379][ T5920] ? __pfx___device_attach+0x10/0x10 [ 967.999680][ T5920] ? do_raw_spin_unlock+0x122/0x240 [ 968.004892][ T5920] bus_probe_device+0x185/0x260 [ 968.009754][ T5920] device_add+0x7b6/0xb50 [ 968.014096][ T5920] usb_set_configuration+0x1a87/0x20e0 [ 968.019609][ T5920] usb_generic_driver_probe+0x8d/0x150 [ 968.025086][ T5920] usb_probe_device+0x1c1/0x390 [ 968.029941][ T5920] ? __pfx_usb_probe_device+0x10/0x10 [ 968.035309][ T5920] really_probe+0x26a/0x9a0 [ 968.039831][ T5920] __driver_probe_device+0x18c/0x2f0 [ 968.045124][ T5920] driver_probe_device+0x4f/0x430 [ 968.050165][ T5920] __device_attach_driver+0x2ce/0x530 [ 968.055557][ T5920] bus_for_each_drv+0x251/0x2e0 [ 968.060422][ T5920] ? __pfx___device_attach_driver+0x10/0x10 [ 968.066330][ T5920] ? __pfx_bus_for_each_drv+0x10/0x10 [ 968.071719][ T5920] __device_attach+0x2b8/0x400 [ 968.076493][ T5920] ? __pfx___device_attach+0x10/0x10 [ 968.081791][ T5920] ? do_raw_spin_unlock+0x122/0x240 [ 968.087015][ T5920] bus_probe_device+0x185/0x260 [ 968.091898][ T5920] device_add+0x7b6/0xb50 [ 968.096251][ T5920] usb_new_device+0xa39/0x16c0 [ 968.101070][ T5920] ? __pfx_usb_new_device+0x10/0x10 [ 968.106288][ T5920] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.111496][ T5920] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.116706][ T5920] hub_event+0x2941/0x4a00 [ 968.121184][ T5920] ? __pfx_hub_event+0x10/0x10 [ 968.125963][ T5920] ? process_scheduled_works+0x9ec/0x17a0 [ 968.131688][ T5920] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.136889][ T5920] ? process_scheduled_works+0x9ec/0x17a0 [ 968.142610][ T5920] ? process_scheduled_works+0x9ec/0x17a0 [ 968.148335][ T5920] process_scheduled_works+0xadb/0x17a0 [ 968.153909][ T5920] ? __pfx_process_scheduled_works+0x10/0x10 [ 968.159920][ T5920] worker_thread+0x8a0/0xda0 [ 968.164554][ T5920] kthread+0x70e/0x8a0 [ 968.168635][ T5920] ? __pfx_worker_thread+0x10/0x10 [ 968.173745][ T5920] ? __pfx_kthread+0x10/0x10 [ 968.178339][ T5920] ? __pfx_kthread+0x10/0x10 [ 968.182937][ T5920] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.188142][ T5920] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.193346][ T5920] ? __pfx_kthread+0x10/0x10 [ 968.197941][ T5920] ret_from_fork+0x4b/0x80 [ 968.202360][ T5920] ? __pfx_kthread+0x10/0x10 [ 968.206954][ T5920] ret_from_fork_asm+0x1a/0x30 [ 968.211732][ T5920] [ 968.215043][ T5920] Kernel Offset: disabled [ 968.219374][ T5920] Rebooting in 86400 seconds..